last executing test programs:

3.794512389s ago: executing program 2 (id=730):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000206608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
sendmmsg(r2, &(0x7f0000009100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0}}], 0x2, 0x24008094)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000280)=0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r3=>0x0})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e020000000000000c000000001000000001004f", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000003000000040000000f00"/28], 0x50)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0)

3.204106171s ago: executing program 1 (id=740):
r0 = socket$inet(0x2, 0x3, 0x30)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x1}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001800c000280040001003a0000002c00018014000300fc02000000000000000000000000000014000400ff0200000000000000000000000000010c0019800800010049"], 0x5c}}, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000100), 0x120)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x80000000, 0x4}, 0x80, 0x0}, 0x24044051)
r3 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10, 0x80000)
getsockopt$inet_mreqsrc(r3, 0x0, 0x26, 0x0, &(0x7f0000000380))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4044000)
r5 = socket(0x18, 0x0, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'pim6reg\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x3, 0x5a, "0cd74d8377ba96586ac5954cd411b49eda4dd3b634b85aed8f89dac17180280946f917fb8c4bc11b5a6a7514da8e2379f8d4464527b5cf75c32d4bf6fec5c66f60260737b3665976e98d92509e71c6bb828ef2895097b8dde043"}})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'xfrm0\x00', 0x100})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000008000069104e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

2.81181238s ago: executing program 2 (id=744):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x1}, 0x10)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x30)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x4000010, r0, 0xdf1a2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000004000000000001018360000030000000000000000000000950000000000f05d"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)

2.717396235s ago: executing program 1 (id=745):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x7, 0x4000010, 0xffffffffffffffff, 0x5b7eb000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r2)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x90) (async)
ioctl$int_out(r2, 0x5460, &(0x7f0000000480)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000810)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', <r5=>r3, 0x29, 0x0, 0x1, 0x80000000, 0x8, @local, @mcast1, 0x80b7, 0x700, 0xaa58, 0x1}})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000740)={@mcast1, 0x59, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r7=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0xb00, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
syz_genetlink_get_family_id$fou(&(0x7f0000000900), 0xffffffffffffffff) (async, rerun: 32)
sendmsg$FOU_CMD_GET(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (rerun: 32)
r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r8) (async)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000020ce18e6562b69548f6fda545393681a11569235ffb4982104e092127240d2cffe7c7099959bcb26ac273d0d", @ANYRESOCT=r8, @ANYBLOB="01002dbd7000ffdbdf257000000008000300", @ANYRES64=r5, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64)
r9 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="6648b9bde237c4dba86631d1edf46d1b", 0x10}], 0x1}], 0x1, 0xc041) (async, rerun: 64)
recvmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/13, 0xd}], 0x1}, 0x10042) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40280d5}, 0x8) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) (rerun: 64)

2.35398232s ago: executing program 4 (id=749):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001000)={'virt_wifi0\x00', 0x400}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001000)={'virt_wifi0\x00', 0x400})
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
unshare(0x22020600)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x400)
bind$inet(r1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8c"}]}], {0x14}}, 0x70}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8c"}]}], {0x14}}, 0x70}}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f0000000700)="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", 0x116}], 0x2}], 0x1, 0x40800)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.167106278s ago: executing program 1 (id=751):
r0 = socket$inet(0x2, 0x1, 0x400000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000004900040000000000fbdbdf252d0080e000000000000000c9b587309df8760c5eaa490800ae00a12769888321359c5f0a052792811fe366", @ANYRES32=r2, @ANYBLOB="e7cef61e7acfd9ba774501e1d21b825a98eabe656b0a6d0c25ecdcd5e9e2504e63e9604fcd586afc391c07005f0029250000"], 0x60}}, 0x20048800)

2.063448911s ago: executing program 4 (id=753):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
unshare(0x400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}}, 0x0)
unshare(0x80)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x48}}, 0x0)

2.046593955s ago: executing program 1 (id=754):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvfrom(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2, &(0x7f0000001080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x80)
listen(r0, 0x97)

1.808053212s ago: executing program 0 (id=756):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r4, 0x48, 0x30}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7b9, 0xffffffff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040084)
sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x100, 0x9, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001d0029bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010001d0029bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r12)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r13 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r13, 0x1, 0x26, 0x0, &(0x7f0000000140))
ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f00000001c0)=0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x3, 0x4e20, 0x5, 0xa, 0xa0, 0xa0, 0x2f, r11}, {0x6, 0x7, 0x3, 0x7, 0xe79, 0x7, 0x400, 0x5}, {0x3, 0x2, 0xb, 0x7}, 0x7, 0x6e6bba, 0x0, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0xff}, 0x2, @in6=@private1, 0x0, 0x4, 0x3, 0x4, 0x1, 0x2, 0x9}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x3, 0x4e20, 0x5, 0xa, 0xa0, 0xa0, 0x2f, r11}, {0x6, 0x7, 0x3, 0x7, 0xe79, 0x7, 0x400, 0x5}, {0x3, 0x2, 0xb, 0x7}, 0x7, 0x6e6bba, 0x0, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0xff}, 0x2, @in6=@private1, 0x0, 0x4, 0x3, 0x4, 0x1, 0x2, 0x9}}, 0xe8)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d"], 0x5c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="eae97148bf0a57c9180180485c11964016", @ANYRES16=r1, @ANYBLOB="030303000000fbdbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1.449958928s ago: executing program 2 (id=758):
r0 = socket(0x2a, 0x2, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
unshare(0x28000600)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000cc0)={0x340, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71fcb0a5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f5f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6194}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x79}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @remote, 0x2b}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x703}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5831}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40, @local, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtclass={0x50, 0x28, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0x2}, {0xfff2, 0xe}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xd3df}}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb6}}, @TCA_RATE={0x6, 0x5, {0x31, 0xba}}]}, 0x50}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r4, 0x0, 0xd88d02a0}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2, 0x6}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x74}}, 0x40801)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001580)={r6, 0x0, "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", "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"})
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)

1.42743969s ago: executing program 0 (id=759):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x3, 0x1, 0x3, 0x5}, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x8000000010)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e22, 0x80, @private0, 0x2}}, 0x0, 0x0, 0x5, 0x0, "f22adbd670f94ea0043309ff8e49674bede1e76272742cb0292cff52628f9a582897335ecae9fc1c6b733c3181f805d2120da2fab006513414bd42b9d525c1cb2a1968061ebcff73c7193906f4a08dc9"}, 0xd8)
sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES64=r0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x8891}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.290133806s ago: executing program 4 (id=761):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}], 0x1, 0x0) (async)
sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}], 0x1, 0x0)
recvfrom(r2, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110720000000000050000000000010095000000000000004318e8824fa7458d86651246319c34f3e79ddda3f5ab3c48c3c0121450f7bcdb60d6a351e26c657bbf976b79da827a6238c16854acfcd68e634b141113e45687a518174d641b7d94e99143545a205c43b391142dad28126697bb1c5a3db79e8c8d70783378a90ed993a98c4071dab144a246"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110720000000000050000000000010095000000000000004318e8824fa7458d86651246319c34f3e79ddda3f5ab3c48c3c0121450f7bcdb60d6a351e26c657bbf976b79da827a6238c16854acfcd68e634b141113e45687a518174d641b7d94e99143545a205c43b391142dad28126697bb1c5a3db79e8c8d70783378a90ed993a98c4071dab144a246"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39)

1.121427983s ago: executing program 0 (id=762):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="08000600365764389e161b3d2a27e7dba3e64d676df762c0e407ed067d"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x0)

1.117801743s ago: executing program 4 (id=763):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r4)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x10021)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\x00', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f000000b440)=ANY=[@ANYBLOB="1c00"], 0x20}, 0x20000890)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xd, 0xffff}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a000100fefdffffffdbef25000000150000000008"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008040)
r6 = accept(r0, 0x0, &(0x7f0000000000))
bind$x25(r6, &(0x7f0000000040), 0x12)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x7d, r7})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r7})

1.051799149s ago: executing program 3 (id=764):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYBLOB="d2e7550ff7a9a31a8f3912aa6d69721c4772296505b7e8ffa36387a3d9759f9ebf376be9354083a8983713fa79b7ad09c6f01013a3b30a7e54816f2a1a0eccdfd052a0944352efec4383de5b323009244b4fb7a7c499a7ae0225812e8258a1c8c52be4603c5f8399116e3e49652ba52d4d9d043fae45547cf28d5f83cac640c4577e3b26a6a4cbb808a5554979a1d0c560fb80006f3920f195e3a0f65b2458af845b5f164e7e354e5f12ca282e3e27a45ca72615c147"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74, 0x0, 0x0, @pid}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x38, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)

964.58467ms ago: executing program 1 (id=765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010105}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @mcast1, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)='X', 0x1}], 0x1}}], 0x2, 0x40088d4)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020692400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069bf0000850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r10, 0x40, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x1000000}, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r8}, 0x3c)
syz_emit_ethernet(0x4a, &(0x7f0000001400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a843d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
recvfrom$llc(r4, &(0x7f0000000480)=""/99, 0x63, 0x10121, &(0x7f0000000540)={0x1a, 0x3, 0xa3, 0x3, 0x7, 0x80, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x48}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x4000001)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x164, 0x14, 0x8, 0x70bd2d, 0x25dfdbfe, {0x9, 0x92}, [@INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "f7d51c699acb83ea055e50b76ffb78be0c1157e919a5da08a0fe55a2f996177f5cf93419924ebaaa1bd68c5638c5687751a15e15666c06775def9503eeffce92e910a146521f3d7db5add8e3460cb95b2d765de470d19f13403b0002083652567c638fae8a158bf8b262ac6787bce0892abb790190334540eace6efd667d5f315ad8e63855d4753cbf9218c1decea700241a7db797d2"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "dbad0ce1803f93ced43a3e3f5a04e8f86558e4a52c7123f0d8db3b31d6d3cb5a01e0c79ed5ebd74bf128727cbec8e0277e009c2ccd198b072b0b242eb40e310bcf08b753acd9ef79d303eb25c6c6de42300737db5c1d43be87b9975170f4ccb8a22a13bc007bf4ab4904a5013a33dcdcb09b976a86adc9a68b98ebc0eaeeb87144705d6a8c4a4b0b9baae4f75db0523bb799680c6e624f896126d26767431fc5af0acf2fd4dc772115786ca5aca6"}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000095}, 0xc040)

928.679987ms ago: executing program 3 (id=766):
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = getpid()
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000200)=r8)
r9 = getpid()
r10 = gettid()
r11 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x13c, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x13c}}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095", @ANYRES8=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
unshare(0x24020400)
tee(r2, r1, 0xa000000000000000, 0x0)

866.588501ms ago: executing program 0 (id=767):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}]}, 0x34}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x8001)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

827.330687ms ago: executing program 4 (id=768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000340)={0xa, &(0x7f0000000280)=[{0x6, 0x3, 0x0, 0x7}, {0x2, 0xda, 0x8, 0x2800}, {0x100, 0x4, 0x31, 0x4}, {0x8, 0xc, 0x9, 0x1ff}, {0x4ed3, 0x5, 0x3, 0x3}, {0x4, 0x6, 0x9, 0x400}, {0x1, 0x4, 0x8, 0x2}, {0xfd, 0xf7, 0x0, 0x77}, {0x9, 0x6, 0x9, 0xffffea09}, {0x6, 0x3, 0x7, 0x86f}]}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x6, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x6, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x7, 0xb, 0x6, 0x4, 0x7ffffffd, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x4)

