last executing test programs:

2.14412542s ago: executing program 4 (id=1372):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xa) (async)
r3 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c}, 0x4c}}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffff5, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x34e80bc827e65cec}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x0, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000005c0)={r8, 0xfff}, &(0x7f0000000740)=0x8)
sendmsg$tipc(r7, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250800000008000300", @ANYRES32=r9, @ANYBLOB='\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x40080)
recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x40002020, 0x0)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="d4761cc96a6b7c3e1e1994f8670976f3776ffe47caa31d0c1d4dd12a8938a1b7228c", 0x22, 0x851, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x7}, 0x1c)

2.052464998s ago: executing program 0 (id=1374):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x1e}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.4999517s ago: executing program 0 (id=1381):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket(0x0, 0x3, 0x8679)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x80)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000240)={'dummy0\x00', {0x2, 0x0, @dev}})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
setsockopt$inet6_mreq(r0, 0x29, 0x9, &(0x7f0000000000)={@loopback}, 0x14)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c4}, 0x801)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$isdn(0x22, 0x2, 0x10)
close(r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000100)=0x2d)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0)

1.268301649s ago: executing program 0 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000009c0)={<r5=>0x0, 0xfffffffffffffffd, 0x81})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000dc0)={r5, 0x10001, 0x3})
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x3f5, 0x4, 0x70bd2b, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x20000001)

1.256875163s ago: executing program 1 (id=1387):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x58, 0x18, 0x200, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREF={0x5, 0x14, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x58, 0x18, 0x200, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREF={0x5, 0x14, 0x8}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x58}}, 0x0) (async)

1.163904312s ago: executing program 4 (id=1388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000040000100fcff0700040000000100000004004880200001801c00108018000b8008000100ac1407bb0c003300060000010000000008000200", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0xffffff58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
splice(r3, &(0x7f00000000c0)=0x2, r5, &(0x7f0000000200)=0x5, 0x59d0, 0x4)

1.163508005s ago: executing program 3 (id=1389):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x6, 0x400, 0x2, 0xc}) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13fbf66d28b02a7f7bff7ddc34"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "641b0230944a0546"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)

1.148589684s ago: executing program 2 (id=1390):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
r1 = gettid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x25, 0x1a, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=[0x8, 0x4, 0x9, 0x4, 0x3, 0x5], &(0x7f00000000c0)=[0x2, 0x3, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x3, 0x3], 0x6, 0x6, 0x1, r1}}, 0x40)

1.049889226s ago: executing program 2 (id=1391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x6}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@deltfilter={0x17d4, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0, 0x1}, {0xf, 0xfff3}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x2000008}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x3a}}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x26}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x4dd}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4d}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x45}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_cgroup={{0xb}, {0x1728, 0x2, [@TCA_CGROUP_ACT={0x1724, 0x1, [@m_skbmod={0x1074, 0x1d, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf7, 0x0, 0x10000000, 0x5e, 0x8}, 0xd}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xd8, 0x2, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xffe0}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x40, 0x3, 0x5, 0x80000000, 0xff}}]}, {0x6a, 0x6, "765b38a85c04b2e6f1f121edc0692b64c3715c4ec86b5fdab592cf5759d0474e9552e53007490bd148c22096025a9cf97d42ffc6323907f118999f346e36a9fa0d95268056fdb884423b2f4227c841638e3f2b51356b411b82299b4b0710e984d7e3f93a08e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x4b8, 0x5, 0x0, 0x0, {{0xb}, {0x43c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x7, 0x7, 0x1, 0xb, 0x9, 0x6, 0x6, 0x6, 0x4, 0x7f, 0x5, 0x0, 0xe07, 0x1, 0x3fd, 0x80, 0x9d5, 0x0, 0x2, 0x4, 0x40b9, 0x4, 0x7f, 0x200, 0x81, 0xfffffffd, 0x6, 0x0, 0x4, 0x6, 0x1, 0x2, 0x1, 0x3, 0x3, 0x8, 0x2, 0x34df, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x8, 0x432, 0x5, 0x800, 0x3, 0x7fff, 0x2, 0x2, 0x3, 0x40, 0x1000, 0x4, 0xcb6, 0x3e, 0x57ea, 0xfffffff7, 0x1, 0x8, 0x3, 0x6, 0x0, 0xfffffffe, 0x8, 0x400, 0x10000, 0x8, 0xffff, 0x7, 0x4, 0x1, 0xf, 0xa, 0x1, 0x4, 0x6, 0x1, 0x1, 0xb484, 0x10000, 0xfe23, 0x28f8, 0x8001, 0x128c, 0x6, 0x70000000, 0x0, 0x3, 0x5, 0x3ff, 0x4, 0xffffffff, 0x9, 0x2, 0xff, 0x4, 0x8, 0x1cc, 0x6, 0x3ff, 0x7ff, 0x5, 0x5, 0x10000004, 0x401, 0xffffff7a, 0x8, 0x79, 0x8af, 0x0, 0x3, 0x1, 0x6, 0x7, 0x0, 0x7, 0x4, 0x321, 0x18000, 0x6, 0x100, 0x80000000, 0x3, 0x1, 0x1, 0xfffffffe, 0x8, 0x8d, 0x4f9d785f, 0x0, 0x1, 0x10001, 0x3, 0x0, 0x8, 0x1, 0x0, 0x7, 0x3, 0x0, 0x0, 0x2, 0x1, 0x5, 0x1, 0x6, 0x80000001, 0x1, 0x0, 0x5, 0x7, 0x1, 0x4, 0xc, 0x4, 0x1, 0x51, 0xff, 0x10, 0x66, 0x200, 0x1, 0x8000, 0xb43, 0xffffffff, 0x7, 0x6, 0x7, 0x9, 0x9a6, 0xfffff10e, 0x8, 0x2, 0x8d4, 0x10, 0x10001, 0x7, 0x3, 0x0, 0xf, 0xfffffffb, 0x7, 0x5, 0xffffffff, 0x2, 0x5, 0x8, 0x80, 0x80000000, 0x2, 0x3, 0x2, 0x4, 0x4, 0xc0, 0x4, 0x0, 0x800, 0x3, 0x1, 0xe, 0xd, 0x53a, 0x3, 0x0, 0x1ff, 0xfffff93e, 0x6, 0x3, 0x591473a, 0x8, 0x81, 0x5, 0x1, 0x1, 0xe, 0x2, 0x2, 0x80000001, 0x1815519f, 0x7, 0x4, 0x401, 0x7fffffff, 0x5, 0x5, 0x3, 0x8, 0xfffffffc, 0x6, 0x9, 0x7, 0x5, 0xaf35, 0x2, 0x5, 0x80000001, 0x8000, 0x0, 0xff, 0x3, 0x9, 0x7fffffff, 0x7, 0x5b61, 0x483, 0x5, 0xfffffffa, 0x97, 0x5, 0x4, 0x8, 0xa]}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4ad6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x51, 0x6, "de63e9e612f4d850e45364baa06eece85958c98f2790a75774bab7883162926d2874e1c86fb8340ae65f4ec39d070b1aef5bc809bf16071ec169884687f4a1d3237b846fa649adab15e4615ec5"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x11c, 0xd, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xde, 0x6, "0319840c87f6a329f5de601bce6bd1765a2c102df84805d0231e8a02f1baadafefed0c30ea33220813bdcabee06fb238783c577f1032549e0d6db2cbc14d394f646112612fc46dc1222da59c0a50f87073683d740e84efaa8dfbd3349a1516dc419a3292602ef07b763e497cf80dec7885d0097f1f600c810ec7d3f8cea3f4fa1b20ff0e3a811fd1d53db1d292af10ccbb67146947dfd469f989eca9c721d683025ad3c11a51f5e6d0e3b2fa511326b82bbc11700e940386cc7aa2937d70acf5fc9de88dd9079b91fbda5543644fda1c18f4838e01624987e141"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x17d4}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x29e3d85964fdf063)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "afc99f0a256864ba", "dafda9fd3718d29e52644f085bfc1197e0361a3624a64ed6846650d289677434", "7c699e6f", "3595b4c9f5539191"}, 0x38)
close(0x3)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xfffe, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x40000040, 0x6, 0x2}}}}]}, 0x44}}, 0x4000000)
r9 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r9, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc)
connect$qrtr(r9, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc)
getpeername$l2tp(r9, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
socket(0x10, 0x80002, 0x0)

988.156291ms ago: executing program 1 (id=1392):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
close(r0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x1, 0x5, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000fc0)={0xffffffffffffffff, r2}, 0xc) (async, rerun: 32)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async)
close(0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e20, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) (async, rerun: 64)
socket(0x5, 0x800, 0x7) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x2d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket(0x40000000015, 0x5, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r8, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)

952.504945ms ago: executing program 0 (id=1393):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

904.830247ms ago: executing program 3 (id=1394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendto(r2, 0x0, 0x0, 0x40040, &(0x7f0000000480)=@llc={0x1a, 0x30e, 0x9, 0x4, 0x10, 0x4f, @random="2b70c367e28b"}, 0x80)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b70200000000e6ccbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe02000000850000001a000000b7000000100000009500000000000000455781a5fee65e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde43a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d1106fb0289ce67a66afd92c3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a060000009b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece6d311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da326018362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f707777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee23483508818b897e3b677d3d342640e328504ae2dbf8fe1d704765de74891f7c8dae85739c50409c62040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c1b7d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5f001000000100008000000000ed6f6663677df37de0ec0d0f548b273940be5d1fe0aae14d1a76e0741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ce0000000000000000000000000000000064d3210f806a4877e73c19072e358da1cdbef27967e918e6f2bab4a78ce0103a91789340b00db45df429d650e2f6acfbf9bf2f1b23064f3e60a9ded23b652f110940813a14c97abc84ab3cf728efd94ba2895a0884e7f7c53bc60d1b9768a979929055be8565b8a15dffc8692476ff03963b626afbc18750629666d1f449f02271064768c0731aeccb2c342ae3fa9956354e847f086eee8cd78617ad6ae28f121b23c1128b78f521eea8c487ae31f9112db0e671dd47d95ea9653e51da8c99a996656149a65f8e88032ddf35717407"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c0000000060000000000000000000000000000000000ffb4d63dd17d5ceaf6d3253117573c1d67"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)

623.389031ms ago: executing program 1 (id=1395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf8004000180"], 0x24}}, 0xc010)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf8004000180"], 0x24}}, 0xc010) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)

581.202925ms ago: executing program 3 (id=1396):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000d9a000008000140000000000800034000000000"], 0x58}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)=r0}, 0x20) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x244, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x6]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1d2, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8d}, @broadcast, @device_b, @random="3cd4d7cfc410", {0x3, 0x6}}, 0x4000, 0x5, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x48, 0x1}, {0x1b}, {0x18, 0x1}, {0x3}, {0x6, 0x1}, {0x30}, {0x4}, {0x5, 0x1}]}, @void, [{0xdd, 0x60, "ccd547fbcbd67be5ff1699368dd367e855254340fda0769a6587303ef40d0a834f095ae1251e5a13b91bf3b8dc6425d432e8dc39f6dd361aa7b54bc901032d97e6271242fa20c553115d7640367ea93741c7ec1139691746edc63dd9bd24a64c"}, {0xdd, 0x72, "3c99a3b826cf6505bd8781c01ca5df5a68c21de2c55a53f39fa5c677126d9a999fdab68a33e16ebd403c166eb754e26ff26f80c0546f97e786e7a3640daecedbd93b232b01e7bc42e1d447f54c3db97fde97ce29b96bca96d49abad51c9892332d463c860524b45471c95c49389d9498c502"}, {0xdd, 0x1f, "c172644f861e09e6a9b370ba0ed7f6aa02d015c49759d4aafa54659c13cbe5"}, {0xdd, 0x58, "34b66743ba5d56c399dedf8dc2775571982c59c2bb7da29352e9251da093c619b9016e1cbcc0593e63347688d0eeb6262a004a1c8defdcadc6768e030f26ba79b6d1b6c4a840d650cab4c52e8eb0638786186ab8384c3c3e"}, {0xdd, 0x4d, "57bbc03cfe1cb58337f9859cc49ee2fb92adac52c109f706d6869776c04d6e7eabc141fd065dbc983dc4202b55319f386dd2552e61f7c591d3b4f0f08cbc86900d665b070399f458bfe2e74800"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x680}, @NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x725}, @broadcast, @device_b, @from_mac=@broadcast, {0x4, 0x4}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x1}}, @smps}}]}, 0x244}, 0x1, 0x0, 0x0, 0x2004c000}, 0xc880) (async)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='caif0\x00'}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x2, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20)

