last executing test programs:

7.074637218s ago: executing program 2 (id=3718):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd002}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94)

6.915472448s ago: executing program 2 (id=3721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (async)
writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="890dfe", 0x3}], 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000200)="4636e5ad8ec96206371400da5cc72a9c283bfff4a715fb9af62f1350711819910633e9681c33c12d4e522d9e8236827bf0272a6f389185a4ac83e463d5134227044656edfb6c0b9dc92169869a3de6601d3660ebf5d12f9c5d784d428cadd9209f2cf72779f4afdd0bfb9bc870f9391f3ff71f65490d361dfa9285b0fd46ae87ae7513ba8af261e1c744b978d16f4517aeb03e7a10297c6409b7ae89f0b028177611d1a823a3dbfa379bb69e9aee7851ddea2143453af09b2039bde73da44f")
sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xd}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, @in6={0xa, 0x4e20, 0x0, @local, 0x7}]}, &(0x7f0000000180)=0x10) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r7, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x8}, 0x90) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r7, 0x4, 0x2}, 0x8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)

6.50294622s ago: executing program 2 (id=3725):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000052000101fcffffffffffffff0a00"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000074)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

6.429645548s ago: executing program 1 (id=3727):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000280)=@ctrl_frame=@cf_end={{}, {0x5157}, @device_b, @random="b10de70fc26c"}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="280012800900010076657468000000001800028014"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

6.276409566s ago: executing program 2 (id=3728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r6, {0x3, 0xffe0}, {}, {0x7, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x2c}}, 0x4004850)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x600001, 0x0)
close(r7)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0xff, 0x7, 0xce, 0x4557}, {0x6, 0x2, 0x0, 0x8}]})
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0xf8, 0x1c8, 0x3c8, 0xf8, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xc0}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588)
r10 = socket(0x23, 0x3, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, 0x0, 0x0)
write(r10, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000bc0)=""/124, 0x7c}, 0x40002002)
unshare(0x800)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r11, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}, 0xa)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.834149324s ago: executing program 1 (id=3729):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0x7}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
r3 = socket$netlink(0x10, 0x3, 0xa)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)

2.659844599s ago: executing program 3 (id=3732):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a00100018"], 0x1c}}, 0x0)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
sendmsg$inet(r3, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}], 0x20}, 0x40) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r7, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40040)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x1, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5c, 0x9, 0xb9, 0x520, 0x1, 0x4, 0x4, 0xa}}, {0x18, 0x2, [0xff, 0x2, 0x7, 0x3, 0x1, 0xf5, 0x4, 0x7, 0xa735, 0x96]}}, {{0x1c, 0x1, {0xe, 0x9, 0x62e, 0x7ff, 0x1, 0x8, 0x4, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0xa1]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000810)
sendmmsg$inet(r2, &(0x7f0000005200)=[{}], 0x1, 0x0)

2.617208962s ago: executing program 2 (id=3733):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
readv(r2, &(0x7f0000002480)=[{&(0x7f0000000140)=""/233, 0xe9}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18a41071bfaa78614a0a7c4d16c200000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0xc1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a8", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.261980916s ago: executing program 1 (id=3736):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddb0f230c00000008000600e9994dade8"], 0x24}, 0x1, 0x0, 0x0, 0x2000040}, 0x4004004)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1bc, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x770}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb5fa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1c0}, 0x14)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.20325063s ago: executing program 3 (id=3737):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x5, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x21}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

2.01852185s ago: executing program 4 (id=3739):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a4000eb00000900020073797a31000000000900010073797a300000000008000540000000211c0011800a0001006c696d69740000000c000280080004400000148f0000000000003ffc000000000000000000000084000a"], 0xa0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="ea5a92ac89d6ecf8897ceb6ea3a480a6c64ce31ee8a020453b582ce46c968954f6928ebc0e27d8377ead4eca8bfc197213eda9a0efee0bd341f8bd01b0e4ef3453e5bf34e9a37a2497515711f833d852266b3c4e948ce2fa8afe7451b0dd23c9ff6d2414b663eb1c6b2a"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55ebfcb85e782904}, 0x4)
unshare(0x2c000680)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x1e8, 0x100, 0x2d0, 0x2d0, 0x2d0, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x9, {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@empty, @multicast1, 0x0, 0xffffffff, 0xb, 0x10, {@mac=@random="af0631d193f7", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x3, 0x8, 0x1, 0x7, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0xffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000180)="b92ada9a5a1360e4c421de2a3e8c8f673e60069e99f160af5e882a78060b0f62a9f6ac27f3c22c213dd2d32f529c3be1a62e94f93d60557ca04e8a8ef81854d8c60fb0ab7564abc541a717d9dbb8348448e7743b45fdbc413a", 0x59}, {&(0x7f0000000200)="8eb36bd8b62576231961ab82d808d81c25503b9fc6e162b320fe1827ef807f71857b646832124147f29dbace1f968889294eb2b8617d2a8cbfebb2f6cb146390a7731a223b6f4c1f405790e55ff66278a178528d8f68", 0x56}, {&(0x7f0000000380)="e45cd20b3e0ece40cb59905f9a87a7f5d1831b451b14a2fbf654c3ddf9502f5ba545be230dff9fce283bff2a06c9730be564e66c495cd7551ed7e00583603dd80f4454a8fc3433701712cf99f6c2a608c95c204e34635bd3b6ef0bf4b97231e93212113fa3b5ce2a8b70d05bebaef9d043f99a5dac5c597c37f9ab034bc19d78a0b80574b6dd323ebedcc28c0a050a83f4920835da3a0dcddea5ef38d29f4f52d7758a49d990f9", 0xa7}], 0x3, 0x9, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="12000004", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf253800000008000300", @ANYRES32=r6, @ANYBLOB="0c00990003000000300000000c00580033000000000000000c00580070000000000000000c00580034000000000000000c00580059000000000000000c0058002c00000000000000"], 0x64}}, 0x2800c84d)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440103, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaacf3cccaf382f08000000000078ac1414bbac1414aa000044047141000000004e22808faebaac322e3f4cd7a5f429be0d0d20a5b6b5e59e88e7f426adac12e4c86c0a9a37bee014668ba114e8fbbbccbfe8b896", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2.005339097s ago: executing program 3 (id=3740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40816}, 0x4004040)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000600000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x28)

1.815765442s ago: executing program 1 (id=3742):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xedc623580315bdc5, 0x4000010, r0, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000001340)="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", 0xcc1}], 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000dc5a06a85796fe1bfff6c651fcf131a899090d72acd3b9af3fccf69a759df3167e9c760a4af516a427b09159658cc7cab9c5f942c11d12042225caba6d162318f6cd21972528765d6c1dcac090ecf85bc53e42eaf629bbedf12020e136b3aa34234a7f90a62745650e4c65f27e08d8e87d296290a7a45802657c2d11d1be7686e5d9687832c70831c7910f958673d671033ea87da8ee5435e671f0f4d528a93864c5d8ec82978b3d8c097799b4c892ca8ed65cc79584cada1de4ca36c5d01f7d1d2ce82e9bf8a1ad975591c8d0c4bc491600"/241, @ANYRES32=r1, @ANYBLOB='\v\v\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x0)
bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r3, 0x2, 0x8, 0x0, @void, @value, @void, @void, r4}, 0x20)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f0000005040)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005000)={&(0x7f0000005080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1481}, @NFTA_CHAIN_USERDATA={0x20, 0xc, "9fd36292c1f06ad409cc1e5be1839cd2b03df274bb6cf008d60273de"}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffff001}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x32}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x28bc, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x26c4, 0x3, 0x0, 0x1, [{0x1680, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "9a78c417498d7b756061000794c0021c8e33f943f8c5689ea60c7afd095c82ed389a42e9a85e644babdacfeb2208f96c184e2ac1b10d96461b80fc51941864a51e2d5e2b790899143709cc059e8e812ad8ef5b32f82b246782c23e"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "995d2e75ba3e644f35239d8f7c29c1a9eddad158c77ed554b0f3f75251cc15c247228a626abd087cf8e2b7e23889c164ee71080ef8200ad13d795dc3b14da2d9eef71c20"}, @NFTA_DATA_VALUE={0x78, 0x1, "ee066e52ab5691cb328b8c6ad8b7796fd9bbf56faf719faf8601be69ceb16ceaa09cb5e9891ece86f2b56d301f983b47f4c5e10357efe9e5bbf68443b028f95d45836cea3d0899db1f3948a4f9d1307b5cf4dc3315f297bd2414b8c7709eb03ee32f26c9be9921e8d819ea357a13f04d0537f3b2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "6303e629df130eec3a9ccb781c9393cbc98c20cea16877da74f88d5eceb6be7c97"}, @NFTA_SET_ELEM_DATA={0x278, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "4f987f6f80c19a5968acaccf3ea2ac378ac3492ffe945930ce814134680de8eaa739b527d8d77001f9f5eda210f106a9a57ad2500501f9fdada445754c4cecad04808ec0342545ec4c3d8774fdf389e93e6d6b851a44ce5d2ae2ddeb4dfbd06e912829d07a0ae9ccfb6ded4acf615607b5c4c8b86efc6f1d7a84482f0b995d932b19635d70e6be65c69c33abb1f78863ff68bd0e6b7375443957b1d4eebe6e652c1f7a3903149cccfd8912e65cd3da02724d1b15d41138967ed318906400a30210f07441"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "ce95633b8afdb2e3a2d09d4e6a56354fee53aa08cb5c20205b7a5ce302ba7062d88db23b8c69e0c99f2d83f77bb5d838aa049727970308cfc81fa5ba22ab31a119394b6f01372740d36c6a6951b24f8b58fc9c9eeb5f86f7a5b54cdecd4f78"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x72, 0x1, "ccb1a5de895d2ceb296410613e5ce0c3161c07c0178fb9811eae933090a2268201b77ba75b189bf902cf403016b7df1b120ea5f197baffad3c8b4b09312eb4a69045af6b5cbd1c0bbfac29624b38679913df9df20a74126fe7d3979cdd4bbbfce9a264f89530a34bf37be5e28e5b"}]}, @NFTA_SET_ELEM_DATA={0x22c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "3f8a04e08425280ffeb0d5655f56f3c2419102a1"}, @NFTA_DATA_VALUE={0xf5, 0x1, "a362f024439bc55745db98da5e3c84bc835349e27a2ec73043648704d227cac9519e79b2fb4de5a892069bcd679765c23071486f29ee77b24eb2d90e79709e7f83568e8ea1fb3982d8b8c4c62845c155fbb1753d846fd0265af7f468cdaff4a36401231f2206a1a7de9a0dae082a40471661d11d10ce25b805eba13a8a43dee93c5c5c75bd502a0812722ed122cf8abd7eeee20fc5280310609e5eab3b672910f483c4a02220fce4a93f2474a7d8cde17bd5cbc89e3d8aa9a6d2710db987cfebf39dcd94201dbd84eeb8238e962488e0b3cdc748c06db79a762f9cd620444c84c0066558fde09a8032a04a057a688f32fd"}, @NFTA_DATA_VALUE={0xe6, 0x1, "d5ed406b82d70cb1ce4d23d0b68c42b0943c0b6d72915dbf024d8664aa95a574530a816801bb27dbb1407acfffbab2d9ccc86afb8a0ca1efe96e0cc025e49c671ef30208d3f5a86bd12c9ac2fbbeb547744eec9e3894701553cc6224dd070c940f992456cc259fdcc86255b7a6112bc9f640f34400eec7a3683a3a11230afa2b161a83312909e18fb7239741f1346c1422cc4baba3db9aa9baf382ce4c15e194b6b3753d03acb964769689c7a0e86320fa9b0b5da22c6986f1dc62d2dc835b9969d2dd0e4ba15322312987ff3d197c4003fdc447e0d96a2dae7450c9b8bd852e1fc2"}, @NFTA_DATA_VALUE={0x30, 0x1, "48f8428649676e00e82b18551ed7d8c0f4dfd8a25e5bcd21ca96e9806618880e80cab8ce688c0601ec071cf4"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "64eb5d8cd446701e1af33597bb5b23dbc28caacae8d69508173a23276bff782730e2f45840378cf1b6be00474a16645edb9c1c62b8b6bc866779cc63"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "7e60868ac3918501e9b477a479c47f57b1cb09bb5e283fe5698a5695806da617afa7be7829ae99e208afbaf89f60f933bd5bcb0303092b0e51ae7ed40b59414902b440cc2b5da937e24cdbacc81bfa8db6ca5ca529552b1bdcc8b792e582cc1cf815ab6bfaff3d94c2a6"}, @NFTA_DATA_VALUE={0x73, 0x1, "94845584d7f0385b1faf3f1a661b0ded1f6e5b5333badce45a9cdbebabf2e4ada52476565304b817a1ff01c7d9d1a9d70e96c0258846412c40cf5aeb68c52027216c4f74deee9529cee68f345f187cdc5efd91c5436005263672b5deb2d978d8aeca6e369062f2f689462504238cef"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x5cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc8, 0x6, 0x1, 0x0, "eb03366a2bc1247d0b23e91c584db3dc0c41de399ca68085fb7188ce09ff31a07d0d1cf9b2edb2a4e3b8b7658274f9c88b5d61320d2c71d8eff9844afe50c398b81f1768b8a10cf9059f287c6900475219dfaf830078940ade13f5d0430e0fe8566b3a996d785c4ca126c5687237d1ae4f7b0bf7e284a2169bd8e5e0b64a2f90794c0a6186521eed1086b2d4e40992664db81a83eb90fa1311947b92cc58d34ccdca049bc6c22ad53fcc859a8337a8eabf565487fa81cafd4a652acc0b0db9f2353e3683"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "63342f7de21699a98eb665ded91e2c0a4c6bd87bba6d309c4ec60bba457368e571c21da1d82c028e2443518fdd46a2b8b8902770051f1ea3659d428a7b9ae7620812054b2648c3f23c00f3a2883876c7785a4e17f024a86de55204ddec75c14d78fdd2b66bb2e08c017c31304286ff3e1deff56257fab4944ed415ff2cde46c5a670a844fa8b4bb70b7a8cab30eee5ee790ae793fffd40d17f9fca9b9559ecc7bca89e87d62ba7229e0931a8c6044e119d634b553064fd623dcadff43457f95b5fe56b05"}, @NFTA_DATA_VALUE={0xd8, 0x1, "e4ba6c8a298c7e5c920ff7446b21ad939a5ff4a606d3ab86d95580226e8ab52915c74189ca9dd2fd533a646cf531acc5d5c463a3027b8c3a4201769b4e1eebea242e725b408af86cca28837cd5697d7a8fe1ff3b20bda48e4544482bb61c776ca27357e3b41fb5668a91bd7e33378d9f7f012142600f9ce581227df8e535ede69a62a23c1e907a0e1280ad3ddbd4470f9add89a3e5e2ced05d68de81a2a8f196afe9053ff667b163a58e0ec3fbd1921feef97274b4ccd408f32bcc82bbd91259f8ff1c842bf9a2b2b2867e9632cc3d06eb157939"}, @NFTA_DATA_VALUE={0x44, 0x1, "ffff56609b618b763b18d31470dc1caf15f0daaa520523d91737dd41e452600ba9b26fcaa05627d67fcfde8653d3ccdb567edeb4b13eed124c208416055f03e0"}, @NFTA_DATA_VALUE={0x5, 0x1, "18"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x2c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "d4c7cda864bdc86d4fb95fc866ded881fb01e44c62a611a05102faa8f8d3fa2d4b495d9ceabe141ebc4c879848ac94e1d9f35d85612b4931fd7ea0c13fb413d6c636cec3493f003fbd47147b8273c8a864e59acc42ad8019c1d1cd4063f16e11eaa4c114394c4733d92a73392e980aefac64922a75"}, @NFTA_DATA_VALUE={0xbf, 0x1, "85320081c4aa8bf59747e7698bacee73fbb6ad324ea64c17d50e1ef16ffc50f45c6e256729cf057eba10521f15e4afcb3f152d6c5dfc79f84bea26217754e3739a03e7330ca7fed8ce42896fcc30a9744ef0016671dd0d0828341fd0447a4144f7c26647e362fd71b19b7159952cbe463cf2037202a0b8da5d727d55de714296e6b662fdb256bdbfa6d5883f9183e118c8719d12435c68c7cae8363d6838eb4fb9b42e9a801f82d80ff484451bd2f9c8fff709715e79a17ac2994c"}, @NFTA_DATA_VALUE={0xe3, 0x1, "92a40c794cdfc419074e831d15b7eb2bebcc336f69d52e132f6aed93da1d3cbb82561e4f81b965bd3acc63a92f8913560a00c36b6425082d0a6af80d099d8d163ca9254532aedb2d7893cb96f25bbd17c5bcf9ed8ed20e726db065e41a8dedaf1c7352c093eb94428c2b955d1170a8d8118ddaceb460c3fcee48e0be94e5d10e9f25ca51de1ff7f03020140811b785afb89362421e28ab16a917d07f660d321833d3cf36ce45eb89cbdd1067f4634684ed2917aa89f00c35ac6d0378842631baf1bfd77bf5cc855d194b8faed7705e1b11b005b064dc3c56d9a1c5467d985a"}, @NFTA_DATA_VALUE={0x5f, 0x1, "60f479b5dbaca0c0baec67889bbee1861e3dbd670c7fd31e88ec8d5409b4c7e1dc5f64c8a2a83e4906201e36d352853e6769954e1e44b905f0439ac424410736367e93d0f8d83d4c3ae5a3995ad71a506606c8634b6db4ac29310b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x10, 0x1, "45562fdeb00cc97f9fc57375"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}, {0x4b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "00be08c8fe48fd955370c5c29e00ca3f68ea8ac541349c710beaf2a353b674df4235bb0c8deb04ea7ca27f6741428557761e5ba9ccef4724919ec1009b73e09c10e30274a928e7dedd862da362f7bc0a5b89255c1926b4601728a7263c1a5e7d61c1d1438323074773049965688b17ccf95e056bb1b0fbf3ebde48909743d4"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x64, 0x1, "16d9e6dd07cc7d85c89a017d32c963458310944cfde927478e86f8a69ccc55893e4892f75acf95e4cac39b832d0a067e3314e640be9bdb4d04240b84e59d5b840278d34e3d1107629e114e5fc03a9da0c5ac6f8f9ef1f69c178d4ce12c34cc27"}, @NFTA_DATA_VALUE={0xc9, 0x1, "638874ba0dafdb08694d447435379a938523ec13caab0a77d0cce218ee19b36c93493d2e6d8b51e248967cbc6f4dcfe122741febf905af8028676c3d58ae257ed996a1d8cfaafd4d7156ef954d5068372d36ae0c0ad0803f98d6ae6afd941153b7a5fc4ade32f42acc290fbc08b549c8186275370a0615bb3c37ef37759c8de0565ea29542fd444432922730fe33304ed8c41f4840c38b376ff727888e103b629c90257cc2d24bb3b1f558e6b2149ea9790fe98e7992453e1de301bce2766a7e03a9267b5d"}]}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "5dc48bd69e90ec3f1442d8cd0a916c69e1738c73e979193ce633121f3cd68f126779ea3e46a2d19fc84df80bff5949995e75a784db445425344f3475c2f0b35ff43791373266eaa7f4f9edd71224d12bb23407be1c21b51732139d14566e1dd5e0e55bd33d76b8c5b63023cd800634d0b5f2769d583762cc1f07ec7a8593e3f823dbe62a635ee6df00befa15dd95ba297626b8ae1b9ab8c5bbc3e1"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x79, 0x1, "291950d8466c2d5e69645e649604999fe308e36f2ef29306014af4b777ed286a466ba624b5f0e0b5a2391386f5f893b1e861e9965a832e47c417baab1c48a374cc7f84dad2aab3b6ddacdf82aedac786af7e07371f73d69ec69fa5c703821ead22d230b434b64dbd7279c469ac5c843982e04b5ce3"}]}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x17}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9a}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}]}, {0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x88, 0x6, 0x1, 0x0, "f8fa85d7d5b287db2e1cf58978e426a4babc20d1a341d0d2f9b75b691a0bc8e40330c98cc62a394607a477cd6510bfcba8476e6da0e38da5cd2add072a7c52203e73b036966fa23c73cd16a1780c457ff2dcc7b15574576af736578b49ea6eab572aaecf2dd8512baa7f152622ed371efe1f990ebd308182ffbc7b8c3cce5984395ac09d"}, @NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "02e11b3d9ea04c2135ab53ab771e06291fadd4977bdaa089eaab505d2a70f690a541f8aa4e51b2476aeaeb4fd046712e9b919e032cc8d23b0ba45e02a1cd4c2f852815111361cdd15395ba14092acf32d7692e6178cce9b86d1705d8b5493dd8f2c736de703dd546e7c3a3e267983261726373b2a06067442071010e5636ff3b789385f7eab24e7415876beb82f15bd070e0dfe2752ac81b43d36da99cee68d10849e86a9df7d25b71726228bb61dd1cc4eb393bb88370a10b"}, @NFTA_DATA_VALUE={0x4d, 0x1, "47804f168d9086e781bbaeba287b544a012c64551decb2f837188850b8e57089a91dacd01acf75dca276b846b10ce2e158a927159a1736a7f1aea6a61e5282eb4a7cf00a1ae1f1d03c"}]}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "06c71516e814750c58134392a9e9b496fe734b2ccc3fa1d46f923d48adffeac26403b5ef26b465aa51eb9558d8592300ab37b6051a9f4e973889e8f5a535511d172f206ba2248a538ab237c38e40cf3d35887f965d978821c66c4c208bd64d6985a92bcd933dd0bca124dffebbe14bc3231d019dc983bc4bee4c9655b70c70f99629edca25fe28d0723067"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x194, 0x3, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x38}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x62, 0x7, 0x1, 0x0, "c29e79ed9b907e8736bb664303c5d91e64fd05710bd265a17524c07064ca0a371562ca7638288ef5ed27adb1b9e4e88240bf6d5a5d199316180c380af100c88c68b883e28ce83f36c2af25ac4327791e7ca00e2a1b5be8f40736378b6fdb"}]}, @NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x59, 0x6, "857271059b3b28f55ad7415016decae8e0e3329474140e2fa4bbd7cb5be7e9d75dde0a47818abfc9226958d113a0d077a27d9b6538e49c8351ba4a90efc26c7cdf755bb79f597fe0ffdae1cca3aae5146986f72f79"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8, 0x6, "6d840aa2"}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "95f42a5d2e55b97404b353cb5dc4375f02c02f9b31f5732b6871bb9782b21fd333b96505bdfbd1b245b11b688e1f7751c57dc31deb64d2b0c374f7e26f0e5e6bbf6b3f07d289cd47800d6dd785fed6d52a80475bad9228f0b7c98aa0f60b9fa8db78bb3638e878aee1"}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2ba4}, 0x1, 0x0, 0x0, 0x20000802}, 0x4000000)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10)
socket$packet(0x11, 0x2, 0x300)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r11, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
accept4$packet(r0, 0x0, &(0x7f00000010c0), 0x40000)