701.101504ms ago: executing program 3 (id=769):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x2b, 0x80801, 0x1)
sendto$inet6(r3, 0x0, 0x0, 0x2200c055, &(0x7f0000000500)={0xa, 0x4e1e, 0x0, @loopback={0x0, 0xa0211fffe000001}, 0x3}, 0x1c)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="540100001000010000000000000000008223be4848115d987b4bb31eced41dcbfc000000000000000000000000000001e000000200000000000000000000000000000000000000000000000000000000b0e96144419b9ac91cb6ef8565f05cabb837b611b8384725be8a97563ba0bf52bb6ad626d905e0229c38e04f14b2394dd1f7669cdf7706ee19ae16cdd5d8b568bfb552538a0e57520e5265946dcdd3395d8b5c54a4609cfae09d847be58bdffc31aedc9c08230f03", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2, @ANYRESDEC=r1], 0x154}}, 0x40000)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0x1da79000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
r4 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x138, 0x168, 0x0, 0x138, 0xa, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x80, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x4)

659.000723ms ago: executing program 3 (id=770):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x5b5fc567, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, 0x0, 0x0)

594.648426ms ago: executing program 2 (id=771):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r3, 0x10800, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r3, 0x10800, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async)
bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x28, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000) (async)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x28, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
write(r10, &(0x7f0000000b00)="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", 0x7f1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x40000)

545.901744ms ago: executing program 1 (id=772):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x7, 0x18}, 0xc)

542.985219ms ago: executing program 4 (id=773):
unshare(0x62040200) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0xf, 0xb4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) (async)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b0000000000000000070000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) (async)
bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0)

435.31985ms ago: executing program 0 (id=774):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={0x0, 0x9, 0x1, [0x2, 0x3, 0xf, 0x8001, 0x3e2b], [0x3, 0x0, 0x4, 0xbe8, 0x24000000000, 0x1, 0x8000000000000001, 0x7b, 0x7, 0x4, 0x9, 0x0, 0x6, 0x8755, 0x4, 0x6, 0x10, 0x5, 0xffffffffffffa222, 0x6, 0xffffffffffffffff, 0xff, 0x1, 0x62, 0x1, 0x6, 0x100000001, 0x9, 0xe0c8, 0x2, 0xc9, 0xa553, 0x7, 0x3, 0x800, 0x5, 0x5, 0x1, 0x7, 0x4, 0x9, 0xfae, 0x8, 0x6, 0x97, 0x1ff, 0x5, 0x197, 0x2bf, 0x3, 0x3, 0x2, 0x0, 0x72f, 0x0, 0x4, 0x7, 0x376d, 0x8001, 0x4, 0x101, 0xc4f, 0xffff, 0x7fffffff, 0x6, 0x314f2b4a, 0x7, 0x9, 0x187, 0x10000000, 0x5, 0x6, 0x8, 0x5, 0xfffffffffffffff8, 0x3, 0x3, 0x0, 0x9, 0x7fffffffffffffff, 0x4, 0x3, 0x8, 0x9, 0x3, 0x501, 0x0, 0x3, 0x6, 0x7, 0x9, 0x9, 0x5, 0x40, 0x0, 0x2, 0xc, 0x8000, 0x9, 0x1ff, 0xd6fc, 0x3, 0x401, 0x8, 0x9, 0x68d, 0x100000001, 0x7, 0x1, 0xfffffffffffff31b, 0x9, 0x100, 0x0, 0x100000000, 0x80000000000, 0x8, 0x7, 0x1, 0x1, 0x2, 0xfffffffffffffffd]}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003ec0), r1)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
r5 = accept(r3, 0x0, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) (async)
recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async)
getpeername$packet(r5, 0x0, &(0x7f00000001c0)) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f00)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40c6) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'bond\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x28}}, 0x10)

427.051391ms ago: executing program 2 (id=775):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

261.494088ms ago: executing program 2 (id=776):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000000c00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x7c}}, 0x20000000)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000340))
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x58, 0x54, 0x8, 0x70bd2b, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x4, {@ip4=@empty, 0x9edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x0, {@in6_addr=@private0, 0x400}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)

230.210296ms ago: executing program 3 (id=777):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000040)={0x3, 0xe, 0x4, 0xa0, 0xe000000})
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}})

127.077355ms ago: executing program 3 (id=778):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x2, 0xfffffffc)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="93a82cc0c7770906c5b43feb8a96a24ddab4aa0da854f715e0fecd2846a4b11874262e45d915b718e59cace52c0c9f6b7d8f851e62cc9fb62518145bb6c6ffef2fcb7cb6c7712073f8bf68", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRESHEX, @ANYRES8=r1, @ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/179, 0xb3, 0x123, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e23, 0x6f, @empty, 0x4}}}, 0x80)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x274}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x39e3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)

