last executing test programs:

1m32.667935924s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

1m25.823499734s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

1m18.668042248s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

1m12.320463998s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

1m3.123081624s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

55.76261958s ago: executing program 1 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, 0x0, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x44802}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c840)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)

16.117196842s ago: executing program 0 (id=2595):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000340)=""/112, 0x70}], 0x7, 0xaf8, 0x9)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r9)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r12, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9617}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x1c, r10, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x26c, r10, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3ff, 0x6, 0x8, 0x0, 0x4, 0x6, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x618e, 0x1, 0x2, 0x4, 0x3, 0x81]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0x7}, {0x4}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x7e, 0x2, 0x60, 0x24, 0x42, 0x60, 0x24, 0x0, 0x48, 0x9ba33f59d24707f5, 0x1, 0x12, 0x1, 0x62, 0x0, 0x22, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x6, 0xc, 0x800, 0x0, 0x68]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x6d1, 0xe, 0x2, 0x2, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0xc, 0x7, 0x2, 0x717, 0x2, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x5, 0x1, 0x9, 0xc, 0x9, 0x12, 0x16, 0x1b, 0x6c, 0x48, 0xc, 0x6c, 0x16]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x9, 0xfffb, 0x48cd, 0x3, 0x5, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfff, 0x2, 0x0, 0xf105, 0x189, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf, 0x5, 0xc000, 0x3fe4, 0x5, 0x2, 0x80]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xfff, 0x0, 0xc, 0xbc, 0x1, 0xf623, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x16, 0x6, 0x6, 0x4, 0x3, 0x4, 0x8, 0xff81]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0xfffe, 0x4, 0xa6, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x2, 0x2, 0x3, 0x6c, 0x6, 0x9, 0x5, 0x12, 0x9, 0x6, 0x0, 0x30, 0x4, 0x1, 0xb, 0x18]}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0a, 0xfac0d, 0xfac01, 0xfac0d, 0xfac09]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x26c}, 0x1, 0x0, 0x0, 0x80}, 0x4008101)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}}, 0x0)

16.060487073s ago: executing program 2 (id=2596):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000)

15.960584891s ago: executing program 2 (id=2597):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x8, 0x3, 0x9, {{0xa, 0x4, 0x1, 0x1a, 0x28, 0x67, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0x13, 0x44, [@loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast]}]}}}}})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000050)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.960180548s ago: executing program 0 (id=2598):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, 0x0}}], 0x1, 0x20000080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.910209884s ago: executing program 2 (id=2599):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvtap0\x00', 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="390090dd3385"}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write(r4, &(0x7f0000000800)="df040000000000000075ed30b5fb9a87c1bf7e0800f73237479d1c8349646c", 0x1f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

15.895153184s ago: executing program 0 (id=2600):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01012c794d02f39b9568ea3f2869c7dd03b321bd7000fddbdf251b0000000e0001006e6574cc40d45f2aa680c710023005d08246aa64"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r12, 0x400454c9, 0xba98575a95aeb70d)
ioctl$SIOCGIFHWADDR(r12, 0x8927, &(0x7f0000000000)={'dvmrp1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

15.800757889s ago: executing program 2 (id=2601):
r0 = socket(0x2a, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) (async)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @local, 0x0, "30a47ddacd92b91948edfc1219b5a8dee1db5ac45f22dc62a97af67dd1a76755"}, 0x3c) (async)
ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000140)={@loopback, @remote}) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c00000800428004000800140001800f00067a122d0090900ef2a483280a00040002"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$SIOCRSACCEPT(r0, 0x89e3)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.74865545s ago: executing program 2 (id=2602):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x400000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11}, 0x18)
sendmsg$can_j1939(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

15.746737604s ago: executing program 0 (id=2603):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)

15.580127386s ago: executing program 0 (id=2604):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000)

15.476906467s ago: executing program 2 (id=2605):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}, {0x0}], 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000008400ac1414bb0000000018000000000000008400000007080000ac1e01010000ecff1700000000000e008400000007000000ac1414000000000049ab05add1e6787bb8a09689d715b51f20c523e58155a9534efb41d0744a383f4264c6a227e1e4d94741094f19d04289e3632a8842000000000000"], 0x48, 0x2e44a4745862c57b}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b1b40000000000000000000018010000752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bb050000850000000600000095000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r3}, 0x38)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], <r8=>0x0, 0x31, &(0x7f0000000b00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x2a, &(0x7f0000000f00)=ANY=[@ANYBLOB="06110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b708000054f9ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009a0300008500000006000000184300000600000000000000000000001860000000000002000000000900000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000600000085100000f9ffffff"], &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[r3], &(0x7f0000000d80)=[{0x1, 0x5, 0xc, 0xc}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$NS_GET_PARENT(r7, 0xb702, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080))

15.475740161s ago: executing program 0 (id=2606):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='GPL\x00'}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="063e", @ANYRES16=r5, @ANYBLOB="0100000000001000000001000000"], 0x14}}, 0x0) (async)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={<r6=>r1, 0x8, 0x1})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x40, 0x8, 0xf, 0x7fffffff, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x27, 0x4, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1, @remote, @rand_addr=0x64010100, @loopback, @local, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x9, [{@local, 0x8000}, {@empty, 0x62b}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x10000}, {@local, 0xb}, {@remote, 0xb}, {@multicast2, 0xfffffffd}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) (async)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x200}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000090560000280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a0800040000050400"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x5, 0x90, 0x5, 0x10, {0x4e22, 0x4e20, [0xbc, 0x9, 0x3000, 0x4], [0xfffffff4, 0x3, 0x6, 0x3], r8, [0x9, 0xfffffffa]}, 0x442f0e7e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b10332fc109fe01fa91fc30bffe48ec7b69f94fbc5a17850ab92aee567b5f1f606805c12cc138d794073cb4556f15f3eabaf4080c6dbd5019ebbd8b0fcb53f3cedbe1dd1d7cf4b45a55d3231f221cc726f59c724bfbe387bc77cf50f9ba6c76bbb25040c05341d9b6ed455f0e168caeae885303ed354076cbe2fafd631e23270df34ce1b40a0f6bc7eed4174bad70535182c2f62660db7c9c92c73b98c6570e5ebbbf2d610dc18370355c01c6d0fd21a203aa54547c57eef637ea8d5"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c1f4349881d59e570a"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70747755148dba85557b655494b948c3ea66568be7a7e2f1ee7fb1543b7c17e30929a38c8bd4bfb74b9a719847a0608028257277a9fc7d641f363e901e1b114443cf2900bdc550ddf6c2441aabcce2b62dd7f702ba81e8f50c0eef62b8b6c1b7838e09bd6f8a9fb259f863bfd0556116e0d46b8cac3b0c33b83055a76d8d9c41d5bd99490626b35dcc445f5e739eacf79797192ed13fe9ed892fc0bf9d3793d5d31f1659c7d193719ac3b7e1b7740ea900e3936818f823230eadabae21d64fff57db40105bc1473d870b5bb3981ce21c120db5947b2ea71bdbb85ad25fe371"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048004}, 0xc801)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

59.986156ms ago: executing program 32 (id=2606):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='GPL\x00'}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="063e", @ANYRES16=r5, @ANYBLOB="0100000000001000000001000000"], 0x14}}, 0x0) (async)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={<r6=>r1, 0x8, 0x1})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x40, 0x8, 0xf, 0x7fffffff, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x27, 0x4, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast1, @remote, @rand_addr=0x64010100, @loopback, @local, @multicast2]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x9, [{@local, 0x8000}, {@empty, 0x62b}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x10000}, {@local, 0xb}, {@remote, 0xb}, {@multicast2, 0xfffffffd}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010102, 0x6}]}]}}}}}) (async)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x200}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000090560000280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a0800040000050400"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) (async)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x200, 0x12, 0x10, 0x70bd25, 0x25dfdbfb, {0x5, 0x90, 0x5, 0x10, {0x4e22, 0x4e20, [0xbc, 0x9, 0x3000, 0x4], [0xfffffff4, 0x3, 0x6, 0x3], r8, [0x9, 0xfffffffa]}, 0x442f0e7e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "b10332fc109fe01fa91fc30bffe48ec7b69f94fbc5a17850ab92aee567b5f1f606805c12cc138d794073cb4556f15f3eabaf4080c6dbd5019ebbd8b0fcb53f3cedbe1dd1d7cf4b45a55d3231f221cc726f59c724bfbe387bc77cf50f9ba6c76bbb25040c05341d9b6ed455f0e168caeae885303ed354076cbe2fafd631e23270df34ce1b40a0f6bc7eed4174bad70535182c2f62660db7c9c92c73b98c6570e5ebbbf2d610dc18370355c01c6d0fd21a203aa54547c57eef637ea8d5"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "c1f4349881d59e570a"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "70747755148dba85557b655494b948c3ea66568be7a7e2f1ee7fb1543b7c17e30929a38c8bd4bfb74b9a719847a0608028257277a9fc7d641f363e901e1b114443cf2900bdc550ddf6c2441aabcce2b62dd7f702ba81e8f50c0eef62b8b6c1b7838e09bd6f8a9fb259f863bfd0556116e0d46b8cac3b0c33b83055a76d8d9c41d5bd99490626b35dcc445f5e739eacf79797192ed13fe9ed892fc0bf9d3793d5d31f1659c7d193719ac3b7e1b7740ea900e3936818f823230eadabae21d64fff57db40105bc1473d870b5bb3981ce21c120db5947b2ea71bdbb85ad25fe371"}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048004}, 0xc801)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)

0s ago: executing program 33 (id=2605):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}, {0x0}], 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000008400ac1414bb0000000018000000000000008400000007080000ac1e01010000ecff1700000000000e008400000007000000ac1414000000000049ab05add1e6787bb8a09689d715b51f20c523e58155a9534efb41d0744a383f4264c6a227e1e4d94741094f19d04289e3632a8842000000000000"], 0x48, 0x2e44a4745862c57b}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b1b40000000000000000000018010000752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bb050000850000000600000095000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={&(0x7f0000000540)="3b14265d2a9eee7c089ecde19a2559ee3e316a782c3d0d50816bc0cb775db410d40152d7825fcc9e9a4b89872e3a016581fce14895e85588fbd5ad30af11d8728356da784e2cb2c4d6e1c81b34051158e783279257f03065923d67d99315a202c0b20db70f387aa9f5e31e6fa48590108d662484b9ca144e20644e25393f1a061cee472a8044941cfeb8d5daff40aa2dfd75fc0545e9f378ca35c41a0be68455f5f05bf159063a9136599f6fea50f3097823febd70af8cc496cd2574f629a3405ebeee7822097d826f21c0d5a1d47de8e1", &(0x7f0000001f40)=""/4096, &(0x7f0000000780)="0d8c1d61e348d64ba0f885366863622dc347a95321e40c05ca8d104817d1ae1fc904e3e650f6ceed36bf43b4ed5e6e670c70392d7723b6029f4df5daec6c4e08a30a32f6ed3d129b8e7e89c9f00cf4c8a814c2ecdb8c369e3e34cd2fd416d79f5a73f07a2a8ed117c6cab1fd6e8f158bb60a507ac2f48abd399ed4ba712785e5419760c443f74355396bd06906e0db1d036719e9a282f8e41f4b2ee24b70558151b948", &(0x7f0000000840)="1dd605aaa6ba45e8fd28ab14c48ae429156b52224382963609944a21dc246c3a9b87836a0306ccfc3f27c8b03542a86d75ca5321c36f5f4d1b98c19ee14a1432a92f8566e7374a9e62eac9575e34acc50d3031251c888da3f0e2ec5db00d29af3d4a12cbb8ba96b40b0698a9b749988b572371cff594ca268738cf3e", 0x5, r3}, 0x38)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], <r8=>0x0, 0x31, &(0x7f0000000b00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x2a, &(0x7f0000000f00)=ANY=[@ANYBLOB="06110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000b7080000000000007b8af8ff00000000b708000054f9ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009a0300008500000006000000184300000600000000000000000000001860000000000002000000000900000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000600000085100000f9ffffff"], &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[r3], &(0x7f0000000d80)=[{0x1, 0x5, 0xc, 0xc}], 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$NS_GET_PARENT(r7, 0xb702, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000140)="3156cff2394930963656873e99c19c42cbc16a", &(0x7f0000000180)=""/26}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

