last executing test programs:

25.077184251s ago: executing program 0 (id=388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x40, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac0b, 0xfac0a, 0xfac0d]}]]}, 0x40}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

24.821025213s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401c95e}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x80, 0x8, 0x6, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0xb, [@multicast1]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x7, [{@loopback, 0x81}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28}, {@rand_addr=0x64010101, 0xc}, {@loopback, 0x4}, {@local, 0xb}, {@empty, 0x3}]}]}}}}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000399baa6f6621404d9b0000000000", @ANYRES32=r16, @ANYBLOB="36080200092000000c002b80080003000d0000000800040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44400}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r20=>0x0, 0x4, 0x99, 0x6, 0x8, 0x4, @loopback, @remote, 0x7800, 0x700, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1f4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)

19.878632641s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401c95e}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x80, 0x8, 0x6, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0xb, [@multicast1]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x7, [{@loopback, 0x81}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28}, {@rand_addr=0x64010101, 0xc}, {@loopback, 0x4}, {@local, 0xb}, {@empty, 0x3}]}]}}}}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000399baa6f6621404d9b0000000000", @ANYRES32=r16, @ANYBLOB="36080200092000000c002b80080003000d0000000800040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44400}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r20=>0x0, 0x4, 0x99, 0x6, 0x8, 0x4, @loopback, @remote, 0x7800, 0x700, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1f4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)

13.653971675s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401c95e}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x80, 0x8, 0x6, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0xb, [@multicast1]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x7, [{@loopback, 0x81}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28}, {@rand_addr=0x64010101, 0xc}, {@loopback, 0x4}, {@local, 0xb}, {@empty, 0x3}]}]}}}}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000399baa6f6621404d9b0000000000", @ANYRES32=r16, @ANYBLOB="36080200092000000c002b80080003000d0000000800040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44400}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r20=>0x0, 0x4, 0x99, 0x6, 0x8, 0x4, @loopback, @remote, 0x7800, 0x700, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1f4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)

7.72532918s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401c95e}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x80, 0x8, 0x6, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0xb, [@multicast1]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x7, [{@loopback, 0x81}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28}, {@rand_addr=0x64010101, 0xc}, {@loopback, 0x4}, {@local, 0xb}, {@empty, 0x3}]}]}}}}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000399baa6f6621404d9b0000000000", @ANYRES32=r16, @ANYBLOB="36080200092000000c002b80080003000d0000000800040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44400}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r20=>0x0, 0x4, 0x99, 0x6, 0x8, 0x4, @loopback, @remote, 0x7800, 0x700, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1f4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)

2.017150039s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@delchain={0x2c, 0x65, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2}, {0xfff3, 0x8}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x4}}]}, 0x2c}}, 0x24000014)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x12, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x401c95e}]}}]}, 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x80, 0x8, 0x6, 0x2, {{0x26, 0x4, 0x3, 0x0, 0x98, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @empty, {[@rr={0x7, 0x7, 0xb, [@multicast1]}, @end, @end, @timestamp_prespec={0x44, 0x4c, 0x60, 0x3, 0x7, [{@loopback, 0x81}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x6}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x28}, {@rand_addr=0x64010101, 0xc}, {@loopback, 0x4}, {@local, 0xb}, {@empty, 0x3}]}]}}}}})
r14 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000399baa6f6621404d9b0000000000", @ANYRES32=r16, @ANYBLOB="36080200092000000c002b80080003000d0000000800040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44400}, 0x18)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=[0x0], 0x0, 0x93, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r19=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r20=>0x0, 0x4, 0x99, 0x6, 0x8, 0x4, @loopback, @remote, 0x7800, 0x700, 0x0, 0x2}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1f4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r1, 0x601, 0x0, 0x24dfdbfd}, 0x14}}, 0x0)

1.063429841s ago: executing program 2 (id=640):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x40000)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000340)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x347e83c79f1fbd41)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150922ffd95eeeaa6c4c1dc4679e815b9284d6b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028006000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4c001)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r12 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r9, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x73)
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010002508001700d0fc0000000a000000", @ANYRES8=r5, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r13 = socket(0x1, 0x803, 0x4)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x7)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0401000000a68890dde0abe69bb8dbe60000002800128009000100766574680f00010018a4597d37f5593a695589ba371754efa0afd2bdd77dbf9492a64d6e58548cc24965a8b4534fd6ba9593de799b4783015aecf26e6faa86ecd2273d9e1457fbf53410a236bb1691fd7f76ceb822", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.05734785s ago: executing program 2 (id=641):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}, 0x1, 0x0, 0x0, 0x8885}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40000062, 0x0, 0xfffffffffffffdff)

1.055335307s ago: executing program 2 (id=643):
unshare(0x64000600)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
unshare(0x2c020400)
socket$inet(0xa, 0x801, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)

1.019191869s ago: executing program 2 (id=645):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3402000000bb", @ANYRES32=0x0, @ANYBLOB="00000000000000001000128008000100736974000400028004001400"], 0x34}}, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x2, 0x48094)
getsockname$packet(r2, 0x0, &(0x7f0000000240))
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="f680b597bab553053394a149e204a4ba161bd0b8fe6c5ed67629aa62ab237f87a114e2f0431d2b20562064c33a7b30bb9f19c8a1478904b0b97237bc0a04e616abd2ac5e00e9d8d6e8151a791b32832aa1702b7de4ab4d91", 0x58)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES32, @ANYRESOCT=r5], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000100000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}})
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000059078ac1414000a0101008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c020000907800007227553d4558949e6aa3de9e697ae3ba1cdde4df93a6cdb7ac4c33a69da326ec8af40e046c0c318485b06be1d0a680d41d3d0db37f92692503a4e11a16f14ad58db783b9e8ee83766208005f6ced68a60f0fac4dd78b1000444d9d2a88cc1b4f213da6e8fe057ade846a5c66a07977a2d2d04d441d303bb9c424f54782aa1e6b6a30cf96"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="05e3ffff02f01f00040000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="d454488a4f8fc4bb4e8d4660d46095bfaa36ea4ba1e54e5c81ab7662b4a479097092390b8f3a8dca81a67d32520aed9687b6be30851ab487c48aee8677a75bc75be7ae971920c8070480298a3ceb3454dc234b39fd0186e1bbef75f481b37b1e7a85e0ba5664e2d3913551474a3588b285bc6000a85ec63cf65beea0bb98af3ee9b428e6af4688be8e5ff1a4e34779dfb07816ba", @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r11, &(0x7f0000000bc0), 0x0}, 0x20)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

791.042333ms ago: executing program 1 (id=647):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851603e70a0018"], 0x4c}}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@jmp={0x5, 0x0, 0x5, 0x0, 0xa, 0x20, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8a1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0xdb, &(0x7f00000002c0)=""/219, 0x41100, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x8a3, 0xa}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x3, 0x1, 0x1}, {0x0, 0x4, 0x5}, {0x5, 0x4, 0x2, 0xb}, {0x5, 0x5, 0x8, 0x8}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x9b0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd4, 0x0, &(0x7f00000006c0)="db53adb7f5560cc5b7414cb3513d2536bb5c28e1e99f01abbcb024de11df5fb5e6c071755bf539474b77490a33a09eeb7f178b564252aeb8df4dc5ed5662b8889b18aea39d7a722452c365b43d074744735f76c3423377ae7b38b19ecf2439e4ee37334e05393c296d9d20ff23fe8a269a9cc400b0f817b8400f54854244a57610b5a9dd76d211e42148c27e7ec6eee69f66754cb17559754a532182e333fce7680b96204b7809fe3d4d979852eaa7cdfa2d5fa68ccc56c0cf0d8c49d60adf735814758c6469f36384182b6a607699070ea17c96", 0x0}, 0x50) (async, rerun: 32)
r5 = accept(0xffffffffffffffff, &(0x7f00000007c0)=@generic, &(0x7f0000000680)=0x80) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@gettfilter={0x54, 0x2e, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff2, 0x5}, {0x5, 0xd}, {0x8, 0x4}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x28}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)