0s ago: executing program 0 (id=779):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000100000f97fe0000050104000100000004ffef004d3655070000000000000f01000000b500612e61"], &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000314200000000000000dbdf250700001a", @ANYRES32=0x0, @ANYBLOB="00000000b2300000"], 0x20}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) (async)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="6102f6b5713bc5c39243c627982256b3876a9a79c6d04345b29e982423f78a0926c532bfb824b5b1a4cae24b208a30e88c8afd73506c09e3ca2572eaf99b8e4ba113bab36705fd263dbc05246dad2543e8a288ccb05d6740b6b6703ab72cd44c50e415183de09f84c2f14ac6d9f87f16aa9232b84cb02a0475998e177dfcf2e76a299235dff229f5d3bdf862", 0x8c}, {&(0x7f0000000100)="0dbaddb1bf5c1a7730d710819695c1fa205f8c9b6a900af7d244afe18c0a6aff274d94249faf3e4026896b3d608e2abbd80b04dcb2babf837caaa5f97724c51f8d223cf572b6286d9140d43c35ad74705893f593e2cf597045b7e79479a22321f6afe968fe7bfcb6433786a5518f4cdad9", 0x71}, {&(0x7f0000000180)="caf1183b2272ba07d637083ff32e643f848d0049eb134b6bb099f97c440f167c41a4bad89c70b85f3aa7d80dc843dcb638c8e1", 0x33}, {&(0x7f00000001c0)="e4b7ca48b4f314619b15a623119b7e2ec0928a6c35c698f324b47efa78bf2c31ae68f054e5de3f4c1ca41180e451e421cb031cf0501682c3ea650b27cd3719b61de2cf87b40cca78d90344008de39229852b9c06d163c9b5f2ed5602c30703faa7c176b6", 0x64}, {&(0x7f0000000240)="d6275b010addc3d83b6fc0e6278caf184a1c7c", 0x13}, {&(0x7f0000000300)="4156a771077706365d096998d2b730ca79cc5991c8167f5ee3db3d05b33da948463066e6aba9f4b8d0efcc31cf18b784a674c3ab95069bcb9081c52a23ca8fbebe79ebc55fe980491e574b782e92b5cd0506106494c6fa47264de5224a8ff67197116f0292386ffca1dcea1961fe3beaf1df73864481a5238b0b7c9b52bcc234093986a70907b4dfa4fb19e6b48052248f8043e95ccb4b8deebc2242b05976e81ed2e2025d2c8bd4c1279beada26b9bf3c5170f8d60013aa9866a9e6966be1c42a0483baf026137b593d47f5aa1e30dd7edce49968025ab89d9854", 0xdb}, {&(0x7f00000004c0)="b10971aeb89c702538941d04dc70a5545b00e944c000cb2f23dccb03b55ff30c5e711e798eaca97713fcd900fc5f34ba517f5f0347f237e06f854d079b9c511f685bcfef66e7a8451371454d04cf3b9330d33d1a", 0x54}], 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000009404000094040100000000000000001400000000000000000000000200000001040000000000001c0000000000000000000000080000003710f3164571c4e6df8067e5a836dc95e44ec05d6a35be7ceeb26ad96d7c910bc1f30c436281ca967d63d7708781ad4292d9da51dae2bb88650e38137a7496b243", @ANYRES32=r3, @ANYBLOB="ac14143e0000000000000000140000000000000000000000020000000002000000000000110000000000000000000000010000000400000000000000140000000000000000000000020000000080000000000000140000000000000000000000010000000900000000000000"], 0xb8}}], 0x1, 0x8014)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts.
[   62.632142][ T5611] cgroup: Unknown subsys name 'net'
[   62.782938][ T5611] cgroup: Unknown subsys name 'cpuset'
[   62.791694][ T5611] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.133595][ T5611] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.554727][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.579032][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.589493][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.598777][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.609533][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.611765][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.618147][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.631938][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.633292][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.647410][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.647663][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.657415][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.664718][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.668834][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.679810][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.683809][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.690057][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.698498][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.712727][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.713470][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.722240][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.728027][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.735553][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.759571][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.767570][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   69.389237][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.396526][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.403853][ T5637] bridge_slave_0: entered allmulticast mode
[   69.410959][ T5637] bridge_slave_0: entered promiscuous mode
[   69.450825][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.458480][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.466564][ T5637] bridge_slave_1: entered allmulticast mode
[   69.473877][ T5637] bridge_slave_1: entered promiscuous mode
[   69.499413][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.506903][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.514144][ T5627] bridge_slave_0: entered allmulticast mode
[   69.521105][ T5627] bridge_slave_0: entered promiscuous mode
[   69.542483][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.549775][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.556940][ T5624] bridge_slave_0: entered allmulticast mode
[   69.564153][ T5624] bridge_slave_0: entered promiscuous mode
[   69.576405][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.583625][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.590916][ T5627] bridge_slave_1: entered allmulticast mode
[   69.598275][ T5627] bridge_slave_1: entered promiscuous mode
[   69.630454][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.637671][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.644926][ T5624] bridge_slave_1: entered allmulticast mode
[   69.651792][ T5624] bridge_slave_1: entered promiscuous mode
[   69.678619][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.725738][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.735037][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.742478][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.749631][ T5626] bridge_slave_0: entered allmulticast mode
[   69.757129][ T5626] bridge_slave_0: entered promiscuous mode
[   69.772214][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.779341][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.787168][ T4945] Bluetooth: hci0: command tx timeout
[   69.787175][ T5639] Bluetooth: hci2: command tx timeout
[   69.787568][ T5625] bridge_slave_0: entered allmulticast mode
[   69.794587][ T4945] Bluetooth: hci1: command tx timeout
[   69.798921][ T5639] Bluetooth: hci3: command tx timeout
[   69.807313][ T5625] bridge_slave_0: entered promiscuous mode
[   69.826372][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.856342][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.863922][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.871888][ T5639] Bluetooth: hci4: command tx timeout
[   69.877818][ T5626] bridge_slave_1: entered allmulticast mode
[   69.884921][ T5626] bridge_slave_1: entered promiscuous mode
[   69.894333][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.903694][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.910881][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.918027][ T5625] bridge_slave_1: entered allmulticast mode
[   69.925188][ T5625] bridge_slave_1: entered promiscuous mode
[   69.934003][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.953963][ T5637] team0: Port device team_slave_0 added
[   69.970510][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.001982][ T5637] team0: Port device team_slave_1 added
[   70.035312][ T5627] team0: Port device team_slave_0 added
[   70.052451][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.073207][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.084205][ T5627] team0: Port device team_slave_1 added
[   70.100514][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.111341][ T5624] team0: Port device team_slave_0 added
[   70.118871][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.137225][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.144298][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.170499][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.194656][ T5624] team0: Port device team_slave_1 added
[   70.217362][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.224369][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.250440][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.292449][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.299483][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.325444][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.345443][ T5626] team0: Port device team_slave_0 added
[   70.361701][ T5625] team0: Port device team_slave_0 added
[   70.368532][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.375847][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.401803][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.422633][ T5626] team0: Port device team_slave_1 added
[   70.428846][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.436098][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.462441][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.475130][ T5625] team0: Port device team_slave_1 added
[   70.498616][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.505823][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.532210][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.562214][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.569186][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.595262][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.641352][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.648340][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.674583][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.686126][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.693429][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.719774][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.732317][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.739271][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.765501][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.781184][ T5637] hsr_slave_0: entered promiscuous mode
[   70.787932][ T5637] hsr_slave_1: entered promiscuous mode
[   70.825070][ T5627] hsr_slave_0: entered promiscuous mode
[   70.831322][ T5627] hsr_slave_1: entered promiscuous mode
[   70.837374][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   70.843310][ T5627] Cannot create hsr debugfs directory
[   70.900886][ T5624] hsr_slave_0: entered promiscuous mode
[   70.907159][ T5624] hsr_slave_1: entered promiscuous mode
[   70.913505][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   70.919323][ T5624] Cannot create hsr debugfs directory
[   70.947546][ T5626] hsr_slave_0: entered promiscuous mode
[   70.953772][ T5626] hsr_slave_1: entered promiscuous mode
[   70.959914][ T5626] debugfs: 'hsr0' already exists in 'hsr'
[   70.965659][ T5626] Cannot create hsr debugfs directory
[   71.010117][ T5625] hsr_slave_0: entered promiscuous mode
[   71.016598][ T5625] hsr_slave_1: entered promiscuous mode
[   71.022841][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   71.028574][ T5625] Cannot create hsr debugfs directory
[   71.383922][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[   71.391676][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[   71.502300][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.516092][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.524408][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.534460][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.544083][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.555061][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.563100][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.573565][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.641995][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.652696][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.660658][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.670845][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.678580][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.688924][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.702642][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.712626][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.787509][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.797247][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.805481][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.815586][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.823678][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.835405][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.844111][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.853727][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.861391][ T5643] Bluetooth: hci0: command tx timeout
[   71.861475][ T5639] Bluetooth: hci1: command tx timeout
[   71.872793][ T5643] Bluetooth: hci3: command tx timeout
[   71.872808][ T4945] Bluetooth: hci2: command tx timeout
[   71.940532][ T4945] Bluetooth: hci4: command tx timeout
[   71.979049][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.991117][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.998869][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.008271][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.016716][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.025663][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.041714][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.051362][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.158330][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.173861][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.183422][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.199183][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.209433][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.217419][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.227063][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.243700][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.253861][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.280744][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   72.308383][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.315840][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.335439][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.365252][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.372374][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.411865][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   72.433138][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.448215][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.455367][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.484508][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.496108][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.503268][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.556399][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   72.588267][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.595449][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.609043][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   72.629674][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.636835][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.654588][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.661757][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.674130][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.681283][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.774144][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.889078][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   72.928511][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.935691][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.972485][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.979707][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.731906][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.905870][ T5627] veth0_vlan: entered promiscuous mode