579.030151ms ago: executing program 4 (id=1397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=@newsa={0x358, 0x10, 0x4, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4e24, 0x4716, 0x4e22, 0x4, 0x0, 0x80, 0x60, 0x2e, 0x0, 0xee01}, {@in6=@empty, 0x4d5, 0x33}, @in6=@private1, {0x7, 0xb5, 0x1, 0x3ff, 0x1, 0x932c, 0x8000000000000000, 0x5}, {0xff, 0x4, 0x5, 0x8}, {0x100, 0x4, 0xffff8223}, 0x70bd2b, 0x34ff, 0xa, 0x1, 0x5, 0x50}, [@algo_aead={0xe0, 0x12, {{'generic-gcm-aesni\x00'}, 0x4a0, 0x200, "663a7ecef0f9f5e0e8b4066449d90902f81bbeb5e93917521e2f4e60c9acae0370e1c3bfb9a8a18b279c4e8d13a3cd531c88a21152f95e091eac92855650a3795eff20e16d5eb85931217542f2486f9e0e1bff830a65770f6f34fba9cec7a4e7d0026e083c3e3c1a130fbcde8b5441f2d0600267c371b6aa7a0943d56182cc69774f5e6e8aafcd6f313e75ce1a8ab17b2677e8fc"}}, @etimer_thresh={0x8, 0xc, 0x8}, @mark={0xc, 0x15, {0x35075d, 0x5}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x9}}, @sec_ctx={0x75, 0x8, {0x71, 0x8, 0x0, 0x27, 0x69, "04f6eeaada618dffc4a6ff824a17171fc50af4d5ec46349c6dbfb9eaafa8c43a63ee3d8514c037a3fc59964a6d0a761b70f92f779a94c3b18cbfcdbedb458aee311f2c33883914d9f865229d6b4f10b6d8a1e5d181313434729a9026908bfbe7e36839bb9d36257a52"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@mcast2, 0xa, 0x7, 0xb}}, @tfcpad={0x8, 0x16, 0x8}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @algo_auth={0x9f, 0x1, {{'sha1-ni\x00'}, 0x2b8, "950853e5528fa942df3c21cd2223966ba2576d680a0352ea12c183caf977010bb6422a689050ffc5db7ca804ab8d61c2ab78bf9de203effec28fb787e8dde092aacf6a1947124a578c5025cd6d99ecef9a19c463b33e3c"}}]}, 0x358}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x300, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xffff}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000048}, 0x800)

575.989851ms ago: executing program 2 (id=1398):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

515.998369ms ago: executing program 0 (id=1399):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x1006, 0x1, 0x14}, @eth={@empty, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "80e276", 0x8c, 0x21, 0x0, @empty, @private2, {[@fragment={0x8, 0x0, 0x6, 0x1, 0x0, 0x3, 0x68}], {{0x4e23, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, "f67f8f", 0xc, "edd61f"}, "47f7d1f902271d080000000000000048403b699909051ccf06c42d3d55fd9dd40400333d18f63b093c0fc3309a6ef9bfedcffa5fb08e0142f3bff2bc0e0e1fb54b53a409133f133563046b5ec352a51f547cd59736bb5fc12246dd73fe69e4c94880e51c098b00"/116}}}}}}}, 0xd0)

514.583256ms ago: executing program 1 (id=1400):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

443.198335ms ago: executing program 3 (id=1401):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/43, 0x2b}) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000001400001c00128009000100622186ffb9e4f861be6ea31ba27a9666b1fe0280"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

383.146691ms ago: executing program 2 (id=1402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x19c, 0x1e, 0x10, 0x70bd2a, 0x25dfdbfe, {0x8}, [@generic="ad901a49532ba8431d50e6d28d0b94c9192afd4056d28507987f13f140aa249b4d0b9c37d1667b3612e8e911ea86a3534e73ffe864a0608c7450bf6ab8ca1edac4579e4850849ddcb0772cf909e2ada0e9a91380bc5eb1db0a6540dc2d38edd833d8ca98a2e0148d14cbb95aadbb182173346574042853f022d1cad6881d14d1ba6e11f7a6f96e16b0c58400e0bb1b6997bd63a2f673fdcfbcdc57ee6af199619c5c12", @nested={0x10, 0xcd, 0x0, 0x1, [@typed={0xc, 0x13c, 0x0, 0x0, @u64=0x1}]}, @generic="7d9a2b5781c6b69edca4d82af0e6d24ecfca1887e407235cbc0ae77174f0bfb6fc40f7a3cce01e5a740d910431d869f7f011ab117ba4993d605ccc435aa36bbe7127c2e846b571e4e80a5a9502e660d26f6f3d3f81efd9553b114832782943b5319fa86bbe8d881af54a29f47cfd3177d100faa47d3306a5db15cbb0670f5105139e7996ffca00b52a31c5d5d9794fda3f1bdfa2ad7fe2116e63999589ec7c19894c67563b200d075f3ce590c382c78921f96856a68647db7c9b79e1098f233d69b8979e54b13babb3b36f830a9708174b87f7a0f6"]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x44)

312.314283ms ago: executing program 1 (id=1403):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x2000000000000292, &(0x7f0000001900)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd0111406b6caebb7, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffdfe}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000007c0)="0022040000ffffebfffffffeffffff0706000000ff00e80207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x81)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r3, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x7ff, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000280)=0x24)
r6 = socket(0x1000000010, 0x80002, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
recvmsg$kcm(r6, &(0x7f0000000300)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000000)=""/60, 0x3c}], 0x3, &(0x7f0000000180)=""/1, 0x1}, 0x10060)
getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x28, &(0x7f0000000900)=ANY=[@ANYBLOB="0882db06040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000851000000600000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ab000000850000000600000018280000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000100000000000000000040000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@deltfilter={0x64, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x10, 0xb}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r11, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000500))

311.576308ms ago: executing program 4 (id=1404):
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000400008510000006"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x42, 0x4)
sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
bind$unix(r0, &(0x7f0000000000)=@file={0x0, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x13)

235.623973ms ago: executing program 2 (id=1405):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)
r1 = socket(0x2d, 0x2, 0x0)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={<r2=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x10000, @mcast2, 0x36f}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x9, 0x6, 0x8}, 0x10)
shutdown(0xffffffffffffffff, 0x1)

224.054119ms ago: executing program 1 (id=1406):
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
socket$inet_sctp(0x2, 0x4, 0x84)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = accept(r1, 0x0, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f00000001c0), &(0x7f00000002c0)=@udp=r2}, 0x20)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="68e605c0313fceea8e600383ee63020000210001000000000000000000ff0200000000000000000000000000017f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20044044)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4)

156.550929ms ago: executing program 3 (id=1407):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6}, 0x4)
bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) (async)
getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39)

155.368671ms ago: executing program 4 (id=1408):
r0 = socket(0x2b, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x36a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4081)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000001c0)=""/164, &(0x7f0000000140)=0xa4)
socket$inet(0x2, 0x800, 0x6ec1)
close(0x3)
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)

141.80519ms ago: executing program 0 (id=1409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
unshare(0x22020400)
r1 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xb}, @broadcast, @device_b, @from_mac=@broadcast, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x4, 0x2b, @void}}]}, 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x28, 0x1, 0x0)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a80}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
unshare(0x22020400) (async)
socket$rds(0x15, 0x5, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0xbd4f, 0x4}, 0x8}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xb}, @broadcast, @device_b, @from_mac=@broadcast, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x4, 0x2b, @void}}]}, 0x44}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x28, 0x1, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a80}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async)

47.847568ms ago: executing program 2 (id=1410):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x9, 0x200, 0x3, 0x7, 0x5, 0x1, 0x5}, &(0x7f0000000100)=0x20)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x80000000, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0}) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r12, 0x800, 0x1, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r13, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0x840)

307.894µs ago: executing program 4 (id=1411):
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno', 0x4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno', 0x4)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0xffffff02, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0xffffff02, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={r4, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18)
sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x16, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) (async)
sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x16, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001)