1.766755972s ago: executing program 3 (id=3743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x8c}}, 0x95)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x5c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
recvfrom$llc(r7, 0x0, 0x0, 0x10000, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x3a, 0x2f, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xffff}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1001, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00'})
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0)

1.570245396s ago: executing program 2 (id=3744):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0xe, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x5, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xc, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0xfff2)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20, 0x18}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x2a, 0x800, 0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
connect$packet(r7, &(0x7f0000000040)={0x11, 0xeb, r10, 0x1, 0xc, 0x6, @random="07ceb8cc8bf0"}, 0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@newtaction={0x1108, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x10f4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x1040, 0x3, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x861c}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0x7, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x60, 0x2001, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0xfffffffd, 0xffffffffffffffff, 0x0, 0x4}, 0x2}}]}, {0x14, 0x6, "45a41945c0e03655cddc1f8fcb542e5f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1108}}, 0x2000a804)
r11 = socket$rds(0x15, 0x5, 0x0)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c4}, 0x8c0)
setsockopt$RDS_GET_MR_FOR_DEST(r11, 0x114, 0x7, &(0x7f0000001200)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f00000011c0), 0x2c}, 0xa0)

1.569752594s ago: executing program 4 (id=3745):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200002}, 0x94)

1.417239577s ago: executing program 1 (id=3747):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0}) (rerun: 64)
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000000c0)=[{0x2, 0x80000002, {0x2}, {0x0, 0xf1, 0x6}, 0x2, 0x2}, {0x1, 0x4, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x82}], 0x40) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) (async, rerun: 64)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5f}]}]}, 0x58}}, 0x2) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="2690bae85300"}) (async, rerun: 32)
r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
connect$inet6(r8, &(0x7f0000000f80)={0xa, 0x1, 0x6f3d, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000006200)=[{{&(0x7f0000001000)={0xa, 0x4e24, 0xd6c2, @private1, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000003080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x18}}], 0x1, 0x48000) (async, rerun: 64)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a"], 0x2c}}, 0x0) (rerun: 64)

1.267288968s ago: executing program 3 (id=3748):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r0, 0x180000000) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)

1.266869388s ago: executing program 4 (id=3749):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 32)
r3 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6)

1.123607083s ago: executing program 0 (id=3750):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[], 0x18}}, 0x84)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x14}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)

863.638447ms ago: executing program 0 (id=3751):
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000002d000000000000000004df25097c0000080001800400060004000280"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

799.160482ms ago: executing program 3 (id=3752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000000e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESOCT=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000040000100fefffffffbdbdf25017cfd69040042800c0001800600060c0002800800178004001f800000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0xfffffedb, &(0x7f0000000000)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000008200000a14000000030a01020000000000000000050000031c0000000e0a010200009c9ae3a40000000000000a0000010800038004000080140000050000000000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20000010)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f00000004c0)="b0", 0x1, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0x4, 0x0, 0x0, 0x4, 0xffffffffffffffea, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x1000c041)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)

754.83834ms ago: executing program 4 (id=3753):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200c0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x1) (async, rerun: 64)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000280)={{0x6, 0x7, 0x1, 0xcb09, 0x4}, [{0x6, 0x0, 0x7, 0x8}, {0x4, 0x2, 0x1, 0x6}]})
sendto$unix(r2, &(0x7f0000000180)="a1716acd182c8941bf71d91ec5d01ebfa3e520b34caf0fae3709472284bd49a88dfe1eadffef452918cb2b91c55fd975b952e357859878471d22de7914144c45d1bafb202f1e40bad81b47fb7f62bb0091f57f7da73b48791bb5a024f1b027d6a473347258659b0edee87633dec4f762605b3a7b95e6ae78bfe2", 0x7a, 0x810, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async)
pread64(r2, &(0x7f0000000300)=""/148, 0x94, 0x1)

698.901286ms ago: executing program 0 (id=3754):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="47feffff", @ANYRES16=r1, @ANYBLOB="010028bd700000dcdf25140000000c00018008002af0", @ANYRES32=r3, @ANYBLOB="05000c0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4920}, 0x44860)

489.362444ms ago: executing program 4 (id=3755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r1, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
recvmmsg(r3, &(0x7f0000002780)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/204, 0xcc}], 0x1, &(0x7f0000000540)=""/140, 0x8c}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000780)=""/161, 0xa1}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/16, 0x10}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000c00)=""/71, 0x47}], 0x9, &(0x7f0000000d40)=""/251, 0xfb}, 0xaba}, {{&(0x7f0000000e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000ec0)=""/142, 0x8e}, {&(0x7f0000000f80)=""/239, 0xef}, {&(0x7f0000001080)=""/84, 0x54}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/161, 0xa1}], 0x5}, 0x9}, {{&(0x7f0000001280)=@rc={0x1f, @none}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/82, 0x52}, {&(0x7f0000002380)=""/108, 0x6c}, {&(0x7f0000002400)=""/161, 0xa1}, {&(0x7f00000024c0)=""/151, 0x97}, {&(0x7f0000002580)=""/45, 0x2d}, {&(0x7f00000025c0)=""/110, 0x6e}, {&(0x7f0000002640)=""/20, 0x14}], 0x8, &(0x7f0000002700)=""/82, 0x52}, 0x6}], 0x4, 0x21, &(0x7f0000002880)={0x0, 0x989680})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xffffff60)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)

377.147102ms ago: executing program 0 (id=3756):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r0=>0x0})
r1 = socket$inet6(0xa, 0x80000, 0x9)
sendto(r1, &(0x7f0000000040)="1223ee46cad1c5877d227a0ef1665155d2a0eb4a79da9ac6cab67b00023eb25c2285353eec15ffb905b072a072aaecf0ec1ab48b6b5e3adfa405d61996d0e7c32c425fa19c80ad5a4fc0d2474a2f8bc8d9e54a61a34f93ce342246544797f5047e88aa364184a3f7", 0x68, 0x24000010, &(0x7f0000000140)=@sco, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)

227.349363ms ago: executing program 4 (id=3757):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000040)=""/18, &(0x7f0000000080)=0x12) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x2, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={<r2=>0x0, 0x2}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={r2, 0x1, 0x87, "e19782413963c0521908a132901d0c6343b01e3fd6d0b785e19825b98d683c8fcc1b110a6c4b8f809d82748ec6e09e7a6397530851fec83f0509e50a61cd221de452e8e9e5ce4a2402a1b75322826aa914c3569e134b45241a2deea5b36d1f2c071d060239acaa47c05ba63502887c2fe026dce8477d54a82847af4b61075dc21e9a9c534a3151"}, 0x8f)

74.078421ms ago: executing program 1 (id=3758):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(&(0x7f0000000140)) (async)
write(r1, &(0x7f0000000340), 0x11000) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) (async)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async)

73.335557ms ago: executing program 0 (id=3759):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x5, 0x9, 0x8a7}) (async)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', <r2=>0x0, 0x1, 0x80, 0x8, 0xfffffffb, {{0x10, 0x4, 0x2, 0x20, 0x40, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@end, @lsrr={0x83, 0x13, 0xa0, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xf, 0x0, 0x3, [0x10001, 0x401, 0x7f, 0x4]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0, 0x1e27bbba795544b5, 0xab, 0x7, 0x9, 0x945eaabb4e8b4d18, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x8000, 0x6, 0x5}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r5=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r6=>0x0, 0x8, 0x700, 0x2, 0x6, {{0x23, 0x4, 0x3, 0x6, 0x8c, 0x66, 0x0, 0x1, 0x2f, 0x0, @local, @private=0xa010100, {[@cipso={0x86, 0x18, 0x1, [{0x2, 0x12, "937cbd889e0ce88e627b9cda6a690eae"}]}, @lsrr={0x83, 0xf, 0x76, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x2, 0x9, "115e4be636b0b6"}, {0x0, 0x11, "1bcbb21f4edd82e6bb257e94599fd2"}, {0x0, 0xe, "c93f7c27bac5d92a1f6b4c5d"}, {0x1, 0x5, "90e59c"}]}, @lsrr={0x83, 0x1b, 0xb3, [@broadcast, @empty, @private=0xa010101, @multicast2, @local, @private=0xa010100]}, @noop]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', <r7=>0x0, 0x7, 0x20, 0x2, 0x2, {{0x2f, 0x4, 0x0, 0x3d, 0xbc, 0x68, 0x0, 0xd, 0x6, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x26, 0x1, [{0x1, 0xa, "bc42b008255e6975"}, {0x6, 0xd, "a32e86d5776779a3d1a3a3"}, {0x0, 0x5, "232f99"}, {0x1, 0x4, "9e5d"}]}, @timestamp_prespec={0x44, 0x34, 0xc5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@private=0xa010101, 0x5}, {@multicast1, 0x8}, {@multicast1, 0xe7e}, {@rand_addr=0x64010102, 0xfffffff7}, {@remote, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xff, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @ssrr={0x89, 0x1b, 0xf, [@dev={0xac, 0x14, 0x14, 0x1c}, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @local, @local, @dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0xf, 0xc2, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x16, 0x3, [{0x1, 0x10, "dc26bddc118f054fd1e5da271711"}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', <r9=>0x0, 0x8000, 0x8000, 0x9f, 0x7, {{0x17, 0x4, 0x1, 0x3a, 0x5c, 0x65, 0x0, 0xa, 0x29, 0x0, @multicast2, @rand_addr=0x64010102, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xb2, 0x3, 0x1, [{@broadcast, 0x3}, {@broadcast, 0x7fff}, {@multicast1, 0x7f}, {@rand_addr=0x64010101, 0x43a2}, {@loopback, 0x100}, {@multicast2, 0x3}]}, @rr={0x7, 0x7, 0xaf, [@initdev={0xac, 0x1e, 0x4, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0}) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@local, @multicast2, <r11=>0x0}, &(0x7f0000000680)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', <r12=>0x0, 0x40, 0x80, 0xe6, 0xffffffff, {{0x7, 0x4, 0x2, 0x7, 0x1c, 0x66, 0x0, 0x8, 0x6, 0x0, @broadcast, @empty, {[@ssrr={0x89, 0x7, 0xbc, [@local]}, @noop]}}}}}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f00000007c0)={'ip_vti0\x00', <r14=>0x0, 0x10, 0x10, 0x3, 0x3, {{0x1a, 0x4, 0x3, 0x2, 0x68, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xd7, [@private=0xa010102]}, @timestamp_addr={0x44, 0x3c, 0xda, 0x1, 0x8, [{@empty, 0xfffffffa}, {@multicast2, 0xfffffff8}, {@multicast2, 0x46f5}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xa692e77}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @remote]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000900)={'tunl0\x00', <r16=>0x0, 0x700, 0x8, 0xfffffffe, 0x3ff, {{0x30, 0x4, 0x1, 0x20, 0xc0, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x27, 0xaa, [@multicast2, @broadcast, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x63, [@empty, @rand_addr=0x64010102]}, @rr={0x7, 0x2b, 0xe9, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @broadcast, @local, @broadcast, @remote, @private=0xa010100, @remote]}, @timestamp={0x44, 0x10, 0x55, 0x0, 0x9, [0x4, 0x5, 0x3]}, @noop, @timestamp={0x44, 0x28, 0x7e, 0x0, 0xc, [0x8, 0x4, 0x0, 0xd, 0x47, 0xf2c, 0x4, 0x0, 0x6e2]}, @ra={0x94, 0x4}, @cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "d87e4dde7a"}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wg2\x00', <r17=>0x0}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ac0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'syztnl0\x00', <r19=>0x0, 0x2f, 0xf4, 0x1, 0x6, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x20, 0x0, 0x1000}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000bc0)={@private1, <r20=>0x0}, &(0x7f0000000c00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', <r21=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000000cc0)={0xa38, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x12}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x401, 0xff, 0x7, 0x40}, {0x7, 0x0, 0xa5, 0x8}, {0x8000, 0x1, 0x6}, {0x1a, 0x5, 0x0, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x9a}, {0x101, 0x7, 0x2, 0x6}, {0x0, 0x8, 0xff, 0x10}, {0x4, 0xcc, 0x3, 0xcb}, {0x10, 0x5, 0x9, 0x4}, {0x5, 0x2, 0x20, 0x6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff801}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcd1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0xff, 0x6, 0x3}, {0x5, 0x5, 0x9, 0x3c7}, {0xfff7, 0x9, 0x9, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0xa38}, 0x1, 0x0, 0x0, 0x24048811}, 0x4000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x5, 0x3, &(0x7f0000001780)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x38}], &(0x7f00000017c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001800)=""/4096, 0x41100, 0x71, '\x00', r8, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x4, 0x4, 0x9, 0x8a6}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f0000002840)=[r0, r0, r0], &(0x7f0000002880)=[{0x2, 0x1, 0x7, 0x5}, {0x0, 0x3, 0x4, 0x5}, {0x5, 0x1, 0xc}, {0x4, 0x5, 0xe, 0x7}, {0x2, 0x5, 0x10, 0x1}, {0x1, 0x1, 0x0, 0x8}, {0x2, 0x1, 0x5, 0x7}, {0x5, 0x4, 0x9, 0x4}], 0x10, 0x9}, 0x94) (async)
r23 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x2c, r23, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002b00)={r13, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (async)
r24 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r24, 0x8993, &(0x7f0000002b40)={'ip6erspan0\x00', @ifru_map={0x80000001, 0x8, 0xecef, 0x3, 0x62, 0x2}})