[   73.921209][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.943847][ T4945] Bluetooth: hci2: command tx timeout
[   73.950395][ T5639] Bluetooth: hci1: command tx timeout
[   73.950426][ T5639] Bluetooth: hci3: command tx timeout
[   73.950446][ T5639] Bluetooth: hci0: command tx timeout
[   73.975068][ T5627] veth1_vlan: entered promiscuous mode
[   74.021698][ T5639] Bluetooth: hci4: command tx timeout
[   74.055538][ T5627] veth0_macvtap: entered promiscuous mode
[   74.078856][ T5627] veth1_macvtap: entered promiscuous mode
[   74.135646][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.206092][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.228617][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.282993][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.298017][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.337397][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.350485][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.369559][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.382271][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.436292][ T5625] veth0_vlan: entered promiscuous mode
[   74.482440][ T5625] veth1_vlan: entered promiscuous mode
[   74.493229][ T5624] veth0_vlan: entered promiscuous mode
[   74.573442][ T5626] veth0_vlan: entered promiscuous mode
[   74.591644][ T5624] veth1_vlan: entered promiscuous mode
[   74.617917][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.629152][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.643563][ T5637] veth0_vlan: entered promiscuous mode
[   74.678635][ T5626] veth1_vlan: entered promiscuous mode
[   74.688426][ T5637] veth1_vlan: entered promiscuous mode
[   74.714462][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.722930][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.757372][ T5625] veth0_macvtap: entered promiscuous mode
[   74.790094][ T5625] veth1_macvtap: entered promiscuous mode
[   74.821601][ T5624] veth0_macvtap: entered promiscuous mode
[   74.823952][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.836432][ T5626] veth0_macvtap: entered promiscuous mode
[   74.865198][ T5626] veth1_macvtap: entered promiscuous mode
[   74.887383][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.916443][ T5624] veth1_macvtap: entered promiscuous mode
[   74.943811][ T5637] veth0_macvtap: entered promiscuous mode
[   74.962209][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.990729][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.996474][ T5821] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   75.011263][ T5637] veth1_macvtap: entered promiscuous mode
[   75.019530][ T1012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.030230][ T1012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.045924][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.053945][ T1012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.063545][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.083987][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.152067][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.161230][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.172371][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.189107][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.197295][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.209057][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.263212][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.285988][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.315509][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.323822][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.334040][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.403407][  T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.423603][  T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.447269][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.502746][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.534468][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.546869][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.621211][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.634006][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.723347][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.738727][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.773496][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.797182][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.823978][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.836442][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.886604][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.895238][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.955249][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.988608][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.020641][ T5639] Bluetooth: hci0: command tx timeout
[   76.026404][ T5643] Bluetooth: hci2: command tx timeout
[   76.026435][ T4945] Bluetooth: hci3: command tx timeout
[   76.032297][ T5639] Bluetooth: hci1: command tx timeout
[   76.078183][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.100618][ T5639] Bluetooth: hci4: command tx timeout
[   76.118697][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.187414][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   76.230284][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   76.381927][ T5838] lo speed is unknown, defaulting to 1000
[   76.388561][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   76.407789][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   76.417274][  T145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.428536][ T5840] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3'.
[   76.455638][  T145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.531824][ T5838] lo speed is unknown, defaulting to 1000
[   76.538245][ T5834] Zero length message leads to an empty skb
[   76.553263][  T145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.591685][  T145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.618814][ T5838] lo speed is unknown, defaulting to 1000
[   76.645434][ T5838] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   76.646009][ T5849] netlink: 'syz.3.4': attribute type 13 has an invalid length.
[   76.680110][ T5838] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   76.746394][ T5849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'.
[   76.766419][ T5838] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   76.794410][ T5838] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.812439][ T5838] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.829315][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.838757][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.862428][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   76.930040][ T5864] netlink: 'syz.1.9': attribute type 1 has an invalid length.
[   76.940002][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   76.945486][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.966411][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.271400][ T5838] lo speed is unknown, defaulting to 1000
[   77.278752][ T5862] tipc: Started in network mode
[   77.284633][ T5862] tipc: Node identity 16ab3a4c39ee, cluster identity 4711
[   77.292369][ T5862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.316864][ T5865] syzkaller0: entered promiscuous mode
[   77.323102][ T5865] syzkaller0: entered allmulticast mode
[   77.333414][ T1012] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.359105][ T5838] lo speed is unknown, defaulting to 1000
[   77.368774][ T5870] tipc: Resetting bearer <eth:syzkaller0>
[   77.384047][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.403266][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.433719][ T5838] lo speed is unknown, defaulting to 1000
[   77.452049][ T5854] tipc: Resetting bearer <eth:syzkaller0>
[   77.468926][ T5854] tipc: Disabling bearer <eth:syzkaller0>
[   77.495830][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.512149][ T5838] lo speed is unknown, defaulting to 1000
[   77.527817][ T5838] lo speed is unknown, defaulting to 1000
[   77.546194][ T5884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12'.
[   77.776873][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   77.873767][ T5886] lo speed is unknown, defaulting to 1000
[   77.915006][ T5884] netlink: 'syz.4.12': attribute type 2 has an invalid length.
[   78.071293][ T5895] syzkaller0: entered promiscuous mode
[   78.087053][ T5895] syzkaller0: entered allmulticast mode
[   78.110458][ T5899] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.137508][ T5895] tipc: Started in network mode
[   78.145791][ T5895] tipc: Node identity 9a0fb2f25715, cluster identity 4711
[   78.154077][ T5895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.202655][ T5901] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   78.473728][ T5887] tipc: Resetting bearer <eth:syzkaller0>
[   78.527066][ T5887] tipc: Disabling bearer <eth:syzkaller0>
[   78.720571][ T5909] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   78.916764][ T5916] lo speed is unknown, defaulting to 1000
[   79.066731][ T5917] netlink: 'syz.1.21': attribute type 16 has an invalid length.
[   79.108635][ T5917] netlink: 'syz.1.21': attribute type 17 has an invalid length.
[   79.207487][ T5912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.719166][ T5925] hma(’àÆÂkX�: entered promiscuous mode
[   79.859143][ T5912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.937123][ T5936] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   80.174684][ T5947] netlink: 'syz.3.29': attribute type 28 has an invalid length.
[   80.905880][ T5912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.126620][ T5912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.191463][ T5959] netlink: 'syz.1.33': attribute type 21 has an invalid length.
[   81.206786][ T5959] __nla_validate_parse: 8 callbacks suppressed
[   81.206803][ T5959] netlink: 128 bytes leftover after parsing attributes in process `syz.1.33'.
[   81.225207][ T5966] bridge1: entered promiscuous mode
[   81.232259][ T5966] bridge1: entered allmulticast mode
[   81.242958][ T5966] team0: Port device bridge1 added
[   81.249535][ T5959] netlink: 'syz.1.33': attribute type 4 has an invalid length.
[   81.257313][ T5959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.33'.
[   81.353636][ T5969] bridge2: entered promiscuous mode
[   81.372749][ T5969] bridge2: entered allmulticast mode
[   81.386285][ T5969] team0: Port device bridge2 added
[   81.399530][ T5974] bridge0: port 3(team0) entered blocking state
[   81.410348][ T5974] bridge0: port 3(team0) entered disabled state
[   81.417391][ T5974] team0: entered allmulticast mode
[   81.432287][ T5974] team_slave_0: entered allmulticast mode
[   81.458322][ T5974] team_slave_1: entered allmulticast mode
[   81.488385][ T5974] team0: entered promiscuous mode
[   81.497974][ T5974] team_slave_0: entered promiscuous mode
[   81.505768][ T5974] team_slave_1: entered promiscuous mode
[   81.515058][ T5974] bridge0: port 3(team0) entered blocking state
[   81.522183][ T5974] bridge0: port 3(team0) entered forwarding state
[   81.529625][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   81.539559][ T5980] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   81.653249][ T1167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.665532][   T46] cfg80211: failed to load regulatory.db
[   81.727771][ T5986] netlink: 'syz.4.43': attribute type 1 has an invalid length.
[   81.736672][ T5986] netlink: 228 bytes leftover after parsing attributes in process `syz.4.43'.
[   81.757868][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.798228][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.41'.
[   81.826749][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.877892][  T157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.133864][  T145] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[   82.149360][ T6004] veth0_to_bridge: default FDB implementation only supports local addresses
[   82.293686][ T6006] syzkaller0: entered promiscuous mode
[   82.312221][ T6006] syzkaller0: entered allmulticast mode
[   82.356719][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'.
[   82.661170][ T6022] ipip0: entered promiscuous mode
[   83.283586][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.502605][ T6058] x_tables: duplicate underflow at hook 1
[   84.583804][ T6066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.62'.
[   84.604175][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'.
[   84.678496][ T6068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   84.708958][ T6072] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   85.041024][ T6072] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.095882][ T6076] dvmrp1: entered allmulticast mode
[   85.367161][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'.
[   85.667236][ T6126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.134461][ T6144] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí
[   86.134461][ T6144] 3ìUH†5rºBnœ�æ
[   86.257006][ T6151] netlink: 'syz.1.80': attribute type 11 has an invalid length.
[   86.297526][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'.
[   86.539252][ T6164] netlink: 'syz.4.86': attribute type 3 has an invalid length.
[   86.573266][ T6165] syzkaller1: tun_chr_ioctl cmd 1074025677
[   86.588200][ T6167] netlink: 'syz.2.87': attribute type 1 has an invalid length.
[   86.608558][ T6165] syzkaller1: linktype set to 769
[   86.684108][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.732975][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.753278][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'.
[   86.774559][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'.
[   86.785572][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'.
[   87.116236][ T6174] bond1: (slave geneve2): making interface the new active one
[   87.125940][ T6174] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   87.153942][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.171950][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   87.212078][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   87.225498][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   87.234921][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   87.472976][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   87.510378][ T6196] netem: unknown loss type 0
[   87.534061][ T6196] netem: change failed
[   87.643367][ T5728] IPVS: starting estimator thread 0...
[   87.737507][ T6194] netlink: 'syz.4.94': attribute type 21 has an invalid length.
[   87.750422][ T6194] netlink: 128 bytes leftover after parsing attributes in process `syz.4.94'.
[   87.759439][ T6208] IPVS: using max 31 ests per chain, 74400 per kthread