723.651815ms ago: executing program 1 (id=648):
syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000900))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xffffff3f)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x40040)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f3, 0x10, 0x70bd2c, 0x25dfdbff, {0x1, 0x1, 0x3b, [0x10000, 0x19c, 0x14d1c, 0x7, 0x882f, 0x8, 0x8, 0x1, 0x3ff, 0x8, 0x6, 0x200, 0x7cd, 0x5, 0x4, 0xadd, 0x1, 0xb, 0x5, 0xfffffffb, 0x57, 0xa, 0x7, 0x8, 0x7, 0xd1a0, 0x63b6, 0x8, 0x10, 0x80000000, 0x3, 0x7, 0x1, 0x7f, 0x48, 0x4, 0x400, 0x9, 0x944, 0x81, 0x5, 0x5, 0xfffffffb, 0x3, 0x2, 0x8, 0xfffffff9, 0x10000, 0x8, 0x1, 0x6, 0x401, 0x7fffffff, 0x4, 0xfffff000, 0x6, 0x3, 0xeba, 0x8, 0x7, 0x8000, 0xd, 0x6, 0x541d], [0x1, 0x6, 0x9, 0x5, 0xfffffff7, 0xba, 0x50c3e83b, 0x0, 0x3, 0xd7362a00, 0x6, 0x5, 0x3, 0x4, 0x8, 0x4, 0xe5, 0x2, 0x0, 0xba1, 0x0, 0x0, 0x3, 0x8, 0x5, 0x5, 0x0, 0x7fc, 0x3, 0x9, 0xffffffff, 0x9, 0x200, 0x4, 0x10000, 0x1ff, 0x9, 0xf, 0x5, 0x80000001, 0x4, 0x5, 0x4, 0x2, 0xf, 0x6b, 0x3, 0x10001, 0x6, 0xfffffff0, 0x5, 0x0, 0xfffffffe, 0x89, 0x6, 0x18c7cb87, 0x4, 0xc, 0x25, 0x38382340, 0x2, 0x800, 0x3, 0xc], [0x6, 0x7fffffff, 0xecb, 0x4, 0x3, 0x8, 0x1, 0xfffffffd, 0x9, 0x4, 0x2, 0x9, 0x6, 0x6, 0x6, 0x5, 0x2, 0xfffffffd, 0x0, 0xffffffc0, 0xebf8, 0x3, 0x9, 0x0, 0xfec, 0x1000, 0x3ffd, 0xfffffffc, 0xd25d891, 0x9, 0x8, 0x0, 0x1, 0x4, 0x1, 0x1, 0x8f4, 0x1, 0xfffffffe, 0x3, 0x3, 0x9d, 0x8, 0x0, 0x7, 0x4, 0x8, 0x7ff, 0x81, 0x5, 0x3, 0x6, 0x1, 0xffff, 0x2, 0x4, 0x3, 0x6, 0x2, 0xff, 0x3, 0x0, 0x180, 0x3], [0x9, 0x3, 0x0, 0x7, 0x7, 0x5, 0x57, 0x2, 0x4, 0x9, 0xffff61d3, 0xb6, 0x4, 0x5, 0x1, 0x35, 0x8e01, 0x7, 0x400, 0x4, 0x1, 0x9, 0x7, 0x0, 0xb4c, 0x7, 0x7, 0xd8, 0x5, 0x4, 0x0, 0x5, 0xfffffff7, 0x6, 0x2, 0x9, 0xfb5c, 0x200, 0x3, 0x6785, 0xfffffffd, 0x903, 0x4f3b40dc, 0x8, 0x2, 0x2, 0x1, 0x7, 0x0, 0x1, 0x6, 0xffffffff, 0x2f3, 0x3, 0x6, 0x7fff, 0x6, 0x9, 0x1, 0x9e, 0x200, 0x14, 0x2, 0x1dbf], 0x1b, ['veth0_to_batadv\x00', '\x00', '\x00', 'addrtype\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c085)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)
poll(&(0x7f0000000a00)=[{r0, 0x40}, {r1, 0x8024}, {r1, 0x2042}, {r0, 0x2}, {r2, 0x2000}, {r2, 0x3601aaf5de0ff8a}], 0x6, 0xad)

717.973712ms ago: executing program 1 (id=649):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r1, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

641.220782ms ago: executing program 1 (id=650):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x66}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94)
syz_emit_ethernet(0x6f, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x10, 0x3, 0x0, 0x0, "4bc20a5cb85438e559c09286e780b89ba156de22a8c71ef8956006d74aee36f6bfb629f438f2dc75cbeba500714ad1e376040c05b1c4ed0000000090ca00"}}}}, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)

640.862888ms ago: executing program 1 (id=651):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1000000001144101"], 0x10}, 0x1, 0x0, 0x0, 0x8885}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40000062, 0x0, 0xfffffffffffffdff)

571.149634ms ago: executing program 1 (id=652):
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000800000600150005000000280016"], 0x4c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

55.781139ms ago: executing program 2 (id=653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x50}}, 0x80)

