last executing test programs:

781.655723ms ago: executing program 1 (id=724):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000003480)={'syztnl1\x00', 0x0, 0x2b, 0x40, 0x9, 0x2, 0x0, @remote, @mcast1, 0x8, 0x10, 0x0, 0x7}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000700000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003380)={0xffffffffffffffff, 0x0, 0x269, 0x80000001}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000900020073797a320000c7450b9cc0210a730000"], 0x28}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003540), 0x4) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003580)={0x0, 0xfffffbff, 0x18}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003800)={{}, &(0x7f00000035c0), &(0x7f00000037c0)='%pS    \x00'}, 0x20)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) (async)
r4 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="000000001e00000010002b00461dc071caf2d43500d1f6c8"], 0x20}], 0x1}, 0x0) (async)
r6 = accept$nfc_llcp(r4, &(0x7f0000000100), &(0x7f0000000240)=0x60)
sendfile(r3, r6, &(0x7f0000000280)=0x7, 0xb2)

442.428618ms ago: executing program 1 (id=736):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff9186dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

373.316259ms ago: executing program 0 (id=737):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x0, 0x2, 'bridge0\x00'}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0xfffffffffffffe22}, 0x1, 0x0, 0x0, 0x4004}, 0xc800)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e000000000002000004"], 0x14}, 0x1, 0x40030000000000}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000005c0)=""/172, 0xac}], 0x4}, 0x0)

372.689036ms ago: executing program 2 (id=738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @private}, <r1=>0x0}, &(0x7f0000000080)=0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x7d}}, 0x0, 0x0, 0x6, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r0, 0xee049000)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x3c1, 0xffffff80, 0x2e0, 0x1f0, 0x12, 0x60d, 0x0, 0x202, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xff, 0x15544f338ecf0204, 0xffffffff], 0x4e24, 0x4e24, 0x4e23, 0x4e23, 0x6, 0xe, 0x1, 0x80, 0x1}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0xff000000, 0xff, 0xffffff00, 0xff], 0x4e23, 0x4e23, 0x4e21, 0x0, 0x1ff, 0x0, 0xfffffffb, 0x400, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x8, r1}, 0xc)

372.013158ms ago: executing program 0 (id=739):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)="2227675803e1ff59b11ec2ceb0c10008abb1f2cd56fb8424871799b66eaa2921d2af460cd7bb47a427e897799bc594ff0b651a0393ca97c03d2bd45f1e6a2a7e0e5f4093d419eda495f1c50a03")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r6}, &(0x7f0000000340)=0x8)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020605000000000000000000050000050500040003000000050004000100000012000300686100003a6e65742c706f727400000005000500070000000500040000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x4800)

295.531127ms ago: executing program 2 (id=740):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x4000000)

294.185471ms ago: executing program 0 (id=741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x38, 0x1403, 0x800, 0xfffffffd, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940, 0x57ac123a25013287}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd1}, 0x0)

241.703707ms ago: executing program 1 (id=742):
socket$tipc(0x1e, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/242, 0xf2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

241.301782ms ago: executing program 0 (id=743):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x5)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x890c, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000340)=0x8)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0xd9, "32ed19d06c4f802e83497b3262ded8e5eb6170cde9ec3f8d1356e6c20efc8de9781767dd2c8ca8b39e551d9090a74c98e9c29bfbbaeccffa6d811a8d234860b6a757699a7ce6d7ea7c1e1a365861060cbd77855c44610eac9f2d373f7528824ff2b08c66821aa2a5afabb54d360b047c81c607ebf7b7c73fd306eb5ebe0c5e5b41fc5d6663f7813dbc6d632525cd8f3e0c2ec353c9f68fd4a108949fb74af59f99873e8c2762ab43b70975543d7df305cd1c3f121923fc0ef6466b3fd80c8afb2a6b0035d5673b918a8f917741c1ee8d4b4fc859cd8f9d6190"}, &(0x7f0000000080)=0xfd)
shutdown(r0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x17c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xf4, 0x5, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x4, 0x10, 0x101}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x2, 0x1, 0x7}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x5c, 0x0, 0x8, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x2b0b, 0x5, 0x5, 0x1}, 0x5}}]}, {0x51, 0x6, "a94ea8cd2c456f46b73d2f1ac29d83f865a819e50400b3d23efd1d2a87d8037aa7bab08f772e03d6847d1f0c98a20151c8a9966cd7045710532f20c921da875757f3aa80b2059b9ee6c8eea8b5"}, {0xc, 0x7, {0x48022b82b4dfdb53}}, {0xc, 0x8, {0x6, 0x2}}}}]}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

240.997029ms ago: executing program 2 (id=744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x3, 0x4, 0x2, 0x7, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

161.471521ms ago: executing program 2 (id=745):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000980)={0x8c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x61, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3e72}, @broadcast, @device_b, @from_mac=@device_b, {0x7, 0x6}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x400, @default, 0x2000, @void, @val, @val={0x3, 0x1, 0x84}, @val={0x4, 0x6, {0x5, 0x3c, 0x7, 0x1}}, @val={0x6, 0x2, 0xf}, @val={0x2d, 0x1a, {0x2, 0x1, 0x0, 0x0, {0x9, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x7}}, @val={0x72, 0x6}, @void}}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40040d4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0)

