last executing test programs:

2m40.830780524s ago: executing program 3 (id=12542):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040)
sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000100)="dc", 0x1}], 0x1, &(0x7f0000000dc0)=[{0x10, 0x1, 0x400}], 0x10}}], 0x1, 0x4044044)

2m40.714662136s ago: executing program 3 (id=12543):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000320007012bbd700080dbdf250a7c0000080001800400dd80100003800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4890)

2m40.6084976s ago: executing program 3 (id=12545):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9f", &(0x7f0000000680), 0x1006, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20)

2m39.99275297s ago: executing program 3 (id=12557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000320007012bbd700080dbdf250a7c0000080001800400dd80100003800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4890)

2m39.878870332s ago: executing program 3 (id=12559):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3a25fe80000000000000dc8b71d5decf66cc000000003000", 0x1e}], 0x1}, 0x0)

2m39.673020224s ago: executing program 3 (id=12561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m38.188229992s ago: executing program 2 (id=12577):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x2, [@random="73bab6110e90", @random="f32d137975ed"]})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))

2m38.02878964s ago: executing program 2 (id=12579):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x3fd, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x5, 0x3, 0x4, 0x7, 0x70, 0x10001, 0x1, 0x0, 0xe747, 0x8, 0x3, 0x9, 0xf19c, 0x7, 0x4, 0xce, 0x401, 0x3, 0x3ff, 0xc000000, 0x7, 0xffff, 0x81, 0x7fffffff, 0x5, 0x90b8, 0x0, 0x1, 0xbe94, 0x8, 0x5, 0x2, 0xc, 0x5, 0x7, 0x126, 0x8, 0x5, 0x101, 0xfffffffe, 0x8001, 0xfffffff7, 0x9, 0x8, 0x2, 0x80000, 0x1, 0x5, 0x80000001, 0xfffffffc, 0x48d, 0x101, 0x9e, 0x3, 0x400, 0x10000, 0x0, 0x3, 0x100, 0x1, 0x2, 0x1000, 0x3, 0x9, 0x1, 0x7, 0x114b, 0x8001, 0x3, 0xfffffffe, 0x6, 0x2, 0xfffffffe, 0xfffffbf4, 0x0, 0xfffffff9, 0x1, 0x7, 0x40, 0x5, 0x8, 0x10, 0x5, 0x7ff, 0x7, 0x8, 0x6, 0x5, 0x0, 0x0, 0x2, 0x3, 0xfffffc01, 0xfffffffb, 0x5, 0x0, 0x0, 0x2, 0x2, 0x81, 0x2, 0x840, 0x716bde0e, 0xffff, 0xf1, 0x1ff, 0x7, 0x200, 0x1, 0x4, 0x2, 0x80, 0x401, 0x10000, 0xb24, 0xffffcb59, 0x3, 0x7, 0x7ff, 0x97, 0x800, 0x5, 0x2000, 0x8, 0x4, 0x9, 0x7, 0x8, 0x40, 0x3, 0x1, 0x5, 0x0, 0x10000, 0x6, 0x2, 0xfb, 0x4ff, 0x8, 0x9, 0x80000001, 0x5, 0x3, 0x8, 0x6, 0x0, 0x91e, 0x17ca, 0x7, 0x7, 0x1, 0xffffffff, 0x0, 0x6, 0x1000, 0x7, 0x0, 0x7, 0x10, 0xfff, 0xd4, 0x8, 0x6522, 0xfffffffa, 0x400, 0x2, 0x2, 0x5, 0x9, 0xffffffff, 0x6, 0x6, 0x80, 0x7fffffff, 0x2, 0x6, 0x86d9, 0x4, 0xfff, 0x4, 0x2, 0x1000, 0x4, 0x6, 0x7, 0x8000, 0x0, 0xc, 0x5, 0x4, 0x30, 0xd05f, 0x0, 0x5, 0x800, 0x7, 0x8, 0x945c31f, 0x101, 0x4, 0x6, 0xc, 0x2, 0x7fff, 0xb, 0x8, 0x4, 0xa, 0x1000, 0x2, 0x9, 0x6, 0x80000000, 0x7, 0x4, 0x4, 0x3, 0x44c, 0x8, 0x96c, 0x39, 0x60000, 0x4, 0xfffffff8, 0x5, 0x8, 0x81, 0x7fff, 0x4, 0x7, 0x10001, 0x3, 0x52000000, 0x3, 0x8, 0x3, 0x7, 0xc4f, 0x8, 0x3, 0x5, 0x1, 0x4, 0x8, 0x92, 0x0, 0x6, 0x3, 0xeac, 0x5, 0x3, 0x10, 0xffffffff, 0x6, 0x7]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0}}], 0x1, 0x8000004)

2m36.674167427s ago: executing program 2 (id=12585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6025, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000}, 0x48)

2m36.484852054s ago: executing program 2 (id=12588):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m36.038814822s ago: executing program 2 (id=12594):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x43, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff9f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x2)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x10000, 0x66)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x1d, 0x0, 0xff, 0x7}, {0x40a, 0x0, 0x0, 0xffefffff}]}, 0x10)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5e", 0xf2}], 0x1}}], 0x1, 0x4044805)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd09000400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x3c}}, 0x20)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@loopback, 0x6, r3})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000280)={'netdevsim0\x00', {0x2, 0x4e20, @multicast1}})

2m30.85974935s ago: executing program 2 (id=12597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x80)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20000015)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

2m24.581757512s ago: executing program 32 (id=12561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x5, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x404c840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m15.731200949s ago: executing program 33 (id=12597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x80)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20000015)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)

11.46284226s ago: executing program 1 (id=13951):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

11.031940762s ago: executing program 1 (id=13954):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000090)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044)

10.068437015s ago: executing program 1 (id=13968):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x4, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000540)="89ba41c97928dec7cec15a160d3dba2553b53aa79502007aaed129d4b5247c98345502d757e8b233ff070000f416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a41de0000000000000000000000000000f1d3b9821c18", 0x80)
readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1)

9.155681041s ago: executing program 1 (id=13971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x18b}, {&(0x7f0000000cc0)="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", 0x13b}, {&(0x7f00000004c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9ea0cd4db9af5e29736a345d6b40ed83eee86f35f2c0", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x800)

9.074843708s ago: executing program 1 (id=13972):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x8020)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a\x00'], 0x12)

9.010448185s ago: executing program 1 (id=13973):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r3, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route(r2, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)={0x3b}, 0x8)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc)
getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000980))
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x1b)
r6 = socket(0xa, 0x5, 0x0)
listen(r6, 0x100)
ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000013c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000440)={<r7=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5452, &(0x7f0000000400)=0xfffe)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000340)={0xfffc, 0x2107}, 0x8)

3.329984406s ago: executing program 6 (id=13992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010015000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = socket(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000480)="3e314cfc204b39401b3c77c0b48c", 0x0, 0xae8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)

3.308567464s ago: executing program 0 (id=13994):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x21, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e3", 0x44}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0)

3.13810948s ago: executing program 0 (id=13995):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6e0", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000240)="ea90bf13599edadaa324a9219534ab6c34be32e12bc9cc7c7ef7b11fa7338c02047cff58847917bdcb26fefc5b064756c2279dc29b", 0x35, 0x10000010, 0x0, 0x0)

3.002490687s ago: executing program 5 (id=13997):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r5=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x39, 0x0, 0x0, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'pimreg0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000ec0)={&(0x7f00000000c0), 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x144, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040816}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX], 0x78}, 0x1, 0x0, 0x0, 0x5b8911be04ffe219}, 0x800)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68000000130a01010000000000000000060000024700080047f194b892aa638cb30766eff1377ae3d7f87f371bbea278c5ba50e09576ff2a93b15d7b8bdfbf380e72ebfe4d12f0c762ce8bd4e52d7db78e7b0a000c00064000000000000000040000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', <r13=>0x0, 0x10, 0x40, 0x6, 0x10000, {{0xe, 0x4, 0x1, 0x3f, 0x38, 0x67, 0x0, 0x7f, 0x4, 0x0, @loopback, @broadcast, {[@generic={0x86, 0xf, "6c0345228b85dd8169da00b9b1"}, @generic={0x7, 0xb, "147f3093fdd807196d"}, @lsrr={0x83, 0x7, 0x8a, [@rand_addr=0x64010100]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r13, 0x20, 0x10, 0x8, 0x2, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @broadcast}}}})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

2.75860659s ago: executing program 5 (id=13998):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4)

2.287807972s ago: executing program 6 (id=14000):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.134976636s ago: executing program 0 (id=14001):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000240)="27050200340f3c0006000b2fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18f", 0x4b}, {&(0x7f0000002380)="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", 0x1ea}], 0x2}, 0x9cdc2384056f0939)

2.036664385s ago: executing program 0 (id=14003):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.959823077s ago: executing program 6 (id=14005):
unshare(0x20000400)
socket$tipc(0x1e, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130823bd7000fddbdf2517000000500006804c00040067636d28616571290000000010000000000000000000000000000000000000002400000000d9403689a0256bcd794a17ff7b0d56b0a9ad2b3677d487f78a2fe848023754154350f3c1f8c894fb98b1386b17c76ad25b077f4627598d3d58a15d3c0b22a99ec6c1159edfd2af513a5683b330c496e61d0f9e3db7e704ef63efefb8f4ebfd804a7f00131bec9951465a4a761d0e40f0b7d16e5b0c8acab99a5eabb545fcea6c912b717ad76a5726d11349211293752d1552f52616606d72340efcc276639aca0658fc428d72d71c7d8041c6"], 0x64}, 0x1, 0x0, 0x0, 0x20048044}, 0x2400c004)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, 0x0, 0x0)
r4 = socket(0x1e, 0x2, 0x8)
write(r4, &(0x7f0000000400)="240000001e005f0214f9f4e6ff0804000a00", 0x12)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r5 = socket(0x10, 0x803, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r8, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x2}, {0x6, 0x9, 0x0, 0xfffffc}]}, 0x10)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
getpeername$tipc(r5, &(0x7f0000000280)=@id, &(0x7f0000000300)=0x10)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32, @ANYBLOB="c300050000000000300012800b000100697036746e6c0000200002800500090004000000140003000000000000000000000000ff"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4)

1.908342159s ago: executing program 4 (id=14006):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x2)
connect$netlink(r3, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000047c0000040042801c0001800600060088a80000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route(r2, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)={0x3b}, 0x8)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc)
getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000980))
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r6 = socket(0xa, 0x5, 0x0)
listen(r6, 0x100)
ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000013c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000440)={<r7=>0xffffffffffffffff})
ioctl$int_in(r7, 0x5452, &(0x7f0000000400)=0xfffe)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000340)={0xfffc, 0x2107}, 0x8)

1.780219565s ago: executing program 5 (id=14007):
socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x2}, {0x0, 0x11, "9606053d0006ff00800000b61af93a"}]}, @lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @generic={0x0, 0x6, "aba370cc"}]}}}}}}}, 0x0)

1.68874517s ago: executing program 4 (id=14008):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0)

1.663658578s ago: executing program 5 (id=14009):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000540)="89ba41c97928dec7cec15a160d3dba2553b53aa79502007aaed129d4b5247c98345502d757e8b233ff070000f416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a41de0000000000000000000000000000f1d3b9821c18", 0x80)
readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1)

1.562961259s ago: executing program 4 (id=14010):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="9338c4f5386dd6af0f37082ed2d698fba087e751cf3e72ab55a2ae487b7184ca1c552114bf9d14493b994aaa6b4a1cefc1", 0x31}], 0x1, 0x0, 0x580}, 0x20000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x3a}], 0x1}, 0x0)

1.466912426s ago: executing program 4 (id=14011):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x12f}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c2477f106d42cc844ffbf8a9ea581be003", 0xf3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a4", 0x68}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e", 0x8d}], 0x2}}], 0x2, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.308380942s ago: executing program 6 (id=14012):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x88, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c601", 0x6}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88)

1.030782953s ago: executing program 0 (id=14013):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x12f}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c2477f106d42cc844ffbf8a9ea581be003", 0xf3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a4", 0x68}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e", 0x8d}], 0x2}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

687.667005ms ago: executing program 5 (id=14014):
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000b"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9f", &(0x7f0000000680), 0x1006, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20)

577.012499ms ago: executing program 4 (id=14015):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

245.660189ms ago: executing program 6 (id=14016):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc4)

89.891635ms ago: executing program 4 (id=14017):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x14, &(0x7f00000019c0)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000f5fffff20000000010ffffff20b15b84001000000000001810f70df20f84a8810c1a06a8896c908fd26ba0685bc532c0ca364f1e893c6ae2e9f3fffe7aba990a93adbdcec86188bb6047ea29c7a5ef7d66df53a3adb9ec767270b1d30e3af094957c61b0d4900da8002e0033e305bd436a67fc74915f24979c840800dcd37f23", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x4, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11.573866ms ago: executing program 0 (id=14018):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
sendfile(r2, r3, 0x0, 0xffffffff000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x14, &(0x7f00000019c0)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000f5fffff20000000010ffffff20b15b84001000000000001810f70df20f84a8810c1a06a8896c908fd26ba0685bc532c0ca364f1e893c6ae2e9f3fffe7aba990a93adbdcec86188bb6047ea29c7a5ef7d66df53a3adb9ec767270b1d30e3af094957c61b0d4900da8002e0033e305bd436a67fc74915f24979c840800dcd37f23", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x4, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