: port 2(bridge_slave_1) entered disabled state
[  145.924344][T10658] team0: Port device team_slave_0 removed
[  145.928831][T10658] team0: Port device team_slave_1 removed
[  145.931153][T10658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.935830][T10658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.989436][T10661] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  146.329589][T10679] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  146.339726][T10679] sctp: [Deprecated]: syz.2.1390 (pid 10679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.339726][T10679] Use struct sctp_sack_info instead
[  146.652786][T10703] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  146.817236][T10715] xt_cgroup: path and classid specified
[  149.392610][T10783] __nla_validate_parse: 24 callbacks suppressed
[  149.392621][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'.
[  149.460690][T10785] tipc: Started in network mode
[  149.462365][T10785] tipc: Node identity d6274c037bd7, cluster identity 4711
[  149.466713][T10785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.471126][T10785] syzkaller0: entered promiscuous mode
[  149.472904][T10785] syzkaller0: entered allmulticast mode
[  149.486989][T10785] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.490422][T10785] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.494311][T10785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.497510][T10785] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.516286][T10785] sch_fq: defrate 257 ignored.
[  149.521005][T10784] tipc: Resetting bearer <eth:syzkaller0>
[  149.533548][T10784] tipc: Disabling bearer <eth:syzkaller0>
[  149.631469][T10787] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.635467][T10787] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.638448][T10787] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.641826][T10787] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.658568][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'.
[  149.777591][T10796] wg1 speed is unknown, defaulting to 1000
[  149.827102][T10799] xt_hashlimit: max too large, truncated to 1048576
[  149.830266][T10799] Cannot find add_set index 3 as target
[  149.882645][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.887487][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.890707][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.893914][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.896878][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.900074][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x0
[  149.903172][ T1271] hid-generic 0005:16C0:5505.0005: unknown main item tag 0x3
[  149.911239][ T1271] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  150.686341][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'.
[  150.795915][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  150.814992][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  150.940200][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'.
[  150.963869][T10838] netlink: 'syz.0.1443': attribute type 4 has an invalid length.
[  150.992858][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'.
[  151.166131][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1447'.
[  151.307717][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1450'.
[  151.402701][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'.
[  151.495233][T10890] netlink: 'syz.2.1456': attribute type 10 has an invalid length.
[  151.527344][T10890] batadv0: entered promiscuous mode
[  151.529351][T10890] bridge0: port 1(batadv0) entered blocking state
[  151.540335][T10890] bridge0: port 1(batadv0) entered disabled state
[  151.542673][T10890] batadv0: entered allmulticast mode
[  151.665207][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  151.668282][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  151.703746][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  151.901651][T10928] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  151.907366][T10928] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  151.912077][T10927] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  152.362722][T10960] delete_channel: no stack
[  153.493923][T10995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.497289][T10992] syzkaller0: entered promiscuous mode
[  153.499395][T10992] syzkaller0: entered allmulticast mode
[  153.514387][T10993] tipc: Resetting bearer <eth:syzkaller0>
[  153.546416][T10991] tipc: Resetting bearer <eth:syzkaller0>
[  153.570285][T10991] tipc: Disabling bearer <eth:syzkaller0>
[  155.146844][T11034] __nla_validate_parse: 32 callbacks suppressed
[  155.146858][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'.
[  155.153008][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'.
[  155.318956][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  155.341991][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  155.474689][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'.
[  155.495733][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'.
[  155.621449][T11047] wg1 speed is unknown, defaulting to 1000
[  155.841698][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  155.862383][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  155.952417][T11066] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  155.957991][T11066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.558356][T11090] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  156.753786][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'.
[  156.753787][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'.
[  156.771516][T11107] netlink: 'syz.2.1517': attribute type 2 has an invalid length.
[  156.775501][T11105] netlink: 'syz.2.1517': attribute type 2 has an invalid length.
[  159.185700][T11170] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.442280][T11186] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  159.785023][T11202] netlink: 'syz.0.1543': attribute type 2 has an invalid length.
[  159.790512][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.796994][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.872713][T11208] wg1 speed is unknown, defaulting to 1000
[  159.916202][T11211] veth1: entered promiscuous mode
[  160.282775][   T54] Bluetooth: hci2: link tx timeout
[  160.284923][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  160.288560][ T5840] Bluetooth: hci2: link tx timeout
[  160.290622][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  160.590856][T11240] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  160.772454][T11249] __nla_validate_parse: 24 callbacks suppressed
[  160.772465][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'.
[  160.796452][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'.
[  160.813240][T11242] netlink: 'syz.2.1556': attribute type 2 has an invalid length.
[  160.874915][T11256] wg1 speed is unknown, defaulting to 1000
[  160.991683][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'.
[  161.038234][T11265] bridge: RTM_NEWNEIGH with invalid ether address
[  161.135536][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  161.147962][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'.
[  161.310395][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'.
[  161.508081][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  161.672856][T11298] veth1: left promiscuous mode
[  161.866010][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'.
[  161.942504][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'.
[  161.947580][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'.
[  162.011401][T11320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.329820][T11336] bond0: entered promiscuous mode
[  162.332652][T11336] bond0: left promiscuous mode
[  162.344198][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  162.763717][T11365] netlink: 'syz.0.1593': attribute type 1 has an invalid length.
[  163.780872][T11381] wg1 speed is unknown, defaulting to 1000
[  163.819396][T11385] syzkaller1: tun_chr_ioctl cmd 1074025672
[  163.821819][T11385] syzkaller1: ignored: set checksum enabled
[  164.099225][T11401] syz_tun: entered allmulticast mode
[  164.106561][T11399] syz_tun: left allmulticast mode
[  165.358274][T11467] gtp0: entered promiscuous mode
[  165.360351][T11467] gtp0: entered allmulticast mode
[  165.668610][T11495] wg1 speed is unknown, defaulting to 1000
[  166.117207][T11518] __nla_validate_parse: 24 callbacks suppressed
[  166.117219][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'.
[  166.528906][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'.
[  166.545983][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'.
[  166.605982][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'.
[  166.628189][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'.
[  166.782831][T11536] netlink: 'syz.0.1634': attribute type 6 has an invalid length.
[  166.868660][T11543] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1636'.
[  167.119055][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'.
[  167.398716][T11577] wg1 speed is unknown, defaulting to 1000
[  167.508803][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'.
[  167.522019][T11584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1648'.
[  167.539172][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'.
[  167.691193][T11586] netlink: 'syz.0.1649': attribute type 4 has an invalid length.
[  167.697823][T11586] netlink: 'syz.0.1649': attribute type 4 has an invalid length.
[  168.056680][T11610] sctp: [Deprecated]: syz.0.1654 (pid 11610) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.056680][T11610] Use struct sctp_sack_info instead
[  168.977684][T11622] wg1 speed is unknown, defaulting to 1000
[  170.036944][T11637] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  170.340499][T11655] syzkaller0: entered promiscuous mode
[  170.345716][T11655] syzkaller0: entered allmulticast mode
[  170.908102][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  170.923171][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  170.934739][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  170.954107][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  170.964027][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.868704][T11666] __nla_validate_parse: 12 callbacks suppressed
[  171.868719][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'.
[  171.870957][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.924692][T11663] wg1 speed is unknown, defaulting to 1000
[  171.988053][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.001308][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'.
[  172.014379][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'.
[  172.054637][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.082221][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'.
[  172.170401][T11682] raw_sendmsg: syz.2.1677 forgot to set AF_INET. Fix it!
[  172.183360][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.339261][T11686] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  172.357674][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'.
[  172.383510][T11663] chnl_net:caif_netlink_parms(): no params data found
[  172.498797][   T12] bridge_slave_1: left allmulticast mode
[  172.501276][   T12] bridge_slave_1: left promiscuous mode
[  172.504671][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.522256][   T12] bridge_slave_0: left allmulticast mode
[  172.529231][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'.
[  172.532248][   T12] bridge_slave_0: left promiscuous mode
[  172.534725][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.864832][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.870035][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.876516][   T12] bond0 (unregistering): Released all slaves
[  172.918102][T11713] netlink: 'syz.0.1683': attribute type 2 has an invalid length.
[  173.000640][T11663] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.003176][T11663] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.008251][T11663] bridge_slave_0: entered allmulticast mode
[  173.012491][T11663] bridge_slave_0: entered promiscuous mode
[  173.073896][ T5831] Bluetooth: hci0: command tx timeout
[  173.089194][T11663] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.104303][T11663] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.108036][T11663] bridge_slave_1: entered allmulticast mode
[  173.111888][T11663] bridge_slave_1: entered promiscuous mode
[  173.243169][T11663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.254770][T11663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.320176][T11663] team0: Port device team_slave_0 added
[  173.325555][T11663] team0: Port device team_slave_1 added
[  173.405095][   T12] hsr_slave_0: left promiscuous mode
[  173.415299][   T12] hsr_slave_1: left promiscuous mode
[  173.424706][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.427817][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.437152][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.444616][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.478338][   T12] veth1_macvtap: left promiscuous mode
[  173.480992][   T12] veth0_macvtap: left promiscuous mode
[  173.483286][   T12] veth1_vlan: left promiscuous mode
[  173.485622][   T12] veth0_vlan: left promiscuous mode
[  173.897433][   T12] team0 (unregistering): Port device team_slave_1 removed
[  173.931190][   T12] team0 (unregistering): Port device team_slave_0 removed
[  174.352242][T11663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.355019][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.362582][T11663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.372495][T11663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.376825][T11663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.384984][T11663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.456710][T11663] hsr_slave_0: entered promiscuous mode
[  174.459050][T11663] hsr_slave_1: entered promiscuous mode
[  174.471418][T11663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.473933][T11663] Cannot create hsr debugfs directory
[  174.636045][T11762] pimreg: entered allmulticast mode
[  174.845063][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  175.041829][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  175.051121][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  175.101273][T11663] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  175.105892][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  175.109487][T11663] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  175.120070][T11663] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  175.158024][T11663] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  175.279404][T11663] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.306278][T11663] 8021q: adding VLAN 0 to HW filter on device team0
[  175.313666][T11809] veth0: entered promiscuous mode
[  175.328159][T11810] veth0 (unregistering): left promiscuous mode
[  175.359321][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.361562][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.382597][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.385161][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.442570][T11663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.451681][T11663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.489792][T11821] xt_hashlimit: size too large, truncated to 1048576
[  175.491986][T11821] xt_hashlimit: overflow, try lower: 3/0
[  175.617393][T11663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.645442][T11836] RDS: rds_bind could not find a transport for ::ffff:172.20.20.13, load rds_tcp or rds_rdma?
[  175.666985][T11663] veth0_vlan: entered promiscuous mode
[  175.688775][T11663] veth1_vlan: entered promiscuous mode
[  175.746635][T11663] veth0_macvtap: entered promiscuous mode
[  175.761847][T11663] veth1_macvtap: entered promiscuous mode
[  175.810890][T11663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.849747][T11663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.857452][T11663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.860846][T11663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.870612][T11663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.879334][T11663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.912228][T11849] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  176.017822][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.021051][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.069000][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.071657][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.567955][T11892] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  176.571898][T11892] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  176.581333][T11893] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  176.585646][T11893] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  176.643122][T11897] netlink: 'syz.0.1724': attribute type 2 has an invalid length.
[  176.980394][T11921] __nla_validate_parse: 18 callbacks suppressed
[  176.980407][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1733'.
[  177.050382][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'.
[  177.121521][T11931] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  177.210139][T11936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1737'.
[  177.387564][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'.
[  177.418759][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'.
[  177.593187][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.812172][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'.
[  177.911344][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'.
[  177.949452][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.955375][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.961099][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.964894][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.967578][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.011273][T11965] wg1 speed is unknown, defaulting to 1000
[  178.055342][T11967] wg1 speed is unknown, defaulting to 1000
[  178.258152][T11965] chnl_net:caif_netlink_parms(): no params data found
[  178.314546][T11967] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1745'.
[  178.354855][T11965] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.357845][T11965] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.360533][T11965] bridge_slave_0: entered allmulticast mode