0s ago: executing program 3 (id=1412):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c0000040042800a00018006000600800a00000c00028005001480b00000002a34e622af975640e2ca2f88d0c8eb4165c082caf009352330b1d2c047382b08d4829e14"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c0000040042800a00018006000600800a00000c00028005001480b00000002a34e622af975640e2ca2f88d0c8eb4165c082caf009352330b1d2c047382b08d4829e14"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts.
[   83.728596][ T5814] cgroup: Unknown subsys name 'net'
[   83.945634][ T5814] cgroup: Unknown subsys name 'cpuset'
[   83.955288][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.701601][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.024943][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.035237][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.044009][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.053488][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.061190][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.066296][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.076852][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.079357][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.085143][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.095901][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.099680][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.109023][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.117379][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.122818][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.128037][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.140582][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.149307][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.154927][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.172563][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.180897][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.183084][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.197055][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.210075][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.217961][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.225799][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.768709][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   88.950034][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   89.029524][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   89.189685][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.197729][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.205551][ T5825] bridge_slave_0: entered allmulticast mode
[   89.213139][ T5825] bridge_slave_0: entered promiscuous mode
[   89.256117][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.263542][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.270814][ T5825] bridge_slave_1: entered allmulticast mode
[   89.281117][ T5825] bridge_slave_1: entered promiscuous mode
[   89.289258][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   89.429510][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.439451][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   89.470252][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.478422][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.486336][ T5837] bridge_slave_0: entered allmulticast mode
[   89.494018][ T5837] bridge_slave_0: entered promiscuous mode
[   89.504002][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.535376][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.542748][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.549935][ T5824] bridge_slave_0: entered allmulticast mode
[   89.558059][ T5824] bridge_slave_0: entered promiscuous mode
[   89.566291][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.573810][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.581207][ T5837] bridge_slave_1: entered allmulticast mode
[   89.588533][ T5837] bridge_slave_1: entered promiscuous mode
[   89.637471][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.644930][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.652347][ T5824] bridge_slave_1: entered allmulticast mode
[   89.659622][ T5824] bridge_slave_1: entered promiscuous mode
[   89.695003][ T5825] team0: Port device team_slave_0 added
[   89.747828][ T5825] team0: Port device team_slave_1 added
[   89.784983][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.812233][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.820029][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.828048][ T5827] bridge_slave_0: entered allmulticast mode
[   89.835884][ T5827] bridge_slave_0: entered promiscuous mode
[   89.847205][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.859179][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.887651][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.895222][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.902784][ T5827] bridge_slave_1: entered allmulticast mode
[   89.910175][ T5827] bridge_slave_1: entered promiscuous mode
[   89.919698][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.957281][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.964572][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.990893][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.058238][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.066048][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.092220][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.131639][ T5837] team0: Port device team_slave_0 added
[   90.137507][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.144980][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.153058][ T5833] bridge_slave_0: entered allmulticast mode
[   90.160409][ T5833] bridge_slave_0: entered promiscuous mode
[   90.180810][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.191841][ T5834] Bluetooth: hci2: command tx timeout
[   90.197458][ T5824] team0: Port device team_slave_0 added
[   90.205822][ T5837] team0: Port device team_slave_1 added
[   90.227182][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.234632][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.242614][ T5833] bridge_slave_1: entered allmulticast mode
[   90.249942][ T5833] bridge_slave_1: entered promiscuous mode
[   90.260756][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.271702][ T5834] Bluetooth: hci4: command tx timeout
[   90.271726][ T5835] Bluetooth: hci0: command tx timeout
[   90.272146][ T5844] Bluetooth: hci3: command tx timeout
[   90.283013][ T5834] Bluetooth: hci1: command tx timeout
[   90.308657][ T5824] team0: Port device team_slave_1 added
[   90.369581][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.376759][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.403205][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.440920][ T5827] team0: Port device team_slave_0 added
[   90.460657][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.467760][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.494311][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.508260][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.533636][ T5827] team0: Port device team_slave_1 added
[   90.540004][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.547189][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.573221][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.594728][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.609656][ T5825] hsr_slave_0: entered promiscuous mode
[   90.617238][ T5825] hsr_slave_1: entered promiscuous mode
[   90.638877][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.645962][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.672397][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.732825][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.739826][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.766939][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.807495][ T5833] team0: Port device team_slave_0 added
[   90.814092][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.821810][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.848563][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.881186][ T5833] team0: Port device team_slave_1 added
[   90.907674][ T5837] hsr_slave_0: entered promiscuous mode
[   90.914374][ T5837] hsr_slave_1: entered promiscuous mode
[   90.920702][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   90.927513][ T5837] Cannot create hsr debugfs directory
[   91.028433][ T5824] hsr_slave_0: entered promiscuous mode
[   91.035117][ T5824] hsr_slave_1: entered promiscuous mode
[   91.042477][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   91.048298][ T5824] Cannot create hsr debugfs directory
[   91.077638][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.084881][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.111002][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.148549][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.156373][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.183405][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.199964][ T5827] hsr_slave_0: entered promiscuous mode
[   91.207141][ T5827] hsr_slave_1: entered promiscuous mode
[   91.213953][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   91.219736][ T5827] Cannot create hsr debugfs directory
[   91.509583][ T5833] hsr_slave_0: entered promiscuous mode
[   91.516211][ T5833] hsr_slave_1: entered promiscuous mode
[   91.523331][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   91.529191][ T5833] Cannot create hsr debugfs directory
[   91.837756][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.859221][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.889992][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.914320][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.966132][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.000626][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.017883][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.043364][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.124881][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.149660][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.170442][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.205136][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.281124][ T5834] Bluetooth: hci2: command tx timeout
[   92.289571][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.329375][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.351591][ T5835] Bluetooth: hci0: command tx timeout
[   92.351598][ T5840] Bluetooth: hci4: command tx timeout
[   92.363585][ T5834] Bluetooth: hci3: command tx timeout
[   92.369133][ T5844] Bluetooth: hci1: command tx timeout
[   92.389238][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.415264][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.517520][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.555368][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.598392][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.608433][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.630667][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.647637][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.723700][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   92.768222][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   92.807746][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.815349][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.839455][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.846655][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.872942][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.880127][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.889772][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.896956][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.998984][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.064624][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.113857][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   93.160317][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.179149][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.186395][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.253239][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   93.273448][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.280644][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.340688][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   93.363497][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.370708][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.396468][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.403806][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.426583][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.433847][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.455515][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.462756][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.576482][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.646639][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.734380][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.817006][ T5837] veth0_vlan: entered promiscuous mode
[   93.887456][ T5837] veth1_vlan: entered promiscuous mode
[   94.046393][ T5825] veth0_vlan: entered promiscuous mode
[   94.095929][ T5837] veth0_macvtap: entered promiscuous mode
[   94.118395][ T5825] veth1_vlan: entered promiscuous mode
[   94.130534][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.142083][ T5837] veth1_macvtap: entered promiscuous mode
[   94.229938][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.242162][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.270398][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.289120][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.328635][   T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.353760][ T5844] Bluetooth: hci2: command tx timeout
[   94.360418][   T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.392371][   T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.419036][   T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.431565][ T5834] Bluetooth: hci3: command tx timeout
[   94.437109][ T5835] Bluetooth: hci0: command tx timeout
[   94.443655][ T5834] Bluetooth: hci4: command tx timeout
[   94.449178][ T5844] Bluetooth: hci1: command tx timeout
[   94.494747][ T5825] veth0_macvtap: entered promiscuous mode
[   94.545565][ T5825] veth1_macvtap: entered promiscuous mode
[   94.674492][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.687802][ T5824] veth0_vlan: entered promiscuous mode
[   94.708679][ T5833] veth0_vlan: entered promiscuous mode
[   94.724843][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.733214][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.743993][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.778504][ T5824] veth1_vlan: entered promiscuous mode
[   94.787573][ T5833] veth1_vlan: entered promiscuous mode
[   94.816165][ T5827] veth0_vlan: entered promiscuous mode
[   94.824437][ T1862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.835104][ T1862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.857649][ T1862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.867309][ T1862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.880822][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.890922][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.917787][ T5827] veth1_vlan: entered promiscuous mode
[   95.000402][ T5833] veth0_macvtap: entered promiscuous mode
[   95.012302][ T5824] veth0_macvtap: entered promiscuous mode
[   95.026954][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.040228][ T5833] veth1_macvtap: entered promiscuous mode
[   95.083326][ T5824] veth1_macvtap: entered promiscuous mode
[   95.095496][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.134496][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.180711][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.216268][ T5827] veth0_macvtap: entered promiscuous mode
[   95.226668][ T5949] Zero length message leads to an empty skb
[   95.238559][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.262291][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.273025][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.291788][ T5827] veth1_macvtap: entered promiscuous mode
[   95.315490][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.360987][   T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.372752][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.405897][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.426857][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.436255][   T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.454267][   T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.483570][   T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.536631][   T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.552658][   T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.576874][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.598676][   T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.619100][   T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.675609][   T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.717917][ T5955] tc_dump_action: action bad kind