152.899301ms ago: executing program 1 (id=746):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x24}}, 0x400c0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000002440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=ANY=[@ANYBLOB="480000001000010400000000ee9d90fbadf2b6a560d0197f3d300000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000000000000000000001", @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b000000000005000c0002000000"], 0x44}}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000080)={0x2a, 0x4, 0x4000}, 0xc)
bind$qrtr(r4, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000080)=0x80000000, 0x4)
sendmmsg$sock(r6, &(0x7f0000002280)=[{{&(0x7f0000000080)=@l2={0x1f, 0x5, @none, 0x7fff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x5cde}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}, {{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x2, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)="a07dd92c08125d2b3b6b004a7e0e60554b6013aa73214e55c0d7518f31c12b8bde0a59d5e7aba0d7e2c00d2ab2904c2afaaee2a5c6b5d08a3bf0a751bbfce393341b78d82b8a0792d5f008cccd383ec59f51fc32243f958e2cf0d21b50f1dd2a5d90769b4180fbb8abbcd501873132a184ee4797ec00fba61a42fc76bc7655cd250fa8dec7e8d9b9c7d2ce1f0b42a2062e8ffc0e380a738882f6bbefedb25c657b6ec08078fd6ab7ef2c7c90b9cd59d486190bc9652fa84c187273b66831621b2cb9cc258b2b47c25693eb59b5", 0xcd}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f00000004c0)="83efa6185f85cbe43b284fef812f481bd0807bad1040df59b8cb7821781acc4dab3ed42164afe526cda31e35f1aa6989e7eb240948c243b144b87846fc0bfd2a913ae26e58decbfe634fb7dd4012501b13bb12a77234be1550e02f8f7e0a51a9ad5cbb569d198a1b375f000fe23d823dd918b7142eef61d5725cdb9297e885eaca12393b98fca420fae6bad971de06ef9aafe7800f9199a3b3045e16a65c6afc6ac1c776ea3747eee8d2f0", 0xab}], 0x3, &(0x7f0000000400)}}, {{&(0x7f0000001780)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000001980)=[{&(0x7f00000006c0)="ae1657dfa9baa91d960be0bfa2134eeac4ffbb07cde730d4977bc8", 0x1b}, {&(0x7f0000001800)="904282cee77f5d8b779d003bc7ff46dcaa4aff536d6b8191323746f3ed2b7b0da34d053f9283841b7be3d619989c70500f23e139d186322f12a6b0297c69e0586a04412460da673f4689396d95e983a37943f3acc83703e7beff59444b4483b7d8242811fdb1c1dbda865bedb40a409d39102d20e4a7e77e05bf91bc725a93", 0x7f}, {&(0x7f0000001880)="0aa73d1d8837f1216bd51d2125e2bab957a5c50770ba97dd444c794fd3a3987eb6ec3f9e26a6f3759b388d7d530d6ddc0b13b535037e3a1b", 0x38}, {&(0x7f00000018c0)="abe43b0ea2ab2ec4c98342e4d3c391e4c900b76fca0850500785031e9a7dcc73952d14bfa85335e00a5444defd6f6f574a1d19932e644fb105ad51225a4a2c1ddad9859af8c529ddcd9b0e3753153c91cd7da16dda59b776c320778ed5936afb3bfaa5f3254512fc93653f088e2206021957460b278cf9f29e3e4b2714994c504ec6c407", 0x84}], 0x4, &(0x7f00000019c0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x4800}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="1288c2a8a8c4bfcc67978e9664445da1ad82e2caea6753c20d9d03e501624a2ed6ec9e0332d424f2704544dcfc8c297347f3f1d989282075268a4bb03b37dfead136cc5369e7083d4770e5ed92f98aa8e8fb9b184fb4fc49d88495e9560781a734aa2f46edd45a", 0x67}, {&(0x7f0000001b40)="415abbb308e7aaf42d23a1e6d572b9230c590decd144caa6f8ac2b17ea397c18e78dba57ee4d18c0935f0bd7cc19777c838f46e4aee044d1dbb81436c3b3e184e8ed790dda59e30deb65ebd07e014eabec762984a1bea2cea061b93ee3d89b58e769be", 0x63}, {&(0x7f0000001bc0)="f26114afcc2366652af8d875", 0xc}, {&(0x7f0000001c00)="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", 0xfd}], 0x4, &(0x7f0000001d40)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x95a}}, @timestamping={{0x14, 0x1, 0x25, 0x14ec}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x90}}, {{&(0x7f0000001e00)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e80)="0c0bfc68c4357bd8e86d5e8b9c6aba90e83da6eda07f556ac806b04be9d1991f6babf0d44acab5501b7318721a9fffbad9d97c11bacc208da49be0566a0ca4e1a88f19bd92c669493491fe72ec17", 0x4e}, {&(0x7f0000001f00)="573348b35cdae9dcf019681e8d4d3b75b800b7d6f678199e5afb906c1a98bec3850aa7af94f7abc87b744aac2717d5fa034bfee41053b9d4304b85642b7dbcc0", 0x40}, {&(0x7f0000001f40)="22e8e4fbd50cc395cd6b1dea0883751931a2b75fd480fe2310412e791b60842e7a3f5e35732c2a64b41a6f798e936aac63eb97d6b8dca792d4688ce6b0426c016d7a3498a137561479d807e5410e77b084c77611399dfc9cd95ff127c5b8d268e75fbb012b42ebd3e255dbdf763938839f31a3fbbf7fb41e927ddaf231e5a654502df39b52f460c0a04c37def64d679f", 0x90}, {&(0x7f0000002000)="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", 0xfe}, {&(0x7f0000002100)="d9a7dad9bcaec12cde294fa0cff2a0bb343246b4fd52942305234816e6e65932caa00eaf056ac5fbd7d7d90f6970d4494214308c17987a2dc73b3bcc5d9faa4af4b88506ccc4628a36dd73f64a47526b6e5cee5cefef240507f4772c1850b4305b29452814f608eb51d830362fcb816fd4658cdb80baa3d141158acc14cc00500ea43048d20de3ec5fbcb95536e0b144248022661446dc04ccded82b7c0802963e8008ba3020b8a3461d247bd22145a7e1d61493a00936ef00ea0111db179fb50e9c8ddaa92466e048c961a24f376a9ba538d03615019aecc3f6f0dcd3c9", 0xde}], 0x5}}], 0x5, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)

67.399089ms ago: executing program 0 (id=747):
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0417a78b", @ANYRES16=0x0, @ANYBLOB="0100000000000000000002020200"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r2=>0x0, @private, @multicast2}, &(0x7f0000000140)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x0, 0x70bd25, 0x25dfdbfb, {0x7, r2}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48804}, 0x4800)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

66.462995ms ago: executing program 1 (id=748):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0)

2.189143ms ago: executing program 2 (id=749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="12bfed29c3e387af2d264b0f546c19fc290a1b6e18180aec63975d15e261852473c325201eeace5bb36e0330972016fbc18bbcc05c66afc8b3bfac299ea34c39433a9f0f87646f3109148afbc18d04b07a3bee020d10828b70be6e618c473b9b764e72bca22d3955c05bd845"], 0x368}, 0x1, 0x0, 0x0, 0x4840}, 0x4008055)

1.792672ms ago: executing program 1 (id=750):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000080))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'pimreg0\x00', 'wlan0\x00', {}, {}, 0x73, 0x1, 0x12}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4000880)