11.293285ms ago: executing program 6 (id=14019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x24044010)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 5 (id=14020):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

ge_slave_0: entered promiscuous mode
[ 1846.653073][T10326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1846.660498][T10326] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1846.668994][T10326] bridge_slave_1: entered allmulticast mode
[ 1846.678133][T10326] bridge_slave_1: entered promiscuous mode
[ 1846.751856][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1846.766402][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1846.844897][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9274'.
[ 1846.878859][T10326] team0: Port device team_slave_0 added
[ 1846.942604][T10326] team0: Port device team_slave_1 added
[ 1847.060116][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1847.068607][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1847.130015][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1847.163428][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1847.192378][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1847.238782][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1847.479290][T10326] hsr_slave_0: entered promiscuous mode
[ 1847.497396][T10326] hsr_slave_1: entered promiscuous mode
[ 1847.524714][T10326] debugfs: 'hsr0' already exists in 'hsr'
[ 1847.531748][T10451] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9289'.
[ 1847.534451][T10326] Cannot create hsr debugfs directory
[ 1847.551287][T10445] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1848.139896][T10326] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1848.181028][T10326] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.267159][T10484] netlink: 'syz.0.9305': attribute type 8 has an invalid length.
[ 1848.406353][T10326] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1848.427795][T10326] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.611063][T10326] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1848.622403][ T5631] Bluetooth: hci4: command tx timeout
[ 1848.651054][T10326] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1849.150200][T10326] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1849.195124][T10326] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1850.174097][T10326] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1850.194985][T10566] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1850.204806][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1850.214676][T10326] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1850.239229][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1850.258896][T10326] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1850.300140][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1850.319598][T10326] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1850.338801][T10326] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1850.355057][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.407915][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.423145][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.452174][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.488874][T10587] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.498072][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.508338][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.581007][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.624536][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.663936][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9343'.
[ 1850.707868][ T5631] Bluetooth: hci4: command tx timeout
[ 1851.300990][T10326] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1851.419897][T10326] 8021q: adding VLAN 0 to HW filter on device team0
[ 1851.476392][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1851.483685][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1851.715257][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1851.722570][ T8546] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1852.782899][ T5631] Bluetooth: hci4: command tx timeout
[ 1852.834023][T10682] __nla_validate_parse: 29 callbacks suppressed
[ 1852.834044][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9379'.
[ 1852.956329][T10686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9380'.
[ 1853.043670][T10690] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[ 1853.352998][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1853.425274][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.521715][T10326] veth0_vlan: entered promiscuous mode
[ 1853.565701][T10326] veth1_vlan: entered promiscuous mode
[ 1853.678830][T10326] veth0_macvtap: entered promiscuous mode
[ 1853.701484][T10326] veth1_macvtap: entered promiscuous mode
[ 1853.751686][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1853.794764][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1853.844771][   T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1853.895777][   T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1853.979767][   T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1854.040990][   T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1854.478932][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9409'.
[ 1854.598403][T10753] hsr_slave_1 (unregistering): left promiscuous mode
[ 1854.660682][T10755] IPv6: syztnl0: Disabled Multicast RS
[ 1854.947714][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1854.967509][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1854.985527][T10772] netlink: 'syz.0.9416': attribute type 4 has an invalid length.
[ 1855.265383][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1855.300092][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1855.869716][T10812] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1856.406908][T10840] syzkaller0: entered promiscuous mode
[ 1856.415696][T10840] syzkaller0: entered allmulticast mode
[ 1857.444253][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9469'.
[ 1857.675445][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9476'.
[ 1858.150530][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9485'.
[ 1858.598245][T10953] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9496'.
[ 1858.730376][T10960] netlink: 'syz.3.9500': attribute type 1 has an invalid length.
[ 1858.767158][T10960] netlink: 'syz.3.9500': attribute type 2 has an invalid length.
[ 1858.793197][T10960] netlink: 'syz.3.9500': attribute type 1 has an invalid length.
[ 1858.812383][T10960] netlink: 'syz.3.9500': attribute type 1 has an invalid length.
[ 1858.843045][T10968] bond0: entered promiscuous mode
[ 1858.854013][T10968] bond_slave_0: entered promiscuous mode
[ 1858.872925][T10960] netlink: 'syz.3.9500': attribute type 2 has an invalid length.
[ 1858.883853][T10968] bond_slave_1: entered promiscuous mode
[ 1858.906547][T10968] batadv0: entered promiscuous mode
[ 1858.943609][T10968] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1858.964939][T10968] bond0: left promiscuous mode
[ 1858.978305][T10968] bond_slave_0: left promiscuous mode
[ 1858.999106][T10968] bond_slave_1: left promiscuous mode
[ 1859.029708][T10968] batadv0: left promiscuous mode
[ 1859.109393][T10982] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9504'.
[ 1859.164272][T10969] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.174063][T10969] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1859.214333][T10969] bridge0: entered allmulticast mode
[ 1859.667243][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9512'.
[ 1860.229258][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9529'.
[ 1860.257191][T11042] gre1: entered allmulticast mode
[ 1860.277317][T11044] bridge0: port 3(netdevsim1) entered blocking state
[ 1860.287563][T11044] bridge0: port 3(netdevsim1) entered disabled state
[ 1860.301137][T11044] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[ 1860.329177][T11044] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[ 1860.355820][T11044] bridge0: port 3(netdevsim1) entered blocking state
[ 1860.363252][T11044] bridge0: port 3(netdevsim1) entered forwarding state
[ 1860.538511][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9530'.
[ 1860.576495][T11049] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9530'.
[ 1860.605937][T11051] netlink: 'syz.3.9530': attribute type 12 has an invalid length.
[ 1860.652935][T11051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9530'.
[ 1860.821383][T11056] xt_hashlimit: size too large, truncated to 1048576
[ 1860.853173][T11056] xt_NFQUEUE: number of queues (10) out of range (got 65542)
[ 1861.303829][T11077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9538'.
[ 1862.658425][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9555'.
[ 1863.168041][T11138] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9563'.
[ 1863.193170][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9563'.
[ 1863.216491][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9563'.
[ 1863.738006][   T12] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[ 1864.714500][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9589'.
[ 1865.899180][T11238] tipc: Started in network mode
[ 1865.937096][T11238] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1866.002541][T11238] tipc: New replicast peer: fe80:0000:0040:0000:0000:0000:0000:00bb
[ 1866.035080][T11238] tipc: Enabled bearer <udp:s>, priority 10
[ 1866.299244][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9615'.
[ 1866.624223][ T8625] IPVS: starting estimator thread 0...
[ 1866.669847][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9623'.
[ 1866.753007][T11280] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1867.135492][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9632'.
[ 1867.160479][ T8624] tipc: Node number set to 1
[ 1867.284929][T11311] vxcan0: tx address claim with dlc 0
[ 1867.340248][T11316] syzkaller1: entered promiscuous mode
[ 1867.356064][T11316] syzkaller1: entered allmulticast mode
[ 1867.386923][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9640'.
[ 1867.447750][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9641'.
[ 1867.460679][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9642'.
[ 1867.470967][T11323] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 1867.699230][T11334] netlink: 'syz.4.9644': attribute type 32 has an invalid length.
[ 1867.751555][T11329] FAULT_INJECTION: forcing a failure.
[ 1867.751555][T11329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1867.767650][T11329] CPU: 0 UID: 0 PID: 11329 Comm: syz.3.9643 Not tainted syzkaller #0 PREEMPT(full) 
[ 1867.767679][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1867.767691][T11329] Call Trace:
[ 1867.767700][T11329]  <TASK>
[ 1867.767709][T11329]  dump_stack_lvl+0xe8/0x150
[ 1867.767739][T11329]  should_fail_ex+0x412/0x560
[ 1867.767772][T11329]  _copy_to_user+0x31/0xb0
[ 1867.767804][T11329]  simple_read_from_buffer+0xe1/0x170
[ 1867.767835][T11329]  proc_fail_nth_read+0x1bb/0x230
[ 1867.767866][T11329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1867.767896][T11329]  ? rw_verify_area+0x2a6/0x4d0
[ 1867.767924][T11329]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1867.767953][T11329]  vfs_read+0x20c/0xa70
[ 1867.767987][T11329]  ? __pfx___mutex_lock+0x10/0x10
[ 1867.768019][T11329]  ? __pfx_vfs_read+0x10/0x10
[ 1867.768049][T11329]  ? __fget_files+0x2a/0x420
[ 1867.768079][T11329]  ? __fget_files+0x3a0/0x420
[ 1867.768102][T11329]  ? __fget_files+0x2a/0x420
[ 1867.768137][T11329]  ksys_read+0x150/0x270
[ 1867.768168][T11329]  ? __pfx_ksys_read+0x10/0x10
[ 1867.768205][T11329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1867.768228][T11329]  do_syscall_64+0x15f/0xf80
[ 1867.768257][T11329]  ? trace_irq_disable+0x3b/0x140
[ 1867.768281][T11329]  ? clear_bhb_loop+0x40/0x90
[ 1867.768304][T11329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1867.768324][T11329] RIP: 0033:0x7f3f6775d68e
[ 1867.768342][T11329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1867.768356][T11329] RSP: 002b:00007f3f685a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1867.768377][T11329] RAX: ffffffffffffffda RBX: 00007f3f685a76c0 RCX: 00007f3f6775d68e
[ 1867.768391][T11329] RDX: 000000000000000f RSI: 00007f3f685a70a0 RDI: 0000000000000004
[ 1867.768402][T11329] RBP: 00007f3f685a7090 R08: 0000000000000000 R09: 0000000000000000
[ 1867.768414][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1867.768426][T11329] R13: 00007f3f67a16038 R14: 00007f3f67a15fa0 R15: 00007ffed3d774d8
[ 1867.768458][T11329]  </TASK>
[ 1868.620860][T11367] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[ 1869.349876][T11387] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1869.406925][T29728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1869.414739][T29728] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1869.449822][T11395] nr0: tun_chr_ioctl cmd 1074025677
[ 1869.476725][T11395] nr0: Linktype set failed because interface is up
[ 1869.764592][    C0] Unknown status report in ack skb
[ 1870.567840][T11453] __nla_validate_parse: 3 callbacks suppressed
[ 1870.567863][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9686'.
[ 1870.594877][T11453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9686'.
[ 1870.776708][T11463] vlan1: entered allmulticast mode
[ 1870.788844][T11463] veth0_vlan: entered allmulticast mode
[ 1871.293833][T11492] veth0_to_team: entered promiscuous mode
[ 1871.546869][T11501] dvmrp1: entered allmulticast mode
[ 1871.565886][T11505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9711'.
[ 1871.679909][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9713'.
[ 1871.933836][T11523] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9719'.
[ 1872.206284][T11533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9722'.
[ 1873.485672][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9750'.
[ 1873.523097][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9750'.
[ 1873.715810][T11603] bridge1: entered promiscuous mode
[ 1873.721296][T11603] bridge1: entered allmulticast mode
[ 1875.182422][    C1] ip6_tunnel: 0 xmit: Local address not yet configured!
[ 1876.466969][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1876.640502][T11602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1877.288222][T29728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1877.310431][T11670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1877.316141][T29728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1877.343402][T11672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1877.358064][T11676] sctp: [Deprecated]: syz.2.9783 (pid 11676) Use of int in max_burst socket option.
[ 1877.358064][T11676] Use struct sctp_assoc_value instead
[ 1877.877993][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9796'.
[ 1878.046686][T11709] netlink: 204 bytes leftover after parsing attributes in process `syz.1.9799'.
[ 1878.299176][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9807'.
[ 1878.659715][T11743] netlink: 'syz.4.9816': attribute type 27 has an invalid length.
[ 1879.198942][T11771] netlink: 'syz.2.9831': attribute type 3 has an invalid length.
[ 1879.228612][T11771] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9831'.
[ 1880.345675][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9860'.
[ 1880.551150][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9866'.
[ 1881.192002][T11882] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1881.213453][T11882] pim6reg0: linktype set to 1
[ 1881.529039][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9892'.
[ 1881.573302][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9892'.
[ 1881.648735][T11907] netlink: 'syz.3.9896': attribute type 1 has an invalid length.
[ 1883.315638][T11970] syzkaller0: entered promiscuous mode
[ 1883.328967][T11970] syzkaller0: entered allmulticast mode
[ 1883.465278][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9930'.
[ 1883.914540][T12000] tipc: Started in network mode
[ 1883.955921][T12000] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1883.981506][T12000] tipc: New replicast peer: fe80:0000:0040:0000:0000:0000:0000:00bb
[ 1884.013849][T12000] tipc: Enabled bearer <udp:s>, priority 10
[ 1884.031222][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9944'.
[ 1889.967567][ T8624] tipc: Node number set to 1
[ 1890.874363][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10001'.
[ 1891.346800][T29738] Bluetooth: hci5: command 0x0406 tx timeout
[ 1891.824891][T12168] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10014'.
[ 1893.255321][T12199] vlan0: entered promiscuous mode
[ 1893.384375][T12204] veth0: entered promiscuous mode
[ 1893.409379][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10031'.
[ 1893.485919][T12209] xt_hashlimit: size too large, truncated to 1048576
[ 1893.510130][T12204] veth0 (unregistering): left promiscuous mode
[ 1894.616366][T12252] syzkaller0: entered promiscuous mode
[ 1894.643008][T12252] syzkaller0: entered allmulticast mode
[ 1894.683730][T12259] xt_hashlimit: size too large, truncated to 1048576
[ 1895.585530][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10074'.
[ 1895.724501][T12307] syzkaller0: entered promiscuous mode
[ 1895.730274][T12307] syzkaller0: entered allmulticast mode
[ 1895.813168][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10079'.
[ 1895.829103][T12312] vlan2: entered allmulticast mode
[ 1895.835713][T12312] macvlan0: entered allmulticast mode
[ 1895.841177][T12312] veth1_vlan: entered allmulticast mode
[ 1895.849287][T12312] bridge0: port 3(vlan2) entered blocking state
[ 1895.857303][T12312] bridge0: port 3(vlan2) entered disabled state
[ 1895.867951][T12312] vlan2: entered promiscuous mode
[ 1895.874651][T12312] macvlan0: entered promiscuous mode
[ 1898.070170][T12395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10118'.
[ 1898.808263][T12433] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10137'.
[ 1900.596654][T12519] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10178'.