[   95.734730][   T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.750056][   T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.785838][   T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.984660][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.007139][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.086734][ T1862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.100914][ T1862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.138592][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.153847][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.233171][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.256004][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.337314][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.372914][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.415893][ T5976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.431994][ T5844] Bluetooth: hci2: command tx timeout
[   96.511768][ T5844] Bluetooth: hci1: command tx timeout
[   96.511805][ T5835] Bluetooth: hci4: command tx timeout
[   96.517341][ T5834] Bluetooth: hci3: command tx timeout
[   96.526435][ T5840] Bluetooth: hci0: command tx timeout
[   96.537604][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.591342][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.872669][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   96.935948][ T5986] xt_CT: You must specify a L4 protocol and not use inversions on it
[   96.939854][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'.
[   97.069554][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.124695][ T5995] ieee802154 phy0 wpan0: encryption failed: -22
[   97.132366][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   97.194632][ T5999] chnl_net:caif_netlink_parms(): no params data found
[   97.251574][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   97.349334][ T6010] netlink: 240 bytes leftover after parsing attributes in process `syz.0.21'.
[   97.400345][   T43] cfg80211: failed to load regulatory.db
[   97.520098][ T6014] netlink: 240 bytes leftover after parsing attributes in process `syz.0.21'.
[   97.553112][ T6018] netlink: 52 bytes leftover after parsing attributes in process `syz.4.23'.
[   97.568756][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.577252][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.793094][ T6026] netlink: 294 bytes leftover after parsing attributes in process `syz.1.27'.
[   97.821883][ T6024] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET)
[   97.867164][ T6026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.959222][ T6034] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �&��%����Q�0@æj�ʫ�����}
[   98.073681][ T6036] netlink: 'syz.4.29': attribute type 21 has an invalid length.
[   98.183527][ T6036] netlink: 'syz.4.29': attribute type 6 has an invalid length.
[   98.197711][ T6036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29'.
[   98.250047][ T6049] : entered promiscuous mode
[   98.693099][ T6067] syzkaller0: entered promiscuous mode
[   98.746810][ T6069] gtp0: entered promiscuous mode
[   98.762029][ T6069] gtp0: entered allmulticast mode
[   98.798008][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.40'.
[   98.820487][ T6076] Illegal XDP return value 765030068 on prog  (id 8) dev N/A, expect packet loss!
[   99.656269][ T6075] IPVS: Error connecting to the multicast addr
[   99.691493][ T6093] netlink: 'syz.4.43': attribute type 1 has an invalid length.
[  100.217194][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.406823][ T6216] gre1: entered promiscuous mode
[  102.412893][ T6216] gre1: entered allmulticast mode
[  102.767448][ T6236] netlink: 'syz.4.86': attribute type 6 has an invalid length.
[  102.850269][ T6231] netlink: 'syz.4.86': attribute type 6 has an invalid length.
[  102.897815][ T6231] __nla_validate_parse: 8 callbacks suppressed
[  102.897834][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'.
[  103.014755][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'.
[  103.256630][ T6254] tipc: Started in network mode
[  103.263483][ T6254] tipc: Node identity e639ef1c35d1, cluster identity 4711
[  103.282583][ T6254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.300179][ T6254] syzkaller0: entered promiscuous mode
[  103.316355][ T6254] syzkaller0: entered allmulticast mode
[  103.398394][ T6255] netlink: 'syz.4.88': attribute type 1 has an invalid length.
[  103.408421][ T6257] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  103.526883][ T6259] tipc: Resetting bearer <eth:syzkaller0>
[  103.564570][ T6254] netlink: 'syz.3.89': attribute type 3 has an invalid length.
[  103.592107][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'.
[  103.622843][ T6253] tipc: Resetting bearer <eth:syzkaller0>
[  103.772852][ T6266] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.91'.
[  103.784114][ T6253] tipc: Disabling bearer <eth:syzkaller0>
[  103.977434][ T6274] netlink: 'syz.4.91': attribute type 12 has an invalid length.
[  104.147391][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.94'.
[  104.201333][ T6279] netlink: 'syz.3.94': attribute type 7 has an invalid length.
[  104.208974][ T6279] netlink: 'syz.3.94': attribute type 8 has an invalid length.
[  104.243650][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[  104.401899][ T6287] Cannot find add_set index 65532 as target
[  104.430751][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  104.725412][ T6298] lo: entered promiscuous mode
[  104.746330][ T6298] tunl0: entered promiscuous mode
[  104.780834][ T6298] gre0: entered promiscuous mode
[  104.812510][ T6276] infiniband !yz!: set active
[  104.812721][ T6298] gretap0: entered promiscuous mode
[  104.821374][ T6276] infiniband !yz!: added team_slave_0
[  104.873663][ T6298] erspan0: entered promiscuous mode
[  104.909127][ T6298] ip_vti0: entered promiscuous mode
[  104.961935][ T6276] RDS/IB: !yz!: added
[  104.967782][ T6276] smc: adding ib device !yz! with port count 1
[  104.974362][ T6276] smc:    ib device !yz! port 1 has no pnetid
[  105.017949][ T6299] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  105.310650][ T6321] bridge0: port 3(batadv1) entered blocking state
[  105.351196][ T6321] bridge0: port 3(batadv1) entered disabled state
[  105.375073][ T6321] batadv1: entered allmulticast mode
[  105.409925][ T6321] batadv1: entered promiscuous mode
[  105.453904][ T6327] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.466364][ T6327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.478632][ T6327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.108'.
[  105.488428][ T6327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.108'.
[  105.646166][ T6336] netlink: 128 bytes leftover after parsing attributes in process `syz.4.110'.
[  105.811354][ T1140] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  105.820978][ T1140] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  106.156335][ T6354] netlink: 'syz.2.113': attribute type 2 has an invalid length.
[  106.385162][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.393402][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.487156][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.503090][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.631509][ T3498] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.660786][ T3498] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.707175][ T3498] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.737103][ T3498] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.875585][ T6361] block nbd0: not configured, cannot reconfigure
[  106.984861][ T6375] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.202352][ T6385] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.251442][ T6385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.258902][ T6385] IPv6: NLM_F_CREATE should be set when creating new route
[  107.266844][ T6387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.278320][ T6387] syzkaller0: entered promiscuous mode
[  107.285977][ T6387] syzkaller0: entered allmulticast mode
[  107.322299][ T6387] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  107.424613][ T6387] tipc: Resetting bearer <eth:syzkaller0>
[  107.462636][ T6386] tipc: Resetting bearer <eth:syzkaller0>
[  107.521667][ T6386] tipc: Disabling bearer <eth:syzkaller0>
[  107.719655][ T6403] netlink: 'syz.3.129': attribute type 1 has an invalid length.
[  107.749801][ T6403] netlink: 'syz.3.129': attribute type 2 has an invalid length.
[  107.903541][ T6407] __nla_validate_parse: 12 callbacks suppressed
[  107.903562][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'.
[  108.537061][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'.
[  108.599795][ T6434] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.142'.
[  108.657559][ T6440] netlink: 'syz.4.145': attribute type 1 has an invalid length.
[  108.779486][ T6440] bond1: entered promiscuous mode
[  108.785275][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.819568][ T6447] bond1: (slave bridge1): making interface the new active one
[  108.827543][ T6447] bridge1: entered promiscuous mode
[  108.862626][ T6447] bridge1: left promiscuous mode
[  109.468095][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.156'.
[  109.505127][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[  109.598539][ T6495] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[  109.683237][ T6495] netlink: 'syz.1.159': attribute type 3 has an invalid length.
[  109.725358][ T6495] netlink: 'syz.1.159': attribute type 7 has an invalid length.
[  109.741629][ T6495] netlink: 'syz.1.159': attribute type 8 has an invalid length.
[  109.757394][ T6505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.161'.
[  109.791124][ T6495] netlink: 184 bytes leftover after parsing attributes in process `syz.1.159'.
[  109.801701][ T6495] NCSI netlink: No device for ifindex 131092
[  109.853178][ T6509] netlink: 64 bytes leftover after parsing attributes in process `syz.2.164'.
[  110.054533][ T6522] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20000
[  110.294730][ T6534] netlink: 'syz.3.170': attribute type 3 has an invalid length.
[  110.358046][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'.
[  110.432929][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'.
[  110.526582][ T6538] bridge_slave_0: left allmulticast mode
[  110.538504][ T6548] raw_sendmsg: syz.0.175 forgot to set AF_INET. Fix it!
[  110.548125][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.551653][ T6538] bridge_slave_0: left promiscuous mode
[  110.570575][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.585109][ T6547] trusted_key: syz.3.176 sent an empty control message without MSG_MORE.
[  110.648516][ T6538] bridge_slave_1: left allmulticast mode
[  110.714040][ T6538] bridge_slave_1: left promiscuous mode
[  110.730650][ T6553] sctp: [Deprecated]: syz.4.177 (pid 6553) Use of int in max_burst socket option deprecated.
[  110.730650][ T6553] Use struct sctp_assoc_value instead
[  110.762476][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.791377][ T6554] sctp: [Deprecated]: syz.4.177 (pid 6554) Use of int in max_burst socket option deprecated.
[  110.791377][ T6554] Use struct sctp_assoc_value instead
[  110.813805][ T6538] bond0: (slave bond_slave_0): Releasing backup interface
[  110.845710][ T6538] bond0: (slave bond_slave_1): Releasing backup interface
[  110.886770][ T6538] team0: Port device team_slave_0 removed
[  110.912099][ T6538] team0: Port device team_slave_1 removed
[  110.919025][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.944218][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.963314][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.970749][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.005116][ T6538] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  111.199477][ T6556] hsr_slave_1 (unregistering): left promiscuous mode
[  111.293271][ T6561] netlink: 'syz.1.180': attribute type 8 has an invalid length.
[  111.708905][ T6589] netlink: 'syz.4.188': attribute type 1 has an invalid length.
[  112.232799][ T6606] ip6gre1: entered promiscuous mode
[  112.249429][ T6606] ip6gre1: entered allmulticast mode
[  112.644561][ T6625] netlink: 'syz.4.199': attribute type 11 has an invalid length.
[  112.685257][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.694632][ T6628] block nbd1: not configured, cannot reconfigure
[  112.724494][ T6623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.947806][ T6623] syzkaller0: entered promiscuous mode
[  112.972260][ T6623] syzkaller0: entered allmulticast mode
[  112.984309][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[  113.147963][ T6644] pim6reg: entered allmulticast mode
[  113.185899][ T6622] tipc: Resetting bearer <eth:syzkaller0>
[  114.696754][ T6622] tipc: Disabling bearer <eth:syzkaller0>
[  114.736752][ T6676] bridge1: the hash_elasticity option has been deprecated and is always 16
[  114.746928][   T57] tipc: Node number set to 3555258140
[  114.914044][ T6705] tipc: Started in network mode
[  114.952460][ T6705] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711
[  115.022055][ T6705] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  115.078445][ T6715] __nla_validate_parse: 8 callbacks suppressed
[  115.078465][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'.
[  115.276258][ T6728] netlink: 56 bytes leftover after parsing attributes in process `syz.4.222'.
[  115.463719][ T6736] xt_l2tp: v2 doesn't support IP mode
[  115.537215][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'.
[  115.582984][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'.
[  115.593546][ T6740] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.225'.
[  116.612417][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'.
[  116.775144][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'.
[  116.806996][ T6784] netlink: 'syz.0.240': attribute type 24 has an invalid length.
[  116.949270][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.242'.
[  117.075352][ T6798] Bluetooth: MGMT ver 1.23
[  117.504786][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'.
[  117.558377][ T6823] warning: `syz.0.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  117.797232][ T6836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'.
[  117.866407][ T6840] netlink: 'syz.3.255': attribute type 7 has an invalid length.
[  118.025304][ T6853] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  118.200949][ T5879] udevd[5879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  118.277827][ T6863] netlink: 'syz.0.261': attribute type 2 has an invalid length.
[  118.564056][ T6874] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  118.616483][ T6874] bond2 (unregistering): Released all slaves
[  118.702550][ T6876] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  118.899434][ T6884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.953802][ T6907] netlink: 'syz.1.270': attribute type 39 has an invalid length.
[  119.054499][ T6914] ieee802154 phy0 wpan0: encryption failed: -22
[  119.065445][ T6915] openvswitch: netlink: Message has 8 unknown bytes.
[  119.114967][ T6884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.319825][ T6884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.384594][ T6919] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  119.521441][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.528913][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.547936][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.563961][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.613933][ T6884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.773263][ T6934] netlink: 'syz.3.278': attribute type 2 has an invalid length.
[  119.826973][ T6934] �9: entered promiscuous mode
[  120.013471][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.069007][ T1150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.105627][ T3498] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.155541][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.947086][ T6982] __nla_validate_parse: 17 callbacks suppressed
[  120.947108][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.290'.
[  120.985199][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'.
[  120.995811][ T6978] !
: renamed from dummy0
[  121.450580][ T7009] team0: Device ipvlan2 failed to register rx_handler
[  121.516934][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'.
[  121.526165][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'.
[  121.608311][ T7022] lo: entered allmulticast mode
[  121.627815][ T7022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'.
[  121.650454][ T7022] openvswitch: netlink: Flow key attr not present in new flow.
[  121.737006][ T7028] xt_time: invalid argument - start or stop time greater than 23:59:59
[  121.786284][ T7022] lo: left allmulticast mode
[  122.038260][ T7048] netlink: 100 bytes leftover after parsing attributes in process `syz.3.304'.
[  122.216187][ T7058] netlink: 'syz.2.307': attribute type 25 has an invalid length.
[  122.730660][ T7080] tipc: Enabling <eth:lo> not permitted
