last executing test programs:

17.237432001s ago: executing program 2 (id=1237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0xea, 0x0, 0x20000000}, 0x0)

17.105895139s ago: executing program 2 (id=1240):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2", 0x1, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="0200000006"], 0x10)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r11, 0x6, 0x11, 0x0, &(0x7f0000002340))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020400)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}, 0x50)

16.876567318s ago: executing program 2 (id=1245):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x10d8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x10c4, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}, @m_ctinfo={0x1090, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xb, 0x5, 0x3, 0x85e}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x43}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x10, 0x10000000, 0x3, 0x8}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x10d8}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f0000000180)='%pB    \x00'}, 0x20)

16.666685406s ago: executing program 2 (id=1250):
socket(0x1a, 0x3, 0xfa) (async)
r0 = socket(0x1a, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4c21, @loopback}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x24008830}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
writev(r6, &(0x7f0000000240), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
listen(r7, 0x1ff) (async)
listen(r7, 0x1ff)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) (async)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f000000cf00), 0x0, 0x0)

12.503941132s ago: executing program 2 (id=1250):
socket(0x1a, 0x3, 0xfa) (async)
r0 = socket(0x1a, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4c21, @loopback}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x24008830}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
writev(r6, &(0x7f0000000240), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
listen(r7, 0x1ff) (async)
listen(r7, 0x1ff)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) (async)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f000000cf00), 0x0, 0x0)

6.478034559s ago: executing program 2 (id=1250):
socket(0x1a, 0x3, 0xfa) (async)
r0 = socket(0x1a, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4c21, @loopback}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x24008830}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x58}, 0x1, 0x0, 0x0, 0xd72e0c9be3e44ec2}, 0xc810)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
writev(r6, &(0x7f0000000240), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="143521f6e4df7361830000002d00090027b97000"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x8821)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
listen(r7, 0x1ff) (async)
listen(r7, 0x1ff)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10) (async)
sendto$inet(r7, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x200080c1}, 0x4000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r8, &(0x7f000000cf00), 0x0, 0x0)

1.484086308s ago: executing program 1 (id=1415):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
listen(r0, 0xffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000100)=""/91, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x9, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x3, 0x2, 0xd, 0x5}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0xd3a}, 0x94)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x80000000, 0x10}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r1, r2}, 0xc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000003c0)={'vlan1\x00', 0x3e})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x5, 0x8}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xfffeffff, 0x500000, 0x2, 0x22e48, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x22, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0xc72a34e900f4eb2d, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc92541e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000600)=""/173, 0x40f00, 0x26, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x4, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r6, r2, r7, r2], 0x0, 0x10, 0x8}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r5)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x29c, r9, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9fb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7309ca2ed5c6b8cbae7b5c3d1a6b871f12d1ae0216c7a52a181afab2ff0706"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32b09796}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d80)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001340)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000000dc0)={0x52c, r10, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x8, 0x8374, 0x0, 0xf, 0x0, 0xa7]}, @NL80211_ATTR_FRAME={0x10a, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x7, 0xf8a}, @value=@ver_80211n={0x0, 0xd, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x38, @val={0x10, 0x1, 0x1d}, [{0xdd, 0xdf, "64b821ae2210993333a8d98753a74871c5d7c53142528c9dd0d630012bf551b27ae924155686d2e94407fe5a20082d372d835ed5d0f10010fccc0772d14906373069839683168bb7465fb1bb047115216588c1b0acea7dfe5b48ecbccef757b6084a476034139e884171d60f8b45467947a3a9dc5180196f1cbeca60d273ecba9ba0167d5aa8cdd6018f9b78587a4e0bcf7e7b66db6060e2573a520f6a849e9ffff9a108fc3f459c201c2f2797804c0f0e53ad84ea7e0eb4be2607abdb09790129e81c61402ee3db97996a213082d6fa91113c2990bebd0db09c5816990b9f"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11c4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1060}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x3, 0x8]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x192}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe00}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x283, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0x9}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x4, 0xd9e2, {0x0, 0x12, @random="3cd19dda2a262885563718ff3f1b341b1177"}, @val={0x1, 0x7, [{0x75, 0x1}, {0x16, 0x1}, {0x36, 0x1}, {0x6}, {0x1}, {0x18}, {0x5}]}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x1, 0x0, {0x1, 0x7f, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x8, 0x9}}, [{0xdd, 0x9f, "076b355f6f0dcc546158d582aac2423978da24dff824d634f4f605d126280a0ba8936825d9feaf23d0024a314bc9955d17b50c0ecafc91384560dd8f984b4e88184780bd5ab375b6beb17f3e97ce82232de21019c1a71617c18a7f36dbe3162612af3b2de6c6e6f520dd0c406346a05048b99ab85e1b696d01e8dc933724ad8a2698b6e5dc46690449593826bf7d2496665c8f127772694344b703f9ee3754"}, {0xdd, 0x36, "4773f7f964b7e1172668d34bf7a89978699fa8adb9317a36dc0c8da28d16dc9f4d9b505c65a1e2b90797dde2973ed862d9aac4d82fee"}, {0xdd, 0xce, "c59ebfea94d6812852f2870c78aa22bb629b8622dc8dfd3be59fce99e6152ba806bfa134b1aa0c9402bbb8361bd84a790f409d2f58b77df297c7c4c5b8ee73b603e994214320c849818c0768325fb7c960ff7f8794926ad8f80bf085f4cffa1fbdc52af530e2a01a058b78602ded5943c60767fe9237af2b9cfe6030e091dca320d1ad36c214d8325a68a2f4c3abced9e20fa4391df168b309dbdea0978cd73fb1c06ad78372127c97ef76589c1363fcc90cef4bf4f9e72562e8c2bb144c578783125f947aef39be856d8ac2dea0"}, {0xdd, 0x7b, "5f695f875541cd219d1e22ea0d182f25a7ef8013ba1164aefa89695b94c6ca57ddc6470b5da5bdc9a48232d21f6dd86d3e1aa027f6e94ab09cafa298e5d4e0f0b2dacebafaf23ed0a83fe384ff12fd655247e154a90c89ba7739c882b213659c0febffc54b8737e9bb81917721463f3f453e48ae56cba860a584ec"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xf6, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @initial, {0xf, 0x9}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x2204, 0x4f, @random, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x1, 0x0, {0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xf, 0x4}}, [{0xdd, 0xb2, "6eb3e8841343c71a59936b483fc9cd54c9c2c963f76b43705a017b8a516da3148b99100d867c2c579498ea62b0068485fcc22206f3e750e9cdcf2707f33deb426536c90df7c59c257bd0b049ef7bcd12ac3168306a42b98f20f33e9c02dc64992387452123743029dd1d21dd7d201130766d39d47297cf26e79ef9ae838366871410ff83e3500df08a889b625379a8e267a6789bf3053612c7df4bc73a3aa6991b23b5c038ea4ca4a348267e825e83f103d6"}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x17, 0x1a, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0x3, 0x4, 0x9, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x2, 0x3, 0x0, 0x4, 0x8, 0x2, 0xfffffffffffffffc}, @generic={0x8, 0x0, 0x8, 0x1, 0x80}, @alu={0x7, 0x1, 0xa, 0x8, 0x0, 0x10, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x0, 0xa, 0x7, 0xffffffffffffffe0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x5733d29202b6c606}}}, &(0x7f0000001480)='syzkaller\x00', 0x5, 0xe, &(0x7f00000014c0)=""/14, 0x41100, 0x2c, '\x00', 0x0, @cgroup_sysctl, r5, 0x8, &(0x7f0000001500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0xa, 0x9, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x4, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0x1, 0x3}, {0x2, 0x2, 0x8, 0x14}, {0x4, 0x2, 0xc, 0x2}, {0x0, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x94)
r12 = syz_genetlink_get_family_id$fou(&(0x7f00000016c0), r5)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001780)={'syztnl0\x00', &(0x7f0000001700)={'ip6tnl0\x00', <r13=>0x0, 0x2f, 0x7f, 0x8, 0x5, 0x3e, @private0={0xfc, 0x0, '\x00', 0x8}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8, 0x7, 0x80000000}})
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001840)={&(0x7f0000001680), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, r12, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_IFINDEX={0x8, 0xb, r13}]}, 0x3c}}, 0x44000)
bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x21, 0xfffffffd, 0x100, 0x568, 0x4, r6, 0x2, '\x00', r13, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r5)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r14, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x20020800)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMKSA(r15, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x5c, r14, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x15, 0x34, @random="fd786581d1ecf188cb62ba4620929b07a9"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_SSID={0x5, 0x34, @random="13"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x48, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c001}, 0x20001090)

1.395399711s ago: executing program 1 (id=1416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

1.305516713s ago: executing program 1 (id=1418):
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r2, 0x1)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

1.133827498s ago: executing program 0 (id=1421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x1200, 0x0, 0x20000000}, 0x0)

1.003902526s ago: executing program 0 (id=1422):
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, <r0=>0x0}, &(0x7f0000000080)=0x60)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20}}, 0x4000040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
recvmsg(r1, 0x0, 0x101)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
pipe(&(0x7f0000000600)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0xa6, 0x0, 0x0, 0x4a, @private1, @mcast2, 0x7800, 0x80, 0x2, 0x6}})
sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=@dellink={0x1a0, 0x11, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10400, 0x2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_MAP={0x24, 0xe, {0x2, 0x4, 0x4f09, 0x6, 0x4, 0x2f}}, @IFLA_PHYS_SWITCH_ID={0x22, 0x24, "ef9e5ea0d35ac68efc87a22b0d888e1bd139b6aae778dc5bfb0c498a283d"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x401}, {0x8, 0x18, 0x0, 0x0, 0x8000}, {0x8, 0x21, 0x0, 0x0, 0x6}, {0x8, 0x1a, 0x0, 0x0, 0x1eb}, {0x8, 0x14, 0x0, 0x0, 0x81}, {0x8, 0x15, 0x0, 0x0, 0x8}, {0x8, 0x1e, 0x0, 0x0, 0x1e800}, {0x8, 0x21, 0x0, 0x0, 0x7}, {0x8, 0x14, 0x0, 0x0, 0xd9}]}}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}]}, @IFLA_MTU={0x8, 0x4, 0xffffffff}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "70ecc47c6210cfc306278ea18e173c5d"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d9be36086a26079b23c36d462d4405c6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5c8bfb628686eb9191a2594e001059a7"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xec}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10)
write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0)
close(r11)
close(r9)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000000080)=0x80)
pwritev(r12, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r9, 0x0, 0x1100000000f336, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885)

405.493172ms ago: executing program 1 (id=1423):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x54}, 0x4800)
r2 = socket$kcm(0xa, 0x1, 0x106)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0800001500010000000000000000000f00000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
socket$inet6(0xa, 0x3, 0x7)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300)
r6 = socket$caif_stream(0x25, 0x1, 0x4)
accept4(r6, 0x0, 0x0, 0x80800)
setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f00000001c0)=0x40, 0x4)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c, 0xfffffffb}]}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872424df67ca)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x20000a}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x5}]}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x4f]}}, &(0x7f0000000200)=""/43, 0x4b, 0x2b, 0x1, 0x7, 0x10000}, 0x28)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0xd4, 0x10, 0x6, 0x180b0, r8, 0x0, '\x00', 0x0, r7, 0x0, 0x5, 0x0, 0x0, @value=r7, @void, @value=r9}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=@base={0xa, 0x5, 0x2, 0x9, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r11}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