1.388996ms ago: executing program 0 (id=751):
r0 = socket(0xa, 0x3, 0x3a)
sendmmsg$unix(r0, &(0x7f0000003a80)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}, @cred={{0x1c, 0x29}}], 0x30, 0x4004}}], 0x1, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x9, 0xa}, {0x1, 0xfff6}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40055}, 0x4000)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@rand_addr, <r2=>0x0}, &(0x7f0000000680)=0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', <r10=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'sit0\x00', <r14=>0x0, 0x1, 0x0, 0x4, 0x39f, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x3, 0xac}, @timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x6, [{@private=0xa010101, 0x7}, {@loopback, 0x9}]}, @cipso={0x86, 0x42, 0x0, [{0x2, 0x9, "b334205850d37d"}, {0x2, 0x3, "8f"}, {0x2, 0x8, "d470e4c5173c"}, {0x5, 0x10, "cc42ddc206b582b1407df9092530"}, {0x1, 0xc, "de163e4e703f94b0c0fe"}, {0x7, 0x4, "5d1a"}, {0x7, 0x8, "695c7b961be9"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r15=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c4050000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000800030a710000000300090109000000070005080200000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="dc01028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004005400000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r2, @ANYBLOB="c40002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007cf800004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="7800028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400000481810e0000000900080a080000000e00080e0c0000000500f51006000000040002ff0500000004003602000001000400072a9a5e0000a08502ff0104000008000100", @ANYRES32=r5, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff03000008000100", @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r9, @ANYBLOB="bc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB="3c0001002400010075730700000000000000705f656e61626c65640000000000000000000000000007000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x5c4}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000)
r16 = socket(0x1, 0x803, 0x0)
r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000010000009500000000000000a312a747477b1724c77c5bef740c9ee7e38be31d5b5d21970e8627ab67f729f1ead8691f62b9d19b4c3452bcb00a8fedae587d125dbbf3859f2cece4db83b89f17c8f3ba95df483a7e615388d92266cc1f13c40ab293694b46e2ce154706394510df2a7f09a7f490ea087d4536388a5b17a4733400fbbff7d213ee5dfce781aa893906fd1cd06e491e8fea87f4cb175bcae1b78582b2812e2c055d11aae2640c206ea456211a4d4971bd87a7f6275257bdc43421a2d61c537aeaaf"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, r17, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94)
getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x5c}}, 0x8000)