0s ago: executing program 0 (id=3760):
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000300)=0x3, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{0x0}], 0x1)
shutdown(r4, 0x1)
write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a310000000005000100070000001800078008000140ff"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
getpeername$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
sendfile(r8, r7, 0x0, 0x10000)

kernel console output (not intermixed with test programs):

][T15476] netlink: 'syz.0.2415': attribute type 11 has an invalid length.
[  393.024568][T15479] netlink: 'syz.3.2418': attribute type 21 has an invalid length.
[  393.308797][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'.
[  393.400198][T15500] xt_hashlimit: size too large, truncated to 1048576
[  393.428769][T15498] syzkaller0: refused to change device tx_queue_len
[  393.480858][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.521828][T15502] veth0_to_team: entered promiscuous mode
[  393.549912][T15502] veth0_to_team: left promiscuous mode
[  393.790444][T15511] 8021q: VLANs not supported on wg1
[  394.683721][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'.
[  395.430205][T15578] netlink: 'syz.4.2439': attribute type 1 has an invalid length.
[  395.579724][T15584] gretap2: entered allmulticast mode
[  395.604031][T15584] bond10: (slave gretap2): making interface the new active one
[  395.615770][T15584] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  396.324426][T15627] netlink: 'syz.1.2453': attribute type 23 has an invalid length.
[  396.357345][T15627] netlink: 'syz.1.2453': attribute type 21 has an invalid length.
[  396.776479][T15644] __nla_validate_parse: 9 callbacks suppressed
[  396.776531][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'.
[  396.888465][T15654] netlink: 'syz.0.2461': attribute type 2 has an invalid length.
[  397.019882][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'.
[  397.032035][T15660] netlink: 'syz.2.2463': attribute type 4 has an invalid length.
[  397.321306][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.330109][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.339129][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.347875][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.649519][T15690] netlink: 460 bytes leftover after parsing attributes in process `syz.0.2470'.
[  397.659396][T15690] netlink: 3744 bytes leftover after parsing attributes in process `syz.0.2470'.
[  397.669683][T15690] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2470'.
[  397.679462][T15690] netlink: 6158 bytes leftover after parsing attributes in process `syz.0.2470'.
[  397.690469][T15690] netlink: 2044 bytes leftover after parsing attributes in process `syz.0.2470'.
[  398.024426][T15709] Cannot find del_set index 0 as target
[  398.317850][T15720] syzkaller0: entered promiscuous mode
[  398.334263][T15720] syzkaller0: entered allmulticast mode
[  398.456744][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  398.718270][T15734] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  398.843274][T15733] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2484'.
[  398.988580][T15747] netlink: 'syz.0.2490': attribute type 33 has an invalid length.
[  399.145869][T15749] can: request_module (can-proto-0) failed.
[  399.471613][T15773] bridge0: left allmulticast mode
[  399.549129][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2500'.
[  399.679682][T15788] Cannot find map_set index 65532 as target
[  400.587184][T15826] netlink: 'syz.0.2514': attribute type 3 has an invalid length.
[  401.124177][T15860] syzkaller0: entered promiscuous mode
[  401.147567][T15860] syzkaller0: entered allmulticast mode
[  401.291142][T15860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.339039][T15860] tipc: Resetting bearer <eth:syzkaller0>
[  401.841861][T15857] tipc: Resetting bearer <eth:syzkaller0>
[  401.881394][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.915194][T15857] tipc: Disabling bearer <eth:syzkaller0>
[  402.231745][T15874] syzkaller0: entered promiscuous mode
[  402.264520][T15874] syzkaller0: entered allmulticast mode
[  402.813922][T15910] __nla_validate_parse: 9 callbacks suppressed
[  402.813942][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2534'.
[  405.584944][T15941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.605669][T15941] syzkaller0: entered promiscuous mode
[  405.620782][T15941] syzkaller0: entered allmulticast mode
[  405.658184][T15941] tipc: Resetting bearer <eth:syzkaller0>
[  405.699358][T15940] tipc: Resetting bearer <eth:syzkaller0>
[  405.775520][T15940] tipc: Disabling bearer <eth:syzkaller0>
[  405.846251][T15955] syzkaller0: entered promiscuous mode
[  405.852443][T15955] syzkaller0: entered allmulticast mode
[  405.867527][T15946] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  405.875739][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'.
[  406.009839][T15956] 8021q: adding VLAN 0 to HW filter on device bond11
[  406.079160][T15971] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes.
[  406.291887][T15974] syzkaller0: entered promiscuous mode
[  406.309195][T15974] syzkaller0: entered allmulticast mode
[  406.414720][T15981] netlink: 'syz.4.2550': attribute type 3 has an invalid length.
[  406.443264][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2553'.
[  406.446971][T15981] netlink: 'syz.4.2550': attribute type 3 has an invalid length.
[  406.452928][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2553'.
[  406.502282][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2550'.
[  406.663842][T15997] netlink: 'syz.2.2554': attribute type 1 has an invalid length.
[  406.682051][T15997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2554'.
[  406.701957][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'.
[  406.724820][T15991] syzkaller1: entered allmulticast mode
[  406.827831][T16003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2556'.
[  406.856334][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2556'.
[  407.105854][T16017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2559'.
[  407.124981][T16011] syzkaller0: entered promiscuous mode
[  407.130876][T16011] syzkaller0: entered allmulticast mode
[  407.433537][T16020] nbd2: detected capacity change from 0 to 127
[  407.473679][ T5644] block nbd2: Receive control failed (result -32)
[  407.488073][ T1671] block nbd2: Dead connection, failed to find a fallback
[  407.499871][ T1671] block nbd2: shutting down sockets
[  407.506600][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.522162][ T1671] Buffer I/O error on dev nbd2, logical block 0, async page read
[  407.537125][ T1656] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.550499][ T1656] Buffer I/O error on dev nbd2, logical block 1, async page read
[  407.567084][ T1671] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  407.576603][ T1671] Buffer I/O error on dev nbd2, logical block 2, async page read
[  407.585144][ T1671] Buffer I/O error on dev nbd2, logical block 3, async page read
[  407.594981][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.605624][ T1671] Buffer I/O error on dev nbd2, logical block 0, async page read
[  407.614156][ T1671] Buffer I/O error on dev nbd2, logical block 1, async page read
[  407.623460][ T1671] Buffer I/O error on dev nbd2, logical block 2, async page read
[  407.632542][ T1671] Buffer I/O error on dev nbd2, logical block 3, async page read
[  407.641468][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.650732][ T1671] Buffer I/O error on dev nbd2, logical block 0, async page read
[  407.659150][ T1671] Buffer I/O error on dev nbd2, logical block 1, async page read
[  407.670341][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.680755][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.693089][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.704664][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  407.710385][T16025] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  407.714675][ T1671] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.715282][T11683] ldm_validate_partition_table(): Disk read failed.
[  407.750442][T11683] Dev nbd2: unable to read RDB block 0
[  407.759311][T11683]  nbd2: unable to read partition table
[  407.793605][T11683] ldm_validate_partition_table(): Disk read failed.
[  407.804892][T11683] Dev nbd2: unable to read RDB block 0
[  407.813224][T11683]  nbd2: unable to read partition table
[  407.967026][T16038] syzkaller0: entered promiscuous mode
[  407.979427][T16038] syzkaller0: entered allmulticast mode
[  408.103173][T16038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.118884][T16043] syzkaller0: entered promiscuous mode
[  408.125163][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.125439][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.125686][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.125920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.163083][T16043] syzkaller0: entered allmulticast mode
[  408.189599][T16037] tipc: Resetting bearer <eth:syzkaller0>
[  408.267461][T16037] tipc: Disabling bearer <eth:syzkaller0>
[  408.598229][T16063] __nla_validate_parse: 1 callbacks suppressed
[  408.598251][T16063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2571'.
[  408.628382][T16062] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  408.641130][T16065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'.
[  408.733124][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'.
[  412.036317][T16115] syzkaller0: entered promiscuous mode
[  412.051084][T16115] syzkaller0: entered allmulticast mode
[  412.101177][T16115] TC_ACT_REPEAT abuse ?
[  412.124482][ T3289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.202879][T16118] netlink: 'syz.3.2584': attribute type 142 has an invalid length.
[  412.433232][T16127] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2588'.
[  412.458047][T16124] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2584'.
[  412.477608][T16127] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2588'.
[  412.487201][T16124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2584'.
[  412.499953][T16128] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  412.513088][T16128] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  412.539281][T16128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2587'.
[  412.861128][T16144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2592'.
[  412.920085][T16147] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2594'.
[  413.121647][T16159] 8021q: adding VLAN 0 to HW filter on device bond12
[  413.145778][T16153] syzkaller0: entered promiscuous mode
[  413.161047][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.169834][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.178453][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.193219][T16153] syzkaller0: entered allmulticast mode
[  413.234231][T16153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.253326][T16153] tipc: Resetting bearer <eth:syzkaller0>
[  413.342338][T16174] dvmrp8: left allmulticast mode
[  413.494614][T16177] syzkaller0: entered promiscuous mode
[  413.511154][T16177] syzkaller0: entered allmulticast mode
[  413.739175][T16186] __nla_validate_parse: 3 callbacks suppressed
[  413.739197][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'.
[  413.847149][T16152] tipc: Resetting bearer <eth:syzkaller0>
[  413.914874][T16152] tipc: Disabling bearer <eth:syzkaller0>
[  413.944360][T16192] bridge3: entered promiscuous mode
[  413.952206][T16192] bridge3: entered allmulticast mode
[  414.655262][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2615'.
[  414.802165][T16223] syzkaller0: entered promiscuous mode
[  414.810336][T16223] syzkaller0: entered allmulticast mode
[  414.863721][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2618'.
[  415.276062][T16246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2624'.
[  415.323409][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.334845][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.361174][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.361640][T16247] syzkaller0: entered promiscuous mode
[  415.376286][T16247] syzkaller0: entered allmulticast mode
[  415.384539][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.794486][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  415.918242][T16254] netlink: 'syz.1.2626': attribute type 4 has an invalid length.
[  416.281887][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'.
[  416.293847][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2629'.
[  416.445872][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.241932][ T6912] net_ratelimit: 2 callbacks suppressed
[  417.241956][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.487601][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.523451][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.524928][T16286] syzkaller0: entered promiscuous mode
[  418.593924][T16286] syzkaller0: entered allmulticast mode
[  418.828235][T16320] xt_l2tp: v2 doesn't support IP mode
[  418.878968][T16315] lo speed is unknown, defaulting to 1000
[  419.495063][T16336] syzkaller0: entered promiscuous mode
[  419.502563][T16336] syzkaller0: entered allmulticast mode
[  419.564471][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.601848][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.642966][ T6910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.653602][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.664071][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.805163][T16324] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  422.022149][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.095207][T16351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2651'.
[  422.231020][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.286716][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.314663][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.383793][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.463650][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.493928][T16366] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2655'.
[  422.504311][T16366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2655'.
[  422.515308][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'.
[  422.535084][T16372] Cannot find map_set index 65532 as target
[  422.681064][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.001399][   T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.287474][T16416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.421282][T16427] netlink: 'syz.2.2666': attribute type 13 has an invalid length.
[  423.676282][ T5644] block nbd3: Receive control failed (result -32)
[  423.722042][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.779101][T16398] 8021q: VLANs not supported on ip_vti0
[  424.178063][T16451] syzkaller0: entered promiscuous mode
[  424.191822][T16451] syzkaller0: entered allmulticast mode
[  424.763289][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.829665][T16461] syzkaller0: entered promiscuous mode
[  424.849908][T16461] syzkaller0: entered allmulticast mode
[  425.805335][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.841275][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.849526][ T6918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.858773][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.883758][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.920866][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.222584][T16546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.549015][T16567] __nla_validate_parse: 12 callbacks suppressed
[  429.549037][T16567] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2704'.
[  429.816107][T16577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'.
[  429.951501][T16582] ipt_REJECT: ECHOREPLY no longer supported.
[  429.963136][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.007065][T16584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2708'.
[  430.017957][T16543] dvmrp0: left allmulticast mode
[  430.028733][T16543] dvmrp8: left allmulticast mode
[  430.395863][T16601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.411857][T16602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.428194][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2711'.
[  430.528389][T16591] bond0: entered promiscuous mode
[  430.545166][T16591] bond_slave_0: entered promiscuous mode
[  430.577934][T16591] bond0: left promiscuous mode
[  430.604616][T16591] bond_slave_0: left promiscuous mode
[  430.712632][T16589] tipc: Disabling bearer <eth:syzkaller0>
[  430.819341][ T5285] veth0_macvtap: left promiscuous mode
[  431.000872][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.012992][T16631] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2723'.
[  431.048713][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'.
[  431.294949][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'.
[  431.348859][T16647] IPv6: Can't replace route, no match found
[  431.357779][T16653] netlink: 155412 bytes leftover after parsing attributes in process `syz.1.2725'.
[  431.403513][T16653] openvswitch: netlink: Message has 512 unknown bytes.
[  431.422328][T16650] xt_CT: No such helper "syz1"
[  432.042636][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.376340][T16709] xt_hashlimit: size too large, truncated to 1048576
[  432.601296][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.612225][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.082127][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.169265][T16729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'.
[  433.171334][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.196111][T16733] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  433.196111][T16733] Please contact the netfilter-devel mailing list or update your nftables rules.
[  433.203669][T16732] siw: device registration error -23
[  433.675487][T16752] lo speed is unknown, defaulting to 1000
[  434.076957][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'.
[  434.139510][ T8017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.695219][T16805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.811769][T16752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  435.137345][T16814] __nla_validate_parse: 4 callbacks suppressed
[  435.137380][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'.
[  435.182912][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'.
[  435.262981][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'.
[  435.565746][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'.
[  435.600285][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2770'.
[  435.735833][T16851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2772'.
[  435.777063][T16854] netlink: 'syz.1.2774': attribute type 5 has an invalid length.
[  435.922325][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'.
[  435.943669][T16858] netlink: 'syz.1.2775': attribute type 11 has an invalid length.
[  436.230357][T16863] sctp: [Deprecated]: syz.0.2776 (pid 16863) Use of int in maxseg socket option.
[  436.230357][T16863] Use struct sctp_assoc_value instead
[  436.312669][T16862] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  436.362737][T16862] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  436.470052][T16867] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  436.711513][T16883] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2779'.
[  436.757100][T16883] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2779'.
[  436.800079][T16883] netlink: 'syz.0.2779': attribute type 5 has an invalid length.
[  436.832528][T16885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2779'.
[  436.873391][T16883] netlink: 'syz.0.2779': attribute type 6 has an invalid length.
[  437.083881][ T6918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.784747][ T5285] netdevsim netdevsim0 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  437.809086][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  437.884948][T16926] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  438.445470][T16921] bond11: left promiscuous mode
[  438.465647][T16921] bridge2: left allmulticast mode
[  438.477007][T16921] bond14: left promiscuous mode
[  438.491228][T16921] ipip0: left promiscuous mode
[  438.505336][T16921] veth13: left allmulticast mode
[  438.513440][T16921] bridge3: left promiscuous mode
[  438.518591][T16921] bridge3: left allmulticast mode
[  438.678874][T16939] netlink: 'syz.4.2791': attribute type 1 has an invalid length.
[  438.738419][T16939] 8021q: adding VLAN 0 to HW filter on device bond14
[  438.771713][T16946] bond14: (slave syz_tun): Enslaving as a backup interface with an up link
[  439.273014][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e5aac00: rx timeout, send abort
[  439.539967][T16977] cgroup: fork rejected by pids controller in /syz2
[  439.691229][T17079] lo: entered allmulticast mode