323.726343ms ago: executing program 1 (id=1425):
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast1}}}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[], 0xfe33)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0xcde0, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x101, 0x42}, {0x6, 0x400004, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1020000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=@newtfilter={0x11f0, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {0xf, 0xfff2}, {0xa, 0xd}}, [@f_rsvp={{0x9}, {0x119c, 0x2, [@TCA_RSVP_POLICE={0x4ac, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x3, 0x9, 0x10, {0x5, 0x1, 0xfff, 0xb0a, 0x2, 0x3}, {0x9, 0x3efa78cd75dd5308, 0xffff, 0xfff7, 0x6, 0x1}, 0x1000, 0x401, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0xfffffffe, 0x7fffffff, 0x44a, 0x0, 0xb, 0x5, 0x1, 0x6, 0x7, 0x8, 0x0, 0x7fff, 0xa, 0x4, 0x8, 0x5, 0x80000000, 0xb53, 0x7, 0x8, 0x10e, 0x2, 0x254, 0x0, 0x1, 0x8, 0xc9e, 0x1, 0x46, 0x0, 0x2, 0xa613, 0x8, 0x80, 0x9, 0x2, 0x4, 0x5, 0x7, 0x2, 0x6, 0x1ff, 0x3dd0a603, 0xfffff001, 0xfffffffb, 0xe3, 0x9, 0xfff, 0xffff, 0x4, 0xd, 0x400, 0x3ff, 0x1, 0x3, 0x6, 0x6, 0x4, 0x81, 0x99, 0x0, 0x8, 0x6, 0x3, 0xa1b, 0xc0, 0x0, 0x5, 0xf, 0x81, 0x6, 0x1, 0x1, 0x40, 0x9, 0x3, 0x5, 0x7, 0x3, 0x3, 0x72c, 0xd6f, 0x2, 0x0, 0x9b4, 0x3, 0x7, 0x800, 0x8001, 0xfffffffa, 0x8, 0x425ebc6b, 0x9, 0x9, 0x4, 0x28, 0x96, 0x3, 0x2, 0x101, 0x9, 0xe, 0x3, 0x1, 0x2000, 0x5, 0xfffffbae, 0x5, 0x3735, 0xb49, 0x2, 0x3, 0x9, 0x3, 0x6, 0xffff, 0x1, 0x4e, 0x1, 0x1, 0x5, 0x5232, 0xb8d3, 0x1, 0x3, 0x1, 0x7, 0x727, 0x7, 0xe0d, 0xa64, 0x3, 0x8000, 0x0, 0x4c8, 0x5, 0x8, 0x1, 0x7fffffff, 0x0, 0x3, 0x1000, 0x7, 0xfffffffc, 0xfffffff9, 0x7, 0x3, 0x4, 0x4, 0xfffffff9, 0xffffffff, 0x8000, 0xa2f4, 0x2, 0x80000001, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x9, 0x7, 0x2, 0x3, 0xffff, 0x2, 0x4, 0x4, 0xffffff00, 0x7, 0x1ff, 0x7, 0xc0, 0x80000001, 0x9ec, 0x8, 0xfffffffb, 0x9, 0x80000000, 0xa, 0x2, 0x8, 0x2, 0x4, 0xfffffff7, 0x5, 0x3, 0xffffff52, 0x7, 0x2, 0xf12, 0x200, 0xfffffffa, 0xddcd, 0x81, 0x0, 0x7, 0x8, 0xffffff00, 0xc, 0x9e60, 0x4, 0xfffffff8, 0xfffff001, 0x3, 0x5, 0x0, 0x7, 0xf4, 0x1, 0x9, 0x6, 0x0, 0x2, 0x7, 0x7, 0x8, 0xffff, 0x7, 0x5, 0x3, 0x5, 0x6278, 0x4cf, 0x8, 0x5, 0xe1a, 0x1, 0xfffffff9, 0x2, 0x7fff, 0x7, 0x7, 0x7fffffff, 0x101, 0x10000, 0x1, 0xc, 0x5, 0x80000001, 0x6, 0xd8a46c17, 0x9, 0x0, 0x6, 0xf, 0x40, 0x6, 0x6, 0xcd36, 0x0, 0xffffff81, 0xb6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x7, 0x8, 0xcc90, {0x6, 0x2, 0xfffb, 0x3, 0x2e85, 0x100}, {0x6c, 0x2, 0x4425, 0x4, 0x1, 0x9}, 0x8, 0x1, 0x22}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_POLICE={0x8c8, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3, 0x7f, 0x3ff, 0x0, 0x9, 0x4, 0x5, 0x2, 0x5, 0x0, 0x3, 0x0, 0x0, 0x101, 0x4, 0xb, 0x200, 0x1, 0x4, 0xc, 0x1000, 0x2, 0xfffffffb, 0xfff, 0x1, 0x832, 0x1cf8, 0x5, 0x87, 0x8, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x1, 0x7, 0x6, 0x21, 0x9, 0x4, 0xa, 0x4, 0x2, 0x8a, 0x5, 0x0, 0x2, 0x4, 0xf35f, 0x7ff2, 0x6, 0x6, 0x1000, 0xc016, 0x8, 0x7fff, 0x8000, 0x0, 0x3, 0xf58f, 0x1000, 0x3, 0x1, 0x2a000000, 0x6e57, 0x80000001, 0x3ff, 0x0, 0xfffffff7, 0x3, 0x7, 0xb8000000, 0x4, 0x4, 0x2, 0x1, 0xfffffffd, 0x7, 0x1, 0x5, 0xff, 0xfffffffb, 0x0, 0x5, 0xffffff7f, 0x3, 0x3, 0x4, 0x3, 0x1, 0x5, 0x5, 0x5, 0x4, 0xd4, 0xac3a, 0x0, 0x7f, 0x9, 0x9, 0x8c, 0x9, 0x6, 0x9, 0xa3, 0x101, 0xe1, 0x7ff, 0x6, 0xfffffff1, 0x7b52e672, 0x2, 0x6c6b, 0x0, 0xffff, 0xfffffffa, 0x3, 0x8001, 0x7, 0xfffffd83, 0xf35e, 0x10, 0xffffffff, 0x101, 0xe6, 0x7, 0xa3, 0x100, 0x3ff, 0x9, 0x8, 0x1, 0x4, 0x78, 0x8, 0x1, 0x3, 0x2d, 0x0, 0xd, 0x80000000, 0x2, 0x8, 0x400, 0xf90, 0x0, 0x7, 0x400, 0x4, 0x6, 0x0, 0x1, 0x6, 0x6, 0x7, 0x6, 0x8001, 0xc12, 0x628, 0xdcf4, 0xfffffffb, 0xd, 0x5, 0xfffffffb, 0x3, 0x9, 0x101, 0x5c2, 0xfff, 0x86bc, 0x1ff, 0x81, 0x9, 0x3, 0x10, 0x5f, 0x29, 0x3, 0x2, 0x5, 0xfffffff5, 0x400, 0x0, 0x80000001, 0x1, 0xff, 0x5, 0x9ae, 0x8, 0xfffff801, 0xfffff801, 0x5, 0x5, 0xffff, 0x100, 0x4, 0x0, 0x10001, 0x7, 0xd82a, 0x9, 0x1, 0x8, 0x4, 0xfff, 0xfffff048, 0x3f, 0x4, 0x3, 0x80000001, 0x2, 0x2, 0xb, 0x3, 0x5, 0x8, 0x7, 0x80000001, 0x7, 0x0, 0xfbc, 0x101, 0x800, 0xffffffff, 0x1, 0x2, 0x4, 0x9, 0x7fff, 0x4, 0x8, 0x7, 0xfffffff7, 0x87, 0x9, 0x8, 0xffff, 0x2, 0x3, 0x0, 0x5, 0x6, 0x7, 0x5c, 0x8a, 0x9, 0x454a, 0xe747, 0x7, 0x3, 0x8, 0x780, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x4, 0x54206ae5, 0x4, {0x7, 0x0, 0x2, 0x0, 0x6, 0x9}, {0xb, 0x1, 0x9, 0x61, 0x1, 0x367474ab}, 0xe0, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0xfffffff9, 0x9, 0xfffffff7, {0x8, 0x3, 0xffff, 0x0, 0xfffc, 0x10000}, {0x1, 0x2, 0x2, 0x9, 0x10, 0x7fffffff}, 0x3, 0x1, 0x1ff00000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x101, 0x9, 0x3, {0x6, 0x0, 0x7ff, 0x6, 0x3, 0x7}, {0x0, 0x1, 0x0, 0x6, 0x4, 0x2}, 0x400, 0x3ff, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0xa, 0x7, 0xd9, 0x6, 0x9, 0x4, 0x3ff, 0x7f46, 0xe, 0x3, 0x4, 0xccc, 0x6, 0xffffffc0, 0xb2, 0x6, 0xfffffff9, 0xa1, 0x6, 0x3, 0x7000000, 0xfffffff9, 0x4a0, 0xa, 0x8356, 0x5174, 0x6, 0x30b, 0x6, 0x9, 0x1ff, 0x401, 0x2, 0x5, 0xea, 0xfffffff9, 0x4, 0x7, 0x7, 0x5590, 0x100, 0xe7, 0x0, 0x1, 0x9, 0x9, 0x8, 0xa31, 0x5, 0x7, 0x9, 0x3, 0x6, 0x69354305, 0x7ff, 0xf487, 0x44, 0x1, 0x7, 0x9, 0x2, 0x8, 0x4, 0x10001, 0xf, 0x7, 0xfffffff9, 0x6, 0x3e124, 0x400, 0x602b, 0x5, 0x3, 0x4, 0x7, 0x1ff, 0x7, 0x38c4469f, 0x9, 0x5, 0xffff, 0x2, 0x3, 0x7, 0x9, 0xffff0000, 0xff00, 0x7, 0x3, 0xf, 0xa, 0x0, 0xff, 0x6, 0x35bb, 0x7, 0x5, 0x1, 0x2, 0xf025, 0x3ff, 0x0, 0x9, 0x7ff, 0xf, 0x0, 0x7fff, 0x0, 0x0, 0xd7, 0x2, 0x400, 0x4, 0x1, 0xfff, 0x1, 0x10000, 0x1, 0x2, 0x6, 0x7, 0x40c, 0x4, 0x20, 0xfffffffa, 0x7, 0x8, 0x5, 0x4, 0x0, 0x80, 0xfffffff1, 0x6, 0x5893, 0xffff, 0x9, 0x81, 0x3, 0x8, 0x9, 0x2, 0x7, 0x42a7, 0x3, 0xaa, 0x5d, 0x9, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x8, 0x7, 0x0, 0x6, 0x2, 0x8, 0x7f, 0x7, 0x4, 0x5, 0xa522, 0x4, 0x8, 0x200, 0x7, 0x7f, 0x4, 0x4, 0x5, 0xeb, 0x4, 0x6, 0x1, 0x21, 0x6b6, 0x1, 0x9a, 0x2e4, 0x6, 0x1ff, 0x7, 0x41, 0x2e5, 0x4, 0x5, 0x1ff, 0x8fb, 0x2, 0x3, 0x80000001, 0x1c518e27, 0x3, 0x39, 0xc9, 0x3, 0xfffffff8, 0x3, 0x2, 0x2, 0xa568, 0x5, 0x400, 0x13d9, 0x4, 0x5, 0xffffffff, 0x3b, 0x2, 0xd0e, 0x8, 0x9, 0x7, 0x4, 0x5, 0x0, 0x9, 0x8, 0x800, 0xfdf, 0x73, 0x4, 0x1, 0x8, 0x3, 0x9, 0x2, 0xba8d, 0x9, 0xfff, 0x4, 0x10, 0x7, 0x8, 0x5, 0xfffffff7, 0x6, 0x6, 0xffff8001, 0x4f6, 0x4, 0xe, 0x1d3c, 0x9, 0x4, 0x7, 0x101, 0x2e, 0x7f, 0x3, 0x4, 0xc1, 0x8, 0x120]}]}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x0, 0x3, 0x6, 0xffff, 0x6, 0x862, 0x0, 0x0, 0x80000000, 0x1, 0x5, 0x8000, 0xe, 0xbf3d, 0x6, 0x9, 0x44, 0x6, 0x0, 0x0, 0x7, 0x0, 0x23, 0x5, 0x2, 0x20000, 0xcb7, 0x4, 0x2, 0x4, 0x1, 0xc, 0x6, 0x3ff, 0x1d, 0x8, 0x10, 0x1, 0x7, 0x100, 0x20000000, 0xf, 0x1, 0x7, 0x5, 0x0, 0x2610, 0x1, 0xa, 0x3ff, 0xffffffe5, 0x9, 0x3, 0x1, 0x9, 0xe7d8, 0xffff4bea, 0x8, 0x3, 0x7a5, 0x54ac, 0xfff, 0x1, 0x0, 0x957, 0x0, 0x8, 0x2, 0x8, 0x3, 0x4, 0xe, 0x7, 0x7fff, 0x8, 0x37e, 0x7fff, 0x10001, 0x2f, 0xe, 0x2, 0xa, 0xfffffffb, 0x4, 0x0, 0x1, 0x7, 0xcc6, 0x6, 0x0, 0xdc000000, 0x7ff, 0x0, 0x1, 0x9, 0x9, 0x3, 0x1000, 0x7fff, 0xfffffffc, 0x8, 0x3fd, 0xa, 0x7f, 0xfffffffc, 0xeb, 0x0, 0x8, 0xfffffffb, 0xf98, 0x6, 0x0, 0x4, 0x5, 0xa266, 0x9, 0xfdc, 0x8, 0x9, 0x1, 0xa, 0x2, 0x7, 0xfffffffa, 0x1, 0x1, 0x100, 0x4, 0x2, 0x3, 0x100, 0xc7, 0x401, 0x10001, 0x9, 0x5, 0x101, 0x8, 0x7, 0x2, 0x2, 0x5, 0xa, 0x3623, 0x1f, 0xd1f, 0x9, 0xb492, 0xfffffff9, 0x0, 0x9, 0xc, 0x9, 0x7fff, 0x1, 0x5, 0x2, 0x9, 0x0, 0x40, 0x5, 0x4, 0x8, 0x78, 0x9, 0x0, 0x1, 0xffffffff, 0x1, 0x3, 0x7, 0x8, 0x2, 0x5, 0x8, 0x2, 0x2, 0xbf8, 0x0, 0x20, 0x7fffffff, 0x9, 0xff, 0x5, 0x100, 0x9, 0x0, 0x5, 0x2, 0xb92, 0x3, 0x4, 0x7, 0x7, 0xf76b, 0x6, 0x9, 0xfffffff3, 0x40, 0x2, 0xc7, 0x9, 0x6, 0x3, 0x5, 0x3, 0xfffffffe, 0x9, 0x8001, 0x8, 0xe7f, 0x6, 0x6239, 0x400, 0x40, 0x9, 0x9, 0x6, 0x8, 0x479, 0x100, 0x40000000, 0xfffffffc, 0x87, 0x1, 0x6e9, 0x200, 0x32, 0x10, 0x0, 0xae, 0x2, 0x9, 0x711, 0x140000, 0x8, 0xfffffffe, 0x1, 0xff, 0x800, 0x7, 0x401, 0x0, 0x0, 0x6, 0x1, 0xfffffff8, 0x0, 0xfad, 0x3, 0xe, 0x2, 0x8, 0x5]}]}, @TCA_RSVP_DST={0x8, 0x2, @empty}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @remote}]}}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x84)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xeed}, {0x0, 0x0, 0x10000}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@empty}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast1}}}}}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) (async)