0s ago: executing program 2 (id=752):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfdff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x2010400)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x8016}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$key(0xf, 0x3, 0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x49)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18)
recvfrom$inet(r7, 0x0, 0x0, 0x40, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x110c230000)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30926' (ED25519) to the list of known hosts.
syzkaller login: [   47.066431][ T5740] cgroup: Unknown subsys name 'net'
[   47.191678][ T5740] cgroup: Unknown subsys name 'cpuset'
[   47.198375][ T5740] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.355753][ T5740] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.402633][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.411068][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.414692][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.421095][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.425368][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.425484][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.432079][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.432812][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.438278][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.441784][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.495498][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.499116][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.501697][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.504335][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.506789][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.703272][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   54.736177][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   54.899389][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.902504][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.905068][ T5810] bridge_slave_0: entered allmulticast mode
[   54.908223][ T5810] bridge_slave_0: entered promiscuous mode
[   54.913095][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.916206][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.919933][ T5810] bridge_slave_1: entered allmulticast mode
[   54.923817][ T5810] bridge_slave_1: entered promiscuous mode
[   54.979027][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.982197][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.985505][ T5808] bridge_slave_0: entered allmulticast mode
[   54.990525][ T5808] bridge_slave_0: entered promiscuous mode
[   54.995989][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.999604][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.002729][ T5808] bridge_slave_1: entered allmulticast mode
[   55.006638][ T5808] bridge_slave_1: entered promiscuous mode
[   55.038785][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.061663][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.065676][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.076664][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.113220][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.132813][ T5810] team0: Port device team_slave_0 added
[   55.150970][ T5810] team0: Port device team_slave_1 added
[   55.155198][ T5808] team0: Port device team_slave_0 added
[   55.185656][ T5808] team0: Port device team_slave_1 added
[   55.229452][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.232414][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.245616][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.263333][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.265919][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.269568][ T5819] bridge_slave_0: entered allmulticast mode
[   55.273575][ T5819] bridge_slave_0: entered promiscuous mode
[   55.278351][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.281320][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.292552][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.298432][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.301431][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.314329][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.319893][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.322937][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.325947][ T5819] bridge_slave_1: entered allmulticast mode
[   55.329917][ T5819] bridge_slave_1: entered promiscuous mode
[   55.333576][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.336490][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.348510][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.414663][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.419729][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.468175][ T5810] hsr_slave_0: entered promiscuous mode
[   55.471510][ T5810] hsr_slave_1: entered promiscuous mode
[   55.490710][ T5819] team0: Port device team_slave_0 added
[   55.495577][ T5819] team0: Port device team_slave_1 added
[   55.503080][ T5808] hsr_slave_0: entered promiscuous mode
[   55.506303][ T5808] hsr_slave_1: entered promiscuous mode
[   55.510760][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.513955][ T5808] Cannot create hsr debugfs directory
[   55.576714][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.580386][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.589092][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.613212][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.616227][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.629400][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.729807][ T5819] hsr_slave_0: entered promiscuous mode
[   55.733055][ T5819] hsr_slave_1: entered promiscuous mode
[   55.736024][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.739960][ T5819] Cannot create hsr debugfs directory
[   55.912694][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.920348][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.935497][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.950612][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.985724][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.997329][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.002848][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.009296][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.035952][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.040756][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.050058][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.055815][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.146874][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.183464][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   56.195716][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.199064][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.221422][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.224622][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.244202][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.273302][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   56.282100][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.292354][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.294730][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.306830][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.309252][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.316329][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   56.332822][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.335347][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.345277][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.347728][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.432102][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.508481][ T5815] Bluetooth: hci0: command tx timeout
[   56.510618][ T5202] Bluetooth: hci1: command tx timeout
[   56.519500][ T5808] veth0_vlan: entered promiscuous mode
[   56.535101][ T5808] veth1_vlan: entered promiscuous mode
[   56.552454][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.579080][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.588319][ T5202] Bluetooth: hci2: command tx timeout
[   56.600500][ T5808] veth0_macvtap: entered promiscuous mode
[   56.609386][ T5819] veth0_vlan: entered promiscuous mode
[   56.616284][ T5819] veth1_vlan: entered promiscuous mode
[   56.626005][ T5808] veth1_macvtap: entered promiscuous mode
[   56.683751][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.703031][ T5819] veth0_macvtap: entered promiscuous mode
[   56.719669][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.726381][ T5819] veth1_macvtap: entered promiscuous mode
[   56.746132][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.751031][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.754692][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.760268][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.789292][ T5810] veth0_vlan: entered promiscuous mode
[   56.805289][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.816647][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.824559][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.829754][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.833396][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.837146][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.849490][ T5810] veth1_vlan: entered promiscuous mode
[   56.941480][ T5810] veth0_macvtap: entered promiscuous mode
[   56.947453][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.950307][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.956601][ T5810] veth1_macvtap: entered promiscuous mode