[  122.762512][ T7080] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  122.782976][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'.
[  122.786205][ T7087] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.317'.
[  122.865313][ T7086] bond1: entered promiscuous mode
[  122.870451][ T7086] bond1: entered allmulticast mode
[  122.878145][ T7086] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.541618][ T7123] pim6reg1: entered promiscuous mode
[  123.547012][ T7123] pim6reg1: entered allmulticast mode
[  123.881810][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[  124.111380][ T7142] hsr_slave_0 (unregistering): left promiscuous mode
[  124.148356][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'.
[  124.408499][ T7152] hsr_slave_0 (unregistering): left promiscuous mode
[  124.524666][ T7168] syzkaller0: entered promiscuous mode
[  124.549291][ T7168] syzkaller0: entered allmulticast mode
[  125.193373][ T7205] netlink: 'syz.4.351': attribute type 10 has an invalid length.
[  125.220553][ T7205] bridge_slave_1: left allmulticast mode
[  125.236699][ T7205] bridge_slave_1: left promiscuous mode
[  125.251812][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.266251][ T7209] netlink: 'syz.1.348': attribute type 32 has an invalid length.
[  125.434663][ T7205] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  126.069408][ T7235] __nla_validate_parse: 4 callbacks suppressed
[  126.069428][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'.
[  126.124230][ T7240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.358'.
[  127.273319][ T7289] syzkaller0: entered promiscuous mode
[  127.279912][ T7289] syzkaller0: entered allmulticast mode
[  127.739590][ T7293] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  127.964772][ T7322] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[  128.291400][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'.
[  128.347997][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'.
[  128.440542][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'.
[  128.455996][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[  128.469440][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'.
[  128.563979][ T7356] xt_hashlimit: size too large, truncated to 1048576
[  128.999977][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[  130.036688][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  130.105957][ T7371] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[  130.123786][ T7371] netlink: 'syz.2.389': attribute type 2 has an invalid length.
[  130.141465][ T7374] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[  130.246975][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[  130.461067][ T7392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.835699][ T7408] syzkaller0: entered promiscuous mode
[  130.867367][ T7408] syzkaller0: entered allmulticast mode
[  131.140808][ T7430] __nla_validate_parse: 5 callbacks suppressed
[  131.140827][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'.
[  131.169711][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'.
[  131.209645][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'.
[  131.231805][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'.
[  132.622360][ T7446] netlink: 'syz.0.409': attribute type 1 has an invalid length.
[  132.741888][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'.
[  132.807785][ T7453] bond1: (slave veth3): Enslaving as an active interface with a down link
[  132.880216][ T7446] bond1: entered promiscuous mode
[  132.914897][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.934941][ T7463] netlink: 'syz.3.415': attribute type 13 has an invalid length.
[  133.143392][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  133.285068][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  133.323416][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[  133.458980][ T7475] bond2: entered promiscuous mode
[  133.464563][ T7475] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.814997][ T7496] bond4 (unregistering): Released all slaves
[  134.014653][ T7515] syzkaller0: entered promiscuous mode
[  134.020441][ T7515] syzkaller0: entered allmulticast mode
[  134.186256][ T7523] vlan2: entered allmulticast mode
[  134.330600][ T7530] netlink: 'syz.0.428': attribute type 8 has an invalid length.
[  134.351568][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[  134.384072][ T7530] bond0: entered promiscuous mode
[  134.389291][ T7530] bond_slave_0: entered promiscuous mode
[  134.396287][ T7530] bond_slave_1: entered promiscuous mode
[  134.406864][ T7530] gretap0: entered promiscuous mode
[  134.415509][ T7530] veth0: entered promiscuous mode
[  134.427814][ T7530] hsr1: entered promiscuous mode
[  134.491224][ T7534] netlink: 'syz.4.430': attribute type 1 has an invalid length.
[  134.552499][ T7539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.581759][ T7544] netlink: 'syz.0.434': attribute type 32 has an invalid length.
[  134.600039][ T7546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.432'.
[  134.619436][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.180019][   T57] IPVS: starting estimator thread 0...
[  135.254660][ T7570] lo: Caught tx_queue_len zero misconfig
[  135.281266][ T7586] IPVS: using max 27 ests per chain, 64800 per kthread
[  135.522426][   T57] IPVS: starting estimator thread 0...
[  135.529129][ T7598] netlink: 'syz.4.443': attribute type 7 has an invalid length.
[  135.610679][ T7602] vlan4: entered allmulticast mode
[  135.616225][ T7602] bridge_slave_0: entered allmulticast mode
[  135.623973][ T7601] IPVS: using max 25 ests per chain, 60000 per kthread
[  135.777459][ T7611] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[  135.786833][ T7610] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[  135.859181][ T7611] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.567969][ T7648] __nla_validate_parse: 10 callbacks suppressed
[  136.567992][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'.
[  136.592040][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.453'.
[  136.607580][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'.
[  136.617200][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'.
[  136.734683][ T7646] bond2: invalid ARP target 0.0.0.0 specified for addition
[  136.742606][ T7646] bond2: option arp_ip_target: invalid value (0)
[  136.751751][ T7646] bond2 (unregistering): Released all slaves
[  136.782439][ T7658] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  137.415421][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'.
[  137.425883][ T7685] team0: Device ipvlan2 failed to register rx_handler
[  137.452735][ T7683] block nbd0: Unsupported socket: should be TCP or UNIX.
[  137.484561][ T7690] netlink: 52 bytes leftover after parsing attributes in process `syz.2.465'.
[  137.500817][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'.
[  137.592525][ T7695] x_tables: duplicate underflow at hook 2
[  138.194966][ T7727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  138.360263][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.422756][ T7744] netlink: 'syz.4.482': attribute type 10 has an invalid length.
[  138.432092][ T7744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.482'.
[  138.444924][ T7744] team0: entered promiscuous mode
[  138.450332][ T7744] team_slave_0: entered promiscuous mode
[  138.458355][ T7744] team_slave_1: entered promiscuous mode
[  138.465710][ T7744] bridge0: port 2(team0) entered blocking state
[  138.476782][ T7744] bridge0: port 2(team0) entered disabled state
[  138.486412][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'.
[  138.522019][ T7744] team0: entered allmulticast mode
[  138.528631][ T7744] team_slave_0: entered allmulticast mode
[  138.551789][ T7744] team_slave_1: entered allmulticast mode
[  138.700486][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[  139.032923][ T7766] netlink: 'syz.0.491': attribute type 7 has an invalid length.
[  139.041116][ T7766] netlink: 'syz.0.491': attribute type 8 has an invalid length.
[  139.061559][ T7770] x_tables: duplicate underflow at hook 1
[  139.069592][ T7766] erspan0: entered promiscuous mode
[  139.086308][ T7766] batadv_slave_0: entered promiscuous mode
[  139.098349][ T7766] batadv_slave_0: left promiscuous mode
[  139.107318][ T7766] erspan0: left promiscuous mode
[  139.417194][ T7784] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  140.518756][ T7835] tipc: Invalid UDP bearer configuration
[  140.518815][ T7835] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  140.768524][ T7848] netlink: 'syz.4.512': attribute type 1 has an invalid length.
[  140.814971][ T7848] netlink: 'syz.4.512': attribute type 2 has an invalid length.
[  140.863367][ T7857] netlink: 'syz.2.514': attribute type 3 has an invalid length.
[  141.332160][ T7877] netlink: 'syz.0.523': attribute type 10 has an invalid length.
[  141.650038][ T7885] openvswitch: netlink: IPv4 tunnel dst address is zero
[  141.677602][ T7887] bond0: Caught tx_queue_len zero misconfig
[  154.514886][ T7912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  154.650756][ T7926] __nla_validate_parse: 14 callbacks suppressed
[  154.650775][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[  154.651705][ T7927] openvswitch: netlink: Duplicate key (type 1).
[  154.680853][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.541'.
[  154.750671][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv1
[  154.791658][ T7926] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  154.811356][ T7926] team0: Failed to send options change via netlink (err -105)
[  154.818999][ T7926] team0: Port device batadv1 added
[  154.851043][ T7927] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  154.863872][ T7927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'.
[  154.887817][ T7930] netlink: 1 bytes leftover after parsing attributes in process `syz.3.543'.
[  154.899483][ T7934] !
: renamed from dummy0 (while UP)
[  155.084409][ T7932] syzkaller0: entered promiscuous mode
[  155.114442][ T7932] syzkaller0: entered allmulticast mode
[  155.143389][ T7943] netlink: 256 bytes leftover after parsing attributes in process `syz.2.544'.
[  155.154225][ T7935] netlink: 'syz.0.542': attribute type 12 has an invalid length.
[  155.197175][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'.
[  155.225586][ T7947] netlink: 'syz.3.546': attribute type 8 has an invalid length.
[  155.328692][ T7954] netlink: 'syz.2.548': attribute type 15 has an invalid length.
[  155.341568][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'.
[  156.795619][ T7968] syzkaller0: entered promiscuous mode
[  156.804849][ T7968] syzkaller0: entered allmulticast mode
[  156.820256][ T7969] ip6gre1: entered promiscuous mode
[  156.884167][ T7969] ip6gre1: entered allmulticast mode
[  156.926492][ T7974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.033010][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.049351][ T7983] netlink: 'syz.0.553': attribute type 11 has an invalid length.
[  157.058865][ T7983] netlink: 224 bytes leftover after parsing attributes in process `syz.0.553'.
[  157.086493][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'.
[  157.156408][ T7988] netlink: 'syz.3.556': attribute type 1 has an invalid length.
[  157.223590][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.556'.
[  157.278595][ T7993] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  157.337345][ T7988] bond3: entered promiscuous mode
[  157.344180][ T7988] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.403915][ T8003] openvswitch: netlink: Missing valid actions attribute.
[  157.411487][ T8003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.506816][ T7993] 8021q: adding VLAN 0 to HW filter on device bond5
[  157.638450][ T7997] bond5: (slave veth3): Enslaving as an active interface with a down link
[  157.676736][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv1
[  157.689682][ T8008] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  157.848882][ T8025] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  157.857607][ T8025] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.299432][ T8043] bridge_slave_0: left allmulticast mode
[  158.316901][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.334012][ T8043] bridge_slave_1: left allmulticast mode
[  158.339996][ T8043] bridge_slave_1: left promiscuous mode
[  158.347604][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.363615][ T8043] bond0: (slave bond_slave_0): Releasing backup interface
[  158.374680][ T8043] bond0: (slave bond_slave_1): Releasing backup interface
[  158.397088][ T8043] team0: Port device team_slave_0 removed
[  158.410161][ T8043] team0: Port device team_slave_1 removed
[  158.417663][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.426515][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.435992][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.444937][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.455459][ T8043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.488021][ T8046] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  158.520426][ T8048] vlan2: entered promiscuous mode
[  158.530529][ T8048] bridge0: entered promiscuous mode
[  158.654381][ T8052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.925369][ T8063] netlink: 'syz.1.579': attribute type 6 has an invalid length.
[  158.948910][ T8063] netlink: 'syz.1.579': attribute type 5 has an invalid length.
[  159.014848][ T8066] bond3: Unable to set down delay as MII monitoring is disabled
[  159.050029][ T8066] bond3 (unregistering): Released all slaves
[  159.140800][ T8071] syzkaller0: entered promiscuous mode
[  159.149134][ T8071] syzkaller0: entered allmulticast mode
[  159.464232][ T8081] bond6 (unregistering): Released all slaves
[  160.167705][ T8120] __nla_validate_parse: 11 callbacks suppressed
[  160.167725][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  160.803623][ T8141] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  160.850353][ T8144] netlink: 7 bytes leftover after parsing attributes in process `syz.3.601'.
[  160.877786][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.601'.
[  160.929765][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[  161.058617][ T8152] syzkaller1: entered promiscuous mode
[  161.082302][ T8152] syzkaller1: entered allmulticast mode
[  161.099180][ T8152] veth1_to_bond: entered allmulticast mode
[  161.106196][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'.
[  161.122850][ T8154] xt_connbytes: Forcing CT accounting to be enabled
[  161.157378][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.603'.
[  161.188893][ T8159] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  161.215851][ T8152] bond0: (slave bond_slave_1): Releasing backup interface
[  161.250471][ T8162] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  161.289890][ T8152] veth1_to_bond (unregistering): left allmulticast mode
[  161.427532][ T8162] bond3: entered promiscuous mode
[  161.433403][ T8162] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.558220][ T8164] 8021q: adding VLAN 0 to HW filter on device bond4
[  161.570033][ T8164] bond3: (slave bond4): making interface the new active one
[  161.577560][ T8164] bond4: entered promiscuous mode
[  161.589237][ T8164] bond3: (slave bond4): Enslaving as an active interface with an up link
[  162.454861][ T8194] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[  162.497158][ T8194] netlink: 244 bytes leftover after parsing attributes in process `syz.0.615'.
[  162.737444][ T8203] pim6reg1: entered promiscuous mode
[  162.751109][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.761527][ T8203] pim6reg1: entered allmulticast mode
[  162.892998][ T8206] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  162.981956][ T8206] syzkaller0: entered promiscuous mode
[  162.999993][ T8206] syzkaller0: entered allmulticast mode
[  163.512557][ T8224] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  163.540077][ T8223] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  163.550221][   T43] IPVS: starting estimator thread 0...
[  163.681263][ T8225] IPVS: using max 28 ests per chain, 67200 per kthread
[  164.044894][ T8232] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.629'.
[  164.140739][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88804fca4000: rx timeout, send abort
[  164.151053][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804fca4000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  164.726371][ T8270] ip6tnl0: Caught tx_queue_len zero misconfig
[  164.839730][ T8276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'.
[  164.963678][ T8281] bond6: option mode: invalid value (133)
[  164.975200][ T8281] bond6 (unregistering): Released all slaves
[  165.031478][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.641'.
[  165.384805][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'.
[  165.664532][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'.
[  165.725705][ T8321] netlink: 'syz.1.648': attribute type 21 has an invalid length.
[  165.751334][ T8321] netlink: 152 bytes leftover after parsing attributes in process `syz.1.648'.
[  166.200169][ T8342] syzkaller0: entered promiscuous mode
[  166.206001][ T8342] syzkaller0: entered allmulticast mode