pipe(&(0x7f0000000080)) (async)
readv(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async)
write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[], 0xfe33) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0xcde0, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x101, 0x42}, {0x6, 0x400004, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1020000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=@newtfilter={0x11f0, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {0xf, 0xfff2}, {0xa, 0xd}}, [@f_rsvp={{0x9}, {0x119c, 0x2, [@TCA_RSVP_POLICE={0x4ac, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x3, 0x9, 0x10, {0x5, 0x1, 0xfff, 0xb0a, 0x2, 0x3}, {0x9, 0x3efa78cd75dd5308, 0xffff, 0xfff7, 0x6, 0x1}, 0x1000, 0x401, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0xfffffffe, 0x7fffffff, 0x44a, 0x0, 0xb, 0x5, 0x1, 0x6, 0x7, 0x8, 0x0, 0x7fff, 0xa, 0x4, 0x8, 0x5, 0x80000000, 0xb53, 0x7, 0x8, 0x10e, 0x2, 0x254, 0x0, 0x1, 0x8, 0xc9e, 0x1, 0x46, 0x0, 0x2, 0xa613, 0x8, 0x80, 0x9, 0x2, 0x4, 0x5, 0x7, 0x2, 0x6, 0x1ff, 0x3dd0a603, 0xfffff001, 0xfffffffb, 0xe3, 0x9, 0xfff, 0xffff, 0x4, 0xd, 0x400, 0x3ff, 0x1, 0x3, 0x6, 0x6, 0x4, 0x81, 0x99, 0x0, 0x8, 0x6, 0x3, 0xa1b, 0xc0, 0x0, 0x5, 0xf, 0x81, 0x6, 0x1, 0x1, 0x40, 0x9, 0x3, 0x5, 0x7, 0x3, 0x3, 0x72c, 0xd6f, 0x2, 0x0, 0x9b4, 0x3, 0x7, 0x800, 0x8001, 0xfffffffa, 0x8, 0x425ebc6b, 0x9, 0x9, 0x4, 0x28, 0x96, 0x3, 0x2, 0x101, 0x9, 0xe, 0x3, 0x1, 0x2000, 0x5, 0xfffffbae, 0x5, 0x3735, 0xb49, 0x2, 0x3, 0x9, 0x3, 0x6, 0xffff, 0x1, 0x4e, 0x1, 0x1, 0x5, 0x5232, 0xb8d3, 0x1, 0x3, 0x1, 0x7, 0x727, 0x7, 0xe0d, 0xa64, 0x3, 0x8000, 0x0, 0x4c8, 0x5, 0x8, 0x1, 0x7fffffff, 0x0, 0x3, 0x1000, 0x7, 0xfffffffc, 0xfffffff9, 0x7, 0x3, 0x4, 0x4, 0xfffffff9, 0xffffffff, 0x8000, 0xa2f4, 0x2, 0x80000001, 0x7, 0x8, 0x8, 0x7, 0x3, 0x8, 0x9, 0x7, 0x2, 0x3, 0xffff, 0x2, 0x4, 0x4, 0xffffff00, 0x7, 0x1ff, 0x7, 0xc0, 0x80000001, 0x9ec, 0x8, 0xfffffffb, 0x9, 0x80000000, 0xa, 0x2, 0x8, 0x2, 0x4, 0xfffffff7, 0x5, 0x3, 0xffffff52, 0x7, 0x2, 0xf12, 0x200, 0xfffffffa, 0xddcd, 0x81, 0x0, 0x7, 0x8, 0xffffff00, 0xc, 0x9e60, 0x4, 0xfffffff8, 0xfffff001, 0x3, 0x5, 0x0, 0x7, 0xf4, 0x1, 0x9, 0x6, 0x0, 0x2, 0x7, 0x7, 0x8, 0xffff, 0x7, 0x5, 0x3, 0x5, 0x6278, 0x4cf, 0x8, 0x5, 0xe1a, 0x1, 0xfffffff9, 0x2, 0x7fff, 0x7, 0x7, 0x7fffffff, 0x101, 0x10000, 0x1, 0xc, 0x5, 0x80000001, 0x6, 0xd8a46c17, 0x9, 0x0, 0x6, 0xf, 0x40, 0x6, 0x6, 0xcd36, 0x0, 0xffffff81, 0xb6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x7, 0x8, 0xcc90, {0x6, 0x2, 0xfffb, 0x3, 0x2e85, 0x100}, {0x6c, 0x2, 0x4425, 0x4, 0x1, 0x9}, 0x8, 0x1, 0x22}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_POLICE={0x8c8, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3, 0x7f, 0x3ff, 0x0, 0x9, 0x4, 0x5, 0x2, 0x5, 0x0, 0x3, 0x0, 0x0, 0x101, 0x4, 0xb, 0x200, 0x1, 0x4, 0xc, 0x1000, 0x2, 0xfffffffb, 0xfff, 0x1, 0x832, 0x1cf8, 0x5, 0x87, 0x8, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x1, 0x7, 0x6, 0x21, 0x9, 0x4, 0xa, 0x4, 0x2, 0x8a, 0x5, 0x0, 0x2, 0x4, 0xf35f, 0x7ff2, 0x6, 0x6, 0x1000, 0xc016, 0x8, 0x7fff, 0x8000, 0x0, 0x3, 0xf58f, 0x1000, 0x3, 0x1, 0x2a000000, 0x6e57, 0x80000001, 0x3ff, 0x0, 0xfffffff7, 0x3, 0x7, 0xb8000000, 0x4, 0x4, 0x2, 0x1, 0xfffffffd, 0x7, 0x1, 0x5, 0xff, 0xfffffffb, 0x0, 0x5, 0xffffff7f, 0x3, 0x3, 0x4, 0x3, 0x1, 0x5, 0x5, 0x5, 0x4, 0xd4, 0xac3a, 0x0, 0x7f, 0x9, 0x9, 0x8c, 0x9, 0x6, 0x9, 0xa3, 0x101, 0xe1, 0x7ff, 0x6, 0xfffffff1, 0x7b52e672, 0x2, 0x6c6b, 0x0, 0xffff, 0xfffffffa, 0x3, 0x8001, 0x7, 0xfffffd83, 0xf35e, 0x10, 0xffffffff, 0x101, 0xe6, 0x7, 0xa3, 0x100, 0x3ff, 0x9, 0x8, 0x1, 0x4, 0x78, 0x8, 0x1, 0x3, 0x2d, 0x0, 0xd, 0x80000000, 0x2, 0x8, 0x400, 0xf90, 0x0, 0x7, 0x400, 0x4, 0x6, 0x0, 0x1, 0x6, 0x6, 0x7, 0x6, 0x8001, 0xc12, 0x628, 0xdcf4, 0xfffffffb, 0xd, 0x5, 0xfffffffb, 0x3, 0x9, 0x101, 0x5c2, 0xfff, 0x86bc, 0x1ff, 0x81, 0x9, 0x3, 0x10, 0x5f, 0x29, 0x3, 0x2, 0x5, 0xfffffff5, 0x400, 0x0, 0x80000001, 0x1, 0xff, 0x5, 0x9ae, 0x8, 0xfffff801, 0xfffff801, 0x5, 0x5, 0xffff, 0x100, 0x4, 0x0, 0x10001, 0x7, 0xd82a, 0x9, 0x1, 0x8, 0x4, 0xfff, 0xfffff048, 0x3f, 0x4, 0x3, 0x80000001, 0x2, 0x2, 0xb, 0x3, 0x5, 0x8, 0x7, 0x80000001, 0x7, 0x0, 0xfbc, 0x101, 0x800, 0xffffffff, 0x1, 0x2, 0x4, 0x9, 0x7fff, 0x4, 0x8, 0x7, 0xfffffff7, 0x87, 0x9, 0x8, 0xffff, 0x2, 0x3, 0x0, 0x5, 0x6, 0x7, 0x5c, 0x8a, 0x9, 0x454a, 0xe747, 0x7, 0x3, 0x8, 0x780, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x4, 0x54206ae5, 0x4, {0x7, 0x0, 0x2, 0x0, 0x6, 0x9}, {0xb, 0x1, 0x9, 0x61, 0x1, 0x367474ab}, 0xe0, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0xfffffff9, 0x9, 0xfffffff7, {0x8, 0x3, 0xffff, 0x0, 0xfffc, 0x10000}, {0x1, 0x2, 0x2, 0x9, 0x10, 0x7fffffff}, 0x3, 0x1, 0x1ff00000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x101, 0x9, 0x3, {0x6, 0x0, 0x7ff, 0x6, 0x3, 0x7}, {0x0, 0x1, 0x0, 0x6, 0x4, 0x2}, 0x400, 0x3ff, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0xa, 0x7, 0xd9, 0x6, 0x9, 0x4, 0x3ff, 0x7f46, 0xe, 0x3, 0x4, 0xccc, 0x6, 0xffffffc0, 0xb2, 0x6, 0xfffffff9, 0xa1, 0x6, 0x3, 0x7000000, 0xfffffff9, 0x4a0, 0xa, 0x8356, 0x5174, 0x6, 0x30b, 0x6, 0x9, 0x1ff, 0x401, 0x2, 0x5, 0xea, 0xfffffff9, 0x4, 0x7, 0x7, 0x5590, 0x100, 0xe7, 0x0, 0x1, 0x9, 0x9, 0x8, 0xa31, 0x5, 0x7, 0x9, 0x3, 0x6, 0x69354305, 0x7ff, 0xf487, 0x44, 0x1, 0x7, 0x9, 0x2, 0x8, 0x4, 0x10001, 0xf, 0x7, 0xfffffff9, 0x6, 0x3e124, 0x400, 0x602b, 0x5, 0x3, 0x4, 0x7, 0x1ff, 0x7, 0x38c4469f, 0x9, 0x5, 0xffff, 0x2, 0x3, 0x7, 0x9, 0xffff0000, 0xff00, 0x7, 0x3, 0xf, 0xa, 0x0, 0xff, 0x6, 0x35bb, 0x7, 0x5, 0x1, 0x2, 0xf025, 0x3ff, 0x0, 0x9, 0x7ff, 0xf, 0x0, 0x7fff, 0x0, 0x0, 0xd7, 0x2, 0x400, 0x4, 0x1, 0xfff, 0x1, 0x10000, 0x1, 0x2, 0x6, 0x7, 0x40c, 0x4, 0x20, 0xfffffffa, 0x7, 0x8, 0x5, 0x4, 0x0, 0x80, 0xfffffff1, 0x6, 0x5893, 0xffff, 0x9, 0x81, 0x3, 0x8, 0x9, 0x2, 0x7, 0x42a7, 0x3, 0xaa, 0x5d, 0x9, 0x7, 0x2, 0x80000000, 0x6, 0x9, 0x8, 0x7, 0x0, 0x6, 0x2, 0x8, 0x7f, 0x7, 0x4, 0x5, 0xa522, 0x4, 0x8, 0x200, 0x7, 0x7f, 0x4, 0x4, 0x5, 0xeb, 0x4, 0x6, 0x1, 0x21, 0x6b6, 0x1, 0x9a, 0x2e4, 0x6, 0x1ff, 0x7, 0x41, 0x2e5, 0x4, 0x5, 0x1ff, 0x8fb, 0x2, 0x3, 0x80000001, 0x1c518e27, 0x3, 0x39, 0xc9, 0x3, 0xfffffff8, 0x3, 0x2, 0x2, 0xa568, 0x5, 0x400, 0x13d9, 0x4, 0x5, 0xffffffff, 0x3b, 0x2, 0xd0e, 0x8, 0x9, 0x7, 0x4, 0x5, 0x0, 0x9, 0x8, 0x800, 0xfdf, 0x73, 0x4, 0x1, 0x8, 0x3, 0x9, 0x2, 0xba8d, 0x9, 0xfff, 0x4, 0x10, 0x7, 0x8, 0x5, 0xfffffff7, 0x6, 0x6, 0xffff8001, 0x4f6, 0x4, 0xe, 0x1d3c, 0x9, 0x4, 0x7, 0x101, 0x2e, 0x7f, 0x3, 0x4, 0xc1, 0x8, 0x120]}]}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x0, 0x3, 0x6, 0xffff, 0x6, 0x862, 0x0, 0x0, 0x80000000, 0x1, 0x5, 0x8000, 0xe, 0xbf3d, 0x6, 0x9, 0x44, 0x6, 0x0, 0x0, 0x7, 0x0, 0x23, 0x5, 0x2, 0x20000, 0xcb7, 0x4, 0x2, 0x4, 0x1, 0xc, 0x6, 0x3ff, 0x1d, 0x8, 0x10, 0x1, 0x7, 0x100, 0x20000000, 0xf, 0x1, 0x7, 0x5, 0x0, 0x2610, 0x1, 0xa, 0x3ff, 0xffffffe5, 0x9, 0x3, 0x1, 0x9, 0xe7d8, 0xffff4bea, 0x8, 0x3, 0x7a5, 0x54ac, 0xfff, 0x1, 0x0, 0x957, 0x0, 0x8, 0x2, 0x8, 0x3, 0x4, 0xe, 0x7, 0x7fff, 0x8, 0x37e, 0x7fff, 0x10001, 0x2f, 0xe, 0x2, 0xa, 0xfffffffb, 0x4, 0x0, 0x1, 0x7, 0xcc6, 0x6, 0x0, 0xdc000000, 0x7ff, 0x0, 0x1, 0x9, 0x9, 0x3, 0x1000, 0x7fff, 0xfffffffc, 0x8, 0x3fd, 0xa, 0x7f, 0xfffffffc, 0xeb, 0x0, 0x8, 0xfffffffb, 0xf98, 0x6, 0x0, 0x4, 0x5, 0xa266, 0x9, 0xfdc, 0x8, 0x9, 0x1, 0xa, 0x2, 0x7, 0xfffffffa, 0x1, 0x1, 0x100, 0x4, 0x2, 0x3, 0x100, 0xc7, 0x401, 0x10001, 0x9, 0x5, 0x101, 0x8, 0x7, 0x2, 0x2, 0x5, 0xa, 0x3623, 0x1f, 0xd1f, 0x9, 0xb492, 0xfffffff9, 0x0, 0x9, 0xc, 0x9, 0x7fff, 0x1, 0x5, 0x2, 0x9, 0x0, 0x40, 0x5, 0x4, 0x8, 0x78, 0x9, 0x0, 0x1, 0xffffffff, 0x1, 0x3, 0x7, 0x8, 0x2, 0x5, 0x8, 0x2, 0x2, 0xbf8, 0x0, 0x20, 0x7fffffff, 0x9, 0xff, 0x5, 0x100, 0x9, 0x0, 0x5, 0x2, 0xb92, 0x3, 0x4, 0x7, 0x7, 0xf76b, 0x6, 0x9, 0xfffffff3, 0x40, 0x2, 0xc7, 0x9, 0x6, 0x3, 0x5, 0x3, 0xfffffffe, 0x9, 0x8001, 0x8, 0xe7f, 0x6, 0x6239, 0x400, 0x40, 0x9, 0x9, 0x6, 0x8, 0x479, 0x100, 0x40000000, 0xfffffffc, 0x87, 0x1, 0x6e9, 0x200, 0x32, 0x10, 0x0, 0xae, 0x2, 0x9, 0x711, 0x140000, 0x8, 0xfffffffe, 0x1, 0xff, 0x800, 0x7, 0x401, 0x0, 0x0, 0x6, 0x1, 0xfffffff8, 0x0, 0xfad, 0x3, 0xe, 0x2, 0x8, 0x5]}]}, @TCA_RSVP_DST={0x8, 0x2, @empty}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @remote}]}}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xeed}, {0x0, 0x0, 0x10000}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@empty}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0) (async)

