last executing test programs:

6.47500447s ago: executing program 2 (id=4093):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a4f0ff0000000072030200000000001d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000041000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683254015f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fa8114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68b4cdf6f41ed45258d335f6aee10388a315d6401205cf2839d70ba0f22ecbcff348a8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

6.284825412s ago: executing program 2 (id=4096):
r0 = socket(0x1e, 0x80000, 0x9)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x8d, &(0x7f0000000240)=""/141}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x20000)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, 0x0, 0x0, 0xf00)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

5.381083702s ago: executing program 2 (id=4099):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'pim6reg\x00', {}, 0x2f, 0x15}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x1, 0x2}, 0x30c, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498)
r1 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0xf1, 0x3})

5.267457029s ago: executing program 2 (id=4102):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea34502)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async, rerun: 32)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/146, 0x92}], 0x1) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)

4.999344573s ago: executing program 2 (id=4105):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xe}, {0xfff1, 0xffff}, {0xfff1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x4000050) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xe}, {0xfff1, 0xffff}, {0xfff1, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x4000050)
sendmsg$nl_route_sched(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b40)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x8}, {0xa, 0xf}, {0x3, 0xfff1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x34}}, 0x40000)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
socket$packet(0x11, 0x2, 0x300) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
r6 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r6, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_hsr\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xcced, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x17, 0x0, [{0x3, 0xe, 0x8d, 0x8}, {0x1, 0xe, 0x6, 0x4}, {0x800, 0x9, 0x2, 0x100}, {0xb, 0x49, 0xfb, 0xfffff001}, {0x9, 0x9, 0xfd, 0x2}, {0x1000, 0x1, 0x9, 0xfffff801}, {0x6, 0x4, 0x3}, {0x1, 0x13, 0x1, 0x3}, {0xcec, 0x3, 0xaa, 0x80000001}, {0x6, 0xf6, 0xb6, 0xfffffffc}, {0x8, 0x57, 0x8e, 0xc}, {0x4, 0xad, 0x8}, {0x5, 0x0, 0xfb, 0x3}, {0xacde, 0x2, 0xfd, 0xd4db}, {0x87, 0x10, 0x6, 0x3ff}, {0x2820, 0x5, 0x6}, {0x3, 0x2, 0x89, 0x80000001}, {0x4, 0x8, 0x3, 0x10001}, {0x101, 0x80, 0x6, 0x7}, {0x2, 0x7, 0xc}, {0x9, 0x23, 0x71, 0x1}, {0x4, 0x7f, 0xa, 0x1ff}, {0x80, 0xa9, 0x7, 0x5}, {0x5, 0x3c, 0x9, 0x9}, {0x5, 0x7, 0x6, 0x8}, {0x9, 0xfe, 0xb, 0xd7}, {0x4, 0x81, 0x0, 0xf78000}, {0x4, 0x3, 0x6, 0x1000}, {0x56d, 0x7, 0x1, 0x2}, {0x5, 0x7, 0x0, 0x7}, {0x5, 0x43, 0x8a, 0x16c}, {0x0, 0x81, 0x2, 0x4}, {0x8, 0x1, 0x2, 0x2}, {0x9, 0x6, 0x4, 0x5}, {0x6, 0x12, 0x1, 0x7}, {0x4, 0x3, 0xfd, 0x7}, {0x4, 0xb, 0x6, 0x5}, {0x400, 0x6, 0xae, 0x80002}, {0x1a, 0x6, 0x8, 0x80}, {0x5, 0x8e, 0xe, 0x7fffffff}, {0x6, 0x5, 0x8, 0x8000}, {0x5e, 0x7, 0x4, 0x401}, {0xf, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x3, 0x7}, {0x10, 0x3, 0x7, 0x1}, {0x5, 0xc, 0x3, 0x8}, {0x4, 0xd8, 0x6, 0x3}, {0x0, 0x6b, 0x3, 0x7}, {0x5, 0x6, 0xfd, 0x7fffffff}, {0x8, 0x8, 0x6, 0x7}, {0x95, 0x6, 0xb9, 0xd6cd}, {0x401, 0x3, 0xfc, 0x8}, {0x9, 0xfb, 0x5, 0x9}, {0x4, 0x8, 0x7, 0x5}, {0x0, 0x9, 0x47, 0x4}, {0x5, 0x4, 0x7, 0x7fff}, {0x8, 0xff, 0x1d, 0x2}, {0x81, 0x5, 0x2, 0x2}, {0x1, 0x4, 0x8, 0x5}, {0x1f1c, 0xc, 0x3, 0x6}, {0x3830, 0x3, 0x40, 0x7}, {0x9, 0x8, 0x4, 0x8}, {0x200, 0x2, 0x1, 0xa23}, {0x2, 0xe2, 0x5, 0xffffffff}], {0x400}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9a, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_hsr\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xcced, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x17, 0x0, [{0x3, 0xe, 0x8d, 0x8}, {0x1, 0xe, 0x6, 0x4}, {0x800, 0x9, 0x2, 0x100}, {0xb, 0x49, 0xfb, 0xfffff001}, {0x9, 0x9, 0xfd, 0x2}, {0x1000, 0x1, 0x9, 0xfffff801}, {0x6, 0x4, 0x3}, {0x1, 0x13, 0x1, 0x3}, {0xcec, 0x3, 0xaa, 0x80000001}, {0x6, 0xf6, 0xb6, 0xfffffffc}, {0x8, 0x57, 0x8e, 0xc}, {0x4, 0xad, 0x8}, {0x5, 0x0, 0xfb, 0x3}, {0xacde, 0x2, 0xfd, 0xd4db}, {0x87, 0x10, 0x6, 0x3ff}, {0x2820, 0x5, 0x6}, {0x3, 0x2, 0x89, 0x80000001}, {0x4, 0x8, 0x3, 0x10001}, {0x101, 0x80, 0x6, 0x7}, {0x2, 0x7, 0xc}, {0x9, 0x23, 0x71, 0x1}, {0x4, 0x7f, 0xa, 0x1ff}, {0x80, 0xa9, 0x7, 0x5}, {0x5, 0x3c, 0x9, 0x9}, {0x5, 0x7, 0x6, 0x8}, {0x9, 0xfe, 0xb, 0xd7}, {0x4, 0x81, 0x0, 0xf78000}, {0x4, 0x3, 0x6, 0x1000}, {0x56d, 0x7, 0x1, 0x2}, {0x5, 0x7, 0x0, 0x7}, {0x5, 0x43, 0x8a, 0x16c}, {0x0, 0x81, 0x2, 0x4}, {0x8, 0x1, 0x2, 0x2}, {0x9, 0x6, 0x4, 0x5}, {0x6, 0x12, 0x1, 0x7}, {0x4, 0x3, 0xfd, 0x7}, {0x4, 0xb, 0x6, 0x5}, {0x400, 0x6, 0xae, 0x80002}, {0x1a, 0x6, 0x8, 0x80}, {0x5, 0x8e, 0xe, 0x7fffffff}, {0x6, 0x5, 0x8, 0x8000}, {0x5e, 0x7, 0x4, 0x401}, {0xf, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x3, 0x7}, {0x10, 0x3, 0x7, 0x1}, {0x5, 0xc, 0x3, 0x8}, {0x4, 0xd8, 0x6, 0x3}, {0x0, 0x6b, 0x3, 0x7}, {0x5, 0x6, 0xfd, 0x7fffffff}, {0x8, 0x8, 0x6, 0x7}, {0x95, 0x6, 0xb9, 0xd6cd}, {0x401, 0x3, 0xfc, 0x8}, {0x9, 0xfb, 0x5, 0x9}, {0x4, 0x8, 0x7, 0x5}, {0x0, 0x9, 0x47, 0x4}, {0x5, 0x4, 0x7, 0x7fff}, {0x8, 0xff, 0x1d, 0x2}, {0x81, 0x5, 0x2, 0x2}, {0x1, 0x4, 0x8, 0x5}, {0x1f1c, 0xc, 0x3, 0x6}, {0x3830, 0x3, 0x40, 0x7}, {0x9, 0x8, 0x4, 0x8}, {0x200, 0x2, 0x1, 0xa23}, {0x2, 0xe2, 0x5, 0xffffffff}], {0x400}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0x0, 0xffffffff, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9a, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000004e806ce92100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696a6b0000000600eb0004000000"], 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001030006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006010882848b960c121824"], 0x36) (async)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006010882848b960c121824"], 0x36)
getpeername$packet(r4, 0x0, &(0x7f0000000140))
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000b00)={'ip_vti0\x00', <r11=>r3, 0x1, 0x20, 0x400, 0x8, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}})
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x9, 0xb, 0x400, 0x2, 0x420200, r11}) (async)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x9, 0xb, 0x400, 0x2, 0x420200, r11})
socket$kcm(0x2, 0xa, 0x2) (async)
socket$kcm(0x2, 0xa, 0x2)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x80800)