[   56.975613][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.981844][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.988005][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.992914][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.015780][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.045973][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.053591][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.059093][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.062893][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.064685][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.066565][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.078691][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.079919][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.239421][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.239553][ T5881] syzkaller1: tun_chr_ioctl cmd 1074025677
[   57.242064][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.252676][ T5881] syzkaller1: linktype set to 6
[   57.263512][ T5877] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   57.283655][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.286296][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.342426][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.488998][ T5889] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   57.492485][ T5889] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5'.
[   57.617664][ T5894] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   57.657306][ T5898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.903622][ T5910] tipc: Started in network mode
[   57.905987][ T5910] tipc: Node identity fa92bac6b075, cluster identity 4711
[   57.915961][ T5910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.920322][ T5910] syzkaller0: entered promiscuous mode
[   57.923812][ T5910] syzkaller0: entered allmulticast mode
[   57.932004][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.942734][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.946433][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.951856][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.957696][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.968752][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.002671][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.054272][ T5917] Zero length message leads to an empty skb
[   58.140504][ T5924] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   58.319585][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.322938][ T5928] openvswitch: netlink: Flow key attr not present in new flow.
[   58.356990][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.364672][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.370589][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.373501][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.587430][ T5815] Bluetooth: hci0: command tx timeout
[   58.589949][ T5202] Bluetooth: hci1: command tx timeout
[   58.669130][ T5202] Bluetooth: hci2: command tx timeout
[   58.709340][ T5909] tipc: Resetting bearer <eth:syzkaller0>
[   58.726590][ T5909] tipc: Disabling bearer <eth:syzkaller0>
[   58.738718][ T5949] syzkaller1: tun_chr_ioctl cmd 1074025677
[   58.740798][ T5949] syzkaller1: linktype set to 6
[   58.896077][ T5956] bond0: (slave bond_slave_1): Releasing backup interface
[   60.034273][ T5962] x_tables: duplicate underflow at hook 2
[   60.037714][ T5963] x_tables: duplicate underflow at hook 2
[   60.314710][ T5985] 8021q: VLANs not supported on vxcan1
[   60.458991][ T5991] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   60.462125][ T5818] IPVS: starting estimator thread 0...
[   60.483858][ T5999] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   60.547276][ T5995] IPVS: using max 80 ests per chain, 192000 per kthread
[   60.607918][ T6004] 8021q: VLANs not supported on ip_vti0
[   60.669260][ T5815] Bluetooth: hci0: command tx timeout
[   60.671565][ T5202] Bluetooth: hci1: command tx timeout
[   60.760818][ T5202] Bluetooth: hci2: command tx timeout
[   61.052508][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.181872][ T6030] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.429030][ T6040] batadv0: entered allmulticast mode
[   61.801550][ T6071] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   62.748363][ T5815] Bluetooth: hci0: command tx timeout
[   62.750859][ T5202] Bluetooth: hci1: command tx timeout
[   62.828003][ T5815] Bluetooth: hci2: command tx timeout
[   63.056107][ T6078] Cannot find add_set index 0 as target
[   63.165057][ T6084] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   63.170902][ T6084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   63.270747][   T24] IPVS: starting estimator thread 0...
[   63.275787][ T6090] __nla_validate_parse: 12 callbacks suppressed
[   63.275800][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   63.339006][ T6098] netlink: 48 bytes leftover after parsing attributes in process `syz.2.79'.
[   63.358146][ T6093] IPVS: using max 49 ests per chain, 117600 per kthread
[   63.385860][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.80'.
[   63.390198][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'.
[   63.416777][ T6105] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   63.423964][ T6105] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   63.427093][ T6105] netlink: 192 bytes leftover after parsing attributes in process `syz.0.81'.
[   63.439456][ T6107] netlink: 'syz.1.82': attribute type 11 has an invalid length.
[   63.670344][ T6115] bridge0: port 3(gretap0) entered blocking state
[   63.672708][ T6115] bridge0: port 3(gretap0) entered disabled state
[   63.675064][ T6115] gretap0: entered allmulticast mode
[   63.680677][ T6115] gretap0: entered promiscuous mode
[   63.684762][ T6115] bridge0: port 3(gretap0) entered blocking state
[   63.688687][ T6115] bridge0: port 3(gretap0) entered forwarding state
[   63.782948][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[   63.796956][ T6130] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[   63.831472][ T6134] netlink: 240 bytes leftover after parsing attributes in process `syz.2.89'.
[   63.878532][ T6136] netlink: 104 bytes leftover after parsing attributes in process `syz.2.90'.
[   63.882834][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   64.051188][ T6148] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   64.054554][ T6148] netlink: 'syz.2.92': attribute type 11 has an invalid length.
[   64.058641][ T6148] netlink: 220 bytes leftover after parsing attributes in process `syz.2.92'.
[   64.371829][ T6160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.460831][ T6166] vxcan3: entered allmulticast mode
[   64.534101][ T6166] 0: renamed from hsr0 (while UP)
[   64.540637][ T6166] 0: entered allmulticast mode
[   64.542720][ T6166] hsr_slave_0: entered allmulticast mode
[   64.556419][ T6166] hsr_slave_1: entered allmulticast mode
[   64.563731][ T6166] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   64.771016][ T6188] Bluetooth: MGMT ver 1.23
[   64.844986][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.866281][ T6201] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   64.869197][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.932434][ T6206] xt_CT: No such helper "syz0"
[   64.935826][ T6206] x_tables: ip_tables: osf match: only valid for protocol 6
[   65.017573][ T5262] udevd[5262]: worker [5817] terminated by signal 33 (Unknown signal 33)
[   65.805362][ T6257] netlink: 'syz.2.127': attribute type 2 has an invalid length.
[   66.294061][ T6295] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   66.583133][ T6316] netlink: 'syz.1.149': attribute type 3 has an invalid length.
[   66.652957][ T6324] netlink: 'syz.1.153': attribute type 2 has an invalid length.
[   66.663926][ T6324] k*]: entered promiscuous mode
[   66.668726][ T6324] dummy0: entered promiscuous mode
[   66.670539][ T6324] dummy0: entered allmulticast mode
[   66.701806][ T6327] netlink: 'syz.1.154': attribute type 4 has an invalid length.
[   67.214417][ T6351] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   67.271554][ T6353] batman_adv: batadv0: Adding interface: ip6gretap1
[   67.274605][ T6353] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.286287][ T6353] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[   67.293049][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.296525][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.300844][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.304572][ T6354] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.315556][ T6354] batman_adv: batadv0: Removing interface: ip6gretap1
[   67.372411][ T6358] sctp: [Deprecated]: syz.0.163 (pid 6358) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.372411][ T6358] Use struct sctp_sack_info instead
[   67.998500][ T6458] xt_cluster: node mask cannot exceed total number of nodes
[   68.173887][  T791] IPVS: starting estimator thread 0...
[   68.289319][ T6475] IPVS: using max 42 ests per chain, 100800 per kthread
[   68.320025][ T6484] __nla_validate_parse: 15 callbacks suppressed
[   68.320042][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   68.333246][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   68.338840][ T6484] netlink: 48 bytes leftover after parsing attributes in process `syz.0.182'.
[   68.343909][ T6481] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   68.348821][ T5642] bond0: (slave bond_slave_0): interface is now down
[   68.351790][ T5642] bond0: (slave bond_slave_1): interface is now down
[   68.371467][ T5642] bond0: (slave bond_slave_0): interface is now down
[   68.374165][ T5642] bond0: (slave bond_slave_1): interface is now down
[   68.406501][ T5642] bond0: (slave bond_slave_0): interface is now down
[   68.410044][ T5642] bond0: (slave bond_slave_1): interface is now down
[   68.422796][ T5642] bond0: now running without any active interface!