[  166.337014][ T8350] netlink: 'syz.3.658': attribute type 10 has an invalid length.
[  166.857439][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'.
[  167.575664][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.667'.
[  167.624146][ T8403] IPv6: sit1: Disabled Multicast RS
[  167.649710][ T8403] sit1: entered allmulticast mode
[  167.908486][ T8416] geneve2: entered promiscuous mode
[  168.051460][ T8135] Set syz1 is full, maxelem 65536 reached
[  168.273071][ T8431] netlink: 'syz.4.673': attribute type 1 has an invalid length.
[  168.335172][ T8431] bond3: entered promiscuous mode
[  168.344838][ T8431] 8021q: adding VLAN 0 to HW filter on device bond3
[  168.423264][ T8430] 8021q: adding VLAN 0 to HW filter on device bond4
[  168.434519][ T8430] bond3: (slave bond4): making interface the new active one
[  168.443088][ T8430] bond4: entered promiscuous mode
[  168.449208][ T8430] bond3: (slave bond4): Enslaving as an active interface with an up link
[  168.463749][ T8431] wg0: Master is either lo or non-ether device
[  168.705080][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'.
[  168.752244][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.679'.
[  168.814289][ T8454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.679'.
[  169.032166][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[  169.052148][ T8470] netlink: 'syz.4.681': attribute type 5 has an invalid length.
[  169.226822][ T8477] syz.1.686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  169.286966][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(full) 
[  169.286998][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  169.287021][ T8477] Call Trace:
[  169.287031][ T8477]  <TASK>
[  169.287042][ T8477]  dump_stack_lvl+0xe8/0x150
[  169.287078][ T8477]  warn_alloc+0x214/0x310
[  169.287104][ T8477]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  169.287146][ T8477]  ? __pfx_warn_alloc+0x10/0x10
[  169.287178][ T8477]  ? kasan_save_track+0x4f/0x80
[  169.287200][ T8477]  ? kasan_save_track+0x3e/0x80
[  169.287218][ T8477]  ? __kasan_kmalloc+0x93/0xb0
[  169.287240][ T8477]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  169.287259][ T8477]  ? xskq_create+0x56/0x170
[  169.287292][ T8477]  ? xsk_setsockopt+0x4dc/0x8d0
[  169.287322][ T8477]  ? do_sock_setsockopt+0x17c/0x1b0
[  169.287346][ T8477]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  169.287551][ T8477]  ? do_syscall_64+0xec/0xf80
[  169.287580][ T8477]  __vmalloc_node_range_noprof+0x134/0x16a0
[  169.287640][ T8477]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  169.287672][ T8477]  ? __kasan_kmalloc+0x93/0xb0
[  169.287705][ T8477]  vmalloc_user_noprof+0xad/0xf0
[  169.287729][ T8477]  ? xskq_create+0xbf/0x170
[  169.287765][ T8477]  xskq_create+0xbf/0x170
[  169.287805][ T8477]  xsk_init_queue+0xb0/0x110
[  169.287842][ T8477]  xsk_setsockopt+0x4dc/0x8d0
[  169.287879][ T8477]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.287913][ T8477]  ? __pfx_aa_sk_perm+0x10/0x10
[  169.287946][ T8477]  ? aa_sock_opt_perm+0xff/0x1a0
[  169.287981][ T8477]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  169.288002][ T8477]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.288037][ T8477]  do_sock_setsockopt+0x17c/0x1b0
[  169.288070][ T8477]  __x64_sys_setsockopt+0x13f/0x1b0
[  169.288102][ T8477]  do_syscall_64+0xec/0xf80
[  169.288126][ T8477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.288149][ T8477]  ? trace_irq_disable+0x37/0x100
[  169.288181][ T8477]  ? clear_bhb_loop+0x60/0xb0
[  169.288225][ T8477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.288249][ T8477] RIP: 0033:0x7ff30af8f749
[  169.288283][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.288365][ T8477] RSP: 002b:00007ff30be56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  169.288392][ T8477] RAX: ffffffffffffffda RBX: 00007ff30b1e5fa0 RCX: 00007ff30af8f749
[  169.288410][ T8477] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  169.288424][ T8477] RBP: 00007ff30b013f91 R08: 0000000000000004 R09: 0000000000000000
[  169.288440][ T8477] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.288455][ T8477] R13: 00007ff30b1e6038 R14: 00007ff30b1e5fa0 R15: 00007ffefef4e018
[  169.288493][ T8477]  </TASK>
[  169.288510][ T8477] Mem-Info:
[  169.402824][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.686'.
[  169.419335][ T8477] active_anon:5342 inactive_anon:0 isolated_anon:0
[  169.419335][ T8477]  active_file:2441 inactive_file:39903 isolated_file:0
[  169.419335][ T8477]  unevictable:768 dirty:79 writeback:0
[  169.419335][ T8477]  slab_reclaimable:11043 slab_unreclaimable:101787
[  169.419335][ T8477]  mapped:29192 shmem:1356 pagetables:1119
[  169.419335][ T8477]  sec_pagetables:0 bounce:0
[  169.419335][ T8477]  kernel_misc_reclaimable:0
[  169.419335][ T8477]  free:1321603 free_pcp:13918 free_cma:0
[  169.627101][ T8477] Node 0 active_anon:21368kB inactive_anon:0kB active_file:9764kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116768kB dirty:312kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12916kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.770097][ T8477] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.851484][ T8477] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.893137][ T8477] lowmem_reserve[]: 0 2499 2501 2501 2501
[  169.899040][ T8477] Node 0 DMA32 free:1379596kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21868kB inactive_anon:0kB active_file:9764kB inactive_file:159412kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2559504kB mlocked:0kB bounce:0kB free_pcp:36648kB local_pcp:15732kB free_cma:0kB
[  169.934094][ T8477] lowmem_reserve[]: 0 0 1 1 1
[  169.940868][ T8477] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.981309][ T8477] lowmem_reserve[]: 0 0 0 0 0
[  169.986709][ T8477] Node 1 Normal free:3891344kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:7072kB free_cma:0kB
[  170.074485][ T8477] lowmem_reserve[]: 0 0 0 0 0
[  170.089056][ T8497] netlink: 'syz.4.693': attribute type 1 has an invalid length.
[  170.138618][ T8477] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  170.162255][ T8477] Node 0 DMA32: 1590*4kB (UM) 866*8kB (UME) 262*16kB (UM) 335*32kB (UME) 66*64kB (UME) 23*128kB (UM) 17*256kB (UME) 8*512kB (M) 20*1024kB (UME) 10*2048kB (UM) 316*4096kB (UM) = 1379112kB
[  170.258723][ T8497] 8021q: adding VLAN 0 to HW filter on device bond5
[  170.284809][ T8477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  170.319932][ T8477] Node 1 Normal: 174*4kB (UME) 43*8kB (UME) 38*16kB (UME) 91*32kB (UME) 27*64kB (UME) 8*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891344kB
[  170.342482][ T8477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  170.377374][ T8493] 8021q: adding VLAN 0 to HW filter on device bond5
[  170.386219][ T8493] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  170.398810][ T8493] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  170.422203][ T8477] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.456789][ T8477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  170.484748][ T8515] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[  170.503052][ T8477] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.524620][ T8477] 43696 total pagecache pages
[  170.534516][ T8477] 0 pages in swap cache
[  170.538754][ T8477] Free swap  = 124996kB
[  170.561064][ T8477] Total swap = 124996kB
[  170.565355][ T8477] 2097051 pages RAM
[  170.577050][ T8477] 0 pages HighMem/MovableOnly
[  170.596003][ T8477] 425085 pages reserved
[  170.600256][ T8477] 0 pages cma reserved
[  170.666327][ T8520] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  170.690042][ T8526] __nla_validate_parse: 4 callbacks suppressed
[  170.690062][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  170.741520][ T8520] bond6 (unregistering): Released all slaves
[  170.781115][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'.
[  170.969160][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  170.986648][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  171.062162][ T8540] ieee802154 phy0 wpan0: encryption failed: -22
[  171.204026][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'.
[  171.427876][ T8557] syzkaller0: entered promiscuous mode
[  171.433827][ T8557] syzkaller0: entered allmulticast mode
[  171.725064][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'.
[  171.734641][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'.
[  172.703792][ T8596] netlink: 'syz.2.722': attribute type 4 has an invalid length.
[  173.401700][ T8611] netlink: 'syz.4.725': attribute type 3 has an invalid length.
[  173.404197][ T8612] netlink: 'syz.4.725': attribute type 3 has an invalid length.
[  173.515206][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'.
[  173.557230][ T8616] sctp: [Deprecated]: syz.0.727 (pid 8616) Use of int in max_burst socket option deprecated.
[  173.557230][ T8616] Use struct sctp_assoc_value instead
[  173.702472][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  173.786162][ T8626] netlink: 64 bytes leftover after parsing attributes in process `syz.4.729'.
[  174.012975][ T8634] netlink: 'syz.1.734': attribute type 2 has an invalid length.
[  174.021676][ T8635] netlink: 'syz.4.733': attribute type 7 has an invalid length.
[  174.076398][   T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.092166][ T8635] netlink: 'syz.4.733': attribute type 7 has an invalid length.
[  174.114588][   T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.131560][   T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.158138][   T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.615622][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.849619][ T8676] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  175.207820][ T8690] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  175.240817][ T8690] IPv6: NLM_F_REPLACE set, but no existing node found!
[  177.048630][ T8733] ieee802154 phy0 wpan0: encryption failed: -22
[  177.254449][ T8736] veth5: entered allmulticast mode
[  177.405812][ T8742] netlink: 'syz.4.763': attribute type 1 has an invalid length.
[  177.574282][ T8748] block nbd0: Unsupported socket: should be TCP or UNIX.
[  177.611952][ T8749] block nbd1: Unsupported socket: should be TCP or UNIX.
[  177.655165][ T8748] netlink: 'syz.4.765': attribute type 12 has an invalid length.
[  177.683056][ T8749] netlink: 'syz.4.765': attribute type 12 has an invalid length.
[  177.711594][ T8752] bond6: entered promiscuous mode
[  177.716819][ T8752] bond6: entered allmulticast mode
[  177.727654][ T8752] 8021q: adding VLAN 0 to HW filter on device bond6
[  177.751679][ T8755] x_tables: duplicate underflow at hook 1
[  177.804365][ T8748] bond6: option primary_reselect: invalid value (255)
[  177.826670][ T8748] bond6 (unregistering): Released all slaves
[  177.936513][ T8765] IPVS: set_ctl: invalid protocol: 58 172.20.20.37:20001
[  177.994732][ T8749] bond6: option primary_reselect: invalid value (255)
[  178.013435][ T8749] bond6 (unregistering): Released all slaves
[  178.066394][ T8758] 8021q: VLANs not supported on gre0
[  178.255963][ T8775] Cannot find del_set index 2 as target
[  178.288731][ T8775] __nla_validate_parse: 8 callbacks suppressed
[  178.288752][ T8775] netlink: 148 bytes leftover after parsing attributes in process `syz.0.772'.
[  178.386877][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'.
[  178.403302][ T8777] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  178.423188][ T8777] bond6: (slave lo): Enslaving as a backup interface with an up link
[  178.435272][ T8777] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  178.452070][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[  178.513381][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'.
[  178.524498][ T8790] netlink: 80 bytes leftover after parsing attributes in process `syz.2.776'.
[  178.534276][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'.
[  178.622117][ T5903] IPVS: starting estimator thread 0...
[  178.711175][ T8794] IPVS: using max 27 ests per chain, 64800 per kthread
[  178.792245][ T8804] ipvlan2: entered allmulticast mode
[  178.797634][ T8804] batadv_slave_1: entered allmulticast mode
[  179.455686][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.791'.
[  179.867440][ T8863] syzkaller0: entered promiscuous mode
[  179.875875][ T8863] syzkaller0: entered allmulticast mode
[  179.917874][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  179.932504][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'.
[  179.990518][ T8869] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  180.148271][ T7894] udevd[7894]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  180.393729][ T8893] tipc: Started in network mode
[  180.398705][ T8893] tipc: Node identity 92c40b83ae19, cluster identity 4711
[  180.431385][ T8893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.439742][ T8899] netlink: 'syz.2.807': attribute type 17 has an invalid length.
[  180.448327][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  180.454969][ T8893] syzkaller0: entered promiscuous mode
[  180.466391][ T8893] syzkaller0: entered allmulticast mode
[  180.482312][ T8899] erspan0: entered promiscuous mode
[  180.489600][ T8899] gretap0: entered promiscuous mode
[  180.511951][ T8903] netlink: 'syz.3.806': attribute type 23 has an invalid length.
[  180.521701][ T8893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  180.572180][ T8893] tipc: Resetting bearer <eth:syzkaller0>
[  180.603664][ T8892] tipc: Resetting bearer <eth:syzkaller0>
[  180.641995][ T8892] tipc: Disabling bearer <eth:syzkaller0>
[  180.995085][ T8929] syzkaller0: entered promiscuous mode
[  181.002390][ T8929] syzkaller0: entered allmulticast mode
[  181.784259][ T8980] vlan4: entered allmulticast mode
[  181.790006][ T8980] hsr_slave_1: entered allmulticast mode
[  181.973382][ T8997] openvswitch: netlink: Flow key attr not present in new flow.
[  182.724086][ T9030] netlink: 'syz.2.843': attribute type 5 has an invalid length.
[  182.749558][ T9026] netlink: 'syz.2.843': attribute type 5 has an invalid length.
[  183.368434][ T9055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.434656][ T9059] __nla_validate_parse: 11 callbacks suppressed
[  183.434675][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'.
[  183.699799][ T9080] syzkaller0: entered promiscuous mode
[  183.705548][ T9080] syzkaller0: entered allmulticast mode
[  183.775735][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'.
[  183.802710][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'.
[  183.849878][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'.
[  183.897468][ T9093] netlink: 'syz.0.862': attribute type 4 has an invalid length.
[  183.941814][ T9085] netlink: 'syz.1.861': attribute type 11 has an invalid length.
[  183.952464][ T9085] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.861'.
[  183.954904][ T9095] netlink: 'syz.0.862': attribute type 4 has an invalid length.
[  184.137028][ T9102] syzkaller1: entered promiscuous mode
[  184.147041][ T9102] syzkaller1: entered allmulticast mode
[  184.347658][ T9115] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.354325][ T9116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  184.859977][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  184.904588][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  184.988428][ T9132] netlink: 'syz.4.872': attribute type 32 has an invalid length.
[  184.992850][ T9133] netlink: 'syz.4.872': attribute type 32 has an invalid length.
[  185.018424][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  185.039292][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'.
[  185.095101][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'.
[  185.178763][ T9132] bond7: Setting coupled_control to off (0)
[  185.227918][ T9133] bond8: Setting coupled_control to off (0)
[  185.242360][ T9134] netlink: 'syz.2.871': attribute type 7 has an invalid length.
[  185.499667][ T9165] netlink: 'syz.2.879': attribute type 21 has an invalid length.
[  185.510558][ T9165] atomic_op ffff88807cfbc198 conn xmit_atomic 0000000000000000
[  185.534918][ T9159] syzkaller0: entered promiscuous mode
[  185.542546][ T9159] syzkaller0: entered allmulticast mode
[  185.742470][ T9180] netlink: 'syz.2.885': attribute type 7 has an invalid length.
[  185.756340][ T9180] netlink: 'syz.2.885': attribute type 8 has an invalid length.
[  186.113830][ T9198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.167083][ T9208] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  186.358073][ T9211] netlink: 'syz.1.894': attribute type 21 has an invalid length.
[  187.899379][ T9289] vlan0: Caught tx_queue_len zero misconfig
[  188.112834][ T9295] IPv6: NLM_F_CREATE should be specified when creating new route
[  188.479340][ T9315] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  188.498482][ T9315] bond7: entered promiscuous mode
[  188.507879][ T9315] bond7: entered allmulticast mode
[  188.515865][ T9315] 8021q: adding VLAN 0 to HW filter on device bond7
[  188.536635][ T9319] veth0: entered promiscuous mode
[  188.564344][ T9319] veth0: left promiscuous mode
[  188.628841][ T9327] __nla_validate_parse: 15 callbacks suppressed