[  439.773598][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e4afc00: rx timeout, send abort
[  439.784372][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e5aac00: abort rx timeout. Force session deactivation
[  440.261225][T17116] __nla_validate_parse: 8 callbacks suppressed
[  440.261246][T17116] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2810'.
[  440.283701][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e4afc00: abort rx timeout. Force session deactivation
[  440.305027][T17116] NCSI netlink: No device for ifindex 566712438
[  440.329844][T17111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.787577][T17240] xfrm0: Caught tx_queue_len zero misconfig
[  441.570469][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.694351][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2819'.
[  441.730328][T17364] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2823'.
[  441.751443][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2819'.
[  441.991134][T17370] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  442.036670][T17370] netlink: 'syz.0.2826': attribute type 2 has an invalid length.
[  442.166133][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'.
[  442.284025][T17382] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2829'.
[  442.328437][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'.
[  442.418866][T17388] syzkaller1: entered promiscuous mode
[  442.440701][T17388] syzkaller1: entered allmulticast mode
[  442.462921][T17388] nbd: must specify a device to reconfigure
[  442.637830][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'.
[  442.683326][T17407] bond9: entered promiscuous mode
[  442.688844][T17407] bond9: entered allmulticast mode
[  442.844415][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.948932][T17420] syzkaller0: entered promiscuous mode
[  442.966992][T17420] syzkaller0: entered allmulticast mode
[  443.334289][T17450] siw: device registration error -23
[  443.448508][T17442] syzkaller0: entered promiscuous mode
[  443.467498][T17442] syzkaller0: entered allmulticast mode
[  443.661805][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2849'.
[  444.628655][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.660700][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'.
[  444.667540][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.711872][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.735918][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.776340][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.802117][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.871118][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.898812][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.920936][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  444.952811][T17496] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  445.435344][T17530] : option downdelay: invalid value (18446744073709547007)
[  445.458700][T17530] : option downdelay: allowed values 0 - 2147483647
[  445.481161][T17530]  (unregistering): Released all slaves
[  445.826171][T17546] __nla_validate_parse: 3 callbacks suppressed
[  445.826193][T17546] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2870'.
[  445.853082][T17541] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2870'.
[  445.910823][T17541] bridge0: entered allmulticast mode
[  445.955030][T17541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2870'.
[  446.166081][T17557] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  446.534899][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  446.562239][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  446.574300][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  446.587976][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  446.599133][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  446.733606][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'.
[  446.761337][T17581] netlink: 'syz.3.2878': attribute type 10 has an invalid length.
[  446.777246][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  446.787260][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  446.794989][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  446.799373][T17581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2878'.
[  446.807568][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  446.822027][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  446.933492][T17587] netlink: 'syz.1.2879': attribute type 1 has an invalid length.
[  446.996376][T17587] netlink: 'syz.1.2879': attribute type 2 has an invalid length.
[  447.085648][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'.
[  447.112793][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2876'.
[  447.420415][T17603] lo speed is unknown, defaulting to 1000
[  447.493549][T17606] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2882'.
[  447.650144][T17574] lo speed is unknown, defaulting to 1000
[  448.004535][T17622] tcf_pedit_act: 22 callbacks suppressed
[  448.004556][T17622] tc action pedit offset must be on 32 bit boundaries
[  448.060751][ T5644] block nbd4: Receive control failed (result -32)
[  448.070376][ T5640] block nbd4: Receive control failed (result -32)
[  448.604028][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.615732][ T1175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.755120][T17574] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.763205][T17574] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.771341][T17574] bridge_slave_0: entered allmulticast mode
[  448.779936][T17574] bridge_slave_0: entered promiscuous mode
[  448.791283][T17574] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.799046][T17574] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.807111][T17574] bridge_slave_1: entered allmulticast mode
[  448.816086][T17574] bridge_slave_1: entered promiscuous mode
[  448.868747][T17574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.884661][T17574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.920941][ T5644] Bluetooth: hci5: command tx timeout
[  448.961410][T17574] team0: Port device team_slave_0 added
[  448.979775][T17574] team0: Port device team_slave_1 added
[  449.047578][T17574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.063758][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.102792][T17574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.222739][T17574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.231398][T17574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.258418][T17574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.383756][T17666] bridge14: entered promiscuous mode
[  449.389643][T17666] bridge14: entered allmulticast mode
[  449.458288][T17574] hsr_slave_0: entered promiscuous mode
[  449.472772][T17574] hsr_slave_1: entered promiscuous mode
[  449.612566][T17664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.651815][T17682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2899'.
[  449.724344][T17682] pim6reg1: entered promiscuous mode
[  449.736081][T17682] pim6reg1: entered allmulticast mode
[  449.815919][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2899'.
[  449.912460][T17664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.099062][T17664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.294219][T17664] netdevsim netdevsim1 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.522671][    C1] ip6_tnl_xmit_ctl: 88 callbacks suppressed
[  450.522695][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  450.762101][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.872228][T17714] __nla_validate_parse: 1 callbacks suppressed
[  450.872250][T17714] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2905'.
[  450.888754][T17716] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2908'.
[  450.910115][T17716] netlink: 'syz.4.2908': attribute type 1 has an invalid length.
[  450.919600][   T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.960066][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.000187][  T790] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.011394][ T5644] Bluetooth: hci5: command tx timeout
[  451.048185][T17718] x_tables: ip_tables: icmp match: only valid for protocol 1
[  451.482342][T17738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'.
[  453.080761][ T5644] Bluetooth: hci5: command tx timeout
[  453.698677][T17704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  453.726615][  T790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.746519][T17574] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  453.800378][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.847062][T17574] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  453.877653][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.903055][T17574] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  453.919568][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.928878][T17574] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  453.949900][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.339610][T17778] bond11: entered promiscuous mode
[  454.346022][T17778] bond11: entered allmulticast mode
[  454.353367][T17778] 8021q: adding VLAN 0 to HW filter on device bond11
[  454.394186][T17574] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.465828][T17574] 8021q: adding VLAN 0 to HW filter on device team0
[  454.548090][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.555892][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.603031][T17781] lo speed is unknown, defaulting to 1000
[  454.618197][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.625621][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.894200][T17804] netlink: 'syz.1.2925': attribute type 5 has an invalid length.
[  454.982830][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'.
[  455.127999][T17781] dvmrp0: entered allmulticast mode
[  455.161761][ T5644] Bluetooth: hci5: command tx timeout
[  455.194953][T17818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'.
[  455.396060][   T36] dvmrp0: left allmulticast mode
[  455.453156][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2929'.
[  455.558249][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'.
[  455.573641][T17836] block nbd5: Unsupported socket: should be TCP or UNIX.
[  455.667784][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.762321][T17840] xt_l2tp: invalid flags combination: 0
[  456.227684][T17857] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2935'.
[  456.378755][T17851] geneve4: entered promiscuous mode
[  456.393755][T17836] ipvlan0: entered allmulticast mode
[  456.419753][T17836] veth0_vlan: entered allmulticast mode
[  456.504594][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'.
[  456.538623][  T790] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  456.562601][  T790] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  456.582970][  T790] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  457.012834][T17876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2938'.
[  457.022377][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.366266][T17888] netlink: 'syz.4.2939': attribute type 1 has an invalid length.
[  457.404855][T17888] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2939'.
[  457.404970][T17574] veth0_vlan: entered promiscuous mode
[  457.442909][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'.
[  457.487793][T17574] veth1_vlan: entered promiscuous mode
[  457.554736][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'.
[  457.584418][T17574] veth0_macvtap: entered promiscuous mode
[  457.625688][T17574] veth1_macvtap: entered promiscuous mode
[  457.758917][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.806175][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.879519][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.903367][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.927864][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.964361][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.988551][T17903] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  458.047042][T17904] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  458.226374][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.261042][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.374906][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.403187][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.638421][T17910] netlink: 'syz.0.2945': attribute type 61 has an invalid length.
[  458.961237][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'.
[  459.003288][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'.
[  459.192383][T17947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2952'.
[  459.238542][ T6922] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  459.341636][T17947] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2952'.
[  459.390123][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  459.410002][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  459.422814][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  459.435325][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  459.444561][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  459.636209][ T5625] bond14: (slave syz_tun): Removing an active aggregator
[  459.646846][ T5625] bond14: (slave syz_tun): Releasing backup interface
[  459.898187][T17945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.917659][T17955] lo speed is unknown, defaulting to 1000
[  459.932112][T17968] netlink: 'syz.0.2955': attribute type 1 has an invalid length.
[  460.293769][T17975] lo speed is unknown, defaulting to 1000
[  461.133022][T18004] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.238126][T18009] syzkaller0: entered promiscuous mode
[  461.249173][T18009] syzkaller0: entered allmulticast mode
[  461.286101][T18004] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.339873][T17955] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.353381][T17955] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.361123][T17955] bridge_slave_0: entered allmulticast mode
[  461.369520][T17955] bridge_slave_0: entered promiscuous mode
[  461.379348][T17955] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.388264][T17955] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.397779][T17955] bridge_slave_1: entered allmulticast mode
[  461.407215][T17955] bridge_slave_1: entered promiscuous mode
[  461.493545][ T5640] Bluetooth: hci4: command tx timeout
[  461.518486][T18004] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.568590][T17955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.588155][T17955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.606428][T18004] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.706679][T18043] __nla_validate_parse: 8 callbacks suppressed
[  461.706701][T18043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2973'.
[  461.728201][T18042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2973'.
[  461.855854][T17955] team0: Port device team_slave_0 added
[  461.887797][T17955] team0: Port device team_slave_1 added
[  461.906518][T18048] netlink: 'syz.1.2974': attribute type 1 has an invalid length.
[  461.984610][T18048] 8021q: adding VLAN 0 to HW filter on device bond10
[  462.013396][T17955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.027327][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.058290][T17955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.079908][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'.
[  462.127811][T17955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.140694][T17955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.201026][T17955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.481215][T17955] hsr_slave_0: entered promiscuous mode
[  462.519955][T17955] hsr_slave_1: entered promiscuous mode
[  462.552150][T17955] debugfs: 'hsr0' already exists in 'hsr'
[  462.568860][T17955] Cannot create hsr debugfs directory
[  462.629194][T18072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2979'.
[  463.495912][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2981'.
[  463.525110][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2981'.
[  463.561285][ T5640] Bluetooth: hci4: command tx timeout
[  463.586586][T18099] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  464.099817][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1
[  464.329346][T17955] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  465.135544][T18156] netlink: 'syz.1.2991': attribute type 1 has an invalid length.
[  465.171687][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2992'.
[  465.173043][T17955] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  465.225856][T17955] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  465.252582][T18156] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  465.269392][T17955] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  465.329471][T17955] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  465.334850][T18166] ip6t_rpfilter: unknown options
[  465.359785][T17955] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  465.401576][T17955] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  465.448745][T18172] netlink: 'syz.1.2994': attribute type 7 has an invalid length.
[  465.459559][T17955] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  465.484867][T18172] netlink: 'syz.1.2994': attribute type 3 has an invalid length.
[  465.504620][T17955] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  465.513062][T18172] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2994'.
[  465.549771][T18179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2995'.
[  465.583017][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'.
[  465.641225][ T5640] Bluetooth: hci4: command tx timeout
[  465.797567][T17955] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.889616][T17955] 8021q: adding VLAN 0 to HW filter on device team0
[  465.918101][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.925487][ T6918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  465.983435][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.993313][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.278521][T18206] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[  466.460348][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2
[  467.207940][T18236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3004'.
[  467.659224][T17955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.720740][ T5640] Bluetooth: hci4: command tx timeout
[  468.404404][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3
[  468.599818][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'.
[  468.633319][T18282] netlink: 'syz.0.3012': attribute type 10 has an invalid length.
[  468.657580][T18282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'.
[  468.707912][T18284] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3012'.
[  468.730352][T17955] veth0_vlan: entered promiscuous mode
[  468.766662][T17955] veth1_vlan: entered promiscuous mode
[  468.858349][T17955] veth0_macvtap: entered promiscuous mode
[  468.890371][T17955] veth1_macvtap: entered promiscuous mode
[  468.972345][T17955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.032327][T17955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.099183][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.120773][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.190163][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.214838][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.599912][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4
[  470.628612][T18312] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  470.937577][ T6918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.969936][ T6918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.025031][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3019'.
[  471.065700][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.086646][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.965411][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  471.978505][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  471.990105][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.002129][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.012316][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  472.893400][T18364] lo speed is unknown, defaulting to 1000
[  473.141395][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'.
[  473.154067][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'.
[  473.173607][T18403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'.
[  473.329823][T18414] lo: entered allmulticast mode
[  473.337491][T18414] tunl0: entered allmulticast mode
[  473.344266][T18414] gre0: entered allmulticast mode
[  473.350353][T18414] gretap0: entered allmulticast mode
[  473.357089][T18414] erspan0: entered allmulticast mode
[  473.364044][T18414] ip_vti0: entered allmulticast mode
[  473.370756][T18414] ip6_vti0: entered allmulticast mode