[  178.366499][T11965] bridge_slave_0: entered promiscuous mode
[  178.370373][T11965] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.372589][T11965] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.376241][T11965] bridge_slave_1: entered allmulticast mode
[  178.379140][T11965] bridge_slave_1: entered promiscuous mode
[  178.382305][T11987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.415963][T11987] syzkaller0: entered promiscuous mode
[  178.417694][T11987] syzkaller0: entered allmulticast mode
[  178.427509][T11965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.439551][T11965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.466785][T11987] tipc: Resetting bearer <eth:syzkaller0>
[  178.480653][T11965] team0: Port device team_slave_0 added
[  178.483164][T11985] tipc: Resetting bearer <eth:syzkaller0>
[  178.492076][T11985] tipc: Disabling bearer <eth:syzkaller0>
[  178.500911][T11965] team0: Port device team_slave_1 added
[  178.529166][T11965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.531395][T11965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.539465][T11965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.544921][T11965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.547054][T11965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.555100][T11965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.610945][T11965] hsr_slave_0: entered promiscuous mode
[  178.617683][T11965] hsr_slave_1: entered promiscuous mode
[  178.619926][T11965] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.622197][T11965] Cannot create hsr debugfs directory
[  178.738180][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'.
[  178.741731][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'.
[  178.758483][T12006] netlink: 'syz.2.1751': attribute type 14 has an invalid length.
[  178.791894][T12006] netlink: 'syz.2.1751': attribute type 14 has an invalid length.
[  179.062192][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.131625][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.155455][T12027] gtp0: left promiscuous mode
[  179.157493][T12027] gtp0: left allmulticast mode
[  179.230442][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.415583][   T13] bridge_slave_1: left allmulticast mode
[  179.417876][   T13] bridge_slave_1: left promiscuous mode
[  179.420204][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.439214][   T13] bridge_slave_0: left allmulticast mode
[  179.441334][   T13] bridge_slave_0: left promiscuous mode
[  179.445976][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.903888][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.910126][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.916413][   T13] bond0 (unregistering): Released all slaves
[  180.037365][ T5831] Bluetooth: hci0: command tx timeout
[  180.258295][   T13] hsr_slave_0: left promiscuous mode
[  180.260734][   T13] hsr_slave_1: left promiscuous mode
[  180.262919][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.271653][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.276104][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.278525][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.298268][   T13] veth1_macvtap: left promiscuous mode
[  180.300392][   T13] veth0_macvtap: left promiscuous mode
[  180.302430][   T13] veth1_vlan: left promiscuous mode
[  180.306646][   T13] veth0_vlan: left promiscuous mode
[  180.583960][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  180.692817][   T13] team0 (unregistering): Port device team_slave_1 removed
[  180.719926][   T13] team0 (unregistering): Port device team_slave_0 removed
[  181.127490][T12074] netlink: 'syz.2.1763': attribute type 2 has an invalid length.
[  181.267039][T11965] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  181.328223][T11965] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  181.365277][T11965] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  181.391234][T11965] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  181.556680][T11965] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.588781][T11965] 8021q: adding VLAN 0 to HW filter on device team0
[  181.597222][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.599426][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.625363][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.627772][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.951509][T11965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.007720][T11965] veth0_vlan: entered promiscuous mode
[  182.017670][T11965] veth1_vlan: entered promiscuous mode
[  182.058932][T11965] veth0_macvtap: entered promiscuous mode
[  182.064301][T11965] veth1_macvtap: entered promiscuous mode
[  182.075731][T12134] __nla_validate_parse: 10 callbacks suppressed
[  182.075741][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'.
[  182.078721][T11965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.095439][T11965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.103766][   T54] Bluetooth: hci0: command tx timeout
[  182.119571][T11965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.122416][T11965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.126822][T11965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.129859][T11965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.138238][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1771'.
[  182.178752][T12134] netlink: 'syz.0.1771': attribute type 2 has an invalid length.
[  182.229297][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.231878][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.266425][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.269448][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.435435][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'.
[  182.497966][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'.
[  182.727151][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1776'.
[  183.770889][T12189] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1781'.
[  183.778850][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'.
[  183.808745][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'.
[  183.812093][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'.
[  183.929448][T12199] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  183.948222][T12199] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.952977][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'.
[  183.965837][T12199] veth1: entered promiscuous mode
[  183.970556][T12199] bond0: (slave veth1): Enslaving as an active interface with a down link
[  183.976583][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.978956][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.102245][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.708146][T12208] netlink: 'syz.0.1789': attribute type 4 has an invalid length.
[  184.894513][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.899001][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.906654][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.915057][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.918173][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.991020][T12228] wg1 speed is unknown, defaulting to 1000
[  185.239570][T12228] chnl_net:caif_netlink_parms(): no params data found
[  185.448436][T12228] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.451422][T12228] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.458906][T12228] bridge_slave_0: entered allmulticast mode
[  185.462954][T12228] bridge_slave_0: entered promiscuous mode
[  185.471259][T12228] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.476346][T12228] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.479598][T12228] bridge_slave_1: entered allmulticast mode
[  185.483440][T12228] bridge_slave_1: entered promiscuous mode
[  185.548265][T12228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.557913][T12228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.603194][T12228] team0: Port device team_slave_0 added
[  185.619397][T12228] team0: Port device team_slave_1 added
[  185.718947][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.728467][T12228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.731338][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.741413][T12228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.748870][T12228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.752031][T12228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.766041][T12228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.812543][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.886231][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.909388][T12228] hsr_slave_0: entered promiscuous mode
[  185.912049][T12228] hsr_slave_1: entered promiscuous mode
[  185.917194][T12228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.919647][T12228] Cannot create hsr debugfs directory
[  186.236991][   T12] bridge_slave_1: left allmulticast mode
[  186.239035][   T12] bridge_slave_1: left promiscuous mode
[  186.240893][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.248803][   T12] bridge_slave_0: left allmulticast mode
[  186.250996][   T12] bridge_slave_0: left promiscuous mode
[  186.253665][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.585388][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.590455][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.597971][   T12] bond0 (unregistering): Released all slaves
[  186.645932][T12298] netlink: 'syz.2.1812': attribute type 2 has an invalid length.
[  186.925055][   T12] hsr_slave_0: left promiscuous mode
[  186.932881][   T12] hsr_slave_1: left promiscuous mode
[  186.937060][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.939583][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.942475][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.945751][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.967242][   T12] veth1_macvtap: left promiscuous mode
[  186.969355][   T12] veth0_macvtap: left promiscuous mode
[  186.971273][   T12] veth1_vlan: left promiscuous mode
[  186.972900][   T12] veth0_vlan: left promiscuous mode
[  186.984044][   T54] Bluetooth: hci0: command tx timeout
[  187.286457][   T12] team0 (unregistering): Port device team_slave_1 removed
[  187.315412][   T12] team0 (unregistering): Port device team_slave_0 removed
[  187.839277][T12228] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  187.845860][T12228] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  187.876946][T12228] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  187.880184][T12334] __nla_validate_parse: 14 callbacks suppressed
[  187.880192][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'.
[  187.888597][T12228] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  188.015735][T12228] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.038965][T12228] 8021q: adding VLAN 0 to HW filter on device team0
[  188.045461][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.047944][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.063386][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.065653][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.073054][T12358] netlink: 'syz.2.1823': attribute type 62 has an invalid length.
[  188.120178][T12358] wg1 speed is unknown, defaulting to 1000
[  188.235679][T12228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.275549][T12228] veth0_vlan: entered promiscuous mode
[  188.285142][T12228] veth1_vlan: entered promiscuous mode
[  188.311556][T12228] veth0_macvtap: entered promiscuous mode
[  188.316942][T12228] veth1_macvtap: entered promiscuous mode
[  188.330680][T12228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.340433][T12228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.345866][T12228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.348528][T12228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.351076][T12228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.354689][T12228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.414521][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.417049][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.447260][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.450391][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.841157][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'.
[  188.948885][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'.
[  188.965791][T12379] netlink: 'syz.2.1827': attribute type 1 has an invalid length.
[  189.052683][T12380] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  189.056108][T12380] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  189.058716][T12380] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  189.061360][T12380] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  189.075006][T12380] bond1: (slave geneve2): making interface the new active one
[  189.086629][T12380] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  189.107777][T12379] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  189.115498][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1827'.
[  189.121866][T12379] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.221178][T12387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1829'.
[  190.010460][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'.
[  190.057610][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  190.071528][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'.
[  190.073241][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  190.227321][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.847604][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'.
[  190.944550][T12408] veth0: entered promiscuous mode
[  190.957791][T12408] veth0 (unregistering): left promiscuous mode
[  191.014706][T12408] bond0: (slave veth1): Releasing active interface
[  191.057629][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.060968][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.065621][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.075386][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.078228][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.109339][T12415] wg1 speed is unknown, defaulting to 1000
[  191.116043][T12414] wg1 speed is unknown, defaulting to 1000
[  191.162017][T12412] wg1 speed is unknown, defaulting to 1000
[  191.386317][T12412] chnl_net:caif_netlink_parms(): no params data found
[  191.439239][T12427] netlink: 'syz.2.1841': attribute type 4 has an invalid length.
[  191.523884][T12412] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.526671][T12412] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.529735][T12412] bridge_slave_0: entered allmulticast mode
[  191.532971][T12412] bridge_slave_0: entered promiscuous mode
[  191.542594][T12412] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.545743][T12412] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.547966][T12412] bridge_slave_1: entered allmulticast mode
[  191.550820][T12412] bridge_slave_1: entered promiscuous mode
[  191.592519][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.609907][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.630936][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.716819][T12441] x_tables: duplicate underflow at hook 1
[  191.725285][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.739990][T12412] team0: Port device team_slave_0 added
[  191.769837][T12412] team0: Port device team_slave_1 added
[  191.816007][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.842347][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.847747][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.860595][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.874071][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.877025][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.893902][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.970392][T12412] hsr_slave_0: entered promiscuous mode
[  191.973527][T12412] hsr_slave_1: entered promiscuous mode
[  191.984125][T12412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.987177][T12412] Cannot create hsr debugfs directory
[  192.189083][   T13] bridge_slave_1: left allmulticast mode
[  192.190783][   T13] bridge_slave_1: left promiscuous mode
[  192.193179][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.204657][   T13] bridge_slave_0: left allmulticast mode
[  192.206510][   T13] bridge_slave_0: left promiscuous mode
[  192.208623][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.509768][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.514741][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.519004][   T13] bond0 (unregistering): Released all slaves
[  192.850764][   T13] hsr_slave_0: left promiscuous mode
[  192.862216][   T13] hsr_slave_1: left promiscuous mode
[  192.869344][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.876383][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.889000][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.896095][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.930116][   T13] veth1_macvtap: left promiscuous mode
[  192.932373][   T13] veth0_macvtap: left promiscuous mode
[  192.936421][   T13] veth1_vlan: left promiscuous mode
[  192.938326][   T13] veth0_vlan: left promiscuous mode
[  193.144625][   T54] Bluetooth: hci0: command tx timeout
[  193.238096][   T13] team0 (unregistering): Port device team_slave_1 removed
[  193.262194][   T13] team0 (unregistering): Port device team_slave_0 removed
[  193.640528][T12502] __nla_validate_parse: 11 callbacks suppressed
[  193.640540][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'.
[  193.690738][T12502] bridge42: port 1(vlan3) entered blocking state
[  193.694722][T12502] bridge42: port 1(vlan3) entered disabled state
[  193.704383][T12502] vlan3: entered allmulticast mode
[  193.705985][T12502] bridge42: entered allmulticast mode
[  193.724950][T12502] vlan3: left allmulticast mode
[  193.738447][T12502] bridge42: left allmulticast mode
[  193.841075][T12507] netlink: 'syz.0.1856': attribute type 8 has an invalid length.
[  193.880233][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.883066][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1857'.
[  193.886210][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.908111][T12412] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.916521][T12412] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.943261][T12412] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.971115][T12412] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.994116][T12519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.998949][T12519] syzkaller0: entered promiscuous mode