[ 1900.888005][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10186'.
[ 1901.049602][T12544] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[ 1901.063750][T12544] syzkaller0: entered promiscuous mode
[ 1901.069510][T12544] syzkaller0: entered allmulticast mode
[ 1901.427962][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10199'.
[ 1902.477982][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10217'.
[ 1903.893734][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10245'.
[ 1903.941710][T12673] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10247'.
[ 1904.567518][T12703] xt_hashlimit: size too large, truncated to 1048576
[ 1904.575830][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10262'.
[ 1904.791274][T12707] netlink: 212 bytes leftover after parsing attributes in process `syz.1.10263'.
[ 1905.325687][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10274'.
[ 1905.594589][T12748] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10282'.
[ 1905.875053][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10287'.
[ 1906.097505][T12770] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10293'.
[ 1906.738463][T12800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10305'.
[ 1907.293873][T12833] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10322'.
[ 1910.705253][T13013] __nla_validate_parse: 1 callbacks suppressed
[ 1910.705277][T13013] netlink: 204 bytes leftover after parsing attributes in process `syz.1.10408'.
[ 1914.876518][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.851079][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10516'.
[ 1918.546035][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10568'.
[ 1918.569224][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10568'.
[ 1919.270373][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10581'.
[ 1920.128055][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10595'.
[ 1920.706738][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10609'.
[ 1923.938407][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10684'.
[ 1924.194751][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10690'.
[ 1924.650411][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10700'.
[ 1926.259146][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10736'.
[ 1926.295072][T13736] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10736'.
[ 1926.315789][T13738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1927.184111][T29738] Bluetooth: hci2: command 0x0405 tx timeout
[ 1928.278110][T13823] ip6erspan0: entered allmulticast mode
[ 1928.594486][T13843] wg0: entered allmulticast mode
[ 1928.604243][T13841] wg0: left allmulticast mode
[ 1929.379196][T13882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10797'.
[ 1930.260557][T13921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10813'.
[ 1931.001171][T13951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10825'.
[ 1931.046942][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10827'.
[ 1931.066391][T13955] ip6gre1: entered promiscuous mode
[ 1931.072395][T13955] ip6gre1: entered allmulticast mode
[ 1931.651406][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10840'.
[ 1931.751384][T13982] bond1: (slave erspan0): Enslaving as an active interface with an up link
[ 1931.807094][T13986] bond1: (slave erspan0): Releasing backup interface
[ 1931.873960][T13986] bridge_slave_0: left allmulticast mode
[ 1931.879860][T13986] bridge_slave_0: left promiscuous mode
[ 1931.887333][T13986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1931.919224][T13986] bridge_slave_1: left allmulticast mode
[ 1931.941005][T13986] bridge_slave_1: left promiscuous mode
[ 1931.983516][T13986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1932.034756][T13986] bond0: (slave bond_slave_0): Releasing backup interface
[ 1932.104954][T13986] bond0: (slave bond_slave_1): Releasing backup interface
[ 1932.175873][T13986] team0: Port device team_slave_0 removed
[ 1932.229524][T13986] team0: Port device team_slave_1 removed
[ 1932.250560][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1932.259567][T13986] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1932.284518][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1932.293338][T13986] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1932.311015][T13986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1932.700515][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10855'.
[ 1932.907224][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10858'.
[ 1932.986901][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10859'.
[ 1934.150386][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10882'.
[ 1934.699915][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10896'.
[ 1935.553004][T14154] netlink: 75 bytes leftover after parsing attributes in process `syz.0.10911'.
[ 1938.125895][T14250] xt_hashlimit: size too large, truncated to 1048576
[ 1938.450137][T14268] netlink: 'syz.3.10959': attribute type 40 has an invalid length.
[ 1938.655170][T14278] veth0: entered promiscuous mode
[ 1938.661477][T14276] veth0: left promiscuous mode
[ 1938.847274][T14290] netlink: 'syz.2.10970': attribute type 5 has an invalid length.
[ 1939.049204][T14300] xt_hashlimit: size too large, truncated to 1048576
[ 1939.331574][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10979'.
[ 1939.768720][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10991'.
[ 1939.859821][T14339] sctp: [Deprecated]: syz.3.10994 (pid 14339) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1939.859821][T14339] Use struct sctp_sack_info instead
[ 1940.439330][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11006'.
[ 1940.462933][    C1] ip6_tunnel: 0 xmit: Local address not yet configured!
[ 1941.153048][T14388] veth0: entered promiscuous mode
[ 1941.159044][T14387] veth0: left promiscuous mode
[ 1942.194397][T14435] xt_hashlimit: size too large, truncated to 1048576
[ 1942.203750][T14418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1942.212041][T14418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1942.789744][T14418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1942.856067][T14418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1943.191266][T14418] veth1_vlan: left allmulticast mode
[ 1943.460943][   T64] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1943.485794][   T64] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1943.499362][   T64] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1943.545683][   T64] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1943.569137][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11045'.
[ 1943.774031][T14478] xt_hashlimit: size too large, truncated to 1048576
[ 1943.863174][T14482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11051'.
[ 1943.885037][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11051'.
[ 1943.912947][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11051'.
[ 1944.310188][T14499] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1944.320242][T14499] pim6reg0: linktype set to 780
[ 1945.585036][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1945.674798][T14573] netlink: 'syz.3.11094': attribute type 5 has an invalid length.
[ 1945.875057][T14579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11097'.
[ 1946.960880][T14636] ip6erspan0: entered allmulticast mode
[ 1947.329323][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11133'.
[ 1948.410016][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11146'.
[ 1948.806359][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11155'.
[ 1948.916938][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11157'.
[ 1949.317198][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11168'.
[ 1949.545991][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11172'.
[ 1951.405612][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11214'.
[ 1951.937479][T14859] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11223'.
[ 1952.295627][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11226'.
[ 1952.549948][T14874] xt_hashlimit: size too large, truncated to 1048576
[ 1952.984081][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11241'.
[ 1953.297435][T14912] syzkaller0: entered promiscuous mode
[ 1953.313854][T14912] syzkaller0: entered allmulticast mode
[ 1954.030340][T29738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1954.068236][T29738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1954.086153][T29738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1954.098646][T29738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1954.107566][T29738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1955.291681][T14992] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1955.536510][T14938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1955.546097][T14938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1955.555087][T14938] bridge_slave_0: entered allmulticast mode
[ 1955.565550][T14938] bridge_slave_0: entered promiscuous mode
[ 1955.586752][T14938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1955.595645][T14938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1955.604516][T14938] bridge_slave_1: entered allmulticast mode
[ 1955.614327][T14938] bridge_slave_1: entered promiscuous mode
[ 1955.695147][T14938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1955.726214][T14938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1955.816917][T14938] team0: Port device team_slave_0 added
[ 1955.866038][T14938] team0: Port device team_slave_1 added
[ 1955.925938][T14938] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1955.938800][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1955.968074][T14938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1956.045322][T14938] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1956.071710][T14938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1956.151441][T14938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1956.223597][ T5631] Bluetooth: hci0: command tx timeout
[ 1956.405871][T14938] hsr_slave_0: entered promiscuous mode
[ 1956.424805][T14938] hsr_slave_1: entered promiscuous mode
[ 1956.439734][T14938] debugfs: 'hsr0' already exists in 'hsr'
[ 1956.456217][T14938] Cannot create hsr debugfs directory
[ 1956.823326][T14938] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1956.986211][T14938] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1957.240104][T14938] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1957.566671][T14938] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1957.948632][T15082] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1958.258913][T14938] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1958.263276][T15100] xt_hashlimit: size too large, truncated to 1048576
[ 1958.285555][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1958.300617][T14938] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1958.313332][ T5631] Bluetooth: hci0: command tx timeout
[ 1958.324948][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1958.335434][T14938] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1958.350415][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1958.360840][T14938] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1958.381429][T14938] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1958.576517][T14938] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1958.621561][T14938] 8021q: adding VLAN 0 to HW filter on device team0
[ 1958.687967][T29728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1958.695772][T29728] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1958.751032][T29728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1958.758817][T29728] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1960.013752][T15161] syzkaller0: entered promiscuous mode
[ 1960.028013][T15161] syzkaller0: entered allmulticast mode
[ 1960.048465][T14938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1960.251152][T14938] veth0_vlan: entered promiscuous mode
[ 1960.285594][T14938] veth1_vlan: entered promiscuous mode
[ 1960.387024][ T5631] Bluetooth: hci0: command tx timeout
[ 1960.426457][T14938] veth0_macvtap: entered promiscuous mode
[ 1960.458793][T14938] veth1_macvtap: entered promiscuous mode
[ 1960.590214][T14938] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1960.642717][T14938] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1960.687706][T29728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.720362][T29728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.740509][T29728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1960.757877][T29728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1961.238395][T29728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.261646][T29728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.413321][ T8481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1961.425540][ T8481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1961.491488][T15212] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11364'.
[ 1962.017874][T15234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11374'.
[ 1962.468491][T29738] Bluetooth: hci0: command tx timeout
[ 1963.025812][T29738] Bluetooth: hci1: command 0x0405 tx timeout
[ 1969.194393][T15364] ip6erspan0: entered allmulticast mode
[ 1970.477003][T15417] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11451'.
[ 1975.973767][T15477] ip6erspan0: entered allmulticast mode
[ 1976.318188][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.735281][T15513] netlink: 'syz.4.11487': attribute type 5 has an invalid length.
[ 1977.098005][T15536] netlink: 'syz.3.11498': attribute type 29 has an invalid length.
[ 1977.213394][T15540] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1977.633650][T15562] ip6erspan1: entered allmulticast mode
[ 1977.640322][T15561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1977.650891][T15561] netlink: 13 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1977.663661][T15561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1977.673721][T15561] netlink: 13 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1977.683864][T15561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11511'.
[ 1977.925786][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11518'.
[ 1979.135058][T15642] netlink: 'syz.1.11548': attribute type 1 has an invalid length.
[ 1979.141057][T15641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11547'.
[ 1979.153860][T15642] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11548'.
[ 1979.493069][T15658] Dead loop on virtual device ip6_vti0 (net 5970), fix it urgently!
[ 1980.030642][T15685] netlink: 'syz.4.11563': attribute type 29 has an invalid length.
[ 1980.041380][T15685] netlink: 'syz.4.11563': attribute type 29 has an invalid length.
[ 1981.387047][T15745] netlink: 5204 bytes leftover after parsing attributes in process `syz.1.11586'.
[ 1981.449728][T15747] netlink: 'syz.0.11588': attribute type 29 has an invalid length.
[ 1981.743773][T15761] netlink: 'syz.0.11594': attribute type 2 has an invalid length.
[ 1981.754368][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11594'.
[ 1989.967744][T15959] __nla_validate_parse: 1 callbacks suppressed
[ 1989.967768][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11682'.
[ 1990.463541][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11696'.
[ 1990.474935][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11696'.
[ 1990.505601][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1990.518048][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1990.530923][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1990.557926][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1990.570674][   T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1990.581304][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1991.018223][T16007] syzkaller1: entered promiscuous mode
[ 1991.028192][T16007] syzkaller1: entered allmulticast mode
[ 1991.734055][T16039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11717'.
[ 1992.321173][ T4944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1992.338102][ T4944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1992.348510][ T4944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1992.367365][ T4944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1992.377672][ T4944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1992.878694][T16077] openvswitch: netlink: Message has 133 unknown bytes.
[ 1993.206546][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1993.235927][T16087] ip6erspan2: entered allmulticast mode
[ 1993.433820][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1993.567387][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1993.767898][ T4944] Bluetooth: hci3: command 0x0406 tx timeout
[ 1993.790446][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1994.471063][ T4944] Bluetooth: hci5: command tx timeout
[ 1996.547772][ T4944] Bluetooth: hci5: command tx timeout
[ 1998.633768][ T4944] Bluetooth: hci5: command tx timeout
[ 1998.863457][ T4944] Bluetooth: hci4: command 0x0405 tx timeout
[ 1999.227848][T16051] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1999.236502][T16051] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1999.245643][T16051] bridge_slave_0: entered allmulticast mode
[ 1999.255925][T16051] bridge_slave_0: entered promiscuous mode
[ 1999.283150][T16051] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1999.290703][T16051] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1999.299061][T16051] bridge_slave_1: entered allmulticast mode
[ 1999.315093][T16051] bridge_slave_1: entered promiscuous mode
[ 1999.394429][   T12] bridge_slave_1: left allmulticast mode
[ 1999.400551][   T12] bridge_slave_1: left promiscuous mode
[ 1999.410671][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1999.439033][   T12] bridge_slave_0: left allmulticast mode
[ 1999.446606][   T12] bridge_slave_0: left promiscuous mode
[ 1999.458118][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1999.484235][   T12] dvmrp1: left allmulticast mode