4.023722263s ago: executing program 4 (id=4112):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xbd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
recvmmsg(r3, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30f8}}], 0x1, 0x4004044)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xfc0, "490bc5835cf98383e1a169e0d6367c51e44c7666f196d37c6fe1de3903620019c03d63efb2afad4c8e6536fabd0b18d64f0257af10c923fab8b4c1d414fafbf8a3b1a234500b74d2c835cef4e952289cb2ccd6391b2a38dabbedfd4920a954eb209f8cbcc096cc9589df7acfc106fd9ec22bc68fabb31041c843cd4692de8db25521d2ffb109289a6e6903e8fb11d5f2a1062723653f121cf5a9c371782262c698269189685c9faae085ac643e4ad48e187616f4e1964d9ee729bc71f316d9bcc90a6c6f7437d0716a9c62a81794a0b4de0c6c3158c38fced1f3b442390eda48ffcc89d59b6fd84ed510acf4d9094e87dac21a06a2109ca2803803a4b80d13b37d89b6c73407e6acfeac1a095960d6a9e8049196938baaeda34a2ef009ffcdb5f035c36b7ed05f4c2a3969ba416c6a6ad629512981eb31de05d1a47858ace26809845bda12820ad6361d0212ce1722f6c4560d8e4f766c295da9dd49d66dfb1e9b6a35b150a970abbb8c59c57a93d16eab2a7166864134d17b4d4f090d22cc3d85e8797bfc1b466ff4766034411ec0a96643fec02222560e5ae236f18277c00ccd34a8377eb45d6c36e3e1678c9aa008a5d263edfd3e0e452f2cc1cc362225e415dc61a444e8988c526e0f865eac6afa77447a8240339631cfe1afe46f805c48baac370203c2e2c6bc4a78caf6c577e4393026a7811728f4c0ec68e7e9067de2146fdf2c0a3108a94574a8ea6091a3d7221d38a3e05e30214e716f8e47c719702a9e35705bb02bc25ad604be7a9a38a76aa412c46e7fc29bbdcd5ca210512cff6565529ae7788b15aa3598812a95befb8bf7b26b793ac2fa5fda252c7f78736c028ada6a88d2fa4ecac78ab38053bedf6a11d127472325e08d99c55d277aad91ac0f192416338ec336b2480d1425f91b40dd978a442015fe24b64a752f3c17645a09774ecb96f41e4428d72043aa1372d9a46ec362b78e195a342d0210e086c1a7328e2483c9d39724aafb83d334c1e810db6b0d57552960d020b5a265eb5ebf1b49442c8b69cd059bd2caaaf64473fd4fe1d09c4216ded77080bbf1ec598c100bcbba8e0320c108796d50a731be9595582b63c1c258cfefd201e59c003a4e6de18f8caddbb1d09bbeb11a8622e87cf77c97d08d34ea7ffdb60e183ecd55e33874f479ad3347cd98ab69c135ab5ed907c27f6bf5ab841a0b4eadd9518f3e493c8541bee77260e6c0a77ae37e8d55215b7194206df532c09d98f8b794b24d08ae152e7d50f7a7704f19f65407ca92e483bbfe389b0f48129395db2aa1baf68e03a09cb7a90d4ff64b1b27c9188d5233dcba6897c6c538c052c82272ad8d3fc9afdd0e55be6cd26249a5b3f9a796e14f31ec19991466b89b4fe574b309a69f7246d0895668289dc51dd73054f7c02595c503190a664ee27828e7d2c44c22b6514032f7194f509f8215ba52e7488b8d6131e26fb8b7cd1266f1343b3987ca56a2aa72bad0a8a95be5215ee28843486b34c5b25c11cce071e29f7d6d9589077f3136a3b399d45016b13b472ed80f04443a1d689b9cfac55b3b8e841450ab3c2841ee77a2ac7626b32e6080f6973ae233166b59bee59e46a381353116082b46a6c64cfaa6057c1e21f41a749db7322febf5735227f2ebcfba422d1d75996558f69249e80d9820139b5dbcc92e5d553778f219fa530731e3cf4a55264153489100be366694d31f99bf878a1953d6f3004c1f33c0af369de291b2efe36b1021224373fb40053daf48f47cd2012e81c82f9fbbb32367149b883e9cead421a68433d88af0ce7a67d5fd4200bc51bef208f736292ae5a0ba7b06deb8dd49e854f729114f096371933c81a0a98b9c30be0dbc8b3eb286dec727fed2bcb5411484ed2fa72a4f0ff6889d36ae767e7247188bce7a7d80177450dcea2fed21bb0320c568905545e82229a01b8763b5fbd5bc8269d1be9a1ada636fcef6a301616592987531a0f8fae56bc150173e40e74c9d2b13c29d43e3cb3339679d1faa298ddb848812236a68ccd526329c52ee97dfaa44c332fd54c9540343a42da6ac69a37fec9480b4785bb93b7a91ca8ff1d009bfe19eb25c30ca8702c9515a5d1f82d1e7894109fb34623dff2d4552e1cce63872dbb307c72ef979a04df75a8811ad2ccf3bbfbda35b4fdb1021eb7e8ab7119d3a33d666b4455966412d0ebd95c9dfc36c8047c0e506393a5e264d68285e904390ebd978433b22fc85f9f41cf08fff503964ac2fd20f3cdd46f0c5c3f093e6960b4512c56d2e69195cd67faed65e5036933a421fbbaf7730c3a17b6d44a873a34cab53cac237b4a0d9f6b2817998f0355c86d90c7b3154ea830dcbb31701e3eaa9db04a9f752540cb24b3232b6bbad7dd5a5ab45f941f77d9f844f18d967d9019ce0c9c22f8c0504c69a816e2bd603e88be66d042075f775ca29f7d28e26a201de621faaec0d364158821e1300c108d935068764fe57d6cf0421eb4674d1bd39041774367d4d5b5429cee88780ff417f9dcbd14651b03c9299b4e8551751400b8206b4b1d79daf570cf4f035d4b0f865e6cb33959c1bda2c86daec9548ae1db5b66dcc66f4a5b670d840b800570cc9a164b22e4d74834060acceee70eef1bd8118680468e2f6765079ce2e61aec4b48c1a3e1d9db53ca8d1ef5a19806a271d433e8b706b4aa04f32acc980344a8e91c89a75bda2d326a848dd5a975b0c15c8af42191118bf020f1c1281df8769591567d7d9822ff90649dca9e8faa9b12802c508a31f28c510b547598ab33d39956af9c705701e0818af2fa4e222e52326acbf6af5b82c9e3a4f5be599209ad3f08c349a5394c0a2e7f3a102a8995c53e70da50549c824a8e2220a096bbf0af19d5f99be8c2998a1e51a317b5c6b3a7617deecc461fdcf9b1a043fd63de28f0181f5bff8168769293356ead29ebe7f27a4bab846847d90c567a3dcf5d83549b5ca7f053ef776c89a56e3b59e1d939acc3d453b7c18baf67b6efce1ada42976829c1e8cbdd726a7c431d18772644db819bf62efbff0a5d2e20fa2eafefe17ae494aeb89c3854c557284dbae59f932a992dbd121b474ed01ddf6232e41d17788ea0c650213ef48e427fcdf550cd845cf1a4fef21acea9eef5d6320a5b32896d007025e96004bc3dbd73d4179e9d5f7f7e6ad38b6a51bcf3356bdb9882656649b7e145c08454401335df325d368b04d379cb7da35109efd8b13f7f3a5ed35db4f180064e24ab08ec2669f60c28e58839871cb9ffb79874f5925a6e9e0ccfdca961179ff69d331651e449290cf69cd1070b6a483d32218c174766075af6cf0b1be412f7defbecee97ce79c37a7fee11fa91b7304831cb32ef315f6ab0d8386a5139a0ebde3064e5e0ba6b800969695fa40c8c3a7a0927189fe457389de7b629a2169122548baf38642edbc3b29c5eb93605d66ffa2f690ec41fb28f4b3ef12fa89b55b7c36d3e2c162851e56cffd30426579a78e7d6b17582bda9e4d58243b39f394cfdb0960ca87542b05340f00cda801f725459d2270b60e7c276fee43690941867776d32c63bda259ff0596e3beb270b047c39f22575dc1366c0f37544737b690b21eb10f92cdf7925cd49d8ee7df8c781ac66d866ad854d31ce7ba4c4196bd2edcc46701eaa65772d4d68ec3eee2eebdbd396a5f8b5e045994ed75688968e46042d91d27b6d8635b6a017857054c04a64ed5823887f3915f0aa64012bdeb10477a0cc310464ccfd92f272769efc01c2a78fa8144041ef925abf7d7d47825fbc1be82a0b61adbb3319c5e5b7d3ae2c2c623ca6ccc37834baa91993101fa35492add6b3d9a6d588797dedd92d182acc6c7fb97f94e8dd93dd08100037426a6c50297344b5591be1d5dac25bfbd71f453b3f6bf9bfa059c6963cef0320e187cf24be2ae09226ec5289257d5c8e875129c1d57982a481a649b987c2e47685b469d7d1549d68f6b3b84bd15c21c0f991752067fd3cb9bae822a5ab20288c524b8e68ed7b1c7b84a46b0911495d09044397c6b67936a82d01dfc152b5dfce4278961031ac67eae60bfbbf77e675626b5c1059b3a78e9bc2441eb5a4f0fefad325565050a312032c7495930c0cd359996565ddce776854a60a07176c310f3243486d29529e2cdb3aa22628cb67a61a5e4e8dba04491a5b8778e5213a64bca4b2ef923f24312893ab6b46be7e138971221a450bc2f6188f1c8616e7d43ec6119779546d585de9d48ad997ff5d11796996e666f88aa38c6bdde8f0390e68ba12158935d65d83e798e80488a269ff7b51da178da594a85a5990fafc151870bc4dbe2ffc8f79a8d6c0d097ce9b9ee4b2b77abc1c0440b93b4eee79616230b6ee758498dab22e28934952302ad308ec202556e26b00bd474d3376e58c2d70103d9399a86bff3e23abfcd407376fc1ac241ba969839a8c6b9e8d60b22f52807b5bc9d5e6c52b8baec877c891cd3482eec9dd78cbfcd80cc78b88a0b1b1c75187b19773053853aa04f786ff1b812454c51d3e10723438fce94415911ae7bf77a2ce2eb0dc9491d7962b85b91dbe9bc151ea2d098339f71c7c64b102d4714768e224b55fe32ebcbc9f371ce3d983a9ea56a5650d993c0bfcf0622a166a7bf2aeda8ec0ebe6a282d0b4aeee19891c19fef4108dc031a598130450bb112ccf21bbfd0f9af52eba3b7c5881f12f296479f2e19dd4687a9c7c38e93dcfae6474d6bbaf2bf511e70c3587957e846ad04f3c249ca2c584c9c40a2e17d8439328d667c20c1d01ad2607193badd9742fd97ea19accaeb4e4c36a3178b0c83da32db0cf22a612a9c0133154ff19d48541290e00beb24c456b5b072d28c858735feb476864ab6b2c28f734da431933002d0bcac310be80b5eb0acbeecce0ad1488ceecd3ea24936fa6b68265e564d42a218cda6f95fd05298ad13658396621edd9d7c3639cb04ccd425fd38aaa2e7f913598778d443c3bce1ac5b0ed3424e3ed16eae0ffeaf998f8ad6ac29eaa29dbaccc3c93375a44f4dd0f7990a6dbfb002666feaa467eab98c36d5260c9d94b97fc1657eb4d45457e31a53a3a8d2184d79e77361148b8c8f3354dcce7e4ca22cdc8993663c1e83508b2eb88df96d904015c6d6b095d94debec84ebaa0219e15a0c0582bcb30573d5df7293acbabc185f77a6f2bee8712571a5cd4e142e3da4f71a8c561c95fa3e55d8d55dc17821e2a68b30ea28b3eb7ad27c0ee361d3545bc01bab38ace505484c0c20e83f7f211905cb9f5a9293ae34e522a5e46f9fa1278ed811bc03eae700e304cd93a410ed183f244ec40ef6aeaf1b6eb004ffcb1f6f1edea8f971c4652669db5994f37d05225a72052e76fd90505d3aec353196ae22babe2f8a80f45c4f827b96ae1a3cf77ee4f6cc7b3fc0ada2873a5b9a40b783cf780c934259a7b9868d8a256a7498d463dfc9ad0979f442f79fade14c3f6f71c68a1bb680aeffbaf6e2e00de79d8e4e52c5ce4230529029c66f5f4998e0bb04b87e21ae579750841b56c7f09f442b325eec0c1fd275d873d66d85325d36647f443772693d3a5e178b02b82d7715d8bdd180f101d3a3874fedfea7f7462119f179caed3834ddebfdb6a62bc8ab2303b5d2e0fa4d389e2805c61867df815ad23affb048c83645ac40781f336edc87872badaa680bedc8f515482b800501a8f3028a609336dfa419e1d2"}, &(0x7f0000001740)=0xfc8)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={<r5=>r3, &(0x7f0000000000)='syz1\x00', 0x200, &(0x7f0000000380)={@_ha_fsid={[0x8, 0x1]}, {0x7, 0x8001, 0x7fff, 0x40}}, 0x4, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x700})
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000480), 0x4)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

3.867003543s ago: executing program 2 (id=4115):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x4, @void}, 0x10) (async)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendmmsg(r6, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) (rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x4f0c, 0x6}}) (async)
r9 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (async)
sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) (async)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800)

3.097829549s ago: executing program 4 (id=4121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newneigh={0x2c, 0x1c, 0x605, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x1000002}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x844)

3.052793048s ago: executing program 0 (id=4122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x170, 0x1a, 0x633, 0x70bd25, 0x25dfdbfb, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x4, 0x4e23, 0x8001, 0x0, 0x0, 0x0, 0x5b}, {@in6=@private2, 0x2, 0x32}, @in6=@local, {0x323, 0x1, 0x7, 0x401, 0xc, 0x400, 0x806}, {0x0, 0x40000, 0x100, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0xa, 0x1, 0x0, 0x9}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0xce24, @in=@multicast2}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x4e23, @in6=@mcast1}}]}, 0x170}, 0x1, 0x0, 0x0, 0x44000840}, 0x804)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000040))
socket$unix(0x1, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x28}}, 0x4008030)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4010051}, 0x80000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r7, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)

2.835150382s ago: executing program 4 (id=4123):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r4, 0x3}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10)
connect$inet(r5, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.832265249s ago: executing program 1 (id=4124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x301, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x2b, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007900480000000000630a0700000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x8}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x40, r13, 0x1, 0x70bd25, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x412fa6e879b1e1cf}, 0x0)

1.789824498s ago: executing program 4 (id=4125):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @loopback, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x7f, 0xffffeff7, 0x40, 0x40000006}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @loopback, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x7f, 0xffffeff7, 0x40, 0x40000006}, 0x3c)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x6}}}, 0x80)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
listen(r3, 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000007000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x12, 0xfffffefe, &(0x7f0000000440)="b9ff03316844268cb89914f088a84b4586dd", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r7, 0xffffffffffff4000)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) (async)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r3, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) (async)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70}, 0x94)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r8, &(0x7f0000000240)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x1}}}, 0x8)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1, &(0x7f0000000380)=""/90, 0x5a}, 0x8}], 0x1, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/177, 0xb1}], 0x1, &(0x7f0000000380)=""/90, 0x5a}, 0x8}], 0x1, 0x0, 0x0)

1.723458237s ago: executing program 0 (id=4126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000002500)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x40800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x93b645be1fb6acb3, 0x4}, {0x6, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x100}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1080}, 0x4000015)

1.645440293s ago: executing program 3 (id=4127):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x6}, {0xd, 0xffe0}, {0xf, 0x4}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000700)={0x3c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000)

1.582337216s ago: executing program 1 (id=4128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7050000080000007eaf85000000690000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x27, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8080)

1.558908656s ago: executing program 0 (id=4129):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x28011, r0, 0x9ced7000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4050)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r3=>0xffffffffffffffff}, 0x4)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001940)={{<r4=>0xffffffffffffffff, &(0x7f0000000080), 0x402a01, &(0x7f00000000c0)={@_ha_fsid, {0x7, 0x4, 0xfffffffa, 0x3}}, 0xe, &(0x7f0000000100), &(0x7f0000000240)=0x3}, 0x6, &(0x7f0000001bc0)=[{0x3, 0xd81, &(0x7f0000000280)='GPL\x00', &(0x7f00000002c0)="21aa66165265f000f2157463976980cb96035cdd218baa5f6379d00343860cce48188bdc6503ddd0ac9f90420b91af57a942c3e885802b9096f636058a15926ed1761ba63c38e4837e", 0x49, 0x2}, {0x2, 0x2, &(0x7f0000000500)='\x00', &(0x7f0000000540)="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", 0x1000, 0x12}, {0x0, 0x7ff, &(0x7f0000001540)='\x00', &(0x7f0000001580)="17fc05fdae7b1d2207e67551310daa787a6ddec5bbf57fb0a49d71840757d0f562466df9e17b5af6ff98ce559a7ddee2c825186b7a8a476505cb6c", 0x3b}, {0x3, 0x0, &(0x7f00000015c0)='\xcf\\\x00', &(0x7f0000001600)="1947cdeb4bc4646e9f5cdb90d42e6a405e2fff1ba419dd49c54bec6e1ac56967b76d38afd1798d1f57f07c8f997ab1856a4e4ff3cd79136f9584bab3b7924f33a5925d181ea906f10a3f81e66cceb03a74cdfa56a3d7dfc124ced4788a8b6b66f091d72c4a1781549a0dd0b6bd5e3c2ddf2c669b7b50fd4e76d46574718e89ee6a0dc82eb451fd66f66b8ead667255ad6e661b568348ce6c8da672acb52be3d81920b133b2bd52f5d85c7a79283697a61d99865dfe0d55", 0xb7, 0x10}, {0x1, 0x2, &(0x7f00000016c0)='GPL\x00', &(0x7f0000001b40)="962684e440637f48e68abb779d80851d2dec189b2c2a55a329f54b1531172c0320af01caa15222da460797b43ca5125915d30bee5ec7e94fa1958a73c2511a3fa72ec9814d26e16696feec720ad9ba8574c9be3f97d4a137b886b4981950e68a87b4fd0054ce45bca341ef2f363529db4ed1", 0x72, 0x8}, {0x3, 0x2, &(0x7f0000001780)=']&#&%*@\x00', &(0x7f00000017c0)="3360a271a1816404e597059a9da2f2c87a08441bfbc9d7d93458a193a92546b62edadfade6218e45859b8ff0b463ecc33bbdcf07977009d56d9ba99db9012f58019c573e027d55f4d1339d85a81e6aa45b58dde7e78940c6e2a6377225e1c75b7238a3326fd93fa4a01461b31b82a5427725405d757a0b975b6fda938289140db994747ea8e5fb0017002ce3bdaea76fb853a0120f126c5fa0e540f0e3bb165e039cb1ea20307b1cb9803f8fd593c81c036838", 0xb3, 0x28}]})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000140)=@raw=[@alu={0x7, 0x1, 0x6, 0x3, 0x7, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, r7, 0x204, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x2c}}, 0x40010)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000019c0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