[  194.000618][T12519] syzkaller0: entered allmulticast mode
[  194.028441][T12519] sch_fq: defrate 257 ignored.
[  194.038018][T12519] tipc: Resetting bearer <eth:syzkaller0>
[  194.068203][T12528] netlink: 'syz.2.1859': attribute type 3 has an invalid length.
[  194.071521][T12528] netlink: 'syz.2.1859': attribute type 3 has an invalid length.
[  194.132197][T12518] tipc: Resetting bearer <eth:syzkaller0>
[  194.154462][T12518] tipc: Disabling bearer <eth:syzkaller0>
[  194.166914][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  194.199027][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'.
[  194.271128][T12412] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.292189][T12412] 8021q: adding VLAN 0 to HW filter on device team0
[  194.308905][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.311828][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.328449][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.331485][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.442974][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'.
[  194.609276][T12412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.673113][T12412] veth0_vlan: entered promiscuous mode
[  194.692855][T12412] veth1_vlan: entered promiscuous mode
[  194.766910][T12412] veth0_macvtap: entered promiscuous mode
[  194.778925][T12412] veth1_macvtap: entered promiscuous mode
[  194.827647][T12412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.855627][T12412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.870792][T12412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.886889][T12412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.893771][T12412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.900081][T12412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.021602][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.029312][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.050552][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.054266][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.179607][T12581] netlink: 'syz.2.1866': attribute type 3 has an invalid length.
[  195.182204][T12581] netlink: 'syz.2.1866': attribute type 3 has an invalid length.
[  195.302362][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'.
[  195.327982][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'.
[  195.488316][T12598] netlink: 'syz.2.1872': attribute type 58 has an invalid length.
[  195.490702][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1872'.
[  195.517660][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'.
[  195.631486][T12602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1874'.
[  195.711867][T12604] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  195.716123][T12604] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  195.719534][T12604] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  195.722586][T12604] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  195.795463][T12607] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  196.269375][ T5872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.080913][T12641] netlink: 'syz.0.1887': attribute type 29 has an invalid length.
[  197.155481][T12644] gtp1: entered promiscuous mode
[  197.157207][T12644] gtp1: entered allmulticast mode
[  197.166336][T12644] gtp2: entered promiscuous mode
[  197.167886][T12644] gtp2: entered allmulticast mode
[  197.187301][T12644] gtp3: entered promiscuous mode
[  197.188939][T12644] gtp3: entered allmulticast mode
[  197.195392][T12644] gtp4: entered promiscuous mode
[  197.197356][T12644] gtp4: entered allmulticast mode
[  197.211785][T12644] gtp5: entered promiscuous mode
[  197.215482][T12644] gtp5: entered allmulticast mode
[  197.230820][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.240727][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.251623][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.257500][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.260168][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.260670][T12644] gtp6: entered promiscuous mode
[  197.264297][T12644] gtp6: entered allmulticast mode
[  197.290415][ T5872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.304638][T12644] gtp7: entered promiscuous mode
[  197.306252][T12644] gtp7: entered allmulticast mode
[  197.312103][T12644] gtp8: entered promiscuous mode
[  197.314200][T12644] gtp8: entered allmulticast mode
[  197.319912][T12644] gtp9: entered promiscuous mode
[  197.321470][T12644] gtp9: entered allmulticast mode
[  197.324950][T12651] netlink: 'syz.2.1890': attribute type 2 has an invalid length.
[  197.330825][T12644] gtp10: entered promiscuous mode
[  197.332402][T12644] gtp10: entered allmulticast mode
[  197.337776][T12644] gtp11: entered promiscuous mode
[  197.339305][T12644] gtp11: entered allmulticast mode
[  197.346652][T12644] gtp12: entered promiscuous mode
[  197.348216][T12644] gtp12: entered allmulticast mode
[  197.361659][T12652] wg1 speed is unknown, defaulting to 1000
[  197.367245][T12644] gtp13: entered promiscuous mode
[  197.369017][T12644] gtp13: entered allmulticast mode
[  197.387590][T12644] gtp14: entered promiscuous mode
[  197.389531][T12644] gtp14: entered allmulticast mode
[  197.399351][T12644] gtp15: entered promiscuous mode
[  197.401189][T12644] gtp15: entered allmulticast mode
[  197.417037][T12644] gtp16: entered promiscuous mode
[  197.418763][T12644] gtp16: entered allmulticast mode
[  197.430564][T12644] gtp17: entered promiscuous mode
[  197.432139][T12644] gtp17: entered allmulticast mode
[  197.440811][T12644] gtp18: entered promiscuous mode
[  197.442524][T12644] gtp18: entered allmulticast mode
[  197.453311][T12644] gtp19: entered promiscuous mode
[  197.455166][T12644] gtp19: entered allmulticast mode
[  197.463937][T12644] gtp20: entered promiscuous mode
[  197.465687][T12644] gtp20: entered allmulticast mode
[  197.475119][T12644] gtp21: entered promiscuous mode
[  197.476720][T12644] gtp21: entered allmulticast mode
[  197.502578][T12644] gtp22: entered promiscuous mode
[  197.504391][T12644] gtp22: entered allmulticast mode
[  197.523464][T12644] gtp23: entered promiscuous mode
[  197.525333][T12644] gtp23: entered allmulticast mode
[  197.531233][T12644] gtp24: entered promiscuous mode
[  197.532860][T12644] gtp24: entered allmulticast mode
[  197.539659][T12644] gtp25: entered promiscuous mode
[  197.541186][T12644] gtp25: entered allmulticast mode
[  197.550446][T12644] gtp26: entered promiscuous mode
[  197.552185][T12644] gtp26: entered allmulticast mode
[  197.558708][T12644] gtp27: entered promiscuous mode
[  197.560331][T12644] gtp27: entered allmulticast mode
[  197.565841][T12644] gtp28: entered promiscuous mode
[  197.567424][T12644] gtp28: entered allmulticast mode
[  197.575266][T12644] gtp29: entered promiscuous mode
[  197.576886][T12644] gtp29: entered allmulticast mode
[  197.582813][T12644] gtp30: entered promiscuous mode
[  197.584503][T12644] gtp30: entered allmulticast mode
[  197.591230][T12644] gtp31: entered promiscuous mode
[  197.592904][T12644] gtp31: entered allmulticast mode
[  197.599224][T12652] chnl_net:caif_netlink_parms(): no params data found
[  197.607590][T12644] gtp32: entered promiscuous mode
[  197.609208][T12644] gtp32: entered allmulticast mode
[  197.625834][T12662] netlink: 'syz.2.1893': attribute type 3 has an invalid length.
[  197.631643][T12644] gtp33: entered promiscuous mode
[  197.633319][T12644] gtp33: entered allmulticast mode
[  197.640675][T12662] netlink: 'syz.2.1893': attribute type 3 has an invalid length.
[  197.739337][T12652] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.741674][T12652] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.744356][T12652] bridge_slave_0: entered allmulticast mode
[  197.747129][T12652] bridge_slave_0: entered promiscuous mode
[  197.754593][T12652] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.756798][T12652] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.764150][T12652] bridge_slave_1: entered allmulticast mode
[  197.766926][T12652] bridge_slave_1: entered promiscuous mode
[  197.857777][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.863526][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.909552][ T5872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.933434][T12652] team0: Port device team_slave_0 added
[  197.945637][T12652] team0: Port device team_slave_1 added
[  198.004531][ T5872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.059960][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.062130][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.083864][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.088236][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.090369][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.099921][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.151701][T12684] openvswitch: netlink: IP tunnel dst address not specified
[  198.160038][T12652] hsr_slave_0: entered promiscuous mode
[  198.162508][T12652] hsr_slave_1: entered promiscuous mode
[  198.168707][T12652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.171093][T12652] Cannot create hsr debugfs directory
[  198.324983][ T5872] bridge_slave_1: left allmulticast mode
[  198.326717][ T5872] bridge_slave_1: left promiscuous mode
[  198.328453][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.341355][ T5872] bridge_slave_0: left allmulticast mode
[  198.343182][ T5872] bridge_slave_0: left promiscuous mode
[  198.348897][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.745156][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.749908][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.756119][ T5872] bond0 (unregistering): Released all slaves
[  198.757173][T12697] __nla_validate_parse: 52 callbacks suppressed
[  198.757192][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'.
[  198.820314][T12687] netlink: 'syz.2.1900': attribute type 3 has an invalid length.
[  198.932994][T12704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1904'.
[  199.190142][ T5872] hsr_slave_0: left promiscuous mode
[  199.197900][ T5872] hsr_slave_1: left promiscuous mode
[  199.200813][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.203950][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.207738][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.210582][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.248825][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'.
[  199.255957][ T5872] veth1_macvtap: left promiscuous mode
[  199.258195][ T5872] veth0_macvtap: left promiscuous mode
[  199.260648][ T5872] veth1_vlan: left promiscuous mode
[  199.262852][ T5872] veth0_vlan: left promiscuous mode
[  199.304264][ T5831] Bluetooth: hci0: command tx timeout
[  199.410987][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'.
[  199.701740][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  199.732670][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  200.355266][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'.
[  200.589140][T12652] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  200.599533][T12652] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.612696][T12652] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  200.621505][T12652] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  200.742992][T12652] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.746977][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[  200.759888][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[  200.769462][T12652] 8021q: adding VLAN 0 to HW filter on device team0
[  200.784630][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.787479][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.802117][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.805071][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.152975][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.180280][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'.
[  201.230514][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'.
[  201.315547][T12652] veth0_vlan: entered promiscuous mode
[  201.332921][T12652] veth1_vlan: entered promiscuous mode
[  201.360072][T12652] veth0_macvtap: entered promiscuous mode
[  201.374636][T12652] veth1_macvtap: entered promiscuous mode
[  201.383917][ T5831] Bluetooth: hci0: command tx timeout
[  201.390834][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.399681][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.412498][T12652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.422912][T12652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.427203][T12652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.429874][T12652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.579902][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.582986][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.673785][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.676905][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.972003][T12830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.981638][T12890] validate_nla: 1 callbacks suppressed
[  202.981650][T12890] netlink: 'syz.0.1934': attribute type 1 has an invalid length.
[  202.986734][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.999024][T12885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'.
[  203.875419][T12896] netlink: 'syz.2.1937': attribute type 30 has an invalid length.
[  203.878016][T12896] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  203.880676][T12896] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  203.925740][T12898] gtp1: left promiscuous mode
[  203.927292][T12898] gtp1: left allmulticast mode
[  203.932407][T12898] gtp2: left promiscuous mode
[  203.937104][T12898] gtp2: left allmulticast mode
[  203.941884][T12898] gtp3: left promiscuous mode
[  203.943504][T12898] gtp3: left allmulticast mode
[  203.948488][T12898] gtp4: left promiscuous mode
[  203.950091][T12898] gtp4: left allmulticast mode
[  203.965810][T12898] gtp5: left promiscuous mode
[  203.967343][T12898] gtp5: left allmulticast mode
[  203.976439][T12898] gtp6: left promiscuous mode
[  203.978105][T12898] gtp6: left allmulticast mode
[  203.981576][T12898] gtp7: left promiscuous mode
[  203.983505][T12898] gtp7: left allmulticast mode
[  203.989041][T12898] gtp8: left promiscuous mode
[  203.990522][T12898] gtp8: left allmulticast mode
[  203.995372][T12898] gtp9: left promiscuous mode
[  203.997089][T12898] gtp9: left allmulticast mode
[  204.002824][T12898] gtp10: left promiscuous mode
[  204.006607][T12898] gtp10: left allmulticast mode
[  204.012636][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.021101][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.024724][T12898] gtp11: left promiscuous mode
[  204.026986][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.028331][T12898] gtp11: left allmulticast mode
[  204.031885][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.038537][T12898] gtp12: left promiscuous mode
[  204.040083][T12898] gtp12: left allmulticast mode
[  204.041644][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.058257][T12898] gtp13: left promiscuous mode
[  204.060204][T12898] gtp13: left allmulticast mode
[  204.064648][T12898] gtp14: left promiscuous mode
[  204.066688][T12898] gtp14: left allmulticast mode
[  204.072711][T12898] gtp15: left promiscuous mode
[  204.076376][T12898] gtp15: left allmulticast mode
[  204.081634][T12898] gtp16: left promiscuous mode
[  204.083248][T12898] gtp16: left allmulticast mode
[  204.088136][T12898] gtp17: left promiscuous mode
[  204.089988][T12898] gtp17: left allmulticast mode
[  204.095090][T12898] gtp18: left promiscuous mode
[  204.096836][T12898] gtp18: left allmulticast mode
[  204.101663][T12898] gtp19: left promiscuous mode
[  204.110439][T12898] gtp19: left allmulticast mode
[  204.126112][T12898] gtp20: left promiscuous mode
[  204.127750][T12898] gtp20: left allmulticast mode
[  204.133129][T12898] gtp21: left promiscuous mode
[  204.136772][T12898] gtp21: left allmulticast mode
[  204.156711][T12898] gtp22: left promiscuous mode
[  204.158290][T12898] gtp22: left allmulticast mode
[  204.166268][T12898] gtp23: left promiscuous mode
[  204.168468][T12898] gtp23: left allmulticast mode
[  204.173471][T12898] gtp24: left promiscuous mode
[  204.175966][T12898] gtp24: left allmulticast mode
[  204.180970][T12898] gtp25: left promiscuous mode
[  204.183029][T12898] gtp25: left allmulticast mode
[  204.188406][T12898] gtp26: left promiscuous mode
[  204.190501][T12898] gtp26: left allmulticast mode
[  204.195650][T12898] gtp27: left promiscuous mode
[  204.197718][T12898] gtp27: left allmulticast mode
[  204.202762][T12898] gtp28: left promiscuous mode
[  204.205258][T12898] gtp28: left allmulticast mode
[  204.210203][T12898] gtp29: left promiscuous mode
[  204.212206][T12898] gtp29: left allmulticast mode
[  204.217270][T12898] gtp30: left promiscuous mode
[  204.219323][T12898] gtp30: left allmulticast mode
[  204.224470][T12898] gtp31: left promiscuous mode
[  204.226567][T12898] gtp31: left allmulticast mode
[  204.231453][T12898] gtp32: left promiscuous mode
[  204.233516][T12898] gtp32: left allmulticast mode
[  204.239059][T12898] gtp33: left promiscuous mode
[  204.240890][T12898] gtp33: left allmulticast mode
[  204.286814][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.326668][T12901] wg1 speed is unknown, defaulting to 1000
[  204.383168][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.458274][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.522499][T12917] __nla_validate_parse: 1 callbacks suppressed
[  204.522516][T12917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1943'.
[  204.606127][T12901] chnl_net:caif_netlink_parms(): no params data found
[  204.755574][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'.
[  204.790913][ T5858] bridge_slave_1: left allmulticast mode
[  204.793243][ T5858] bridge_slave_1: left promiscuous mode
[  204.798030][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.808517][ T5858] bridge_slave_0: left allmulticast mode
[  204.811924][ T5858] bridge_slave_0: left promiscuous mode
[  204.814565][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.129194][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.133947][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.137859][ T5858] bond0 (unregistering): Released all slaves