204.741958ms ago: executing program 1 (id=1426):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x1, 'pimreg0\x00', {}, 0x2})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000f4057c037c1df92045acfb5ecbb0aae1e3df255e04d7e0ce383cceac7d19d1c39916eceb5398d52741e9476a71c85", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="f42c52c6b33b", @ANYRES64=0x0], 0x10)
listen(r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdda}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f0000000340), 0x11000)
vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r7, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d0000000000000000000000850000007be300009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

104.655846ms ago: executing program 0 (id=1427):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3b6}, @in6={0xa, 0x4e20, 0x90e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e23, @remote}], 0x68)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000010000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0xb, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0x16, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xde}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a9}, @ldst={0x3, 0x0, 0x4, 0xa, 0x6, 0xfffffffffffffff0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x7, &(0x7f00000002c0)=""/7, 0x40f00, 0x64, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=[r1], &(0x7f00000003c0)=[{0x2, 0x5, 0x1, 0x9}], 0x10, 0x800}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="7c6e26533121ba797d1bcf2f927b", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)

101.588336ms ago: executing program 0 (id=1428):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1}}, @union={0x6, 0x4, 0x0, 0x5, 0x0, 0x80000001, [{0x4, 0x0, 0x81}, {0x6, 0x4, 0x4}, {0x2, 0x0, 0x7fffffff}, {0x0, 0x5, 0x4}]}]}, {0x0, [0x61, 0x5f, 0x2e]}}, &(0x7f0000000140)=""/198, 0x71, 0xc6, 0x0, 0xb68a, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a3000000000140000001100010a"], 0x100}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={r9, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={r9, 0x10}, 0x8)
ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000040))
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000040)=""/53, 0x35}], 0x3}, 0x80000000}], 0x4, 0x2120, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="00b30351df97eaace5a53d52ee476934c97aff5e038f25c8af15e2d2acb62d00a2bca97cdf98b2e9cb943b749e4059e1ce5d9f3ee3066e404abaef43e6e805f4332e2a1cafc998042bcc437bf298d79037f9ce4fb8f81154b4c4d6152f6b69281a88bcfbfc85ffbbf1cc"], 0x28}}, 0x0)
socket(0x10, 0x803, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r10, 0x114, 0x3, &(0x7f0000000240)={{0x8, 0xc}, 0x4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_GROUP={0x8, 0x1b, 0xb89}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

4.691839ms ago: executing program 0 (id=1429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x15c4, 0x0, 0x20000000}, 0x0)