[  473.377245][T18414] sit0: entered allmulticast mode
[  473.384540][T18414] ip6tnl0: entered allmulticast mode
[  473.391044][T18414] ip6gre0: entered allmulticast mode
[  473.397309][T18414] syz_tun: entered allmulticast mode
[  473.403841][T18414] ip6gretap0: entered allmulticast mode
[  473.411741][T18414] bridge0: entered allmulticast mode
[  473.417785][T18414] vcan0: entered allmulticast mode
[  473.424140][T18414] bond0: entered allmulticast mode
[  473.429910][T18414] bond_slave_0: entered allmulticast mode
[  473.436712][T18414] bond_slave_1: entered allmulticast mode
[  473.444229][T18414] team0: entered allmulticast mode
[  473.449756][T18414] team_slave_0: entered allmulticast mode
[  473.456389][T18414] team_slave_1: entered allmulticast mode
[  473.463300][T18414] dummy0: entered allmulticast mode
[  473.469835][T18414] nlmon0: entered allmulticast mode
[  473.476361][T18414] batadv0: entered allmulticast mode
[  473.484176][T18414] vxcan0: entered allmulticast mode
[  473.489849][T18414] vxcan1: entered allmulticast mode
[  473.496259][T18414] veth0: entered allmulticast mode
[  473.502811][T18414] veth1: entered allmulticast mode
[  473.508510][T18414] wg0: entered allmulticast mode
[  473.515175][T18414] wg1: entered allmulticast mode
[  473.521174][T18414] wg2: entered allmulticast mode
[  473.527108][T18414] veth0_to_bridge: entered allmulticast mode
[  473.534841][T18414] veth1_to_bridge: entered allmulticast mode
[  473.542370][T18414] veth0_to_bond: entered allmulticast mode
[  473.549239][T18414] veth1_to_bond: entered allmulticast mode
[  473.556669][T18414] veth0_to_team: entered allmulticast mode
[  473.564576][T18414] veth1_to_team: entered allmulticast mode
[  473.572251][T18414] veth0_to_batadv: entered allmulticast mode
[  473.579042][T18414] batadv_slave_0: entered allmulticast mode
[  473.586313][T18414] veth1_to_batadv: entered allmulticast mode
[  473.593459][T18414] batadv_slave_1: entered allmulticast mode
[  473.600259][T18414] xfrm0: entered allmulticast mode
[  473.606793][T18414] veth0_to_hsr: entered allmulticast mode
[  473.614750][T18414] hsr_slave_0: entered allmulticast mode
[  473.622075][T18414] veth1_to_hsr: entered allmulticast mode
[  473.628712][T18414] hsr_slave_1: entered allmulticast mode
[  473.635793][T18414] hsr0: entered allmulticast mode
[  473.642360][T18414] veth1_virt_wifi: entered allmulticast mode
[  473.649055][T18414] veth0_virt_wifi: entered allmulticast mode
[  473.656073][T18414] virt_wifi0: entered allmulticast mode
[  473.663131][T18414] veth1_macvtap: entered allmulticast mode
[  473.669875][T18414] veth0_macvtap: entered allmulticast mode
[  473.676689][T18414] macvtap0: entered allmulticast mode
[  473.684510][T18414] macsec0: entered allmulticast mode
[  473.690366][T18414] geneve0: entered allmulticast mode
[  473.696622][T18414] geneve1: entered allmulticast mode
[  473.703449][T18414] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  473.712455][T18414] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  473.723092][T18414] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  473.731814][T18414] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  473.740338][T18414] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  473.749201][T18414] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  473.757772][T18414] bridge1: entered allmulticast mode
[  473.765444][T18414] erspan1: entered allmulticast mode
[  473.807871][T18364] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.816176][T18364] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.826882][T18364] bridge_slave_0: entered allmulticast mode
[  473.832727][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'.
[  473.836347][T18364] bridge_slave_0: entered promiscuous mode
[  473.846644][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'.
[  473.854767][T18364] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.860701][T18420] netlink: 'syz.2.3034': attribute type 12 has an invalid length.
[  473.868996][T18364] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.875440][T18420] netlink: 'syz.2.3034': attribute type 13 has an invalid length.
[  473.885820][T18364] bridge_slave_1: entered allmulticast mode
[  473.897834][T18364] bridge_slave_1: entered promiscuous mode
[  473.948890][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.972878][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.999399][T18424] ip6tnl1: entered allmulticast mode
[  474.009373][  T790] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  474.017692][  T790] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  474.030887][ T8341] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  474.044388][T18364] team0: Port device team_slave_0 added
[  474.054106][T18364] team0: Port device team_slave_1 added
[  474.080957][ T8026] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  474.091925][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.099346][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.129875][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.141998][ T5644] Bluetooth: hci3: command tx timeout
[  474.145171][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.156719][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.184337][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.236351][T18364] hsr_slave_0: entered promiscuous mode
[  474.243163][T18364] hsr_slave_1: entered promiscuous mode
[  474.249644][T18364] debugfs: 'hsr0' already exists in 'hsr'
[  474.255968][T18364] Cannot create hsr debugfs directory
[  474.301049][ T8341] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  474.517167][T18364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  474.530151][T18364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  474.543472][T18364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  474.608125][T18364] bond0: (slave netdevsim1): Releasing backup interface
[  474.624673][T18364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  474.635808][T18364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  474.647337][T18364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  474.752404][T18364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  474.770084][T18358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  474.866141][T18364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  474.925523][T18364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  475.045044][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'.
[  475.111169][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3037'.
[  475.214241][T18443] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3037'.
[  475.340418][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'.
[  475.364796][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'.
[  475.416024][ T6918] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  475.478611][ T6918] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  475.499998][ T6918] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  475.555239][T18460] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  475.596958][T18460] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  475.615871][ T6918] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  475.851845][T18364] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  475.898948][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  475.910244][T18364] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  475.931600][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  475.952514][T18364] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  476.001748][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  476.035011][T18364] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  476.099769][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  476.201248][ T5644] Bluetooth: hci3: command tx timeout
[  476.326121][T18364] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.350291][T18364] 8021q: adding VLAN 0 to HW filter on device team0
[  476.403947][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.411514][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.455369][T18505] lo speed is unknown, defaulting to 1000
[  476.457570][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.468539][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.508476][T18509] xt_hashlimit: size too large, truncated to 1048576
[  476.852721][T18522] Bluetooth: MGMT ver 1.23
[  478.008268][T18573] pimreg: entered allmulticast mode
[  478.030101][T18569] dvmrp0: left allmulticast mode
[  478.041392][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  478.152319][T18580] __nla_validate_parse: 14 callbacks suppressed
[  478.152341][T18580] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3067'.
[  478.176899][T18569] syzkaller0: entered promiscuous mode
[  478.184474][T18569] syzkaller0: entered allmulticast mode
[  478.206711][T18568] pimreg: left allmulticast mode
[  478.294965][ T5644] Bluetooth: hci3: command tx timeout
[  478.743996][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.968709][T18364] veth0_vlan: entered promiscuous mode
[  478.995971][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  479.021654][T18601] netlink: 'syz.1.3072': attribute type 7 has an invalid length.
[  479.029603][T18364] veth1_vlan: entered promiscuous mode
[  479.053309][T18601] netlink: 'syz.1.3072': attribute type 8 has an invalid length.
[  479.073893][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'.
[  479.085030][T18604] netlink: 'syz.4.3073': attribute type 26 has an invalid length.
[  479.164900][T18364] veth0_macvtap: entered promiscuous mode
[  479.213115][T18364] veth1_macvtap: entered promiscuous mode
[  479.296424][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.382273][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.468643][ T6914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.498252][ T6914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.508234][   T36] tipc: Subscription rejected, illegal request
[  479.529289][ T6914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.616504][ T6914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.693634][T18625] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3075'.
[  479.824443][T18634] syzkaller0: entered promiscuous mode
[  479.852615][T18634] syzkaller0: entered allmulticast mode
[  479.875946][T18638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3082'.
[  480.208081][T18638] lo speed is unknown, defaulting to 1000
[  480.222457][T18643] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001
[  480.309101][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.334093][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.361252][ T5644] Bluetooth: hci3: command tx timeout
[  480.553251][ T6922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.581363][ T6922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.736330][T18657] netlink: 'syz.3.3086': attribute type 1 has an invalid length.
[  480.822778][T18638] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  480.953788][T18617] Cannot find set identified by id 0 to match
[  481.042304][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'.
[  481.236626][T18666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3087'.
[  481.695898][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  481.714315][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  481.725875][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  481.739196][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  481.740907][T18676] xt_bpf: check failed: parse error
[  481.759771][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  482.754822][  T790] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.250807][  T790] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.550107][T18674] lo speed is unknown, defaulting to 1000
[  483.591504][  T790] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.591826][T18742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.738497][  T790] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.806396][ T5644] Bluetooth: hci2: command tx timeout
[  483.838415][T18752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3106'.
[  483.909726][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'.
[  483.933438][T18752] netlink: 'syz.2.3106': attribute type 10 has an invalid length.
[  483.970223][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'.
[  484.150945][T18764] netlink: 'syz.0.3108': attribute type 11 has an invalid length.
[  484.211992][T18764] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.3108'.
[  484.449905][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'.
[  484.876126][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'.
[  484.879587][T18791] netlink: 145 bytes leftover after parsing attributes in process `syz.2.3113'.
[  484.915925][  T790] vlan5: left allmulticast mode
[  484.931835][  T790] geneve0: left allmulticast mode
[  484.954359][  T790] vlan5: left promiscuous mode
[  484.967333][  T790] geneve0: left promiscuous mode
[  484.984978][  T790] bridge0: port 3(vlan5) entered disabled state
[  485.014031][  T790] bridge_slave_1: left allmulticast mode
[  485.020012][  T790] bridge_slave_1: left promiscuous mode
[  485.036401][  T790] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.062755][  T790] bridge_slave_0: left allmulticast mode
[  485.081430][  T790] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.214702][T18806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  485.370196][T18815] xt_TCPMSS: Only works on TCP SYN packets
[  485.541300][  T790] bond8 (unregistering): (slave geneve2): Releasing active interface
[  485.609203][  T790] bond2 (unregistering): (slave bridge3): Releasing backup interface
[  485.690612][  T790] bond1 (unregistering): Released all slaves
[  485.732820][  T790] bond0 (unregistering): (slave veth5): Releasing backup interface
[  485.747553][  T790] bond0 (unregistering): Released all slaves
[  485.764164][  T790] bond2 (unregistering): Released all slaves
[  485.781260][  T790] bond3 (unregistering): Released all slaves
[  485.796478][  T790] bond4 (unregistering): Released all slaves
[  485.818662][  T790] bond5 (unregistering): Released all slaves
[  485.838564][  T790] bond6 (unregistering): Released all slaves
[  485.863513][  T790] bond7 (unregistering): Released all slaves
[  485.881249][ T5644] Bluetooth: hci2: command tx timeout
[  485.893642][  T790] bond8 (unregistering): Released all slaves
[  485.913978][  T790] bond9 (unregistering): Released all slaves
[  485.938252][  T790] bond10 (unregistering): Released all slaves
[  486.050255][T18810] dvmrp0: entered allmulticast mode
[  486.360957][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  486.384206][  T790] 
þ: left promiscuous mode
[  486.485832][T18809] lo speed is unknown, defaulting to 1000
[  486.594696][T18835] tc_dump_action: action bad kind
[  486.605410][T18827] netlink: 'syz.2.3122': attribute type 12 has an invalid length.
[  486.627736][T18827] netlink: 'syz.2.3122': attribute type 29 has an invalid length.
[  486.638811][T18827] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3122'.
[  486.650087][T18827] netlink: 'syz.2.3122': attribute type 1 has an invalid length.
[  486.658889][T18827] netlink: 'syz.2.3122': attribute type 2 has an invalid length.
[  486.669688][T18827] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3122'.
[  486.687177][  T790] : left promiscuous mode
[  486.995354][  T790] tipc: Disabling bearer <udp:s>
[  487.020981][  T790] tipc: Left network mode
[  487.106418][T18674] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.134671][T18674] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.149420][  T790] IPVS: stopping backup sync thread 13235 ...
[  487.158901][T18674] bridge_slave_0: entered allmulticast mode
[  487.202271][T18674] bridge_slave_0: entered promiscuous mode
[  487.269175][T18674] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.289016][T18674] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.296824][T18674] bridge_slave_1: entered allmulticast mode
[  487.306345][T18674] bridge_slave_1: entered promiscuous mode
[  487.504210][T18674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.540804][T18674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.669381][T18674] team0: Port device team_slave_0 added
[  487.709911][T18674] team0: Port device team_slave_1 added
[  487.824588][T18878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3128'.
[  487.860898][T18674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.870165][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.899175][T18674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.958057][T18674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.966871][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  487.971791][ T5644] Bluetooth: hci2: command tx timeout
[  487.995587][T18674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.088862][T18674] hsr_slave_0: entered promiscuous mode
[  488.095761][T18674] hsr_slave_1: entered promiscuous mode
[  488.103273][T18674] debugfs: 'hsr0' already exists in 'hsr'
[  488.109330][T18674] Cannot create hsr debugfs directory
[  488.359831][  T790] team0 (unregistering): Port device team_slave_1 removed
[  488.386720][  T790] team0 (unregistering): Port device team_slave_0 removed
[  488.986315][  T790] IPVS: stop unused estimator thread 0...
[  489.319332][T18834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  489.332901][T18861] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.3126'.
[  489.398343][T18674] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  489.496061][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  489.602390][T18674] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  489.637656][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  489.662088][T18893] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3129'.
[  489.687347][T18674] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  489.716921][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  489.726009][T18901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.749774][T18674] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  489.831012][T18674] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  490.041786][ T5644] Bluetooth: hci2: command tx timeout
[  490.218494][T18674] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.308598][T18674] 8021q: adding VLAN 0 to HW filter on device team0
[  490.364156][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.371476][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.455733][  T790] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.463034][  T790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.675792][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'.
[  491.392525][T18975] bridge0: port 3(ip6gretap0) entered blocking state
[  491.461067][T18975] bridge0: port 3(ip6gretap0) entered disabled state
[  491.524392][T18975] ip6gretap0: entered allmulticast mode
[  491.581954][T18975] ip6gretap0: entered promiscuous mode
[  491.603758][T18975] bridge0: port 3(ip6gretap0) entered blocking state
[  491.610816][T18975] bridge0: port 3(ip6gretap0) entered forwarding state
[  491.792671][T18988] netlink: 'syz.3.3147': attribute type 11 has an invalid length.
[  491.919491][T18983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.935155][T18999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.062114][T19003] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3149'.
[  492.084808][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'.
[  492.095611][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'.
[  492.109925][T18988] syzkaller0: entered promiscuous mode
[  492.117344][T19005] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3149'.
[  492.125392][T19002] netlink: 'syz.4.3150': attribute type 14 has an invalid length.
[  492.132532][T18988] syzkaller0: entered allmulticast mode
[  492.144583][T18988] tipc: Resetting bearer <eth:syzkaller0>
[  492.149354][T19002] netlink: 'syz.4.3150': attribute type 13 has an invalid length.
[  492.578956][T18999] ipvlan0: entered promiscuous mode
[  492.618247][T18982] tipc: Resetting bearer <eth:syzkaller0>
[  492.881071][T19023] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3151'.
[  492.922166][T19026] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  496.244016][T18982] tipc: Disabling bearer <eth:syzkaller0>
[  496.263741][ T8341] tipc: Node number set to 2180750561
[  496.307377][T19026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.355787][T19026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.392078][T19026] bond0 (unregistering): Released all slaves
[  496.453310][T18674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.579350][T19079] syzkaller0: entered promiscuous mode
[  496.592111][T19079] syzkaller0: entered allmulticast mode
[  496.756083][T18674] veth0_vlan: entered promiscuous mode
[  496.802885][T18674] veth1_vlan: entered promiscuous mode
[  496.906075][T19083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.950219][T18674] veth0_macvtap: entered promiscuous mode