[  205.151011][T12901] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.155844][T12901] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.158369][T12901] bridge_slave_0: entered allmulticast mode
[  205.162036][T12901] bridge_slave_0: entered promiscuous mode
[  205.229552][T12901] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.238897][T12901] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.241270][T12901] bridge_slave_1: entered allmulticast mode
[  205.254913][T12901] bridge_slave_1: entered promiscuous mode
[  205.311962][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'.
[  205.360011][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.374858][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.378083][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'.
[  205.433170][T12901] team0: Port device team_slave_0 added
[  205.492391][T12901] team0: Port device team_slave_1 added
[  205.510286][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'.
[  205.519737][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.521919][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.530486][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.583769][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.586009][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.597892][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.625246][ T5858] hsr_slave_0: left promiscuous mode
[  205.628185][ T5858] hsr_slave_1: left promiscuous mode
[  205.630278][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.634172][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.637073][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.639424][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.664751][ T5858] veth1_macvtap: left promiscuous mode
[  205.666529][ T5858] veth0_macvtap: left promiscuous mode
[  205.668329][ T5858] veth1_vlan: left promiscuous mode
[  205.670028][ T5858] veth0_vlan: left promiscuous mode
[  206.066526][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  206.102385][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  206.104034][   T54] Bluetooth: hci0: command tx timeout
[  206.567232][T12965] netlink: 'syz.2.1954': attribute type 3 has an invalid length.
[  206.582648][T12901] hsr_slave_0: entered promiscuous mode
[  206.587713][T12901] hsr_slave_1: entered promiscuous mode
[  206.591574][T12901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.594927][T12901] Cannot create hsr debugfs directory
[  206.608173][T12965] netlink: 'syz.2.1954': attribute type 3 has an invalid length.
[  207.568292][T13018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'.
[  207.575754][T12901] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  207.608242][T13021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'.
[  207.611996][T12901] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  207.639186][T12901] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  207.649888][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  207.666667][T12901] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  207.669380][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1966'.
[  207.727663][T13032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.872385][T12901] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.926394][T12901] 8021q: adding VLAN 0 to HW filter on device team0
[  207.941305][  T539] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.944286][  T539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.950175][  T539] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.953027][  T539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.978556][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1971'.
[  208.032449][T12901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.184346][   T54] Bluetooth: hci0: command tx timeout
[  208.208145][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.261372][T12901] veth0_vlan: entered promiscuous mode
[  208.270629][T12901] veth1_vlan: entered promiscuous mode
[  208.301710][T12901] veth0_macvtap: entered promiscuous mode
[  208.309565][T12901] veth1_macvtap: entered promiscuous mode
[  208.326628][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.347521][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.358576][T12901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.362178][T12901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.366720][T12901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.370164][T12901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.526132][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.529331][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.581933][T13087] gtp34: entered promiscuous mode
[  208.583641][T13087] gtp34: entered allmulticast mode
[  208.586746][  T539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.589233][  T539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.601243][T13087] wg1 speed is unknown, defaulting to 1000
[  208.772552][T13087] xt_CT: No such helper "snmp"
[  209.270153][T13117] netlink: 'syz.0.1989': attribute type 3 has an invalid length.
[  209.272922][T13117] netlink: 'syz.0.1989': attribute type 3 has an invalid length.
[  209.569841][T13130] __nla_validate_parse: 7 callbacks suppressed
[  209.569860][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'.
[  209.587814][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'.
[  209.661987][T13139] netlink: 'syz.0.1997': attribute type 3 has an invalid length.
[  209.666029][T13139] netlink: 'syz.0.1997': attribute type 3 has an invalid length.
[  209.690687][T13137] wg1 speed is unknown, defaulting to 1000
[  210.273094][ T5872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.158735][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'.
[  211.161638][T13174] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2007'.
[  211.188382][T13176] netlink: 'syz.2.2008': attribute type 32 has an invalid length.
[  211.252114][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'.
[  211.301023][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  211.390750][T13188] gtp34: left promiscuous mode
[  211.392757][T13188] gtp34: left allmulticast mode
[  211.412081][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.416365][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.419324][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.423715][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.427222][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  211.472215][T13191] wg1 speed is unknown, defaulting to 1000
[  211.488203][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'.
[  211.578050][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'.
[  211.644496][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'.
[  211.644938][T13191] chnl_net:caif_netlink_parms(): no params data found
[  211.756602][T13191] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.758918][T13191] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.761326][T13191] bridge_slave_0: entered allmulticast mode
[  211.764475][T13191] bridge_slave_0: entered promiscuous mode
[  211.767753][T13191] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.769967][T13191] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.772159][T13191] bridge_slave_1: entered allmulticast mode
[  211.778548][T13191] bridge_slave_1: entered promiscuous mode
[  211.804513][T13191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.809674][T13191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.873121][ T5872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.889949][T13191] team0: Port device team_slave_0 added
[  211.898378][T13191] team0: Port device team_slave_1 added
[  211.906713][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2017'.
[  211.925922][T13191] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.928265][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.940406][T13191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.945967][T13191] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.948124][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.956008][T13191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.992521][ T5872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.133348][ T5872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.148787][T13191] hsr_slave_0: entered promiscuous mode
[  212.151232][T13191] hsr_slave_1: entered promiscuous mode
[  212.154045][T13191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.157659][T13191] Cannot create hsr debugfs directory
[  212.476837][ T5872] bridge_slave_1: left allmulticast mode
[  212.478703][ T5872] bridge_slave_1: left promiscuous mode
[  212.480604][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.487692][ T5872] bridge_slave_0: left allmulticast mode
[  212.489416][ T5872] bridge_slave_0: left promiscuous mode
[  212.491232][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.910313][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.916850][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.923037][ T5872] bond0 (unregistering): Released all slaves
[  213.349001][ T5872] hsr_slave_0: left promiscuous mode
[  213.351529][ T5872] hsr_slave_1: left promiscuous mode
[  213.354053][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.356534][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.360070][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.362340][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.397746][ T5872] veth1_macvtap: left promiscuous mode
[  213.399848][ T5872] veth0_macvtap: left promiscuous mode
[  213.402007][ T5872] veth1_vlan: left promiscuous mode
[  213.406360][ T5872] veth0_vlan: left promiscuous mode
[  213.463765][ T5831] Bluetooth: hci0: command tx timeout
[  213.797310][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  213.832516][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  214.312651][T13191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  214.383677][T13191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  214.394453][T13191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  214.415074][T13191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  214.535022][T13191] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.571109][T13191] 8021q: adding VLAN 0 to HW filter on device team0
[  214.594801][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.597743][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.603295][T13297] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  214.615336][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.617585][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.641479][T13296] __nla_validate_parse: 4 callbacks suppressed
[  214.641501][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2032'.
[  214.866830][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'.
[  214.896511][T13191] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.927283][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'.
[  214.982323][T13315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2037'.
[  214.992455][T13314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2037'.
[  215.000942][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'.
[  215.006311][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2037'.
[  215.015812][T13191] veth0_vlan: entered promiscuous mode
[  215.017213][T13314] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  215.020638][T13314] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2037'.
[  215.023422][T13314] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  215.029863][T13191] veth1_vlan: entered promiscuous mode
[  215.071176][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  215.080670][T13317] sctp: [Deprecated]: syz.2.2038 (pid 13317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.080670][T13317] Use struct sctp_sack_info instead
[  215.080890][T13191] veth0_macvtap: entered promiscuous mode
[  215.087580][T13317] sctp: [Deprecated]: syz.2.2038 (pid 13317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.087580][T13317] Use struct sctp_sack_info instead
[  215.111392][T13191] veth1_macvtap: entered promiscuous mode
[  215.124560][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'.
[  215.165646][T13191] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.178503][T13191] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.188931][T13191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.192244][T13191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.203636][T13191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.207073][T13191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.306495][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.310070][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.358199][ T6272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.362589][ T6272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.837221][T13342] wg1 speed is unknown, defaulting to 1000
[  216.336766][T13364] netlink: 'syz.0.2049': attribute type 3 has an invalid length.
[  216.339940][T13364] netlink: 'syz.0.2049': attribute type 3 has an invalid length.
[  216.567361][T11722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.565076][T11722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.940032][T13395] netlink: 'syz.0.2059': attribute type 3 has an invalid length.
[  217.943345][T13395] netlink: 'syz.0.2059': attribute type 3 has an invalid length.
[  217.970189][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.975461][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.978915][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.982979][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.986364][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  218.043629][T13397] wg1 speed is unknown, defaulting to 1000
[  218.194333][T11722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.238361][   T10] IPVS: starting estimator thread 0...
[  218.320994][T11722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.336821][T13413] IPVS: using max 62 ests per chain, 148800 per kthread
[  218.369358][T13421] syzkaller1: entered promiscuous mode
[  218.371127][T13421] syzkaller1: entered allmulticast mode
[  218.379005][T13397] chnl_net:caif_netlink_parms(): no params data found
[  218.458736][T13424] wg1 speed is unknown, defaulting to 1000
[  218.774766][T13397] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.776966][T13397] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.780535][T13397] bridge_slave_0: entered allmulticast mode
[  218.788098][T13397] bridge_slave_0: entered promiscuous mode
[  218.793461][T13397] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.796053][T13397] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.799243][T13397] bridge_slave_1: entered allmulticast mode
[  218.803092][T13397] bridge_slave_1: entered promiscuous mode
[  218.958022][T13397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.987996][T13397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.991732][T11722] bridge_slave_1: left allmulticast mode
[  218.993470][T11722] bridge_slave_1: left promiscuous mode
[  219.015560][T11722] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.029179][T11722] bridge_slave_0: left allmulticast mode
[  219.030992][T11722] bridge_slave_0: left promiscuous mode
[  219.042429][T11722] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.511672][T11722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.518037][T11722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.522749][T11722] bond0 (unregistering): Released all slaves
[  219.613301][T13397] team0: Port device team_slave_0 added
[  219.631668][T13397] team0: Port device team_slave_1 added
[  219.709610][T13460] netlink: 'syz.2.2072': attribute type 16 has an invalid length.
[  219.712358][T13460] netlink: 'syz.2.2072': attribute type 3 has an invalid length.
[  219.718876][T13460] __nla_validate_parse: 12 callbacks suppressed
[  219.718892][T13460] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2072'.
[  219.763249][T13397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.773782][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.781363][T13397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.838929][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'.
[  219.892015][T13397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.903221][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.911507][T13397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.970629][T13397] hsr_slave_0: entered promiscuous mode
[  219.974804][T13397] hsr_slave_1: entered promiscuous mode
[  219.977250][T13397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.979840][T13397] Cannot create hsr debugfs directory
[  220.024125][   T54] Bluetooth: hci0: command tx timeout
[  220.096885][T11722] hsr_slave_0: left promiscuous mode
[  220.104812][T11722] hsr_slave_1: left promiscuous mode
[  220.109870][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.112753][T11722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.118783][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.121659][T11722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.157034][T11722] veth1_macvtap: left promiscuous mode
[  220.158925][T11722] veth0_macvtap: left promiscuous mode
[  220.161167][T11722] veth1_vlan: left promiscuous mode
[  220.163278][T11722] veth0_vlan: left promiscuous mode
[  220.747143][T11722] team0 (unregistering): Port device team_slave_1 removed
[  220.787195][T11722] team0 (unregistering): Port device team_slave_0 removed
[  221.131989][T13495] syz_tun: entered allmulticast mode
[  221.169594][T13495] syz_tun: left allmulticast mode
[  221.425486][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'.
[  221.429442][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'.
[  221.528556][T13520] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2083'.
[  221.531371][T13520] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2083'.
[  221.662394][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2086'.
[  221.863012][T13397] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  221.875926][T13397] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  221.888980][T13397] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  221.896995][T13397] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  221.986198][T13397] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.000412][T13397] 8021q: adding VLAN 0 to HW filter on device team0