0s ago: executing program 0 (id=1435):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x0, 0x56, 0x0, 0x1}, 0x28)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r3, 0x1, 0xd, &(0x7f0000000800)=""/214, &(0x7f0000000900)=0xd6)
sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c0000000000000000000000030006000000000002000000000000000000000000000000020001000000000000000800000000c0030005000000000002000000ac14ffaa00000000000000000200080018"], 0x60}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x29, @mcast2}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000080)=0x9, 0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x80000000}, {0x2, 0xfffffffe, 0x2}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast1}]}, 0x104}}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3447' (ED25519) to the list of known hosts.
syzkaller login: [   49.397346][ T5760] cgroup: Unknown subsys name 'net'
[   49.547866][ T5760] cgroup: Unknown subsys name 'cpuset'
[   49.553604][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.531921][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.308825][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.316405][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.323513][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.327062][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.330266][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.345710][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.350041][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.371342][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.380259][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.388122][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.391900][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.392891][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.394955][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.398273][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.403730][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.687664][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   56.765571][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   56.803083][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.852015][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.855625][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.858515][ T5833] bridge_slave_0: entered allmulticast mode
[   56.864113][ T5833] bridge_slave_0: entered promiscuous mode
[   56.885275][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.888192][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.891331][ T5833] bridge_slave_1: entered allmulticast mode
[   56.895183][ T5833] bridge_slave_1: entered promiscuous mode
[   56.951907][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.014287][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.018063][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.021622][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.024709][ T5828] bridge_slave_0: entered allmulticast mode
[   57.028719][ T5828] bridge_slave_0: entered promiscuous mode
[   57.090327][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.094842][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.097730][ T5828] bridge_slave_1: entered allmulticast mode
[   57.111710][ T5828] bridge_slave_1: entered promiscuous mode
[   57.151135][ T5833] team0: Port device team_slave_0 added
[   57.165406][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.171598][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.175602][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.178424][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.182319][ T5832] bridge_slave_0: entered allmulticast mode
[   57.186063][ T5832] bridge_slave_0: entered promiscuous mode
[   57.193932][ T5833] team0: Port device team_slave_1 added
[   57.224320][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.227161][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.229606][ T5832] bridge_slave_1: entered allmulticast mode
[   57.233312][ T5832] bridge_slave_1: entered promiscuous mode
[   57.254446][ T5828] team0: Port device team_slave_0 added
[   57.286884][ T5828] team0: Port device team_slave_1 added
[   57.328164][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.331507][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.339782][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.347617][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.354891][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.357657][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.367641][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.374057][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.376272][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.385159][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.391850][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.396120][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.398668][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.407568][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.448583][ T5832] team0: Port device team_slave_0 added
[   57.453903][ T5832] team0: Port device team_slave_1 added
[   57.511550][ T5833] hsr_slave_0: entered promiscuous mode
[   57.514127][ T5833] hsr_slave_1: entered promiscuous mode
[   57.526464][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.529257][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.540851][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.556864][ T5828] hsr_slave_0: entered promiscuous mode
[   57.559197][ T5828] hsr_slave_1: entered promiscuous mode
[   57.562914][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.565418][ T5828] Cannot create hsr debugfs directory
[   57.569150][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.573739][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.584710][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.722840][ T5832] hsr_slave_0: entered promiscuous mode
[   57.726047][ T5832] hsr_slave_1: entered promiscuous mode
[   57.728898][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.732766][ T5832] Cannot create hsr debugfs directory
[   57.908312][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.917743][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.924866][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.930939][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.974239][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.980391][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.988530][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.005379][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.093235][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.100211][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.114667][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.122302][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.235988][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.247605][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.282437][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.302178][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   58.307236][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.310277][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.329996][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.332925][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.354996][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.357710][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.373894][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.376240][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.410415][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.452064][   T55] Bluetooth: hci2: command tx timeout
[   58.453337][ T5837] Bluetooth: hci1: command tx timeout
[   58.454278][   T55] Bluetooth: hci0: command tx timeout
[   58.487064][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.497662][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.499912][ T4141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.513991][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.516391][ T4141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.673575][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.692786][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.799030][ T5832] veth0_vlan: entered promiscuous mode
[   58.807159][ T5833] veth0_vlan: entered promiscuous mode
[   58.819423][ T5832] veth1_vlan: entered promiscuous mode
[   58.838107][ T5833] veth1_vlan: entered promiscuous mode
[   58.865683][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.883802][ T5833] veth0_macvtap: entered promiscuous mode
[   58.887512][ T5832] veth0_macvtap: entered promiscuous mode
[   58.899577][ T5833] veth1_macvtap: entered promiscuous mode
[   58.908690][ T5832] veth1_macvtap: entered promiscuous mode
[   58.939427][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.948248][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.958816][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.965275][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.981022][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.984784][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.988329][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.993255][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.000198][ T5828] veth0_vlan: entered promiscuous mode
[   59.006789][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.010043][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.015105][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.018482][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.041399][ T5828] veth1_vlan: entered promiscuous mode
[   59.137634][ T5828] veth0_macvtap: entered promiscuous mode
[   59.144272][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.147231][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.166830][ T5828] veth1_macvtap: entered promiscuous mode
[   59.185128][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.191562][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.215941][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.220259][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.232487][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.239117][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.248906][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.255371][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.258070][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.261673][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.306392][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.324734][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.329229][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.410701][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.424554][ T4141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.438211][ T4141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.478747][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.482530][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.773582][ T5912] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET)
[   59.779693][ T5911] syzkaller1: entered promiscuous mode
[   59.782227][ T5911] syzkaller1: entered allmulticast mode
[   59.796268][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.870359][ T5915] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   60.531943][ T5837] Bluetooth: hci2: command tx timeout
[   60.533852][   T55] Bluetooth: hci1: command tx timeout
[   60.540996][   T55] Bluetooth: hci0: command tx timeout
[   60.650048][ T5928] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   60.658326][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   60.663906][ T5928] bond0: (slave team0): Enslaving as an active interface with an up link
[   61.165711][ T5945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.17'.
[   61.232172][ T5952] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.18'.
[   61.236531][ T5949] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.18'.
[   61.397244][ T5956] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   61.546829][ T5967] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.633844][ T5976] pim6reg: entered allmulticast mode
[   61.637171][ T5976] pim6reg: left allmulticast mode
[   61.896196][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27'.
[   61.927070][ T5978] Zero length message leads to an empty skb
[   62.098393][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   62.107607][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   62.233473][ T5991] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.283534][ T5994] netlink: 80 bytes leftover after parsing attributes in process `syz.2.32'.
[   62.378279][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'.
[   62.495144][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.510825][ T6002] veth3: entered promiscuous mode
[   62.514228][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.621204][   T55] Bluetooth: hci0: command tx timeout
[   62.623478][   T55] Bluetooth: hci1: command tx timeout
[   62.624183][ T5837] Bluetooth: hci2: command 0x040f tx timeout
[   62.679003][ T6007] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   62.857075][ T6013] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.966756][ T6018] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   62.969900][ T6017] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   63.036758][ T6020] netlink: 'syz.1.41': attribute type 1 has an invalid length.
[   63.763748][ T6063] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   63.784427][ T6063] syzkaller0: entered promiscuous mode
[   63.786688][ T6063] syzkaller0: entered allmulticast mode
[   64.654321][ T6073] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.694898][ T5839] Bluetooth: hci2: command 0x040f tx timeout
[   64.706114][ T5839] Bluetooth: hci1: command tx timeout
[   64.707755][ T5837] Bluetooth: hci0: command tx timeout
[   64.718437][ T6081] lo: entered allmulticast mode
[   64.722356][ T6079] lo: left allmulticast mode
[   64.936250][ T6096] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.018260][ T6104] __nla_validate_parse: 3 callbacks suppressed
[   65.018279][ T6104] netlink: 176 bytes leftover after parsing attributes in process `syz.1.68'.
[   66.030015][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'.
[   66.057445][ T6120] tipc: Started in network mode
[   66.059814][ T6120] tipc: Node identity 46eff7f49de4, cluster identity 4711
[   66.076378][ T6120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.090209][ T6120] syzkaller0: entered promiscuous mode
[   66.094959][ T6120] syzkaller0: entered allmulticast mode
[   66.171181][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[   66.217023][ T6128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.76'.
[   66.222659][ T6119] tipc: Resetting bearer <eth:syzkaller0>
[   66.255116][ T6119] tipc: Disabling bearer <eth:syzkaller0>
[   66.365152][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.78'.
[   66.729253][ T6173] blkio.reset_stats is deprecated
[   66.770717][ T5837] Bluetooth: hci2: command 0x040f tx timeout
[   66.883623][ T6189] netlink: 252 bytes leftover after parsing attributes in process `syz.1.91'.
[   66.894134][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   66.959879][ T6194] netlink: 252 bytes leftover after parsing attributes in process `syz.1.91'.
[   67.052830][ T6195] pim6reg1: entered promiscuous mode
[   67.062783][ T6195] pim6reg1: entered allmulticast mode
[   70.856909][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.858997][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   81.095091][  T791] cfg80211: failed to load regulatory.db
[  101.666498][ T6282] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  101.721143][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  101.736450][ T6280] syzkaller0: entered promiscuous mode
[  101.738661][ T6280] syzkaller0: entered allmulticast mode
[  101.749197][ T6282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.93'.
[  101.942538][ T6294] netlink: 192 bytes leftover after parsing attributes in process `syz.0.97'.
[  102.468854][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.944564][ T6296] SET target dimension over the limit!
[  103.154202][ T6311] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  103.182017][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.205163][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.103'.
[  103.363138][ T6319] delete_channel: no stack
[  103.497265][ T6330] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.497589][ T6333] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[  103.533028][ T6333] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.582943][ T6333] veth3: entered promiscuous mode
[  103.586935][ T6333] bond4: (slave veth3): Enslaving as an active interface with a down link
[  103.606663][ T6333] erspan0: entered allmulticast mode
[  103.627898][ T6333] bond4: (slave erspan0): making interface the new active one
[  103.634262][ T6333] erspan0: entered promiscuous mode
[  103.638954][ T6333] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  103.664241][ T6338] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.675515][ T6338] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  103.685921][ T6338] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  103.724931][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[  103.750236][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[  103.760438][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'.
[  103.897012][ T6353] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.116'.
[  103.970848][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  104.138490][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'.
[  104.142566][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'.
[  104.297348][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'.
[  104.574236][ T6397] x_tables: duplicate underflow at hook 1
[  104.676523][ T6405] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[  104.679746][ T6405] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[  104.868084][ T6416] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.976409][ T6424] : entered promiscuous mode
[  105.174322][ T6445] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[  105.177554][ T6445] netlink: 'syz.0.134': attribute type 3 has an invalid length.
[  105.458456][ T6456] tipc: Trying to set illegal importance in message
[  105.462880][ T6457] tipc: Trying to set illegal importance in message
[  105.568289][ T6460] vlan2: entered promiscuous mode
[  105.570051][ T6460] bond0: entered promiscuous mode
[  105.571975][ T6460] bond_slave_0: entered promiscuous mode
[  105.573878][ T6460] bond_slave_1: entered promiscuous mode
[  105.575902][ T6460] team0: entered promiscuous mode
[  105.577978][ T6460] team_slave_0: entered promiscuous mode
[  105.582031][ T6460] team_slave_1: entered promiscuous mode
[  105.752964][ T6466] netlink: 'syz.2.141': attribute type 10 has an invalid length.
[  105.757142][ T6466] dummy0: entered promiscuous mode
[  105.768027][ T6466] bridge0: port 3(dummy0) entered blocking state
[  105.770944][ T6466] bridge0: port 3(dummy0) entered disabled state
[  105.773699][ T6466] dummy0: entered allmulticast mode
[  105.778558][ T6466] bridge0: port 3(dummy0) entered blocking state
[  105.782211][ T6466] bridge0: port 3(dummy0) entered forwarding state
[  105.828312][ T6470] netlink: 'syz.1.143': attribute type 4 has an invalid length.
[  105.847964][ T6470] syzkaller1: tun_chr_ioctl cmd 1074025672
[  105.849865][ T6470] syzkaller1: ignored: set checksum enabled
[  105.852398][ T6470] netlink: 'syz.1.143': attribute type 4 has an invalid length.
[  106.128987][ T6494] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  106.507642][ T6511] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.788934][ T6527] netlink: 'syz.1.161': attribute type 23 has an invalid length.
[  106.797646][ T6527] __nla_validate_parse: 10 callbacks suppressed
[  106.797664][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[  106.889242][ T6534] 8021q: adding VLAN 0 to HW filter on device bond7
[  107.038834][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'.
[  107.082751][ T6553] bridge1: entered promiscuous mode
[  107.319675][ T6578] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[  107.322699][ T6578] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.175'.
[  107.388604][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[  107.468546][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'.
[  107.472331][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'.
[  107.541914][ T6602] syz_tun: entered allmulticast mode
[  107.580042][ T6602] syz_tun: left allmulticast mode
[  107.595512][ T6608] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  107.615360][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'.
[  107.718312][ T6620] Bluetooth: MGMT ver 1.23
[  107.718821][ T6617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'.
[  107.724496][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'.
[  107.743339][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'.
[  107.836549][ T6628] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.945368][ T6638] warning: `syz.2.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.096654][ T6648] xt_cgroup: path and classid specified
[  108.114742][ T6650] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.306457][ T6662] syzkaller0: entered promiscuous mode
[  108.308178][ T6662] syzkaller0: entered allmulticast mode
[  108.397625][ T6669] ip6tnl1: entered promiscuous mode
[  108.400086][ T6669] ip6tnl1: entered allmulticast mode
[  108.407973][ T6669] team0: Device ip6tnl1 is of different type
[  108.442488][ T6671] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.517737][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.522149][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.547865][ T6681] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  108.553460][ T6681] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  108.590239][ T6685] validate_nla: 2 callbacks suppressed
[  108.590270][ T6685] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[  108.595441][ T6685] netlink: 'syz.1.210': attribute type 2 has an invalid length.
[  108.733916][ T6696] 8021q: adding VLAN 0 to HW filter on device bond9
[  108.856936][ T6705] netlink: 'syz.1.217': attribute type 4 has an invalid length.
[  108.882219][ T6705] : renamed from bond0 (while UP)
[  108.917576][ T6705] syz.1.217 (6705) used greatest stack depth: 19040 bytes left
[  109.188910][ T6729] ipt_ECN: cannot use operation on non-tcp rule
[  109.194270][   T10] hid-generic 0005:15C2:0007.0001: collection stack underflow
[  109.199191][   T10] hid-generic 0005:15C2:0007.0001: item 0 0 0 12 parsing failed
[  109.221254][   T10] hid-generic 0005:15C2:0007.0001: probe with driver hid-generic failed with error -22
[  109.501996][ T6756] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.666569][ T6766] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[  109.674694][ T6766] dvmrp0: entered allmulticast mode
[  109.905661][ T6779] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.979558][ T6786] xt_TCPMSS: Only works on TCP SYN packets
[  110.013524][ T6786] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.048839][ T6790] veth2: entered allmulticast mode
[  110.073786][ T6793] syzkaller0: entered promiscuous mode
[  110.076019][ T6793] syzkaller0: entered allmulticast mode
[  110.089758][ T6793] x_tables: duplicate underflow at hook 4
[  110.103776][ T6793] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.107407][ T6793] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.110940][ T6793] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.114381][ T6793] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.312213][ T6804] netlink: 'syz.2.244': attribute type 3 has an invalid length.
[  110.514089][ T6821] netlink: 'syz.1.249': attribute type 2 has an invalid length.
[  110.753839][ T6842] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  111.645229][ T6845] bond6: entered promiscuous mode
[  111.647540][ T6845] 8021q: adding VLAN 0 to HW filter on device bond6
[  111.714260][ T6845] bond6 (unregistering): Released all slaves
[  111.827746][ T6852] netlink: 'syz.2.256': attribute type 32 has an invalid length.
[  111.834828][ T6852] __nla_validate_parse: 13 callbacks suppressed
[  111.834839][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'.