1.460412317s ago: executing program 3 (id=4130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x86f2, 0x11}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x48054)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008010}, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000380)={'security\x00', 0x0, [0x9, 0x0, 0xc, 0x61, 0x4000]}, &(0x7f0000000400)=0x54)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8, 0x3, 0x0, 0x7]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044801}, 0x4048894)
readv(r3, &(0x7f0000001900)=[{&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000000700)=""/61, 0x3d}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/146, 0x92}, {&(0x7f0000001800)=""/54, 0x36}, {&(0x7f0000001840)=""/144, 0x90}], 0x7)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001b40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xcc, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x24028005)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0xfa, 0x0, 0xffffffffffffffff, 0xe46, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001dc0)={'batadv0\x00', <r7=>0x0})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e00), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0xa, &(0x7f0000001f80)=[{}, {}], 0x10, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000002040)}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x10, 0x1e, &(0x7f00000021c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6828}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000022c0)='syzkaller\x00', 0x55f6, 0xe3, &(0x7f0000002300)=""/227, 0x41100, 0x28, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002440)={0x2, 0x2, 0xbf, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002480)=[{0x0, 0x4, 0x7, 0x4}, {0x4, 0x4, 0xa, 0x1}, {0x5, 0x1, 0x5, 0x4}, {0x4, 0x5, 0x7}, {0x2, 0x5, 0xf, 0x9}, {0x1, 0x2, 0x2, 0xc}], 0x10, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x13, 0x11, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001cc0)='GPL\x00', 0x1, 0xac, &(0x7f0000001d00)=""/172, 0x40f00, 0x73, '\x00', r7, @fallback=0x1a, r8, 0x8, &(0x7f0000001e40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001e80)={0x2, 0x2, 0x100, 0x10001}, 0x10, r11, r12, 0x5, 0x0, &(0x7f00000025c0)=[{0x3, 0x2, 0x9, 0x8}, {0x3, 0x3, 0xe, 0x1}, {0x5, 0x1, 0x6, 0x8}, {0x2, 0x4, 0x4, 0xa}, {0x0, 0x3}], 0x10, 0x1}, 0x94)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002740), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x4c, r13, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x35}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x51)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d80)={r6, 0x58, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
sendmsg$inet(r0, &(0x7f0000002e40)={&(0x7f0000002880)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000002c80)=[{&(0x7f00000028c0)="687a63ab4064a70202758a9c7565d4c0f352a55280b6adbf9158c82da47b223a9b1d82efff967f00f0284a4c1af95d68942e78598a7e5734ad1ccdd0b82edeed47d1e3997fd11ab2ca7b50653e2fd184ae9411cc4f7d02de06a7c95f53e576f2c318e170e448192137632781961955b490d1594e05", 0x75}, {&(0x7f0000002940)="b82a751483797ade8af224300ca7537e44d8a34d3770eaed56f8e9a0d84b7f99215d27088456ae7d27acf380173f861e77a7ff41a9257b2ea3cc2c19f70dbdb998d6dcc0bc9ea16c28b671c01e5eda8ec0d2601de27af5785c4e5480b731c94ad344bdc72588f7595c8ee35acebb8e94dac5fe8784a8c35dd28979c3e4412d2c8bed", 0x82}, {&(0x7f0000002a00)="21c3604e9893876a1114332502380889b85b3cac7035b85c611ef0cee1cc251636ee9683585f105d8048a4e53e7ef45e73ba7fb10af5bd6930b1849868898354463c8385470ca20a4bf21b47062eb90b01440e3ddc831a9a50dfe3ed5e92c6cf05e34a90f5599750a40bd41abbf8f207cba0e41d1b953dbd887bb2bc963933652b3a19b1ebc08e95918582bac3f9c1158e289db576ac8f8832f4bcc440dd2076a05bceb23596382311c59a3873d611c337dd791468aee3ed46df2f630984856a5e05d16a34a3d53dc813e4059c1c7e14a9dd65375747bffec605762397445a03df545477fde4f59a1558caa12523679c2e69e98e0636", 0xf6}, {&(0x7f0000002b00)="69f7733e2d4806111dcf3e9f5980faf0fe882846f720d103ffb68a9f087bb58f042eda2b4d51393c260e822f77da073233c949d90f5cee198fc468ed4618709ef3cdfaee04747be7447fd8d6c322d540f1c4cbd5d4740081eaa8f36dec9e0d199e1e94e7af738e1e76ad88a087c47f4252e15977fb072ba3c5d69c3548d94efe649d2ce3e99d6e2a063b019f0b95d43c886cdb07e2542dc394cf4829444a0cedc5329f8793b1eff47b706f990f2c61a3e5bf3814a61c4f47250962c401e6b626efcc4201d329f7392aa092f6d9932b076717928a8a1a9fc01395a3c382a9700a4acb0e7bb09ff88f8867575c87", 0xed}, {&(0x7f0000002c00)="44494fc7e57bcbedccab4d619ebc401aaf7a28c82da7be4bac909682864d66100ce19e7280d76e8240c19c6ab8508eb8aa965f0406b4be7370276dfb5f26da901dc4013a4830cc2fb4835dd7af2f0bd17c", 0x51}], 0x5, &(0x7f0000002dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x70}}], 0x58}, 0x4000014)
r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0)
write$ppp(r15, &(0x7f0000002ec0)="3402b84cf2b4a97c4087d31ecbda75213291b5ffbb5c528bc1fa09883bf4dbf4971e48bc2734961ba7b924adccbdf046dad9c4806451183af68c048e083dc62e202d3ddd03eb0f865b0e088a2de75b1c26bc7fe0e499c2ce06b5e7eefedaf1de9bc4c0f945657494463f6fea23f8eb357353aaf53f40f618a19caf337b831b5e9bd8a87eb4ba5eecdf07415c45954c0f20842c8042cc4a45649b1d2b306e3d634fcf01f28a72d1023df6a60cc0417c9a3b0e82", 0xb3)
r16 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r16, 0x0, 0x80, &(0x7f0000003a80)=@broute={'broute\x00', 0x20, 0x1, 0xa86, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002fc0], 0x0, &(0x7f0000002f80), &(0x7f0000002fc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x52, 0x809b, 'geneve1\x00', 'pim6reg\x00', 'pim6reg0\x00', 'veth0_to_batadv\x00', @remote, [0xff, 0x6b897a627d4abf63, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x976, 0x976, 0x9c6, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x5, 0x3}}}, @among={{'among\x00', 0x0, 0x8b0}, {{@offset=0xc, @zero, 0x3, {[0x3, 0x2, 0x5, 0x6d, 0xf9c, 0x61, 0x10001, 0x2, 0x3, 0xfffff800, 0x9, 0x741d, 0xeb93, 0x9, 0x7f, 0x8, 0x9, 0x7, 0x0, 0x8, 0x7fff, 0x9, 0x6, 0x8, 0x40, 0x3, 0x0, 0x4, 0x5, 0x3, 0xc6d2, 0x4, 0x1, 0x4, 0x100, 0x6, 0x7, 0x7, 0x7, 0x80000000, 0x7f, 0x5a53, 0x3, 0x4, 0x79, 0x1, 0x87c, 0x8000, 0x4, 0x0, 0x3, 0xfffffffd, 0x5, 0xc8e8, 0x7, 0x3, 0x0, 0xa, 0x101, 0x5, 0x4, 0xffffff81, 0x90, 0xd160, 0x0, 0x6, 0x4834, 0x3ff, 0x2, 0x8, 0x3, 0x4, 0x5, 0x3b7, 0x41, 0xfff, 0x5a, 0x6, 0x40, 0x1000, 0xb016, 0xfa7, 0x8, 0xc, 0xe43, 0x8, 0x3, 0x3ff, 0xf0, 0x7, 0x5, 0x6, 0x2abb, 0x1, 0x0, 0x7fff, 0x8, 0x7, 0x3, 0x7, 0xf676, 0xfffffffb, 0x2, 0x4c4, 0x4, 0x1ef, 0x80000001, 0x6, 0xc, 0x7f, 0x10001, 0xb5, 0x2, 0x3, 0x800, 0x101, 0x5, 0x8001, 0x1, 0xfffffffa, 0x8, 0x1, 0xa1, 0x3, 0x7, 0x80000001, 0x5, 0x1, 0x46e, 0x100, 0xc2, 0x1, 0x3, 0x3, 0x6, 0x6, 0x60, 0x9, 0x5452834d, 0x40, 0xdff, 0x4, 0x101, 0x36f, 0x9, 0x2, 0x3ff, 0x6, 0x401, 0x1, 0x2, 0x9, 0x7, 0x1, 0x3, 0x2, 0x6, 0x0, 0x1, 0x7, 0x8, 0xff, 0x81, 0x9, 0x7ff, 0x4, 0x50000000, 0x1, 0x77bd, 0x2, 0x2, 0xfffff6eb, 0x2, 0x20b, 0x3, 0x81, 0x9, 0x1, 0x3, 0x1ff, 0x101, 0x9, 0x1, 0xfffffff5, 0x8, 0x4, 0x0, 0x6, 0x9, 0x2, 0x8, 0x2, 0x3, 0x5, 0x6, 0x58a3bd53, 0x5, 0x401, 0x8fb, 0x2, 0x6, 0x7, 0x180000, 0x36, 0x3d4, 0x0, 0x10000, 0x9, 0x3, 0x5, 0x3, 0xfa99cee1, 0xc, 0x9, 0xc, 0x5, 0x3, 0xc, 0x3, 0x4, 0x3, 0x3c, 0x3, 0xe, 0x0, 0x0, 0x7f, 0x5, 0xb, 0x2ab, 0x5, 0x7f, 0x9, 0x6, 0xd, 0xfff, 0x9, 0x5, 0xfff, 0x80, 0xa, 0x1, 0x3, 0x6, 0x8, 0xd, 0x2, 0x8, 0x9a6, 0x354, 0xccf, 0x4, 0x330, 0x7f7c, 0x2, 0x98, 0x6e4], 0x7, [{[0x1fb8000, 0x185], @loopback}, {[0x8, 0x400], @local}, {[0x8, 0x6103], @local}, {[0xfe5, 0x2], @multicast1}, {[0x1, 0x400], @rand_addr=0x64010100}, {[0x3673, 0x6], @remote}, {[0x3, 0x9ded], @private=0xa010101}]}, {[0x6, 0x5, 0x0, 0x7, 0x2, 0xade0, 0x9, 0xa9, 0x3, 0xfffffff7, 0x9, 0xa0f, 0x10001, 0x1000, 0x6, 0xaf2, 0xd4, 0x4, 0x2, 0x8, 0x9, 0x4, 0x8, 0x5, 0xa, 0x80000001, 0x8, 0x4, 0xf98, 0x7, 0xb, 0x800, 0x5, 0x9, 0x9, 0x0, 0x5, 0x28f8, 0x3, 0x1, 0x101, 0x0, 0x5, 0x0, 0x800, 0x81, 0x22, 0x9, 0x32, 0x3, 0x3d, 0x70, 0x9, 0x5, 0x2, 0x0, 0x0, 0xfffffffb, 0x401, 0xf, 0x7, 0x7, 0x0, 0xd, 0x0, 0x7f, 0xc6, 0x800, 0x0, 0x9, 0x4, 0x81, 0x6, 0x3, 0xfffff000, 0xe, 0x7, 0xc, 0xf, 0x4, 0x101, 0x9, 0x7ff, 0x3, 0x2, 0x7fff, 0x547c4ad9, 0x5ae, 0x0, 0x4, 0x6, 0x3, 0x6796, 0x7e38, 0x1, 0x80, 0x8b9, 0x8, 0x100, 0x0, 0x6, 0xd, 0x5, 0x0, 0x6, 0x1, 0x3, 0x2, 0x9, 0x9, 0xf5, 0x6, 0x8, 0xc843, 0x8, 0x1, 0x0, 0x5, 0x8000, 0x6, 0xb, 0x7, 0x1, 0x5, 0x1, 0x0, 0x5, 0x2, 0xfffffff8, 0x2, 0xb000, 0x5, 0x7, 0x10, 0x5, 0xffffff81, 0x8001, 0x401, 0x81, 0x9, 0x7, 0x8, 0x5, 0x6, 0x0, 0x8, 0x1617, 0xe, 0xa42f, 0x5, 0x3, 0x1, 0xd, 0x3, 0x81, 0x2, 0x5, 0x3, 0x2, 0x8, 0x6, 0xeb, 0x4, 0x8, 0x7, 0x0, 0xaad7, 0x2, 0x9, 0x3ff, 0x8, 0x9, 0x81, 0x5, 0x7, 0x2, 0x69c, 0x800, 0x1, 0x200, 0x6, 0x401, 0x0, 0x4d7e, 0xffb, 0x8, 0x1, 0x61cc963c, 0x4, 0x0, 0xd, 0x59, 0x573, 0x4, 0x4, 0x80, 0x5, 0x7, 0x3, 0x800, 0x7fff, 0x0, 0x8, 0x0, 0x3, 0x4, 0x6ced, 0x401, 0x0, 0x7, 0xc0, 0xb20, 0x40, 0x550b, 0x9, 0x51, 0x1000, 0x4, 0xfffffffa, 0x2000, 0x7, 0xff, 0x9, 0x3, 0xbb, 0x1000, 0x8, 0x1, 0x3ff, 0xcb, 0x2, 0xc, 0x8, 0x2515e5a0, 0xc89, 0x9, 0x100, 0x7fffffff, 0xf92d, 0x9, 0x2, 0x10001, 0xa376, 0x2, 0x9, 0x3, 0x4, 0xff, 0x101, 0xa3, 0x4, 0x5, 0x9, 0x1000, 0x1, 0xb1, 0x9], 0x5, [{[0xe, 0x7], @multicast1}, {[0x8, 0xffffffce], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x80000000, 0x2], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x800000, 0x7], @local}, {[0x1, 0x1ff], @broadcast}]}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz0\x00', {0x2000000000000000}}}}}]}]}, 0xafe)
r17 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003b00)={r9}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003c80)={@ifindex=r14, r17, 0x27, 0x2000, r12, @value=r3}, 0x20)

1.448681762s ago: executing program 1 (id=4131):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae000000870000000000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