[ 1999.975588][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2000.006659][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2000.022921][   T12] bond0 (unregistering): Released all slaves
[ 2000.040799][   T12] bond1 (unregistering): Released all slaves
[ 2000.078311][T16051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2000.133144][T16051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2000.291121][T16051] team0: Port device team_slave_0 added
[ 2000.374401][T16051] team0: Port device team_slave_1 added
[ 2000.414333][T16183] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11770'.
[ 2000.544876][T16183] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 2000.621357][T16051] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2000.646359][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2000.691501][T16051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2000.712794][T29738] Bluetooth: hci5: command tx timeout
[ 2000.800854][T16051] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2000.818248][T16051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2000.896390][T16051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2001.060209][   T12] hsr_slave_0: left promiscuous mode
[ 2001.067561][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2001.081094][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2001.095512][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2001.109406][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2001.155540][   T12] veth1_macvtap: left promiscuous mode
[ 2001.164269][   T12] veth0_macvtap: left promiscuous mode
[ 2001.170237][   T12] veth1_vlan: left promiscuous mode
[ 2001.176868][   T12] veth0_vlan: left promiscuous mode
[ 2001.286166][T16213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11779'.
[ 2001.815365][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 2001.840614][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 2002.048333][T16213] ip6gre1: entered promiscuous mode
[ 2002.056707][T16213] ip6gre1: entered allmulticast mode
[ 2002.077632][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2002.179817][T16219] syzkaller0: entered promiscuous mode
[ 2002.186382][T16219] syzkaller0: entered allmulticast mode
[ 2002.198559][T16051] hsr_slave_0: entered promiscuous mode
[ 2002.205642][T16051] hsr_slave_1: entered promiscuous mode
[ 2002.213687][T16051] debugfs: 'hsr0' already exists in 'hsr'
[ 2002.219932][T16051] Cannot create hsr debugfs directory
[ 2007.366667][T16244] syzkaller1: entered promiscuous mode
[ 2007.382618][T16244] syzkaller1: entered allmulticast mode
[ 2009.396585][T16051] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2009.463856][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2009.481202][T16051] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2009.531487][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2009.553933][T16342] ªªªªªª: renamed from lo (while UP)
[ 2009.568750][T16051] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2009.598750][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2009.609353][T16051] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2009.630235][T16051] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2009.919097][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11820'.
[ 2009.986667][T16051] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2010.070274][T16051] 8021q: adding VLAN 0 to HW filter on device team0
[ 2010.095785][T16376] mac80211_hwsim hwsim557 wlan0: entered promiscuous mode
[ 2010.123170][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2010.130591][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2010.205229][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2010.212500][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2010.880425][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11833'.
[ 2011.748935][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11845'.
[ 2011.800418][T16447] syzkaller0: entered promiscuous mode
[ 2011.826092][T16447] syzkaller0: entered allmulticast mode
[ 2012.149136][T16468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11850'.
[ 2012.169131][T16051] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2012.340787][T16051] veth0_vlan: entered promiscuous mode
[ 2012.394391][T16051] veth1_vlan: entered promiscuous mode
[ 2012.505432][T16051] veth0_macvtap: entered promiscuous mode
[ 2012.548124][T16051] veth1_macvtap: entered promiscuous mode
[ 2012.614444][T16051] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2012.692583][T16051] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2012.756911][ T8546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2012.805595][ T8546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2012.835570][ T8546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2012.880183][ T8546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2013.430372][T29728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2013.470918][T29728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2013.678980][T29728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2013.694650][T29728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2014.458615][ T4944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2014.479145][ T4944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2014.493618][ T4944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2014.506083][ T4944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2014.520540][ T4944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2015.828158][T16612] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11894'.
[ 2015.876445][T16612] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 2016.618665][T16552] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2016.629294][T29738] Bluetooth: hci2: command tx timeout
[ 2016.647316][T16552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2016.657556][T16552] bridge_slave_0: entered allmulticast mode
[ 2016.667633][T16552] bridge_slave_0: entered promiscuous mode
[ 2016.679648][T16552] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2016.688277][T16552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2016.699036][T16552] bridge_slave_1: entered allmulticast mode
[ 2016.709805][T16552] bridge_slave_1: entered promiscuous mode
[ 2016.774144][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2016.790963][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2016.856296][T16552] team0: Port device team_slave_0 added
[ 2016.872256][T16552] team0: Port device team_slave_1 added
[ 2016.935238][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2016.945111][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2017.002953][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2017.021346][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2017.033529][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2017.062840][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2017.135533][T16674] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11915'.
[ 2017.215844][T16552] hsr_slave_0: entered promiscuous mode
[ 2017.227542][T16552] hsr_slave_1: entered promiscuous mode
[ 2017.258382][T16552] debugfs: 'hsr0' already exists in 'hsr'
[ 2017.296070][T16552] Cannot create hsr debugfs directory
[ 2018.029997][T16552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.165339][T16552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.323742][T16552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.490507][T16552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2018.706817][T29738] Bluetooth: hci2: command tx timeout
[ 2018.830005][T16552] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2018.852913][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2018.874020][T16552] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2018.897245][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2018.938085][T16552] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2018.979223][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2018.994414][T16552] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2019.017230][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2019.348855][T16552] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2019.399612][T16552] 8021q: adding VLAN 0 to HW filter on device team0
[ 2019.425651][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2019.433168][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2019.464471][T15699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2019.471836][T15699] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2019.926698][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2020.513105][T16552] veth0_vlan: entered promiscuous mode
[ 2020.605300][T16552] veth1_vlan: entered promiscuous mode
[ 2020.714738][T16552] veth0_macvtap: entered promiscuous mode
[ 2020.745637][T16552] veth1_macvtap: entered promiscuous mode
[ 2020.784821][T29738] Bluetooth: hci2: command tx timeout
[ 2020.820806][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2020.883997][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2020.919831][ T8546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2020.945060][ T8546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2020.959208][ T8546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2020.992730][ T8546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2021.086654][T16829] syzkaller0: entered promiscuous mode
[ 2021.112762][T16829] syzkaller0: entered allmulticast mode
[ 2021.247900][ T8546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2021.269125][ T8546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2021.387178][ T9873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2021.396124][ T9873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2021.739462][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11973'.
[ 2021.787235][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11973'.
[ 2021.871464][T15699] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2021.890894][T15699] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2021.915418][T16854] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11978'.
[ 2021.956980][T15699] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2021.993688][T15699] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2022.420260][T15699] bridge_slave_1: left allmulticast mode
[ 2022.441196][T15699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2022.478274][T15699] bridge_slave_0: left allmulticast mode
[ 2022.497770][T15699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2022.788153][T15699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2022.799875][T15699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2022.810571][T15699] bond0 (unregistering): Released all slaves
[ 2022.863988][T29738] Bluetooth: hci2: command tx timeout
[ 2023.649436][T15699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2023.665340][T15699] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2023.700209][T15699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2023.709881][T15699] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2024.449265][T15699] team0 (unregistering): Port device team_slave_1 removed
[ 2024.475762][T15699] team0 (unregistering): Port device team_slave_0 removed
[ 2026.760472][T17046] netlink: 'syz.1.12060': attribute type 1 has an invalid length.
[ 2026.770745][T17046] netlink: 'syz.1.12060': attribute type 2 has an invalid length.
[ 2026.786763][T17046] netlink: 'syz.1.12060': attribute type 1 has an invalid length.
[ 2026.797168][T17046] netlink: 'syz.1.12060': attribute type 2 has an invalid length.
[ 2027.502371][    C0] ip6_tunnel: 0 xmit: Local address not yet configured!
[ 2027.594698][T17090] xt_hashlimit: size too large, truncated to 1048576
[ 2027.878312][T17104] xt_hashlimit: size too large, truncated to 1048576
[ 2028.909130][ T4944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2028.924045][ T4944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2028.936308][ T4944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2028.953601][ T4944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2028.964095][ T4944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2029.583011][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12114'.
[ 2030.318057][T17199] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12124'.
[ 2030.424644][T17201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12125'.
[ 2030.509009][T17199] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 2031.024114][T29738] Bluetooth: hci3: command tx timeout
[ 2031.234796][T17234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12136'.
[ 2031.249230][T17142] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2031.268300][T17142] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2031.279504][T17142] bridge_slave_0: entered allmulticast mode
[ 2031.290207][T17142] bridge_slave_0: entered promiscuous mode
[ 2031.367649][T17142] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2031.379305][T17142] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2031.390116][T17142] bridge_slave_1: entered allmulticast mode
[ 2031.400179][T17142] bridge_slave_1: entered promiscuous mode
[ 2031.621178][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2031.678187][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2031.753466][T29728] vlan2: left promiscuous mode
[ 2031.775230][T29728] macvlan0: left promiscuous mode
[ 2031.799897][T29728] bridge0: port 3(vlan2) entered disabled state
[ 2031.853789][T29728] bridge_slave_1: left allmulticast mode
[ 2031.882428][T29728] bridge_slave_1: left promiscuous mode
[ 2031.901434][T29728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2031.921391][T29728] bridge_slave_0: left allmulticast mode
[ 2031.940505][T29728] bridge_slave_0: left promiscuous mode
[ 2031.957425][T29728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2032.408015][T29728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2032.420025][T29728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2032.434425][T29728] bond0 (unregistering): Released all slaves
[ 2032.450625][T29728] bond1 (unregistering): Released all slaves
[ 2032.538402][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[ 2032.618984][T29728] tipc: Disabling bearer <udp:s>
[ 2032.634476][T17274] xt_hashlimit: size too large, truncated to 1048576
[ 2032.647250][T29728] tipc: Left network mode
[ 2032.661244][T17142] team0: Port device team_slave_0 added
[ 2032.700042][T17142] team0: Port device team_slave_1 added
[ 2032.920369][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2032.950929][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2033.023845][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2033.045451][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2033.061380][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2033.093201][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2033.106673][T29738] Bluetooth: hci3: command tx timeout
[ 2033.548361][T17142] hsr_slave_0: entered promiscuous mode
[ 2033.575465][T17302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12156'.
[ 2033.594119][T17142] hsr_slave_1: entered promiscuous mode
[ 2033.616125][T17142] debugfs: 'hsr0' already exists in 'hsr'
[ 2033.625041][T17142] Cannot create hsr debugfs directory
[ 2033.772704][T29728] hsr_slave_0: left promiscuous mode
[ 2033.790437][T29728] hsr_slave_1: left promiscuous mode
[ 2033.818028][T29728] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2033.864521][T29728] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2034.126966][T17330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12166'.
[ 2034.570278][T29728] team0 (unregistering): Port device team_slave_1 removed
[ 2034.590731][T29728] team0 (unregistering): Port device team_slave_0 removed
[ 2034.753545][T17330] hsr_slave_0: left promiscuous mode
[ 2034.777037][T17330] hsr_slave_1: left promiscuous mode
[ 2034.870428][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2
[ 2035.115444][T17348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12171'.
[ 2035.124830][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12170'.
[ 2035.161007][T17342] syzkaller0: entered promiscuous mode
[ 2035.174792][T17342] syzkaller0: entered allmulticast mode
[ 2035.199456][T29738] Bluetooth: hci3: command tx timeout
[ 2036.170222][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12183'.
[ 2036.608546][T17398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12186'.
[ 2037.276157][T29738] Bluetooth: hci3: command tx timeout
[ 2037.753564][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 2040.900943][T17374] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.12179'.
[ 2040.916197][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3
[ 2040.947250][T17409] netlink: 'syz.4.12191': attribute type 7 has an invalid length.
[ 2040.969057][T17409] netlink: 11 bytes leftover after parsing attributes in process `syz.4.12191'.
[ 2041.218037][T17418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12193'.
[ 2042.744636][T17474] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12210'.
[ 2042.793598][T17474] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12210'.
[ 2043.967603][T17142] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2044.002934][T17142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2044.010688][T17524] netlink: 763 bytes leftover after parsing attributes in process `syz.4.12226'.
[ 2044.027612][T17142] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2044.066367][T17142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2044.088965][T17142] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2044.118891][T17142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2044.159701][T17142] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2044.190264][T17142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2044.450005][T17142] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2044.556188][T17142] 8021q: adding VLAN 0 to HW filter on device team0