[  496.985976][T18674] veth1_macvtap: entered promiscuous mode
[  497.053174][T18674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.117152][T18674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.133119][T19098] SET target dimension over the limit!
[  497.152613][ T6918] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.177292][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.201780][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.228077][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.262916][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'.
[  497.479231][T19106] lo speed is unknown, defaulting to 1000
[  497.494419][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'.
[  497.506394][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3165'.
[  497.541124][T19112] netlink: 'syz.0.3165': attribute type 6 has an invalid length.
[  497.578803][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.606777][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.626882][T19117] bridge1: entered allmulticast mode
[  497.669858][  T790] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  497.685083][  T790] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  497.787872][  T790] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  497.823799][  T790] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  497.870808][T19121] syzkaller1: entered promiscuous mode
[  497.876613][T19121] syzkaller1: entered allmulticast mode
[  497.886018][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3168'.
[  497.942342][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.973504][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.204759][T19139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3089'.
[  498.361740][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'.
[  498.401251][T19147] nbd: must specify an index to disconnect
[  498.417744][T19137] lo speed is unknown, defaulting to 1000
[  498.476796][T19149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3175'.
[  498.593276][T19152] netlink: 'syz.1.3176': attribute type 1 has an invalid length.
[  498.710199][T19152] 
: renamed from dummy0
[  498.846905][ T5761] IPVS: starting estimator thread 0...
[  498.868551][T19167] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  498.970743][T19168] IPVS: using max 33 ests per chain, 79200 per kthread
[  499.049382][T19176] tipc: Started in network mode
[  499.066200][T19176] tipc: Node identity e2ae88e10656, cluster identity 4711
[  499.082158][T19176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.090170][T19177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  499.099849][T19175] syzkaller0: entered promiscuous mode
[  499.106878][T19175] syzkaller0: entered allmulticast mode
[  499.121991][T19176] tipc: Resetting bearer <eth:syzkaller0>
[  499.179897][T19174] tipc: Resetting bearer <eth:syzkaller0>
[  499.212824][T19182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3183'.
[  499.223729][T19182] netlink: 'syz.2.3183': attribute type 2 has an invalid length.
[  499.234361][T19174] tipc: Disabling bearer <eth:syzkaller0>
[  499.243441][T19182] netlink: 'syz.2.3183': attribute type 1 has an invalid length.
[  499.266566][T19182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3183'.
[  499.599283][   T30] audit: type=1107 audit(1784398278.467:14): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  499.811890][T19200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.919792][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  499.938224][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.960331][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.971423][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.984310][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  500.246217][T19211] batman_adv: batadv0: Adding interface: dummy0
[  500.253408][T19211] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.279481][T19211] batman_adv: batadv0: Interface activated: dummy0
[  500.442242][T19211] batadv0: mtu less than device minimum
[  500.448295][T19217] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  500.463612][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.478118][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.490973][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.503213][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.515225][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.527292][T19211] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.580685][T19230] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3191'.
[  500.601315][T19230] netlink: 'syz.2.3191': attribute type 9 has an invalid length.
[  500.627084][T19230] netlink: 'syz.2.3191': attribute type 1 has an invalid length.
[  501.161637][T19198] lo speed is unknown, defaulting to 1000
[  501.281896][T19247] netlink: 'syz.1.3196': attribute type 1 has an invalid length.
[  501.736377][T19262] netlink: 'syz.2.3199': attribute type 1 has an invalid length.
[  502.040952][ T5640] Bluetooth: hci1: command tx timeout
[  502.100981][T19198] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.108437][T19198] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.116385][T19198] bridge_slave_0: entered allmulticast mode
[  502.127020][T19198] bridge_slave_0: entered promiscuous mode
[  502.139521][T19198] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.147697][T19198] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.155272][T19198] bridge_slave_1: entered allmulticast mode
[  502.167091][T19198] bridge_slave_1: entered promiscuous mode
[  502.281309][T19198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.305445][T19198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.360708][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  502.402927][T19198] team0: Port device team_slave_0 added
[  502.424490][T19284] netlink: 'syz.0.3203': attribute type 3 has an invalid length.
[  502.426443][T19198] team0: Port device team_slave_1 added
[  502.450286][T19284] netlink: 'syz.0.3203': attribute type 1 has an invalid length.
[  502.473150][T19284] __nla_validate_parse: 5 callbacks suppressed
[  502.473172][T19284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3203'.
[  502.514025][T19198] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.535993][T19198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.567960][T19198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.581241][T19198] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.609469][T19198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.682110][T19198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.850311][T19198] hsr_slave_0: entered promiscuous mode
[  502.858462][T19198] hsr_slave_1: entered promiscuous mode
[  502.865398][T19198] debugfs: 'hsr0' already exists in 'hsr'
[  502.872445][T19198] Cannot create hsr debugfs directory
[  503.185390][T19307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.287969][T19307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.347281][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'.
[  503.366147][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'.
[  503.626752][T19325] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  503.628597][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3212'.
[  503.637194][T19325] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3213'.
[  503.681814][T19327] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  503.699893][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'.
[  503.707796][T19327] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3213'.
[  503.764523][T19331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3212'.
[  503.889517][ T5761] IPVS: starting estimator thread 0...
[  503.990696][T19338] IPVS: using max 26 ests per chain, 62400 per kthread
[  504.019773][T19334] bond2 (unregistering): Released all slaves
[  504.132683][ T5640] Bluetooth: hci1: command tx timeout
[  504.797295][T19371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3220'.
[  505.133764][T19381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3223'.
[  505.256450][T19377] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  505.321349][T19377] syzkaller0: entered promiscuous mode
[  505.347191][T19377] syzkaller0: entered allmulticast mode
[  505.411327][T19401] ÿ: renamed from bond_slave_0 (while UP)
[  505.570441][T19408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.646445][T19408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.912395][T19198] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  505.927340][T19198] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.940072][T19198] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  506.127099][T19437] netlink: 'syz.4.3234': attribute type 1 has an invalid length.
[  506.205064][ T5640] Bluetooth: hci1: command tx timeout
[  507.469413][T19198] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  507.508508][T19437] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  507.509741][T19440] 
: renamed from dummy0 (while UP)
[  507.583643][T19448] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  507.622018][T19198] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  507.738993][T19198] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  507.765368][T19421] lo speed is unknown, defaulting to 1000
[  507.794889][T19198] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  507.823196][T19198] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  507.854197][T19480] ip6gre1: entered promiscuous mode
[  507.859936][T19480] ip6gre1: entered allmulticast mode
[  507.871927][T19477] __nla_validate_parse: 4 callbacks suppressed
[  507.871942][T19477] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3236'.
[  508.130717][ T6914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.151094][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.160136][ T6914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.280939][ T5640] Bluetooth: hci1: command tx timeout
[  508.284972][T19500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3240'.
[  508.349428][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3240'.
[  508.370017][T19198] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.399141][T19500] xt_hashlimit: size too large, truncated to 1048576
[  508.400774][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.460336][T19198] 8021q: adding VLAN 0 to HW filter on device team0
[  508.496271][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.503874][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.532076][ T8042] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.576128][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.583736][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.864891][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3242'.
[  509.106727][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'.
[  509.259074][T19527] net_ratelimit: 35 callbacks suppressed
[  509.259095][T19527] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  509.925491][T19560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  509.993430][T19557] syzkaller0: entered promiscuous mode
[  510.006574][T19557] syzkaller0: entered allmulticast mode
[  510.024006][T19564] netlink: 'syz.1.3249': attribute type 1 has an invalid length.
[  510.307237][T19573] bond1: up delay (857) is not a multiple of miimon (64), value rounded to 832 ms
[  510.376430][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'.
[  510.412139][T19573] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  510.477500][T19573] bond1 (unregistering): Released all slaves
[  510.898245][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'.
[  510.910198][T19601] netlink: 'syz.1.3258': attribute type 13 has an invalid length.
[  510.911926][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'.
[  510.955112][T19198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.034684][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'.
[  511.124589][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3260'.
[  511.168077][T19198] veth0_vlan: entered promiscuous mode
[  511.225991][T19198] veth1_vlan: entered promiscuous mode
[  511.575334][T19198] veth0_macvtap: entered promiscuous mode
[  511.619206][T19198] veth1_macvtap: entered promiscuous mode
[  511.996170][T19198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.042015][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  512.074092][T19198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.137744][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.174561][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.198247][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.239295][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.635074][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.666153][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.744019][ T6925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.754021][ T6925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.949204][T19645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  513.195016][T19678] bridge0: port 3(vlan2) entered blocking state
[  513.214685][T19678] bridge0: port 3(vlan2) entered disabled state
[  513.237996][T19678] vlan2: entered allmulticast mode
[  513.252049][T19678] dummy0: entered allmulticast mode
[  513.272210][T19678] vlan2: entered promiscuous mode
[  513.278360][T19678] dummy0: entered promiscuous mode
[  513.436623][T19682] __nla_validate_parse: 6 callbacks suppressed
[  513.436644][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3273'.
[  513.469740][T19691] netlink: 'syz.1.3275': attribute type 1 has an invalid length.
[  513.638691][T19691] 8021q: adding VLAN 0 to HW filter on device bond1
[  513.719983][T19691] syzkaller1: entered promiscuous mode
[  513.746537][T19691] syzkaller1: entered allmulticast mode
[  514.673387][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'.
[  515.045858][T19761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3285'.
[  515.077823][T19761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'.
[  515.087201][T19761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3285'.
[  515.119969][T19761] ipip0: entered promiscuous mode
[  516.475333][T19694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  516.714224][T19814] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3290'.
[  516.770348][T19813] lo speed is unknown, defaulting to 1000
[  516.931292][T19827] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  517.478146][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3296'.
[  517.610846][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3297'.
[  517.612361][T19813] x_tables: duplicate underflow at hook 3
[  517.774625][   T30] audit: type=1800 audit(1784398296.647:15): pid=19820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3287" name="memory.events" dev="tmpfs" ino=191 res=0 errno=0
[  517.806531][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'.
[  518.203989][T19853] syzkaller1: entered promiscuous mode
[  518.216975][T19853] syzkaller1: entered allmulticast mode
[  518.274056][T19858] pimreg9: entered allmulticast mode
[  518.335366][T19856] syzkaller0: entered promiscuous mode
[  518.351134][T19856] syzkaller0: entered allmulticast mode
[  518.398312][T19856] syz_tun: entered allmulticast mode
[  518.496363][T19869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.515023][T19870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.554587][T19855] syz_tun: left allmulticast mode
[  518.695515][T19880] xt_connbytes: Forcing CT accounting to be enabled
[  518.708446][T19880] xt_CT: You must specify a L4 protocol and not use inversions on it
[  518.765973][T19884] netlink: 'syz.3.3308': attribute type 1 has an invalid length.
[  519.297669][T19907] xt_socket: unknown flags 0x8
[  519.415837][T19919] xt_hashlimit: size too large, truncated to 1048576
[  519.904793][T19931] netlink: 69 bytes leftover after parsing attributes in process `syz.1.3319'.
[  519.934247][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'.
[  519.941128][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'.
[  520.016658][T19934] 8021q: adding VLAN 0 to HW filter on device bond1
[  520.173542][T19937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3319'.
[  520.198896][T19939] syzkaller1: tun_chr_ioctl cmd 1074025677
[  520.212838][T19939] syzkaller1: linktype set to 0
[  520.281117][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  520.544526][T19965] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  521.171657][T20002] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) !
[  521.193966][T20002] syzkaller0: entered promiscuous mode
[  521.199847][T20002] syzkaller0: entered allmulticast mode
[  523.154571][T19949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  524.062043][T20049] af_packet: tpacket_rcv: packet too big, clamped from 416 to 4294967272. macoff=96
[  524.101063][T20049] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3348'.
[  524.246050][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3350'.
[  525.012010][T20091] lo speed is unknown, defaulting to 1000
[  526.099559][T20137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'.
[  526.656873][T20157] block nbd5: Receive control failed (result -32)
[  526.667301][ T5644] block nbd5: Receive control failed (result -32)
[  526.675805][ T5640] block nbd5: Receive control failed (result -32)
[  526.788617][T20159] lo speed is unknown, defaulting to 1000
[  526.994290][T20177] netlink: 'syz.4.3381': attribute type 1 has an invalid length.
[  527.023302][T20177] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3381'.
[  527.047049][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3381'.
[  527.074447][T20183] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3383'.
[  527.120353][T20183] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3383'.
[  527.159279][T20183] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3383'.
[  527.871293][T20209] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  528.046207][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'.
[  528.250098][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'.
[  528.319459][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'.
[  528.429494][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'.
[  528.987009][T20267] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.196323][T20274] netlink: 'syz.2.3408': attribute type 4 has an invalid length.
[  529.269606][T20274] netlink: 'syz.2.3408': attribute type 4 has an invalid length.
[  529.566321][T20288] openvswitch: netlink: IP tunnel dst address not specified
[  529.586840][T20288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.938695][T20270] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  529.951898][T20270] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  530.089395][T20270] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  530.097981][T20270] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  530.119774][T20308] vlan3: entered promiscuous mode
[  530.133559][T20308] geneve1: entered promiscuous mode
[  530.149128][T20308] vlan3: entered allmulticast mode
[  530.160546][T20308] geneve1: entered allmulticast mode
[  530.175912][T20311] macvlan0: entered promiscuous mode
[  530.228359][T20313] macvlan0: entered allmulticast mode
[  530.235282][T20313] veth1_vlan: entered allmulticast mode
[  530.244226][T20314] veth1_vlan: left allmulticast mode
[  530.262901][T20314] macvlan0 (unregistering): left promiscuous mode
[  530.281705][T20314] macvlan0 (unregistering): left allmulticast mode
[  530.444282][T20270] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  530.454629][T20270] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  530.551734][T20270] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  530.566575][T20270] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  530.707754][T20270] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  530.719474][T20270] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  530.859069][T20327] netlink: 'syz.2.3423': attribute type 2 has an invalid length.
[  530.907009][T20327] 
: entered promiscuous mode
[  531.126903][T20340] netlink: 'syz.4.3427': attribute type 3 has an invalid length.
[  531.426212][T20354] __nla_validate_parse: 7 callbacks suppressed
[  531.426234][T20354] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3431'.
[  531.482512][T20352] block nbd6: server does not support multiple connections per device.
[  531.510973][T20352] block nbd6: shutting down sockets
[  531.541779][T20354] sctp: [Deprecated]: syz.3.3431 (pid 20354) Use of struct sctp_assoc_value in delayed_ack socket option.
[  531.541779][T20354] Use struct sctp_sack_info instead
[  531.592240][T20360] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3431'.
[  531.744821][T20362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3433'.
[  531.800806][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  531.919213][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'.