1.436030436s ago: executing program 0 (id=4132):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ppoll(&(0x7f0000000100)=[{r1, 0x1a0}], 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x1a, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x804)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newtfilter={0x8d8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8a8, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x620, 0x1, [@m_gact={0xd8, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0xac, 0x6, "e2bc6f450583fb03530a851edaacae49b8fce9dd1d62529d15104681b6dd4dd15ab89a2b290b817c0923e8de5aa5276943840b2654d0c71e905a59fa3cabf4f3165f4fb322e6e26b5df83a4f9e90a4fb820ef64aef3c48e0fa7f5dcc2f224e0b99f78107dc8c64c3a4edf9eda5c3f19750f43d154f6da9080d0b3a69ad304ffa3ccb9905372fb142b211b2e107a792c545fa7ef3f765cd6af70d0e57196a89689cdbd377b6497df3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x514, 0x19, 0x0, 0x0, {{0xb}, {0x4e0, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x93, 0x8, 0x158cc908, 0x4, 0x8, {0xa6, 0x0, 0x5, 0x7, 0x6938, 0x8}, {0x9, 0x2, 0x5, 0xa, 0x3, 0x8}, 0x0, 0x7ff, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x5f, 0xfffffffc, 0xe, 0x5e7, 0xff, 0x8, 0x0, 0x2, 0x2, 0x9, 0xffff, 0x8, 0x8000, 0xfff, 0xffff, 0x7f, 0x800, 0x9, 0x4, 0x7, 0x3, 0x9, 0x6, 0xd929, 0x42, 0x8d13, 0x80000000, 0x40, 0x0, 0x0, 0x1, 0x1ff, 0x59cd, 0xb7, 0x40, 0x3, 0x80000000, 0x9, 0x2, 0x8, 0x4ac, 0xffff, 0x4, 0x401, 0x6, 0xfffffffb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8, 0x81, 0x2, 0xc, 0x3, 0x6, 0x4fe3ab22, 0x8, 0x8000, 0x5, 0x7, 0x4, 0x8, 0x3, 0x7, 0x1, 0x5f4, 0x4, 0xffff8901, 0x3, 0x4, 0x2, 0x49200f2a, 0x8, 0x200, 0x1, 0x1, 0x986, 0xe, 0xfffffffe, 0x800, 0xd, 0x78000000, 0x10, 0x8, 0x74, 0x3, 0x2, 0x586, 0x1, 0xffff, 0xffffffff, 0xa25, 0x9, 0xff, 0x7, 0x8, 0xc8, 0x1, 0x0, 0x8d6, 0x6, 0xdd2, 0xffffff4a, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x2, 0x200000, 0x9, 0x5, 0x8, 0x1, 0x0, 0xd33, 0x65, 0x3, 0x3, 0x4, 0x81, 0x5, 0x1, 0x0, 0x0, 0x2, 0x4, 0x2, 0x4, 0xa8, 0x0, 0xfffffff7, 0x2f15, 0xcfcb, 0x0, 0x2, 0x9f90, 0x9, 0x5, 0xfffffe01, 0x292, 0x8, 0x4, 0xf, 0x4, 0x7, 0x0, 0x800, 0x9, 0x81, 0x8, 0x3, 0x5, 0x5, 0x6, 0x5, 0x5e8, 0x4, 0x1b, 0x0, 0x7, 0x4, 0xffff, 0x9, 0x6, 0x2, 0x7fffffff, 0x2, 0x5, 0x8, 0x9, 0x2, 0x401, 0x4, 0xe, 0x7, 0x80000000, 0x8, 0x5, 0x4, 0x81, 0x400000, 0x9, 0x7, 0x5, 0x3, 0x3, 0xba, 0x3ff, 0x9, 0x3, 0x8001, 0x7, 0x80, 0x4, 0x3, 0x7ff, 0x2, 0x8, 0x6, 0x7f, 0x1, 0x2, 0x0, 0x80, 0x5, 0x3, 0x51de, 0x8, 0xf, 0xaaed, 0x48dc, 0x3, 0x4, 0xfffff800, 0xfffffeff, 0x4, 0x1e, 0x9, 0xffffffff, 0x200, 0x1b24, 0x7f, 0xea, 0x0, 0x3, 0x0, 0x5, 0x93, 0x10000, 0x0, 0x3, 0x4, 0xf, 0x7fff, 0x1, 0xfca, 0x7f, 0x5, 0x1, 0x7fac, 0x7, 0x7, 0x4, 0x9, 0x9, 0x9, 0x2, 0x8, 0x1, 0xa0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x5, 0x1, 0x3, {0xd4, 0x2, 0x7, 0xfb, 0x400, 0x8}, {0x7, 0x0, 0x1, 0x8001, 0x8, 0x401}, 0x77a, 0x6, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x7, 0x1, {0x4, 0x0, 0xcb4, 0x400, 0x1, 0x9}, {0x6, 0x0, 0xb1, 0x9, 0x101, 0x5}, 0x5, 0xde4, 0x5}}]]}, {0xa, 0x6, "48bd810c52ef"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x120, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x2}, {0xfffffff9, 0x1, 0x7, 0x10000006}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x8}, {0x5, 0x0, 0x1}}}, @TCF_EM_IPT={0x74, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xc7e}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "44e358ef1425c3548ca64450869dc4f7c36781c01df6bb93960f503881b1ef7234236cf673fcb35016c341311ebd8092831566c262052a579bcb197aaf"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x7}, {0x31c21a3c, 0x4, 0x9, 0x1, 0x6, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x2}, {0x99, 0x3, 0x1, "321e38"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_EMATCHES={0x160, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x506}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x4}, {0x5, 0x8, 0xcab2, 0x1, 0x3, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x942, 0x3, 0x7}, {0x3, 0x0, 0x10000, 0xfffff03f}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x7fff}, "c9e25913f33379388761e3ba79bd8fa0c8fd487da2254709ba7eaa3f256e2a1b932e8f453fc0e05c95c40d82e6a076b2d6af76d310c1e06ae7a90cbef3836b2b80d8dceb90c6840fd59e86c38339bb9006b3f5bc43d128e4a7053331b76a104aac6f9e9b66c5782118d23912f3e3489da99a7f44eee506504a6f52826c62b48be452ce4471b1d6c8fb3b4a0f7ac6c21a42f7df92672223358d223595cb30b544b5d990958572de22df0da3b086485304088daddba97c6bf55808a4a1b358fff06119e4e03399d24c8b70b3b4f54043d6e051d7f9d8e2580735875760e2ddecbe38c38c6ab7e114bf59fa80e8b611aec72be1d8cb069c18b14c02"}}]}]}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "2026d12a", "ffffffffffffffff"}, 0x28)

1.332237502s ago: executing program 1 (id=4133):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000001030007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