0s ago: executing program 2 (id=654):
r0 = socket$netlink(0x10, 0x3, 0x14)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x2)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108)
bind$x25(r5, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000033c0)={'erspan0\x00', &(0x7f0000003380)=@ethtool_pauseparam={0x9, 0x27a2, 0xfff}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003041000000500000000002fefa3", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800c002000b9330000000000000c001f00d1b9000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45719' (ED25519) to the list of known hosts.
syzkaller login: [   49.205498][ T5762] cgroup: Unknown subsys name 'net'
[   49.329760][ T5762] cgroup: Unknown subsys name 'cpuset'
[   49.334118][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.870870][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.054792][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.063139][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.065788][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.068741][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.071919][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.075608][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.080284][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.083886][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.102910][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.105903][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.125868][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.130611][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.133518][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.136694][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.139746][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.374628][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   55.397971][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.508152][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.512043][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.515533][ T5810] bridge_slave_0: entered allmulticast mode
[   55.520432][ T5810] bridge_slave_0: entered promiscuous mode
[   55.525961][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.529247][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.532419][ T5810] bridge_slave_1: entered allmulticast mode
[   55.537033][ T5810] bridge_slave_1: entered promiscuous mode
[   55.618145][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.650452][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.654482][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.673998][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.677392][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.680413][ T5814] bridge_slave_0: entered allmulticast mode
[   55.684196][ T5814] bridge_slave_0: entered promiscuous mode
[   55.711707][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.714737][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.718704][ T5814] bridge_slave_1: entered allmulticast mode
[   55.723724][ T5814] bridge_slave_1: entered promiscuous mode
[   55.741046][ T5810] team0: Port device team_slave_0 added
[   55.746744][ T5810] team0: Port device team_slave_1 added
[   55.814374][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.816707][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.825615][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.831259][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.833451][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.842344][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.874612][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.879810][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.894377][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.898431][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.901587][ T5819] bridge_slave_0: entered allmulticast mode
[   55.905411][ T5819] bridge_slave_0: entered promiscuous mode
[   55.927572][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.930715][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.933746][ T5819] bridge_slave_1: entered allmulticast mode
[   55.939998][ T5819] bridge_slave_1: entered promiscuous mode
[   55.954095][ T5810] hsr_slave_0: entered promiscuous mode
[   55.956891][ T5810] hsr_slave_1: entered promiscuous mode
[   55.961041][ T5814] team0: Port device team_slave_0 added
[   55.982380][ T5814] team0: Port device team_slave_1 added
[   56.020957][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.043774][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.049207][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.052075][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.063501][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.090001][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.092346][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.101221][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.134451][ T5819] team0: Port device team_slave_0 added
[   56.151615][ T5819] team0: Port device team_slave_1 added
[   56.224636][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.227675][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.239116][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.252956][ T5814] hsr_slave_0: entered promiscuous mode
[   56.255239][ T5814] hsr_slave_1: entered promiscuous mode
[   56.258018][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.260503][ T5814] Cannot create hsr debugfs directory
[   56.262947][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.265725][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.275843][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.372057][ T5819] hsr_slave_0: entered promiscuous mode
[   56.375406][ T5819] hsr_slave_1: entered promiscuous mode
[   56.379331][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.382564][ T5819] Cannot create hsr debugfs directory
[   56.487983][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.501856][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.521297][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.538360][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.660770][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.673920][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.684429][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.691269][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.787738][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.801918][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.813517][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.822352][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.851199][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.882793][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.901273][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.904406][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.928179][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.931272][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.952266][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.995844][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   57.012275][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.015280][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.030092][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.033087][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.101664][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.117322][ T5815] Bluetooth: hci0: command tx timeout
[   57.117335][ T5201] Bluetooth: hci1: command tx timeout
[   57.130612][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   57.135255][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.179363][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.182368][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.197623][ T5815] Bluetooth: hci2: command tx timeout
[   57.199828][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.202854][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.300956][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.367607][ T5810] veth0_vlan: entered promiscuous mode
[   57.374699][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.391090][ T5810] veth1_vlan: entered promiscuous mode
[   57.458739][ T5814] veth0_vlan: entered promiscuous mode
[   57.465952][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.470329][ T5810] veth0_macvtap: entered promiscuous mode
[   57.480797][ T5810] veth1_macvtap: entered promiscuous mode
[   57.487094][ T5814] veth1_vlan: entered promiscuous mode
[   57.510181][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.521648][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.535414][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.541268][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.544687][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.549024][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.563503][ T5814] veth0_macvtap: entered promiscuous mode
[   57.573752][ T5814] veth1_macvtap: entered promiscuous mode
[   57.583639][ T5819] veth0_vlan: entered promiscuous mode
[   57.617061][ T5819] veth1_vlan: entered promiscuous mode
[   57.623397][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.633681][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.671082][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.674152][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.679130][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.682419][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.703172][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.705784][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.735770][ T5819] veth0_macvtap: entered promiscuous mode
[   57.738294][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.742453][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.753660][ T5819] veth1_macvtap: entered promiscuous mode
[   57.789899][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.792575][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.799097][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.805880][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.816883][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.834055][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.835244][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.847193][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.850046][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.852889][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.855921][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.922640][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.001241][ T5885] netlink: 'syz.0.5': attribute type 12 has an invalid length.
[   58.003963][ T5885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.018970][ T5884] dvmrp1: entered allmulticast mode
[   58.023506][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.026986][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.042045][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.044684][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.153377][ T5893] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.161575][ T5893] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   58.164423][ T5893] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   58.350367][ T5911] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12'.
[   58.363672][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.414409][ T5901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.455807][ T5918] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   58.459056][ T5918] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.471585][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.601324][ T5861] IPVS: starting estimator thread 0...