[   87.798626][ T6194] netlink: 'syz.4.94': attribute type 4 has an invalid length.
[   87.849759][ T6194] netlink: 3 bytes leftover after parsing attributes in process `syz.4.94'.
[   88.155976][ T6232] TCP: TCP_TX_DELAY enabled
[   88.206390][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   88.216540][ T6236] netlink: 'syz.2.103': attribute type 30 has an invalid length.
[   88.267790][ T6241] netlink: 64 bytes leftover after parsing attributes in process `syz.2.103'.
[   88.274080][ T6240] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.104'.
[   88.293665][  T145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.324872][  T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.347131][  T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.370752][   T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.648903][ T6251] syzkaller0: entered promiscuous mode
[   88.655218][ T6251] syzkaller0: entered allmulticast mode
[   88.918617][ T6269] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[   89.395363][ T6285] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   90.684879][ T6290] lo speed is unknown, defaulting to 1000
[   91.136244][ T6308] netlink: 'syz.4.117': attribute type 13 has an invalid length.
[   91.300121][ T6308] netlink: 'syz.4.117': attribute type 13 has an invalid length.
[   91.308800][   T57] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.349500][   T57] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.364255][   T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.375491][   T57] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.797791][ T6331] __nla_validate_parse: 7 callbacks suppressed
[   91.797809][ T6331] netlink: 168 bytes leftover after parsing attributes in process `syz.4.123'.
[   91.962881][ T6347] netlink: 'syz.2.127': attribute type 21 has an invalid length.
[   92.080624][ T6347] netlink: 'syz.2.127': attribute type 6 has an invalid length.
[   92.116037][ T6347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.127'.
[   92.285558][ T6365] ipip0: entered promiscuous mode
[   92.506702][ T6380] dvmrp6: entered allmulticast mode
[   92.564092][ T6380] syzkaller0: entered promiscuous mode
[   92.578901][ T6384] netlink: 168 bytes leftover after parsing attributes in process `syz.3.138'.
[   92.578971][ T6380] syzkaller0: entered allmulticast mode
[   92.778352][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[   92.909589][ T6398] tipc: Started in network mode
[   92.950539][ T6398] tipc: Node identity 0a598b9d6b51, cluster identity 4711
[   92.971061][ T6398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.424346][ T6420] netlink: 168 bytes leftover after parsing attributes in process `syz.0.151'.
[   93.644692][ T6392] tipc: Disabling bearer <eth:syzkaller0>
[   93.944368][ T6451] xt_bpf: check failed: parse error
[   94.073506][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'.
[   94.387464][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'.
[   94.410500][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'.
[   94.433924][ T6472] netlink: 76 bytes leftover after parsing attributes in process `syz.1.167'.
[   94.464859][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'.
[   94.493533][ T6472] netlink: 'syz.1.167': attribute type 1 has an invalid length.
[   94.654699][ T6472] lo speed is unknown, defaulting to 1000
[   94.808897][ T6487] Bluetooth: MGMT ver 1.23
[   95.196710][ T6492] lo speed is unknown, defaulting to 1000
[   95.222384][ T6509] netlink: 'syz.0.177': attribute type 10 has an invalid length.
[   95.262674][ T6509] syz_tun: entered promiscuous mode
[   95.313346][ T6509] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   95.787819][ T6529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.828464][ T6527] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma?
[   95.828605][ T6522] syzkaller0: entered promiscuous mode
[   95.864327][ T6522] syzkaller0: entered allmulticast mode
[   95.976335][ T6532] lo speed is unknown, defaulting to 1000
[   95.983240][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[   96.005678][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   96.062694][ T6521] tipc: Disabling bearer <eth:syzkaller0>
[   96.274336][ T6544] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   96.606240][ T6546] lo speed is unknown, defaulting to 1000
[   97.404828][ T6594] tipc: Started in network mode
[   97.423385][ T6594] tipc: Node identity ac14140f, cluster identity 4711
[   97.448558][ T6594] tipc: New replicast peer: 255.255.255.255
[   97.465692][ T6594] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.478718][ T6598] __nla_validate_parse: 1 callbacks suppressed
[   97.478737][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'.
[   97.786840][ T6618] netlink: 'syz.0.202': attribute type 10 has an invalid length.
[   97.805606][ T6618] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.202'.
[   98.002533][ T6629] netlink: 76 bytes leftover after parsing attributes in process `syz.4.204'.
[   98.021324][ T6628] netlink: zone id is out of range
[   98.128555][ T6625] netlink: 'syz.4.204': attribute type 1 has an invalid length.
[   98.216104][ T6647] netlink: 164 bytes leftover after parsing attributes in process `syz.2.211'.
[   98.276471][ T6636] syzkaller0: entered promiscuous mode
[   98.318134][ T6636] syzkaller0: entered allmulticast mode
[   98.396848][ T6629] lo speed is unknown, defaulting to 1000
[   98.552935][ T6655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.214'.
[   98.592915][ T5743] tipc: Node number set to 2886997007
[   98.711500][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'.
[   98.721502][ T6662] netlink: 94 bytes leftover after parsing attributes in process `syz.3.216'.
[   98.731020][ T6662] netlink: 580 bytes leftover after parsing attributes in process `syz.3.216'.
[   98.759351][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'.
[   98.776442][ T6663] netlink: 94 bytes leftover after parsing attributes in process `syz.3.216'.
[   99.107206][   T29] audit: type=1800 audit(1778474762.750:2): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.220" name="cpuacct.usage_percpu_sys" dev="tmpfs" ino=254 res=0 errno=0
[   99.524865][ T6689] bond1: entered promiscuous mode
[   99.531076][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.563595][ T6689] bond1 (unregistering): Released all slaves
[   99.895942][ T6720] IPVS: length: 57 != 24
[  100.437219][ T6737] xt_hashlimit: size too large, truncated to 1048576
[  100.848600][ T6755] netlink: 'syz.2.240': attribute type 1 has an invalid length.
[  100.994670][ T6755] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.113237][ T6760] macvlan2: entered promiscuous mode
[  101.118596][ T6760] macvlan2: entered allmulticast mode
[  101.168280][ T6760] bond2: entered allmulticast mode
[  101.177867][ T6760] bond2: entered promiscuous mode
[  101.227456][ T6760] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  101.243281][ T6767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.288291][ T6760] team0: Port device macvlan2 added
[  101.313820][ T6762] ip6gre1: entered promiscuous mode
[  101.319753][ T6762] ip6gre1: entered allmulticast mode
[  101.372161][ T6753] bond2: (slave ip6gretap1): making interface the new active one
[  101.406786][ T6753] ip6gretap1: entered promiscuous mode
[  101.424327][ T6753] ip6gretap1: entered allmulticast mode
[  101.485789][ T6753] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  101.764916][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  101.782308][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  101.791294][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  101.853010][ T6787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.922460][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  102.662892][   T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  103.073165][ T6785] tipc: Disabling bearer <eth:syzkaller0>
[  103.090192][ T6797] __nla_validate_parse: 16 callbacks suppressed
[  103.090210][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[  103.127732][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[  103.144853][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[  103.156203][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[  103.225825][ T5728] tipc: Node number set to 793066060
[  103.365355][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.253'.
[  103.710690][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'.
[  103.741148][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.259'.
[  103.803413][ T6824] geneve3: entered promiscuous mode
[  103.819811][ T6824] geneve3: entered allmulticast mode
[  104.263781][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'.
[  104.534816][ T6851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'.
[  104.686919][ T6856] netlink: 'syz.4.267': attribute type 1 has an invalid length.
[  104.779581][ T6858] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  104.794723][ T6858] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  104.805188][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'.
[  105.199174][ T6698] Set syz1 is full, maxelem 65536 reached
[  105.779920][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  106.069017][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.289817][ T6884] lo speed is unknown, defaulting to 1000
[  106.317268][ T6895] syzkaller0: entered promiscuous mode
[  106.333653][ T6895] syzkaller0: entered allmulticast mode
[  106.363173][ T6877] lo speed is unknown, defaulting to 1000
[  106.418739][ T6893] lo speed is unknown, defaulting to 1000
[  106.587912][ T6908] xt_CONNSECMARK: invalid mode: 0
[  107.610224][ T6928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.254303][ T6926] tipc: Disabling bearer <eth:syzkaller0>
[  108.864170][ T6979] __nla_validate_parse: 7 callbacks suppressed
[  108.864189][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[  108.909372][ T6979] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[  108.991432][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'.
[  109.037314][ T6986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.298'.
[  109.050557][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'.
[  109.087795][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[  109.120530][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'.
[  109.268526][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  109.296733][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'.
[  109.424744][ T6998] ip6gre1: left promiscuous mode
[  109.462107][ T6998] ip6gre1: left allmulticast mode
[  109.632509][ T7011] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  109.707958][ T7013] netlink: 180 bytes leftover after parsing attributes in process `syz.0.305'.
[  109.826916][ T7015] netlink: 9 bytes leftover after parsing attributes in process `syz.1.307'.
[  109.853684][ T7015] gretap0: entered promiscuous mode
[  109.917551][ T7017] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.141971][ T7021] lo speed is unknown, defaulting to 1000
[  110.716818][ T7039] lo speed is unknown, defaulting to 1000
[  110.799596][ T7046] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  110.958525][ T7053] IPv6: addrconf: prefix option has invalid lifetime
[  111.302264][ T7071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.548502][ T7081] trusted_key: syz.0.327 sent an empty control message without MSG_MORE.
[  112.286967][ T7114] dummy0: mtu less than device minimum
[  112.526363][ T7116] lo speed is unknown, defaulting to 1000
[  113.086186][ T7138] syzkaller1: entered promiscuous mode
[  113.113214][ T7138] syzkaller1: entered allmulticast mode
[  113.263197][ T7116] netlink: 'syz.0.333': attribute type 4 has an invalid length.
[  113.712711][ T7162] netlink: 'syz.0.344': attribute type 16 has an invalid length.
[  113.739717][ T7164] netlink: 'syz.4.345': attribute type 15 has an invalid length.
[  113.947730][ T7179] __nla_validate_parse: 7 callbacks suppressed
[  113.947747][ T7179] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.348'.
[  114.478033][ T7192] lo speed is unknown, defaulting to 1000
[  114.766409][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'.
[  115.106841][ T7210] ip6gre1: entered promiscuous mode
[  115.113334][ T7210] ip6gre1: entered allmulticast mode
[  115.242546][ T7225] bond1: option miimon: invalid value (18446744073709551607)
[  115.250190][ T7225] bond1: option miimon: allowed values 0 - 2147483647
[  115.258851][ T7225] bond1 (unregistering): Released all slaves
[  115.307569][ T7214] lo speed is unknown, defaulting to 1000
[  115.454401][ T7234] netlink: 'syz.4.363': attribute type 1 has an invalid length.
[  115.556624][ T7234] bond2: entered promiscuous mode
[  115.562988][ T7234] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.587108][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'.
[  116.059394][ T5728] IPVS: starting estimator thread 0...
[  116.170061][ T7279] IPVS: using max 28 ests per chain, 67200 per kthread
[  116.187996][ T7269] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002
[  116.197793][ T7269] IPVS: sh: FWM 3 0x00000003 - no destination available
[  116.206658][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  116.320043][ T7289] netlink: 'syz.0.374': attribute type 21 has an invalid length.
[  116.335694][ T7289] netlink: 'syz.0.374': attribute type 7 has an invalid length.
[  132.822083][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  180.211197][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.243718][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'.
[  180.378565][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'.
[  180.408433][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'.
[  180.434658][ T7319] netlink: 'syz.4.379': attribute type 13 has an invalid length.
[  180.435269][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.444472][ T7319] netlink: 'syz.4.379': attribute type 11 has an invalid length.
[  180.450153][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.575173][ T7332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'.
[  180.607503][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.621956][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.778035][  T157] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.799123][  T157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.832194][  T157] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.862634][  T157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.896047][  T157] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.931082][  T157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.963332][  T157] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.984142][  T157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.208349][ T7354] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[  181.232740][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'.
[  181.244691][ T7354] netlink: 256 bytes leftover after parsing attributes in process `syz.2.387'.
[  181.262546][ T7358] syzkaller1: entered promiscuous mode
[  181.278458][ T7358] syzkaller1: entered allmulticast mode
[  181.288751][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'.
[  181.389395][ T7359] veth3: entered promiscuous mode
[  181.776867][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'.
[  181.786372][ T7382] netlink: 528 bytes leftover after parsing attributes in process `syz.2.396'.
[  181.885956][ T7384] netlink: 'syz.4.397': attribute type 6 has an invalid length.
[  182.017726][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'.