1.199909316s ago: executing program 3 (id=4134):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x130, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x224}}, 0x0) (async)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.189374798s ago: executing program 1 (id=4135):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@fwd={0x9}]}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000380)={0x7bd, {{0x2, 0x4e21, @remote}}, 0x1}, 0x90)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r4, 0x3}, &(0x7f00000000c0)=0x8)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.18544794s ago: executing program 3 (id=4136):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="486d515007b3ded80b24854e36a8363494cd08f411f89b7953a3c1ea0aef4ab89237786fd2f929c68d00c515335299556c118b9ebf2b99dc637d3594df4690ae97e4b5458ccecc723c5744bff70200000000000000328212eca6ee7523578a9c52f99f23f897d20226c0dc90879564bf4ed4a32b4029868b8123da47", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000002c00028008000800060000000800030000000000080006000001000005000d00010000000800060009000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x152c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1500, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x14e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x2e0, 0xb, 0x0, 0x1, [{0x290, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x280, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "d6630dca1ec84f7dc1af48f8a731df8d40f197307484106f04b6944cbf71d6f0164b2be027b9d2ad0ff22da3ec2023385dd7ada67cc1f0a099847daf61bb554b548847081bc1ec636e4085ab4b64977f0eb2ba029f5cba46792866e7811ffa71416a6f35271ba0030ca5120d6f3983f3cfd0740740916cf9c4b00c576e9ca7c96d8cf6db2fb14e88f657f7f8e9138778c41b664af05ca515778ae8eb7ab3c92a65285c3deccd103b5d85f7bbc905493ecb846248075991797fd2fc2d1c6fb27a4c0f86b6f549fb17cefff7d1d3f1e01d57dbc98b2807034d23ff1149f75ea8145b5368be"}]}, @NFTA_RANGE_TO_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "3a53a697780e5782be58f839786d0a80d96333c989ec"}]}, @NFTA_RANGE_FROM_DATA={0x8c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "be10d93b87232ad2dcaecbcaa60dbd742a6ee6be25cffb6a54423614e01e6d66ad273460341c1ba8a9bc2c9d65cc880367177704d51c2f34e95441962bc6bbf808ee13d97e2d0cc224b232f80d43c0d873de691558b057ee76e01c981c378c769d2d9954df4c72ad709320a1a6b189098a45"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_TO_DATA={0xc8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "bf6ce818e93d6253f33020f62c5ed0e181e1af64e9b6b9159401dd56ddbccd1b5a9ac7f3a54eafa6c9638f1137dc1b4aa3f49e8c3b3c7a639743bb0208a32c222df55cf7abfe933827974b03c9a40ac125bb8dd5a5ef7468534cbf60e012760d1f5681d41cc0c2e150074a81c0a3ad6c69f78254ca49ea9795e638ea9a2059677676ab69a4966ad077"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x11c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x85, 0x1, "2ff0dc7c487706ef422b4050f2fefa1f4995ba77ae126edef24861f1739b8c6c790f4ecfe4a3bfb660552a68269c5256fca061b278f09d521ac8edf56eeeeeb2e797f56e5645515f9220b8d28acdb9429deffdf91fdadc3dabcacb54a2017f80de1bee8509a4a2bd0c885309c45f2fc8ed417514f2da70af1064e6b35817e9b0ad"}, @NFTA_DATA_VALUE={0x1004, 0x1, "365e7a0f7c7813591bd53bf3f4d9ab47824886461786590b2cbcc6bf4e19ddc87ada2572906c385cd4a220ebd5a8d67f0f0e6c1857cacbd01abe875cc15c5cd6c748629e794f79e64a399dd7e5a048fd53190b167365e2b94d1e5d070c2a47c135a66450f51df372a036ffed56e582106666b076d55b3bb13d45af543acfefe890c50fe4e498ca7525a1251d3a4d2af8e89fa614f6090793fbfc9f737645ca6c09a6e6edafa11a65effc8a472aea2e46b355ed9167e28a349512fea904de9b1e92af1174eb88a71585fdea609a79186a0ded68c6a746f3200501fed0106f2cfa33bf7fe78b16835286cb5fdc9132760d9a4060539cf35cf51600d7dc966d5a51e75b79097d1d298f86c868b94b673ad07b09e793628a1b1bac103a53663cbb8962f13aa1325bb39090a23378e1327ff1185575df51e6d0f2d4c0ca08f3615a52746b389ec5cebc68f0dc7f484632b70c850c1eccf45f40e03b7e08a787c2ce4e4d8550740218e4774bad385ac92bfc65b90ad103004e8a7f1b87378a94a10b3d3be991b386ad6d0a24c088dfa44e72861836311b9cf27025a9e72e150d4a2a63e766f6d46b39b9f856ae297e478a0adeb0b7f5525818b70b1faf31b0f691ee64645bbda433ccb92cb8a6df3c0f2d0279158d5548eb6d7e284576d967a9118007ad382db8b8a641126a9bbc757f22de0bed7b20715b27a2f0cb95192fc034f12d6def6ac9793945b2f1b6628955860aad6baf486e786b0cdb761dbdd70f90b89a639cc1b91d2f445eb99c0e33734118f9342dbd8f4433da336eab90b88285d53dfea1a87ea3b01698df1535defaced20962d951ecf6ddb86d15eadac82d5a75ed6a001b9b4407b85cb57772fc80320a5097d3cc67fb5b241034116c8774a7f4763fde7d616f39aa5e223c720c336b211a4ba701e97d527d88c9ac1d4a3b00243ace7ad4ab6b16d8ba5e47be14b555487e7df37c693a4df30716b4b635a98f4b40841507eb704b8b57421f9c889678a255cb14d293ff6e7df77168fa1a0cff15923f257139e0b6e3a3ca6a9414b5d30968a6534d24c2c0393c0f0a0e32bb498fe7b2d369d012758d92ed56dc441aef7aa5825a81d2ab036ddac5f05f6668f0a49d5c7c2333f71f8192d8617e575027fbc688cb62690010504a60b86c1ea3a03c4bb8b31548a6c78560fece8821eaf8926f7d5ff44472ffa52d99b7f2cb4c551fb964dbe2cf091f6c3e357da3262f672af0f651937d266023656cf0cad8393cbb6d42d275fec2aeecb4b2678a4db9f3990ccbb5bece48402b7f1eec44666e8dbd95868446c7b73aba6e6548f4637cf30caa46ed46c90aacf6133967ee46d683a49504cd677e821ec53eb44f0e8061a5f4054b5618073afacaa7df79aa3129a1b6dd3e5dc858406d79a1b7f9489e687e852dc970410e2b51dc8c8af97fa15fdf37f1ce9c28b85e7cb890eb388956bdc627409ea825c1e9c981ac411e07d3d60854df0140ffb49e652f2681a42d6f946a69ba2ab2c40fa17547c609b2c82869d02fa8feb5831b0f4223bae51c2deb4081ac29c7d924707049b851f618fd4856dc25005fe8286d7eb7b297e4fc40475256028a69ac4a5a3b16fbe35cf254b3b6e8028d8db80bb0ad6bbedd017a233e1a5136ef9aff61b9329de25a60421f0cd28e3097ad7334617e5ed90b9454cb3f344096206ed7703ca470a7cf58401121bdf1e177aa61898bd0c208ab8aab636f78e1d43c69d13462daa62ffa5021d68227551c33e4c8b88841e558ece35186dd9c4abc0285404645aabdf6424ed444839e8db854a89e1bad24040b3ad4490d35f7a75eb4e54b0663065183cf44a16e32e50906ac55a694950d7521c4ccdea69d4c785d1ff3d3d3ff221b5ca08e7bbe396ea9fda8df9ceca5c5841912319dc67dfc7238d5fc4cda45dc487f32c5f34fe935d0695efd30aa37e6fddba5a7d35c1738d181a85be1bad471eb9277884362a837f6f45f068de04279bca8d444da4aa5dbb2ae8a59ef210cc1feb51e956e99c7de569defa3af480781b8fee029e8640a0465feadf6a2b8a661248b73c28720179453fafafb50a67a5c11aedd4dfc664089e8e2d8c93ddfb0ebf428749b55849dac344e170edecff711c65be161da6f8f76c162e8e9a29600c96d6477d928b8f46a5ae04286cb08fe80642b5c8a4238c177ab37ff42ef6726591a1845a1c38fe3b89c3c63814cca8982cc90381e5321cfd8da0e51036eaece90d81c013d760fd03f02569c7cbb2b136d9bbd149ad61a27b8f4d7c61921ab17f6a111a40bb03f255d33640772250538c194d96a6b4e4a0caf5c11080722f1930167aa1dc4aea732208cb082e85a955939a111131cb5b3f613a1b01f11cb9c81b7c183b1860d02b4750a5aad40dc0b314ee5b99b3bc35ada498a8064c8c820b9513909f5f92631bae62a655d961e0f365d13bb706f03ce726e96de64a746abe29058f50ad0a2b01d288c766f90d5ee8d1baad129efbf939feee223e91770980294f321bb2481e6411ea6580f5c1d04155fa278f9cba467ed35017a4e1af708ac6e2834849c9b64f5b35822e260cb7a38e961c6a2f0053208c48dd8a634b6afa42fb1c6e059f4d54925f50df31abbf7efb3e8c50053c353ac1bfc04dbdcc301d6d164dd0be9df5ab8b471487f6435ced01c02dce5ee18e636cdbce7495379880c8945641e0cda812f16b60966ae9bb8fe09232b76fb6a4cf3ab7eaba355bc5ab8749641a08edaef22a0104a90bbfd716205d1d4b44e4d8bfe26aee057f91a21e77acd187e8f8aad8faab2e97d9473ff06b62cdfb1c9553e698b68d3c03e50f38122f08b43b4d2ab066962f6e5f18788259f392c39e51b478bcfd616cf5fb2e1b08bd1c96798888671f58cd1c7985f7819ba93d44aa4888beba71c544fb114c36539eb153a80ebbcfb412ffc759fc17265be1d05818103dceedd9530eb1f407c662c11d661f875a2df3c13a4e78404adc16a8b9328bac9844b0a87ddf695b0bcc05c175f9e280bb8be06fb3f8ba7e4c2823afcc0684e21a0d164ec708b6ecb5b27eb34477ea87efc9ed30a1f69961d020bd8197d82712ea9590924080cd55c6a48d6252469ed0b3b8cf5011a285f81cfc75332aadc76a802a81778d764b1671568041675e0658d73e9328bb6527cff53e37c533883cdd9975cecbbbaf09f8607016e614aa36070885ef53beabc1bd4a92c223403a7f967c9bfa81a8107b18e0940e722eab247e8cfbd96298357ab6be33095446c052bf262d0fc75f09a8fb918c952c488cd71d54372160c7aea6ec14b2179f45b853d4f5e2a921f93a3bc4aa303bdb328d5233120047a5405c0c00ece9710fe3bc6208b1491c160fcbb571c0642b48c46b7a9a10aa2f2639739149ac61b63d4102b4390f8edbf80495a82b09130aa6e815d04b316532986ced156e9044488b1d73884db86c12bacb0531f46c232bc9ffad7764778ce4f171722c7cd4c1d319b26772d40b75789faddf6eb6057a02b313e93bcd161b61a5ff83b997f37316ae0fc63f94bc440a519d409cb050bdc28e071455d4e09ad13f522698c5885102499d7460ead6333dca1df4078758c1ec264d49282e98a69cff3aa3d0522f00e11bcd73900d2e7f56c76817d71cd525dfeadc3fc8fd8810d83e6f2850e8fbfcff632765123af3fcfdaeacdb93b61436e1105380f57e955c78d8804852b4470423ceaed0ef06bbdf0db91236572a2be5969da65d34fa7fd091e9327951bd036c0d588d6ea40358db2be47b2494ed700ff06790f9016008b391dbcf6e91bf5164f4eaff00260e0a1f4e95972ee12d34f30565f13cfad27bac3d4d0933457cd072cbd4fc7b5a0fa9383552c0eadd3838ea835913a4e83e5ffbd52c88584dbade2929dec9a8db55ca3c5a38beb6707f5a62266b25fa5e1f5ea984ac4836b27ce11e4f6a663e27407a813d21b01f8c6f6a15c364903c45149395934f7ca3ec1483de0506d414b3b8491a1e2a6575ca41b8bf425869c3dc673bb198122c9fd7cc4b1cfb1373090d527346dc83ed7920c15912d3040d5d6c1ab0e350bc5a6e88de48e65a214ac317620a9fee10e90b51334845865269d34f6bf28531a5fe8cfd056d2539ed6df90c5b177fa7f0f2eb74e349a88855e5647c083a8a4bf3931210a9af879f462fe4de0752a1e58b060b234bff8d4037785133381e51c48ef1a32fce06b602e9125345ac1b97c23d08ceb515d10bbb904077157ab9d85e6ec662247999ff17d45bc7dde7bd3be3e9c2208356cde8d001e499f40ccb0cd4c725c41500b3a2fd43deae48168b71644fb18a3b1e900cd84f17eda2aecd5f72aea3ec9c51214d2f75cc0300509a0c25411eeb69f19e968128f00fd1c9d3bab00dae2f1dbdb4df5d522ea95898bb46133552c950388a1daaf227c8ededed54863eba763eb9125b6c70886e38425dfebd7ea061f5e1a0350ca76a72f1a008978f18c4b95d8044395143d5f9d07ddb594ca9bdc599d23b3d10062d26f6947bffbe072943c460d0490bbfbaf79f70052838e8cf26c824e08097f2c715537353cb7a75d358bf6a40234bef085767ef171c1ad6c548dd5ba3ad43a946474db58cbd7104b66a7bc871ee6448fef47a7e55e5bcc9935b5fa4799a56b8dd6d37e6ab5f07a34853efd4bbc2d3df020aa80e2c09a26be616f15a03c908fe70c970b3b2b8ce6d72f6f70b816bd1d4ca61fd5bd6f2b243997114d53bb496332ab431504c7f38bd996c96382ab8755ad1cb559bf63df36ec42eae682feb3a835c7cc8a7323ff25b6c15463146d98801205f09687f2a76465e36e5a8ced5cffcacdd82dbe7f14e2a129c7679bfa54be0bc1e2b3aca26c1f48e9f0b163f8681cb07a2611c3f637b79499591e4ef2640831f2a8969eb58839b704a052d73b34d190d2712405365e483575805110b4ab1e2b5de875e0341ec6371248c07afc685a5b257b36a7458b20953b25e3a80ed9ab1a25292653524ae63e02b4dc5610a3449bd7afcb50891d95feba4050f2c18d0869dbb648a8890ea0dbe6bafef51fc0a4c304542c66fe098941f15d4f80016b21b51b6758c4b84f5d72c381cd8174cfc125befdca724355188b5bdfabec45398f20b08abfe8c30590aee2cc364210aba59e4c5d810a8caf51932d93f620b2d2f092194834428a67fa3d59723e63e2f189ffed2fdc6b7e1c92a22ea9806f5fe5b8c0fad3e1cd81d325d057c9e151040de3be08de7fef57a3460239c4ccfe59ce8a064503b1c5242a8ce4299ce2c028a28785c0d1876ce61873e01af032788d033d5873569603f00d484f54d49a54617e21c55b78e9ff5925ab12cdea4c031010a5baf92c59ec3c0f27fdefd84897790e3b7d898e71e54e32bd7b7b49c2e0e6cb9ff414ceb01ed318aa876a3d8f58fc41ba79be13ec8560306bd666dc5e012adeb1293983469e27ab75decec6188a543cff852af7c0249cc89ac31a7f09ec67b95fb06c65e229ce10ef4d4055274492b0c766f32ef475d93e3916eddf17f3704d9cc649cc3f42a4b36db202423332b042bafc2a258460ce703f2aadca2a5421003e2f1ec2ed4c97a2552ab37bfd3cb8c317630410d7a8c10cacbc9abb4b8cd859ba0074629ee2ce8e8f88ec1f47cab1010452d2d077d5c449e04d398db14f59a9b58d76565879144a7d574e757c1fd48dcd0a30a0141517d3ae7216bc6f95a81f8ae3a70e248b6b796d94027e4e456c2cc020e00af05023f3a3c0570e273afb82402d26202c266d87eac21ccd21fd14b75b716539d3e67c1c4d1f07bc"}, @NFTA_DATA_VALUE={0x1c, 0x1, "6234f420a427687e1f26575b69843ad6a56f2a8b294841b1"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x87, 0x1, "ea3caf2be302ab7b4b9f24e325fc2de93430a2af2eb10a5f67427648e3c7edc4f99bae51bb8e88d1fd5b387ef8065df66d2b921f22bc1be240fa9da1931d9a0712013cbe873ac077f19441e2a9a2bd53c2d796a6ecac00cfe4db048c4dc8dd126e95e83da3053bf80d74a38cde93c127fd7c2eb27ba759ce7ca714f733062492cf147a"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1554}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3e, 0x0, 0x6}, 0x28)
setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000280)={@broadcast, @private=0xa010100, 0x0, "a892b2de9731771958bcfee3c21ce7e625bc95fa97df82b7d17de3bdf317cde6", 0x7, 0x5, 0x800, 0x7}, 0x3c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x300, 0x70bd29, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x1, 0xe, 0x0, 0x0, 0x8, 0x10006}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xffff}, @FRA_FLOW={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x4044801)
sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.145478372s ago: executing program 0 (id=4137):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1)
write$ppp(r1, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x9, &(0x7f0000000340)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d0f3b67}, {0x85, 0x0, 0x0, 0x5d}}, @exit], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x4}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000880)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r4, 0x8992, &(0x7f0000000080)={'dvmrp0\x00', @ifru_hwaddr=@broadcast})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000001000)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcf3)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20004000)
r7 = socket$inet6(0xa, 0x2, 0x8)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x5, 0x4e28, 0x0, 0xa, 0x0, 0x0, 0x33}, {}, {0x89}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d5, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r8 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4)

951.705149ms ago: executing program 3 (id=4138):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x4}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6)

828.412529ms ago: executing program 4 (id=4139):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', 0x0, 0x0, 0x0)

208.766775ms ago: executing program 1 (id=4140):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r9 = socket$netlink(0x10, 0x3, 0x8032bb8c0cca73c9)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r13, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000)

80.509723ms ago: executing program 0 (id=4141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)={0x14, r2, 0xf03}, 0x14}}, 0x0)

4.898832ms ago: executing program 3 (id=4142):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x24008034)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@map_fd, @alu={0x4, 0x1, 0xd, 0x9, 0x7, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdd04, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, &(0x7f0000000200), 0x41100, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x565c}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x3, 0x10, 0x1}, {0x5, 0x5, 0x8, 0x7}, {0x1, 0x5, 0xb, 0x9}, {0x3, 0x1, 0x6, 0x8}], 0x10, 0xdc4}, 0x94) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xfffff001, <r3=>0x0}, 0x8)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r1, r2, 0xa, 0x0, @val=@tracing={r3, 0x6}}, 0x20) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r5)
sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r7, 0x310, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5)
sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r8, 0x210, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x58}}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000009c0)={<r9=>r4, &(0x7f00000008c0)='\x00', 0x200080, &(0x7f0000000900)={@align=0x5, {0x2, 0xd, 0xfd, 0x1}}, 0xb9, &(0x7f0000000940), &(0x7f0000000980)=0xe8})
bind$unix(r9, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c00)={'wpan4\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000d00)={&(0x7f0000000b80), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
r12 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) (async)
r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r13, 0x400442c8, &(0x7f0000000f40)={r9, 0x9, 0x4})
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, r14, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000040)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, 0x0, 0x1, 0x603, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x73f1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040081) (async)
clock_gettime(0x0, &(0x7f0000001240)={<r15=>0x0, <r16=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000001280)={r15, r16/1000+60000}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x16, 0x5, 0x2, 0x9, 0x40, r9, 0x2, '\x00', 0x0, r9, 0x4, 0x5, 0x1}, 0x50)

0s ago: executing program 4 (id=4143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4)

kernel console output (not intermixed with test programs):