[  188.628864][ T9327] netlink: 6 bytes leftover after parsing attributes in process `syz.2.919'.
[  188.762646][ T9327] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004
[  188.892621][ T9351] netlink: 'syz.0.923': attribute type 2 has an invalid length.
[  188.927390][ T9351] �9: entered promiscuous mode
[  189.049945][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.926'.
[  189.065745][ T9354] netlink: 'syz.1.926': attribute type 7 has an invalid length.
[  189.076515][ T9354] netlink: 'syz.1.926': attribute type 8 has an invalid length.
[  189.085912][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'.
[  189.328711][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'.
[  189.478521][ T9375] netlink: 'syz.4.930': attribute type 1 has an invalid length.
[  189.502994][ T9375] netlink: 'syz.4.930': attribute type 4 has an invalid length.
[  189.515554][ T9379] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  189.523054][ T9375] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.930'.
[  189.537655][ T9380] bridge0: port 3(veth0_to_bridge) entered blocking state
[  189.547946][ T9380] bridge0: port 3(veth0_to_bridge) entered disabled state
[  189.557394][ T9380] veth0_to_bridge: entered allmulticast mode
[  189.562045][ T5834] Bluetooth: hci4: command tx timeout
[  189.570192][ T9380] veth0_to_bridge: entered promiscuous mode
[  189.576961][ T9380] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.596979][ T9380] bridge0: port 3(veth0_to_bridge) entered blocking state
[  189.604703][ T9380] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  189.770100][ T9388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.934'.
[  189.788468][ T9388] netlink: 184 bytes leftover after parsing attributes in process `syz.4.934'.
[  189.977194][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'.
[  190.082428][ T9402] pimreg: entered allmulticast mode
[  190.097939][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'.
[  190.208048][ T9404] openvswitch: netlink: Duplicate or invalid key (type 0).
[  190.239232][ T9404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.526792][ T9424] x_tables: duplicate underflow at hook 1
[  190.755108][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[  190.857124][ T9456] netlink: 'syz.1.954': attribute type 62 has an invalid length.
[  191.189947][   T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  191.220498][   T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  191.247162][   T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  191.279850][   T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.683892][ T9489] netlink: 'syz.1.965': attribute type 1 has an invalid length.
[  191.766938][ T9489] bond8: entered promiscuous mode
[  191.778678][ T9489] 8021q: adding VLAN 0 to HW filter on device bond8
[  191.849362][ T9494] vlan2: entered promiscuous mode
[  191.894857][ T9500] bond8: entered allmulticast mode
[  191.977001][ T9489] bond8: (slave bridge4): making interface the new active one
[  191.988659][ T9489] bridge4: entered promiscuous mode
[  192.001700][ T9489] bridge4: entered allmulticast mode
[  192.009673][ T9489] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  192.290342][ T9524] bridge3: entered promiscuous mode
[  192.323575][ T9524] bridge3: entered allmulticast mode
[  192.408971][ T9536] wireguard0: entered promiscuous mode
[  192.448228][ T9536] wireguard0: entered allmulticast mode
[  192.496237][ T9536] team0: Device wireguard0 is of different type
[  192.803876][ T9548] netlink: 'syz.4.984': attribute type 1 has an invalid length.
[  193.548886][ T5903] IPVS: starting estimator thread 0...
[  193.651166][ T9580] IPVS: using max 28 ests per chain, 67200 per kthread
[  193.682046][ T9577] IPVS: ip_vs_edit_dest(): server weight less than zero
[  193.698389][ T9583] __nla_validate_parse: 7 callbacks suppressed
[  193.698412][ T9583] netlink: 340 bytes leftover after parsing attributes in process `syz.2.993'.
[  193.850952][ T9590] veth1_to_bond: entered allmulticast mode
[  193.895868][ T9589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.996'.
[  193.956093][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  194.023280][ T9603] netlink: 'syz.3.999': attribute type 10 has an invalid length.
[  194.025285][ T9602] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  194.045498][ T9604] vxcan1: tx drop: invalid da for name 0x0000000000000003
[  194.068491][ T9587] veth1_to_bond: left allmulticast mode
[  194.129209][ T9607] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  194.141588][ T9607] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1001'.
[  194.153628][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'.
[  194.155795][ T9603] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  194.177746][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'.
[  194.229231][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'.
[  194.526658][ T9619] syzkaller0: entered promiscuous mode
[  194.533203][ T9619] syzkaller0: entered allmulticast mode
[  194.681764][ T9629] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1008'.
[  194.691915][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1008'.
[  195.181687][ T9644] netlink: 'syz.1.1014': attribute type 83 has an invalid length.
[  195.273065][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fd01000: rx timeout, send abort
[  195.286528][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802fd01000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  195.716072][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'.
[  196.728519][ T9722] syzkaller0: entered promiscuous mode
[  196.734875][ T9722] syzkaller0: entered allmulticast mode
[  197.095182][ T9733] netlink: 'syz.4.1039': attribute type 1 has an invalid length.
[  197.179094][ T9733] bond10: entered promiscuous mode
[  197.192843][ T9733] bond10: entered allmulticast mode
[  197.203469][ T9733] 8021q: adding VLAN 0 to HW filter on device bond10
[  197.319447][ T9742] xt_TCPMSS: Only works on TCP SYN packets
[  197.502403][ T9753] netlink: 'syz.1.1045': attribute type 83 has an invalid length.
[  197.901701][ T9769] bond9: Invalid ad_actor_system MAC address.
[  197.911253][ T9769] bond9: option ad_actor_system: invalid value (1)
[  197.938792][ T9769] bond9 (unregistering): Released all slaves
[  198.054468][ T9774] netlink: 'syz.3.1052': attribute type 6 has an invalid length.
[  198.186427][ T9788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  198.444596][ T9802] syzkaller0: entered promiscuous mode
[  198.450672][ T9802] syzkaller0: entered allmulticast mode
[  199.072991][ T9819] syzkaller1: entered promiscuous mode
[  199.079746][ T9819] syzkaller1: entered allmulticast mode
[  199.314848][ T9832] netlink: 'syz.3.1069': attribute type 8 has an invalid length.
[  199.795110][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.819674][ T9866] __nla_validate_parse: 7 callbacks suppressed
[  199.819698][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  199.855684][ T9866] veth0_to_bridge: left allmulticast mode
[  199.863185][ T9866] veth0_to_bridge: left promiscuous mode
[  199.873161][ T9868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'.
[  199.923486][ T9866] bridge0: port 3(veth0_to_bridge) entered disabled state
[  200.043831][ T9878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1080'.
[  200.164820][ T9866] bridge_slave_1: left allmulticast mode
[  200.176662][ T9866] bridge_slave_1: left promiscuous mode
[  200.184678][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.198987][ T9866] bridge_slave_0: left promiscuous mode
[  200.220664][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.995283][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1090'.
[  201.168063][ T9928] xt_hashlimit: overflow, rate too high: 0
[  201.490419][ T9942] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  201.523821][ T9944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1098'.
[  201.547892][ T9940] netlink: 'syz.0.1097': attribute type 11 has an invalid length.
[  201.557706][ T9940] netlink: 'syz.0.1097': attribute type 4 has an invalid length.
[  201.576944][ T9940] netlink: 'syz.0.1097': attribute type 5 has an invalid length.
[  201.612636][ T9940] netlink: 'syz.0.1097': attribute type 6 has an invalid length.
[  201.669993][ T9940] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1097'.
[  201.716835][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'.
[  201.816409][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1101'.
[  201.976883][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1103'.
[  202.192691][ T9976] netlink: 'syz.0.1103': attribute type 1 has an invalid length.
[  202.213261][ T9976] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1103'.
[  202.480829][ T9990] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  202.809300][T10007] C: renamed from lo
[  202.882792][T10007] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  203.132281][T10015] veth1_macvtap: left promiscuous mode
[  203.148887][T10015] macsec0: entered promiscuous mode
[  203.167205][T10015] macsec0: entered allmulticast mode
[  203.190981][T10016] macsec0: left allmulticast mode
[  203.651655][T10034] openvswitch: netlink: Duplicate key (type 1).
[  203.777390][T10034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.821393][T10034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.081145][T10034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.112245][T10034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.162814][T10056] netlink: 'syz.0.1129': attribute type 3 has an invalid length.
[  204.236865][T10034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.248878][T10034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.375651][T10034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.390423][T10034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.727542][   T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.754815][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.843435][   T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.858045][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.887875][T10092] __nla_validate_parse: 8 callbacks suppressed
[  204.887898][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'.
[  204.938632][T10092] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1141'.
[  204.991672][ T1140] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.010006][ T1140] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.066096][ T6678] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.091831][ T6678] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.342917][T10118] block nbd0: Unsupported socket: should be TCP or UNIX.
[  205.466597][T10122] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1151'.
[  205.600063][T10137] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1156'.
[  205.625889][T10137] vlan2: entered allmulticast mode
[  205.662084][T10137] gretap0: entered allmulticast mode
[  206.367556][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'.
[  206.814978][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'.
[  206.847939][T10195] netlink: 'syz.1.1176': attribute type 1 has an invalid length.
[  206.946904][T10205] veth7: entered promiscuous mode
[  206.966334][T10209] nft_compat: unsupported protocol 0
[  207.233357][T10195] 8021q: adding VLAN 0 to HW filter on device bond9
[  207.292124][T10211] vlan2: entered allmulticast mode
[  207.297630][T10211] bond9: entered allmulticast mode
[  207.526876][T10228] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  207.560249][T10228] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  207.582308][T10228] 8021q: adding VLAN 0 to HW filter on device bond2
[  207.590323][T10238] netlink: 'syz.4.1186': attribute type 4 has an invalid length.
[  207.601958][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1186'.
[  207.797529][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.860192][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.879414][T10252] netlink: 'syz.2.1191': attribute type 10 has an invalid length.
[  207.975202][T10252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.011918][T10252] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  208.219173][T10271] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1194'.
[  208.252973][T10274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'.
[  208.448872][T10290] netlink: 'syz.0.1201': attribute type 8 has an invalid length.
[  208.473092][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'.
[  208.586747][T10300] netlink: 'syz.0.1201': attribute type 1 has an invalid length.
[  208.716422][T10308] delete_channel: no stack
[  208.967666][T10328] netlink: 'syz.2.1209': attribute type 29 has an invalid length.
[  209.079261][T10331] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  209.114862][T10331] netlink: 'syz.3.1210': attribute type 3 has an invalid length.
[  209.170234][T10331] NCSI netlink: No device for ifindex 813332851
[  209.256512][T10338] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  209.404789][T10340] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  209.417927][T10340] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  209.429752][T10340] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  209.613898][T10357] netlink: 'syz.1.1219': attribute type 1 has an invalid length.
[  209.686951][T10357] netlink: 'syz.1.1219': attribute type 2 has an invalid length.
[  209.960551][T10366] team0 (unregistering): Port device team_slave_0 removed
[  209.971580][T10366] team0 (unregistering): Port device team_slave_1 removed
[  210.310696][T10400] __nla_validate_parse: 6 callbacks suppressed
[  210.310793][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  210.346448][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1230'.
[  210.436611][T10408] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1233'.
[  210.507128][T10416] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1232'.
[  210.537122][T10416] NCSI netlink: No device for ifindex 813332851
[  210.651719][T10426] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1238'.
[  210.804477][T10435] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  210.835853][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'.
[  210.865888][T10442] xt_cluster: node mask cannot exceed total number of nodes
[  210.916771][T10440] syzkaller0: entered promiscuous mode
[  210.953703][T10440] syzkaller0: entered allmulticast mode
[  211.372558][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1251'.
[  211.400273][T10470] nbd: must specify at least one socket
[  211.621908][T10473] veth7: entered allmulticast mode
[  211.753224][T10488] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1258'.
[  211.793787][T10493] tipc: Failed to remove unknown binding: 66,0,0/0:2654701937/2654701938
[  211.813172][T10493] tipc: Failed to remove unknown binding: 66,0,0/0:2654701937/2654701938
[  211.852813][T10493] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1257'.
[  211.888175][T10498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'.
[  212.114909][ T5147] Bluetooth: hci2: command 0x0406 tx timeout
[  212.123802][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout
[  212.131248][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  212.138123][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  212.157998][T10511] syzkaller0: entered promiscuous mode
[  212.165366][T10511] syzkaller0: entered allmulticast mode
[  212.417381][T10516] bond11: Unable to set down delay as MII monitoring is disabled
[  212.438054][T10527] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002
[  212.450528][T10516] bond11 (unregistering): Released all slaves
[  212.774862][T10544] validate_nla: 9 callbacks suppressed
[  212.774886][T10544] netlink: 'syz.1.1273': attribute type 10 has an invalid length.
[  212.806925][T10544] team0: Device veth1_macvtap failed to register rx_handler
[  212.840538][T10542] netlink: 'syz.0.1271': attribute type 4 has an invalid length.
[  212.913984][T10550] xt_l2tp: invalid flags combination: 8
[  213.564067][T10591] netlink: 'syz.2.1284': attribute type 2 has an invalid length.
[  213.583831][T10591] �9: entered promiscuous mode
[  214.344712][T10622] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.467402][T10633] netlink: 'syz.0.1300': attribute type 39 has an invalid length.
[  214.529243][T10637] openvswitch: netlink: IP tunnel dst address not specified
[  214.995839][T10669] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[  215.226055][T10680] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  215.341266][T10687] netlink: 'syz.3.1314': attribute type 9 has an invalid length.
[  215.358073][T10687] netlink: 'syz.3.1314': attribute type 11 has an invalid length.
[  215.367563][T10687] netlink: 'syz.3.1314': attribute type 12 has an invalid length.
[  215.375700][T10687] __nla_validate_parse: 15 callbacks suppressed
[  215.375721][T10687] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1314'.
[  215.433434][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'.
[  215.532477][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1319'.
[  215.683739][T10701] netlink: 'syz.2.1321': attribute type 8 has an invalid length.
[  215.742202][T10706] 