[  182.241240][ T7392] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[  182.259436][ T7392] ipvlan0: entered allmulticast mode
[  182.268645][ T7392] veth0_vlan: entered allmulticast mode
[  182.289157][ T7392] team0: Device ipvlan0 failed to register rx_handler
[  182.385062][ T7397] bond1: option arp_interval: invalid value (18446744073709551615)
[  182.393851][ T7397] bond1: option arp_interval: allowed values 0 - 2147483647
[  182.404614][ T7397] bond1 (unregistering): Released all slaves
[  182.829484][ T7430] netlink: 'syz.3.409': attribute type 4 has an invalid length.
[  183.595566][ T7450] netem: change failed
[  183.836358][ T7462] xt_TCPMSS: Only works on TCP SYN packets
[  183.967947][ T7462] bridge_slave_1: left allmulticast mode
[  183.973932][ T7462] bridge_slave_1: left promiscuous mode
[  183.979944][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.023620][ T7462] bridge_slave_0: left allmulticast mode
[  184.029620][ T7462] bridge_slave_0: left promiscuous mode
[  184.036036][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.227705][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  191.233949][ T5630] Bluetooth: hci0: command 0x0406 tx timeout
[  191.234759][ T5644] Bluetooth: hci3: command 0x0406 tx timeout
[  191.240102][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  194.264852][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  211.709850][ T5639] Bluetooth: hci4: command 0x0406 tx timeout
[  241.944071][ T7505] __nla_validate_parse: 9 callbacks suppressed
[  241.944092][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[  241.978023][ T7505] netlink: 'syz.1.425': attribute type 6 has an invalid length.
[  242.006014][ T7505] netlink: 'syz.1.425': attribute type 5 has an invalid length.
[  242.131431][ T7500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.156744][ T7516] sctp: [Deprecated]: syz.0.431 (pid 7516) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.156744][ T7516] Use struct sctp_sack_info instead
[  242.176389][ T7500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.191623][ T7500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  242.237183][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[  242.258228][ T7505] netlink: 'syz.1.425': attribute type 6 has an invalid length.
[  242.295850][ T7505] netlink: 'syz.1.425': attribute type 5 has an invalid length.
[  242.428073][ T7500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.454919][ T7500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.481859][ T7500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  242.542826][ T7504] lo speed is unknown, defaulting to 1000
[  242.703365][ T7500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  242.775705][ T7500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.814268][ T7500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  242.874051][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.427'.
[  243.606295][ T7500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  243.618797][ T7500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.636946][ T7500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  243.749265][ T7580] lo speed is unknown, defaulting to 1000
[  243.947185][  T157] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.964862][  T157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  243.976906][  T157] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  244.273386][  T145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  244.294335][  T145] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  244.319873][  T145] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  244.363423][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'.
[  244.407372][   T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  244.426076][   T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  244.444878][   T35] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  244.483668][  T157] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  244.487101][ T7615] xt_CT: You must specify a L4 protocol and not use inversions on it
[  244.500416][  T157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  244.508903][  T157] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  244.910624][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'.
[  244.935481][ T7634] netlink: 580 bytes leftover after parsing attributes in process `syz.2.444'.
[  245.173970][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'.
[  245.607413][ T7666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.721376][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'.
[  245.735924][ T7672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'.
[  245.777556][ T7672] vlan2: entered promiscuous mode
[  245.783455][ T7672] ip6gretap0: entered promiscuous mode
[  245.795391][ T7672] vlan2: entered allmulticast mode
[  245.805121][ T7672] ip6gretap0: entered allmulticast mode
[  245.888659][ T7673] syz.3.454 (7673) used greatest stack depth: 17944 bytes left
[  245.936868][ T7678] netlink: 14 bytes leftover after parsing attributes in process `syz.4.457'.
[  246.323643][ T7698] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[  246.334040][ T7697] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[  246.348468][ T7698] team0: Failed to send options change via netlink (err -105)
[  246.357409][ T7698] team0: Port device dummy0 added
[  246.364098][ T7697] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  246.383410][ T7697] team0: Failed to send options change via netlink (err -105)
[  246.393007][ T7697] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  246.403292][ T7697] team0: Port device dummy0 removed
[  246.416373][ T7697] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  246.557904][ T7708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.631578][ T7708] syzkaller0: entered promiscuous mode
[  246.639224][ T7708] syzkaller0: entered allmulticast mode
[  246.645887][ T7708] tipc: Resetting bearer <eth:syzkaller0>
[  246.713952][  T157] tipc: Resetting bearer <eth:syzkaller0>
[  246.734723][ T7714] : entered promiscuous mode
[  246.907979][ T7726] 8021q: adding VLAN 0 to HW filter on device eth0
[  246.924029][ T7726] 8021q: adding VLAN 0 to HW filter on device eth1
[  246.963512][ T7726] 8021q: adding VLAN 0 to HW filter on device eth2
[  246.994881][ T7726] 8021q: adding VLAN 0 to HW filter on device eth3
[  247.021405][ T7726] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  247.122994][ T5750] lo speed is unknown, defaulting to 1000
[  247.133764][ T7707] tipc: Resetting bearer <eth:syzkaller0>
[  248.004121][ T7748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.547873][ T7707] tipc: Disabling bearer <eth:syzkaller0>
[  248.575272][ T5750] tipc: Node number set to 1627949981
[  248.635535][ T7746] lo speed is unknown, defaulting to 1000
[  249.087887][ T7786] __nla_validate_parse: 1 callbacks suppressed
[  249.087905][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'.
[  249.138940][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'.
[  249.170081][ T7786] netlink: 'syz.3.482': attribute type 19 has an invalid length.
[  249.187865][ T7786] netlink: 'syz.3.482': attribute type 20 has an invalid length.
[  249.276465][ T7773] lo speed is unknown, defaulting to 1000
[  249.278829][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'.
[  249.341090][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'.
[  249.369803][ T7791] netlink: 580 bytes leftover after parsing attributes in process `syz.1.483'.
[  249.515307][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'.
[  250.677739][ T7826] netlink: 'syz.1.490': attribute type 29 has an invalid length.
[  250.697831][ T7830] netlink: 'syz.1.490': attribute type 29 has an invalid length.
[  250.708505][ T7826] netlink: 508 bytes leftover after parsing attributes in process `syz.1.490'.
[  250.718773][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'.
[  250.775931][ T4945] block nbd0: Receive control failed (result -107)
[  251.105900][ T7849] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.496'.
[  251.115677][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'.
[  251.129462][ T7849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.165900][ T7844] openvswitch: netlink: ERSPAN option length err (len 808, max 255).
[  251.181311][ T7847] openvswitch: netlink: ERSPAN option length err (len 808, max 255).
[  251.414386][ T7860] macvlan3: entered allmulticast mode
[  251.429824][ T7860] hsr0: entered allmulticast mode
[  251.434934][ T7860] hsr_slave_0: entered allmulticast mode
[  251.441520][ T7860] hsr_slave_1: entered allmulticast mode
[  251.452726][ T7860] hsr0: entered promiscuous mode
[  251.493580][ T7861] dvmrp8: entered allmulticast mode
[  251.631794][ T7871] netem: incorrect gi model size
[  251.651623][ T7871] netem: change failed
[  251.715189][ T7874] netlink: 'syz.1.504': attribute type 29 has an invalid length.
[  251.723768][ T7874] netlink: 'syz.1.504': attribute type 29 has an invalid length.
[  251.945940][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.998441][ T7886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.011839][ T7886] syzkaller0: entered promiscuous mode
[  252.017964][ T7886] syzkaller0: entered allmulticast mode
[  252.098295][ T7886] tipc: Resetting bearer <eth:syzkaller0>
[  252.126526][ T7885] tipc: Resetting bearer <eth:syzkaller0>
[  252.162979][ T7885] tipc: Disabling bearer <eth:syzkaller0>
[  252.291597][ T7902] bridge3: entered allmulticast mode
[  252.308261][ T7910] netlink: 'syz.0.513': attribute type 1 has an invalid length.
[  252.539872][ T7910] bond1: entered promiscuous mode
[  252.552605][ T7920] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  252.569161][ T7910] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.313400][ T7959] syzkaller0: entered promiscuous mode
[  253.336179][ T7959] syzkaller0: entered allmulticast mode
[  253.796520][ T7992] netlink: 'syz.4.532': attribute type 1 has an invalid length.
[  253.820899][ T7992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.706861][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  255.908705][ T8001] bridge0: port 3(team0) entered disabled state
[  255.915416][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.923136][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.064443][ T8001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.085047][ T8001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.206436][ T8001] bond2: left allmulticast mode
[  256.212108][ T8001] ip6gretap1: left allmulticast mode
[  256.217457][ T8001] bond2: left promiscuous mode
[  256.227664][ T8001] ip6gretap1: left promiscuous mode
[  256.242053][ T8001] hsr0: left allmulticast mode
[  256.246959][ T8001] hsr_slave_0: left allmulticast mode
[  256.253234][ T8001] hsr_slave_1: left allmulticast mode
[  256.262585][ T7997] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  256.374411][ T8007] netlink: 'syz.4.536': attribute type 4 has an invalid length.
[  256.393486][ T1101] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.422228][ T1101] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  256.433991][ T1101] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  256.448047][ T1101] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.459935][ T1101] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  256.469378][ T1101] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  256.562603][ T8024] __nla_validate_parse: 40 callbacks suppressed
[  256.562617][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'.
[  257.391253][ T1101] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.400349][ T1101] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  257.409354][ T1101] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.418397][ T1101] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  257.428816][ T1101] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  257.440984][ T1101] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  257.542698][ T8035] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  257.570487][ T8035] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  257.761326][ T8042] openvswitch: netlink: IP tunnel dst address not specified
[  257.837036][ T8044] lo speed is unknown, defaulting to 1000
[  258.152315][ T8062] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  258.187274][ T8062] bond1 (unregistering): Released all slaves
[  258.303751][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'.
[  258.324389][ T8076] netlink: 580 bytes leftover after parsing attributes in process `syz.2.552'.
[  258.367922][ T8079] x_tables: duplicate underflow at hook 2
[  258.439446][ T8081] netlink: 9 bytes leftover after parsing attributes in process `syz.4.556'.
[  258.455736][ T8081] gretap0: entered promiscuous mode
[  258.488391][ T8081] netlink: 5 bytes leftover after parsing attributes in process `syz.4.556'.
[  258.516302][ T8081] 0ªî{X¹¦: renamed from gretap0
[  258.532062][ T8081] 0ªî{X¹¦: left promiscuous mode
[  258.550436][ T8081] 0ªî{X¹¦: entered allmulticast mode
[  258.565861][ T8081] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  258.618129][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'.
[  258.740385][ T5639] Bluetooth: hci4: command 0x0406 tx timeout
[  258.966365][ T8093] netlink: 'syz.0.561': attribute type 7 has an invalid length.
[  259.639069][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'.
[  259.661959][ T8094] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.683096][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'.
[  259.734031][ T8094] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.755947][ T8107] bond0: (slave bond_slave_1): Releasing backup interface
[  259.787288][ T8109] xt_hashlimit: size too large, truncated to 1048576
[  259.840566][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'.
[  259.908935][ T8094] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.919269][ T8119] netlink: 276 bytes leftover after parsing attributes in process `syz.4.567'.
[  259.932451][ T8121] x_tables: duplicate underflow at hook 3
[  259.946042][ T8119] netlink: 'syz.4.567': attribute type 1 has an invalid length.
[  260.145377][ T8094] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.242749][ T8126] netlink: 'syz.4.569': attribute type 12 has an invalid length.
[  260.428740][   T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.462816][ T8132] raw_sendmsg: syz.4.570 forgot to set AF_INET. Fix it!
[  260.484637][ T7550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.542807][   T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.656591][ T1101] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.677754][ T8131] lo speed is unknown, defaulting to 1000
[  261.093251][ T8147] sctp: [Deprecated]: syz.0.575 (pid 8147) Use of int in maxseg socket option.
[  261.093251][ T8147] Use struct sctp_assoc_value instead
[  261.163580][ T8154] netlink: 'syz.1.577': attribute type 1 has an invalid length.
[  261.539099][ T5728] IPVS: starting estimator thread 0...
[  261.640313][ T8180] IPVS: using max 31 ests per chain, 74400 per kthread
[  262.060894][ T8192] __nla_validate_parse: 6 callbacks suppressed
[  262.060913][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'.
[  262.087778][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[  262.142105][ T8192] hsr_slave_0: left promiscuous mode
[  262.148167][ T8192] hsr_slave_1: left promiscuous mode
[  262.439498][ T8214] digital: digital_start_poll: Unknown protocol
[  262.623031][ T8220] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  262.647624][ T8222] lo speed is unknown, defaulting to 1000