[  111.841676][ T6852] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  111.905787][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.943501][ T6863] netlink: 128 bytes leftover after parsing attributes in process `syz.0.261'.
[  111.984439][ T6871] netlink: 'syz.0.263': attribute type 27 has an invalid length.
[  112.090237][ T6884] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  112.094699][ T6881] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.135676][ T6889] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  112.237760][ T6894] batman_adv: batadv0: Adding interface: gretap1
[  112.240643][ T6894] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.255415][ T6894] batman_adv: batadv0: Interface activated: gretap1
[  112.328672][ T6903] 8021q: adding VLAN 0 to HW filter on device bond10
[  112.596030][ T6922] netlink: 'syz.1.281': attribute type 4 has an invalid length.
[  112.606007][ T6922] dvmrp1: entered allmulticast mode
[  112.609279][ T6922] dvmrp1: left allmulticast mode
[  112.698008][ T6925] netlink: 'syz.2.283': attribute type 83 has an invalid length.
[  112.704024][   T10] IPVS: starting estimator thread 0...
[  112.801973][ T6929] IPVS: using max 62 ests per chain, 148800 per kthread
[  112.906396][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[  113.007313][ T6940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.286'.
[  113.325980][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'.
[  113.329382][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'.
[  113.462863][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[  113.468165][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'.
[  113.475144][ T6966] tipc: Failed to remove unknown binding: 66,1,1/0:3807225160/3807225162
[  113.478182][ T6966] tipc: Failed to remove unknown binding: 66,1,1/0:3807225160/3807225162
[  113.584809][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.296'.
[  113.595590][ T6975] netlink: 184 bytes leftover after parsing attributes in process `syz.2.298'.
[  113.687446][ T6972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.689981][ T6972] IPv6: NLM_F_CREATE should be set when creating new route
[  113.692245][ T6972] IPv6: NLM_F_CREATE should be set when creating new route
[  113.876192][ T7005] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  114.117771][ T7033] validate_nla: 1 callbacks suppressed
[  114.117783][ T7033] netlink: 'syz.2.311': attribute type 10 has an invalid length.
[  114.126768][ T7033] bridge0: port 4(team0) entered blocking state
[  114.128791][ T7033] bridge0: port 4(team0) entered disabled state
[  114.131025][ T7033] team0: entered allmulticast mode
[  114.132640][ T7033] team_slave_0: entered allmulticast mode
[  114.134842][ T7033] team_slave_1: entered allmulticast mode
[  114.137944][ T7033] team0: entered promiscuous mode
[  114.139511][ T7033] team_slave_0: entered promiscuous mode
[  114.143378][ T7033] team_slave_1: entered promiscuous mode
[  114.146603][ T7033] bridge0: port 4(team0) entered blocking state
[  114.148613][ T7033] bridge0: port 4(team0) entered forwarding state
[  114.260115][ T7041] x_tables: duplicate underflow at hook 1
[  114.266042][ T7041] gretap2: entered allmulticast mode
[  114.386026][ T7048] netlink: 'syz.0.317': attribute type 10 has an invalid length.
[  114.398071][ T7048] veth0_vlan: left promiscuous mode
[  114.403900][ T7048] veth0_vlan: entered promiscuous mode
[  114.409572][ T7048] team0: Device veth0_vlan failed to register rx_handler
[  114.577002][ T7056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  114.581911][ T7056] gretap3: entered promiscuous mode
[  114.584102][ T7056] gretap3: entered allmulticast mode
[  114.758214][ T7075] @: renamed from veth0_vlan (while UP)
[  114.800626][   T13] erspan0: left promiscuous mode
[  115.052862][ T7101] pim6reg1: entered promiscuous mode
[  115.054617][ T7101] pim6reg1: entered allmulticast mode
[  115.058414][ T7101] netlink: 'syz.0.332': attribute type 1 has an invalid length.
[  115.124580][ T7106] gretap1: entered promiscuous mode
[  115.241738][ T7115] xt_bpf: check failed: parse error
[  115.253993][ T7112] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.439769][ T7127] syzkaller0: mtu greater than device maximum
[  115.577770][ T7131] tipc: Started in network mode
[  115.579831][ T7131] tipc: Node identity 4, cluster identity 4711
[  115.583783][ T7131] tipc: Node number set to 4
[  115.625363][ T7135] 8021q: adding VLAN 0 to HW filter on device bond11
[  115.651244][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.132206][ T7158] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.587283][ T7167] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.684828][ T7178] @: renamed from bond_slave_0 (while UP)
[  116.815454][ T7190] 8021q: adding VLAN 0 to HW filter on device bond7
[  116.862328][ T7193] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  116.964706][ T7200] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[  116.971858][ T7200] __nla_validate_parse: 15 callbacks suppressed
[  116.971873][ T7200] netlink: 144 bytes leftover after parsing attributes in process `syz.0.364'.
[  116.977622][ T7200] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[  116.981311][ T7200] netlink: 76 bytes leftover after parsing attributes in process `syz.0.364'.
[  117.100847][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  117.201834][ T7210] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[  117.262142][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[  117.265281][ T7210] 8021q: adding VLAN 0 to HW filter on device bond8
[  117.279297][ T7214] bond8: (slave gretap1): making interface the new active one
[  117.284279][ T7214] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  117.374805][ T7221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.373'.
[  117.391179][ T7221] netlink: 'syz.2.373': attribute type 6 has an invalid length.
[  117.429812][ T7226] No such timeout policy "syz0"
[  117.552614][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[  117.567742][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[  117.751242][ T7243] 8021q: adding VLAN 0 to HW filter on device bond7
[  117.913117][ T7257] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  117.955830][ T7259] Cannot find set identified by id 1 to match
[  117.965116][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[  117.967839][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[  117.972859][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[  118.180930][ T7271] netlink: 'syz.0.391': attribute type 5 has an invalid length.
[  118.507475][   T47] hid-generic 0005:07C0:0007.0002: collection stack underflow
[  118.509726][   T47] hid-generic 0005:07C0:0007.0002: item 0 0 0 12 parsing failed
[  118.513916][   T47] hid-generic 0005:07C0:0007.0002: probe with driver hid-generic failed with error -22
[  118.592426][ T7310] 8021q: adding VLAN 0 to HW filter on device bond8
[  118.850979][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.920394][ T7336] netlink: 'syz.2.406': attribute type 10 has an invalid length.
[  118.936145][ T7336] batman_adv: batadv0: Adding interface: netdevsim0
[  118.938671][ T7336] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.951078][ T7336] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  118.979282][ T7341] 8021q: adding VLAN 0 to HW filter on device bond9
[  119.009660][ T7344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.012873][ T7344] syzkaller0: entered promiscuous mode
[  119.015139][ T7344] syzkaller0: entered allmulticast mode
[  119.040164][ T7344] tipc: Resetting bearer <eth:syzkaller0>
[  119.049922][ T7343] tipc: Resetting bearer <eth:syzkaller0>
[  119.065145][ T7343] tipc: Disabling bearer <eth:syzkaller0>
[  119.306852][ T7360] netlink: 'syz.0.413': attribute type 5 has an invalid length.
[  119.320376][ T7360] ip6erspan0: entered allmulticast mode
[  119.429738][ T7364] 8021q: adding VLAN 0 to HW filter on device bond10
[  119.592522][ T7375] netlink: 'syz.0.418': attribute type 12 has an invalid length.
[  120.161410][ T7394] 8021q: adding VLAN 0 to HW filter on device bond9
[  120.706660][ T7426] syzkaller0: entered promiscuous mode
[  120.708521][ T7426] syzkaller0: entered allmulticast mode
[  120.732123][ T7429] netlink: 'syz.0.433': attribute type 29 has an invalid length.
[  120.756046][ T7429] netlink: 'syz.0.433': attribute type 29 has an invalid length.
[  120.887730][ T7437] xt_time: invalid argument - start or stop time greater than 23:59:59
[  120.977721][ T7431] infiniband syz2: set active
[  120.980728][ T7431] infiniband syz2: added bond_slave_1
[  120.985694][ T7441] openvswitch: netlink: Flow actions attr not present in new flow.
[  121.025387][ T7431] RDS/IB: syz2: added
[  121.027549][ T7431] smc: adding ib device syz2 with port count 1
[  121.029865][ T7431] smc:    ib device syz2 port 1 has pnetid 
[  121.634600][ T7464] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  121.664000][ T7464] netlink: 'syz.0.446': attribute type 2 has an invalid length.
[  121.684666][ T7464] bridge_slave_0: left allmulticast mode
[  121.687328][ T7464] bridge_slave_0: left promiscuous mode
[  121.690847][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.698918][ T7464] bridge_slave_1: left allmulticast mode
[  121.703586][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.706436][ T7464] bridge_slave_1: left promiscuous mode
[  121.708371][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.722731][ T7464] bond0: (slave bond_slave_0): Releasing backup interface
[  121.727957][ T7464] bond0: (slave bond_slave_1): Releasing backup interface
[  121.731530][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.747861][ T7464] team0: Port device team_slave_0 removed
[  121.757505][ T7464] team0: Port device team_slave_1 removed
[  121.762435][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.765402][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.771008][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.774038][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.785984][ T7472] netlink: 'syz.0.446': attribute type 10 has an invalid length.
[  121.795566][ T7464] batman_adv: batadv0: Interface deactivated: gretap1
[  121.797934][ T7464] batman_adv: batadv0: Removing interface: gretap1
[  121.820892][ T7471] bridge0: port 4(team0) entered disabled state
[  121.823760][ T7471] bridge0: port 3(dummy0) entered disabled state
[  121.826609][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.829654][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.846953][ T7472] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  121.857721][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.866245][ T7472] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  121.871341][   T10] syz2: Port: 1 Link DOWN
[  121.896499][ T7464] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  121.909735][ T7464] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  122.030713][ T7476] __nla_validate_parse: 61 callbacks suppressed
[  122.030725][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[  122.035711][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[  122.092502][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  122.096052][ T7481] ip6gretap0: mtu less than device minimum
[  122.222447][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'.
[  122.321335][ T7494] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[  122.324018][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'.
[  122.402279][ T7502] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.545803][ T7517] gtp0: entered promiscuous mode
[  122.553064][ T7517] gtp0: entered allmulticast mode
[  122.642619][ T7528] 8021q: adding VLAN 0 to HW filter on device bond11
[  122.898088][ T7565] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  122.915257][ T7564] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  122.926746][ T7568] netlink: 88 bytes leftover after parsing attributes in process `syz.1.478'.
[  123.001611][ T7573] netlink: 'syz.2.480': attribute type 1 has an invalid length.
[  123.063039][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.111388][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'.
[  123.117420][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[  123.251257][ T5837] Bluetooth: hci2: command 0x040f tx timeout
[  123.337774][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'.
[  123.394627][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'.
[  123.402563][ T7604] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  123.407217][ T7604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.367678][ T7690] validate_nla: 6 callbacks suppressed
[  124.367689][ T7690] netlink: 'syz.2.511': attribute type 21 has an invalid length.
[  124.381334][ T7690] netlink: 'syz.2.511': attribute type 22 has an invalid length.
[  124.386283][ T7690] netlink: 'syz.2.511': attribute type 23 has an invalid length.
[  124.462892][ T7696] 8021q: adding VLAN 0 to HW filter on device bond12
[  124.682193][ T7704] "syz.2.515" (7704) uses obsolete ecb(arc4) skcipher
[  124.693777][ T7714] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[  125.221434][ T7744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.581034][    C0] vcan0: j1939_tp_txtimer: 0xffff88803d2a5800: tx aborted with unknown reason: -2
[  125.585041][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803d2a4000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  125.592252][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803d2a5800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  126.115997][ T7766] 8021q: adding VLAN 0 to HW filter on device bond11
[  126.344036][ T7776] xt_HMARK: spi-set and port-set can't be combined
[  126.643768][ T7794] xt_TPROXY: Can be used only with -p tcp or -p udp
[  126.819844][ T7812] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  127.687422][ T7821] netlink: 'syz.1.551': attribute type 6 has an invalid length.
[  127.696645][ T7821] __nla_validate_parse: 13 callbacks suppressed
[  127.696662][ T7821] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.551'.
[  127.844576][ T7829] veth0_to_bridge: mtu less than device minimum
[  127.948352][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  128.130084][ T7846] 8021q: adding VLAN 0 to HW filter on device bond12
[  128.254011][ T7866] netlink: 256 bytes leftover after parsing attributes in process `syz.1.564'.
[  128.412519][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'.
[  128.423672][ T7876] netlink: 'syz.1.566': attribute type 2 has an invalid length.
[  128.426725][ T7876] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[  128.438089][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'.
[  128.488564][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  128.566239][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[  128.596746][ T7888] 8021q: adding VLAN 0 to HW filter on device bond14
[  129.133461][ T7912] 8021q: adding VLAN 0 to HW filter on device bond13
[  129.315623][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'.
[  129.321270][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'.
[  129.325280][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'.
[  129.530397][ T7933] netlink: 'syz.0.587': attribute type 29 has an invalid length.
[  129.682582][ T7942] 8021q: adding VLAN 0 to HW filter on device bond12
[  129.957095][ T7950] netlink: 'syz.0.592': attribute type 11 has an invalid length.
[  130.047683][ T7954] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  130.564977][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.588286][ T7970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.712560][ T7970] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.715491][ T7970] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.718302][ T7970] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.722595][ T7970] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.797173][ T7970] gtp0: left promiscuous mode
[  130.798680][ T7970] gtp0: left allmulticast mode
[  130.823453][ T7973] tap0: tun_chr_ioctl cmd 1074025676
[  130.825154][ T7973] tap0: owner set to 0
[  130.928584][ T7977] 8021q: adding VLAN 0 to HW filter on device bond15
[  131.221456][ T8005] 8021q: adding VLAN 0 to HW filter on device bond14
[  131.467927][ T8033] netlink: 'syz.1.618': attribute type 4 has an invalid length.
[  131.820760][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  131.822780][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  132.294282][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.422834][ T8044] 8021q: adding VLAN 0 to HW filter on device bond16
[  132.599061][ T8063] ipt_ECN: cannot use operation on non-tcp rule
[  133.413344][ T8104] 8021q: adding VLAN 0 to HW filter on device bond13
[  133.453503][ T8107] __nla_validate_parse: 80 callbacks suppressed
[  133.453519][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'.
[  133.938710][ T8125] xt_CT: No such helper "pptp"
[  133.948502][ T8128] 8021q: adding VLAN 0 to HW filter on device bond17
[  134.069627][ T8140] bond14 (unregistering): Released all slaves
[  134.225286][ T8152] netlink: 'syz.0.646': attribute type 1 has an invalid length.
[  134.361052][ T8154] 8021q: adding VLAN 0 to HW filter on device bond14
[  134.370129][ T8157] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  134.372913][ T8157] netlink: 184 bytes leftover after parsing attributes in process `syz.1.648'.
[  134.375736][ T8157] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  134.614774][ T8176] netlink: 'syz.0.651': attribute type 2 has an invalid length.
[  134.626745][ T8176] netlink: 240 bytes leftover after parsing attributes in process `syz.0.651'.
[  134.762405][ T8189] 8021q: adding VLAN 0 to HW filter on device bond15
[  134.842109][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.659'.
[  134.845684][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.659'.
[  134.850824][ T8194] netlink: 52 bytes leftover after parsing attributes in process `syz.1.659'.
[  135.064995][ T8214] delete_channel: no stack
[  135.067525][ T8214] delete_channel: no stack
[  135.221859][ T8227] vlan2: entered allmulticast mode
[  135.223783][ T8227] dummy0: entered allmulticast mode
[  135.540868][ T8253] tc_dump_action: action bad kind
[  135.560089][ T8251] 8021q: adding VLAN 0 to HW filter on device bond18
[  135.599034][ T8263] bridge_slave_0: invalid flags given to default FDB implementation
[  135.743725][ T8273] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  135.829726][ T8280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'.
[  135.912695][ T8285] netlink: ct family unspecified
[  135.914902][ T8285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.844904][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  136.923471][ T8316] netlink: 'syz.1.697': attribute type 3 has an invalid length.
[  136.926156][ T8316] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.697'.
[  137.768503][ T8329] netlink: 'syz.0.701': attribute type 10 has an invalid length.
[  137.783505][ T8329] veth0_vlan: left promiscuous mode
[  137.787072][ T8329] veth0_vlan: entered promiscuous mode
[  137.793792][ T8329] team0: Device veth0_vlan failed to register rx_handler
[  137.899043][ T8347] netlink: 165 bytes leftover after parsing attributes in process `syz.0.708'.
[  137.933282][ T8353] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[  138.865715][ T8454] netlink: 'syz.0.721': attribute type 21 has an invalid length.
[  138.868482][ T8454] __nla_validate_parse: 34 callbacks suppressed
[  138.868491][ T8454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.721'.
[  138.904219][ T8453] 8021q: adding VLAN 0 to HW filter on device bond19
[  138.928897][ T8457] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[  138.934436][ T8457] netlink: 184 bytes leftover after parsing attributes in process `syz.1.722'.
[  138.937307][ T8457] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[  138.978060][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'.
[  139.001622][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  139.027081][ T8468] netlink: 'syz.0.726': attribute type 1 has an invalid length.
[  139.049269][ T8468] 8021q: adding VLAN 0 to HW filter on device bond15
[  139.059641][ T8471] syzkaller1: entered promiscuous mode
[  139.066866][ T8471] syzkaller1: entered allmulticast mode
[  139.160292][ T8482] 8021q: adding VLAN 0 to HW filter on device bond20
[  139.218390][ T8489] netlink: 68 bytes leftover after parsing attributes in process `syz.1.732'.
[  139.221776][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'.
[  139.226398][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.732'.
[  139.245427][ T8489] netlink: 256 bytes leftover after parsing attributes in process `syz.1.732'.
[  139.305809][ T8498] openvswitch: netlink: Flow key attribute not present in set flow.
[  139.388664][ T8510] netlink: 'syz.0.740': attribute type 2 has an invalid length.
[  139.416931][ T8514] 8021q: adding VLAN 0 to HW filter on device bond21
[  139.428294][ T8519] netlink: 44 bytes leftover after parsing attributes in process `syz.1.742'.
[  139.433450][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'.
[  139.493920][ T8525] netlink: 'syz.0.745': attribute type 5 has an invalid length.
[  139.611296][ T8540] 8021q: adding VLAN 0 to HW filter on device bond16
[  140.506014][ T8561] 8021q: adding VLAN 0 to HW filter on device bond22
[  140.541961][ T8564] netlink: 'syz.2.760': attribute type 3 has an invalid length.
[  140.753104][ T8564] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  140.755753][ T8564] nbd: error processing sock list
[  140.758939][ T8564] block nbd0: shutting down sockets
[  140.770975][ T8425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.775006][ T8425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.804931][ T8577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.951952][ T8588] 8021q: adding VLAN 0 to HW filter on device bond17
[  141.248668][ T8609] tipc: Started in network mode
[  141.252362][ T8609] tipc: Node identity 2670b2e901e4, cluster identity 4711
[  141.255301][ T8609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.286889][ T8615] 8021q: adding VLAN 0 to HW filter on device bond23
[  141.388260][ T8622] ieee802154 phy0 wpan0: encryption failed: -90
[  141.419712][ T8627] : entered promiscuous mode
[  141.556560][ T8642] 8021q: adding VLAN 0 to HW filter on device bond18
[  141.918974][ T8663] bridge6: the hash_elasticity option has been deprecated and is always 16
[  142.012163][ T8667] netlink: 'syz.0.791': attribute type 6 has an invalid length.
[  142.065603][ T8669] 8021q: adding VLAN 0 to HW filter on device bond19
[  142.108181][ T8672] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  142.371633][ T5882] tipc: Node number set to 664056553
[  171.595399][ T8690] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20002
[  171.636985][ T8696] 8021q: adding VLAN 0 to HW filter on device bond20
[  171.690147][ T8702] __nla_validate_parse: 13 callbacks suppressed
[  171.690159][ T8702] netlink: 404 bytes leftover after parsing attributes in process `syz.0.801'.
[  171.726552][ T8700] netlink: 404 bytes leftover after parsing attributes in process `syz.0.801'.
[  171.772397][ T8710] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  172.197859][ T8722] tipc: Invalid UDP bearer configuration
[  172.197910][ T8722] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.267394][ T8724] 8021q: adding VLAN 0 to HW filter on device bond16
[  172.313834][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'.
[  172.466337][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'.
[  172.504105][ T8733] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  172.507506][ T8733] netlink: 224 bytes leftover after parsing attributes in process `syz.1.811'.
[  172.588188][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  172.614995][ T8745] tipc: Failed to remove unknown binding: 66,1,1/4:3025407992/3025407994
[  172.631348][ T8739] 8021q: adding VLAN 0 to HW filter on device bond25
[  172.634336][ T8743] tc_dump_action: action bad kind
[  172.669429][ T8747] tipc: Failed to remove unknown binding: 66,1,1/4:3025407992/3025407994
[  172.676298][ T8747] tipc: Failed to remove unknown binding: 66,1,1/4:3025407992/3025407994
[  172.687333][ T8749] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  172.717948][ T8751] No such timeout policy "syz1"
[  172.725571][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'.
[  172.828442][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'.
[  172.861498][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[  173.260790][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.050317][ T8807] sch_fq: defrate 0 ignored.