[   58.687187][ T5926] IPVS: using max 80 ests per chain, 192000 per kthread
[   59.070424][ T5939] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[   59.172220][ T5948] netlink: 'syz.0.20': attribute type 1 has an invalid length.
[   59.179072][ T5948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.189227][ T5949] netlink: 'syz.0.20': attribute type 1 has an invalid length.
[   59.195898][ T5949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.197876][ T5815] Bluetooth: hci0: command tx timeout
[   59.201119][ T5201] Bluetooth: hci1: command tx timeout
[   59.280676][ T5201] Bluetooth: hci2: command tx timeout
[   59.390366][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22'.
[   59.455245][ T5959] xt_hashlimit: max too large, truncated to 1048576
[   59.581567][ T5968] xt_hashlimit: size too large, truncated to 1048576
[   59.647137][ T5977] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.712438][ T5979] Zero length message leads to an empty skb
[   59.752622][ T5985] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET)
[   59.998475][ T6006] netlink: 'syz.2.37': attribute type 12 has an invalid length.
[   60.001605][ T6006] netlink: 'syz.2.37': attribute type 29 has an invalid length.
[   60.184233][ T6019] tap0: tun_chr_ioctl cmd 1074025678
[   60.189150][ T6019] tap0: group set to 0
[   60.574040][ T6052] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[   60.612321][ T6052] netlink: 'syz.1.52': attribute type 6 has an invalid length.
[   60.617196][ T6052] erspan0: entered allmulticast mode
[   60.763680][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.767107][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.871405][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.883535][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.993437][ T6063] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.997936][ T6063] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.000853][ T6063] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.003901][ T6063] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.095254][ T6073] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   61.276586][ T5201] Bluetooth: hci0: command tx timeout
[   61.276608][ T5815] Bluetooth: hci1: command tx timeout
[   61.356706][ T5815] Bluetooth: hci2: command tx timeout
[   61.593369][ T6113] erspan0: left allmulticast mode
[   61.645390][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.696582][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.718235][ T6116] pim6reg1: entered promiscuous mode
[   61.720340][ T6116] pim6reg1: entered allmulticast mode
[   61.757472][ T6113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.778853][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.310779][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.340092][ T6146] tap0: tun_chr_ioctl cmd 1074025676
[   62.343392][ T6146] tap0: owner set to 0
[   62.362357][ T6146] tap0: tun_chr_ioctl cmd 1074025676
[   62.364596][ T6146] tap0: owner set to 0
[   63.170447][ T6199] __nla_validate_parse: 23 callbacks suppressed
[   63.170464][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'.
[   63.195429][ T6199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'.
[   63.230775][ T6202] validate_nla: 4 callbacks suppressed
[   63.230796][ T6202] netlink: 'syz.0.95': attribute type 5 has an invalid length.
[   63.356564][ T5201] Bluetooth: hci1: command tx timeout
[   63.359813][   T54] Bluetooth: hci0: command tx timeout
[   63.436633][ T5201] Bluetooth: hci2: command tx timeout
[   63.514362][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.618478][ T6224] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   63.626839][ T6227] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   63.794558][ T6246] netlink: 'syz.1.105': attribute type 1 has an invalid length.
[   63.891064][ T6250] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   63.895851][ T6250] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   63.899957][ T6250] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   63.904155][ T6250] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   63.914202][ T6250] bond1: (slave geneve2): making interface the new active one
[   63.920786][ T6250] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   63.938908][ T6246] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[   63.955743][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.960793][ T6246] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   63.965908][ T6246] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[   63.969373][ T6246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.105'.
[   63.973174][ T6246] batadv0: entered promiscuous mode
[   63.975475][ T6246] batadv0: entered allmulticast mode
[   63.979451][ T6246] bond0: (slave batadv0): Releasing backup interface
[   63.984818][ T6246] bridge0: port 3(batadv0) entered blocking state
[   63.997907][ T6246] bridge0: port 3(batadv0) entered disabled state
[   64.103911][ T6263] netlink: 'syz.1.110': attribute type 2 has an invalid length.
[   64.107575][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.110'.
[   64.157047][    C1] Illegal XDP return value 16128 on prog  (id 52) dev lo, expect packet loss!
[   64.157291][ T6262] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   64.212895][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[   64.230537][ T6277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.234232][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'.
[   64.245679][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'.
[   64.359153][ T5680] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   64.365162][ T5680] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   64.386467][ T5861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   64.398621][ T5680] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   64.402622][ T5680] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   64.442078][ T6284] can: request_module (can-proto-3) failed.
[   64.696737][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   64.951828][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   65.213558][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'.
[   65.261592][ T6314] ipvlan2: entered promiscuous mode
[   65.264764][ T6314] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   65.268433][ T6314] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   65.347332][ T6321] C: renamed from team_slave_0 (while UP)
[   65.358616][ T5861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   65.528548][ T5201] Bluetooth: hci2: command 0x0405 tx timeout
[   65.688619][ T6354] netlink: 'syz.1.132': attribute type 11 has an invalid length.
[   65.859168][ T6362] xt_CT: You must specify a L4 protocol and not use inversions on it
[   65.861669][ T6364] netlink: 'syz.0.136': attribute type 15 has an invalid length.
[   66.191238][ T6386] netlink: 'syz.1.142': attribute type 10 has an invalid length.
[   66.199647][ T6386] team0: Device ipvlan1 failed to register rx_handler
[   66.401795][ T6405] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   66.562887][ T6421] openvswitch: netlink: IP tunnel TTL not specified.
[   66.768841][ T6432] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   66.842502][ T6436] vxcan1: entered allmulticast mode
[   66.844516][ T6436] vxcan1: left allmulticast mode
[   67.596327][ T5201] Bluetooth: hci2: command 0x0405 tx timeout
[   67.927728][ T6449] gretap1: entered promiscuous mode
[   67.935121][ T6466] syz_tun: entered allmulticast mode
[   67.938078][ T6468] syz_tun: left allmulticast mode
[   68.093217][ T6474] geneve0: entered allmulticast mode
[   68.113915][ T5861] IPVS: starting estimator thread 0...
[   68.156333][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   68.206233][ T6484] IPVS: using max 81 ests per chain, 194400 per kthread
[   68.291053][ T6490] __nla_validate_parse: 14 callbacks suppressed
[   68.291080][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'.
[   68.455937][ T6496] netlink: 96 bytes leftover after parsing attributes in process `syz.2.175'.
[   68.463258][ T6498] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   68.488708][ T5860] IPVS: stop unused estimator thread 0...
[   68.515739][ T6498] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[   68.604041][ T6505] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   68.848429][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.861427][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.865126][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.969274][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[   69.080022][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'.
[   69.084920][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   69.109904][ T6537] validate_nla: 2 callbacks suppressed
[   69.109915][ T6537] netlink: 'syz.1.186': attribute type 10 has an invalid length.
[   69.120913][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'.
[   69.131320][ T6537] bridge0: port 3(batadv0) entered blocking state
[   69.134071][ T6537] bridge0: port 3(batadv0) entered forwarding state
[   69.137855][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.178519][ T6542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.188'.
[   69.503981][ T6566] syzkaller0: entered allmulticast mode
[   69.604326][ T6574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.616008][ T6574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.619809][ T6574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.623487][ T6574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.640014][ T6574] geneve2: entered promiscuous mode
[   69.740815][ T6584] netlink: 'syz.2.199': attribute type 30 has an invalid length.
[   69.845225][ T6591] bond0: option mode: unable to set because the bond device has slaves
[   70.017903][ T6598] netlink: 'syz.2.203': attribute type 5 has an invalid length.
[   70.434835][ T6613] netlink: 'syz.1.210': attribute type 13 has an invalid length.
[   70.571089][ T6625] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   70.961412][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.003413][ T6651] netlink: 'syz.0.222': attribute type 12 has an invalid length.
[   71.006776][ T6651] netlink: 'syz.0.222': attribute type 11 has an invalid length.
[   71.017848][ T6650] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[   71.859755][ T6722] trusted_key: syz.0.246 sent an empty control message without MSG_MORE.
[   72.120813][ T6727] infiniband syz0: set down
[   72.123195][ T6727] infiniband syz0: added ipvlan1
[   72.177397][ T6727] RDS/IB: syz0: added
[   72.179773][ T6727] smc: adding ib device syz0 with port count 1
[   72.182672][ T6727] smc:    ib device syz0 port 1 has pnetid 
[   72.491658][ T6748] netlink: 'syz.2.253': attribute type 23 has an invalid length.
[   72.761679][ T6755] netlink: 'syz.1.255': attribute type 5 has an invalid length.
[   72.958352][ T6769] pim6reg1: entered promiscuous mode
[   72.960410][ T6769] pim6reg1: entered allmulticast mode
[   72.980084][ T6768] delete_channel: no stack
[   73.160196][ T6786] netlink: 'syz.1.264': attribute type 39 has an invalid length.
[   73.163933][ T6786] veth0_macvtap: left promiscuous mode
[   73.185994][ T6785] netlink: 'syz.2.265': attribute type 30 has an invalid length.
[   73.198788][ T6785] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.202243][ T6785] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.205553][ T6785] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.209284][ T6785] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.261582][ T6786] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   73.658887][ T6806] __nla_validate_parse: 19 callbacks suppressed