[  262.746171][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'.
[  262.776653][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'.
[  262.811712][ T8231] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  263.937122][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'.
[  264.236902][ T8302] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.610'.
[  264.337819][ T8310] vlan2: entered promiscuous mode
[  264.354127][ T8310] bridge0: entered promiscuous mode
[  264.414604][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  264.454429][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  264.489478][ T8315] netlink: 124 bytes leftover after parsing attributes in process `syz.2.611'.
[  264.533476][ T8310] netlink: 'syz.2.611': attribute type 6 has an invalid length.
[  264.589939][ T8310] netlink: 'syz.2.611': attribute type 23 has an invalid length.
[  264.608738][ T8310] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.669440][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'.
[  264.786025][ T8330] xt_TCPMSS: Only works on TCP SYN packets
[  264.835320][ T8327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.851418][ T8327] syzkaller0: entered promiscuous mode
[  264.863833][ T8327] syzkaller0: entered allmulticast mode
[  264.908709][ T8327] tipc: Resetting bearer <eth:syzkaller0>
[  264.922202][ T8333] 8021q: VLANs not supported on ip_vti0
[  264.960545][ T8326] tipc: Resetting bearer <eth:syzkaller0>
[  265.005735][ T8326] tipc: Disabling bearer <eth:syzkaller0>
[  265.332199][ T8346] 8021q: adding VLAN 0 to HW filter on device bond3
[  265.396301][ T8358] geneve2: entered promiscuous mode
[  265.694974][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.741568][ T8369] bridge_slave_0 (unregistering): left allmulticast mode
[  265.767020][ T8369] bridge_slave_0 (unregistering): left promiscuous mode
[  265.797650][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.007640][ T8382] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  266.044332][ T8390] xt_nfacct: accounting object `syz0' does not exist
[  266.342566][ T8392] bond0: entered promiscuous mode
[  266.361753][ T8392] bond_slave_0: entered promiscuous mode
[  266.379616][ T8392] bond_slave_1: entered promiscuous mode
[  266.404064][ T8392] batadv0: entered promiscuous mode
[  266.419022][ T8392] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  266.442791][ T8392] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  266.483868][ T8392] 8021q: adding VLAN 0 to HW filter on device hsr1
[  266.506206][ T8392] bond0: left promiscuous mode
[  266.517751][ T8392] bond_slave_0: left promiscuous mode
[  266.530729][ T8392] bond_slave_1: left promiscuous mode
[  266.555839][ T8392] batadv0: left promiscuous mode
[  266.676406][ T8412] lo speed is unknown, defaulting to 1000
[  266.715745][ T8416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.872343][ T8416] syzkaller0: entered promiscuous mode
[  266.878735][ T8429] netlink: 'syz.1.643': attribute type 2 has an invalid length.
[  266.894576][ T8416] syzkaller0: entered allmulticast mode
[  266.947252][ T8423] syzkaller0: entered promiscuous mode
[  266.962103][ T8423] syzkaller0: entered allmulticast mode
[  266.985163][ T8416] tipc: Resetting bearer <eth:syzkaller0>
[  267.009430][ T8416] tipc: Disabling bearer <eth:syzkaller0>
[  267.319632][ T8452] __nla_validate_parse: 11 callbacks suppressed
[  267.353657][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.0.651'.
[  267.626513][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'.
[  267.647326][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'.
[  267.953412][ T8489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  268.045946][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'.
[  268.064412][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'.
[  268.160338][ T8496] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  268.449509][ T8511] netlink: 'syz.3.666': attribute type 8 has an invalid length.
[  268.553773][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'.
[  268.614591][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[  268.638668][ T8518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.668'.
[  268.648847][ T8518] netlink: 35 bytes leftover after parsing attributes in process `syz.3.668'.
[  268.662272][ T8517] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.678973][ T8518] netlink: 'syz.3.668': attribute type 5 has an invalid length.
[  268.690289][ T8518] netlink: 'syz.3.668': attribute type 6 has an invalid length.
[  268.703123][ T8518] netlink: 35 bytes leftover after parsing attributes in process `syz.3.668'.
[  268.859474][ T8529] netlink: 'syz.3.670': attribute type 1 has an invalid length.
[  269.006674][ T8536] x_tables: duplicate underflow at hook 3
[  269.033350][ T8525] lo speed is unknown, defaulting to 1000
[  269.105593][ T8545] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  269.115447][ T8545] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  269.178222][ T8547] syzkaller0: entered promiscuous mode
[  269.192977][ T8547] syzkaller0: entered allmulticast mode
[  269.221761][ T8553] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003
[  269.600516][ T8573] vlan2: entered promiscuous mode
[  269.605892][ T8573] bond0: entered promiscuous mode
[  269.611493][ T8573] bond_slave_0: entered promiscuous mode
[  269.617411][ T8573] bond_slave_1: entered promiscuous mode
[  269.624560][ T8573] dummy0: entered promiscuous mode
[  270.145573][ T8587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.980143][ T8536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.456054][ T8610] netlink: 'syz.0.691': attribute type 12 has an invalid length.
[  272.693088][ T8631] __nla_validate_parse: 8 callbacks suppressed
[  272.693105][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'.
[  272.977905][ T8651] netlink: 51 bytes leftover after parsing attributes in process `syz.3.700'.
[  273.098031][ T8656] netlink: 'syz.0.703': attribute type 1 has an invalid length.
[  273.126403][ T8651] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.309220][ T8662] netlink: 14 bytes leftover after parsing attributes in process `syz.0.703'.
[  273.336201][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'.
[  273.356509][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'.
[  273.561413][ T8655] lo speed is unknown, defaulting to 1000
[  273.781782][ T8697] netlink: 'syz.3.713': attribute type 3 has an invalid length.
[  273.822380][ T8689] syzkaller1: entered promiscuous mode
[  273.851924][ T8689] syzkaller1: entered allmulticast mode
[  274.207815][ T8717] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  274.315512][ T8722] netlink: 56 bytes leftover after parsing attributes in process `syz.1.719'.
[  274.449483][ T8718] tipc: Started in network mode
[  274.456803][ T8718] tipc: Node identity 1a9729a0079b, cluster identity 4711
[  274.483091][ T8718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.515739][ T8696] lo speed is unknown, defaulting to 1000
[  274.520341][ T8728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.716'.
[  274.556638][ T8723] syzkaller0: entered promiscuous mode
[  274.571687][ T8723] syzkaller0: entered allmulticast mode
[  274.615679][ T8734] netlink: 80 bytes leftover after parsing attributes in process `syz.4.723'.
[  274.638172][ T8733] netlink: 80 bytes leftover after parsing attributes in process `syz.4.723'.
[  274.644657][ T8718] tipc: Resetting bearer <eth:syzkaller0>
[  274.678600][ T8712] tipc: Resetting bearer <eth:syzkaller0>
[  274.697986][ T8712] tipc: Disabling bearer <eth:syzkaller0>
[  274.947457][ T8736] lo speed is unknown, defaulting to 1000
[  275.072623][ T8746] syzkaller1: entered promiscuous mode
[  275.078489][ T8746] syzkaller1: entered allmulticast mode
[  275.676668][ T8771] syzkaller0: entered promiscuous mode
[  275.696869][ T8771] syzkaller0: entered allmulticast mode
[  275.836404][ T8771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.884087][ T8768] tipc: Resetting bearer <eth:syzkaller0>
[  275.926731][ T8768] tipc: Disabling bearer <eth:syzkaller0>
[  276.086213][ T8794] ip6tnl1: entered allmulticast mode
[  276.099051][ T8794] netlink: 220 bytes leftover after parsing attributes in process `syz.4.739'.
[  276.122860][ T8794] netlink: 'syz.4.739': attribute type 2 has an invalid length.
[  276.136493][ T8796] netlink: 'syz.1.740': attribute type 1 has an invalid length.
[  276.225673][ T8801] netlink: 'syz.3.741': attribute type 1 has an invalid length.
[  276.243853][ T8804] xfrm0: entered promiscuous mode
[  276.300392][ T8801] 8021q: adding VLAN 0 to HW filter on device bond2
[  276.514732][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.618993][ T8817] lo speed is unknown, defaulting to 1000
[  276.736051][ T8825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.963067][ T7507] udevd[7507]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  277.418667][ T8857] lo speed is unknown, defaulting to 1000
[  277.596759][ T8868] syzkaller0: entered promiscuous mode
[  277.603002][ T8868] syzkaller0: entered allmulticast mode
[  277.918025][ T8880] __nla_validate_parse: 3 callbacks suppressed
[  277.918043][ T8880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.759'.
[  277.963716][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'.
[  277.985521][ T8891] netlink: 52 bytes leftover after parsing attributes in process `syz.0.759'.
[  278.262513][ T8899] netlink: 'syz.3.764': attribute type 1 has an invalid length.
[  278.318216][ T8902] syzkaller1: entered promiscuous mode
[  278.343605][ T8902] syzkaller1: entered allmulticast mode
[  278.524969][ T8915] netlink: 100 bytes leftover after parsing attributes in process `syz.3.769'.
[  278.543965][ T8909] netlink: 'syz.0.767': attribute type 1 has an invalid length.
[  278.553274][ T8915] set match dimension is over the limit!
[  278.634654][ T8909] bond2: entered promiscuous mode
[  278.649079][ T8909] 8021q: adding VLAN 0 to HW filter on device bond2
[  278.722841][ T8920] syzkaller0: entered promiscuous mode
[  278.747273][ T8920] syzkaller0: entered allmulticast mode
[  278.983641][ T8939] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  279.023715][ T8944] netlink: 'syz.2.776': attribute type 10 has an invalid length.
[  279.043852][ T8939] bond3 (unregistering): Released all slaves
[  279.088807][ T8927] gretap0: left promiscuous mode
[  279.139764][ T8949] netlink: 'syz.2.776': attribute type 10 has an invalid length.
[  279.181608][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.215166][ T8927] 8021q: adding VLAN 0 to HW filter on device team0
[  279.226673][ T8954] netlink: 80 bytes leftover after parsing attributes in process `syz.0.779'.
[  279.238318][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.316063][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.326459][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.333624][ T8944] nbd1: detected capacity change from 0 to 63
[  279.353401][ T7507] 
[  279.355769][ T7507] ======================================================
[  279.356715][ T8927] xfrm0: left promiscuous mode
[  279.362823][ T7507] WARNING: possible circular locking dependency detected
[  279.362845][ T7507] syzkaller #0 Not tainted
[  279.362853][ T7507] ------------------------------------------------------
[  279.362860][ T7507] udevd/7507 is trying to acquire lock:
[  279.362869][ T7507] ffff888033b30268 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x37b/0x1100
[  279.362930][ T7507] 
[  279.362930][ T7507] but task is already holding lock:
[  279.362936][ T7507] ffff88804ea8e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  279.362975][ T7507] 
[  279.362975][ T7507] which lock already depends on the new lock.
[  279.362975][ T7507] 
[  279.362981][ T7507] 
[  279.362981][ T7507] the existing dependency chain (in reverse order) is:
[  279.362988][ T7507] 
[  279.362988][ T7507] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  279.363018][ T7507]        __mutex_lock+0x1a3/0x1550
[  279.363036][ T7507]        nbd_queue_rq+0xc6/0x1100
[  279.363052][ T7507]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  279.363075][ T7507]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  279.363100][ T7507]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  279.363123][ T7507]        blk_mq_run_hw_queue+0x348/0x4f0
[  279.363144][ T7507]        blk_mq_dispatch_list+0xd16/0xe10
[  279.363167][ T7507]        blk_mq_flush_plug_list+0x48d/0x570
[  279.363190][ T7507]        __blk_flush_plug+0x3ed/0x4d0
[  279.363212][ T7507]        __submit_bio+0x28d/0x580
[  279.363226][ T7507]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  279.363248][ T7507]        block_read_full_folio+0x599/0x830
[  279.363266][ T7507]        filemap_read_folio+0x137/0x3b0
[  279.363287][ T7507]        do_read_cache_folio+0x358/0x590
[  279.363309][ T7507]        read_part_sector+0xb6/0x2b0
[  279.363330][ T7507]        adfspart_check_ICS+0xb1/0x960
[  279.363353][ T7507]        bdev_disk_changed+0x817/0x1770
[  279.363375][ T7507]        blkdev_get_whole+0x380/0x510
[  279.363398][ T7507]        bdev_open+0x31e/0xd30
[  279.363417][ T7507]        blkdev_open+0x470/0x610
[  279.363430][ T7507]        do_dentry_open+0x785/0x14e0
[  279.363445][ T7507]        vfs_open+0x3b/0x340
[  279.363459][ T7507]        path_openat+0x2e08/0x3860
[  279.363480][ T7507]        do_file_open+0x23e/0x4a0
[  279.363499][ T7507]        do_sys_openat2+0x113/0x200
[  279.363513][ T7507]        __x64_sys_openat+0x138/0x170
[  279.363528][ T7507]        do_syscall_64+0x15f/0xf80
[  279.363541][ T7507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.363557][ T7507] 
[  279.363557][ T7507] -> #5 (set->srcu){.+.+}-{0:0}:
[  279.363582][ T7507]        __synchronize_srcu+0xca/0x300
[  279.363598][ T7507]        elevator_switch+0x1e8/0x7a0
[  279.363619][ T7507]        elevator_change+0x2cc/0x450
[  279.363640][ T7507]        elevator_set_default+0x36c/0x430
[  279.363662][ T7507]        blk_register_queue+0x3e9/0x4e0
[  279.363676][ T7507]        __add_disk+0x677/0xd50
[  279.363692][ T7507]        add_disk_fwnode+0xfb/0x480
[  279.363708][ T7507]        nbd_dev_add+0x72c/0xb50
[  279.363722][ T7507]        nbd_init+0x168/0x1f0
[  279.363738][ T7507]        do_one_initcall+0x250/0x870
[  279.363755][ T7507]        do_initcall_level+0x104/0x190
[  279.363778][ T7507]        do_initcalls+0x59/0xa0
[  279.363799][ T7507]        kernel_init_freeable+0x2a6/0x3e0
[  279.363820][ T7507]        kernel_init+0x1d/0x1d0
[  279.363838][ T7507]        ret_from_fork+0x514/0xb70
[  279.363854][ T7507]        ret_from_fork_asm+0x1a/0x30
[  279.363872][ T7507] 
[  279.363872][ T7507] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  279.363898][ T7507]        __mutex_lock+0x1a3/0x1550
[  279.363913][ T7507]        elevator_change+0x1b3/0x450
[  279.363939][ T7507]        elevator_set_none+0xb5/0x140
[  279.363960][ T7507]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  279.363977][ T7507]        nbd_start_device+0x17f/0xb10
[  279.363992][ T7507]        nbd_genl_connect+0x165b/0x1cf0
[  279.364014][ T7507]        genl_family_rcv_msg_doit+0x22a/0x330
[  279.364033][ T7507]        genl_rcv_msg+0x61c/0x7a0
[  279.364049][ T7507]        netlink_rcv_skb+0x232/0x4b0
[  279.364070][ T7507]        genl_rcv+0x28/0x40
[  279.364085][ T7507]        netlink_unicast+0x75c/0x8e0
[  279.364104][ T7507]        netlink_sendmsg+0x813/0xb40
[  279.364125][ T7507]        ____sys_sendmsg+0x972/0x9f0
[  279.764797][ T7507]        ___sys_sendmsg+0x2a5/0x360