49 > 4
[  477.353230][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  478.165083][T17966] pim6reg0: tun_chr_ioctl cmd 1074025675
[  478.165137][T17966] pim6reg0: persist disabled
[  478.712299][ T5623] bond7: (slave syz_tun): Removing an active aggregator
[  478.740574][ T5623] bond7: (slave syz_tun): Releasing backup interface
[  479.280270][T17986] __nla_validate_parse: 5 callbacks suppressed
[  479.280338][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'.
[  479.280365][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'.
[  479.303078][T17988] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20004
[  479.417531][   T52] Bluetooth: hci5: command tx timeout
[  479.703020][T17942] lo speed is unknown, defaulting to 1000
[  479.704758][T17942] lo speed is unknown, defaulting to 1000
[  479.707213][T17942] hsr0 speed is unknown, defaulting to 1000
[  480.760537][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'.
[  481.236697][T11624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.236756][T11624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.363164][T18033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.425519][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  481.425807][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  481.426141][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2937'.
[  481.498029][   T52] Bluetooth: hci5: command tx timeout
[  481.576335][T11624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  481.589311][T11624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.891259][T17942] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.891499][T17942] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.891705][T17942] bridge_slave_0: entered allmulticast mode
[  481.895914][T17942] bridge_slave_0: entered promiscuous mode
[  481.901095][T17942] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.901307][T17942] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.901602][T17942] bridge_slave_1: entered allmulticast mode
[  481.904269][T17942] bridge_slave_1: entered promiscuous mode
[  481.954154][T17942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.972575][T17942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.142981][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'.
[  482.143051][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2941'.
[  482.408036][T17942] team0: Port device team_slave_0 added
[  482.545378][T11624] bond0: (slave netdevsim1): Releasing backup interface
[  482.624471][T11624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  482.637636][T11624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.732498][T17942] team0: Port device team_slave_1 added
[  482.782713][T18073] netlink: 'syz.3.2945': attribute type 1 has an invalid length.
[  482.821853][T17942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  482.829835][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  482.860094][T17942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.884892][T18075] openvswitch: netlink: nsh attr 251 is out of range max 3
[  482.886673][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'.
[  482.919960][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'.
[  483.112269][T18070] ip_tables: iptables: counters copy to user failed while replacing table
[  483.131703][T11624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  483.131772][T11624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.172968][T17942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.181327][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.181373][T17942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.558981][T18083] syzkaller1: entered promiscuous mode
[  483.559038][T18083] syzkaller1: entered allmulticast mode
[  483.581211][   T52] Bluetooth: hci5: command tx timeout
[  483.621412][T17942] hsr_slave_0: entered promiscuous mode
[  483.624588][T17942] hsr_slave_1: entered promiscuous mode
[  483.634562][T17942] debugfs: 'hsr0' already exists in 'hsr'
[  483.634594][T17942] Cannot create hsr debugfs directory
[  485.040682][T18134] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2957'.
[  485.278241][T11624] veth0_virt_wifi: left allmulticast mode
[  485.285492][T11624] veth0_virt_wifi: left promiscuous mode
[  485.285522][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2958'.
[  485.285553][T18141] openvswitch: netlink: Invalid VLAN frame
[  485.317086][T11624] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  485.321180][T18143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2959'.
[  485.403434][T18145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2960'.
[  485.416713][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'.
[  485.435122][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'.
[  485.592361][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'.
[  485.668503][   T52] Bluetooth: hci5: command tx timeout
[  486.294238][   T32] audit: type=1804 audit(1788806456.228:9): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2962" name="/newroot/576/cgroup.controllers" dev="tmpfs" ino=2979 res=1 errno=0
[  486.301306][   T32] audit: type=1800 audit(1788806456.238:10): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2962" name="cgroup.controllers" dev="tmpfs" ino=2979 res=0 errno=0
[  486.305082][T18152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2962'.
[  486.353365][T11624] bond0 (unregistering): Released all slaves
[  486.360266][   T32] audit: type=1804 audit(1788806456.298:11): pid=18153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2962" name="/newroot/576/cgroup.controllers" dev="tmpfs" ino=2979 res=1 errno=0
[  486.365757][T11624] bond1 (unregistering): Released all slaves
[  486.381391][T11624] bond2 (unregistering): Released all slaves
[  486.396859][T11624] bond3 (unregistering): Released all slaves
[  486.415651][T11624] bond4 (unregistering): Released all slaves
[  486.443123][T11624] bond5 (unregistering): Released all slaves
[  486.461669][T11624] bond6 (unregistering): Released all slaves
[  486.476958][T11624] bond7 (unregistering): Released all slaves
[  486.502330][T11624] bond8 (unregistering): Released all slaves
[  486.601636][T18143] veth1_to_team: entered promiscuous mode
[  486.614807][T18143] veth1_to_team: left promiscuous mode
[  486.688533][T11618] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.690326][T11623] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.690397][T11623] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  486.690452][T11623] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.818935][T11624] tipc: Disabling bearer <eth:syzkaller0>
[  486.858413][T11624] tipc: Disabling bearer <udp:syz2>
[  486.858611][T11624] tipc: Left network mode
[  487.131255][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[  487.131311][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[  487.393248][T17942] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.209001][T18209] netlink: 'syz.3.2970': attribute type 2 has an invalid length.
[  488.564921][T17942] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.678369][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  489.004168][T17942] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.212892][T18240] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 2, id = 0
[  489.511331][T17942] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.700985][T18253] netlink: 'syz.3.2982': attribute type 2 has an invalid length.
[  489.701485][T18248] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  490.834924][T18281] __nla_validate_parse: 12 callbacks suppressed
[  490.843045][T18281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2989'.
[  490.983473][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'.
[  491.026816][T17942] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  491.085977][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.524432][T17942] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.550505][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.564467][T17942] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.590411][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  491.697863][T11613] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  491.697943][T11613] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  491.698011][T11613] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  491.710912][T11618] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  491.759445][T17942] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  491.776666][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  492.190773][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'.
[  492.190840][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'.
[  492.374746][T17942] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.430511][T17942] 8021q: adding VLAN 0 to HW filter on device team0
[  492.519144][T11613] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.521633][T11613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.581418][T11613] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.581562][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.670320][T18337] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[  492.894107][T18344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3001'.
[  493.079037][T11624] hsr_slave_0: left promiscuous mode
[  493.108507][T11624] hsr_slave_1: left promiscuous mode
[  493.161017][T11624] veth1_macvtap: left promiscuous mode
[  493.167553][T11624] veth0_macvtap: left promiscuous mode
[  493.994416][T11617] smbdirect: ib_dev[syz2] removed
[  494.010117][T18351] syzkaller0: entered promiscuous mode
[  494.010184][T18351] syzkaller0: entered allmulticast mode
[  494.018736][ T5347] lo speed is unknown, defaulting to 1000
[  494.018758][ T5347] syz2: Port: 1 Link DOWN
[  495.192335][T11624] IPVS: stop unused estimator thread 0...
[  495.383949][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'.
[  495.747598][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3014'.
[  495.810259][T18435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3015'.
[  495.960565][T17942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.165017][T18443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3018'.
[  496.211191][T18445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3018'.
[  496.244588][T17942] veth0_vlan: entered promiscuous mode
[  496.269285][T18450] netlink: 'syz.4.3017': attribute type 1 has an invalid length.
[  496.362690][T18448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  496.595122][T17942] veth1_vlan: entered promiscuous mode
[  496.761537][T18473] veth1_to_bond: entered allmulticast mode
[  496.762387][T18473] veth1_to_bond: entered promiscuous mode
[  496.762802][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'.
[  496.795917][T18473] veth1_to_bond (unregistering): left promiscuous mode
[  496.795989][T18473] veth1_to_bond (unregistering): left allmulticast mode
[  496.935373][T17942] veth0_macvtap: entered promiscuous mode
[  496.977004][T17942] veth1_macvtap: entered promiscuous mode
[  497.071808][T17942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.116247][T18485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3025'.
[  497.125931][T17942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.238360][T11618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.238820][T11618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.239273][T11618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.239310][T11618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.367351][T18489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'.
[  497.367422][T18489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'.
[  497.367455][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'.
[  497.640272][T18501] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001
[  497.715983][T18498] syzkaller0: entered promiscuous mode
[  497.716052][T18498] syzkaller0: entered allmulticast mode
[  497.772580][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.783458][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.916938][T18513] netlink: 'syz.2.3031': attribute type 1 has an invalid length.
[  497.948936][T18513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'.
[  498.284955][T11624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.285012][T11624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.389325][T18535] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3037'.
[  498.398787][T18535] netlink: 'syz.4.3037': attribute type 9 has an invalid length.
[  498.407423][T18535] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3037'.
[  498.791167][T18547] openvswitch: netlink: Flow actions attr not present in new flow.
[  498.807552][T18548] openvswitch: netlink: Flow actions attr not present in new flow.
[  499.131893][T18553] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.132024][T18553] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.584793][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  499.602927][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  499.613841][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  499.626981][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  499.642448][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  499.914756][T18584] xt_policy: output policy not valid in PREROUTING and INPUT
[  501.448960][T18637] pim6reg: entered allmulticast mode
[  501.737493][ T5637] Bluetooth: hci4: command tx timeout
[  502.187601][T18657] __nla_validate_parse: 68 callbacks suppressed
[  502.187671][T18657] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3057'.
[  502.237584][T18655] x_tables: ip_tables: icmp match: only valid for protocol 1
[  503.760212][T18635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  503.818477][ T5637] Bluetooth: hci4: command tx timeout
[  503.855584][T18674] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  503.913341][T18635] pim6reg: left allmulticast mode
[  504.050352][ T5766] hsr0 speed is unknown, defaulting to 1000
[  504.050407][ T5766] syz1: Port: 1 Link DOWN
[  505.043893][T18573] lo speed is unknown, defaulting to 1000
[  505.047048][T18573] hsr0 speed is unknown, defaulting to 1000
[  505.372074][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3071'.
[  505.712668][T18775] netlink: 'syz.2.3075': attribute type 21 has an invalid length.
[  505.712793][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3075'.
[  505.712858][T18775] netlink: 'syz.2.3075': attribute type 1 has an invalid length.
[  505.760616][T18762] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2
[  505.897819][ T5637] Bluetooth: hci4: command tx timeout
[  506.108480][T18788] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3076'.
[  506.266108][T16970] udevd[16970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  506.280049][T18791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3075'.
[  506.283699][T16970] udevd[16970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  506.585229][T18573] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.585631][T18573] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.585818][T18573] bridge_slave_0: entered allmulticast mode
[  506.589062][T18573] bridge_slave_0: entered promiscuous mode
[  506.595378][T18573] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.595663][T18573] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.595851][T18573] bridge_slave_1: entered allmulticast mode
[  506.599598][T18573] bridge_slave_1: entered promiscuous mode
[  506.682471][T18573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.688949][T18573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.856057][T18573] team0: Port device team_slave_0 added
[  506.878500][T18573] team0: Port device team_slave_1 added
[  507.006973][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'.
[  507.100219][T18573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.100288][T18573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.100340][T18573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.119493][T18573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.119515][T18573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.119541][T18573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.304056][T18573] hsr_slave_0: entered promiscuous mode
[  507.309295][T18573] hsr_slave_1: entered promiscuous mode
[  507.312906][T18573] debugfs: 'hsr0' already exists in 'hsr'
[  507.312936][T18573] Cannot create hsr debugfs directory
[  507.619404][T18828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.792948][T18836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3088'.
[  507.909334][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3086'.
[  507.987988][ T5637] Bluetooth: hci4: command tx timeout
[  508.063176][T18573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.222349][T18844] openvswitch: netlink: Unknown key attributes 1
[  508.433654][T18573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.639879][T18856] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3095'.
[  508.654169][T18856] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3095'.
[  508.681692][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'.
[  508.948921][T18573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.479999][T18891] gre0: entered promiscuous mode
[  509.480051][T18891] gre0: entered allmulticast mode
[  509.522472][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3099'.
[  509.720273][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3103'.
[  509.720335][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'.
[  510.011223][T18907] netlink: 'syz.0.3104': attribute type 1 has an invalid length.
[  510.059408][T18907] 8021q: adding VLAN 0 to HW filter on device bond9
[  510.119550][T18907] bond9: (slave geneve5): making interface the new active one
[  510.134516][T18907] bond9: (slave geneve5): Enslaving as an active interface with an up link
[  510.181216][T18911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'.
[  510.203832][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'.
[  510.261281][T18911] veth3: entered allmulticast mode
[  511.263611][T18848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  511.324227][T18573] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  511.403468][T18573] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  511.404438][T18573] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  511.433434][T18573] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  511.435999][T18573] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  511.483774][T18573] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  511.493168][T18573] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  511.539484][T18573] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  511.983020][T18946] syzkaller0: entered promiscuous mode
[  511.983098][T18946] syzkaller0: entered allmulticast mode