[  174.349010][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[  174.359625][ T8820] netlink: 'syz.0.837': attribute type 16 has an invalid length.
[  174.715158][ T8844] 8021q: adding VLAN 0 to HW filter on device bond17
[  174.855803][ T8861] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[  174.858927][ T8862] xt_TCPMSS: Only works on TCP SYN packets
[  174.922473][ T8870] 8021q: adding VLAN 0 to HW filter on device bond21
[  175.251762][ T8899] 8021q: adding VLAN 0 to HW filter on device bond22
[  175.339797][   T33] audit: type=1800 audit(1752209027.783:2): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.866" name="memory.events" dev="tmpfs" ino=1668 res=0 errno=0
[  175.637346][ T8911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.303038][ T8944] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[  177.439685][ T8969] delete_channel: no stack
[  177.553064][ T8982] 8021q: adding VLAN 0 to HW filter on device bond23
[  177.556629][ T8977] netlink: 'syz.1.886': attribute type 5 has an invalid length.
[  177.589456][ T8986] lo speed is unknown, defaulting to 1000
[  177.606924][ T8986] lo speed is unknown, defaulting to 1000
[  177.609268][ T8986] lo speed is unknown, defaulting to 1000
[  177.768829][ T8986] infiniband syz0: set active
[  177.771211][ T8986] infiniband syz0: added lo
[  177.775549][    T9] lo speed is unknown, defaulting to 1000
[  177.799195][ T8986] RDS/IB: syz0: added
[  177.801009][ T8986] smc: adding ib device syz0 with port count 1
[  177.803163][ T8986] smc:    ib device syz0 port 1 has pnetid 
[  177.809477][    T9] lo speed is unknown, defaulting to 1000
[  177.814438][ T8986] lo speed is unknown, defaulting to 1000
[  177.952676][ T8986] lo speed is unknown, defaulting to 1000
[  178.075252][ T8986] lo speed is unknown, defaulting to 1000
[  178.536266][ T9016] 8021q: adding VLAN 0 to HW filter on device bond18
[  178.689362][ T9022] __nla_validate_parse: 12 callbacks suppressed
[  178.689381][ T9022] netlink: 252 bytes leftover after parsing attributes in process `syz.1.899'.
[  178.756648][ T9024] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  178.776310][ T9027] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  178.967188][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'.
[  178.972906][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  179.002725][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'.
[  179.005663][ T9049] netlink: 'syz.1.908': attribute type 14 has an invalid length.
[  179.008561][ T9049] netlink: 'syz.1.908': attribute type 13 has an invalid length.
[  179.199731][ T9069] SET target dimension over the limit!
[  179.244222][ T9077] netlink: 'syz.2.915': attribute type 9 has an invalid length.
[  179.267185][ T9081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.916'.
[  179.270999][ T9081] netlink: 37 bytes leftover after parsing attributes in process `syz.0.916'.
[  179.274529][ T9081] netlink: 37 bytes leftover after parsing attributes in process `syz.0.916'.
[  179.336126][ T9087] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  179.459625][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'.
[  179.471367][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'.
[  179.478379][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'.
[  179.967566][ T9129] 8021q: adding VLAN 0 to HW filter on device bond19
[  180.046326][ T9127] syzkaller1: entered promiscuous mode
[  180.048567][ T9127] syzkaller1: entered allmulticast mode
[  180.218211][ T9142] openvswitch: netlink: Message has 24 unknown bytes.
[  180.223870][ T9142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.450756][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  180.452969][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  181.127344][ T9174] tipc: Failed to remove unknown binding: 66,1,1/664056553:1583753092/1583753094
[  181.136409][ T9174] tipc: Failed to remove unknown binding: 66,1,1/664056553:1583753092/1583753094
[  181.140176][ T9174] tipc: Failed to remove unknown binding: 66,1,1/664056553:1583753092/1583753094
[  181.314743][ T9181] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  181.551256][ T9191] 8021q: adding VLAN 0 to HW filter on device bond24
[  182.430394][ T9213] 8021q: adding VLAN 0 to HW filter on device bond20
[  182.738399][ T9229] 8021q: adding VLAN 0 to HW filter on device bond21
[  182.761804][ T9233] netlink: 'syz.0.966': attribute type 7 has an invalid length.
[  183.187197][ T9260] netlink: 'syz.2.974': attribute type 4 has an invalid length.
[  183.192085][ T9260] : renamed from bond0
[  183.218368][ T9260] netlink: 'syz.2.974': attribute type 14 has an invalid length.
[  183.326401][ T9273] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  183.385123][ T9276] gtp0: entered promiscuous mode
[  183.463222][ T9284] netlink: 'syz.2.981': attribute type 12 has an invalid length.
[  183.478167][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.481562][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.493510][ T9284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.641510][   T33] audit: type=1800 audit(1752209036.083:3): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.985" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1920 res=0 errno=0
[  183.655985][   T33] audit: type=1804 audit(1752209036.103:4): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.985" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1920 res=1 errno=0
[  183.805790][ T9305] __nla_validate_parse: 17 callbacks suppressed
[  183.805809][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'.
[  183.945461][ T9319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'.
[  183.999655][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'.
[  184.011926][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'.
[  184.020663][ T9327] netlink: 'syz.1.996': attribute type 1 has an invalid length.
[  184.032054][ T9327] netlink: 'syz.1.996': attribute type 2 has an invalid length.
[  184.034582][ T9327] netlink: 80 bytes leftover after parsing attributes in process `syz.1.996'.
[  184.054768][   T33] audit: type=1800 audit(1752209036.503:5): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.996" name="memory.events" dev="tmpfs" ino=1953 res=0 errno=0
[  184.075479][ T9327] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20003
[  184.078474][ T9327] netlink: 4092 bytes leftover after parsing attributes in process `syz.1.996'.
[  184.163832][ T9342] sctp: [Deprecated]: syz.1.1003 (pid 9342) Use of int in max_burst socket option deprecated.
[  184.163832][ T9342] Use struct sctp_assoc_value instead
[  184.177232][ T9346] netlink: 'syz.0.1005': attribute type 1 has an invalid length.
[  184.181761][ T9347] netlink: 'syz.0.1005': attribute type 1 has an invalid length.
[  184.293033][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'.
[  184.342688][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1013'.
[  184.342689][ T9363] macvlan1: entered promiscuous mode
[  184.348286][ T9363] ipvlan0: entered promiscuous mode
[  184.350701][ T9363] ipvlan0: left promiscuous mode
[  184.352609][ T9363] macvlan1: left promiscuous mode
[  184.423360][ T9366] netlink: 'syz.2.1013': attribute type 13 has an invalid length.
[  184.426262][ T9366] netlink: 'syz.2.1013': attribute type 17 has an invalid length.
[  184.452098][ T9366] erspan0: left allmulticast mode
[  184.486720][ T9366] bridge0: port 4(team0) entered blocking state
[  184.489215][ T9366] bridge0: port 4(team0) entered listening state
[  184.491965][ T9366] bridge0: port 3(dummy0) entered blocking state
[  184.494478][ T9366] bridge0: port 3(dummy0) entered listening state
[  184.497122][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.499882][ T9366] bridge0: port 2(bridge_slave_1) entered listening state
[  184.502806][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.505626][ T9366] bridge0: port 1(bridge_slave_0) entered listening state
[  184.531970][ T9366] 8021q: adding VLAN 0 to HW filter on device 
[  184.543278][ T9366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.553438][ T9369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.559547][    T9] lo speed is unknown, defaulting to 1000
[  184.564342][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  184.567702][ T9365] lo speed is unknown, defaulting to 1000
[  186.027977][ T9406] tipc: MTU too low for tipc bearer
[  186.033851][ T9406] netlink: 624 bytes leftover after parsing attributes in process `syz.0.1024'.
[  186.039818][ T9406] tipc: MTU too low for tipc bearer
[  186.136013][ T9420] tun0: tun_chr_ioctl cmd 2148553947
[  186.139400][ T9420] xt_recent: Unsupported userspace flags (00000048)
[  186.145338][ T9420] tun0: tun_chr_ioctl cmd 35111
[  186.476930][ T9449] xt_TPROXY: Can be used only with -p tcp or -p udp
[  187.330323][ T9502] openvswitch: netlink: Key 6 has unexpected len 294 expected 2
[  187.482701][ T9514] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  187.485776][ T9514] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  187.777835][ T9538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.995553][ T9556] veth0_to_hsr: mtu less than device minimum
[  188.147951][    T9] IPVS: starting estimator thread 0...
[  188.230229][ T9579] validate_nla: 4 callbacks suppressed
[  188.230249][ T9579] netlink: 'syz.0.1077': attribute type 58 has an invalid length.
[  188.242994][ T9581] netlink: 'syz.0.1077': attribute type 58 has an invalid length.
[  188.253050][ T9574] IPVS: using max 62 ests per chain, 148800 per kthread
[  188.379188][ T9590] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  189.007419][ T9638] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  189.085779][ T9649] __nla_validate_parse: 21 callbacks suppressed
[  189.085792][ T9649] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1103'.
[  189.275064][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  189.283650][ T9674] xt_connbytes: Forcing CT accounting to be enabled
[  189.308163][ T9674] x_tables: ip_tables: ah match: only valid for protocol 51
[  189.338587][ T9674] x_tables: ip_tables: ah match: only valid for protocol 51
[  189.356255][ T9683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  189.488235][ T9694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1115'.
[  189.495232][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1116'.
[  189.533168][ T9687] bridge0: port 4(team0) entered disabled state
[  189.535377][ T9687] bridge0: port 3(dummy0) entered disabled state
[  189.537386][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.539720][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.661572][ T9687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.677337][ T9687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.920022][ T9687] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.923822][ T9687] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.927499][ T9687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.931518][ T9687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.981720][    T9] lo speed is unknown, defaulting to 1000
[  189.987391][    T9] syz0: Port: 1 Link DOWN
[  189.989795][    T9] lo speed is unknown, defaulting to 1000
[  190.143855][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'.
[  190.176139][ T9708] netlink: 'syz.1.1121': attribute type 1 has an invalid length.
[  190.326930][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'.
[  190.330169][ T9726] openvswitch: netlink: Flow key attr not present in new flow.
[  190.401465][ T9734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.404640][ T9734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.414713][ T9735] tipc: Can't bind to reserved service type 2
[  190.434097][ T9736] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1129'.
[  190.476029][ T9734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.480091][ T9734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.550317][ T9734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.553965][ T9734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.620057][ T9734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.623714][ T9734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.691063][ T9734] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.694362][ T9734] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.707548][ T9734] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.710150][ T9734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.720667][ T9734] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.723906][ T9734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.734626][ T9734] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.737201][ T9734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.805724][ T9750] netlink: 'syz.1.1135': attribute type 1 has an invalid length.
[  190.810091][ T9750] netlink: 'syz.1.1135': attribute type 10 has an invalid length.
[  190.893726][ T9757] 8021q: adding VLAN 0 to HW filter on device bond22
[  190.917255][ T9760] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  190.920424][ T9760] netlink: 'syz.0.1139': attribute type 2 has an invalid length.
[  190.980641][ T9764] ieee802154 phy0 wpan0: encryption failed: -22
[  190.990934][ T9764] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1141'.
[  190.994336][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'.
[  190.997675][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'.
[  191.192985][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.770073][ T9806] 8021q: adding VLAN 0 to HW filter on device bond26
[  191.868482][ T9813] netlink: 'syz.2.1156': attribute type 5 has an invalid length.
[  191.896028][ T9813] bridge2: entered promiscuous mode
[  191.898309][ T9813] bridge2: entered allmulticast mode
[  192.048934][ T9828] 8021q: adding VLAN 0 to HW filter on device bond25
[  192.291653][ T9862] netlink: 'syz.2.1169': attribute type 10 has an invalid length.
[  192.296270][ T9862] veth0_vlan: left promiscuous mode
[  192.304263][ T9862] veth0_vlan: entered promiscuous mode
[  192.308509][ T9862] team0: Device veth0_vlan failed to register rx_handler
[  192.344795][ T9864] 8021q: adding VLAN 0 to HW filter on device bond26
[  192.384331][ T9867] sctp: [Deprecated]: syz.2.1172 (pid 9867) Use of int in max_burst socket option.
[  192.384331][ T9867] Use struct sctp_assoc_value instead
[  192.483371][ T9876] lo speed is unknown, defaulting to 1000
[  192.493191][ T9876] lo speed is unknown, defaulting to 1000
[  192.497861][ T9876] lo speed is unknown, defaulting to 1000
[  192.505029][ T9876] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  192.508134][ T9879] netlink: 'syz.0.1176': attribute type 5 has an invalid length.
[  192.524686][ T9876] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  192.564947][ T9876] lo speed is unknown, defaulting to 1000
[  192.569115][ T9876] lo speed is unknown, defaulting to 1000
[  192.575617][ T9876] lo speed is unknown, defaulting to 1000
[  192.608317][ T9884] 8021q: adding VLAN 0 to HW filter on device bond27
[  192.953158][ T9911] ipvlan2: entered promiscuous mode
[  192.955738][ T9911] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  192.959040][ T9911] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  193.093176][ T9927] IPVS: Unknown mcast interface: vcan0
[  193.100051][ T9927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.105773][ T9927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.108609][ T9927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.111484][ T9927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.116204][ T9927] geneve0: entered promiscuous mode
[  193.118278][ T9927] team0: Port device geneve0 added
[  193.184010][ T9930] 8021q: adding VLAN 0 to HW filter on device bond28
[  193.744223][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.039245][ T9944] SET target dimension over the limit!
[  194.192490][ T9955] veth0: entered promiscuous mode
[  194.219014][ T9957] 8021q: adding VLAN 0 to HW filter on device bond29
[  194.226393][ T9954] veth0: left promiscuous mode
[  194.279460][ T9960] __nla_validate_parse: 23 callbacks suppressed
[  194.279480][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'.
[  194.292877][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'.
[  194.497518][ T9978] 8021q: adding VLAN 0 to HW filter on device bond23
[  194.683259][ T9989] netlink: 'syz.1.1207': attribute type 11 has an invalid length.
[  194.686544][ T9989] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1207'.
[  195.009756][ T9995] lo speed is unknown, defaulting to 1000
[  195.154123][ T9995] lo speed is unknown, defaulting to 1000
[  195.307882][T10000] 8021q: adding VLAN 0 to HW filter on device bond24
[  195.371273][T10006] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1212'.
[  195.432976][T10008] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000
[  195.535723][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'.
[  195.541370][T10011] smc: removing ib device syz0
[  196.239868][T10020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1215'.
[  196.306792][ T5837] Bluetooth: hci2: link tx timeout
[  196.309252][ T5837] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  196.313826][ T5837] Bluetooth: hci2: link tx timeout
[  196.315435][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.318065][ T5839] Bluetooth: hci2: link tx timeout
[  196.320109][ T5839] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  196.325465][ T5839] Bluetooth: hci2: link tx timeout
[  196.327197][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  196.346074][T10032] batadv1: entered promiscuous mode
[  196.398471][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1219'.
[  196.504623][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'.
[  196.512638][T10035] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  196.581061][T10039] 8021q: adding VLAN 0 to HW filter on device bond25
[  196.618565][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'.
[  196.623444][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'.
[  196.813072][T10058] Cannot find del_set index 4 as target
[  196.883881][T10063] 8021q: adding VLAN 0 to HW filter on device bond26
[  197.047241][T10087] bond0: entered promiscuous mode
[  197.052280][T10087] bond0: entered allmulticast mode
[  197.056551][T10087] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.114438][T10090] 8021q: adding VLAN 0 to HW filter on device bond27
[  197.166053][T10096] validate_nla: 3 callbacks suppressed
[  197.166072][T10096] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  197.199300][T10097] bond31: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  197.239554][T10104] netlink: 'syz.1.1241': attribute type 10 has an invalid length.
[  197.245111][T10104] team0: Device  is already an upper device of the team interface
[  197.498066][T10120] 8021q: adding VLAN 0 to HW filter on device bond27
[  197.755337][T10125] lo speed is unknown, defaulting to 1000
[  198.049053][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.068226][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.072008][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.075810][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.078809][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.233043][T10149] IPv6: sit1: Disabled Multicast RS
[  198.265083][T10139] lo speed is unknown, defaulting to 1000
[  198.370640][ T5834] Bluetooth: hci2: command 0x040f tx timeout
[  198.392059][T10157] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  198.395823][T10139] chnl_net:caif_netlink_parms(): no params data found
[  198.477463][T10139] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.479872][T10139] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.482279][T10139] bridge_slave_0: entered allmulticast mode
[  198.485474][T10139] bridge_slave_0: entered promiscuous mode
[  198.489778][T10139] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.493136][T10139] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.495442][T10139] bridge_slave_1: entered allmulticast mode
[  198.498863][T10139] bridge_slave_1: entered promiscuous mode
[  198.539559][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.546197][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.592603][T10139] team0: Port device team_slave_0 added
[  198.598294][T10139] team0: Port device team_slave_1 added
[  198.621471][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.623897][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.632676][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.639029][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.642357][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.652430][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.727550][T10139] hsr_slave_0: entered promiscuous mode
[  198.732132][T10139] hsr_slave_1: entered promiscuous mode
[  198.735188][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.737521][T10139] Cannot create hsr debugfs directory
[  199.058080][T10139] batman_adv: batadv0: Removing interface: netdevsim0
[  199.234264][T10195] 8021q: adding VLAN 0 to HW filter on device bond32
[  199.236924][T10139] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  199.252050][T10139] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.266423][T10195] bond32: (slave ip6gretap2): Enslaving as an active interface with an up link
[  199.269544][T10139] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  199.303060][T10200] 8021q: adding VLAN 0 to HW filter on device bond28
[  199.311989][T10139] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  199.326386][T10195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.371643][T10210] __nla_validate_parse: 6 callbacks suppressed
[  199.371655][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  199.376849][T10210] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1271'.
[  199.401344][T10211] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[  199.476502][T10139] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.495915][T10139] 8021q: adding VLAN 0 to HW filter on device team0
[  199.519594][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.522525][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.528618][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.531540][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.634389][T10227] 8021q: adding VLAN 0 to HW filter on device bond29
[  199.724162][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.757860][T10139] veth0_vlan: entered promiscuous mode
[  199.767445][T10139] veth1_vlan: entered promiscuous mode
[  199.780712][T10236] nbd1: detected capacity change from 0 to 63
[  199.786596][T10240] block nbd1: NBD_DISCONNECT
[  199.789773][T10240] block nbd1: Disconnected due to user request.
[  199.794140][T10240] block nbd1: shutting down sockets
[  199.807989][T10139] veth0_macvtap: entered promiscuous mode
[  199.817677][T10139] veth1_macvtap: entered promiscuous mode
[  199.855137][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.879687][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.886389][T10139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.889286][T10139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.897345][T10139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.900062][T10139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.990116][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.994169][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.021944][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.025664][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.157303][T10260] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  200.181097][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.274031][T10274] netlink: 'syz.1.1290': attribute type 12 has an invalid length.
[  200.281056][T10274] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1290'.
[  200.322069][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'.
[  200.399159][T10283] netlink: 'syz.0.1293': attribute type 30 has an invalid length.
[  200.450801][ T5834] Bluetooth: hci2: command 0x040f tx timeout
[  200.523447][T10292] netlink: 'syz.0.1295': attribute type 21 has an invalid length.
[  200.526518][T10292] netlink: 'syz.0.1295': attribute type 1 has an invalid length.
[  200.530270][T10292] xt_cgroup: path and classid specified
[  200.563939][T10294] wireguard: wg1: Could not create IPv4 socket
[  200.608175][T10296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1297'.
[  200.847193][T10315] netlink: 'syz.0.1301': attribute type 1 has an invalid length.