[  532.063818][T20368] xt_CT: No such helper "syz0"
[  532.287647][T20390] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  532.416919][T20391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3439'.
[  532.653312][T20401] team0: Port device syz_tun added
[  532.686330][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'.
[  532.697743][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3445'.
[  532.708135][T20407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3445'.
[  532.727888][T20407] ip6gre0: entered allmulticast mode
[  532.885289][T20416] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3450'.
[  533.367179][T20434] xt_cgroup: xt_cgroup: no path or classid specified
[  533.455199][T20438] tipc: Started in network mode
[  533.480794][T20438] tipc: Node identity c64a5ac4e448, cluster identity 4711
[  533.514945][T20438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.601572][T20447] netlink: 'syz.0.3460': attribute type 13 has an invalid length.
[  533.739348][T20451] netlink: 'syz.0.3460': attribute type 9 has an invalid length.
[  533.783659][T20451] netlink: 'syz.0.3460': attribute type 5 has an invalid length.
[  533.803594][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3461'.
[  533.867627][T20434] tipc: Disabling bearer <eth:syzkaller0>
[  535.208576][T20493] lo speed is unknown, defaulting to 1000
[  535.368926][T20507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.448074][T20512] syzkaller0: entered promiscuous mode
[  535.457228][T20512] syzkaller0: entered allmulticast mode
[  535.469721][T20512] tipc: Resetting bearer <eth:syzkaller0>
[  535.640807][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.847983][T20525] bridge0: port 3(vlan2) entered blocking state
[  535.854920][T20525] bridge0: port 3(vlan2) entered forwarding state
[  535.872098][T20525] vlan3: left promiscuous mode
[  535.877065][T20525] geneve1: left promiscuous mode
[  535.984895][T20506] tipc: Resetting bearer <eth:syzkaller0>
[  539.297405][T20506] tipc: Disabling bearer <eth:syzkaller0>
[  539.320369][ T5750] tipc: Node number set to 3841493217
[  539.473780][T20543] netlink: 'syz.2.3483': attribute type 1 has an invalid length.
[  539.507365][T20543] __nla_validate_parse: 2 callbacks suppressed
[  539.507386][T20543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3483'.
[  539.906985][T20561] bridge0: port 3(vlan2) entered disabled state
[  539.913756][T20561] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.921781][T20561] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.937966][T20580] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  539.948043][ T5750] IPVS: starting estimator thread 0...
[  540.072406][T20581] IPVS: using max 29 ests per chain, 69600 per kthread
[  540.404845][T20561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.464525][T20561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.908871][T20561] vlan3: left allmulticast mode
[  540.924466][T20561] geneve1: left allmulticast mode
[  540.986919][T20574] ipvlan2: entered promiscuous mode
[  540.992929][T20574] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  541.014062][T20574] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  541.027068][T20574] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  541.058525][ T6914] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.096604][ T6914] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.140666][ T6914] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.167185][ T6914] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.376331][T20598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.417483][T20598] syzkaller0: entered promiscuous mode
[  541.440047][T20598] syzkaller0: entered allmulticast mode
[  541.571547][T20598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3494'.
[  541.639415][T20605] tipc: Resetting bearer <eth:syzkaller0>
[  541.691975][T20596] tipc: Resetting bearer <eth:syzkaller0>
[  541.738333][T20596] tipc: Disabling bearer <eth:syzkaller0>
[  541.978469][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'.
[  542.183347][T20621] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.191523][T20621] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.420041][T20621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.464221][T20621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.642008][T20634] netlink: 'syz.2.3503': attribute type 15 has an invalid length.
[  542.749819][T20621] ipip0: left promiscuous mode
[  542.788066][T20620] vlan2: entered promiscuous mode
[  542.794567][T20620] batadv0: entered promiscuous mode
[  542.841076][ T6914] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.868755][ T6914] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.895351][ T6914] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  542.951357][ T6914] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.136478][T20645] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  543.337384][T20651] netlink: 'syz.4.3510': attribute type 1 has an invalid length.
[  543.439245][T20651] 8021q: adding VLAN 0 to HW filter on device bond2
[  543.481761][T20658] bond2: (slave geneve2): making interface the new active one
[  543.494531][T20658] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  543.509239][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.532607][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.762789][T20665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3514'.
[  543.783566][T20669] syzkaller0: entered promiscuous mode
[  543.822431][T20669] syzkaller0: entered allmulticast mode
[  543.915222][T20677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3519'.
[  544.164961][T20689] netlink: 'syz.4.3523': attribute type 2 has an invalid length.
[  544.186158][T20687] netlink: 'syz.2.3522': attribute type 1 has an invalid length.
[  544.209570][T20689] netlink: 'syz.4.3523': attribute type 10 has an invalid length.
[  544.278164][T20689] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.286149][T20689] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.324860][T20689] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.332826][T20689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.341746][T20689] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.349373][T20689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.389197][T20697] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3524'.
[  544.406831][T20701] netlink: 'syz.1.3527': attribute type 1 has an invalid length.
[  544.413495][T20689] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  544.455375][T20695] bond2: (slave ip6erspan0): making interface the new active one
[  544.477819][T20695] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  544.553993][T20701] 8021q: adding VLAN 0 to HW filter on device bond2
[  544.587025][T20706] vlan2: entered promiscuous mode
[  544.593871][T20706] bond2: entered promiscuous mode
[  544.599407][T20706] vlan2: entered allmulticast mode
[  544.608988][T20706] bond2: entered allmulticast mode
[  544.639414][T20709] bond2: (slave bridge1): making interface the new active one
[  544.641538][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'.
[  544.647477][T20709] bridge1: entered promiscuous mode
[  544.663509][T20709] bridge1: entered allmulticast mode
[  544.671224][T20709] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  544.681924][T20714] veth0: entered promiscuous mode
[  544.910100][T20721] netlink: 'syz.1.3532': attribute type 21 has an invalid length.
[  544.916924][T20723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3533'.
[  544.941234][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'.
[  544.955514][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'.
[  544.969770][T20729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.028435][T20730] sctp: [Deprecated]: syz.2.3535 (pid 20730) Use of int in max_burst socket option.
[  545.028435][T20730] Use struct sctp_assoc_value instead
[  545.033722][ T1175] tipc: Subscription rejected, illegal request
[  545.069690][T20728] netlink: 'syz.2.3535': attribute type 1 has an invalid length.
[  545.123289][T20728] gretap1: entered allmulticast mode
[  545.146025][T20734] netlink: 'syz.0.3537': attribute type 30 has an invalid length.
[  545.236383][T20734] bond0: option arp_missed_max: invalid value (0)
[  545.268995][T20734] bond0: option arp_missed_max: allowed values 1 - 255
[  545.319021][T20734] bond0 (unregistering): Released all slaves
[  545.557230][T20753] xt_CT: You must specify a L4 protocol and not use inversions on it
[  545.825647][T20757] bond3 (unregistering): Released all slaves
[  545.865627][T20772] openvswitch: netlink: IP tunnel dst address not specified
[  545.882359][T20772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.907406][T20770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3545'.
[  546.205766][T20775] sctp: [Deprecated]: syz.0.3546 (pid 20775) Use of int in max_burst socket option.
[  546.205766][T20775] Use struct sctp_assoc_value instead
[  546.350269][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'.
[  546.368549][T20787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3549'.
[  546.488528][T20787] ipvlan2: entered promiscuous mode
[  546.510791][T20789] block nbd6: server does not support multiple connections per device.
[  546.532118][T20789] block nbd6: shutting down sockets
[  546.596372][T20793] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3553'.
[  546.638975][T20793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.730245][T20802] bridge_slave_0 (unregistering): left allmulticast mode
[  546.744689][T20802] bridge_slave_0 (unregistering): left promiscuous mode
[  546.762679][T20802] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.848493][T20814] netlink: 'syz.0.3555': attribute type 11 has an invalid length.
[  547.128215][T20827] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3561'.
[  547.337530][T20834] netlink: 'syz.2.3564': attribute type 1 has an invalid length.
[  547.406260][T20832] netlink: 'syz.4.3563': attribute type 2 has an invalid length.
[  547.576202][T20843] bond3: (slave bridge2): making interface the new active one
[  547.598036][T20843] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  548.098360][T20867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3573'.
[  549.156270][T20913] netlink: 'syz.2.3581': attribute type 3 has an invalid length.
[  549.514343][T20926] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  549.785724][T20926] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  549.833408][T20940] __nla_validate_parse: 4 callbacks suppressed
[  549.833431][T20940] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3587'.
[  550.422530][T20957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3593'.
[  550.476033][T20964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3593'.
[  550.527728][T20965] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  550.550797][T20965] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  550.700067][T20973] lo: entered allmulticast mode
[  550.714884][T20973] tunl0: entered allmulticast mode
[  550.733242][T20973] gre0: entered allmulticast mode
[  550.757520][T20973] gretap0: entered allmulticast mode
[  550.789189][T20973] erspan0: entered allmulticast mode
[  550.809052][T20975] sctp: [Deprecated]: syz.2.3598 (pid 20975) Use of int in maxseg socket option.
[  550.809052][T20975] Use struct sctp_assoc_value instead
[  550.825066][T20978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3599'.
[  550.836912][T20973] ip_vti0: entered allmulticast mode
[  550.843410][T20973] ip6_vti0: entered allmulticast mode
[  550.854892][T20973] sit0: entered allmulticast mode
[  550.863065][T20973] ip6tnl0: entered allmulticast mode
[  550.868994][T20973] ip6gre0: entered allmulticast mode
[  550.875343][T20973] syz_tun: entered allmulticast mode
[  550.918154][T20973] ip6gretap0: entered allmulticast mode
[  550.938679][T20973] bridge0: entered allmulticast mode
[  550.965731][T20973] vcan0: entered allmulticast mode
[  550.971822][T20973] bond0: entered allmulticast mode
[  550.978002][T20973] bond_slave_0: entered allmulticast mode
[  550.985218][T20973] bond_slave_1: entered allmulticast mode
[  550.992483][T20973] team0: entered allmulticast mode
[  550.997961][T20973] team_slave_0: entered allmulticast mode
[  551.010109][T20973] team_slave_1: entered allmulticast mode
[  551.018113][T20988] netlink: 'syz.0.3600': attribute type 1 has an invalid length.
[  551.028503][T20973] nlmon0: entered allmulticast mode
[  551.034766][T20973] batadv0: entered allmulticast mode
[  551.040995][T20973] vxcan0: entered allmulticast mode
[  551.048116][T20973] vxcan1: entered allmulticast mode
[  551.056657][T20973] veth0: entered allmulticast mode
[  551.062700][T20973] veth1: entered allmulticast mode
[  551.073884][T20973] wg0: entered allmulticast mode
[  551.080824][T20973] wg1: entered allmulticast mode
[  551.086882][T20973] wg2: entered allmulticast mode
[  551.093488][T20973] veth0_to_bridge: entered allmulticast mode
[  551.100396][T20973] veth1_to_bridge: entered allmulticast mode
[  551.118197][T20973] veth0_to_bond: entered allmulticast mode
[  551.127812][T20973] veth1_to_bond: entered allmulticast mode
[  551.142848][T20973] veth0_to_team: entered allmulticast mode
[  551.151784][T20973] veth1_to_team: entered allmulticast mode
[  551.158358][T20973] veth0_to_batadv: entered allmulticast mode
[  551.166426][T20973] batadv_slave_0: entered allmulticast mode
[  551.173882][T20973] veth1_to_batadv: entered allmulticast mode
[  551.180963][T20973] batadv_slave_1: entered allmulticast mode
[  551.191234][T20973] xfrm0: entered allmulticast mode
[  551.196880][T20973] veth0_to_hsr: entered allmulticast mode
[  551.209624][T20973] hsr_slave_0: entered allmulticast mode
[  551.216872][T20973] veth1_to_hsr: entered allmulticast mode
[  551.228386][T20973] hsr_slave_1: entered allmulticast mode
[  551.236805][T20973] hsr0: entered allmulticast mode
[  551.243989][T20973] veth1_virt_wifi: entered allmulticast mode
[  551.253336][T20973] veth0_virt_wifi: entered allmulticast mode
[  551.261421][T20973] virt_wifi0: entered allmulticast mode
[  551.267720][T20973] veth1_vlan: entered allmulticast mode
[  551.275558][T20973] veth0_vlan: entered allmulticast mode
[  551.282056][T20973] vlan0: entered allmulticast mode
[  551.287736][T20973] vlan1: entered allmulticast mode
[  551.294041][T20973] macvlan0: entered allmulticast mode
[  551.300341][T20973] macvlan1: entered allmulticast mode
[  551.307089][T20973] ipvlan0: entered allmulticast mode
[  551.313484][T20973] ipvlan1: entered allmulticast mode
[  551.319303][T20973] veth1_macvtap: entered allmulticast mode
[  551.328670][T20973] veth0_macvtap: entered allmulticast mode
[  551.339957][T20973] macvtap0: entered allmulticast mode
[  551.346394][T20973] macsec0: entered allmulticast mode
[  551.353854][T20973] geneve0: entered allmulticast mode
[  551.359786][T20973] geneve1: entered allmulticast mode
[  551.366029][T20973] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  551.374832][T20973] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  551.384191][T20973] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  551.393227][T20973] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  551.401850][T20973] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  551.409577][T20973] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  551.418678][T20973] vlan3: entered allmulticast mode
[  551.424837][T20973] bridge1: entered allmulticast mode
[  551.435124][T20973] ipvlan2: left promiscuous mode
[  551.445788][T20973] ipvlan2: entered allmulticast mode
[  551.566785][T20988] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.678521][T20997] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  552.059907][T21021] netlink: 'syz.3.3610': attribute type 1 has an invalid length.
[  552.068718][T21021] netlink: 'syz.3.3610': attribute type 2 has an invalid length.
[  552.424903][   T30] audit: type=1107 audit(1784398331.297:16): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  553.359246][T21069] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.389666][T21069] 8021q: adding VLAN 0 to HW filter on device team0
[  553.457397][T21069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.673487][T21069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.705301][T21069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.752900][T21069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  553.790704][T21069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.825424][T21069] veth1_vlan: left promiscuous mode
[  553.845558][T21069] veth0_vlan: left promiscuous mode
[  553.863839][T21069] veth0_vlan: entered promiscuous mode
[  553.883376][T21069] veth1_vlan: entered promiscuous mode
[  553.905037][T21069] veth1_macvtap: left promiscuous mode
[  553.913099][T21069] veth0_macvtap: left promiscuous mode
[  553.920310][T21069] veth0_macvtap: entered promiscuous mode
[  553.928776][T21069] veth1_macvtap: entered promiscuous mode
[  553.943501][T21069] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  553.953478][T21069] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.962863][T21069] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  553.972231][T21069] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  553.980685][T21069] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  554.036824][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.044369][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.146132][ T6914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.166529][ T6914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.197992][ T6914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.227510][ T6914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.262472][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3634'.
[  554.372346][T21095] lo speed is unknown, defaulting to 1000
[  554.538889][T21115] ipt_REJECT: TCP_RESET invalid for non-tcp
[  554.589659][T21112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3636'.
[  554.989986][T21127] siw: device registration error -23
[  555.004678][T21127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3642'.
[  555.563505][T21140] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3644'.
[  555.595874][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3644'.
[  555.625304][T21140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3644'.
[  555.647459][T21138] lo: Caught tx_queue_len zero misconfig
[  555.979931][T21152] netlink: 'syz.4.3645': attribute type 8 has an invalid length.
[  556.008907][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'.
[  556.042946][T21155] netlink: 'syz.4.3645': attribute type 8 has an invalid length.
[  556.068693][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3645'.
[  556.763952][T21167] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3651'.
[  556.805415][T21165] xt_CT: No such helper "syz0"
[  559.875519][T21172] tipc: Started in network mode
[  559.881721][T21172] tipc: Node identity ba2b4707a1d3, cluster identity 4711
[  559.889460][T21172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.900430][T21173] syzkaller0: entered promiscuous mode
[  559.915495][T21173] syzkaller0: entered allmulticast mode
[  559.926965][T21178] tipc: Resetting bearer <eth:syzkaller0>
[  560.050919][T21178] tipc: Resetting bearer <eth:syzkaller0>
[  560.123983][T21178] tipc: Disabling bearer <eth:syzkaller0>
[  560.273915][T21207] tcf_pedit_act: 7 callbacks suppressed
[  560.273937][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.290048][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.291162][T21212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.296847][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.319550][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.326578][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.333102][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.339387][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.346101][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.352680][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.358812][T21207] tc action pedit 'at' offset 2 out of bounds
[  560.365355][T21207] TC_ACT_REPEAT abuse ?
[  560.479998][T21213] lo speed is unknown, defaulting to 1000
[  560.516695][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'.
[  560.813221][T21231] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3665'.
[  560.829953][T21231] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3665'.
[  560.871067][T21232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3665'.
[  560.961328][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'.
[  561.267966][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3670'.
[  561.432460][T21261] syzkaller0: entered promiscuous mode
[  561.442130][T21261] syzkaller0: entered allmulticast mode
[  561.473962][T21261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.504459][T21257] tipc: Resetting bearer <eth:syzkaller0>