[   68.513701][ T5840] IPVS: stop unused estimator thread 0...
[   68.644457][ T6502] netlink: 248 bytes leftover after parsing attributes in process `syz.1.185'.
[   68.780389][ T6506] xt_TCPMSS: Only works on TCP SYN packets
[   68.830001][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.2.187'.
[   68.933034][ T6514] netlink: 92 bytes leftover after parsing attributes in process `syz.1.190'.
[   68.964121][ T6518] validate_nla: 2 callbacks suppressed
[   68.964133][ T6518] netlink: 'syz.2.189': attribute type 1 has an invalid length.
[   69.020546][ T6518] bond2: (slave bridge1): making interface the new active one
[   69.031524][ T6518] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   69.174488][ T6529] netlink: 356 bytes leftover after parsing attributes in process `syz.1.194'.
[   69.185527][ T6529] netlink: 356 bytes leftover after parsing attributes in process `syz.1.194'.
[   69.221289][ T6533] netlink: 52 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.473745][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[   69.812372][ T6585] netlink: 'syz.0.211': attribute type 13 has an invalid length.
[   69.817199][ T6585] netlink: 'syz.0.211': attribute type 12 has an invalid length.
[   69.887938][ T6595] xt_cgroup: path and classid specified
[   70.084969][ T6613] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   70.271355][ T6633] netlink: 'syz.2.226': attribute type 10 has an invalid length.
[   70.278972][ T6635] xt_nfacct: accounting object `syz1' does not exists
[   70.301018][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.305516][ T6633] team0: Port device bond0 added
[   70.336814][ T6642] netlink: 'syz.1.229': attribute type 10 has an invalid length.
[   70.340079][ T6642] dummy0: left promiscuous mode
[   70.341734][ T6642] dummy0: left allmulticast mode
[   70.366954][ T6642] team0: Port device dummy0 added
[   70.382411][ T6642] Driver unsupported XDP return value 0 on prog  (id 91) dev N/A, expect packet loss!
[   70.991923][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.862363][ T6657] raw_sendmsg: syz.1.233 forgot to set AF_INET. Fix it!
[   71.865165][ T6657] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   71.913277][ T6665] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   72.140913][ T6686] veth1_macvtap: left promiscuous mode
[   72.144223][ T6686] macsec0: entered promiscuous mode
[   72.157376][ T6686] veth1_macvtap: entered promiscuous mode
[   72.162970][ T6686] macsec0: left promiscuous mode
[   72.319144][  T791] IPVS: starting estimator thread 0...
[   72.367940][ T6713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.417174][ T6709] IPVS: using max 80 ests per chain, 192000 per kthread
[   72.461542][ T6717] netlink: 'syz.0.252': attribute type 9 has an invalid length.
[   72.956560][ T6683] delete_channel: no stack
[   74.109713][ T6810] IPv6: addrconf: prefix option has invalid lifetime
[   74.115393][ T6810] __nla_validate_parse: 17 callbacks suppressed
[   74.115402][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[   74.553625][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880384f4800: rx timeout, send abort
[   75.058266][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880384f4800: abort rx timeout. Force session deactivation
[   75.195729][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'.
[   76.587262][ T5202] Bluetooth: hci2: command 0x0405 tx timeout
[   78.310302][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'.
[   78.396719][ T6860] netlink: 'syz.0.297': attribute type 21 has an invalid length.
[   78.400043][ T6860] netlink: 'syz.0.297': attribute type 22 has an invalid length.
[   78.403382][ T6860] netlink: 'syz.0.297': attribute type 23 has an invalid length.
[   78.406772][ T6860] netlink: 136 bytes leftover after parsing attributes in process `syz.0.297'.
[   78.535149][ T6871] netlink: 144 bytes leftover after parsing attributes in process `syz.0.302'.
[   78.630137][ T6878] bridge0: port 4(erspan0) entered blocking state
[   78.633238][ T6878] bridge0: port 4(erspan0) entered disabled state
[   78.636207][ T6878] erspan0: entered allmulticast mode
[   78.641190][ T6878] erspan0: entered promiscuous mode
[   78.644079][ T6878] bridge0: port 4(erspan0) entered blocking state
[   78.647351][ T6878] bridge0: port 4(erspan0) entered forwarding state
[   78.654625][ T6878] erspan0: left allmulticast mode
[   78.656809][ T6878] erspan0: left promiscuous mode
[   78.661195][ T6878] bridge0: port 4(erspan0) entered disabled state
[   78.754220][ T6885] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[   78.760310][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'.
[   78.803467][ T6892] netlink: 'syz.2.307': attribute type 5 has an invalid length.
[   78.844058][ T6899] tipc: Started in network mode
[   78.846239][ T6899] tipc: Node identity e0000001, cluster identity 4711
[   78.850244][ T6899] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   78.858781][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[   78.862606][ T6899] netlink: 'syz.2.309': attribute type 7 has an invalid length.
[   78.865776][ T6899] netlink: 'syz.2.309': attribute type 8 has an invalid length.
[   78.866211][ T6901] netlink: 'syz.0.310': attribute type 10 has an invalid length.
[   78.869088][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   78.884148][ T6901] team0: Device ipvlan1 failed to register rx_handler
[   78.951243][ T6911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.956513][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   78.994537][ T6913] bridge2: entered allmulticast mode
[   79.220268][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'.
[   79.372866][ T6933] netlink: 'syz.1.319': attribute type 7 has an invalid length.
[   79.402683][ T6933] : entered promiscuous mode
[   79.610205][ T6949] netlink: 'syz.1.326': attribute type 1 has an invalid length.
[   79.631229][ T6949] bond2: entered promiscuous mode
[   79.633664][ T6949] bond2: entered allmulticast mode
[   79.647400][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[   79.647960][ T6949] bond2: (slave ip6gretap2): making interface the new active one
[   79.653876][ T6949] ip6gretap2: entered promiscuous mode
[   79.655780][ T6949] ip6gretap2: entered allmulticast mode
[   79.659806][ T6949] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link
[   79.741362][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.333'.
[   79.782272][ T6958] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   79.788323][ T6958] netlink: 'syz.1.330': attribute type 2 has an invalid length.
[   79.788418][ T6970] xt_CT: You must specify a L4 protocol and not use inversions on it
[   79.791261][ T6958] netlink: 152 bytes leftover after parsing attributes in process `syz.1.330'.
[   80.051173][ T6999] xt_connbytes: Forcing CT accounting to be enabled
[   80.053527][ T6999] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   80.232498][ T7020] sctp: [Deprecated]: syz.1.351 (pid 7020) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.232498][ T7020] Use struct sctp_sack_info instead
[   80.293160][ T7027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'.
[   80.379635][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'.
[   80.383191][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'.
[   80.576874][ T7054] lo: entered allmulticast mode
[   80.580623][ T7053] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   80.594428][ T7054] sctp: [Deprecated]: syz.2.360 (pid 7054) Use of int in maxseg socket option.
[   80.594428][ T7054] Use struct sctp_assoc_value instead
[   80.603603][ T7054] lo: left allmulticast mode
[   80.759012][ T7068] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   80.788489][ T7072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.368'.
[   80.850050][ T7077] vxcan1: tx address claim with dlc 1
[   81.074828][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'.
[   81.210037][ T7111] syzkaller1: entered promiscuous mode
[   81.211883][ T7111] syzkaller1: entered allmulticast mode
[   81.234551][ T3128] cfg80211: failed to load regulatory.db
[   81.285451][ T7113] syzkaller0: entered promiscuous mode
[   81.288194][ T7113] syzkaller0: entered allmulticast mode
[   82.331186][ T7130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.386'.
[   82.555972][ T7161] _Z`Ԁ@: entered promiscuous mode
[   83.189849][ T7215] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[   83.724646][ T7242] xt_ecn: cannot match TCP bits for non-tcp packets
[   83.765011][ T7246] validate_nla: 4 callbacks suppressed
[   83.765022][ T7246] netlink: 'syz.0.427': attribute type 39 has an invalid length.
[   83.842409][ T7249] bond3: entered promiscuous mode
[   83.844586][ T7249] bond3: entered allmulticast mode
[   83.849315][ T7249] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.243407][ T7268] bond0: entered promiscuous mode
[   84.245551][ T7268] bond_slave_0: entered promiscuous mode
[   84.285731][ T7268] bond_slave_1: entered promiscuous mode
[   84.351329][ T7268] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   84.372430][ T7268] bond0: left promiscuous mode
[   84.374523][ T7268] bond_slave_0: left promiscuous mode
[   84.376965][ T7268] bond_slave_1: left promiscuous mode
[   84.434947][ T7282] __nla_validate_parse: 67 callbacks suppressed
[   84.434966][ T7282] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.438'.
[   84.444358][ T7282] netlink: zone id is out of range
[   84.446183][ T7282] netlink: zone id is out of range
[   84.454604][ T7282] netlink: zone id is out of range
[   84.456549][ T7282] netlink: zone id is out of range
[   84.474191][ T7282] netlink: zone id is out of range
[   84.476198][ T7282] netlink: zone id is out of range
[   84.482993][ T7282] netlink: zone id is out of range
[   84.486146][ T7282] netlink: zone id is out of range
[   84.491143][ T7282] netlink: zone id is out of range