[   73.658899][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'.
[   73.674673][ T6806] bridge: RTM_NEWNEIGH with invalid ether address
[   74.082332][ T6832] veth0_vlan: mtu less than device minimum
[   74.235234][ T6840] vlan2: entered promiscuous mode
[   74.238076][ T6840] vlan2: entered allmulticast mode
[   74.239821][ T6840] hsr_slave_1: entered allmulticast mode
[   74.243479][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.284'.
[   74.440194][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'.
[   74.444246][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.287'.
[   74.456700][ T6851] netlink: 84 bytes leftover after parsing attributes in process `syz.1.287'.
[   74.960986][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'.
[   75.099688][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'.
[   75.118275][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   75.227738][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'.
[   75.407649][ T6896] syzkaller1: entered promiscuous mode
[   75.414457][ T6896] syzkaller1: entered allmulticast mode
[   75.435258][ T6902] validate_nla: 2 callbacks suppressed
[   75.435273][ T6902] netlink: 'syz.2.303': attribute type 10 has an invalid length.
[   75.449480][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'.
[   75.462494][ T6902] team0: Port device geneve0 added
[   75.629464][ T6916] vlan0: entered allmulticast mode
[   75.631381][ T6916] erspan0: entered allmulticast mode
[   75.634003][ T6918] netlink: 'syz.1.311': attribute type 14 has an invalid length.
[   75.660326][ T6916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   75.665029][ T6916] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   75.733128][ T6927] bond0: entered promiscuous mode
[   75.735390][ T6927] bond_slave_0: entered promiscuous mode
[   75.746460][ T6927] bond_slave_1: entered promiscuous mode
[   75.749052][ T6927] bond0: entered allmulticast mode
[   75.762512][ T6929] netlink: 'syz.0.313': attribute type 11 has an invalid length.
[   75.764028][ T6927] bond_slave_0: entered allmulticast mode
[   75.765714][ T6929] netlink: 'syz.0.313': attribute type 4 has an invalid length.
[   75.771827][ T6927] bond_slave_1: entered allmulticast mode
[   75.782071][ T6929] openvswitch: netlink: IPv4 tun info is not correct
[   75.783736][ T6923] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   76.076402][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   76.597529][ T6948] syzkaller0: entered promiscuous mode
[   76.599375][ T6948] syzkaller0: entered allmulticast mode
[   76.738963][ T6953] sctp: [Deprecated]: syz.1.319 (pid 6953) Use of int in max_burst socket option deprecated.
[   76.738963][ T6953] Use struct sctp_assoc_value instead
[   76.822726][ T6959] ip6tnl1: entered promiscuous mode
[   76.824879][ T6959] ip6tnl1: entered allmulticast mode
[   76.831074][ T6959] team0: Device ip6tnl1 is of different type
[   77.164291][ T6976] openvswitch: netlink: Message has 5 unknown bytes.
[   77.368344][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[   77.760868][ T7000] openvswitch: netlink: Actions may not be safe on all matching packets
[   77.764701][ T7003] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   78.629434][ T7095] wireguard0: entered promiscuous mode
[   78.631743][ T7095] wireguard0: entered allmulticast mode
[   78.654580][ T7101] tipc: Started in network mode
[   78.657398][ T7101] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[   78.660750][ T7101] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   78.671814][ T7103] __nla_validate_parse: 19 callbacks suppressed
[   78.671831][ T7103] netlink: 68 bytes leftover after parsing attributes in process `syz.0.358'.
[   78.700478][ T7105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.360'.
[   79.105753][ T7136] netlink: 64 bytes leftover after parsing attributes in process `syz.0.366'.
[   79.116226][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   79.119967][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[   79.668237][ T5820] tipc: Node number set to 9480874
[   79.815454][ T7189] batadv_slave_1: entered promiscuous mode
[   79.876974][ T7188] batadv_slave_1: left promiscuous mode
[   79.935531][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'.
[   80.593462][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'.
[   80.598686][ T7206] geneve2: left promiscuous mode
[   80.626791][ T5861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   80.649059][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'.
[   80.692969][ T7210] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   80.696036][ T7210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   80.708133][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'.
[   80.778977][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.782423][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.785873][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.790600][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.795433][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.924410][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'.
[   81.016985][ T7234] netlink: 'syz.2.400': attribute type 5 has an invalid length.
[   81.061654][ T7216] chnl_net:caif_netlink_parms(): no params data found
[   81.216609][   T24] cfg80211: failed to load regulatory.db
[   81.222014][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.225393][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.234658][ T7216] bridge_slave_0: entered allmulticast mode
[   81.243269][ T7216] bridge_slave_0: entered promiscuous mode
[   81.250737][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.253599][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.258183][ T7216] bridge_slave_1: entered allmulticast mode
[   81.267916][ T7216] bridge_slave_1: entered promiscuous mode
[   81.277097][ T5861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   81.304476][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.311685][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.340712][ T7216] team0: Port device team_slave_0 added
[   81.344659][ T7216] team0: Port device team_slave_1 added
[   81.370210][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.387047][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.395483][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.402667][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.414900][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.427973][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.503410][ T7216] hsr_slave_0: entered promiscuous mode
[   81.513123][ T7216] hsr_slave_1: entered promiscuous mode
[   81.517134][ T7216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.520457][ T7216] Cannot create hsr debugfs directory
[   81.559361][ T7259] netlink: 'syz.2.408': attribute type 3 has an invalid length.
[   81.721557][ T7216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.790517][ T7216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.810825][ T7267] x9: renamed from bridge_slave_0
[   81.852390][ T7277] netlink: 'syz.2.414': attribute type 2 has an invalid length.
[   81.862667][ T7216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.866240][ T7277] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   81.979513][ T7216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.401771][ T7216] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.407696][ T7216] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.413065][ T7216] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.423207][ T7216] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.531852][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.569890][ T7216] 8021q: adding VLAN 0 to HW filter on device team0
[   82.587334][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.589793][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.604956][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.608120][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.879389][ T5201] Bluetooth: hci0: command tx timeout
[   82.883644][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.952993][ T7216] veth0_vlan: entered promiscuous mode
[   82.979706][ T7301] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   82.986030][ T7216] veth1_vlan: entered promiscuous mode
[   83.073793][ T7216] veth0_macvtap: entered promiscuous mode
[   83.082012][   T33] audit: type=1804 audit(1751822004.341:2): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.419" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=766 res=1 errno=0
[   83.088536][ T7216] veth1_macvtap: entered promiscuous mode
[   83.098887][ T7307] batadv_slave_1: entered promiscuous mode
[   83.100876][   T33] audit: type=1800 audit(1751822004.361:3): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="cgroup.controllers" dev="tmpfs" ino=766 res=0 errno=0
[   83.156608][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.162727][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.181097][ T7216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.196513][ T7216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.202912][ T7216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.206570][ T7216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.250075][ T7312] sctp: [Deprecated]: syz.2.421 (pid 7312) Use of int in maxseg socket option.
[   83.250075][ T7312] Use struct sctp_assoc_value instead
[   83.277149][ T5680] bridge_slave_1: left allmulticast mode
[   83.279482][ T5680] bridge_slave_1: left promiscuous mode
[   83.283933][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.293280][ T5680] bridge_slave_0: left allmulticast mode
[   83.295130][ T5680] bridge_slave_0: left promiscuous mode
[   83.306701][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.351707][ T7305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.459490][ T7314] Bluetooth: MGMT ver 1.23
[   83.722782][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.731203][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.741623][ T5680] bond0 (unregistering): Released all slaves
[   83.827866][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.830497][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.900981][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.904158][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.245290][ T5680] hsr_slave_0: left promiscuous mode
[   84.247967][ T5680] hsr_slave_1: left promiscuous mode
[   84.250090][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.252507][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.255594][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.258151][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.269332][ T5680] veth1_macvtap: left promiscuous mode
[   84.271495][ T5680] veth0_macvtap: left promiscuous mode
[   84.274004][ T5680] veth1_vlan: left promiscuous mode
[   84.275786][ T5680] veth0_vlan: left promiscuous mode
[   84.382325][   T85] smc: removing ib device syz0
[   84.610045][ T5680] team0 (unregistering): Port device team_slave_1 removed
[   84.633625][ T5680] team0 (unregistering): Port device team_slave_0 removed
[   84.980380][ T7353] netlink: 'syz.2.428': attribute type 4 has an invalid length.
[   85.032700][ T7355] __nla_validate_parse: 9 callbacks suppressed
[   85.032719][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'.
[   85.092266][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[   85.126758][ T7357] bond0: (slave bond_slave_1): Releasing backup interface