[  512.045125][T18946] netlink: 'syz.0.3115': attribute type 29 has an invalid length.
[  512.066863][T18946] netlink: 'syz.0.3115': attribute type 29 has an invalid length.
[  512.294525][T18573] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.411797][T18573] 8021q: adding VLAN 0 to HW filter on device team0
[  512.450405][T11611] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.450549][T11611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.525955][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.526082][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.718919][T18972] macsec1: entered promiscuous mode
[  512.725652][T18972] batadv0: entered promiscuous mode
[  512.732080][T18972] macsec1: entered allmulticast mode
[  512.738301][T18972] batadv0: entered allmulticast mode
[  512.745691][T18972] 8021q: adding VLAN 0 to HW filter on device macsec1
[  512.763242][T18972] batadv0: left allmulticast mode
[  512.769910][T18972] batadv0: left promiscuous mode
[  512.940928][T18982] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.420024][T18999] __nla_validate_parse: 6 callbacks suppressed
[  513.420284][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'.
[  513.464601][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'.
[  514.181584][T18573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.563271][T19042] C: renamed from veth1_to_team
[  514.586759][T19042] netlink: 'syz.0.3140': attribute type 2 has an invalid length.
[  514.586820][T19042] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3140'.
[  514.586864][T19042] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  514.760343][T11620] IPVS: starting estimator thread 0...
[  514.847548][T19057] IPVS: using max 30 ests per chain, 72000 per kthread
[  517.745897][T18573] veth0_vlan: entered promiscuous mode
[  517.781336][T18573] veth1_vlan: entered promiscuous mode
[  517.831728][T18573] veth0_macvtap: entered promiscuous mode
[  517.846883][T18573] veth1_macvtap: entered promiscuous mode
[  518.000266][T18573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.028999][T18573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.180870][T11611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.182139][T11611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.182219][T11611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.182251][T11611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.326282][T19113] netlink: 'syz.3.3157': attribute type 10 has an invalid length.
[  518.692661][T11623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.692709][T11623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.991410][T19118] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3159'.
[  518.991463][T19118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3159'.
[  519.075798][T11604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.075857][T11604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.777087][T19154] macsec1: entered promiscuous mode
[  519.814556][T19154] netlink: 'syz.2.3166': attribute type 2 has an invalid length.
[  519.882882][T19154] 
þ: entered promiscuous mode
[  519.897085][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.919730][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.935389][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.953804][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.965296][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  521.342975][T19190] netlink: 'syz.3.3176': attribute type 10 has an invalid length.
[  521.517023][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'.
[  521.560117][T19217] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.665894][T19217] bridge_slave_1 (unregistering): left allmulticast mode
[  521.665953][T19217] bridge_slave_1 (unregistering): left promiscuous mode
[  521.667046][T19217] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.864935][T19225] geneve2: entered promiscuous mode
[  522.062161][ T5637] Bluetooth: hci0: command tx timeout
[  522.209240][T19159] lo speed is unknown, defaulting to 1000
[  522.230323][T19159] hsr0 speed is unknown, defaulting to 1000
[  522.398523][T19243] block nbd2: NBD_DISCONNECT
[  522.403849][T19243] block nbd2: Send disconnect failed -32
[  522.416677][T19243] block nbd2: Send disconnect failed -32
[  522.422904][T19243] block nbd2: shutting down sockets
[  522.539638][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'.
[  522.990944][T19268] netlink: 'syz.3.3195': attribute type 10 has an invalid length.
[  523.118386][T19275] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  523.281235][T19159] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.281461][T19159] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.281616][T19159] bridge_slave_0: entered allmulticast mode
[  523.285078][T19159] bridge_slave_0: entered promiscuous mode
[  523.290808][T19159] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.290913][T19159] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.291047][T19159] bridge_slave_1: entered allmulticast mode
[  523.293080][T19159] bridge_slave_1: entered promiscuous mode
[  523.462322][T19159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.470802][T19159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.578188][T19295] Bluetooth: MGMT ver 1.23
[  523.582875][T19295] Bluetooth: hci0: unsupported parameter 5161
[  523.590603][T19295] Bluetooth: hci0: unsupported parameter 8192
[  523.593655][T19291] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  523.597461][T19295] Bluetooth: hci0: unsupported parameter 5161
[  523.597483][T19295] Bluetooth: hci0: unsupported parameter 8192
[  523.602250][T19159] team0: Port device team_slave_0 added
[  523.615855][T19159] team0: Port device team_slave_1 added
[  523.721726][T19159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.730184][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.730221][T19159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.782356][T19159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.782392][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.782436][T19159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.147650][ T5637] Bluetooth: hci0: command tx timeout
[  524.212257][T19159] hsr_slave_0: entered promiscuous mode
[  524.222541][T19159] hsr_slave_1: entered promiscuous mode
[  524.235096][T19159] debugfs: 'hsr0' already exists in 'hsr'
[  524.235154][T19159] Cannot create hsr debugfs directory
[  524.395385][T19330] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3207'.
[  524.640288][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'.
[  525.003864][T19159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.977128][T19159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  525.977198][T19159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.066661][T19159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.066730][T19159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.203832][T19159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  526.203876][T19159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.217611][ T5637] Bluetooth: hci0: command tx timeout
[  526.265815][T19376] syzkaller1: entered promiscuous mode
[  526.275275][T19376] syzkaller1: entered allmulticast mode
[  526.812094][T19159] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  526.826590][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  526.868736][T19159] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  526.897043][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  526.900137][T19159] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  526.939603][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  526.944322][T19159] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  526.980762][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  527.275493][T19159] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.279342][T19412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.318176][T19409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  527.370108][T19159] 8021q: adding VLAN 0 to HW filter on device team0
[  527.399010][T11617] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.399147][T11617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.455232][T11613] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.455374][T11613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.298399][ T5637] Bluetooth: hci0: command tx timeout
[  528.368073][T11617] bridge_slave_1: left allmulticast mode
[  528.374238][T11617] bridge_slave_1: left promiscuous mode
[  528.380652][T11617] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.401776][T11617] bridge_slave_0: left allmulticast mode
[  528.408667][T11617] bridge_slave_0: left promiscuous mode
[  528.416374][T11617] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.445309][T11617] pimreg: left allmulticast mode
[  528.790381][T11617] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface
[  528.950797][T11617] bond1 (unregistering): (slave geneve4): Releasing active interface
[  529.061269][T11613] smc: removing ib device syz0
[  529.069959][T11617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  529.081934][T11617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  529.094399][T11617] bond0 (unregistering): Released all slaves
[  529.116973][T11617] bond1 (unregistering): Released all slaves
[  529.136406][T11617] bond2 (unregistering): (slave veth5): Releasing backup interface
[  529.136470][T11617] veth5: left promiscuous mode
[  529.152882][T11617] bond2 (unregistering): Released all slaves
[  529.170864][T11617] bond3 (unregistering): Released all slaves
[  529.183518][T11617] bond4 (unregistering): Released all slaves
[  529.195783][T11617] bond5 (unregistering): Released all slaves
[  529.213382][T11617] bond6 (unregistering): (slave veth13): Releasing active interface
[  529.232461][T11617] bond6 (unregistering): (slave veth15): Releasing active interface
[  529.243835][T11617] bond6 (unregistering): Released all slaves
[  529.260567][T11617] bond7 (unregistering): (slave dummy0): Releasing active interface
[  529.279752][T11617] bond7 (unregistering): Released all slaves
[  529.732218][T19460] netlink: 'syz.4.3234': attribute type 5 has an invalid length.
[  529.895758][T19468] netlink: 'syz.3.3236': attribute type 3 has an invalid length.
[  529.962269][T11613] smbdirect: ib_dev[syz0] removed
[  530.561537][T19488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3237'.
[  530.594523][T19487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3240'.
[  530.911101][T19474] bridge0: port 3(vlan2) entered blocking state
[  530.911240][T19474] bridge0: port 3(vlan2) entered disabled state
[  530.911380][T19474] vlan2: entered allmulticast mode
[  530.911397][T19474] vlan0: entered allmulticast mode
[  530.911408][T19474] veth0_vlan: entered allmulticast mode
[  530.914165][T19474] vlan2: entered promiscuous mode
[  530.914192][T19474] vlan0: entered promiscuous mode
[  530.926518][T19478] syzkaller1: entered promiscuous mode
[  530.926548][T19478] syzkaller1: entered allmulticast mode
[  531.086613][T19494] bond7: (slave syz_tun): Removing an active aggregator
[  531.124701][T19494] bond7: (slave syz_tun): Releasing backup interface
[  531.222359][T19505] FAULT_INJECTION: forcing a failure.
[  531.222359][T19505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.236703][T19505] CPU: 0 UID: 0 PID: 19505 Comm: syz.3.3244 Not tainted syzkaller #0 PREEMPT(full) 
[  531.236738][T19505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  531.236752][T19505] Call Trace:
[  531.236763][T19505]  <TASK>
[  531.236773][T19505]  dump_stack_lvl+0xe8/0x150
[  531.236820][T19505]  should_fail_ex+0x410/0x560
[  531.236873][T19505]  _copy_from_user+0x2d/0xb0
[  531.236900][T19505]  ___sys_sendmsg+0x1c6/0x360
[  531.236927][T19505]  ? __lock_acquire+0x6df/0x2e50
[  531.236957][T19505]  ? __pfx____sys_sendmsg+0x10/0x10
[  531.237019][T19505]  ? __fget_files+0x2a/0x420
[  531.237048][T19505]  ? __fget_files+0x3a2/0x420
[  531.237086][T19505]  __x64_sys_sendmsg+0x1b1/0x290
[  531.237112][T19505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  531.237159][T19505]  do_syscall_64+0x166/0x520
[  531.237193][T19505]  ? trace_irq_disable+0x3b/0x140
[  531.237222][T19505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.237245][T19505]  ? clear_bhb_loop+0x70/0xc0
[  531.237271][T19505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.237292][T19505] RIP: 0033:0x7fb76c39e159
[  531.237313][T19505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.237333][T19505] RSP: 002b:00007fb76d28d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.237358][T19505] RAX: ffffffffffffffda RBX: 00007fb76c625fa0 RCX: 00007fb76c39e159
[  531.237373][T19505] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  531.237386][T19505] RBP: 00007fb76d28d090 R08: 0000000000000000 R09: 0000000000000000
[  531.237400][T19505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.237411][T19505] R13: 00007fb76c626038 R14: 00007fb76c625fa0 R15: 00007ffc3a766cb8
[  531.237443][T19505]  </TASK>
[  531.403149][T19159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.724772][T19159] veth0_vlan: entered promiscuous mode
[  531.781249][T19159] veth1_vlan: entered promiscuous mode
[  531.813629][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'.
[  531.813687][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'.
[  531.877430][T19513] tls_set_device_offload: netdev not found
[  532.030026][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3250'.
[  532.338637][T19538] netlink: 'syz.4.3253': attribute type 10 has an invalid length.
[  532.338689][T19538] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3253'.
[  532.404792][T19517] team1: entered promiscuous mode
[  532.404880][T19517] team1: entered allmulticast mode
[  532.405508][T19517] 8021q: adding VLAN 0 to HW filter on device team1
[  532.434487][T19159] veth0_macvtap: entered promiscuous mode
[  532.509391][T19518] ip6gre1: entered promiscuous mode
[  532.509432][T19518] ip6gre1: entered allmulticast mode
[  532.991216][T19538] vlan2 (unregistering): left allmulticast mode
[  532.991267][T19538] vlan0 (unregistering): left allmulticast mode
[  532.991303][T19538] veth0_vlan (unregistering): left allmulticast mode
[  532.991332][T19538] vlan2 (unregistering): left promiscuous mode
[  532.991352][T19538] vlan0 (unregistering): left promiscuous mode
[  532.991461][T19538] bridge0: port 3(vlan2) entered disabled state
[  533.001792][T19560] netlink: 'syz.2.3259': attribute type 1 has an invalid length.
[  533.205648][T19159] veth1_macvtap: entered promiscuous mode
[  533.425844][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  533.439142][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  533.493553][T19560] bond11: option mode: invalid value (7)
[  533.566700][T19560] bond11 (unregistering): Released all slaves
[  534.382863][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  534.604111][T11617] : left promiscuous mode
[  534.846436][T19159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.895619][T19159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.018525][T11617] tipc: Disabling bearer <eth:syzkaller0>
[  535.025728][T11617] tipc: Left network mode
[  535.100745][T11611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.190566][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'.
[  535.230534][T11621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.330562][T19618] netlink: 'syz.1.3270': attribute type 30 has an invalid length.
[  535.392758][T19616] team0: Port device team_slave_0 removed
[  535.607562][T11621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.607648][T11621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.669754][T11621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.669815][T11621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.849570][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3272'.
[  536.123497][T11611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.123536][T11611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.205495][T19654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3280'.
[  537.529780][T11617] hsr_slave_0: left promiscuous mode
[  537.541486][T11617] hsr_slave_1: left promiscuous mode
[  537.557808][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.565662][T11617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.581316][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  537.592309][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.615996][T11617] veth1_macvtap: left promiscuous mode
[  537.623033][T11617] veth0_macvtap: left promiscuous mode
[  537.630067][T11617] veth1_vlan: left promiscuous mode
[  537.635792][T11617] veth0_vlan: left promiscuous mode
[  537.670977][T19668] FAULT_INJECTION: forcing a failure.
[  537.670977][T19668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.671067][T19668] CPU: 0 UID: 0 PID: 19668 Comm: syz.1.3283 Not tainted syzkaller #0 PREEMPT(full) 
[  537.671092][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  537.671103][T19668] Call Trace:
[  537.671112][T19668]  <TASK>
[  537.671120][T19668]  dump_stack_lvl+0xe8/0x150
[  537.671154][T19668]  should_fail_ex+0x410/0x560
[  537.671186][T19668]  _copy_from_iter+0x1d3/0x1660
[  537.671216][T19668]  ? __alloc_skb+0x27a/0x7a0
[  537.671247][T19668]  ? __alloc_skb+0x27a/0x7a0
[  537.671274][T19668]  ? __alloc_skb+0x27a/0x7a0
[  537.671308][T19668]  ? __pfx__copy_from_iter+0x10/0x10
[  537.671332][T19668]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  537.671360][T19668]  ? __alloc_skb+0x27a/0x7a0
[  537.671384][T19668]  ? __alloc_skb+0x27a/0x7a0
[  537.671415][T19668]  ? netlink_sendmsg+0x650/0xb40
[  537.671440][T19668]  ? skb_put+0x112/0x210
[  537.671460][T19668]  netlink_sendmsg+0x6c0/0xb40
[  537.671491][T19668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.671521][T19668]  ? apparmor_socket_sendmsg+0x98/0x360
[  537.671554][T19668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.671575][T19668]  sock_sendmsg_nosec+0x13a/0x180
[  537.671602][T19668]  ____sys_sendmsg+0x54e/0x850
[  537.671627][T19668]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.671656][T19668]  ? import_iovec+0x73/0xa0
[  537.671678][T19668]  ___sys_sendmsg+0x2a5/0x360
[  537.671697][T19668]  ? __lock_acquire+0x6df/0x2e50
[  537.671721][T19668]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.671779][T19668]  ? __fget_files+0x2a/0x420
[  537.671802][T19668]  ? __fget_files+0x3a2/0x420
[  537.671833][T19668]  __x64_sys_sendmsg+0x1b1/0x290
[  537.671857][T19668]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  537.671903][T19668]  do_syscall_64+0x166/0x520
[  537.671930][T19668]  ? trace_irq_disable+0x3b/0x140
[  537.671948][T19668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.671968][T19668]  ? clear_bhb_loop+0x70/0xc0
[  537.671991][T19668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.672009][T19668] RIP: 0033:0x7f8b2099e159