: renamed from veth0_to_bridge
[  215.978265][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'.
[  216.000311][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'.
[  216.020412][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1327'.
[  216.117664][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1326'.
[  216.133596][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1326'.
[  216.143185][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1326'.
[  216.161688][T10726] openvswitch: netlink: IP tunnel dst address not specified
[  216.191809][T10727] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1328'.
[  217.050025][T10766] netlink: 'syz.3.1335': attribute type 5 has an invalid length.
[  217.069638][T10766] netlink: 'syz.3.1335': attribute type 6 has an invalid length.
[  217.322636][T10782] syzkaller0: entered promiscuous mode
[  217.328434][T10782] syzkaller0: entered allmulticast mode
[  217.416334][T10793] openvswitch: netlink: IP tunnel dst address not specified
[  218.014139][T10809] pim6reg: entered allmulticast mode
[  218.213234][T10821] validate_nla: 2 callbacks suppressed
[  218.213253][T10821] netlink: 'syz.4.1349': attribute type 4 has an invalid length.
[  218.238754][T10819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.404987][T10830] tipc: Started in network mode
[  218.409950][T10830] tipc: Node identity 663239c6885a, cluster identity 4711
[  218.466343][T10830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.484441][T10832] syzkaller0: entered promiscuous mode
[  218.490043][T10832] syzkaller0: entered allmulticast mode
[  218.569808][T10844] netlink: 'syz.3.1356': attribute type 1 has an invalid length.
[  218.579295][T10830] tipc: Resetting bearer <eth:syzkaller0>
[  218.622233][T10828] tipc: Resetting bearer <eth:syzkaller0>
[  218.665065][T10828] tipc: Disabling bearer <eth:syzkaller0>
[  218.919438][T10858] netlink: 'syz.4.1360': attribute type 3 has an invalid length.
[  219.064661][T10865] sctp: [Deprecated]: syz.1.1364 (pid 10865) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.064661][T10865] Use struct sctp_sack_info instead
[  219.221346][T10879] netlink: 'syz.2.1367': attribute type 11 has an invalid length.
[  219.548271][T10897] netlink: 'syz.3.1373': attribute type 1 has an invalid length.
[  219.709995][T10901] bond4: (slave gretap1): making interface the new active one
[  219.744608][T10901] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  219.789643][T10909] netlink: 'syz.2.1377': attribute type 16 has an invalid length.
[  219.797887][T10909] netlink: 'syz.2.1377': attribute type 17 has an invalid length.
[  219.858314][T10909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.014704][T10917] sctp: [Deprecated]: syz.1.1379 (pid 10917) Use of int in max_burst socket option deprecated.
[  220.014704][T10917] Use struct sctp_assoc_value instead
[  220.051584][T10917] sctp: [Deprecated]: syz.1.1379 (pid 10917) Use of int in max_burst socket option deprecated.
[  220.051584][T10917] Use struct sctp_assoc_value instead
[  220.069709][T10922] IPVS: ip_vs_add_dest(): server weight less than zero
[  220.112197][T10927] delete_channel: no stack
[  220.391419][T10946] __nla_validate_parse: 23 callbacks suppressed
[  220.391440][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'.
[  220.422776][T10950] netlink: 'syz.3.1389': attribute type 1 has an invalid length.
[  220.430753][T10950] netlink: 'syz.3.1389': attribute type 2 has an invalid length.
[  220.461749][T10954] openvswitch: netlink: VXLAN extension 51 out of range max 1
[  220.479193][T10950] netlink: 'syz.3.1389': attribute type 1 has an invalid length.
[  220.511076][T10950] netlink: 'syz.3.1389': attribute type 3 has an invalid length.
[  220.519493][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'.
[  220.704989][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'.
[  220.728487][T10963] syzkaller0: entered promiscuous mode
[  220.734107][T10963] syzkaller0: entered allmulticast mode
[  220.783954][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1394'.
[  220.874768][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'.
[  220.895527][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'.
[  221.092667][T10986] syzkaller1: entered promiscuous mode
[  221.106833][T10990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'.
[  221.116177][T10986] syzkaller1: entered allmulticast mode
[  221.405983][T11007] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1406'.
[  221.551934][    C0] 
[  221.554353][    C0] ======================================================
[  221.561518][    C0] WARNING: possible circular locking dependency detected
[  221.568680][    C0] syzkaller #0 Not tainted
[  221.573140][    C0] ------------------------------------------------------
[  221.580202][    C0] syz.0.1409/11008 is trying to acquire lock:
[  221.586330][    C0] ffff88807d450f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  221.595513][    C0] 
[  221.595513][    C0] but task is already holding lock:
[  221.603015][    C0] ffff88802e9c8158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  221.613007][    C0] 
[  221.613007][    C0] which lock already depends on the new lock.
[  221.613007][    C0] 
[  221.623453][    C0] 
[  221.623453][    C0] the existing dependency chain (in reverse order) is:
[  221.632590][    C0] 
[  221.632590][    C0] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  221.640909][    C0]        _raw_spin_lock+0x2e/0x40
[  221.646068][    C0]        sch_direct_xmit+0x153/0x4b0
[  221.651401][    C0]        __dev_queue_xmit+0x1379/0x31c0
[  221.656989][    C0]        hsr_forward_skb+0x158b/0x2860
[  221.662506][    C0]        send_hsr_supervision_frame+0x731/0xcb0
[  221.668791][    C0]        hsr_announce+0x1d5/0x360
[  221.673857][    C0]        call_timer_fn+0x16e/0x590
[  221.679086][    C0]        __run_timer_base+0x61a/0x860
[  221.684488][    C0]        run_timer_softirq+0xb7/0x180
[  221.689896][    C0]        handle_softirqs+0x22b/0x7c0
[  221.695228][    C0]        __irq_exit_rcu+0x60/0x150
[  221.700467][    C0]        irq_exit_rcu+0x9/0x30
[  221.705443][    C0]        sysvec_apic_timer_interrupt+0xa6/0xc0
[  221.711634][    C0]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.718253][    C0]        folio_mark_accessed+0x10c/0x8b0
[  221.723921][    C0]        unmap_page_range+0x1c42/0x4170
[  221.729505][    C0]        unmap_vmas+0x399/0x580
[  221.734387][    C0]        exit_mmap+0x239/0xb10
[  221.739215][    C0]        __mmput+0x118/0x430
[  221.744021][    C0]        exit_mm+0x169/0x230
[  221.748919][    C0]        do_exit+0x627/0x22f0
[  221.753736][    C0]        do_group_exit+0x21c/0x2d0
[  221.758882][    C0]        get_signal+0x1285/0x1340
[  221.764129][    C0]        arch_do_signal_or_restart+0x9a/0x7a0
[  221.770236][    C0]        exit_to_user_mode_loop+0x87/0x4e0
[  221.776076][    C0]        do_syscall_64+0x2c1/0xf80
[  221.781326][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.787794][    C0] 
[  221.787794][    C0] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  221.795571][    C0]        __lock_acquire+0x15a6/0x2cf0
[  221.800988][    C0]        lock_acquire+0x107/0x340
[  221.806042][    C0]        _raw_spin_lock_bh+0x36/0x50
[  221.811381][    C0]        hsr_dev_xmit+0x237/0x360
[  221.816444][    C0]        dev_hard_start_xmit+0x2cd/0x800
[  221.822112][    C0]        __dev_queue_xmit+0x149d/0x31c0
[  221.827693][    C0]        ip_finish_output2+0xbb6/0x1000
[  221.833281][    C0]        iptunnel_xmit+0x5f8/0xa90
[  221.838615][    C0]        ip_tunnel_xmit+0x1c41/0x2390
[  221.844205][    C0]        __gre_xmit+0x19a/0x240
[  221.849091][    C0]        erspan_xmit+0xa04/0x1220
[  221.854146][    C0]        dev_hard_start_xmit+0x2cd/0x800
[  221.859827][    C0]        sch_direct_xmit+0x241/0x4b0
[  221.865144][    C0]        __dev_queue_xmit+0x1379/0x31c0
[  221.870831][    C0]        ip6_output+0x340/0x550
[  221.875804][    C0]        ndisc_send_skb+0xbce/0x1510
[  221.881159][    C0]        addrconf_rs_timer+0x369/0x6a0
[  221.886837][    C0]        call_timer_fn+0x16e/0x590
[  221.891985][    C0]        __run_timer_base+0x61a/0x860
[  221.897574][    C0]        run_timer_softirq+0xb7/0x180
[  221.903065][    C0]        handle_softirqs+0x22b/0x7c0
[  221.908446][    C0]        __irq_exit_rcu+0x60/0x150
[  221.913718][    C0]        irq_exit_rcu+0x9/0x30
[  221.918610][    C0]        sysvec_apic_timer_interrupt+0xa6/0xc0
[  221.924981][    C0]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.931540][    C0]        __sanitizer_cov_trace_pc+0x0/0x70
[  221.937381][    C0]        folio_remove_rmap_ptes+0x1b0/0x1060
[  221.943605][    C0]        unmap_page_range+0x1e1b/0x4170
[  221.949197][    C0]        unmap_vmas+0x399/0x580
[  221.954111][    C0]        exit_mmap+0x239/0xb10
[  221.959014][    C0]        __mmput+0x118/0x430
[  221.963728][    C0]        exit_mm+0x169/0x230
[  221.968356][    C0]        do_exit+0x627/0x22f0
[  221.973070][    C0]        do_group_exit+0x21c/0x2d0
[  221.978218][    C0]        __x64_sys_exit_group+0x3f/0x40
[  221.983892][    C0]        __pfx_syscall_get_nr+0x0/0x10
[  221.989649][    C0]        do_syscall_64+0xec/0xf80
[  221.994711][    C0]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.001171][    C0] 
[  222.001171][    C0] other info that might help us debug this:
[  222.001171][    C0] 
[  222.011445][    C0]  Possible unsafe locking scenario:
[  222.011445][    C0] 
[  222.019099][    C0]        CPU0                    CPU1
[  222.024495][    C0]        ----                    ----
[  222.030147][    C0]   lock(&qdisc_xmit_lock_key#4);
[  222.035537][    C0]                                lock(&hsr->seqnr_lock);
[  222.042617][    C0]                                lock(&qdisc_xmit_lock_key#4);
[  222.050481][    C0]   lock(&hsr->seqnr_lock);
[  222.055015][    C0] 
[  222.055015][    C0]  *** DEADLOCK ***
[  222.055015][    C0] 
[  222.063189][    C0] 12 locks held by syz.0.1409/11008:
[  222.068698][    C0]  #0: ffff88807da2b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x126/0xb10
[  222.078163][    C0]  #1: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x240
[  222.087953][    C0]  #2: ffff888030b418b8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210
[  222.098974][    C0]  #3: ffffc90000007ce0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x590
[  222.108598][    C0]  #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510
[  222.118333][    C0]  #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  222.127545][    C0]  #6: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0
[  222.137644][    C0]  #7: ffff8880502c4228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb9/0x31c0
[  222.150432][    C0]  #8: ffff88802e9c8158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  222.160956][    C0]  #9: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0x1000
[  222.170766][    C0]  #10: ffffffff8df41b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x31c0
[  222.180931][    C0]  #11: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  222.190255][    C0] 
[  222.190255][    C0] stack backtrace:
[  222.196192][    C0] CPU: 0 UID: 0 PID: 11008 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT(full) 
[  222.196218][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.196230][    C0] Call Trace:
[  222.196240][    C0]  <IRQ>
[  222.196249][    C0]  dump_stack_lvl+0xe8/0x150
[  222.196278][    C0]  print_circular_bug+0x2e2/0x300
[  222.196329][    C0]  check_noncircular+0x12e/0x150
[  222.196354][    C0]  __lock_acquire+0x15a6/0x2cf0
[  222.196375][    C0]  ? lock_release+0x4b/0x3b0
[  222.196392][    C0]  ? __pfx_skb_network_protocol+0x10/0x10
[  222.196417][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  222.196445][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  222.196473][    C0]  ? hsr_dev_xmit+0x237/0x360
[  222.196497][    C0]  lock_acquire+0x107/0x340
[  222.196513][    C0]  ? hsr_dev_xmit+0x237/0x360
[  222.196546][    C0]  ? hsr_dev_xmit+0x237/0x360
[  222.196567][    C0]  _raw_spin_lock_bh+0x36/0x50
[  222.196594][    C0]  ? hsr_dev_xmit+0x237/0x360
[  222.196616][    C0]  hsr_dev_xmit+0x237/0x360
[  222.196637][    C0]  ? hsr_dev_xmit+0x2d/0x360
[  222.196660][    C0]  dev_hard_start_xmit+0x2cd/0x800
[  222.196690][    C0]  __dev_queue_xmit+0x149d/0x31c0
[  222.196718][    C0]  ? __dev_queue_xmit+0x289/0x31c0
[  222.196746][    C0]  ? neigh_connected_output+0x1ea/0x460
[  222.196765][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  222.196791][    C0]  ? neigh_connected_output+0x1ea/0x460
[  222.196810][    C0]  ? eth_header+0x11b/0x200
[  222.196844][    C0]  ? __asan_memcpy+0x40/0x70
[  222.196883][    C0]  ip_finish_output2+0xbb6/0x1000
[  222.196905][    C0]  ? ip_skb_dst_mtu+0x917/0xb70
[  222.196924][    C0]  ? ip_finish_output2+0x3d0/0x1000
[  222.196944][    C0]  ? ip_finish_output+0x33a/0x3f0
[  222.196963][    C0]  iptunnel_xmit+0x5f8/0xa90
[  222.196998][    C0]  ip_tunnel_xmit+0x1c41/0x2390
[  222.197032][    C0]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  222.197053][    C0]  ? gre_build_header+0x31c/0xa40
[  222.197077][    C0]  ? __pfx_gre_build_header+0x10/0x10
[  222.197098][    C0]  ? skb_network_protocol+0x508/0x760
[  222.197124][    C0]  __gre_xmit+0x19a/0x240
[  222.197144][    C0]  ? __pfx___gre_xmit+0x10/0x10
[  222.197163][    C0]  ? iptunnel_handle_offloads+0x2fd/0x630
[  222.197194][    C0]  erspan_xmit+0xa04/0x1220
[  222.197221][    C0]  ? __pfx_erspan_xmit+0x10/0x10
[  222.197247][    C0]  dev_hard_start_xmit+0x2cd/0x800
[  222.197276][    C0]  sch_direct_xmit+0x241/0x4b0
[  222.197297][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  222.197318][    C0]  __dev_queue_xmit+0x1379/0x31c0
[  222.197345][    C0]  ? __dev_queue_xmit+0x289/0x31c0
[  222.197375][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  222.197401][    C0]  ? ip6_output+0x340/0x550
[  222.197419][    C0]  ? lock_acquire+0x107/0x340
[  222.197435][    C0]  ? ip6_output+0x340/0x550
[  222.197459][    C0]  ? ip6_finish_output2+0xe7e/0x1360
[  222.197486][    C0]  ? ip6_output+0x126/0x550
[  222.197504][    C0]  ip6_output+0x340/0x550
[  222.197533][    C0]  ndisc_send_skb+0xbce/0x1510
[  222.197562][    C0]  ? ndisc_send_skb+0x1e4/0x1510
[  222.197588][    C0]  ? kmem_cache_alloc_noprof+0x6b1/0x710
[  222.197618][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  222.197646][    C0]  ? __pfx_dst_output+0x10/0x10
[  222.197682][    C0]  addrconf_rs_timer+0x369/0x6a0
[  222.197708][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.197731][    C0]  ? do_raw_spin_lock+0x121/0x290
[  222.197759][    C0]  call_timer_fn+0x16e/0x590
[  222.197780][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.197803][    C0]  ? call_timer_fn+0xbe/0x590
[  222.197822][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  222.197847][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.197873][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.197898][    C0]  __run_timer_base+0x61a/0x860
[  222.197921][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  222.197937][    C0]  ? clockevents_program_event+0x247/0x350
[  222.197960][    C0]  ? sched_clock_cpu+0x74/0x430
[  222.197981][    C0]  run_timer_softirq+0xb7/0x180
[  222.198000][    C0]  handle_softirqs+0x22b/0x7c0
[  222.198020][    C0]  ? __irq_exit_rcu+0x60/0x150
[  222.198041][    C0]  __irq_exit_rcu+0x60/0x150
[  222.198059][    C0]  irq_exit_rcu+0x9/0x30
[  222.198088][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  222.198105][    C0]  </IRQ>
[  222.198110][    C0]  <TASK>
[  222.198116][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.198136][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70
[  222.198160][    C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 54 0e da 0b 48 89 de 5b e9 b3 fb 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 10 80 92 65 8b 15 58 18
[  222.198175][    C0] RSP: 0018:ffffc9001ad77600 EFLAGS: 00000283
[  222.198198][    C0] RAX: 0000000000000000 RBX: ffffea0001a5f140 RCX: ffff888053825b80
[  222.198211][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  222.198221][    C0] RBP: 0000000000000001 R08: ffffea0001a5f147 R09: 1ffffd400034be28
[  222.198233][    C0] R10: dffffc0000000000 R11: fffff9400034be29 R12: 0000000000000040
[  222.198245][    C0] R13: ffffea0001a5f180 R14: ffffea0001a5f140 R15: ffffea0001a5f140
[  222.198265][    C0]  folio_remove_rmap_ptes+0x1b0/0x1060
[  222.198288][    C0]  ? page_table_check_clear+0x4b8/0x5f0
[  222.198304][    C0]  ? page_table_check_clear+0x144/0x5f0
[  222.198322][    C0]  unmap_page_range+0x1e1b/0x4170
[  222.198354][    C0]  ? mas_next_slot+0xc20/0xcf0
[  222.198373][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  222.198394][    C0]  ? mas_find+0xb0e/0xd30
[  222.198409][    C0]  ? unmap_vmas+0x144/0x580
[  222.198428][    C0]  unmap_vmas+0x399/0x580
[  222.198450][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  222.198477][    C0]  exit_mmap+0x239/0xb10
[  222.198505][    C0]  ? uprobe_clear_state+0x20f/0x290
[  222.198614][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  222.198646][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  222.198671][    C0]  ? __pfx_exit_aio+0x10/0x10
[  222.198700][    C0]  ? uprobe_clear_state+0x27c/0x290
[  222.198720][    C0]  __mmput+0x118/0x430
[  222.198738][    C0]  exit_mm+0x169/0x230
[  222.198763][    C0]  do_exit+0x627/0x22f0
[  222.198795][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  222.198824][    C0]  ? __pfx_do_exit+0x10/0x10
[  222.198847][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  222.198865][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  222.198884][    C0]  do_group_exit+0x21c/0x2d0
[  222.198912][    C0]  __x64_sys_exit_group+0x3f/0x40
[  222.198937][    C0]  x64_sys_call+0x2210/0x2210
[  222.198961][    C0]  do_syscall_64+0xec/0xf80
[  222.198980][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.199002][    C0]  ? trace_irq_disable+0x37/0x100
[  222.199032][    C0]  ? clear_bhb_loop+0x60/0xb0
[  222.199051][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.199069][    C0] RIP: 0033:0x7f553718f749
[  222.199085][    C0] Code: Unable to access opcode bytes at 0x7f553718f71f.
[  222.199094][    C0] RSP: 002b:00007ffeb7fa2cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  222.199114][    C0] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f553718f749
[  222.199127][    C0] RDX: 00007f5537146c47 RSI: 0000000000000000 RDI: 000000000000000b
[  222.199138][    C0] RBP: 0000000000000003 R08: 00007ffeb7fa3197 R09: 000000000000000b
[  222.199153][    C0] R10: 00007f55373e5fa0 R11: 0000000000000246 R12: 00007f55373e627c
[  222.199165][    C0] R13: 00007f55373e6270 R14: 0000000000001ab5 R15: 0000000000000005
[  222.199184][    C0]  </TASK>
[  222.979213][T11030] openvswitch: netlink: Message has -2 unknown bytes.
[  222.988879][T11030] openvswitch: netlink: Message has -2 unknown bytes.
[  223.130497][T11028] bond5: option primary_reselect: invalid value (255)
[  223.144109][T11028] bond5 (unregistering): Released all slaves
[  223.160282][ T6678] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.168886][ T6678] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.177823][ T6678] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.187111][ T6678] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.196387][ T6678] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.205520][ T6678] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.214313][ T6678] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.223246][ T6678] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0