[   85.401192][ T7369] gretap1: entered promiscuous mode
[   85.402904][ T7369] gretap1: entered allmulticast mode
[   85.575480][ T5680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.580826][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.435'.
[   85.730336][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.737257][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.741744][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.750003][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.753737][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.807519][ T7386] tipc: Started in network mode
[   85.809675][ T7386] tipc: Node identity a67780367dc2, cluster identity 4711
[   85.812980][ T7386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.838194][ T7386] tipc: Disabling bearer <eth:syzkaller0>
[   85.906505][ T7380] chnl_net:caif_netlink_parms(): no params data found
[   85.920585][ T7393] netlink: 'syz.1.440': attribute type 4 has an invalid length.
[   85.923238][ T7393] netlink: 'syz.1.440': attribute type 17 has an invalid length.
[   85.994464][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.997074][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.999464][ T7380] bridge_slave_0: entered allmulticast mode
[   86.002185][ T7380] bridge_slave_0: entered promiscuous mode
[   86.005654][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.008559][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.010931][ T7380] bridge_slave_1: entered allmulticast mode
[   86.013655][ T7380] bridge_slave_1: entered promiscuous mode
[   86.042291][ T7380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.048053][ T7380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.069717][ T7380] team0: Port device team_slave_0 added
[   86.074412][ T7380] team0: Port device team_slave_1 added
[   86.094970][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.097389][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.105372][ T7380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.111417][ T7380] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.113560][ T7380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.124912][ T7380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.164360][ T7380] hsr_slave_0: entered promiscuous mode
[   86.170080][ T7380] hsr_slave_1: entered promiscuous mode
[   86.224744][ T7403] syzkaller1: entered promiscuous mode
[   86.228988][ T7403] syzkaller1: entered allmulticast mode
[   86.444916][ T7415] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[   86.451489][ T7415] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[   86.751002][ T7426] netlink: 'syz.1.447': attribute type 39 has an invalid length.
[   86.904611][ T7428] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   86.907619][ T7428] netlink: 224 bytes leftover after parsing attributes in process `syz.1.448'.
[   86.931462][ T5680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.963175][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   86.987947][ T5680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.000810][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.448'.
[   87.005068][ T7428] netlink: 84 bytes leftover after parsing attributes in process `syz.1.448'.
[   87.041282][ T5680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.152572][ T5680] bridge_slave_1: left allmulticast mode
[   87.155052][ T5680] bridge_slave_1: left promiscuous mode
[   87.159104][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.169836][ T5680] bridge_slave_0: left allmulticast mode
[   87.172324][ T5680] bridge_slave_0: left promiscuous mode
[   87.174849][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.398731][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.402039][   T33] audit: type=1800 audit(1751822008.661:4): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.454" name="memory.events" dev="tmpfs" ino=859 res=0 errno=0
[   87.414080][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.421714][ T5680] bond0 (unregistering): Released all slaves
[   87.533416][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[   87.703478][ T7458] syzkaller1: tun_chr_ioctl cmd 1074025677
[   87.711841][ T7458] syzkaller1: linktype set to 257
[   87.810996][ T7458] tun0: tun_chr_ioctl cmd 1074025677
[   87.813435][ T7458] tun0: linktype set to 778
[   87.838749][ T5815] Bluetooth: hci0: command tx timeout
[   88.017816][ T5680] hsr_slave_0: left promiscuous mode
[   88.042783][ T5680] hsr_slave_1: left promiscuous mode
[   88.045687][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.049583][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.053405][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.059476][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.078642][ T5680] veth1_macvtap: left promiscuous mode
[   88.080895][ T5680] veth0_macvtap: left promiscuous mode
[   88.083327][ T5680] veth1_vlan: left promiscuous mode
[   88.085604][ T5680] veth0_vlan: left promiscuous mode
[   88.468576][ T5680] team0 (unregistering): Port device team_slave_1 removed
[   88.489725][ T5680] team0 (unregistering): Port device team_slave_0 removed
[   88.856979][ T7473] gretap2: entered allmulticast mode
[   89.065944][ T7480] netlink: 'syz.1.462': attribute type 3 has an invalid length.
[   89.076977][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'.
[   89.120983][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.462'.
[   89.130545][ T7380] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.142380][ T7380] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.162737][ T7380] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.178376][ T7380] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.334261][ T7380] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.378511][ T7380] 8021q: adding VLAN 0 to HW filter on device team0
[   89.387978][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.390606][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.414257][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.416666][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.491289][ T7504] bridge3: entered promiscuous mode
[   89.493095][ T7504] bridge3: entered allmulticast mode
[   89.583239][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.623593][ T7380] veth0_vlan: entered promiscuous mode
[   89.650660][ T7380] veth1_vlan: entered promiscuous mode
[   89.681134][ T7380] veth0_macvtap: entered promiscuous mode
[   89.685576][ T7380] veth1_macvtap: entered promiscuous mode
[   89.709824][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.720477][ T7380] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.741880][ T7380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.745634][ T7380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.751607][ T7380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.754989][ T7380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.826942][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.829586][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.850591][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.853400][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.175661][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   90.181861][ T7528] openvswitch: netlink: Unknown nsh attribute 0
[   90.184685][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.354467][ T7536] netlink: 'syz.1.473': attribute type 11 has an invalid length.
[   90.424982][ T7542] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.554254][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'.
[   90.560213][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'.
[   90.568950][ T7552] bridge0: entered promiscuous mode
[   90.571533][ T7552] ip6gretap0: entered promiscuous mode
[   90.577225][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'.
[   90.718215][ T7565] sock: sock_set_timeout: `syz.1.481' (pid 7565) tries to set negative timeout
[   90.774596][ T7571] dvmrp0: entered allmulticast mode
[   90.783516][ T7571] bond0: entered promiscuous mode
[   90.785366][ T7571] bond_slave_0: entered promiscuous mode
[   90.789826][ T7571] batadv0: entered promiscuous mode
[   90.792268][ T7571] batadv0: left promiscuous mode
[   90.794196][ T7571] bond0: left promiscuous mode
[   90.795859][ T7571] bond_slave_0: left promiscuous mode
[   91.108456][ T7604] x_tables: duplicate underflow at hook 2
[   91.121217][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[   91.190253][ T7614] ip6gre1: entered promiscuous mode
[   91.238091][ T7616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.242666][ T7615] tipc: Resetting bearer <eth:syzkaller0>
[   91.436347][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   91.974583][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.979986][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.984343][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.001440][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.009852][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.309422][ T7615] tipc: Disabling bearer <eth:syzkaller0>
[   92.355777][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.638662][ T7621] chnl_net:caif_netlink_parms(): no params data found
[   92.737345][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.740414][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.743613][ T7621] bridge_slave_0: entered allmulticast mode
[   92.745457][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'.
[   92.747743][ T7621] bridge_slave_0: entered promiscuous mode
[   92.775870][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.782454][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.785640][ T7621] bridge_slave_1: entered allmulticast mode
[   92.790816][ T7621] bridge_slave_1: entered promiscuous mode
[   92.840430][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.848744][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.886741][ T7621] team0: Port device team_slave_0 added
[   92.895227][ T7621] team0: Port device team_slave_1 added
[   92.942673][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.945689][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.964266][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.971214][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.974140][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.986169][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.032068][ T7621] hsr_slave_0: entered promiscuous mode
[   93.035440][ T7621] hsr_slave_1: entered promiscuous mode
[   93.043373][ T7621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.049868][ T7621] Cannot create hsr debugfs directory
[   93.074873][ T7652] macsec1: entered promiscuous mode
[   93.077326][ T7652] macsec1: entered allmulticast mode
[   93.123602][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[   93.287660][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.290346][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.299387][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.302197][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.304833][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.321097][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.328105][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.333559][ T7663] netlink: 'syz.1.509': attribute type 11 has an invalid length.
[   93.382052][ T7668] tap0: tun_chr_ioctl cmd 1074025676
[   93.384129][ T7668] tap0: owner set to 0
[   93.463485][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.488607][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.512'.
[   93.520522][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.564382][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.668729][   T13] bridge_slave_1: left allmulticast mode