[  222.010622][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.012954][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.020687][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.023010][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.104191][ T5831] Bluetooth: hci0: command tx timeout
[  222.215699][T13397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.289242][T13397] veth0_vlan: entered promiscuous mode
[  222.298881][T13397] veth1_vlan: entered promiscuous mode
[  222.334747][T13397] veth0_macvtap: entered promiscuous mode
[  222.340186][T13397] veth1_macvtap: entered promiscuous mode
[  222.368879][T13397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.382547][T13397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.401394][T13397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.410102][T13397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.411126][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  222.412746][T13397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.412763][T13397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.437359][T13578] netlink: 'syz.0.2088': attribute type 4 has an invalid length.
[  222.445041][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  222.477843][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'.
[  222.605812][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.608281][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.629114][  T539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.632768][  T539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.649806][T13587] sctp: [Deprecated]: syz.2.2090 (pid 13587) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.649806][T13587] Use struct sctp_sack_info instead
[  222.655430][T13588] sctp: [Deprecated]: syz.2.2090 (pid 13588) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.655430][T13588] Use struct sctp_sack_info instead
[  223.471825][T13649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.742485][T13665] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  223.745704][T13665] openvswitch: netlink: Message has 1 unknown bytes.
[  224.007614][T13676] wg1 speed is unknown, defaulting to 1000
[  224.188872][ T5831] Bluetooth: hci0: command 0x040f tx timeout
[  224.885887][T13713] wg1 speed is unknown, defaulting to 1000
[  224.996662][T13720] __nla_validate_parse: 23 callbacks suppressed
[  224.996676][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'.
[  225.013332][T13720] netlink: 'syz.2.2127': attribute type 23 has an invalid length.
[  225.062714][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'.
[  225.319876][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'.
[  225.756533][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.867369][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.943907][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.012895][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.126357][   T12] bridge_slave_1: left allmulticast mode
[  226.128617][   T12] bridge_slave_1: left promiscuous mode
[  226.131074][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.140576][   T12] bridge_slave_0: left allmulticast mode
[  226.143018][   T12] bridge_slave_0: left promiscuous mode
[  226.146790][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.498102][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.504384][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.509611][   T12] bond0 (unregistering): Released all slaves
[  226.766884][   T12] hsr_slave_0: left promiscuous mode
[  226.769067][   T12] hsr_slave_1: left promiscuous mode
[  226.771087][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.773312][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.778825][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.781670][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.800008][   T12] veth1_macvtap: left promiscuous mode
[  226.802260][   T12] veth0_macvtap: left promiscuous mode
[  226.806665][   T12] veth1_vlan: left promiscuous mode
[  226.808297][   T12] veth0_vlan: left promiscuous mode
[  226.950514][T13790] netlink: 'syz.2.2139': attribute type 9 has an invalid length.
[  226.983924][T13790] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2139'.
[  227.004854][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2138'.
[  227.148463][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  227.158273][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  227.172173][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  227.177300][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  227.187435][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  227.325133][   T12] team0 (unregistering): Port device team_slave_1 removed
[  227.359983][   T12] team0 (unregistering): Port device team_slave_0 removed
[  227.767919][T13796] wg1 speed is unknown, defaulting to 1000
[  227.915295][T13803] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2141'.
[  227.944762][T13803] netlink: 'syz.0.2141': attribute type 29 has an invalid length.
[  228.031826][T13796] chnl_net:caif_netlink_parms(): no params data found
[  228.208445][T13796] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.212102][T13796] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.221251][T13796] bridge_slave_0: entered allmulticast mode
[  228.229653][T13796] bridge_slave_0: entered promiscuous mode
[  228.239402][T13796] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.241699][T13796] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.253474][T13796] bridge_slave_1: entered allmulticast mode
[  228.258434][T13796] bridge_slave_1: entered promiscuous mode
[  228.326398][T13796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.342222][T13796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.369918][T13796] team0: Port device team_slave_0 added
[  228.372816][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'.
[  228.380655][T13796] team0: Port device team_slave_1 added
[  228.408390][T13796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.410619][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.431428][T13796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.437057][T13796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.439432][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.450880][T13796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.529284][T13842] xt_CT: No such helper "pptp"
[  228.576771][T13796] hsr_slave_0: entered promiscuous mode
[  228.580762][T13796] hsr_slave_1: entered promiscuous mode
[  228.583382][T13796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.586575][T13796] Cannot create hsr debugfs directory
[  228.629228][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  228.785198][T13867] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.224005][   T54] Bluetooth: hci0: command tx timeout
[  229.626507][T13878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2157'.
[  229.829109][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'.
[  229.916710][T13893] netlink: 'syz.2.2160': attribute type 2 has an invalid length.
[  230.057924][T13909] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  230.060356][T13909] netlink: 'syz.0.2163': attribute type 2 has an invalid length.
[  230.102250][T13909] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  230.102736][T13905] __nla_validate_parse: 1 callbacks suppressed
[  230.102746][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'.
[  230.104897][T13909] netlink: 'syz.0.2163': attribute type 2 has an invalid length.
[  230.147618][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2164'.
[  230.306771][T13926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2166'.
[  230.363927][T13796] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  230.368989][T13796] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  230.374586][T13796] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  230.380328][T13796] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  230.512015][T13796] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.529907][T13796] 8021q: adding VLAN 0 to HW filter on device team0
[  230.537137][  T539] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.539438][  T539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.552509][  T539] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.554817][  T539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.759821][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.820780][T13796] veth0_vlan: entered promiscuous mode
[  230.830242][T13796] veth1_vlan: entered promiscuous mode
[  230.878076][T13796] veth0_macvtap: entered promiscuous mode
[  230.883185][T13796] veth1_macvtap: entered promiscuous mode
[  230.899103][T13796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.910777][T13796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.925413][T13796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.929001][T13796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.932152][T13796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.940012][T13796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.988407][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'.
[  231.044979][T13965] netlink: 'syz.0.2170': attribute type 2 has an invalid length.
[  231.115802][  T539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.132847][  T539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.185269][  T539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.188440][  T539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.221707][T13971] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2171'.
[  231.227200][T13971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2171'.
[  231.377678][T13982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.409868][T13982] syzkaller0: entered promiscuous mode
[  231.411828][T13982] syzkaller0: entered allmulticast mode
[  231.416839][T13982] tipc: Resetting bearer <eth:syzkaller0>
[  231.430506][T13980] tipc: Resetting bearer <eth:syzkaller0>
[  231.695573][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  231.867627][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  232.407041][ T5879] tipc: Node number set to 339636183
[  232.579488][T13980] tipc: Disabling bearer <eth:syzkaller0>
[  232.811671][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'.
[  232.886445][T14020] netlink: 'syz.2.2181': attribute type 1 has an invalid length.
[  232.889337][T14020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2181'.
[  233.117251][T14041] openvswitch: netlink: Message has 16 unknown bytes.
[  233.119883][T14041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.129591][T11722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.282311][T11722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.401810][T14046] netlink: 'syz.0.2187': attribute type 4 has an invalid length.
[  234.651607][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.657242][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.662285][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.670310][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.671924][T11722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.681688][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.743387][T14052] wg1 speed is unknown, defaulting to 1000
[  234.787378][T11722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.060519][T11722] bridge_slave_1: left allmulticast mode
[  235.062680][T11722] bridge_slave_1: left promiscuous mode
[  235.072907][T11722] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.084052][T11722] bridge_slave_0: left allmulticast mode
[  235.088604][T11722] bridge_slave_0: left promiscuous mode
[  235.093403][T11722] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.118696][T14067] __nla_validate_parse: 5 callbacks suppressed
[  235.118713][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2192'.
[  235.283157][T14071] netlink: 'syz.0.2193': attribute type 21 has an invalid length.
[  235.287792][T14071] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2193'.
[  235.543091][T11722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.548611][T11722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.552645][T11722] bond0 (unregistering): Released all slaves
[  235.587061][T14071] netlink: 'syz.0.2193': attribute type 4 has an invalid length.
[  235.591425][T14071] netlink: 'syz.0.2193': attribute type 3 has an invalid length.
[  235.603693][T14071] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2193'.
[  235.618775][T14052] chnl_net:caif_netlink_parms(): no params data found
[  235.890493][T14100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2198'.
[  235.912715][T14098] syz_tun: entered allmulticast mode
[  235.969716][T11722] hsr_slave_0: left promiscuous mode
[  235.972846][T11722] hsr_slave_1: left promiscuous mode
[  235.978880][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.981238][T11722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.988226][T11722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.990523][T11722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.017364][T11722] veth1_macvtap: left promiscuous mode
[  236.019217][T11722] veth0_macvtap: left promiscuous mode
[  236.021002][T11722] veth1_vlan: left promiscuous mode
[  236.022633][T11722] veth0_vlan: left promiscuous mode
[  236.462548][T11722] team0 (unregistering): Port device team_slave_1 removed
[  236.510450][T11722] team0 (unregistering): Port device team_slave_0 removed
[  236.746911][ T5840] Bluetooth: hci0: command tx timeout
[  237.036382][T14052] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.039015][T14052] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.041462][T14052] bridge_slave_0: entered allmulticast mode
[  237.045469][T14052] bridge_slave_0: entered promiscuous mode
[  237.049306][T14097] syz_tun: left allmulticast mode
[  237.063236][T14052] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.079085][T14052] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.081676][T14052] bridge_slave_1: entered allmulticast mode
[  237.094810][T14052] bridge_slave_1: entered promiscuous mode
[  237.160170][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.178427][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.240822][T14120] Bluetooth: MGMT ver 1.23
[  237.294306][T14052] team0: Port device team_slave_0 added
[  237.311534][T14052] team0: Port device team_slave_1 added
[  237.353020][T14128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2204'.
[  237.399466][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'.
[  237.402321][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'.
[  237.422045][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.432380][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.442844][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.489805][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.492151][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.502424][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.562833][T14052] hsr_slave_0: entered promiscuous mode
[  237.567167][T14052] hsr_slave_1: entered promiscuous mode
[  237.570361][T14052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.573938][T14052] Cannot create hsr debugfs directory
[  237.966398][T14114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  238.031860][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'.
[  238.249958][T14052] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.256865][T14052] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.262319][T14052] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.278843][T14052] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.353367][T14052] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.369749][T14052] 8021q: adding VLAN 0 to HW filter on device team0
[  238.384787][  T539] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.387741][  T539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.401127][  T539] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.403730][  T539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.461382][T14052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.557695][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'.
[  238.587096][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'.
[  238.713508][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.856343][T14052] veth0_vlan: entered promiscuous mode
[  238.869826][T14052] veth1_vlan: entered promiscuous mode
[  238.919266][T14052] veth0_macvtap: entered promiscuous mode
[  238.925151][T14208] netlink: 'syz.0.2216': attribute type 2 has an invalid length.
[  238.935285][T14052] veth1_macvtap: entered promiscuous mode
[  238.959288][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.965935][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.971142][T14052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.974336][T14052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.977217][T14052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.981766][T14052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.073253][T14216] wg1 speed is unknown, defaulting to 1000
[  239.177116][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.180336][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.244783][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.248718][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.976673][T14227] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  239.981626][T14228] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  240.613613][T14246] __nla_validate_parse: 3 callbacks suppressed
[  240.613635][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'.
[  240.677979][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'.
[  240.813445][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'.
[  240.850821][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'.
[  240.912448][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'.
[  240.993970][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'.
[  240.996235][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'.
[  241.139568][T14272] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  241.198571][T14279] netlink: 'syz.2.2233': attribute type 21 has an invalid length.
[  241.204749][T14279] netlink: 'syz.2.2233': attribute type 22 has an invalid length.
[  241.209948][T14279] netlink: 'syz.2.2233': attribute type 23 has an invalid length.
[  241.213293][T14279] netlink: 'syz.2.2233': attribute type 25 has an invalid length.
[  241.219062][T14279] netlink: 'syz.2.2233': attribute type 26 has an invalid length.