[ 2044.601948][T29728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2044.609297][T29728] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2044.654372][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2044.661661][ T8546] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2045.510705][T17585] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12245'.
[ 2046.309047][T17625] netlink: 'syz.4.12255': attribute type 1 has an invalid length.
[ 2046.337366][T17625] netlink: 'syz.4.12255': attribute type 4 has an invalid length.
[ 2046.354317][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2046.357149][T17625] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12255'.
[ 2046.567521][T17142] veth0_vlan: entered promiscuous mode
[ 2046.695538][T17142] veth1_vlan: entered promiscuous mode
[ 2046.837453][T17142] veth0_macvtap: entered promiscuous mode
[ 2046.867272][T17142] veth1_macvtap: entered promiscuous mode
[ 2047.000550][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2047.090107][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2047.163904][ T9869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.188969][ T9869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.243021][ T9869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.261334][ T9869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2047.717118][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12275'.
[ 2054.064469][ T8546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2054.089581][ T8546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2054.318583][ T9873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2054.344955][ T9873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2054.941601][ T9873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2055.533161][ T8546] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2055.561927][ T8546] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2055.743840][T17863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12322'.
[ 2055.880889][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12324'.
[ 2057.093151][T17935] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12348'.
[ 2057.903062][T17973] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12361'.
[ 2058.646855][T18012] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12376'.
[ 2058.873634][T18018] netlink: 'syz.0.12378': attribute type 7 has an invalid length.
[ 2058.963219][T18023] netlink: 'syz.3.12380': attribute type 1 has an invalid length.
[ 2060.225730][T18088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12403'.
[ 2060.534959][T18111] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[ 2060.588898][ T8546] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2061.539430][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12423'.
[ 2062.937233][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12437'.
[ 2063.098848][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12442'.
[ 2063.567299][T18220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12450'.
[ 2063.873172][T18225] bridge0: port 3(syz_tun) entered blocking state
[ 2063.894656][T18225] bridge0: port 3(syz_tun) entered disabled state
[ 2063.960636][T18225] syz_tun: entered allmulticast mode
[ 2063.979139][T18225] syz_tun: entered promiscuous mode
[ 2063.997738][T18225] bridge0: port 3(syz_tun) entered blocking state
[ 2064.004717][T18225] bridge0: port 3(syz_tun) entered forwarding state
[ 2065.476340][T18298] xt_hashlimit: size too large, truncated to 1048576
[ 2065.554913][T18297] xt_hashlimit: size too large, truncated to 1048576
[ 2067.462585][T18388] netlink: 'syz.2.12528': attribute type 1 has an invalid length.
[ 2068.288458][T18418] netlink: 'syz.3.12543': attribute type 1 has an invalid length.
[ 2068.473242][    C1] ip6_tunnel: 0 xmit: Local address not yet configured!
[ 2069.028048][T18449] netlink: 'syz.3.12557': attribute type 1 has an invalid length.
[ 2069.466487][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12561'.
[ 2069.490641][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12561'.
[ 2069.893109][T18485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12565'.
[ 2069.958326][   T48] bond0 (unregistering): Released all slaves
[ 2069.973307][   T48] bond1 (unregistering): Released all slaves
[ 2070.059513][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12561'.
[ 2070.110342][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12561'.
[ 2070.636631][   T48] hsr_slave_0: left promiscuous mode
[ 2070.655917][   T48] hsr_slave_1: left promiscuous mode
[ 2070.780630][   T48] veth1_macvtap: left promiscuous mode
[ 2070.810152][   T48] veth0_macvtap: left promiscuous mode
[ 2070.824929][   T48] veth1_vlan: left promiscuous mode
[ 2070.838040][   T48] veth0_vlan: left promiscuous mode
[ 2071.210739][T18523] netlink: 'syz.0.12580': attribute type 11 has an invalid length.
[ 2072.059868][T18509] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 2072.155439][T18539] tipc: Started in network mode
[ 2072.160380][T18539] tipc: Node identity 7f000001, cluster identity 4711
[ 2072.169420][T18539] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 2072.354364][T18544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2072.766862][   T48] IPVS: stop unused estimator thread 0...
[ 2072.947275][T18565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12593'.
[ 2072.969634][T18565] netlink: 75 bytes leftover after parsing attributes in process `syz.0.12593'.
[ 2072.991424][T18563] syzkaller0: entered promiscuous mode
[ 2072.999863][T18563] syzkaller0: entered allmulticast mode
[ 2073.015713][T18567] bridge0: port 3(netdevsim1) entered blocking state
[ 2073.025698][T18567] bridge0: port 3(netdevsim1) entered disabled state
[ 2073.054615][T18567] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[ 2073.095772][T18567] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[ 2073.107292][T18567] bridge0: port 3(netdevsim1) entered blocking state
[ 2073.114224][T18567] bridge0: port 3(netdevsim1) entered forwarding state
[ 2073.207782][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12594'.
[ 2073.594496][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 2078.008828][T18571] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12594'.
[ 2078.031405][T18576] netlink: 'syz.2.12594': attribute type 12 has an invalid length.
[ 2078.039904][T18576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12594'.
[ 2078.677715][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12600'.
[ 2078.947037][T18626] syzkaller0: entered promiscuous mode
[ 2078.955399][T18626] syzkaller0: entered allmulticast mode
[ 2080.165203][T18662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12622'.
[ 2080.496067][T18665] netlink: 'syz.0.12623': attribute type 1 has an invalid length.
[ 2080.512354][T18665] netlink: 'syz.0.12623': attribute type 2 has an invalid length.
[ 2080.524166][T18665] netlink: 'syz.0.12623': attribute type 1 has an invalid length.
[ 2080.533032][T18665] netlink: 'syz.0.12623': attribute type 1 has an invalid length.
[ 2080.541664][T18665] netlink: 'syz.0.12623': attribute type 2 has an invalid length.
[ 2080.782344][ T4944] Bluetooth: hci0: command 0x0406 tx timeout
[ 2084.680800][ T4944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2084.699562][ T4944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2084.732973][ T4944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2084.749623][ T4944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2084.760733][ T4944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2084.825601][T18693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12634'.
[ 2084.881334][T18697] netlink: 'syz.1.12635': attribute type 1 has an invalid length.
[ 2084.905219][T18697] netlink: 'syz.1.12635': attribute type 2 has an invalid length.
[ 2084.915617][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12636'.
[ 2084.927546][T18697] netlink: 'syz.1.12635': attribute type 1 has an invalid length.
[ 2084.956511][T18697] netlink: 'syz.1.12635': attribute type 1 has an invalid length.
[ 2084.997846][T18697] netlink: 'syz.1.12635': attribute type 2 has an invalid length.
[ 2085.491444][T18726] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12646'.
[ 2085.749268][T18736] netlink: 'syz.4.12649': attribute type 1 has an invalid length.
[ 2085.796051][T18736] netlink: 'syz.4.12649': attribute type 2 has an invalid length.
[ 2085.833064][T18736] netlink: 'syz.4.12649': attribute type 1 has an invalid length.
[ 2085.857277][T18736] netlink: 'syz.4.12649': attribute type 1 has an invalid length.
[ 2085.877891][T18736] netlink: 'syz.4.12649': attribute type 2 has an invalid length.
[ 2086.241599][T18764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12658'.
[ 2086.316001][T18687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2086.326748][T18687] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2086.354032][T18687] bridge_slave_0: entered allmulticast mode
[ 2086.380819][T18687] bridge_slave_0: entered promiscuous mode
[ 2086.400616][T18687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2086.437995][T18687] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2086.454715][T18687] bridge_slave_1: entered allmulticast mode
[ 2086.477226][T18687] bridge_slave_1: entered promiscuous mode
[ 2086.618907][T18687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2086.653739][T18687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2086.735912][T18687] team0: Port device team_slave_0 added
[ 2086.748381][T18687] team0: Port device team_slave_1 added
[ 2086.821402][T18687] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2086.851205][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12670'.
[ 2086.853193][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2086.861027][T18790] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 2086.903646][T29738] Bluetooth: hci1: command tx timeout
[ 2086.914817][T18687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2086.987294][T18793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2087.042870][T18687] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2087.071069][T18687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2087.119379][T18687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2087.272287][T18687] hsr_slave_0: entered promiscuous mode
[ 2087.285774][T18687] hsr_slave_1: entered promiscuous mode
[ 2087.297836][T18687] debugfs: 'hsr0' already exists in 'hsr'
[ 2087.304614][T18687] Cannot create hsr debugfs directory
[ 2087.360222][T18808] syzkaller1: entered promiscuous mode
[ 2087.367192][T18808] syzkaller1: entered allmulticast mode
[ 2087.817743][T18827] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2088.155121][T18687] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2088.170208][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2088.189294][T18687] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2088.205301][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2088.215922][T18839] syzkaller1: entered promiscuous mode
[ 2088.227238][T18839] syzkaller1: entered allmulticast mode
[ 2088.238985][T18687] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2088.250896][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2088.259736][T18687] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2088.286987][T18687] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2088.414246][T18848] gre1: entered allmulticast mode
[ 2088.643377][T18687] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2088.707756][T18687] 8021q: adding VLAN 0 to HW filter on device team0
[ 2088.753336][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2088.760577][ T9873] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2088.769878][T18866] netlink: 21 bytes leftover after parsing attributes in process `syz.4.12702'.
[ 2088.777338][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2088.786257][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2088.952505][T29738] Bluetooth: hci1: command tx timeout
[ 2088.986895][T18870] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12705'.
[ 2089.215627][T18882] syzkaller1: entered promiscuous mode
[ 2089.224945][T18882] syzkaller1: entered allmulticast mode
[ 2089.381640][T18888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2089.640946][T18900] netlink: zone id is out of range
[ 2089.662587][T18900] netlink: zone id is out of range
[ 2089.668225][T18900] netlink: zone id is out of range
[ 2089.688378][T18900] netlink: zone id is out of range
[ 2089.709999][T18900] netlink: zone id is out of range
[ 2089.718924][T18905] netlink: 21 bytes leftover after parsing attributes in process `syz.4.12715'.
[ 2089.731406][T18900] netlink: zone id is out of range
[ 2089.969174][T18687] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2090.034472][T18913] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12718'.
[ 2090.068365][T18913] validate_nla: 1 callbacks suppressed
[ 2090.068386][T18913] netlink: 'syz.1.12718': attribute type 2 has an invalid length.
[ 2090.100691][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12718'.
[ 2090.526272][T18940] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12726'.
[ 2090.745156][T18687] veth0_vlan: entered promiscuous mode
[ 2090.788380][T18687] veth1_vlan: entered promiscuous mode
[ 2090.836076][T18687] veth0_macvtap: entered promiscuous mode
[ 2090.863187][T18687] veth1_macvtap: entered promiscuous mode
[ 2090.954956][T29728] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2090.989367][T18687] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2091.024948][T29738] Bluetooth: hci1: command tx timeout
[ 2091.056883][T18687] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2091.146084][T18958] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12734'.
[ 2091.157531][T29728] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.167239][T18958] netlink: 'syz.1.12734': attribute type 2 has an invalid length.
[ 2091.167263][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12734'.
[ 2091.244975][T29728] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.299890][T29728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.376177][T29728] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2091.613249][T18973] netlink: 'syz.0.12739': attribute type 11 has an invalid length.
[ 2091.621399][ T9873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2091.640934][ T9873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2091.659478][T18975] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12738'.
[ 2091.847955][ T9873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2091.886407][ T9873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2092.446273][T19001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12743'.
[ 2092.648188][T19001] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2092.921463][T19005] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2092.964144][T19005] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[ 2093.035444][T19005] bond1: (slave vcan1): Error -95 calling set_mac_address
[ 2093.104217][T29738] Bluetooth: hci1: command tx timeout
[ 2093.284280][T19019] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12747'.
[ 2093.312394][T19019] netlink: 'syz.4.12747': attribute type 2 has an invalid length.
[ 2093.350475][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12747'.
[ 2093.505207][T19030] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12750'.
[ 2093.626799][ T4944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2093.645587][ T4944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2093.656214][ T4944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2093.667309][ T4944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2093.675851][ T4944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2095.211336][T19085] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12762'.
[ 2095.359584][T19092] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12761'.
[ 2095.430719][T19092] netlink: 'syz.1.12761': attribute type 2 has an invalid length.
[ 2095.443805][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12761'.
[ 2095.517891][T19097] gre1: entered allmulticast mode
[ 2095.524436][T19082] syzkaller0: entered promiscuous mode
[ 2095.531249][T19082] syzkaller0: entered allmulticast mode
[ 2095.744247][ T4944] Bluetooth: hci6: command tx timeout
[ 2095.991430][T19111] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2095.999363][T19111] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2096.020832][T19111] bridge0: entered allmulticast mode
[ 2096.156420][T19031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2096.164618][T19031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2096.173116][T19031] bridge_slave_0: entered allmulticast mode
[ 2096.184325][T19031] bridge_slave_0: entered promiscuous mode
[ 2096.194794][T19031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2096.203344][T19031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2096.211046][T19031] bridge_slave_1: entered allmulticast mode
[ 2096.220034][T19031] bridge_slave_1: entered promiscuous mode
[ 2096.375927][T19031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2096.409491][T19126] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12772'.
[ 2096.411292][T19031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2096.657707][T19031] team0: Port device team_slave_0 added
[ 2096.682764][T19031] team0: Port device team_slave_1 added
[ 2096.915831][T19031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2096.983642][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2097.155158][T19031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2097.181286][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12776'.
[ 2097.198859][T19031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2097.220385][T19152] net_ratelimit: 685 callbacks suppressed
[ 2097.220407][T19152] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2097.220477][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2097.250625][T19156] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12777'.