[   93.671320][   T13] bridge_slave_1: left promiscuous mode
[   93.673943][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.680718][   T13] bridge_slave_0: left allmulticast mode
[   93.683207][   T13] bridge_slave_0: left promiscuous mode
[   93.685802][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.981113][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.987524][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.992486][   T13] bond0 (unregistering): Released all slaves
[   94.076350][ T5201] Bluetooth: hci0: command tx timeout
[   94.334611][   T13] hsr_slave_0: left promiscuous mode
[   94.365401][   T13] hsr_slave_1: left promiscuous mode
[   94.369882][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.373160][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.380484][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.384194][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.388819][ T7686] netlink: 232 bytes leftover after parsing attributes in process `syz.1.514'.
[   94.405608][   T13] veth1_macvtap: left promiscuous mode
[   94.410381][   T13] veth0_macvtap: left promiscuous mode
[   94.413555][   T13] veth1_vlan: left promiscuous mode
[   94.417807][   T13] veth0_vlan: left promiscuous mode
[   94.736219][   T13] team0 (unregistering): Port device team_slave_1 removed
[   94.760610][   T13] team0 (unregistering): Port device team_slave_0 removed
[   95.073437][ T7621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.094086][ T7621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.119790][ T7621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.136451][ T7621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.155042][ T7701] pim6reg: entered allmulticast mode
[   95.179074][ T7701] pim6reg: left allmulticast mode
[   95.338448][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[   95.341350][ T7719] netlink: 'syz.1.519': attribute type 20 has an invalid length.
[   95.344506][ T7719] netlink: 'syz.1.519': attribute type 21 has an invalid length.
[   95.375926][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.401833][ T7621] 8021q: adding VLAN 0 to HW filter on device team0
[   95.408197][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.410558][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.418522][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.420900][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.451581][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'.
[   95.564907][ T7733] delete_channel: no stack
[   95.580737][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.611150][ T7621] veth0_vlan: entered promiscuous mode
[   95.615794][ T7621] veth1_vlan: entered promiscuous mode
[   95.647512][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[   95.653472][ T7621] veth0_macvtap: entered promiscuous mode
[   95.659946][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'.
[   95.678732][ T7621] veth1_macvtap: entered promiscuous mode
[   95.777225][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.790608][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.871010][ T7621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.873814][ T7621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.877422][ T7621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.880409][ T7621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.029043][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.032220][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.085596][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.090719][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.156400][ T5201] Bluetooth: hci0: command tx timeout
[   96.296035][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'.
[   96.317077][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'.
[   96.372220][ T7789] netlink: 'syz.2.540': attribute type 11 has an invalid length.
[   96.422685][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[   96.423699][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'.
[   96.444083][ T7791] bond0: (slave bond_slave_1): Releasing backup interface
[   96.448420][ T7791] bond_slave_1 (unregistering): left promiscuous mode
[   96.451100][ T7791] bond_slave_1 (unregistering): left allmulticast mode
[   96.525024][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'.
[   96.533463][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'.
[   96.715478][ T7819] nbd: must specify a device to reconfigure
[   97.154034][ T7839] ..@: renamed from bond_slave_0
[   97.418332][ T7847] batadv_slave_1: left promiscuous mode
[   97.431786][ T7847] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   97.439864][ T7847] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.443289][ T7847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.446799][ T7847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.449601][ T7847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.455486][ T7847] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.458613][ T7847] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.461424][ T7847] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.464336][ T7847] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.473148][ T7847] gretap1: left promiscuous mode
[   97.474922][ T7847] gretap1: left allmulticast mode
[   97.481283][ T7847] gretap2: left allmulticast mode
[   97.585641][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.262749][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.268490][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.272255][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.281775][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.285749][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.519250][ T7867] chnl_net:caif_netlink_parms(): no params data found
[   98.609853][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.616258][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.619925][ T7867] bridge_slave_0: entered allmulticast mode
[   98.625437][ T7867] bridge_slave_0: entered promiscuous mode
[   98.629152][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.631793][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.634943][ T7867] bridge_slave_1: entered allmulticast mode
[   98.641192][ T7867] bridge_slave_1: entered promiscuous mode
[   98.695371][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.702550][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.732941][ T7867] team0: Port device team_slave_0 added
[   98.741547][ T7867] team0: Port device team_slave_1 added
[   98.801689][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.808171][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.810476][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.820331][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.824881][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.827243][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.836470][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.895596][ T7867] hsr_slave_0: entered promiscuous mode
[   98.898158][ T7917] validate_nla: 1 callbacks suppressed
[   98.898167][ T7917] netlink: 'syz.1.574': attribute type 21 has an invalid length.
[   98.898242][ T7867] hsr_slave_1: entered promiscuous mode
[   99.076640][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.091682][ T7932] dvmrp0: left allmulticast mode
[   99.093928][ T7932] dvmrp1: left allmulticast mode
[   99.147674][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.194434][ T7938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.308630][   T13] bridge_slave_1: left allmulticast mode
[   99.310854][   T13] bridge_slave_1: left promiscuous mode
[   99.313422][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.319368][   T13] bridge_slave_0: left allmulticast mode
[   99.321218][   T13] bridge_slave_0: left promiscuous mode
[   99.323127][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.559363][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.563674][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.568518][   T13] bond0 (unregistering): Released all slaves
[   99.590616][ T7957] C: entered promiscuous mode
[   99.592931][ T7957] team_slave_1: entered promiscuous mode
[   99.595453][ T7957] macsec2: entered allmulticast mode
[   99.600929][ T7957] team0: entered allmulticast mode
[   99.602672][ T7957] C: entered allmulticast mode
[   99.604322][ T7957] team_slave_1: entered allmulticast mode
[   99.610173][ T7957] team0: left allmulticast mode
[   99.612255][ T7957] C: left allmulticast mode
[   99.614221][ T7957] team_slave_1: left allmulticast mode
[   99.619001][ T7957] C: left promiscuous mode
[   99.620771][ T7957] team_slave_1: left promiscuous mode
[   99.754593][ T7959] team0 (unregistering): Port device team_slave_0 removed
[   99.761459][ T7959] team0 (unregistering): Port device team_slave_1 removed
[   99.764821][ T7959] team0 (unregistering): Port device geneve0 removed
[   99.874775][ T7970] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[   99.879677][ T7970] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  100.123320][   T13] hsr_slave_0: left promiscuous mode
[  100.125914][   T13] hsr_slave_1: left promiscuous mode
[  100.128775][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.131538][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.134896][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.138386][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.153562][   T13] veth1_macvtap: left promiscuous mode
[  100.156042][   T13] veth0_macvtap: left promiscuous mode
[  100.159627][   T13] veth1_vlan: left promiscuous mode
[  100.162079][   T13] veth0_vlan: left promiscuous mode
[  100.180655][ T7989] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  100.316288][ T5201] Bluetooth: hci0: command tx timeout
[  100.554653][   T13] team0 (unregistering): Port device team_slave_1 removed
[  100.588678][   T13] team0 (unregistering): Port device team_slave_0 removed
[  100.859456][ T7867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.863883][ T7867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.878341][ T7867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.883988][ T7867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.980768][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.991918][ T8002] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[  101.027459][ T7867] 8021q: adding VLAN 0 to HW filter on device team0
[  101.043217][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.045637][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.062898][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.065270][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.133967][ T8017] netlink: 'syz.2.598': attribute type 15 has an invalid length.
[  101.222718][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.254530][ T7867] veth0_vlan: entered promiscuous mode
[  101.260885][ T7867] veth1_vlan: entered promiscuous mode
[  101.279560][ T7867] veth0_macvtap: entered promiscuous mode
[  101.284762][ T7867] veth1_macvtap: entered promiscuous mode
[  101.293894][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.307853][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.318676][ T7867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.322201][ T7867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.325626][ T7867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.332911][ T7867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.395797][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.404246][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.427028][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.430465][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.063503][ T8031] __nla_validate_parse: 17 callbacks suppressed