[  241.226924][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2233'.
[  241.527675][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  241.530527][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'.
[  242.148482][T14331] tun0: tun_chr_ioctl cmd 1074025677
[  242.150583][T14331] tun0: linktype set to 778
[  242.519482][T14338] netlink: 'syz.0.2252': attribute type 2 has an invalid length.
[  242.876831][T14362] netlink: 'syz.0.2260': attribute type 11 has an invalid length.
[  242.879303][T14362] netlink: 'syz.0.2260': attribute type 4 has an invalid length.
[  242.979539][T14363] xt_TPROXY: Can be used only with -p tcp or -p udp
[  243.763177][T14369] netlink: 'syz.2.2262': attribute type 1 has an invalid length.
[  244.129266][T14403] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  244.191024][T14404] wg1 speed is unknown, defaulting to 1000
[  244.197203][T14406] netlink: zone id is out of range
[  244.199320][T14406] netlink: zone id is out of range
[  244.201528][T14406] netlink: zone id is out of range
[  244.207194][T14406] netlink: zone id is out of range
[  244.210342][T14406] netlink: zone id is out of range
[  244.212461][T14406] netlink: zone id is out of range
[  244.214775][T14406] netlink: zone id is out of range
[  244.216855][T14406] netlink: zone id is out of range
[  244.219019][T14406] netlink: zone id is out of range
[  244.392382][T14413] tipc: Cannot configure node identity twice
[  245.361018][T14438] netlink: 'syz.0.2282': attribute type 4 has an invalid length.
[  245.364651][T14438] netlink: 'syz.0.2282': attribute type 17 has an invalid length.
[  245.464769][T14447] x_tables: duplicate underflow at hook 3
[  245.554918][T14452] netlink: 'syz.2.2288': attribute type 1 has an invalid length.
[  245.694879][T14456] __nla_validate_parse: 32 callbacks suppressed
[  245.694893][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'.
[  245.939250][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'.
[  246.297193][T14478] x_tables: duplicate underflow at hook 2
[  246.551964][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  246.606956][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  246.610355][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  246.613034][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  246.616511][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'.
[  246.617861][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  246.728630][T14501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2303'.
[  247.636092][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'.
[  247.841804][T14525] netlink: 'syz.2.2310': attribute type 11 has an invalid length.
[  248.694464][T14530] wg1 speed is unknown, defaulting to 1000
[  249.079700][T14547] wg1 speed is unknown, defaulting to 1000
[  249.459772][T14566] wg1 speed is unknown, defaulting to 1000
[  250.041031][T14574] wg1 speed is unknown, defaulting to 1000
[  250.246425][T14580] bridge_slave_0: invalid flags given to default FDB implementation
[  250.783418][T14594] __nla_validate_parse: 9 callbacks suppressed
[  250.783437][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'.
[  251.139855][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'.
[  251.270403][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'.
[  251.292417][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'.
[  251.327003][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'.
[  251.377091][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'.
[  251.532184][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'.
[  252.394907][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2347'.
[  254.021989][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'.
[  255.307437][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.851235][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'.
[  256.012644][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2367'.
[  256.102185][T14719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2368'.
[  256.178500][T14721] xt_hashlimit: size too large, truncated to 1048576
[  256.181330][T14721] xt_hashlimit: max too large, truncated to 1048576
[  256.243186][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  256.344028][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'.
[  256.347722][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  256.351622][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  256.355943][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  256.360474][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  256.364738][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  260.212828][T14864] net_ratelimit: 170 callbacks suppressed
[  260.212870][T14864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.490217][T14876] netlink: 'syz.2.2408': attribute type 2 has an invalid length.
[  260.499873][T14875] netlink: 'syz.2.2408': attribute type 2 has an invalid length.
[  260.867564][T14898] __nla_validate_parse: 79 callbacks suppressed
[  260.867584][T14898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2415'.
[  260.873521][T14898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2415'.
[  260.879157][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'.
[  260.890410][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'.
[  261.016067][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'.
[  261.179541][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'.
[  261.235134][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'.
[  261.238795][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'.
[  261.325074][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'.
[  261.575618][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'.
[  262.089931][T14964] wg1 speed is unknown, defaulting to 1000
[  263.084701][T14982] netlink: 'syz.2.2439': attribute type 21 has an invalid length.
[  263.092139][T14982] netlink: 'syz.2.2439': attribute type 21 has an invalid length.
[  263.279641][T15003] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  263.388446][T15008] netlink: 'syz.2.2448': attribute type 1 has an invalid length.
[  263.730882][T15033] wg1 speed is unknown, defaulting to 1000
[  263.936340][T15045] pimreg: entered allmulticast mode
[  263.948798][T15045] pimreg: left allmulticast mode
[  264.016950][T15047] netlink: 'syz.2.2459': attribute type 1 has an invalid length.
[  264.020278][T15047] netlink: 'syz.2.2459': attribute type 2 has an invalid length.
[  264.614219][T15060] netlink: 'syz.2.2462': attribute type 1 has an invalid length.
[  264.616707][T15060] nbd: error processing sock list
[  264.619198][T15060] block nbd0: shutting down sockets
[  264.736178][T15067] pim6reg: entered allmulticast mode
[  264.738198][T15067] pim6reg: left allmulticast mode
[  265.137098][T15091] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  266.160989][T15124] netlink: 'syz.2.2481': attribute type 4 has an invalid length.
[  266.190888][T15124] __nla_validate_parse: 25 callbacks suppressed
[  266.190911][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  266.237837][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'.
[  266.260502][T15126] netlink: 'syz.2.2482': attribute type 2 has an invalid length.
[  266.263116][T15127] netlink: 'syz.2.2482': attribute type 2 has an invalid length.
[  266.337783][T15129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2483'.
[  266.515953][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'.
[  266.733309][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  266.784006][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  266.888427][T15175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2494'.
[  266.896691][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'.
[  266.945430][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'.
[  267.027875][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'.
[  267.128679][T15183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.706046][T15212] netlink: 'syz.0.2506': attribute type 2 has an invalid length.
[  267.782315][T15221] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  268.382557][T15264] wg1 speed is unknown, defaulting to 1000
[  268.403744][T15266] netlink: 'syz.0.2521': attribute type 2 has an invalid length.
[  268.725134][T15282] netlink: 'syz.2.2527': attribute type 1 has an invalid length.
[  268.727768][T15282] netlink: 'syz.2.2527': attribute type 1 has an invalid length.
[  269.487795][T15344] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  269.810649][T15356] wg1 speed is unknown, defaulting to 1000
[  271.043883][T15400] netlink: 'syz.0.2562': attribute type 2 has an invalid length.
[  271.288239][T15425] __nla_validate_parse: 33 callbacks suppressed
[  271.288260][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'.
[  271.306313][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2568'.
[  271.307457][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'.
[  271.519720][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'.
[  271.540106][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'.
[  271.614415][T15439] block nbd0: server does not support multiple connections per device.
[  271.617360][T15439] block nbd0: shutting down sockets
[  271.662637][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'.
[  271.903522][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'.
[  272.022567][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2581'.
[  272.028147][T15463] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  272.031055][T15463] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2582'.
[  272.035939][T15464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  272.043671][T15463] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  272.048075][T15463] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2582'.
[  272.375726][T15485] wg1 speed is unknown, defaulting to 1000
[  272.618134][T15503] openvswitch: netlink: IPv4 tun info is not correct
[  272.921375][T15524] netlink: 'syz.0.2600': attribute type 12 has an invalid length.
[  273.023415][T15524] syzkaller1: tun_chr_ioctl cmd 35111
[  273.273458][T15544] netlink: 'syz.0.2604': attribute type 2 has an invalid length.
[  289.229522][T15562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  289.233008][T15562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.237510][T15562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  289.240462][T15562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  289.242976][T15562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  289.246731][T15562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  289.250842][T15562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  289.253459][T15562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  289.256917][T15562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.260773][T15562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  291.303876][T15563] Bluetooth: hci3: command tx timeout
[  291.306565][T15563] Bluetooth: hci4: command tx timeout
[  293.383876][ T5220] Bluetooth: hci4: command tx timeout
[  293.386351][ T5220] Bluetooth: hci3: command tx timeout
[  295.463953][T15563] Bluetooth: hci3: command tx timeout
[  295.466350][T15563] Bluetooth: hci4: command tx timeout
[  296.269771][T15563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  296.275917][T15563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  296.278974][T15563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  296.282731][T15563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  296.285888][T15563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  297.543841][ T5220] Bluetooth: hci3: command tx timeout
[  297.546151][T15563] Bluetooth: hci4: command tx timeout
[  298.343871][T15563] Bluetooth: hci5: command tx timeout
[  300.423978][T15563] Bluetooth: hci5: command tx timeout
[  302.503811][T15563] Bluetooth: hci5: command tx timeout
[  304.584166][T15563] Bluetooth: hci5: command tx timeout
[  350.230333][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  350.235674][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  350.238820][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  350.241465][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  350.244147][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  350.279157][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.285565][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.288393][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.290961][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.293329][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  352.268176][   T54] Bluetooth: hci6: command tx timeout
[  352.343928][   T54] Bluetooth: hci7: command tx timeout
[  354.343840][   T54] Bluetooth: hci6: command tx timeout
[  354.423971][   T54] Bluetooth: hci7: command tx timeout
[  356.424220][   T54] Bluetooth: hci6: command tx timeout
[  356.503975][   T54] Bluetooth: hci7: command tx timeout
[  358.347568][ T5220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  358.352247][ T5220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  358.358548][ T5220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  358.362289][ T5220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  358.365782][ T5220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  358.506238][ T5220] Bluetooth: hci6: command tx timeout
[  358.583778][ T5220] Bluetooth: hci7: command tx timeout
[  360.423810][ T5220] Bluetooth: hci8: command tx timeout
[  362.503781][ T5220] Bluetooth: hci8: command tx timeout
[  364.583787][ T5220] Bluetooth: hci8: command tx timeout
[  366.663907][ T5220] Bluetooth: hci8: command tx timeout
[  378.343591][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  378.346205][    C0] rcu: 	0-....: (1 GPs behind) idle=8fd4/1/0x4000000000000000 softirq=72947/72952 fqs=5217
[  378.352462][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  378.354968][    C0] rcu: 	 number:     5256          0            0
[  378.357461][    C0] rcu: 	cputime:      304          0        52173   ==> 52480(ms)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  378.360549][    C0] rcu: 	(t=10500 jiffies g=56301 q=3158 ncpus=2)
[  378.363143][    C0] CPU: 0 UID: 0 PID: 15548 Comm: syz.0.2606 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  378.363181][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  378.363192][    C0] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  378.363225][    C0] Code: 89 ef e8 f0 01 ab f8 4d 89 ef 85 db 74 0d e8 34 7f 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 b9 01 ab f8 48 8b
[  378.363238][    C0] RSP: 0018:ffffc900062770a8 EFLAGS: 00000a06
[  378.363251][    C0] RAX: ffffffff8c96bb00 RBX: 1ffffffff192d760 RCX: 0000000000000000
[  378.363261][    C0] RDX: ffff888104fbb980 RSI: 0000000000000000 RDI: 0000000000000000
[  378.363269][    C0] RBP: ffffffff8c96bae0 R08: ffff888104fbb980 R09: 0000000000000002
[  378.363278][    C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000fffffff1
[  378.363286][    C0] R13: ffff88811f229000 R14: dffffc0000000000 R15: ffff88811f229000
[  378.363296][    C0] FS:  00007fb203e2e6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  378.363307][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.363316][    C0] CR2: 0000200000005008 CR3: 00000001093d8000 CR4: 00000000000006f0
[  378.363348][    C0] Call Trace:
[  378.363357][    C0]  <TASK>
[  378.363365][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  378.363391][    C0]  pie_change+0x96d/0xca0
[  378.363415][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  378.363435][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  378.363457][    C0]  ? __pfx_pie_change+0x10/0x10
[  378.363467][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  378.363496][    C0]  ? timer_init_key+0x171/0x2d0
[  378.363517][    C0]  ? __pfx_pie_init+0x10/0x10
[  378.363530][    C0]  pie_init+0x2a3/0x3f0
[  378.363545][    C0]  qdisc_create+0x7ac/0xea0
[  378.363566][    C0]  tc_modify_qdisc+0x1538/0x20e0
[  378.363580][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  378.363607][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  378.363640][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  378.363660][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  378.363679][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  378.363693][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  378.363721][    C0]  netlink_rcv_skb+0x208/0x470
[  378.363740][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  378.363755][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  378.363782][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  378.363798][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  378.363817][    C0]  netlink_unicast+0x75c/0x8e0
[  378.363841][    C0]  netlink_sendmsg+0x805/0xb30
[  378.363866][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.363885][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  378.363908][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  378.363969][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.363987][    C0]  __sock_sendmsg+0x21c/0x270
[  378.364003][    C0]  ____sys_sendmsg+0x505/0x830
[  378.364026][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.364052][    C0]  ? import_iovec+0x74/0xa0
[  378.364071][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  378.364090][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.364136][    C0]  ? __fget_files+0x2a/0x420
[  378.364156][    C0]  ? __fget_files+0x3a0/0x420
[  378.364179][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  378.364199][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.364228][    C0]  ? do_syscall_64+0xbe/0x3b0
[  378.364246][    C0]  do_syscall_64+0xfa/0x3b0
[  378.364260][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.364271][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  378.364288][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.364300][    C0] RIP: 0033:0x7fb202f8e929
[  378.364314][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.364326][    C0] RSP: 002b:00007fb203e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.364340][    C0] RAX: ffffffffffffffda RBX: 00007fb2031b5fa0 RCX: 00007fb202f8e929
[  378.364350][    C0] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004
[  378.364358][    C0] RBP: 00007fb203010b39 R08: 0000000000000000 R09: 0000000000000000
[  378.364367][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.364375][    C0] R13: 0000000000000000 R14: 00007fb2031b5fa0 R15: 00007ffe711a4978
[  378.364397][    C0]  </TASK>