[ 2097.299932][T19031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2097.339797][T19156] netlink: 'syz.1.12777': attribute type 2 has an invalid length.
[ 2097.370423][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12777'.
[ 2097.442690][T19163] netlink: 'syz.5.12779': attribute type 11 has an invalid length.
[ 2097.550833][T19031] hsr_slave_0: entered promiscuous mode
[ 2097.586128][T19031] hsr_slave_1: entered promiscuous mode
[ 2097.611558][T19031] debugfs: 'hsr0' already exists in 'hsr'
[ 2097.636887][T19031] Cannot create hsr debugfs directory
[ 2097.737155][T19174] netlink: 9 bytes leftover after parsing attributes in process `syz.5.12783'.
[ 2097.770013][T19167] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2097.779754][T19167] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2097.801500][T19167] bridge0: entered allmulticast mode
[ 2097.823617][ T4944] Bluetooth: hci6: command tx timeout
[ 2098.201263][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2098.257950][T19191] netlink: 'syz.1.12792': attribute type 11 has an invalid length.
[ 2098.290317][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12791'.
[ 2098.331120][T19193] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2098.440907][T19202] netlink: 220 bytes leftover after parsing attributes in process `syz.5.12794'.
[ 2098.451352][T19202] netlink: 'syz.5.12794': attribute type 2 has an invalid length.
[ 2099.091269][T19227] netlink: 'syz.4.12805': attribute type 11 has an invalid length.
[ 2099.106299][T19031] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2099.132656][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2099.159005][T19031] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2099.199147][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.226562][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2099.236555][T19231] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2099.294463][T19031] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2099.368941][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2099.419334][T19031] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2099.433924][T19237] netlink: 'syz.1.12809': attribute type 2 has an invalid length.
[ 2099.498564][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2099.808153][T19031] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2099.874006][T19031] 8021q: adding VLAN 0 to HW filter on device team0
[ 2099.905144][ T4944] Bluetooth: hci6: command tx timeout
[ 2099.921793][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2099.929049][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2100.034480][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2100.041805][ T9873] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2101.081448][T19307] netlink: 'syz.4.12834': attribute type 11 has an invalid length.
[ 2101.277004][T19320] netlink: zone id is out of range
[ 2101.283863][T19320] netlink: zone id is out of range
[ 2101.289126][T19320] netlink: zone id is out of range
[ 2101.295440][T19320] netlink: zone id is out of range
[ 2101.301494][T19320] netlink: zone id is out of range
[ 2101.308721][T19320] netlink: zone id is out of range
[ 2101.319372][T19320] netlink: zone id is out of range
[ 2101.605508][T19327] syzkaller1: entered promiscuous mode
[ 2101.613476][T19327] syzkaller1: entered allmulticast mode
[ 2101.624975][T19031] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2101.701031][T19332] syzkaller0: entered promiscuous mode
[ 2101.707846][T19332] syzkaller0: entered allmulticast mode
[ 2101.984195][ T4944] Bluetooth: hci6: command tx timeout
[ 2102.010796][T19345] netlink: 'syz.0.12847': attribute type 11 has an invalid length.
[ 2102.766904][T19031] veth0_vlan: entered promiscuous mode
[ 2102.826293][T19031] veth1_vlan: entered promiscuous mode
[ 2102.886250][T19365] syzkaller1: entered promiscuous mode
[ 2102.909340][T19365] syzkaller1: entered allmulticast mode
[ 2103.134443][T19031] veth0_macvtap: entered promiscuous mode
[ 2103.150833][T19031] veth1_macvtap: entered promiscuous mode
[ 2103.178806][T19373] __nla_validate_parse: 3 callbacks suppressed
[ 2103.178827][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12858'.
[ 2103.220674][T19031] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2103.230340][T19373] net_ratelimit: 338 callbacks suppressed
[ 2103.230385][T19373] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 2103.366162][T19031] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2103.448135][ T9873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2103.459084][ T9873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2103.480089][ T9873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2103.490418][ T9873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2103.740697][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2103.768277][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2103.856773][T19394] veth0: entered promiscuous mode
[ 2103.866633][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12866'.
[ 2103.888233][T29728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2103.897867][T29728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2103.908961][T19394] veth0 (unregistering): left promiscuous mode
[ 2104.684200][T19407] syzkaller1: entered promiscuous mode
[ 2104.700508][T19407] syzkaller1: entered allmulticast mode
[ 2104.790448][T19425] netlink: 'syz.5.12877': attribute type 11 has an invalid length.
[ 2104.930786][T19432] bridge0: port 3(netdevsim1) entered blocking state
[ 2104.968545][T19432] bridge0: port 3(netdevsim1) entered disabled state
[ 2104.989493][T19432] netdevsim netdevsim6 netdevsim1: entered allmulticast mode
[ 2105.003678][T19432] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[ 2105.016123][T19432] bridge0: port 3(netdevsim1) entered blocking state
[ 2105.023074][T19432] bridge0: port 3(netdevsim1) entered forwarding state
[ 2105.040168][T19435] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12880'.
[ 2105.075118][T19432] netlink: 'syz.6.12880': attribute type 12 has an invalid length.
[ 2105.095859][T19432] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12880'.
[ 2105.657238][T19453] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12885'.
[ 2106.109904][T19475] netlink: 'syz.0.12893': attribute type 11 has an invalid length.
[ 2106.796055][T19506] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12905'.
[ 2107.056095][T19518] Bluetooth: MGMT ver 1.23
[ 2107.107507][T19518] bond4 (unregistering): Released all slaves
[ 2107.794511][T19548] netlink: 260 bytes leftover after parsing attributes in process `syz.5.12920'.
[ 2108.504514][T19570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2108.904613][T19592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12939'.
[ 2109.721595][T19608] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2110.265615][T19608] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2110.402592][T19644] syzkaller0: entered promiscuous mode
[ 2110.419082][T19644] syzkaller0: entered allmulticast mode
[ 2110.497452][T19608] bridge0: port 3(netdevsim1) entered disabled state
[ 2110.542707][T19608] netdevsim netdevsim6 netdevsim1 (unregistering): left allmulticast mode
[ 2110.558101][T19608] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode
[ 2110.572326][T19608] bridge0: port 3(netdevsim1) entered disabled state
[ 2110.594110][T19608] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2115.658269][T19608] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2116.188300][T19693] xt_hashlimit: size too large, truncated to 1048576
[ 2116.479900][T22691] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2116.656603][T22691] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2116.698498][T22691] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2116.748270][T22691] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2117.726915][T19735] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2118.189314][T19735] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2118.675538][T19735] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2119.503393][T19779] netlink: 'syz.4.13010': attribute type 1 has an invalid length.
[ 2119.545764][T19779] netlink: 'syz.4.13010': attribute type 2 has an invalid length.
[ 2119.589567][T29728] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2119.595990][T19779] netlink: 'syz.4.13010': attribute type 1 has an invalid length.
[ 2119.655226][T19779] netlink: 'syz.4.13010': attribute type 1 has an invalid length.
[ 2119.718732][T19779] netlink: 'syz.4.13010': attribute type 2 has an invalid length.
[ 2119.729862][T29728] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2119.937157][T19781] syzkaller0: entered promiscuous mode
[ 2119.965167][T19781] syzkaller0: entered allmulticast mode
[ 2120.007462][T22691] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2120.794100][T19805] netlink: zone id is out of range
[ 2120.812763][T19805] netlink: zone id is out of range
[ 2120.818353][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13022'.
[ 2120.828167][T19805] netlink: zone id is out of range
[ 2120.834071][T19805] netlink: zone id is out of range
[ 2120.851387][T19805] netlink: zone id is out of range
[ 2120.872851][T19805] netlink: zone id is out of range
[ 2120.884305][T19805] netlink: zone id is out of range
[ 2120.916627][T19805] netlink: zone id is out of range
[ 2120.930557][T19805] netlink: zone id is out of range
[ 2120.945338][T19805] netlink: zone id is out of range
[ 2121.201017][T19815] netlink: 'syz.1.13025': attribute type 1 has an invalid length.
[ 2121.209702][T19815] netlink: 'syz.1.13025': attribute type 2 has an invalid length.
[ 2121.237748][T19815] netlink: 'syz.1.13025': attribute type 1 has an invalid length.
[ 2121.247495][T19815] netlink: 'syz.1.13025': attribute type 1 has an invalid length.
[ 2121.257617][T19815] netlink: 'syz.1.13025': attribute type 2 has an invalid length.
[ 2125.890563][T22691] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2125.907000][T19798] gre1: entered allmulticast mode
[ 2126.157450][T19824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2126.196334][T19824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2126.574355][T19824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2126.596606][T19824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2128.259975][T19824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2128.271042][T19824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2129.471703][T15699] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2129.487135][T15699] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2129.567242][ T8481] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2129.577048][ T8481] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2129.617959][ T8481] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2129.628840][ T8481] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2129.793921][ T8481] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2129.824267][ T8481] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2130.356224][T19977] syzkaller1: entered promiscuous mode
[ 2130.363471][T19977] syzkaller1: entered allmulticast mode
[ 2131.150005][T20013] syzkaller1: entered promiscuous mode
[ 2131.156633][T20013] syzkaller1: entered allmulticast mode
[ 2131.500862][T20033] netlink: 'syz.5.13116': attribute type 1 has an invalid length.
[ 2131.513242][T20033] netlink: 'syz.5.13116': attribute type 2 has an invalid length.
[ 2131.521335][T20033] netlink: 'syz.5.13116': attribute type 1 has an invalid length.
[ 2131.529953][T20033] netlink: 'syz.5.13116': attribute type 1 has an invalid length.
[ 2131.548051][T20033] netlink: 'syz.5.13116': attribute type 2 has an invalid length.
[ 2131.973283][T20052] bridge0: port 3(netdevsim1) entered blocking state
[ 2131.990384][T20052] bridge0: port 3(netdevsim1) entered disabled state
[ 2131.999396][T20052] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[ 2132.010796][T20052] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[ 2132.027342][T20051] syzkaller1: entered promiscuous mode
[ 2132.034226][T20051] syzkaller1: entered allmulticast mode
[ 2132.045003][T20055] netlink: 'syz.0.13122': attribute type 12 has an invalid length.
[ 2132.075100][T20055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13122'.
[ 2132.125879][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13122'.
[ 2132.501089][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13132'.
[ 2132.954700][T20079] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2132.975758][T20079] bond3: (slave bond4): Enslaving as an active interface with an up link
[ 2133.155534][T20087] syzkaller1: entered promiscuous mode
[ 2133.163307][T20087] syzkaller1: entered allmulticast mode
[ 2133.547526][T20107] syzkaller1: entered promiscuous mode
[ 2133.565319][T20107] syzkaller1: entered allmulticast mode
[ 2134.324988][T20143] net_ratelimit: 335 callbacks suppressed
[ 2134.325008][T20143] netlink: zone id is out of range
[ 2134.337262][T20143] netlink: zone id is out of range
[ 2134.343939][T20143] netlink: zone id is out of range
[ 2134.349823][T20143] netlink: zone id is out of range
[ 2134.355872][T20143] netlink: zone id is out of range
[ 2134.361203][T20143] netlink: zone id is out of range
[ 2134.367530][T20143] netlink: zone id is out of range
[ 2134.373902][T20141] syzkaller1: entered promiscuous mode
[ 2134.373992][T20143] netlink: zone id is out of range
[ 2134.381011][T20141] syzkaller1: entered allmulticast mode
[ 2134.390964][T20143] netlink: zone id is out of range
[ 2134.400202][T20146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13157'.
[ 2134.416729][T20146] ip6gre1: entered promiscuous mode
[ 2134.423326][T20143] netlink: zone id is out of range
[ 2134.429122][T20146] ip6gre1: entered allmulticast mode
[ 2137.115615][ T4944] Bluetooth: hci5: command 0x0406 tx timeout
[ 2137.133416][T20160] Bluetooth: hci2: command 0x0406 tx timeout
[ 2137.147337][T20132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2137.507343][T20170] syzkaller1: entered promiscuous mode
[ 2137.522613][T20170] syzkaller1: entered allmulticast mode
[ 2137.790528][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13170'.
[ 2138.524914][T20200] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.13176'.
[ 2138.895314][T20221] syzkaller1: entered promiscuous mode
[ 2138.903232][T20221] syzkaller1: entered allmulticast mode
[ 2139.604417][T20247] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.13191'.
[ 2140.102419][T20271] syzkaller1: entered promiscuous mode
[ 2140.108547][T20271] syzkaller1: entered allmulticast mode
[ 2140.426812][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13201'.
[ 2141.023918][T20306] netlink: 124 bytes leftover after parsing attributes in process `syz.6.13205'.
[ 2142.575127][T20248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2143.210079][T20383] net_ratelimit: 335 callbacks suppressed
[ 2143.210096][T20383] netlink: zone id is out of range
[ 2143.224163][T20383] netlink: zone id is out of range
[ 2143.229467][T20383] netlink: zone id is out of range
[ 2143.236386][T20383] netlink: zone id is out of range
[ 2143.241715][T20383] netlink: zone id is out of range
[ 2143.246943][T20383] netlink: zone id is out of range
[ 2143.253316][T20383] netlink: zone id is out of range
[ 2143.260235][T20383] netlink: zone id is out of range
[ 2143.282476][T20383] netlink: zone id is out of range
[ 2143.290010][T20383] netlink: zone id is out of range
[ 2143.396681][T20388] syzkaller1: entered promiscuous mode
[ 2143.403010][T20388] syzkaller1: entered allmulticast mode
[ 2144.351639][T20424] syzkaller1: entered promiscuous mode
[ 2144.358420][T20424] syzkaller1: entered allmulticast mode
[ 2146.500378][T20392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2146.836786][T20440] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13251'.
[ 2147.256988][T20461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13260'.
[ 2147.888193][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13275'.
[ 2147.933105][T20494] ip6gre1: entered promiscuous mode
[ 2147.944807][T20494] ip6gre1: entered allmulticast mode
[ 2148.836725][T20526] net_ratelimit: 1025 callbacks suppressed
[ 2148.836750][T20526] netlink: zone id is out of range
[ 2148.849002][T20526] netlink: zone id is out of range
[ 2148.855069][T20526] netlink: zone id is out of range
[ 2148.860256][T20526] netlink: zone id is out of range
[ 2148.866728][T20526] netlink: zone id is out of range
[ 2148.873849][T20526] netlink: zone id is out of range
[ 2148.899585][T20526] netlink: zone id is out of range
[ 2148.905701][T20526] netlink: zone id is out of range
[ 2148.911346][T20526] netlink: zone id is out of range
[ 2148.917446][T20526] netlink: zone id is out of range
[ 2150.367622][T20548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13297'.
[ 2150.733764][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13299'.
[ 2154.349151][T20552] ip6gre1: entered promiscuous mode
[ 2154.369026][T20552] ip6gre1: entered allmulticast mode
[ 2158.060237][T20718] net_ratelimit: 335 callbacks suppressed
[ 2158.060260][T20718] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2158.271506][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13353'.
[ 2158.446211][T20734] netlink: 52 bytes leftover after parsing attributes in process `syz.6.13356'.
[ 2158.599934][T20738] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2160.642758][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 2161.673610][T20867] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13396'.
[ 2162.376571][T20867] ip6gre2: entered promiscuous mode
[ 2162.383624][T20867] ip6gre2: entered allmulticast mode
[ 2163.455370][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13413'.
[ 2164.106437][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13420'.
[ 2164.161290][T20920] syzkaller1: entered promiscuous mode
[ 2164.178255][T20920] syzkaller1: entered allmulticast mode
[ 2164.537929][T20945] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13430'.
[ 2165.719308][T20974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13441'.
[ 2165.730667][T20968] syzkaller1: entered promiscuous mode