[  102.063523][ T8031] netlink: 108 bytes leftover after parsing attributes in process `syz.1.602'.
[  102.303913][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'.
[  102.313503][ T8047] netlink: 'syz.2.606': attribute type 3 has an invalid length.
[  102.527948][ T8060] netlink: 'syz.2.611': attribute type 11 has an invalid length.
[  102.531157][ T8060] netlink: 140 bytes leftover after parsing attributes in process `syz.2.611'.
[  102.539807][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'.
[  102.547673][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[  102.551382][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[  102.706914][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.873648][ T8086] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  102.873812][   T10] IPVS: starting estimator thread 0...
[  102.955236][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'.
[  102.958644][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  102.967131][ T8092] IPVS: using max 79 ests per chain, 189600 per kthread
[  103.167887][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[  103.284257][ T8130] SET target dimension over the limit!
[  103.321934][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.901694][ T8133] vxcan1: entered allmulticast mode
[  103.904102][ T8133] vxcan1: left allmulticast mode
[  103.915012][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'.
[  103.983455][ T8140] netlink: 'syz.2.638': attribute type 1 has an invalid length.
[  104.162143][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.167844][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.170898][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.174439][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.178467][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.332562][ T8163] netdevsim netdevsim2: Direct firmware load for .
[  104.332562][ T8163]  failed with error -2
[  104.335892][ T8163] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  104.335892][ T8163] 
[  104.359329][ T8152] chnl_net:caif_netlink_parms(): no params data found
[  104.438905][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.441226][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.443663][ T8152] bridge_slave_0: entered allmulticast mode
[  104.446832][ T8152] bridge_slave_0: entered promiscuous mode
[  104.449960][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.452220][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.454687][ T8152] bridge_slave_1: entered allmulticast mode
[  104.457659][ T8152] bridge_slave_1: entered promiscuous mode
[  104.475526][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.486603][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.505742][ T8152] team0: Port device team_slave_0 added
[  104.510014][ T8152] team0: Port device team_slave_1 added
[  104.527587][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.529845][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.538092][ T8152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.542448][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.544747][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.554404][ T8152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.582423][ T8152] hsr_slave_0: entered promiscuous mode
[  104.585108][ T8152] hsr_slave_1: entered promiscuous mode
[  104.587519][ T8152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.590003][ T8152] Cannot create hsr debugfs directory
[  104.899360][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.947912][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.993536][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.088429][   T13] bridge_slave_1: left allmulticast mode
[  105.090381][   T13] bridge_slave_1: left promiscuous mode
[  105.092334][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.101865][   T13] bridge_slave_0: left allmulticast mode
[  105.104221][   T13] bridge_slave_0: left promiscuous mode
[  105.109892][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.455332][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.460755][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.464758][   T13] bond0 (unregistering): Released all slaves
[  105.520716][ T8195] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI
[  105.524768][ T8195] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef]
[  105.528353][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.2.654 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  105.533133][ T8195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.537083][ T8195] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  105.539343][ T8195] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  105.547039][ T8195] RSP: 0018:ffffc90002c8efb0 EFLAGS: 00010203
[  105.549464][ T8195] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  105.552503][ T8195] RDX: ffffc90020001000 RSI: 0000000000000af1 RDI: 0000000000000af2
[  105.555629][ T8195] RBP: dffffc0000000000 R08: ffff888021151cc0 R09: 0000000000000002
[  105.558826][ T8195] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  105.561946][ T8195] R13: ffff888027df3000 R14: 00000000000002ec R15: ffff888027df3000
[  105.565055][ T8195] FS:  00007ffb910546c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  105.568809][ T8195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.571518][ T8195] CR2: 00007ffb90fcffc8 CR3: 0000000106122000 CR4: 00000000000006f0
[  105.574688][ T8195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  105.577786][ T8195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  105.580897][ T8195] Call Trace:
[  105.582260][ T8195]  <TASK>
[  105.583448][ T8195]  qdisc_tree_reduce_backlog+0x29c/0x480
[  105.585636][ T8195]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  105.587924][ T8195]  fq_change+0x1519/0x1f50
[  105.589776][ T8195]  ? __pfx_fq_change+0x10/0x10
[  105.591861][ T8195]  ? __hrtimer_setup+0x187/0x210
[  105.593666][ T8195]  fq_init+0x699/0x960
[  105.595366][ T8195]  ? __pfx_fq_init+0x10/0x10
[  105.597233][ T8195]  ? lockdep_rtnl_is_held+0x26/0x40
[  105.599360][ T8195]  ? qdisc_lookup+0x36d/0x6d0
[  105.601247][ T8195]  ? __pfx_fq_init+0x10/0x10
[  105.603178][ T8195]  qdisc_create+0x7ac/0xea0
[  105.605100][ T8195]  tc_modify_qdisc+0x1426/0x2010
[  105.607093][ T8195]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  105.609177][ T8195]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  105.611327][ T8195]  rtnetlink_rcv_msg+0x77c/0xb70
[  105.613343][ T8195]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  105.615182][ T8195]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.616914][ T8195]  netlink_rcv_skb+0x208/0x470
[  105.618463][ T8195]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  105.620163][ T8195]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.621912][ T8195]  ? netlink_deliver_tap+0x2e/0x1b0
[  105.623651][ T8195]  ? netlink_deliver_tap+0x2e/0x1b0
[  105.625356][ T8195]  netlink_unicast+0x75b/0x8d0
[  105.626888][ T8195]  netlink_sendmsg+0x805/0xb30
[  105.628422][ T8195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.630094][ T8195]  ? aa_sock_msg_perm+0x94/0x160
[  105.631766][ T8195]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.633514][ T8195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.635238][ T8195]  __sock_sendmsg+0x21c/0x270
[  105.636786][ T8195]  ____sys_sendmsg+0x505/0x830
[  105.638364][ T8195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.640052][ T8195]  ? import_iovec+0x74/0xa0
[  105.641569][ T8195]  ___sys_sendmsg+0x21f/0x2a0
[  105.643173][ T8195]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.644825][ T8195]  ? __fget_files+0x2a/0x420
[  105.646326][ T8195]  ? __fget_files+0x3a0/0x420
[  105.648086][ T8195]  __x64_sys_sendmsg+0x19b/0x260
[  105.649790][ T8195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.651618][ T8195]  ? rcu_is_watching+0x15/0xb0
[  105.653290][ T8195]  ? do_syscall_64+0xbe/0x3b0
[  105.654886][ T8195]  do_syscall_64+0xfa/0x3b0
[  105.656416][ T8195]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.658186][ T8195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.660322][ T8195]  ? exc_page_fault+0x9f/0xf0
[  105.661823][ T8195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.663674][ T8195] RIP: 0033:0x7ffb9018e929
[  105.665110][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.671315][ T8195] RSP: 002b:00007ffb91054038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.674032][ T8195] RAX: ffffffffffffffda RBX: 00007ffb903b5fa0 RCX: 00007ffb9018e929
[  105.676644][ T8195] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004
[  105.679270][ T8195] RBP: 00007ffb90210b39 R08: 0000000000000000 R09: 0000000000000000
[  105.681869][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.684464][ T8195] R13: 0000000000000000 R14: 00007ffb903b5fa0 R15: 00007ffe6b1dc708
[  105.687050][ T8195]  </TASK>
[  105.688090][ T8195] Modules linked in:
[  105.689736][ T8195] ---[ end trace 0000000000000000 ]---
[  105.691605][ T8195] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  105.693391][ T8195] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  105.699595][ T8195] RSP: 0018:ffffc90002c8efb0 EFLAGS: 00010203
[  105.701562][ T8195] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  105.704175][ T8195] RDX: ffffc90020001000 RSI: 0000000000000af1 RDI: 0000000000000af2
[  105.706844][ T8195] RBP: dffffc0000000000 R08: ffff888021151cc0 R09: 0000000000000002
[  105.709495][ T8195] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  105.712087][ T8195] R13: ffff888027df3000 R14: 00000000000002ec R15: ffff888027df3000
[  105.714775][ T8195] FS:  00007ffb910546c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  105.717869][ T8195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.720282][ T8195] CR2: 00007ffb90fcffc8 CR3: 0000000106122000 CR4: 00000000000006f0
[  105.723032][ T8195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  105.725780][ T8195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  105.728884][ T8195] Kernel panic - not syncing: Fatal exception in interrupt
[  105.731945][ T8195] Kernel Offset: disabled
[  105.733375][ T8195] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:13:46  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888021151cf4 RBX=ffffffff8f50ffb0 RCX=ffffffff819da768 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f50ff60 RBP=1ffffffff1ea1fec RSP=ffffc90002d7f3a8
R8 =ffffffff8f50ff67 R9 =1ffffffff1ea1fec R10=dffffc0000000000 R11=fffffbfff1ea1fed
R12=ffffffff8f50ff60 R13=ffffffff8f50ffb0 R14=dffffc0000000000 R15=ffff888021151cc0
RIP=ffffffff819da62f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc84ad28740 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffb91011fc8 CR3=000000010c7d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f91de611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017ff RDI=0000000000001800 RBP=00000000000003f8 RSP=ffffc90002c8e7f0
R8 =ffff888021978237 R9 =1ffff1100432f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4913 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffb910546c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffb90fcffc8 CR3=0000000106122000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007ffb90eed100 00007ffb90384440 XMM05=00007ffb90384458 00007ffb903844a0
XMM06=00007ffb90384498 00007ffb90384490 XMM07=00007ffb90384488 00007ffb90384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ffb90211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