[  561.602344][T21257] tipc: Disabling bearer <eth:syzkaller0>
[  561.826670][T21285] dvmrp0: entered allmulticast mode
[  562.110969][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'.
[  562.494503][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'.
[  562.501225][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'.
[  562.555966][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3690'.
[  562.574739][T21316] ipvlan1: entered allmulticast mode
[  562.894631][T21332] bond0: (slave ip6tnl0): refused to change device type
[  562.903070][T21330] block nbd2: reconnected socket
[  562.905080][ T5640] block nbd2: Receive control failed (result -32)
[  563.676424][T21384] ip6gretap0: left allmulticast mode
[  563.683989][T21384] ip6gretap0: left promiscuous mode
[  563.702053][T21384] bridge0: port 3(ip6gretap0) entered disabled state
[  563.729702][T21384] batman_adv: batadv0: Interface deactivated: dummy0
[  563.753348][T21384] batman_adv: batadv0: Removing interface: dummy0
[  563.789344][T21384] bridge_slave_0: left allmulticast mode
[  563.802170][T21384] bridge_slave_0: left promiscuous mode
[  563.823404][T21384] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.870799][T21384] bridge_slave_1: left allmulticast mode
[  563.877265][T21384] bridge_slave_1: left promiscuous mode
[  563.894514][T21384] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.952836][T21384] bond0: (slave veth0_to_bond): Releasing active interface
[  564.105024][T21384] team0: Port device team_slave_0 removed
[  564.169481][T21384] team0: Port device team_slave_1 removed
[  564.182502][T21384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.191884][T21384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.206596][T21384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  564.252695][T21385] team0: Port device xfrm0 added
[  564.260883][T21392] tipc: Enabled bearer <eth:team0>, priority 0
[  565.115691][T21434] syzkaller0: entered promiscuous mode
[  565.128902][T21434] syzkaller0: entered allmulticast mode
[  565.148256][T21454] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  565.401880][T21467] netlink: 'syz.0.3726': attribute type 2 has an invalid length.
[  565.426452][T21467] netlink: 'syz.0.3726': attribute type 8 has an invalid length.
[  565.459672][T21471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.721019][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  568.890229][T21470] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  568.974490][ T5285] veth0_macvtap: left promiscuous mode
[  569.073567][T21506] __nla_validate_parse: 10 callbacks suppressed
[  569.073590][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'.
[  569.208705][T21516] netlink: 'syz.1.3729': attribute type 10 has an invalid length.
[  569.336628][T21516] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  569.385013][T21516] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  569.949531][T21549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.020613][T21554] sctp: [Deprecated]: syz.0.3741 (pid 21554) Use of struct sctp_assoc_value in delayed_ack socket option.
[  570.020613][T21554] Use struct sctp_sack_info instead
[  570.076102][T21549] tipc: Disabling bearer <eth:syzkaller0>
[  570.215184][T21564] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.278366][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3743'.
[  570.318020][T21568] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3744'.
[  570.397762][T21571] tunl0: Caught tx_queue_len zero misconfig
[  570.408505][T21573] netlink: 'syz.2.3744': attribute type 1 has an invalid length.
[  570.551387][T21568] netlink: 4256 bytes leftover after parsing attributes in process `syz.2.3744'.
[  570.580265][T21568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3744'.
[  570.625933][T21568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3744'.
[  570.729859][T21582] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  570.745262][T21582] bond1 (unregistering): Released all slaves
[  570.799423][T21588] dvmrp1: tun_chr_ioctl cmd 1074025677
[  570.845051][T21588] dvmrp1: linktype set to 776
[  571.066981][T21600] netlink: 'syz.3.3752': attribute type 1 has an invalid length.
[  571.112670][T21600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'.
[  571.152293][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3752'.
[  571.334175][T21614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3755'.
[  571.816588][T21587] infiniband syz1: set active
[  571.823812][T21587] infiniband syz1: added bridge_slave_1
[  571.841061][T21587] 
[  571.843462][T21587] ======================================================
[  571.850595][T21587] WARNING: possible circular locking dependency detected
[  571.857899][T21587] syzkaller #0 Not tainted
[  571.862612][T21587] ------------------------------------------------------
[  571.869820][T21587] syz.2.3744/21587 is trying to acquire lock:
[  571.876514][T21587] ffffffff8ec5ed40 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900
[  571.886672][T21587] 
[  571.886672][T21587] but task is already holding lock:
[  571.894353][T21587] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060
[  571.904401][T21587] 
[  571.904401][T21587] which lock already depends on the new lock.
[  571.904401][T21587] 
[  571.915291][T21587] 
[  571.915291][T21587] the existing dependency chain (in reverse order) is:
[  571.924656][T21587] 
[  571.924656][T21587] -> #8 (wq_pool_mutex){+.+.}-{4:4}:
[  571.932274][T21587]        __mutex_lock+0x19d/0x1550
[  571.937718][T21587]        __alloc_workqueue+0xa9c/0x2060
[  571.943497][T21587]        alloc_workqueue_noprof+0xe3/0x210
[  571.949539][T21587]        padata_alloc+0xbe/0x360
[  571.954613][T21587]        pcrypt_init_padata+0x27/0x100
[  571.960366][T21587]        pcrypt_init+0x60/0xc0
[  571.965322][T21587]        do_one_initcall+0x250/0x870
[  571.971050][T21587]        do_initcall_level+0x10a/0x1a0
[  571.977027][T21587]        do_initcalls+0x59/0xa0
[  571.982002][T21587]        kernel_init_freeable+0x29d/0x3e0
[  571.987834][T21587]        kernel_init+0x1d/0x1d0
[  571.992793][T21587]        ret_from_fork+0x514/0xb70
[  571.998050][T21587]        ret_from_fork_asm+0x1a/0x30
[  572.003740][T21587] 
[  572.003740][T21587] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  572.011679][T21587]        cpus_read_lock+0x42/0x160
[  572.017086][T21587]        static_key_slow_inc+0x12/0x30
[  572.023441][T21587]        nbd_genl_reconfigure+0x1301/0x1e80
[  572.029457][T21587]        genl_family_rcv_msg_doit+0x233/0x340
[  572.035925][T21587]        genl_rcv_msg+0x614/0x7a0
[  572.041852][T21587]        netlink_rcv_skb+0x226/0x4a0
[  572.047515][T21587]        genl_rcv+0x28/0x40
[  572.052146][T21587]        netlink_unicast+0x7bb/0x940
[  572.057783][T21587]        netlink_sendmsg+0x813/0xb40
[  572.063369][T21587]        sock_sendmsg_nosec+0x13a/0x180
[  572.069396][T21587]        ____sys_sendmsg+0x54e/0x850
[  572.074721][T21587]        ___sys_sendmsg+0x2a5/0x360
[  572.081150][T21587]        __x64_sys_sendmsg+0x1b1/0x290
[  572.086719][T21587]        do_syscall_64+0x174/0x580
[  572.091966][T21587]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.098419][T21587] 
[  572.098419][T21587] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  572.106073][T21587]        __mutex_lock+0x19d/0x1550
[  572.111493][T21587]        nbd_queue_rq+0x373/0x1150
[  572.117182][T21587]        blk_mq_dispatch_rq_list+0x499/0x1990
[  572.123451][T21587]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  572.130820][T21587]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  572.137622][T21587]        blk_mq_run_work_fn+0x16c/0x300
[  572.143305][T21587]        process_scheduled_works+0xa8e/0x14e0
[  572.149791][T21587]        worker_thread+0xa47/0xfb0
[  572.155117][T21587]        kthread+0x388/0x470
[  572.159808][T21587]        ret_from_fork+0x514/0xb70
[  572.165299][T21587]        ret_from_fork_asm+0x1a/0x30
[  572.170610][T21587] 
[  572.170610][T21587] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  572.177836][T21587]        __mutex_lock+0x19d/0x1550
[  572.183357][T21587]        nbd_queue_rq+0xc1/0x1150
[  572.188681][T21587]        blk_mq_dispatch_rq_list+0x499/0x1990
[  572.195472][T21587]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  572.203086][T21587]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  572.210377][T21587]        blk_mq_run_work_fn+0x16c/0x300
[  572.216386][T21587]        process_scheduled_works+0xa8e/0x14e0
[  572.222483][T21587]        worker_thread+0xa47/0xfb0
[  572.227969][T21587]        kthread+0x388/0x470
[  572.232614][T21587]        ret_from_fork+0x514/0xb70
[  572.237972][T21587]        ret_from_fork_asm+0x1a/0x30
[  572.244629][T21587] 
[  572.244629][T21587] -> #4 (set->srcu){.+.+}-{0:0}:
[  572.251828][T21587]        __synchronize_srcu+0xc9/0x2f0
[  572.257377][T21587]        elevator_switch+0x1e8/0x7b0
[  572.262841][T21587]        elevator_change+0x2fa/0x480
[  572.268261][T21587]        elevator_set_default+0x375/0x440
[  572.274181][T21587]        blk_register_queue+0x3f3/0x4e0
[  572.280461][T21587]        __add_disk+0x6cb/0xe30
[  572.286201][T21587]        add_disk_fwnode+0xfb/0x4b0
[  572.292570][T21587]        nbd_dev_add+0x733/0xb60
[  572.297739][T21587]        nbd_init+0x15f/0x1e0
[  572.302973][T21587]        do_one_initcall+0x250/0x870
[  572.308556][T21587]        do_initcall_level+0x10a/0x1a0
[  572.314843][T21587]        do_initcalls+0x59/0xa0
[  572.319837][T21587]        kernel_init_freeable+0x29d/0x3e0
[  572.325700][T21587]        kernel_init+0x1d/0x1d0
[  572.330681][T21587]        ret_from_fork+0x514/0xb70
[  572.335916][T21587]        ret_from_fork_asm+0x1a/0x30
[  572.341816][T21587] 
[  572.341816][T21587] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  572.350756][T21587]        __mutex_lock+0x19d/0x1550
[  572.356115][T21587]        elevator_change+0x1af/0x480
[  572.361881][T21587]        elevator_set_none+0xb5/0x140
[  572.368146][T21587]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  572.374679][T21587]        nbd_start_device+0x189/0xb30
[  572.380390][T21587]        nbd_genl_connect+0x1597/0x1c10
[  572.386163][T21587]        genl_family_rcv_msg_doit+0x233/0x340
[  572.392372][T21587]        genl_rcv_msg+0x614/0x7a0
[  572.397722][T21587]        netlink_rcv_skb+0x226/0x4a0
[  572.403556][T21587]        genl_rcv+0x28/0x40
[  572.408103][T21587]        netlink_unicast+0x7bb/0x940
[  572.413401][T21587]        netlink_sendmsg+0x813/0xb40
[  572.418716][T21587]        sock_sendmsg_nosec+0x13a/0x180
[  572.424390][T21587]        ____sys_sendmsg+0x54e/0x850
[  572.429714][T21587]        ___sys_sendmsg+0x2a5/0x360
[  572.435554][T21587]        __x64_sys_sendmsg+0x1b1/0x290
[  572.441323][T21587]        do_syscall_64+0x174/0x580
[  572.446508][T21587]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.453024][T21587] 
[  572.453024][T21587] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  572.461730][T21587]        blk_alloc_queue+0x544/0x690
[  572.467140][T21587]        __blk_mq_alloc_disk+0x194/0x390
[  572.472872][T21587]        nbd_dev_add+0x494/0xb60
[  572.478466][T21587]        nbd_init+0x15f/0x1e0
[  572.483599][T21587]        do_one_initcall+0x250/0x870
[  572.489377][T21587]        do_initcall_level+0x10a/0x1a0
[  572.495046][T21587]        do_initcalls+0x59/0xa0
[  572.500027][T21587]        kernel_init_freeable+0x29d/0x3e0
[  572.506041][T21587]        kernel_init+0x1d/0x1d0
[  572.511370][T21587]        ret_from_fork+0x514/0xb70
[  572.516956][T21587]        ret_from_fork_asm+0x1a/0x30
[  572.522699][T21587] 
[  572.522699][T21587] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  572.530290][T21587]        fs_reclaim_acquire+0x71/0x100
[  572.536032][T21587]        prepare_alloc_pages+0x15b/0x650
[  572.541766][T21587]        __alloc_frozen_pages_noprof+0x12f/0x380
[  572.548565][T21587]        __alloc_pages_noprof+0x10/0x100
[  572.554218][T21587]        pcpu_populate_chunk+0x181/0xb30
[  572.560256][T21587]        pcpu_alloc_noprof+0xbca/0x1900
[  572.565922][T21587]        bpf_map_alloc_percpu+0x65/0x180
[  572.571887][T21587]        prealloc_init+0x214/0x650
[  572.577094][T21587]        htab_map_alloc+0x6a0/0xc90
[  572.582405][T21587]        map_create+0xf2a/0x1b90
[  572.587626][T21587]        __sys_bpf+0xaea/0xd90
[  572.592508][T21587]        __x64_sys_bpf+0xba/0xd0
[  572.597570][T21587]        do_syscall_64+0x174/0x580
[  572.602798][T21587]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.609452][T21587] 
[  572.609452][T21587] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  572.617777][T21587]        __lock_acquire+0x1520/0x2cf0
[  572.623196][T21587]        lock_acquire+0x106/0x350
[  572.628601][T21587]        __mutex_lock+0x19d/0x1550
[  572.633750][T21587]        pcpu_alloc_noprof+0x231/0x1900
[  572.639584][T21587]        __alloc_workqueue+0xb2c/0x2060
[  572.645527][T21587]        alloc_workqueue_noprof+0xe3/0x210
[  572.651546][T21587]        ib_mad_init_device+0x993/0x2150
[  572.657436][T21587]        add_client_context+0x37c/0x7b0
[  572.663293][T21587]        enable_device_and_get+0x19c/0x3e0
[  572.669604][T21587]        ib_register_device+0x10af/0x1380
[  572.675366][T21587]        rxe_register_device+0x1e3/0x350
[  572.681652][T21587]        rxe_net_add+0x81/0x110
[  572.686603][T21587]        rxe_newlink+0xf4/0x1c0
[  572.691467][T21587]        nldev_newlink+0x5bc/0x650
[  572.696693][T21587]        rdma_nl_rcv+0x6ef/0xa40
[  572.701651][T21587]        netlink_unicast+0x7bb/0x940
[  572.707212][T21587]        netlink_sendmsg+0x813/0xb40
[  572.712531][T21587]        sock_sendmsg_nosec+0x13a/0x180
[  572.718687][T21587]        ____sys_sendmsg+0x54e/0x850
[  572.724011][T21587]        ___sys_sendmsg+0x2a5/0x360
[  572.729404][T21587]        __x64_sys_sendmsg+0x1b1/0x290
[  572.735157][T21587]        do_syscall_64+0x174/0x580
[  572.740387][T21587]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.746918][T21587] 
[  572.746918][T21587] other info that might help us debug this:
[  572.746918][T21587] 
[  572.757281][T21587] Chain exists of:
[  572.757281][T21587]   pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex
[  572.757281][T21587] 
[  572.770798][T21587]  Possible unsafe locking scenario:
[  572.770798][T21587] 
[  572.778357][T21587]        CPU0                    CPU1
[  572.783819][T21587]        ----                    ----
[  572.789191][T21587]   lock(wq_pool_mutex);
[  572.793719][T21587]                                lock(cpu_hotplug_lock);
[  572.800897][T21587]                                lock(wq_pool_mutex);
[  572.808032][T21587]   lock(pcpu_alloc_mutex);
[  572.812675][T21587] 
[  572.812675][T21587]  *** DEADLOCK ***
[  572.812675][T21587] 
[  572.821057][T21587] 6 locks held by syz.2.3744/21587:
[  572.826268][T21587]  #0: ffffffff9ab1b1e8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40
[  572.836366][T21587]  #1: ffffffff8fd8af28 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650
[  572.846491][T21587]  #2: ffffffff8fd7c408 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0
[  572.856788][T21587]  #3: ffffffff8fd7c708 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0
[  572.867392][T21587]  #4: ffff88804348c620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0
[  572.878392][T21587]  #5: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060
[  572.888787][T21587] 
[  572.888787][T21587] stack backtrace:
[  572.895357][T21587] CPU: 0 UID: 0 PID: 21587 Comm: syz.2.3744 Not tainted syzkaller #0 PREEMPT(full) 
[  572.895381][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  572.895391][T21587] Call Trace:
[  572.895400][T21587]  <TASK>
[  572.895408][T21587]  dump_stack_lvl+0xe8/0x150
[  572.895437][T21587]  print_circular_bug+0x2e1/0x300
[  572.895454][T21587]  check_noncircular+0x12e/0x150
[  572.895481][T21587]  __lock_acquire+0x1520/0x2cf0
[  572.895503][T21587]  ? check_path+0x21/0x40
[  572.895523][T21587]  ? check_noncircular+0xda/0x150
[  572.895547][T21587]  ? add_lock_to_list+0xc7/0x100
[  572.895570][T21587]  ? lockdep_unlock+0x5d/0xd0
[  572.895587][T21587]  ? __lock_acquire+0x13e8/0x2cf0
[  572.895609][T21587]  ? pcpu_alloc_noprof+0x231/0x1900
[  572.895626][T21587]  lock_acquire+0x106/0x350
[  572.895645][T21587]  ? pcpu_alloc_noprof+0x231/0x1900
[  572.895667][T21587]  __mutex_lock+0x19d/0x1550
[  572.895690][T21587]  ? pcpu_alloc_noprof+0x231/0x1900
[  572.895708][T21587]  ? __pfx___mutex_trylock_common+0x10/0x10
[  572.895726][T21587]  ? pcpu_alloc_noprof+0x231/0x1900
[  572.895742][T21587]  ? trace_contention_end+0x3d/0x140
[  572.895757][T21587]  ? __pfx___mutex_lock+0x10/0x10
[  572.895778][T21587]  ? __mutex_lock+0x30d/0x1550
[  572.895805][T21587]  ? __pfx___mutex_lock+0x10/0x10
[  572.895828][T21587]  pcpu_alloc_noprof+0x231/0x1900
[  572.895846][T21587]  ? __kmalloc_cache_node_noprof+0x3ce/0x630
[  572.895870][T21587]  __alloc_workqueue+0xb2c/0x2060
[  572.895899][T21587]  alloc_workqueue_noprof+0xe3/0x210
[  572.895922][T21587]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  572.895949][T21587]  ib_mad_init_device+0x993/0x2150
[  572.895978][T21587]  ? __pfx_ib_mad_init_device+0x10/0x10
[  572.895995][T21587]  ? do_raw_spin_unlock+0xf5/0x210
[  572.896012][T21587]  ? _raw_spin_unlock+0x28/0x50
[  572.896111][T21587]  add_client_context+0x37c/0x7b0
[  572.896128][T21587]  ? __pfx_add_client_context+0x10/0x10
[  572.896142][T21587]  ? xa_find+0x25b/0x2b0
[  572.896161][T21587]  enable_device_and_get+0x19c/0x3e0
[  572.896185][T21587]  ? __pfx_enable_device_and_get+0x10/0x10
[  572.896210][T21587]  ? device_add+0x6f6/0xb80
[  572.896286][T21587]  ib_register_device+0x10af/0x1380
[  572.896313][T21587]  ? __pfx_ib_register_device+0x10/0x10
[  572.896338][T21587]  ? xa_load+0x60/0x210
[  572.896352][T21587]  ? xa_load+0x60/0x210
[  572.896364][T21587]  ? xa_load+0x60/0x210
[  572.896378][T21587]  ? xa_load+0x1db/0x210
[  572.896394][T21587]  ? ib_device_set_netdev+0x5c9/0x6d0
[  572.896412][T21587]  rxe_register_device+0x1e3/0x350
[  572.896437][T21587]  rxe_net_add+0x81/0x110
[  572.896460][T21587]  rxe_newlink+0xf4/0x1c0
[  572.896480][T21587]  nldev_newlink+0x5bc/0x650
[  572.896502][T21587]  ? __pfx_nldev_newlink+0x10/0x10
[  572.896569][T21587]  ? bpf_lsm_capable+0x9/0x20
[  572.896595][T21587]  ? security_capable+0x7e/0x2c0
[  572.896683][T21587]  ? __pfx_nldev_newlink+0x10/0x10
[  572.896703][T21587]  rdma_nl_rcv+0x6ef/0xa40
[  572.896728][T21587]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  572.896757][T21587]  ? netlink_deliver_tap+0x2e/0x1b0
[  572.896772][T21587]  ? netlink_deliver_tap+0x2e/0x1b0
[  572.896788][T21587]  netlink_unicast+0x7bb/0x940
[  572.896814][T21587]  netlink_sendmsg+0x813/0xb40
[  572.896832][T21587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  572.896848][T21587]  ? aa_sock_msg_perm+0xf1/0x1b0
[  572.896890][T21587]  ? __pfx_netlink_sendmsg+0x10/0x10
[  572.896904][T21587]  sock_sendmsg_nosec+0x13a/0x180
[  572.896924][T21587]  ____sys_sendmsg+0x54e/0x850
[  572.896949][T21587]  ? __pfx_____sys_sendmsg+0x10/0x10
[  572.896975][T21587]  ? import_iovec+0x73/0xa0
[  572.897052][T21587]  ___sys_sendmsg+0x2a5/0x360
[  572.897075][T21587]  ? __lock_acquire+0x683/0x2cf0
[  572.897096][T21587]  ? __pfx____sys_sendmsg+0x10/0x10
[  572.897120][T21587]  ? futex_wait+0x2a2/0x390
[  572.897158][T21587]  ? __fget_files+0x2a/0x420
[  572.897193][T21587]  ? __fget_files+0x3a2/0x420
[  572.897215][T21587]  __x64_sys_sendmsg+0x1b1/0x290
[  572.897240][T21587]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  572.897269][T21587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.897285][T21587]  do_syscall_64+0x174/0x580
[  572.897308][T21587]  ? trace_irq_disable+0x3b/0x140
[  572.897326][T21587]  ? clear_bhb_loop+0x40/0x90
[  572.897343][T21587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.897359][T21587] RIP: 0033:0x7eff1b39de99
[  572.897376][T21587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  572.897390][T21587] RSP: 002b:00007eff1c1d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.897409][T21587] RAX: ffffffffffffffda RBX: 00007eff1b626180 RCX: 00007eff1b39de99
[  572.897421][T21587] RDX: 00000000000008c0 RSI: 0000200000000580 RDI: 000000000000000a
[  572.897431][T21587] RBP: 00007eff1b433eaf R08: 0000000000000000 R09: 0000000000000000
[  572.897441][T21587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  572.897450][T21587] R13: 00007eff1b626218 R14: 00007eff1b626180 R15: 00007ffea578c108
[  572.897468][T21587]  </TASK>
[  573.438422][T21587] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  573.439966][T21587] infiniband syz1: Couldn't open port 1
[  573.463256][T21587] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  573.484138][T21587] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  573.509545][T21587] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  573.541198][T21587] RDS/IB: syz1: added
[  573.545622][T21587] smc: adding ib device syz1 with port count 1
[  573.551899][T21587] smc:    ib device syz1 port 1 has no pnetid