[ 2165.740136][T20968] syzkaller1: entered allmulticast mode
[ 2166.638071][T21018] syzkaller1: entered promiscuous mode
[ 2166.658436][T21018] syzkaller1: entered allmulticast mode
[ 2167.040050][T21033] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13463'.
[ 2167.060452][T21033] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 2167.266809][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13468'.
[ 2167.720857][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13476'.
[ 2167.753189][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13476'.
[ 2167.965616][T21076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13482'.
[ 2170.654427][T29738] Bluetooth: hci6: link tx timeout
[ 2170.663814][T29738] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2170.678886][T29738] Bluetooth: hci6: link tx timeout
[ 2170.686793][T29738] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2170.696140][T29738] Bluetooth: hci6: link tx timeout
[ 2170.701874][T29738] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2170.714073][T29738] Bluetooth: hci6: link tx timeout
[ 2170.719478][T29738] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2170.729529][T29738] Bluetooth: hci6: link tx timeout
[ 2170.735251][T29738] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2170.743959][T29738] Bluetooth: hci6: link tx timeout
[ 2170.749196][T29738] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2170.758159][T29738] Bluetooth: hci6: link tx timeout
[ 2170.763959][T29738] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2170.772087][T29738] Bluetooth: hci6: link tx timeout
[ 2170.777371][T29738] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2172.782888][T29738] Bluetooth: hci6: command 0x0406 tx timeout
[ 2173.992715][T21338] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13571'.
[ 2174.022168][T21338] netlink: 'syz.6.13571': attribute type 2 has an invalid length.
[ 2174.865883][ T5631] Bluetooth: hci6: command 0x0406 tx timeout
[ 2175.119338][T21383] netlink: 220 bytes leftover after parsing attributes in process `syz.5.13584'.
[ 2175.160852][T21383] netlink: 'syz.5.13584': attribute type 2 has an invalid length.
[ 2175.306772][T21389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13585'.
[ 2175.827249][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13586'.
[ 2176.674093][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13592'.
[ 2176.688911][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13592'.
[ 2176.729318][T16580] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2176.754943][T16580] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2176.786021][   T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2176.917676][T21428] netlink: 220 bytes leftover after parsing attributes in process `syz.5.13596'.
[ 2176.968079][T21428] netlink: 'syz.5.13596': attribute type 2 has an invalid length.
[ 2178.177471][T21486] syzkaller1: entered promiscuous mode
[ 2178.191947][T21486] syzkaller1: entered allmulticast mode
[ 2179.740540][T21554] syzkaller1: entered promiscuous mode
[ 2179.769991][T21554] syzkaller1: entered allmulticast mode
[ 2180.109216][T21565] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2181.230230][T21617] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13652'.
[ 2181.328749][T21617] netlink: 9 bytes leftover after parsing attributes in process `syz.6.13652'.
[ 2181.577176][T21634] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13659'.
[ 2181.619170][T21631] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2182.409135][T21673] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13671'.
[ 2183.220937][T21704] syzkaller0: entered promiscuous mode
[ 2183.227628][T21704] syzkaller0: entered allmulticast mode
[ 2183.257572][T21709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13683'.
[ 2188.327684][T29738] Bluetooth: hci3: command 0x0406 tx timeout
[ 2189.314938][T21765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 2189.638287][T21775] syzkaller0: entered promiscuous mode
[ 2189.644462][T21775] syzkaller0: entered allmulticast mode
[ 2196.068873][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13735'.
[ 2196.079225][T21838] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 2196.935784][T21859] bond0: entered promiscuous mode
[ 2196.943032][T21859] bond_slave_0: entered promiscuous mode
[ 2196.949854][T21859] bond_slave_1: entered promiscuous mode
[ 2196.963175][T21859] batadv0: entered promiscuous mode
[ 2196.971261][T21859] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 2196.981274][T21855] syzkaller1: entered promiscuous mode
[ 2197.002649][T21855] syzkaller1: entered allmulticast mode
[ 2197.736667][T21895] netlink: 'syz.0.13757': attribute type 1 has an invalid length.
[ 2197.756978][T21895] netlink: 'syz.0.13757': attribute type 2 has an invalid length.
[ 2197.768334][T21895] netlink: 'syz.0.13757': attribute type 1 has an invalid length.
[ 2197.779854][T21895] netlink: 'syz.0.13757': attribute type 1 has an invalid length.
[ 2197.793365][T21895] netlink: 'syz.0.13757': attribute type 2 has an invalid length.
[ 2198.154184][T21898] syzkaller1: entered promiscuous mode
[ 2198.172474][T21898] syzkaller1: entered allmulticast mode
[ 2198.212909][T21906] netlink: 'syz.0.13761': attribute type 11 has an invalid length.
[ 2198.612569][T21924] netlink: 'syz.5.13771': attribute type 1 has an invalid length.
[ 2199.035804][T21936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2199.043676][T21936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2199.075292][T21936] bridge0: entered allmulticast mode
[ 2199.137902][T21953] syzkaller1: entered promiscuous mode
[ 2199.173018][T21953] syzkaller1: entered allmulticast mode
[ 2200.552668][T21979] netlink: 'syz.6.13785': attribute type 1 has an invalid length.
[ 2200.616639][T21981] ieee802154 phy1 wpan1: encryption failed: -22
[ 2200.694462][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13786'.
[ 2200.848939][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13787'.
[ 2200.931358][T21966] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 2200.945381][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804e9bbc00: rx timeout, send abort
[ 2200.963505][T21966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 2200.975713][T21966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2201.018683][T21985] netlink: 56 bytes leftover after parsing attributes in process `syz.6.13787'.
[ 2201.030338][T21987] netlink: 'syz.6.13787': attribute type 12 has an invalid length.
[ 2201.042763][T21987] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13787'.
[ 2201.636269][T21993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2201.674740][T21993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2201.821559][T22007] syzkaller1: entered promiscuous mode
[ 2201.838393][T22007] syzkaller1: entered allmulticast mode
[ 2202.146495][T21993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2202.164182][T21993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2202.175826][T22022] netlink: 'syz.6.13797': attribute type 1 has an invalid length.
[ 2203.425604][T21993] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode
[ 2203.454284][T21993] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[ 2203.475401][T21993] bridge0: port 3(netdevsim1) entered disabled state
[ 2203.524896][T21993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2203.550305][T21993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2203.847069][ T9873] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2203.856286][ T9873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.882256][ T1175] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2203.891274][ T1175] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.916856][ T1175] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2203.926171][ T1175] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2203.953155][ T1175] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2203.962523][ T1175] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2204.483514][T22089] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2204.503375][T22089] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.565111][T22094] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13821'.
[ 2204.591409][T22094] netlink: 'syz.5.13821': attribute type 12 has an invalid length.
[ 2204.605044][T22094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13821'.
[ 2204.631483][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13821'.
[ 2204.658666][T22089] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2204.691041][T22089] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.880556][T22089] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2204.913141][T22089] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2205.000280][T22099] syzkaller1: entered promiscuous mode
[ 2205.015557][T22099] syzkaller1: entered allmulticast mode
[ 2205.076703][T22089] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2205.111705][T22089] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2205.213678][T22115] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2205.787662][T22147] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2205.980422][T22158] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13851'.
[ 2206.249921][T22169] syzkaller1: entered promiscuous mode
[ 2206.268479][T22169] syzkaller1: entered allmulticast mode
[ 2206.457681][T22178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13860'.
[ 2206.468735][T22179] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13861'.
[ 2206.488206][T22179] netlink: 'syz.4.13861': attribute type 12 has an invalid length.
[ 2206.497927][T22179] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13861'.
[ 2206.522635][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13861'.
[ 2206.537889][T22181] netlink: zone id is out of range
[ 2206.544285][T22181] netlink: zone id is out of range
[ 2206.549716][T22181] netlink: zone id is out of range
[ 2206.555937][T22181] netlink: zone id is out of range
[ 2206.572973][T22181] netlink: zone id is out of range
[ 2206.581757][T22181] netlink: zone id is out of range
[ 2206.593750][T22181] netlink: zone id is out of range
[ 2206.615536][T22181] netlink: zone id is out of range
[ 2207.110150][T22202] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2207.148456][T22206] bridge0: port 4(netdevsim1) entered blocking state
[ 2207.177238][T22206] bridge0: port 4(netdevsim1) entered disabled state
[ 2207.198254][T22206] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[ 2207.208641][T22206] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[ 2207.217832][T22206] bridge0: port 4(netdevsim1) entered blocking state
[ 2207.224810][T22206] bridge0: port 4(netdevsim1) entered forwarding state
[ 2207.234101][T22211] netlink: 'syz.1.13874': attribute type 12 has an invalid length.
[ 2207.242995][T22211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13874'.
[ 2207.265230][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13874'.
[ 2207.283107][T22202] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2207.451602][T22202] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2207.557454][T22202] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2207.612402][T29728] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2207.635671][T29728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.676373][T29728] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2207.687809][T29728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.739168][T29728] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2207.757629][T29728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.776742][T29728] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.801436][T29728] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2207.820131][T29728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.843254][ T9873] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.923547][ T1175] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2207.936776][T22224] syzkaller1: entered promiscuous mode
[ 2207.956852][T22224] syzkaller1: entered allmulticast mode
[ 2208.019805][T29728] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2209.886773][T22316] __nla_validate_parse: 2 callbacks suppressed
[ 2209.886797][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13912'.
[ 2211.236292][T22365] netlink: 'syz.5.13933': attribute type 12 has an invalid length.
[ 2211.263520][T22365] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13933'.
[ 2211.268364][T22367] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13934'.
[ 2211.306978][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'.
[ 2211.394266][T22370] syzkaller1: entered promiscuous mode
[ 2211.399914][T22370] syzkaller1: entered allmulticast mode
[ 2211.620511][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13938'.
[ 2211.759478][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13940'.
[ 2211.778794][T22387] net_ratelimit: 339 callbacks suppressed
[ 2211.778817][T22387] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[ 2213.915789][ T5631] Bluetooth: hci1: command 0x0406 tx timeout
[ 2217.053819][T22387] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 2217.083242][T22395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2217.340912][T22405] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2217.767114][T22416] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13952'.
[ 2217.785961][T22416] ip6gre2: entered promiscuous mode
[ 2217.791417][T22416] ip6gre2: entered allmulticast mode
[ 2218.232555][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13960'.
[ 2218.243959][T22434] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2218.397887][T22436] syzkaller0: entered promiscuous mode
[ 2218.404419][T22436] syzkaller0: entered allmulticast mode
[ 2218.426702][T22441] netlink: 'syz.0.13962': attribute type 12 has an invalid length.
[ 2218.435403][T22441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13962'.
[ 2218.455094][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13962'.
[ 2218.625779][T22447] netlink: 'syz.0.13963': attribute type 1 has an invalid length.
[ 2218.645566][T22447] netlink: 'syz.0.13963': attribute type 2 has an invalid length.
[ 2218.670631][T22447] netlink: 'syz.0.13963': attribute type 1 has an invalid length.
[ 2218.690424][T22447] netlink: 'syz.0.13963': attribute type 1 has an invalid length.
[ 2218.722308][T22447] netlink: 'syz.0.13963': attribute type 2 has an invalid length.
[ 2219.973995][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13973'.
[ 2219.984589][T22470] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2220.353681][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2220.396703][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2220.428216][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2220.440192][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2220.475121][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2222.086556][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.559056][ T5631] Bluetooth: hci7: command tx timeout
[ 2224.477123][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13976'.
[ 2224.505914][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13976'.
[ 2224.539476][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13977'.
[ 2224.562895][T22482] openvswitch: netlink: Key type 2588 is out of range max 32
[ 2224.623019][ T5631] Bluetooth: hci7: command tx timeout
[ 2225.208708][T22499] netlink: 'syz.0.13984': attribute type 11 has an invalid length.
[ 2225.233927][T22499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13984'.
[ 2225.380465][T14938] bridge0: port 3(syz_tun) entered disabled state
[ 2225.415328][T14938] syz_tun (unregistering): left allmulticast mode
[ 2225.432535][T14938] syz_tun (unregistering): left promiscuous mode
[ 2225.440804][T14938] bridge0: port 3(syz_tun) entered disabled state
[ 2225.507524][T22481] geneve2: entered promiscuous mode
[ 2225.525153][T22481] geneve2: entered allmulticast mode
[ 2225.789846][T22518] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2225.923287][T22518] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2226.049384][T22518] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2226.142632][T22518] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2226.346346][T16580] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2226.381072][ T8481] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2226.414768][ T8481] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2226.445747][ T8481] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2226.659499][T22472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2226.667660][T22472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.688795][T22472] bridge_slave_0: entered allmulticast mode
[ 2226.702358][ T5631] Bluetooth: hci7: command tx timeout
[ 2226.716445][T22472] bridge_slave_0: entered promiscuous mode
[ 2226.737475][T22472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2226.737926][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14000'.
[ 2226.757341][T22472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.765742][T22472] bridge_slave_1: entered allmulticast mode
[ 2226.774958][T22472] bridge_slave_1: entered promiscuous mode
[ 2226.800597][T22553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14000'.
[ 2226.831351][T22472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2226.871341][T22553] geneve2: entered promiscuous mode
[ 2226.893800][T22553] geneve2: entered allmulticast mode
[ 2226.918994][T22472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2227.021380][T22472] team0: Port device team_slave_0 added
[ 2227.044681][T22472] team0: Port device team_slave_1 added
[ 2227.089536][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14006'.