[   84.493704][ T7282] netlink: zone id is out of range
[   84.504801][ T7282] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   84.513134][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[   84.655568][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'.
[   84.758117][ T7315] vxcan1: tx address claim with dlc 1
[   84.842933][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   84.852721][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   84.861560][ T7323] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:0
[   84.875353][ T7318] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:0
[   84.905575][ T7328] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[   84.910785][ T7328] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[   84.913314][ T7328] netlink: 192 bytes leftover after parsing attributes in process `syz.1.455'.
[   85.080255][ T7344] syz_tun: entered allmulticast mode
[   85.100303][ T7344] bridge0: entered promiscuous mode
[   85.102801][ T7344] macsec1: entered promiscuous mode
[   85.107706][ T7344] bridge0: port 3(macsec1) entered blocking state
[   85.110252][ T7344] bridge0: port 3(macsec1) entered disabled state
[   85.112948][ T7344] macsec1: entered allmulticast mode
[   85.115150][ T7344] bridge0: entered allmulticast mode
[   85.123257][ T7344] macsec1: left allmulticast mode
[   85.125581][ T7344] bridge0: left allmulticast mode
[   85.131181][ T7344] bridge0: left promiscuous mode
[   85.252766][ T7348] !: renamed from dummy0 (while UP)
[   85.859877][ T7382] vxcan1: tx address claim with dlc 1
[   85.942500][ T7389] wg1: entered promiscuous mode
[   85.944683][ T7389] wg1: entered allmulticast mode
[   86.023084][ T7395] netlink: 'syz.2.471': attribute type 1 has an invalid length.
[   86.034806][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'.
[   87.700214][ T7498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.497'.
[   88.009054][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[   88.012974][ T7509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.016349][ T7509] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.943655][ T7509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.946759][ T7509] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.767878][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'.
[   90.786987][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   90.799569][ T7525] team_slave_0: entered promiscuous mode
[   90.802172][ T7525] team_slave_1: entered promiscuous mode
[   90.805129][ T7525] macvtap1: entered promiscuous mode
[   90.807670][ T7525] team0: entered promiscuous mode
[   90.811317][ T7525] bond0: entered promiscuous mode
[   90.813511][ T7525] bond_slave_0: entered promiscuous mode
[   90.820527][ T7525] macvtap1: entered allmulticast mode
[   90.822837][ T7525] team0: entered allmulticast mode
[   90.824977][ T7525] team_slave_0: entered allmulticast mode
[   90.828032][ T7525] team_slave_1: entered allmulticast mode
[   90.830538][ T7525] bond0: entered allmulticast mode
[   90.832701][ T7525] bond_slave_0: entered allmulticast mode
[   90.836268][ T7525] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   90.942876][ T7543] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   90.978193][ T7543] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.993141][ T7543] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.996413][ T7543] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.001746][ T7543] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   91.287996][ T7565] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[   91.643477][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'.
[   91.722798][ T7588] sctp: [Deprecated]: syz.2.530 (pid 7588) Use of int in max_burst socket option deprecated.
[   91.722798][ T7588] Use struct sctp_assoc_value instead
[   92.122192][ T7621] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   92.628915][ T7665] netlink: 'syz.0.551': attribute type 27 has an invalid length.
[   92.989823][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[   93.320647][ T7702] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   93.323274][ T7702] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   93.414079][ T7706] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   93.699743][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'.
[   93.704017][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'.
[   94.413007][ T7715] netlink: 'syz.0.567': attribute type 3 has an invalid length.
[   94.533318][ T7728] tipc: Can't bind to reserved service type 0
[   94.554626][ T7728] bond0: entered promiscuous mode
[   94.569868][ T7728] bond_slave_0: entered promiscuous mode
[   94.574879][ T7728] bond_slave_1: entered promiscuous mode
[   94.577409][ T7728] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   94.581748][ T7728] bond0: left promiscuous mode
[   94.585269][ T7728] bond_slave_0: left promiscuous mode
[   94.588380][ T7728] bond_slave_1: left promiscuous mode
[   94.612913][ T7734] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   94.617439][ T7734] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   94.720113][ T7743] unknown channel width for channel at 909000KHz?
[   94.910879][ T7740] IPVS: set_ctl: invalid protocol: 100 172.30.1.2:17952
[   94.918647][ T7740] syzkaller1: entered allmulticast mode
[   95.280605][ T7762] netlink: 332 bytes leftover after parsing attributes in process `syz.1.581'.
[   95.283898][ T7762] netlink: 104 bytes leftover after parsing attributes in process `syz.1.581'.
[   95.287156][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.581'.
[   95.384212][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'.
[   95.388980][ T7769] netlink: 'syz.1.583': attribute type 39 has an invalid length.
[   95.631682][ T7786] bridge0: entered promiscuous mode
[   95.782308][ T7799] netlink: 'syz.1.595': attribute type 21 has an invalid length.
[   95.785622][ T7799] __nla_validate_parse: 3 callbacks suppressed
[   95.785634][ T7799] netlink: 128 bytes leftover after parsing attributes in process `syz.1.595'.
[   95.794520][ T7799] netlink: 'syz.1.595': attribute type 5 has an invalid length.
[   95.798170][ T7799] netlink: 3 bytes leftover after parsing attributes in process `syz.1.595'.
[   95.858255][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'.
[   95.902008][ T7811] batadv_slave_1: entered promiscuous mode
[   96.164243][ T7836] netlink: 'syz.0.605': attribute type 1 has an invalid length.
[   96.227527][ T7836] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   96.262080][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'.
[   96.265073][ T7839] netlink: 'syz.0.606': attribute type 5 has an invalid length.
[   96.268071][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'.
[   96.275966][ T7839] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   96.281830][ T7839] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   96.285337][ T7839] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   96.291242][ T7839] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   96.296923][ T7839] geneve4: entered promiscuous mode
[   96.299283][ T7839] geneve4: entered allmulticast mode
[   96.738664][ T7810] batadv_slave_1: left promiscuous mode
[   96.985672][ T7875] delete_channel: no stack
[   97.301565][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'.
[   97.335102][ T7897] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[   97.860255][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'.
[   98.281422][ T7962] vcan0: tx drop: invalid da for name 0x0000000024000000
[   98.312155][ T7967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'.
[   98.416988][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.636'.
[   98.490436][ T7988] netlink: 9 bytes leftover after parsing attributes in process `syz.1.636'.
[   98.504739][ T7988] 0: renamed from hsr_slave_1 (while UP)
[   98.512686][ T7988] 0: entered allmulticast mode
[   98.514864][ T7988] net_ratelimit: 13 callbacks suppressed
[   98.514871][ T7988] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   99.058748][ T8026] netlink: 'syz.2.652': attribute type 10 has an invalid length.
[   99.083733][ T8026] geneve0: entered promiscuous mode
[   99.086216][ T8026] geneve0: entered allmulticast mode
[   99.098696][ T8026] team0: Port device geneve0 added
[   99.159537][ T8034] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[   99.373278][ T8053] xt_cgroup: path and classid specified
[   99.502892][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.510918][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.577971][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.581125][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.588710][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.609716][ T8064] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.628160][ T8064] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.665353][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.676886][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.681742][ T8064] syzkaller0 speed is unknown, defaulting to 1000
[   99.957574][ T8087] netlink: 'syz.1.670': attribute type 1 has an invalid length.
[  100.160749][ T8109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  100.299209][ T8121] IPv6: sit1: Disabled Multicast RS
[  100.331338][ T8123] delete_channel: no stack
[  101.066212][ T8155] __nla_validate_parse: 11 callbacks suppressed
[  101.066230][ T8155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.691'.
[  101.197144][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'.
[  101.385203][ T8184] netlink: 'syz.1.700': attribute type 3 has an invalid length.
[  101.388179][ T8184] netlink: 666 bytes leftover after parsing attributes in process `syz.1.700'.
[  101.391778][ T8184] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  101.435451][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'.