[  279.770000][ T7507]        __x64_sys_sendmsg+0x1bd/0x2a0
[  279.775450][ T7507]        do_syscall_64+0x15f/0xf80
[  279.780542][ T7507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.786938][ T7507] 
[  279.786938][ T7507] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  279.795532][ T7507]        blk_alloc_queue+0x546/0x680
[  279.800804][ T7507]        __blk_mq_alloc_disk+0x197/0x390
[  279.806418][ T7507]        nbd_dev_add+0x499/0xb50
[  279.811350][ T7507]        nbd_init+0x168/0x1f0
[  279.816010][ T7507]        do_one_initcall+0x250/0x870
[  279.821276][ T7507]        do_initcall_level+0x104/0x190
[  279.826750][ T7507]        do_initcalls+0x59/0xa0
[  279.831590][ T7507]        kernel_init_freeable+0x2a6/0x3e0
[  279.837297][ T7507]        kernel_init+0x1d/0x1d0
[  279.842150][ T7507]        ret_from_fork+0x514/0xb70
[  279.847244][ T7507]        ret_from_fork_asm+0x1a/0x30
[  279.852513][ T7507] 
[  279.852513][ T7507] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  279.859708][ T7507]        fs_reclaim_acquire+0x71/0x100
[  279.865166][ T7507]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  279.871480][ T7507]        __alloc_skb+0x1d0/0x7d0
[  279.876405][ T7507]        tcp_stream_alloc_skb+0x3f/0x580
[  279.882024][ T7507]        tcp_sendmsg_locked+0x1345/0x5360
[  279.887902][ T7507]        tcp_sendmsg+0x2f/0x50
[  279.892683][ T7507]        sock_write_iter+0x406/0x4f0
[  279.897955][ T7507]        vfs_write+0x61d/0xb90
[  279.902715][ T7507]        ksys_write+0x150/0x270
[  279.907558][ T7507]        do_syscall_64+0x15f/0xf80
[  279.912654][ T7507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.919063][ T7507] 
[  279.919063][ T7507] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[  279.926695][ T7507]        lock_sock_nested+0x41/0x100
[  279.931971][ T7507]        inet_shutdown+0x6a/0x390
[  279.936985][ T7507]        nbd_mark_nsock_dead+0x2e9/0x560
[  279.942611][ T7507]        recv_work+0x1c2e/0x1d40
[  279.947536][ T7507]        process_scheduled_works+0xb5d/0x1860
[  279.953586][ T7507]        worker_thread+0xa53/0xfc0
[  279.958686][ T7507]        kthread+0x388/0x470
[  279.963265][ T7507]        ret_from_fork+0x514/0xb70
[  279.968364][ T7507]        ret_from_fork_asm+0x1a/0x30
[  279.973635][ T7507] 
[  279.973635][ T7507] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  279.981266][ T7507]        __lock_acquire+0x15a5/0x2cf0
[  279.986623][ T7507]        lock_acquire+0x106/0x350
[  279.991627][ T7507]        __mutex_lock+0x1a3/0x1550
[  279.996720][ T7507]        nbd_queue_rq+0x37b/0x1100
[  280.001814][ T7507]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  280.007895][ T7507]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  280.014740][ T7507]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  280.021236][ T7507]        blk_mq_run_hw_queue+0x348/0x4f0
[  280.026871][ T7507]        blk_mq_dispatch_list+0xd16/0xe10
[  280.032584][ T7507]        blk_mq_flush_plug_list+0x48d/0x570
[  280.038466][ T7507]        __blk_flush_plug+0x3ed/0x4d0
[  280.043826][ T7507]        __submit_bio+0x28d/0x580
[  280.048847][ T7507]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  280.054989][ T7507]        block_read_full_folio+0x599/0x830
[  280.060783][ T7507]        filemap_read_folio+0x137/0x3b0
[  280.066324][ T7507]        do_read_cache_folio+0x358/0x590
[  280.071949][ T7507]        read_part_sector+0xb6/0x2b0
[  280.077225][ T7507]        adfspart_check_ICS+0xb1/0x960
[  280.082678][ T7507]        bdev_disk_changed+0x817/0x1770
[  280.088214][ T7507]        blkdev_get_whole+0x380/0x510
[  280.093577][ T7507]        bdev_open+0x31e/0xd30
[  280.098328][ T7507]        blkdev_open+0x470/0x610
[  280.103244][ T7507]        do_dentry_open+0x785/0x14e0
[  280.108512][ T7507]        vfs_open+0x3b/0x340
[  280.113084][ T7507]        path_openat+0x2e08/0x3860
[  280.118186][ T7507]        do_file_open+0x23e/0x4a0
[  280.123199][ T7507]        do_sys_openat2+0x113/0x200
[  280.128384][ T7507]        __x64_sys_openat+0x138/0x170
[  280.133740][ T7507]        do_syscall_64+0x15f/0xf80
[  280.138832][ T7507]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.145226][ T7507] 
[  280.145226][ T7507] other info that might help us debug this:
[  280.145226][ T7507] 
[  280.155874][ T7507] Chain exists of:
[  280.155874][ T7507]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  280.155874][ T7507] 
[  280.167948][ T7507]  Possible unsafe locking scenario:
[  280.167948][ T7507] 
[  280.175553][ T7507]        CPU0                    CPU1
[  280.180905][ T7507]        ----                    ----
[  280.186254][ T7507]   lock(&cmd->lock);
[  280.190220][ T7507]                                lock(set->srcu);
[  280.196616][ T7507]                                lock(&cmd->lock);
[  280.203098][ T7507]   lock(&nsock->tx_lock);
[  280.207502][ T7507] 
[  280.207502][ T7507]  *** DEADLOCK ***
[  280.207502][ T7507] 
[  280.215629][ T7507] 3 locks held by udevd/7507:
[  280.220285][ T7507]  #0: ffff88802718b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  280.229508][ T7507]  #1: ffff8880254ed818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  280.238980][ T7507]  #2: ffff88804ea8e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[  280.247937][ T7507] 
[  280.247937][ T7507] stack backtrace:
[  280.253829][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  280.253845][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  280.253860][ T7507] Call Trace:
[  280.253871][ T7507]  <TASK>
[  280.253878][ T7507]  dump_stack_lvl+0xe8/0x150
[  280.253896][ T7507]  print_circular_bug+0x2e1/0x300
[  280.253920][ T7507]  check_noncircular+0x12e/0x150
[  280.253939][ T7507]  __lock_acquire+0x15a5/0x2cf0
[  280.253956][ T7507]  ? irqentry_exit+0x218/0x730
[  280.253970][ T7507]  ? lockdep_hardirqs_on+0x7a/0x110
[  280.253989][ T7507]  ? __pfx___schedule+0x10/0x10
[  280.254010][ T7507]  ? nbd_queue_rq+0x37b/0x1100
[  280.254024][ T7507]  lock_acquire+0x106/0x350
[  280.254037][ T7507]  ? nbd_queue_rq+0x37b/0x1100
[  280.254055][ T7507]  __mutex_lock+0x1a3/0x1550
[  280.254068][ T7507]  ? nbd_queue_rq+0x37b/0x1100
[  280.254081][ T7507]  ? is_bpf_text_address+0x292/0x2b0
[  280.254095][ T7507]  ? is_bpf_text_address+0x26/0x2b0
[  280.254109][ T7507]  ? kernel_text_address+0xa5/0xe0
[  280.254128][ T7507]  ? __kernel_text_address+0xd/0x30
[  280.254147][ T7507]  ? unwind_get_return_address+0x4d/0x90
[  280.254164][ T7507]  ? nbd_queue_rq+0x37b/0x1100
[  280.254178][ T7507]  ? __pfx___mutex_lock+0x10/0x10
[  280.254193][ T7507]  ? stack_trace_save+0xa9/0x100
[  280.254212][ T7507]  ? __pfx_stack_trace_save+0x10/0x10
[  280.254234][ T7507]  nbd_queue_rq+0x37b/0x1100
[  280.254250][ T7507]  ? __lock_acquire+0x146e/0x2cf0
[  280.254265][ T7507]  ? __pfx_nbd_queue_rq+0x10/0x10
[  280.254283][ T7507]  blk_mq_dispatch_rq_list+0xa70/0x1910
[  280.254310][ T7507]  ? sbitmap_get+0x229/0x390
[  280.254324][ T7507]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  280.254343][ T7507]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  280.254364][ T7507]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  280.254392][ T7507]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  280.254412][ T7507]  ? blk_mq_hw_queue_need_run+0x13c/0x680
[  280.254434][ T7507]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  280.254454][ T7507]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  280.254476][ T7507]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  280.254493][ T7507]  blk_mq_run_hw_queue+0x348/0x4f0
[  280.254512][ T7507]  blk_mq_dispatch_list+0xd16/0xe10
[  280.254532][ T7507]  ? bdev_count_inflight+0x1cf/0x210
[  280.254546][ T7507]  ? blk_mq_dispatch_list+0x1b0/0xe10
[  280.254567][ T7507]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  280.254588][ T7507]  ? rcu_is_watching+0x15/0xb0
[  280.254605][ T7507]  blk_mq_flush_plug_list+0x48d/0x570
[  280.254624][ T7507]  ? blk_add_rq_to_plug+0x300/0x450
[  280.254643][ T7507]  ? blk_mq_submit_bio+0x1acf/0x28e0
[  280.254663][ T7507]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  280.254686][ T7507]  __blk_flush_plug+0x3ed/0x4d0
[  280.254708][ T7507]  ? __pfx___blk_flush_plug+0x10/0x10
[  280.254730][ T7507]  __submit_bio+0x28d/0x580
[  280.254744][ T7507]  ? __pfx___submit_bio+0x10/0x10
[  280.254757][ T7507]  ? bio_associate_blkg+0x6d/0x230
[  280.254773][ T7507]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  280.254794][ T7507]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  280.254819][ T7507]  block_read_full_folio+0x599/0x830
[  280.254836][ T7507]  ? __pfx_blkdev_get_block+0x10/0x10
[  280.254851][ T7507]  filemap_read_folio+0x137/0x3b0
[  280.254871][ T7507]  ? __pfx_blkdev_read_folio+0x10/0x10
[  280.254884][ T7507]  ? __pfx_filemap_read_folio+0x10/0x10
[  280.254902][ T7507]  ? filemap_add_folio+0x356/0x530
[  280.254924][ T7507]  do_read_cache_folio+0x358/0x590
[  280.254943][ T7507]  ? __pfx_blkdev_read_folio+0x10/0x10
[  280.254957][ T7507]  read_part_sector+0xb6/0x2b0
[  280.254977][ T7507]  adfspart_check_ICS+0xb1/0x960
[  280.254996][ T7507]  ? seq_buf_printf+0x212/0x2d0
[  280.255017][ T7507]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  280.255036][ T7507]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  280.255060][ T7507]  bdev_disk_changed+0x817/0x1770
[  280.255086][ T7507]  ? __pfx_bdev_disk_changed+0x10/0x10
[  280.255108][ T7507]  blkdev_get_whole+0x380/0x510
[  280.255129][ T7507]  bdev_open+0x31e/0xd30
[  280.255151][ T7507]  blkdev_open+0x470/0x610
[  280.255166][ T7507]  ? __pfx_blkdev_open+0x10/0x10
[  280.255178][ T7507]  do_dentry_open+0x785/0x14e0
[  280.255198][ T7507]  vfs_open+0x3b/0x340
[  280.255212][ T7507]  ? path_openat+0x2df0/0x3860
[  280.255231][ T7507]  path_openat+0x2e08/0x3860
[  280.255254][ T7507]  ? __pfx_stack_trace_save+0x10/0x10
[  280.255274][ T7507]  ? stack_depot_save_flags+0x33/0x810
[  280.255295][ T7507]  ? __pfx_path_openat+0x10/0x10
[  280.255312][ T7507]  ? __x64_sys_openat+0x138/0x170
[  280.255329][ T7507]  ? __lock_acquire+0x6b5/0x2cf0
[  280.255347][ T7507]  do_file_open+0x23e/0x4a0
[  280.255367][ T7507]  ? __pfx_do_file_open+0x10/0x10
[  280.255392][ T7507]  ? _raw_spin_unlock+0x28/0x50
[  280.255409][ T7507]  ? alloc_fd+0x64b/0x6c0
[  280.255428][ T7507]  do_sys_openat2+0x113/0x200
[  280.255443][ T7507]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  280.255456][ T7507]  ? __pfx_do_sys_openat2+0x10/0x10
[  280.255473][ T7507]  ? rcu_is_watching+0x15/0xb0
[  280.255490][ T7507]  __x64_sys_openat+0x138/0x170
[  280.255506][ T7507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.255520][ T7507]  do_syscall_64+0x15f/0xf80
[  280.255533][ T7507]  ? clear_bhb_loop+0x40/0x90
[  280.255548][ T7507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.255562][ T7507] RIP: 0033:0x7fd216ca7407
[  280.255579][ T7507] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  280.255594][ T7507] RSP: 002b:00007fffb9629070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  280.255608][ T7507] RAX: ffffffffffffffda RBX: 00007fd217452880 RCX: 00007fd216ca7407
[  280.255618][ T7507] RDX: 00000000000a0800 RSI: 000055c32907e360 RDI: ffffffffffffff9c
[  280.255628][ T7507] RBP: 000055c32907d910 R08: 0000000000000000 R09: 0000000000000000
[  280.255636][ T7507] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c329091ba0
[  280.255645][ T7507] R13: 000055c32908b190 R14: 0000000000000000 R15: 000055c329091ba0
[  280.255660][ T7507]  </TASK>
[  280.831826][ T8927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.842952][ T8927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.859164][ T8927] veth1_vlan: left promiscuous mode
[  280.861158][ T5639] block nbd1: Receive control failed (result -32)
[  280.865939][ T8927] veth0_vlan: left promiscuous mode
[  280.871214][ T4945] block nbd1: Receive control failed (result -32)
[  280.876916][ T8927] veth0_vlan: entered promiscuous mode
[  280.885409][ T7507] block nbd1: Send control failed (result -32)
[  280.891531][ T8927] veth1_vlan: entered promiscuous mode
[  280.894577][ T7507] block nbd1: Request send failed, requeueing
[  280.903602][ T8927] veth1_macvtap: left promiscuous mode
[  280.906254][ T2338] block nbd1: Dead connection, failed to find a fallback
[  280.912876][ T8927] veth0_macvtap: left promiscuous mode
[  280.918565][ T2338] block nbd1: shutting down sockets
[  280.924898][ T8927] veth0_macvtap: entered promiscuous mode
[  280.929123][ T2338] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.936402][ T8927] veth1_macvtap: entered promiscuous mode
[  280.944028][ T2338] Buffer I/O error on dev nbd1, logical block 0, async page read
[  280.954389][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  280.957556][ T7507] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.966353][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  280.973422][ T7507] Buffer I/O error on dev nbd1, logical block 1, async page read
[  280.973562][ T7507] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.973584][ T7507] Buffer I/O error on dev nbd1, logical block 2, async page read
[  280.973664][ T7507] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.973684][ T7507] Buffer I/O error on dev nbd1, logical block 3, async page read
[  280.973776][ T7507] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.973796][ T7507] Buffer I/O error on dev nbd1, logical block 0, async page read
[  280.973875][ T7507] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.989213][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  280.997963][ T7507] Buffer I/O error on dev nbd1, logical block 1, async page read
[  280.998096][ T7507] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.998118][ T7507] Buffer I/O error on dev nbd1, logical block 2, async page read
[  280.998198][ T7507] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.998218][ T7507] Buffer I/O error on dev nbd1, logical block 3, async page read
[  280.998309][ T7507] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.998329][ T7507] Buffer I/O error on dev nbd1, logical block 0, async page read
[  280.998407][ T7507] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  280.998426][ T7507] Buffer I/O error on dev nbd1, logical block 1, async page read
[  281.000112][ T7507] ldm_validate_partition_table(): Disk read failed.
[  281.011366][ T8927] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  281.038073][ T7507] Dev nbd1: unable to read RDB block 0
[  281.060427][ T8927] 8021q: adding VLAN 0 to HW filter on device bond1
[  281.067629][ T7507]  nbd1: unable to read partition table
[  281.091863][ T8927] ipip0: left promiscuous mode
[  281.174631][ T7507] ldm_validate_partition_table(): Disk read failed.
[  281.183126][ T7507] Dev nbd1: unable to read RDB block 0
[  281.193704][ T7507]  nbd1: unable to read partition table
[  281.423631][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.430860][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.444409][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.451602][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.501911][ T1101] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.511700][ T1101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.521363][ T1101] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.530543][ T1101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.542970][ T1101] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.551810][ T1101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.564033][ T1101] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.578648][ T1101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0