[ 2227.106994][T22472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2227.117690][T22565] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2227.129155][T22472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2227.163944][T22472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2227.240370][T22472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2227.260000][T22472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2227.310374][T22472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2227.464016][T22566] syzkaller1: entered promiscuous mode
[ 2227.469876][T22566] syzkaller1: entered allmulticast mode
[ 2227.506072][T22472] hsr_slave_0: entered promiscuous mode
[ 2227.523227][T22472] hsr_slave_1: entered promiscuous mode
[ 2227.529675][T22472] debugfs: 'hsr0' already exists in 'hsr'
[ 2227.537190][T22472] Cannot create hsr debugfs directory
[ 2227.963975][T22472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2228.129782][T22472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2228.302752][T22472] bridge0: port 4(netdevsim1) entered disabled state
[ 2228.444183][T22472] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode
[ 2228.468865][T22607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14015'.
[ 2228.479283][T22472] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[ 2228.490408][T22607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14015'.
[ 2228.509904][T22472] bridge0: port 4(netdevsim1) entered disabled state
[ 2228.686827][T22472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2228.783249][ T5631] Bluetooth: hci7: command tx timeout
[ 2229.104759][   T31] INFO: task syz.2.12597:18602 blocked for more than 143 seconds.
[ 2229.118188][   T31]       Not tainted syzkaller #0
[ 2229.129926][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2229.153696][   T31] task:syz.2.12597     state:D stack:26872 pid:18602 tgid:18601 ppid:17142  task_flags:0x400140 flags:0x00080002
[ 2229.173625][   T31] Call Trace:
[ 2229.177125][   T31]  <TASK>
[ 2229.180146][   T31]  __schedule+0x1821/0x5740
[ 2229.194246][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 2229.207184][   T31]  ? __pfx___schedule+0x10/0x10
[ 2229.235327][   T31]  ? schedule+0x90/0x360
[ 2229.255880][   T31]  schedule+0x164/0x360
[ 2229.270844][   T31]  schedule_preempt_disabled+0x13/0x30
[ 2229.308933][   T31]  __mutex_lock+0x7f7/0x1550
[ 2229.345118][   T31]  ? __mutex_lock+0x608/0x1550
[ 2229.371350][   T31]  ? nfsd_nl_threads_set_doit+0x2bb/0xde0
[ 2229.392613][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 2229.403251][   T31]  ? net_generic+0x1e/0x240
[ 2229.412717][   T31]  ? net_generic+0x1e/0x240
[ 2229.429950][   T31]  nfsd_nl_threads_set_doit+0x2bb/0xde0
[ 2229.439181][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2229.460276][   T31]  ? __asan_memcpy+0x40/0x70
[ 2229.472012][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2229.492668][   T31]  ? bpf_lsm_capable+0x9/0x20
[ 2229.497664][   T31]  ? security_capable+0x7e/0x2c0
[ 2229.503834][   T31]  genl_rcv_msg+0x61c/0x7a0
[ 2229.509348][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2229.514737][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 2229.521032][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2229.526794][   T31]  netlink_rcv_skb+0x232/0x4b0
[ 2229.531669][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2229.536821][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2229.543169][   T31]  ? down_read+0x270/0x2e0
[ 2229.547749][   T31]  ? genl_rcv+0xd/0x40
[ 2229.552694][   T31]  genl_rcv+0x28/0x40
[ 2229.556934][   T31]  netlink_unicast+0x75c/0x8e0
[ 2229.562763][   T31]  netlink_sendmsg+0x813/0xb40
[ 2229.567765][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2229.574001][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2229.579128][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2229.585662][   T31]  ____sys_sendmsg+0x972/0x9f0
[ 2229.590514][   T31]  ? __might_fault+0xaf/0x130
[ 2229.596052][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2229.601463][   T31]  ? import_iovec+0x73/0xa0
[ 2229.607522][   T31]  ___sys_sendmsg+0x2a5/0x360
[ 2229.613183][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 2229.618249][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2229.624253][   T31]  ? futex_wait+0x2a2/0x390
[ 2229.628814][   T31]  ? __fget_files+0x2a/0x420
[ 2229.634340][   T31]  ? __fget_files+0x3a0/0x420
[ 2229.639057][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2229.645225][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2229.650993][   T31]  ? rcu_is_watching+0x15/0xb0
[ 2229.656683][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2229.664088][   T31]  do_syscall_64+0x15f/0xf80
[ 2229.668794][   T31]  ? trace_irq_disable+0x3b/0x140
[ 2229.674808][   T31]  ? clear_bhb_loop+0x40/0x90
[ 2229.679506][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2229.686259][   T31] RIP: 0033:0x7fef2499ce59
[ 2229.690958][   T31] RSP: 002b:00007fef257ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2229.700518][   T31] RAX: ffffffffffffffda RBX: 00007fef24c15fa0 RCX: 00007fef2499ce59
[ 2229.709969][   T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003
[ 2229.718510][   T31] RBP: 00007fef24a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 2229.726744][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2229.735743][   T31] R13: 00007fef24c16038 R14: 00007fef24c15fa0 R15: 00007ffedf8f4a88
[ 2229.745310][   T31]  </TASK>
[ 2229.748765][   T31] 
[ 2229.748765][   T31] Showing all locks held in the system:
[ 2229.766014][   T31] 1 lock held by khungtaskd/31:
[ 2229.792691][   T31]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2229.808876][   T31] 2 locks held by getty/5382:
[ 2229.815360][   T31]  #0: ffff8880371be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2229.827454][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[ 2229.839089][   T31] 3 locks held by kworker/0:6/5821:
[ 2229.846510][   T31]  #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 2229.859346][   T31]  #1: ffffc9000505fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 2229.871285][   T31]  #2: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 2229.884018][   T31] 4 locks held by kworker/0:9/9837:
[ 2229.889603][   T31] 3 locks held by kworker/u8:5/8481:
[ 2229.896700][   T31]  #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 2229.911499][   T31]  #1: ffffc90003ec7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 2229.927301][   T31]  #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 2229.936729][   T31] 3 locks held by kworker/0:2/8580:
[ 2229.942906][   T31]  #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 2229.963247][   T31]  #1: ffffc900044ffc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 2229.977615][   T31]  #2: ffff8880ae6b3250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
[ 2229.989439][   T31] 2 locks held by syz.3.12561/18465:
[ 2229.996080][   T31]  #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2230.005828][   T31]  #1: ffffffff8ec8ace0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0
[ 2230.018624][   T31] 2 locks held by syz.2.12597/18602:
[ 2230.025548][   T31]  #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2230.038194][   T31]  #1: ffffffff8ec8ace0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2bb/0xde0
[ 2230.049951][   T31] 8 locks held by syz-executor/22472:
[ 2230.057680][   T31]  #0: ffff88803618a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[ 2230.070168][   T31]  #1: ffff8880b259ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[ 2230.081135][   T31]  #2: ffff8880207e43c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[ 2230.093068][   T31]  #3: ffffffff8f650640 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 2230.103988][   T31]  #4: ffff8880559e2128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 2230.115278][   T31]  #5: ffff8880559e0258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[ 2230.128189][   T31]  #6: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0
[ 2230.138588][   T31]  #7: ffffffff8e9630a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 2230.150828][   T31] 2 locks held by syz.4.14017/22621:
[ 2230.156616][   T31]  #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2230.166003][   T31]  #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[ 2230.176907][   T31] 2 locks held by syz.0.14018/22631:
[ 2230.183146][   T31]  #0: ffffffff8fe41548 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2230.191380][   T31]  #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[ 2230.201549][   T31] 4 locks held by syz.5.14020/22625:
[ 2230.208154][   T31]  #0: ffff88808bc1cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[ 2230.219994][   T31]  #1: ffff88808bc1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[ 2230.233078][   T31]  #2: ffffffff8ff56740 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[ 2230.244351][   T31]  #3: ffff88801e6c2af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570
[ 2230.255088][   T31] 
[ 2230.257568][   T31] =============================================
[ 2230.257568][   T31] 
[ 2230.289228][T22621] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 2230.299829][   T31] NMI backtrace for cpu 1
[ 2230.299853][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2230.299874][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 2230.299886][   T31] Call Trace:
[ 2230.299904][   T31]  <TASK>
[ 2230.299913][   T31]  dump_stack_lvl+0xe8/0x150
[ 2230.299961][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 2230.299992][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2230.300022][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2230.300047][   T31]  sys_info+0x135/0x170
[ 2230.300067][   T31]  watchdog+0xfd3/0x1030
[ 2230.300110][   T31]  ? watchdog+0x1c9/0x1030
[ 2230.300150][   T31]  kthread+0x389/0x470
[ 2230.300176][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2230.300200][   T31]  ? __pfx_kthread+0x10/0x10
[ 2230.300226][   T31]  ret_from_fork+0x514/0xb70
[ 2230.300266][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2230.300294][   T31]  ? __switch_to+0xc79/0x1410
[ 2230.300322][   T31]  ? __pfx_kthread+0x10/0x10
[ 2230.300347][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2230.300385][   T31]  </TASK>
[ 2230.300392][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 2230.400333][T22621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 2230.402990][    C0] NMI backtrace for cpu 0
[ 2230.403010][    C0] CPU: 0 UID: 0 PID: 22621 Comm: syz.4.14017 Not tainted syzkaller #0 PREEMPT(full) 
[ 2230.403029][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 2230.403039][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[ 2230.403179][    C0] Code: e8 4e eb 80 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 29 ec fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 5f 68 06 cc 44 89 f9 80 e1 07
[ 2230.403193][    C0] RSP: 0018:ffffc9000d3269f0 EFLAGS: 00000002
[ 2230.403209][    C0] RAX: 1ffffffff34f6b00 RBX: 00000000000003fd RCX: 0000000000000000
[ 2230.403221][    C0] RDX: 00000000000003fd RSI: 000000000000b36c RDI: 000000000000b36d
[ 2230.403232][    C0] RBP: ffffffff9a7b5b10 R08: ffff888141288237 R09: 1ffff11028251046
[ 2230.403244][    C0] R10: dffffc0000000000 R11: ffffffff8544d8c0 R12: dffffc0000000000
[ 2230.403255][    C0] R13: 0000000000000000 R14: ffffffff9a7b5880 R15: 0000000000000000
[ 2230.403266][    C0] FS:  00007f2b2d8586c0(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000
[ 2230.403279][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2230.403291][    C0] CR2: 00007fffd3988f78 CR3: 000000005ae70000 CR4: 00000000003526f0
[ 2230.403308][    C0] Call Trace:
[ 2230.403315][    C0]  <TASK>
[ 2230.403324][    C0]  wait_for_lsr+0x1a1/0x2f0
[ 2230.403344][    C0]  serial8250_console_write+0x1348/0x1ba0
[ 2230.403368][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[ 2230.403385][    C0]  ? console_flush_all+0x123/0xb20
[ 2230.403410][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[ 2230.403432][    C0]  ? console_flush_all+0x123/0xb20
[ 2230.403451][    C0]  console_flush_all+0x718/0xb20
[ 2230.403473][    C0]  ? console_flush_all+0x123/0xb20
[ 2230.403495][    C0]  ? __pfx_console_flush_all+0x10/0x10
[ 2230.403517][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 2230.403535][    C0]  console_unlock+0xd1/0x1c0
[ 2230.403553][    C0]  ? vprintk_emit+0x2cf/0x560
[ 2230.403571][    C0]  ? __pfx_console_unlock+0x10/0x10
[ 2230.403588][    C0]  ? vprintk_emit+0x210/0x560
[ 2230.403607][    C0]  ? vprintk_emit+0x455/0x560
[ 2230.403624][    C0]  ? vprintk_emit+0x2cf/0x560
[ 2230.403641][    C0]  ? vprintk_emit+0x2cf/0x560
[ 2230.403660][    C0]  vprintk_emit+0x485/0x560
[ 2230.403680][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[ 2230.403704][    C0]  dev_vprintk_emit+0x355/0x420
[ 2230.403725][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[ 2230.403744][    C0]  ? __kasan_slab_free+0x5c/0x80
[ 2230.403764][    C0]  ? kfree+0x1c5/0x640
[ 2230.403780][    C0]  ? _request_firmware+0xf11/0x1780
[ 2230.403849][    C0]  ? request_firmware+0x36/0x50
[ 2230.403872][    C0]  dev_printk_emit+0xee/0x140
[ 2230.403894][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[ 2230.403915][    C0]  ? __dev_printk+0x131/0x190
[ 2230.403954][    C0]  _dev_warn+0x11e/0x180
[ 2230.403975][    C0]  ? __pfx__dev_warn+0x10/0x10
[ 2230.403990][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2230.404009][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2230.404032][    C0]  ? kfree+0x1c5/0x640
[ 2230.404048][    C0]  ? _request_firmware+0xf11/0x1780
[ 2230.404068][    C0]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 2230.404090][    C0]  _request_firmware+0x1028/0x1780
[ 2230.404121][    C0]  ? __pfx__request_firmware+0x10/0x10
[ 2230.404148][    C0]  ? netdev_run_todo+0xd5c/0xde0
[ 2230.404169][    C0]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2230.404187][    C0]  request_firmware+0x36/0x50
[ 2230.404209][    C0]  reg_reload_regdb+0x95/0x490
[ 2230.404267][    C0]  ? __nla_parse+0x40/0x60
[ 2230.404293][    C0]  ? __pfx_reg_reload_regdb+0x10/0x10
[ 2230.404317][    C0]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2230.404341][    C0]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2230.404367][    C0]  ? bpf_lsm_capable+0x9/0x20
[ 2230.404382][    C0]  ? security_capable+0x7e/0x2c0
[ 2230.404404][    C0]  genl_rcv_msg+0x61c/0x7a0
[ 2230.404440][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2230.404457][    C0]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2230.404475][    C0]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[ 2230.404494][    C0]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2230.404511][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2230.404535][    C0]  netlink_rcv_skb+0x232/0x4b0
[ 2230.404551][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2230.404571][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2230.404593][    C0]  ? down_read+0x270/0x2e0
[ 2230.404608][    C0]  ? genl_rcv+0xd/0x40
[ 2230.404626][    C0]  genl_rcv+0x28/0x40
[ 2230.404643][    C0]  netlink_unicast+0x75c/0x8e0
[ 2230.404669][    C0]  netlink_sendmsg+0x813/0xb40
[ 2230.404690][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2230.404707][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2230.404727][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2230.404749][    C0]  ____sys_sendmsg+0x972/0x9f0
[ 2230.404765][    C0]  ? __might_fault+0xaf/0x130
[ 2230.404787][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2230.404807][    C0]  ? import_iovec+0x73/0xa0
[ 2230.404829][    C0]  ___sys_sendmsg+0x2a5/0x360
[ 2230.404844][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 2230.404862][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2230.404880][    C0]  ? futex_wait+0x2a2/0x390
[ 2230.404913][    C0]  ? __fget_files+0x2a/0x420
[ 2230.404930][    C0]  ? __fget_files+0x3a0/0x420
[ 2230.404953][    C0]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2230.404970][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2230.404989][    C0]  ? rcu_is_watching+0x15/0xb0
[ 2230.405012][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2230.405029][    C0]  do_syscall_64+0x15f/0xf80
[ 2230.405049][    C0]  ? trace_irq_disable+0x3b/0x140
[ 2230.405070][    C0]  ? clear_bhb_loop+0x40/0x90
[ 2230.405087][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2230.405102][    C0] RIP: 0033:0x7f2b2c99ce59
[ 2230.405117][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2230.405130][    C0] RSP: 002b:00007f2b2d858028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2230.405153][    C0] RAX: ffffffffffffffda RBX: 00007f2b2cc15fa0 RCX: 00007f2b2c99ce59
[ 2230.405164][    C0] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000004
[ 2230.405174][    C0] RBP: 00007f2b2ca32d6f R08: 0000000000000000 R09: 0000000000000000
[ 2230.405184][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2230.405193][    C0] R13: 00007f2b2cc16038 R14: 00007f2b2cc15fa0 R15: 00007fffe95d0d88
[ 2230.405213][    C0]  </TASK>
[ 2230.601807][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2230.601832][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2230.601854][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 2230.601867][   T31] Call Trace:
[ 2230.601876][   T31]  <TASK>
[ 2230.601885][   T31]  vpanic+0x56c/0xa60
[ 2230.601923][   T31]  ? __pfx___schedule+0x10/0x10
[ 2230.601949][   T31]  ? __pfx_vpanic+0x10/0x10
[ 2230.601979][   T31]  panic+0xc5/0xd0
[ 2230.601997][   T31]  ? __pfx_panic+0x10/0x10
[ 2230.602018][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2230.602048][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2230.602073][   T31]  watchdog+0x102c/0x1030
[ 2230.602106][   T31]  ? watchdog+0x1c9/0x1030
[ 2230.602136][   T31]  kthread+0x389/0x470
[ 2230.602160][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2230.602182][   T31]  ? __pfx_kthread+0x10/0x10
[ 2230.602206][   T31]  ret_from_fork+0x514/0xb70
[ 2230.602230][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2230.602249][   T31]  ? __switch_to+0xc79/0x1410
[ 2230.602276][   T31]  ? __pfx_kthread+0x10/0x10
[ 2230.602299][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2230.602335][   T31]  </TASK>
[ 2230.604899][   T31] Kernel Offset: disabled