VM DIAGNOSIS:
23:12:32  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888021498237 R9 =1ffff11004293046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c0 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb203e2e6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005008 CR3=00000001093d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb203185478 00007fb203185450 XMM03=00007fb203185488 00007fb203185480
XMM04=00007fb203ced100 00007fb203185440 XMM05=00007fb203185458 00007fb2031854a0
XMM06=00007fb203185498 00007fb203185490 XMM07=00007fb203185488 00007fb203185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb203011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000018 RCX=ffffffff8216354c RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa1f3f0 RBP=0000000000000001 RSP=ffffc90002ecf110
R8 =ffff88813663fd00 R9 =000000000000003f R10=000000000000148a R11=ffffed100bfff830
R12=dffffc0000000000 R13=ffffea0000b40040 R14=0000000000000001 R15=ffffc90002ecf340
RIP=ffffffff8223a095 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05f3ae7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f05f2f856a3 00007f05f2f856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=1fbf23891011a293 1e73e71c00000047 XMM07=2958418300000000 7278a3ea41636054
XMM08=c3aeb3e7150776d4 932cbef200000046 XMM09=656b5f5f2e676972 6f5f74696e695f63
XMM10=3463313061396666 6666666666660a79 XMM11=695f636e5f766461 7461622062203063
XMM12=666666666666660a 79656b5f5f2e7465 XMM13=5f73766f20622030 3866633130613966
XMM14=342e79656b5f5f2e 74656e5f74696e69 XMM15=6663313061396666 6666666666660a31