[  101.440199][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  101.513345][ T8197] netlink: 'syz.0.705': attribute type 5 has an invalid length.
[  102.057432][ T8213] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  102.060611][ T8213] netlink: 184 bytes leftover after parsing attributes in process `syz.2.710'.
[  102.064164][ T8213] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  102.240835][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[  102.269298][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'.
[  102.391227][ T8232] bridge0: port 3(syz_tun) entered blocking state
[  102.404520][ T8232] bridge0: port 3(syz_tun) entered disabled state
[  102.409284][ T8232] syz_tun: entered allmulticast mode
[  102.412069][ T8232] syz_tun: entered promiscuous mode
[  102.454305][ T8239] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  102.459942][ T8239] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.718'.
[  102.485643][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.536767][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.721'.
[  102.649631][ T8267] syzkaller0 speed is unknown, defaulting to 1000
[  103.087194][ T8312] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[  103.097212][ T8312] netlink: 'syz.2.740': attribute type 2 has an invalid length.
[  103.100538][ T8312] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[  103.107404][ T8312] tc_dump_action: action bad kind
[  103.306570][ T8335] netlink: 'syz.1.748': attribute type 25 has an invalid length.
[  103.314114][ T8335] netlink: 'syz.1.748': attribute type 7 has an invalid length.
[  103.398085][ T8341] veth0_vlan: left promiscuous mode
[  103.400567][ T8341] veth0_vlan: entered promiscuous mode
[  103.404341][ T8341] team0: Device veth0_vlan failed to register rx_handler
[  103.413160][ T8340] hsr0: entered promiscuous mode
[  103.420086][ T8341] syzkaller1: entered promiscuous mode
[  103.422450][ T8341] syzkaller1: entered allmulticast mode
[  103.426931][ T8340] hsr_slave_0: left promiscuous mode
[  103.432118][ T8340] hsr_slave_1: left promiscuous mode
[  103.460002][ T8340] hsr0 (unregistering): left promiscuous mode
[  103.476803][ T8344] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[  103.481561][ T8344] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[  103.485684][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.0.751 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  103.490509][ T8344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.494618][ T8344] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  103.496850][ T8344] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  103.504714][ T8344] RSP: 0018:ffffc90007267090 EFLAGS: 00010206
[  103.507234][ T8344] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: 0000000000080000
[  103.510498][ T8344] RDX: ffffc9002252c000 RSI: 00000000000003ec RDI: 00000000000003ed
[  103.513711][ T8344] RBP: dffffc0000000000 R08: ffff888021399cc0 R09: 0000000000000002
[  103.516994][ T8344] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  103.520227][ T8344] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88811dcb0000
[  103.523530][ T8344] FS:  00007f8089e116c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  103.527314][ T8344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.530006][ T8344] CR2: 000000110c3bbac4 CR3: 0000000107bc8000 CR4: 00000000000006f0
[  103.533292][ T8344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.536602][ T8344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  103.539351][ T8344] Call Trace:
[  103.540422][ T8344]  <TASK>
[  103.541378][ T8344]  qdisc_tree_reduce_backlog+0x29c/0x480
[  103.543258][ T8344]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  103.545618][ T8344]  pie_change+0x96d/0xca0
[  103.547433][ T8344]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  103.549913][ T8344]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.552078][ T8344]  ? __pfx_pie_change+0x10/0x10
[  103.554117][ T8344]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.556562][ T8344]  ? timer_init_key+0x171/0x2d0
[  103.558769][ T8344]  ? __pfx_pie_init+0x10/0x10
[  103.560770][ T8344]  pie_init+0x2a3/0x3f0
[  103.562502][ T8344]  qdisc_create+0x7ac/0xea0
[  103.564219][ T8344]  tc_modify_qdisc+0x1426/0x2010
[  103.566217][ T8344]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  103.568418][ T8344]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  103.570577][ T8344]  rtnetlink_rcv_msg+0x77c/0xb70
[  103.572574][ T8344]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  103.574735][ T8344]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  103.576941][ T8344]  ? ref_tracker_free+0x63a/0x7d0
[  103.579014][ T8344]  ? __copy_skb_header+0xa7/0x550
[  103.581062][ T8344]  ? __pfx_ref_tracker_free+0x10/0x10
[  103.583335][ T8344]  ? __skb_clone+0x63/0x7a0
[  103.585230][ T8344]  netlink_rcv_skb+0x208/0x470
[  103.587263][ T8344]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  103.589505][ T8344]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.591724][ T8344]  ? netlink_deliver_tap+0x2e/0x1b0
[  103.593868][ T8344]  ? netlink_deliver_tap+0x2e/0x1b0
[  103.595976][ T8344]  netlink_unicast+0x75b/0x8d0
[  103.597959][ T8344]  netlink_sendmsg+0x805/0xb30
[  103.599916][ T8344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.602152][ T8344]  ? aa_sock_msg_perm+0x94/0x160
[  103.604250][ T8344]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.606374][ T8344]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.608581][ T8344]  __sock_sendmsg+0x21c/0x270
[  103.610515][ T8344]  ____sys_sendmsg+0x505/0x830
[  103.612508][ T8344]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.614758][ T8344]  ? import_iovec+0x74/0xa0
[  103.616662][ T8344]  ___sys_sendmsg+0x21f/0x2a0
[  103.618664][ T8344]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.621019][ T8344]  ? __fget_files+0x2a/0x420
[  103.622975][ T8344]  ? __fget_files+0x3a0/0x420
[  103.624959][ T8344]  __x64_sys_sendmsg+0x19b/0x260
[  103.627024][ T8344]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.629207][ T8344]  ? rcu_is_watching+0x15/0xb0
[  103.631190][ T8344]  ? do_syscall_64+0xbe/0x3b0
[  103.633142][ T8344]  do_syscall_64+0xfa/0x3b0
[  103.635071][ T8344]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.637249][ T8344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.639796][ T8344]  ? exc_page_fault+0x9f/0xf0
[  103.641749][ T8344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.644144][ T8344] RIP: 0033:0x7f8088f8e929
[  103.646020][ T8344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.653839][ T8344] RSP: 002b:00007f8089e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.657225][ T8344] RAX: ffffffffffffffda RBX: 00007f80891b6080 RCX: 00007f8088f8e929
[  103.660439][ T8344] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000c
[  103.663644][ T8344] RBP: 00007f8089010b39 R08: 0000000000000000 R09: 0000000000000000
[  103.666825][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.670089][ T8344] R13: 0000000000000000 R14: 00007f80891b6080 R15: 00007ffe73583578
[  103.673331][ T8344]  </TASK>
[  103.674605][ T8344] Modules linked in:
[  103.676406][ T8344] ---[ end trace 0000000000000000 ]---
[  103.678727][ T8344] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  103.681019][ T8344] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  103.689107][ T8344] RSP: 0018:ffffc90007267090 EFLAGS: 00010206
[  103.691662][ T8344] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: 0000000000080000
[  103.695035][ T8344] RDX: ffffc9002252c000 RSI: 00000000000003ec RDI: 00000000000003ed
[  103.698002][ T8344] RBP: dffffc0000000000 R08: ffff888021399cc0 R09: 0000000000000002
[  103.700585][ T8344] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  103.703427][ T8344] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88811dcb0000
[  103.706674][ T8344] FS:  00007f8089e116c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  103.710433][ T8344] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.713169][ T8344] CR2: 000000110c3bbac4 CR3: 0000000107bc8000 CR4: 00000000000006f0
[  103.716855][ T8344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  103.720292][ T8344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  103.723605][ T8344] Kernel panic - not syncing: Fatal exception in interrupt
[  103.727440][ T8344] Kernel Offset: disabled
[  103.729328][ T8344] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:52:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010a0 RDI=00000000000010a1 RBP=00000000000003f8 RSP=ffffc900072668d0
R8 =ffff888107d80237 R9 =1ffff11020fb0046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fc R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8089e116c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3bbac4 CR3=0000000107bc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8089184478 00007f8089184450 XMM03=00007f8089184488 00007f8089184480
XMM04=00007f8089ced100 00007f8089184440 XMM05=00007f8089184458 00007f80891844a0
XMM06=00007f8089184498 00007f8089184490 XMM07=00007f8089184488 00007f8089184480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8089011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000ffffff01 RBX=ffff888113a1f8c0 RCX=ffffffff819ec6f1 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900067f7700 RBP=ffffc900067f7770 RSP=ffffc900067f76b8
R8 =ffff888113a1f8c3 R9 =1ffff11022743f18 R10=dffffc0000000000 R11=ffffed1022743f19
R12=ffff888113a1f8d0 R13=ffff888113a1f8c8 R14=1ffff11022743f1a R15=1ffff11022743f19
RIP=ffffffff8223b9a0 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcf82ad06c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000b038 CR3=00000001090a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcf81c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