[  200.890209][T10315] bond34: (slave vxcan5): The slave device specified does not support setting the MAC address
[  200.897415][T10315] bond34: (slave vxcan5): Error -95 calling set_mac_address
[  200.932880][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.943423][T10317] gretap4: entered promiscuous mode
[  200.947158][T10317] bond34: (slave gretap4): making interface the new active one
[  200.951611][T10317] bond34: (slave gretap4): Enslaving as an active interface with an up link
[  201.576755][T10347] netlink: 'syz.1.1309': attribute type 1 has an invalid length.
[  201.617686][T10347] bond30: (slave gretap1): making interface the new active one
[  201.621805][T10347] bond30: (slave gretap1): Enslaving as an active interface with an up link
[  201.709407][T10352] 8021q: adding VLAN 0 to HW filter on device bond31
[  201.853736][ T5680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.996341][T10364] sock: sock_timestamping_bind_phc: sock not bind to device
[  202.060034][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1316'.
[  202.104702][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  202.199399][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.205864][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.210128][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.222960][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  202.227381][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  202.250898][T10371] 8021q: adding VLAN 0 to HW filter on device bond35
[  202.306533][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'.
[  202.308481][T10381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1321'.
[  202.326376][T10377] hsr_slave_0: left promiscuous mode
[  202.329227][T10377] hsr_slave_1: left promiscuous mode
[  202.461697][T10370] lo speed is unknown, defaulting to 1000
[  202.522963][T10388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.581344][T10378] lo speed is unknown, defaulting to 1000
[  202.606003][T10370] chnl_net:caif_netlink_parms(): no params data found
[  202.685767][T10370] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.686449][T10396] IPVS: length: 116 != 24
[  202.688124][T10370] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.693578][T10370] bridge_slave_0: entered allmulticast mode
[  202.696598][T10370] bridge_slave_0: entered promiscuous mode
[  202.700203][T10370] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.703971][T10370] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.706400][T10370] bridge_slave_1: entered allmulticast mode
[  202.710115][T10370] bridge_slave_1: entered promiscuous mode
[  202.736517][T10370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.743396][T10370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.770098][T10370] team0: Port device team_slave_0 added
[  202.792888][T10370] team0: Port device team_slave_1 added
[  202.813924][T10370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.816152][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.824228][T10370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.833060][T10370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.835237][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.851954][T10370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.897363][T10370] hsr_slave_0: entered promiscuous mode
[  202.900698][T10370] hsr_slave_1: entered promiscuous mode
[  203.136336][T10419] _Z`Ԁ@: entered promiscuous mode
[  203.314542][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1332'.
[  203.329975][T10430] netlink: 'syz.0.1331': attribute type 2 has an invalid length.
[  203.337814][T10430] : entered promiscuous mode
[  203.359707][T10433] netlink: 'syz.1.1333': attribute type 1 has an invalid length.
[  203.363297][T10433] ieee802154 phy0 wpan0: encryption failed: -90
[  203.379767][T10436] netlink: 'syz.0.1334': attribute type 30 has an invalid length.
[  203.506702][ T5680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.531890][T10450] netlink: 'syz.0.1336': attribute type 2 has an invalid length.
[  203.584750][T10449] 8021q: adding VLAN 0 to HW filter on device bond32
[  203.587251][T10449] bridge0: port 3(bond32) entered blocking state
[  203.589408][T10449] bridge0: port 3(bond32) entered disabled state
[  203.594318][T10449] bond32: entered allmulticast mode
[  203.599526][T10449] bond32: entered promiscuous mode
[  203.643850][ T5680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.715991][ T5680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.836264][ T5680] bridge_slave_1: left allmulticast mode
[  203.839086][ T5680] bridge_slave_1: left promiscuous mode
[  203.843679][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.847824][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.853800][ T5680] bridge_slave_0: left allmulticast mode
[  203.855691][ T5680] bridge_slave_0: left promiscuous mode
[  203.858233][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.175324][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.180123][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.184759][ T5680] bond0 (unregistering): Released all slaves
[  204.291180][ T5834] Bluetooth: hci0: command tx timeout
[  204.430847][T10464] netlink: 'syz.0.1341': attribute type 1 has an invalid length.
[  204.433341][T10464] __nla_validate_parse: 3 callbacks suppressed
[  204.433351][T10464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1341'.
[  204.438614][T10464] netlink: 'syz.0.1341': attribute type 1 has an invalid length.
[  204.586840][T10466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.589993][T10466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.593235][T10466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.596191][T10466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.642185][ T5680] hsr_slave_0: left promiscuous mode
[  204.645534][ T5680] hsr_slave_1: left promiscuous mode
[  204.647621][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.649935][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.653697][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.655907][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.685549][ T5680] veth1_macvtap: left promiscuous mode
[  204.687553][ T5680] veth0_macvtap: left promiscuous mode
[  204.689328][ T5680] veth1_vlan: left promiscuous mode
[  204.702156][ T5680] veth0_vlan: left promiscuous mode
[  205.028315][ T5680] team0 (unregistering): Port device team_slave_1 removed
[  205.054983][ T5680] team0 (unregistering): Port device team_slave_0 removed
[  205.376365][T10370] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  205.404958][T10370] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  205.411940][T10370] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  205.426349][T10370] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  205.463764][T10483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'.
[  205.636256][T10370] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.677506][T10496] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  205.679937][T10496] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1350'.
[  205.694604][T10370] 8021q: adding VLAN 0 to HW filter on device team0
[  205.714332][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.718021][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.733190][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.735464][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.866207][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1353'.
[  205.875543][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'.
[  205.971734][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.010687][T10370] veth0_vlan: entered promiscuous mode
[  206.016527][T10370] veth1_vlan: entered promiscuous mode
[  206.050917][T10370] veth0_macvtap: entered promiscuous mode
[  206.058250][T10370] veth1_macvtap: entered promiscuous mode
[  206.070197][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.080562][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.087049][T10370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.089886][T10370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.093702][T10370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.096684][T10370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.152098][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.154639][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.176392][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.179484][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.705192][T10521] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1356'.
[  206.709534][T10521] 8021q: VLANs not supported on sit0
[  206.748623][T10524] netlink: 'syz.1.1357': attribute type 11 has an invalid length.
[  206.795786][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'.
[  206.876951][T10534] netlink: 'syz.1.1361': attribute type 4 has an invalid length.
[  206.924631][T10540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1363'.
[  206.928891][T10537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.951213][T10540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1363'.
[  206.998365][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'.
[  207.864279][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.185804][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.190832][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.198116][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.203186][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.207198][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.422287][T10585] lo speed is unknown, defaulting to 1000
[  208.464597][T10596] netlink: 'syz.0.1378': attribute type 7 has an invalid length.
[  208.478587][T10596] : entered promiscuous mode
[  208.775244][T10585] chnl_net:caif_netlink_parms(): no params data found
[  208.910948][T10585] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.915633][T10585] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.923369][T10585] bridge_slave_0: entered allmulticast mode
[  208.928894][T10585] bridge_slave_0: entered promiscuous mode
[  208.940128][T10585] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.942823][T10585] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.945441][T10585] bridge_slave_1: entered allmulticast mode
[  208.948480][T10585] bridge_slave_1: entered promiscuous mode
[  208.958199][T10616] netlink: 'syz.0.1382': attribute type 10 has an invalid length.
[  208.984461][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.989957][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.015350][T10585] team0: Port device team_slave_0 added
[  209.019945][T10585] team0: Port device team_slave_1 added
[  209.047403][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.049638][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.057355][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.062391][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.064499][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.072456][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.113050][T10585] hsr_slave_0: entered promiscuous mode
[  209.115566][T10585] hsr_slave_1: entered promiscuous mode
[  209.117765][T10585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.120880][T10585] Cannot create hsr debugfs directory
[  209.405684][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.432230][T10619] openvswitch: netlink: Flow key attr not present in new flow.
[  209.481752][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.554951][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.573463][T10624] __nla_validate_parse: 3 callbacks suppressed
[  209.573478][T10624] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1384'.
[  209.666125][ T5863] bridge_slave_1: left allmulticast mode
[  209.667886][ T5863] bridge_slave_1: left promiscuous mode
[  209.669698][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.678482][ T5863] bridge_slave_0: left allmulticast mode
[  209.680237][ T5863] bridge_slave_0: left promiscuous mode
[  209.683743][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.052732][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.058722][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.066855][ T5863] bond0 (unregistering): Released all slaves
[  210.098036][T10635] 8021q: adding VLAN 0 to HW filter on device bond33
[  210.208161][T10646] netlink: 'syz.1.1391': attribute type 26 has an invalid length.
[  210.241654][T10646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1391'.
[  210.264448][T10643] pimreg: entered allmulticast mode
[  210.270868][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'.
[  210.275896][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'.
[  210.278588][T10643] netlink: 'syz.0.1390': attribute type 19 has an invalid length.
[  210.301504][ T5834] Bluetooth: hci0: command tx timeout
[  210.553060][ T5863] hsr_slave_0: left promiscuous mode
[  210.556029][ T5863] hsr_slave_1: left promiscuous mode
[  210.567640][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.569949][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.575652][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.578523][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.599762][ T5863] veth1_macvtap: left promiscuous mode
[  210.602933][ T5863] veth0_macvtap: left promiscuous mode
[  210.605908][ T5863] veth1_vlan: left promiscuous mode
[  210.607685][ T5863] veth0_vlan: left promiscuous mode
[  210.997205][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  211.023523][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  211.467620][T10671] 8021q: adding VLAN 0 to HW filter on device bond38
[  211.501389][T10585] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  211.521169][T10585] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  211.533558][T10666] lo speed is unknown, defaulting to 1000
[  211.534499][T10585] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  211.570800][T10585] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  211.669516][T10585] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.680034][T10585] 8021q: adding VLAN 0 to HW filter on device team0
[  211.686944][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'.
[  211.693363][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.695531][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.711856][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.714012][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.767935][T10685] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1400'.
[  211.847005][T10692] dvmrp0: left allmulticast mode
[  211.848567][T10692] pimreg: left allmulticast mode
[  211.931131][T10585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.958607][T10585] veth0_vlan: entered promiscuous mode
[  211.967304][T10585] veth1_vlan: entered promiscuous mode
[  211.992688][T10585] veth0_macvtap: entered promiscuous mode
[  211.997140][T10585] veth1_macvtap: entered promiscuous mode
[  212.006936][T10585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.015733][T10585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.024172][T10585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.026788][T10585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.030011][T10585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.034008][T10585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.091556][ T8398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.093948][ T8398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.113818][ T8425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.116205][ T8425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.199255][T10707] 8021q: adding VLAN 0 to HW filter on device bond34
[  212.302823][T10713] netlink: 'syz.1.1407': attribute type 1 has an invalid length.
[  212.305418][T10713] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1407'.
[  212.308453][T10713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'.
[  212.370781][ T5837] Bluetooth: hci0: command tx timeout
[  212.407255][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'.
[  212.427579][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'.
[  212.486280][T10720] vlan2: entered allmulticast mode
[  212.531933][T10721] netlink: 'syz.1.1409': attribute type 1 has an invalid length.
[  212.578289][T10726] netlink: 'syz.1.1410': attribute type 2 has an invalid length.
[  212.768425][T10732] 8021q: adding VLAN 0 to HW filter on device bond36
[  213.027273][T10751] syz_tun: entered allmulticast mode
[  213.044522][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.146998][T10760] netlink: 'syz.0.1420': attribute type 1 has an invalid length.
[  213.220280][T10763] 8021q: adding VLAN 0 to HW filter on device bond39
[  213.834686][T10750] syz_tun: left allmulticast mode
[  214.285520][T10785] 8021q: adding VLAN 0 to HW filter on device bond40
[  251.972825][   T47] ------------[ cut here ]------------
[  251.976179][   T47] workqueue: cannot queue hci_conn_timeout on wq hci0
[  251.978479][   T47] WARNING: CPU: 1 PID: 47 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  251.981616][   T47] Modules linked in:
[  251.983196][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  251.988218][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.991285][   T47] Workqueue: events l2cap_chan_timeout
[  251.993014][   T47] RIP: 0010:__queue_work+0xd62/0xfe0
[  251.995027][   T47] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  252.001835][   T47] RSP: 0018:ffffc9000075f7a8 EFLAGS: 00010046
[  252.003744][   T47] RAX: 775fb6c6aa672200 RBX: 0000000000000020 RCX: ffff888100ea0000
[  252.006193][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  252.008674][   T47] RBP: 1ffff11007eecf38 R08: 0000000000000003 R09: 0000000000000004
[  252.011110][   T47] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  252.013539][   T47] R13: ffff888119330960 R14: ffff888100004008 R15: ffff88803f767978
[  252.016028][   T47] FS:  0000000000000000(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  252.018690][   T47] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  252.020612][   T47] CR2: 00005555557cc600 CR3: 000000000df38000 CR4: 00000000000006f0
[  252.023044][   T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  252.025474][   T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  252.027913][   T47] Call Trace:
[  252.028993][   T47]  <TASK>
[  252.029977][   T47]  ? __queue_delayed_work+0xe1/0x2d0
[  252.031674][   T47]  queue_delayed_work_on+0x18b/0x280
[  252.033321][   T47]  ? __pfx___cancel_work+0x10/0x10
[  252.035107][   T47]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  252.037386][   T47]  ? hci_conn_drop+0x14d/0x280
[  252.039079][   T47]  l2cap_chan_del+0x285/0x5e0
[  252.040838][   T47]  l2cap_chan_close+0x597/0x980
[  252.042548][   T47]  ? __pfx_l2cap_chan_close+0x10/0x10
[  252.044650][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  252.046736][   T47]  l2cap_chan_timeout+0x158/0x390
[  252.048627][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  252.051030][   T47]  process_scheduled_works+0xae1/0x17b0
[  252.054402][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.056591][   T47]  worker_thread+0x8a0/0xda0
[  252.058487][   T47]  kthread+0x711/0x8a0
[  252.060741][   T47]  ? __pfx_worker_thread+0x10/0x10
[  252.062572][   T47]  ? __pfx_kthread+0x10/0x10
[  252.068374][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.070533][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.073813][   T47]  ? __pfx_kthread+0x10/0x10
[  252.076300][   T47]  ret_from_fork+0x3fc/0x770
[  252.077909][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  252.079646][   T47]  ? __switch_to_asm+0x39/0x70
[  252.081411][   T47]  ? __switch_to_asm+0x33/0x70
[  252.083114][   T47]  ? __pfx_kthread+0x10/0x10
[  252.084704][   T47]  ret_from_fork_asm+0x1a/0x30
[  252.086513][   T47]  </TASK>
[  252.087695][   T47] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  252.090380][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  252.094776][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.098444][   T47] Workqueue: events l2cap_chan_timeout
[  252.100507][   T47] Call Trace:
[  252.101796][   T47]  <TASK>
[  252.102912][   T47]  dump_stack_lvl+0x99/0x250
[  252.104662][   T47]  ? __asan_memcpy+0x40/0x70
[  252.106345][   T47]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.108265][   T47]  ? __pfx__printk+0x10/0x10
[  252.109982][   T47]  panic+0x2db/0x790
[  252.111446][   T47]  ? __pfx_panic+0x10/0x10
[  252.113144][   T47]  ? show_trace_log_lvl+0x4fb/0x550
[  252.115184][   T47]  ? ret_from_fork_asm+0x1a/0x30
[  252.117084][   T47]  __warn+0x31b/0x4b0
[  252.118602][   T47]  ? __queue_work+0xd62/0xfe0
[  252.120384][   T47]  ? __queue_work+0xd62/0xfe0
[  252.122184][   T47]  report_bug+0x2be/0x4f0
[  252.123829][   T47]  ? __queue_work+0xd62/0xfe0
[  252.125576][   T47]  ? __queue_work+0xd62/0xfe0
[  252.127337][   T47]  ? __queue_work+0xd64/0xfe0
[  252.129135][   T47]  handle_bug+0x84/0x160
[  252.130740][   T47]  exc_invalid_op+0x1a/0x50
[  252.132519][   T47]  asm_exc_invalid_op+0x1a/0x20
[  252.134368][   T47] RIP: 0010:__queue_work+0xd62/0xfe0
[  252.136391][   T47] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  252.143473][   T47] RSP: 0018:ffffc9000075f7a8 EFLAGS: 00010046
[  252.145475][   T47] RAX: 775fb6c6aa672200 RBX: 0000000000000020 RCX: ffff888100ea0000
[  252.148170][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  252.151040][   T47] RBP: 1ffff11007eecf38 R08: 0000000000000003 R09: 0000000000000004
[  252.153671][   T47] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  252.156322][   T47] R13: ffff888119330960 R14: ffff888100004008 R15: ffff88803f767978
[  252.158740][   T47]  ? __queue_work+0xd61/0xfe0
[  252.160352][   T47]  ? __queue_delayed_work+0xe1/0x2d0
[  252.162355][   T47]  queue_delayed_work_on+0x18b/0x280
[  252.164053][   T47]  ? __pfx___cancel_work+0x10/0x10
[  252.165830][   T47]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  252.167845][   T47]  ? hci_conn_drop+0x14d/0x280
[  252.169585][   T47]  l2cap_chan_del+0x285/0x5e0
[  252.171186][   T47]  l2cap_chan_close+0x597/0x980
[  252.172791][   T47]  ? __pfx_l2cap_chan_close+0x10/0x10
[  252.174798][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  252.176784][   T47]  l2cap_chan_timeout+0x158/0x390
[  252.178351][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  252.180403][   T47]  process_scheduled_works+0xae1/0x17b0
[  252.182159][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.184002][   T47]  worker_thread+0x8a0/0xda0
[  252.185446][   T47]  kthread+0x711/0x8a0
[  252.186704][   T47]  ? __pfx_worker_thread+0x10/0x10
[  252.188261][   T47]  ? __pfx_kthread+0x10/0x10
[  252.189863][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.191532][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.193129][   T47]  ? __pfx_kthread+0x10/0x10
[  252.194562][   T47]  ret_from_fork+0x3fc/0x770
[  252.195978][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  252.197520][   T47]  ? __switch_to_asm+0x39/0x70
[  252.198990][   T47]  ? __switch_to_asm+0x33/0x70
[  252.200845][   T47]  ? __pfx_kthread+0x10/0x10
[  252.202422][   T47]  ret_from_fork_asm+0x1a/0x30
[  252.203911][   T47]  </TASK>
[  252.205421][   T47] Kernel Offset: disabled
[  252.206776][   T47] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:45:04  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11021305398 RBX=ffff888045dcb500 RCX=ffffffff819db768 RDX=0000000000000000
RSI=0000000000000008 RDI=0000000000000001 RBP=1ffff11008bb9696 RSP=ffffc900041cf128
R8 =ffff888045dcb4b7 R9 =1ffff11008bb9696 R10=dffffc0000000000 R11=ffffed1008bb9697
R12=ffff888045dcb4b0 R13=ffff888045dcb500 R14=dffffc0000000000 R15=ffff888100ea0000
RIP=ffffffff819db75b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555557cd680 CR3=000000010ea74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f04cb985d00
XMM02=080009d0030fffff ffffffff0409c003 XMM03=09e80300080009e0 0300080009d80300
XMM04=0000000000000000 0000000000000000 XMM05=0000555574bcfcc2 0000555574bce5f0
XMM06=0000000000000000 0000000000000000 XMM07=030fffffffffffff 040a80030fffffff
XMM08=ffffff0409f00300 080009e803000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfc9f0 RSP=ffffc9000075eef0
R8 =ffff888107c28237 R9 =1ffff11020f85046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555557cc600 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000060 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 000000003141616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000041 00000000316e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