[  537.672027][T19668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.672044][T19668] RSP: 002b:00007f8b21905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.672066][T19668] RAX: ffffffffffffffda RBX: 00007f8b20c25fa0 RCX: 00007f8b2099e159
[  537.672080][T19668] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  537.672092][T19668] RBP: 00007f8b21905090 R08: 0000000000000000 R09: 0000000000000000
[  537.672103][T19668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.672114][T19668] R13: 00007f8b20c26038 R14: 00007f8b20c25fa0 R15: 00007ffd95d1c348
[  537.672145][T19668]  </TASK>
[  538.134365][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'.
[  538.153785][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  538.170240][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  538.174175][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'.
[  538.179536][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  538.191493][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  538.192118][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  538.406620][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'.
[  538.575068][T11617] team0 (unregistering): Port device batadv2 removed
[  538.615054][T11617] team0 (unregistering): Port device veth3 removed
[  538.636724][T19627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  538.657027][T19667] netlink: 'syz.2.3282': attribute type 10 has an invalid length.
[  539.334229][T11617] team0 (unregistering): Port device team_slave_1 removed
[  539.352244][T11617] team0 (unregistering): Port device team_slave_0 removed
[  539.549909][ T8211] lo speed is unknown, defaulting to 1000
[  539.549959][ T8211] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[  539.568948][T11613] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  539.676999][T19687] syzkaller1: entered allmulticast mode
[  540.149116][T19709] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  540.297865][   T52] Bluetooth: hci1: command tx timeout
[  540.710426][T19674] hsr0 speed is unknown, defaulting to 1000
[  541.162156][T19732] FAULT_INJECTION: forcing a failure.
[  541.162156][T19732] name failslab, interval 1, probability 0, space 0, times 0
[  541.162211][T19732] CPU: 1 UID: 0 PID: 19732 Comm: syz.4.3293 Not tainted syzkaller #0 PREEMPT(full) 
[  541.162234][T19732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  541.162246][T19732] Call Trace:
[  541.162260][T19732]  <TASK>
[  541.162269][T19732]  dump_stack_lvl+0xe8/0x150
[  541.162311][T19732]  should_fail_ex+0x410/0x560
[  541.162344][T19732]  should_failslab+0xa8/0x100
[  541.162369][T19732]  ? skb_clone+0x212/0x3a0
[  541.162390][T19732]  kmem_cache_alloc_noprof+0xa1/0x600
[  541.162421][T19732]  ? skb_clone+0x212/0x3a0
[  541.162447][T19732]  skb_clone+0x212/0x3a0
[  541.162473][T19732]  __netlink_deliver_tap+0x413/0x860
[  541.162507][T19732]  ? netlink_deliver_tap+0x2e/0x1b0
[  541.162531][T19732]  netlink_deliver_tap+0x19c/0x1b0
[  541.162554][T19732]  netlink_unicast+0x781/0x940
[  541.162601][T19732]  netlink_sendmsg+0x813/0xb40
[  541.162634][T19732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.162665][T19732]  ? apparmor_socket_sendmsg+0x98/0x360
[  541.162695][T19732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.162716][T19732]  sock_sendmsg_nosec+0x13a/0x180
[  541.162744][T19732]  ____sys_sendmsg+0x54e/0x850
[  541.162770][T19732]  ? __pfx_____sys_sendmsg+0x10/0x10
[  541.162799][T19732]  ? import_iovec+0x73/0xa0
[  541.162824][T19732]  ___sys_sendmsg+0x2a5/0x360
[  541.162843][T19732]  ? __lock_acquire+0x6df/0x2e50
[  541.162867][T19732]  ? __pfx____sys_sendmsg+0x10/0x10
[  541.162923][T19732]  ? __fget_files+0x2a/0x420
[  541.162945][T19732]  ? __fget_files+0x3a2/0x420
[  541.162980][T19732]  __x64_sys_sendmsg+0x1b1/0x290
[  541.163003][T19732]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  541.163046][T19732]  do_syscall_64+0x166/0x520
[  541.163072][T19732]  ? trace_irq_disable+0x3b/0x140
[  541.163090][T19732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.163110][T19732]  ? clear_bhb_loop+0x70/0xc0
[  541.163132][T19732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.163151][T19732] RIP: 0033:0x7f3bb3b9e159
[  541.163170][T19732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.163186][T19732] RSP: 002b:00007f3bb1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.163208][T19732] RAX: ffffffffffffffda RBX: 00007f3bb3e25fa0 RCX: 00007f3bb3b9e159
[  541.163222][T19732] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  541.163234][T19732] RBP: 00007f3bb1df6090 R08: 0000000000000000 R09: 0000000000000000
[  541.163246][T19732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.163257][T19732] R13: 00007f3bb3e26038 R14: 00007f3bb3e25fa0 R15: 00007ffd5a66fdf8
[  541.163297][T19732]  </TASK>
[  541.691056][T19744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3298'.
[  542.085806][T19734] netlink: 'syz.2.3295': attribute type 10 has an invalid length.
[  542.381511][   T52] Bluetooth: hci1: command tx timeout
[  542.557898][T19767] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  542.732860][T19784] FAULT_INJECTION: forcing a failure.
[  542.732860][T19784] name failslab, interval 1, probability 0, space 0, times 0
[  542.732947][T19784] CPU: 0 UID: 0 PID: 19784 Comm: syz.1.3306 Not tainted syzkaller #0 PREEMPT(full) 
[  542.732972][T19784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  542.732985][T19784] Call Trace:
[  542.733000][T19784]  <TASK>
[  542.733011][T19784]  dump_stack_lvl+0xe8/0x150
[  542.733052][T19784]  should_fail_ex+0x410/0x560
[  542.733089][T19784]  should_failslab+0xa8/0x100
[  542.733115][T19784]  __kmalloc_cache_noprof+0xa3/0x600
[  542.733141][T19784]  ? stack_trace_save+0xa9/0x100
[  542.733168][T19784]  ? rtnl_newlink+0x143/0x1c30
[  542.733187][T19784]  ? rtnl_newlink+0x143/0x1c30
[  542.733211][T19784]  rtnl_newlink+0x143/0x1c30
[  542.733230][T19784]  ? kasan_save_track+0x4f/0x80
[  542.733250][T19784]  ? kasan_save_track+0x3e/0x80
[  542.733267][T19784]  ? __kasan_slab_free+0x5c/0x80
[  542.733297][T19784]  ? kmem_cache_free+0x182/0x650
[  542.733314][T19784]  ? nlmon_xmit+0xb0/0x100
[  542.733343][T19784]  ? dev_hard_start_xmit+0x2cd/0x830
[  542.733365][T19784]  ? __dev_queue_xmit+0x14c0/0x3820
[  542.733385][T19784]  ? __netlink_deliver_tap+0x5b4/0x860
[  542.733408][T19784]  ? netlink_deliver_tap+0x19c/0x1b0
[  542.733428][T19784]  ? netlink_unicast+0x781/0x940
[  542.733445][T19784]  ? netlink_sendmsg+0x813/0xb40
[  542.733468][T19784]  ? __pfx_rtnl_newlink+0x10/0x10
[  542.733503][T19784]  ? do_syscall_64+0x166/0x520
[  542.733531][T19784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.733585][T19784]  ? kasan_quarantine_put+0xbb/0x1f0
[  542.733613][T19784]  ? lockdep_hardirqs_on+0x7b/0x110
[  542.733643][T19784]  ? nlmon_xmit+0xb0/0x100
[  542.733667][T19784]  ? kmem_cache_free+0x182/0x650
[  542.733696][T19784]  ? __lock_acquire+0x6df/0x2e50
[  542.733722][T19784]  ? __dev_queue_xmit+0x29b/0x3820
[  542.733746][T19784]  ? __local_bh_enable_ip+0xd6/0x140
[  542.733773][T19784]  ? lockdep_hardirqs_on+0x7b/0x110
[  542.733796][T19784]  ? __dev_queue_xmit+0x29b/0x3820
[  542.733816][T19784]  ? __local_bh_enable_ip+0xd6/0x140
[  542.733837][T19784]  ? __dev_queue_xmit+0x29b/0x3820
[  542.733865][T19784]  ? lock_acquire+0x115/0x350
[  542.733884][T19784]  ? __pfx_rtnl_newlink+0x10/0x10
[  542.733913][T19784]  ? __pfx_rtnl_newlink+0x10/0x10
[  542.733930][T19784]  rtnetlink_rcv_msg+0x802/0xc00
[  542.733963][T19784]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  542.733990][T19784]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  542.734015][T19784]  ? ref_tracker_free+0x689/0x830
[  542.734038][T19784]  ? __pfx_ref_tracker_free+0x10/0x10
[  542.734068][T19784]  netlink_rcv_skb+0x226/0x4a0
[  542.734090][T19784]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  542.734119][T19784]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  542.734154][T19784]  ? netlink_deliver_tap+0x2e/0x1b0
[  542.734175][T19784]  ? netlink_deliver_tap+0x2e/0x1b0
[  542.734202][T19784]  netlink_unicast+0x7bd/0x940
[  542.734233][T19784]  netlink_sendmsg+0x813/0xb40
[  542.734265][T19784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.734303][T19784]  ? apparmor_socket_sendmsg+0x98/0x360
[  542.734334][T19784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  542.734355][T19784]  sock_sendmsg_nosec+0x13a/0x180
[  542.734383][T19784]  ____sys_sendmsg+0x54e/0x850
[  542.734409][T19784]  ? __pfx_____sys_sendmsg+0x10/0x10
[  542.734439][T19784]  ? import_iovec+0x73/0xa0
[  542.734463][T19784]  ___sys_sendmsg+0x2a5/0x360
[  542.734482][T19784]  ? __lock_acquire+0x6df/0x2e50
[  542.734505][T19784]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.734559][T19784]  ? __fget_files+0x2a/0x420
[  542.734582][T19784]  ? __fget_files+0x3a2/0x420
[  542.734615][T19784]  __x64_sys_sendmsg+0x1b1/0x290
[  542.734637][T19784]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.734678][T19784]  do_syscall_64+0x166/0x520
[  542.734703][T19784]  ? trace_irq_disable+0x3b/0x140
[  542.734721][T19784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.734740][T19784]  ? clear_bhb_loop+0x70/0xc0
[  542.734763][T19784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.734782][T19784] RIP: 0033:0x7f8b2099e159
[  542.734804][T19784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.734821][T19784] RSP: 002b:00007f8b21905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.734843][T19784] RAX: ffffffffffffffda RBX: 00007f8b20c25fa0 RCX: 00007f8b2099e159
[  542.734858][T19784] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  542.734870][T19784] RBP: 00007f8b21905090 R08: 0000000000000000 R09: 0000000000000000
[  542.734882][T19784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.734894][T19784] R13: 00007f8b20c26038 R14: 00007f8b20c25fa0 R15: 00007ffd95d1c348
[  542.734925][T19784]  </TASK>
[  543.455636][T19674] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.469654][T19674] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.478386][T19674] bridge_slave_0: entered allmulticast mode
[  543.486559][T19674] bridge_slave_0: entered promiscuous mode
[  543.505267][T19674] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.513304][T19674] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.522361][T19674] bridge_slave_1: entered allmulticast mode
[  543.535211][T19674] bridge_slave_1: entered promiscuous mode
[  544.009179][T11603] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.017961][T19674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.068254][T19674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.262883][T19674] team0: Port device team_slave_0 added
[  544.282869][T19674] team0: Port device team_slave_1 added
[  544.286155][T19825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3317'.
[  544.319767][T11603] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.457777][   T52] Bluetooth: hci1: command tx timeout
[  545.172998][T19674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.173039][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.173067][T19674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.214895][T19674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.214914][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.214939][T19674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.466641][T11617] pim6reg: left allmulticast mode
[  545.466863][T11617] dvmrp0: left allmulticast mode
[  546.343841][T11617] bond0 (unregistering): (slave gretap1): Releasing backup interface
[  546.538201][   T52] Bluetooth: hci1: command tx timeout
[  546.545896][T11617] bond3 (unregistering): (slave macvlan3): Releasing active interface
[  546.561428][T11617] bond0 (unregistering): Released all slaves
[  546.573253][T11617] bond1 (unregistering): Released all slaves
[  546.585504][T11617] bond2 (unregistering): (slave veth9): Releasing active interface
[  546.594623][T11617] bond2 (unregistering): Released all slaves
[  546.608785][T11617] bond3 (unregistering): Released all slaves
[  546.634565][T19674] hsr_slave_0: entered promiscuous mode
[  546.635591][T19674] hsr_slave_1: entered promiscuous mode
[  546.637755][T19674] debugfs: 'hsr0' already exists in 'hsr'
[  546.637775][T19674] Cannot create hsr debugfs directory
[  546.637965][T19845] tc_dump_action: action bad kind
[  546.676820][T19846] netlink: 'syz.0.3326': attribute type 10 has an invalid length.
[  546.687543][T11613] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  546.687704][T11613] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.024077][T11617] : left promiscuous mode
[  547.099146][T19877] netlink: 'syz.1.3330': attribute type 1 has an invalid length.
[  547.099208][T19877] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3330'.
[  547.426763][T11617] tipc: Left network mode
[  548.226812][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  548.773329][T19674] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.908777][T19935] batman_adv: batadv0: Adding interface: gretap1
[  548.908817][T19935] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.908874][T19935] batman_adv: batadv0: Interface activated: gretap1
[  549.059859][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.062702][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.063221][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.063736][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.064251][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.064756][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.065253][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.065759][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.066255][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[  549.165468][T19674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.352976][T19674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.568380][T19674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.812756][T19986] netlink: 'syz.4.3353': attribute type 1 has an invalid length.
[  550.812821][T19986] netlink: 'syz.4.3353': attribute type 1 has an invalid length.
[  551.293121][T19991] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.296033][T19991] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.389888][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.400213][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.510570][T20001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  552.022993][T11617] hsr_slave_0: left promiscuous mode
[  552.030466][T11617] hsr_slave_1: left promiscuous mode
[  552.031510][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.422805][T11617] team0 (unregistering): Port device team_slave_1 removed
[  553.756174][T11621] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.769571][T11621] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.769665][T11621] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.769712][T11621] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.905258][T19674] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  553.925454][T19674] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  553.937791][T19674] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  553.953760][T19674] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  553.962450][T19674] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  554.005190][T19674] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  554.015597][T19674] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  554.042011][T19674] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  554.486777][T19674] 8021q: adding VLAN 0 to HW filter on device bond0
[  554.622474][T19674] 8021q: adding VLAN 0 to HW filter on device team0
[  554.669142][T11603] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.669311][T11603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  554.713482][T11618] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.713623][T11618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.746974][T11617] IPVS: stop unused estimator thread 0...
[  555.241101][T20114] openvswitch: netlink: Missing valid actions attribute.
[  555.323450][T20114] __nla_validate_parse: 57 callbacks suppressed
[  555.323834][T20114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3373'.
[  556.158013][T11617] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.208890][T11613] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.209066][T11621] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.209116][T11621] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  556.304869][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3377'.
[  556.332570][T20137] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  556.781017][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3379'.
[  556.781076][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'.
[  556.802977][T20150] bond1: option miimon: invalid value (18446744071562067968)
[  556.808906][T20150] bond1: option miimon: allowed values 0 - 2147483647
[  556.813384][T20150] bond1 (unregistering): Released all slaves
[  557.166653][T20172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3382'.
[  557.611084][T19674] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.756612][T20182] hsr0 speed is unknown, defaulting to 1000
[  557.803278][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'.
[  557.823593][T20195] openvswitch: netlink: Missing valid actions attribute.
[  557.834599][T20191] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.858629][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3388'.
[  558.163229][T19674] veth0_vlan: entered promiscuous mode
[  558.265901][T20185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  558.282570][T20213] FAULT_INJECTION: forcing a failure.
[  558.282570][T20213] name failslab, interval 1, probability 0, space 0, times 0
[  558.282633][T20213] CPU: 1 UID: 0 PID: 20213 Comm: syz.4.3391 Not tainted syzkaller #0 PREEMPT(full) 
[  558.282655][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  558.282667][T20213] Call Trace:
[  558.282676][T20213]  <TASK>
[  558.282684][T20213]  dump_stack_lvl+0xe8/0x150
[  558.282730][T20213]  should_fail_ex+0x410/0x560
[  558.282763][T20213]  should_failslab+0xa8/0x100
[  558.282789][T20213]  __kvmalloc_node_noprof+0x176/0x820
[  558.282812][T20213]  ? alloc_netdev_mqs+0xae2/0x12a0
[  558.282835][T20213]  ? alloc_netdev_mqs+0xae2/0x12a0
[  558.282864][T20213]  alloc_netdev_mqs+0xae2/0x12a0
[  558.282892][T20213]  rtnl_create_link+0x321/0xd70
[  558.282921][T20213]  rtnl_newlink_create+0x258/0x7b0
[  558.282948][T20213]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  558.282971][T20213]  ? __pfx___mutex_lock+0x10/0x10
[  558.283009][T20213]  ? ns_capable+0x89/0xe0
[  558.283037][T20213]  rtnl_newlink+0x166d/0x1c30
[  558.283070][T20213]  ? __pfx_rtnl_newlink+0x10/0x10
[  558.283086][T20213]  ? do_syscall_64+0x166/0x520
[  558.283109][T20213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.283165][T20213]  ? kasan_quarantine_put+0xbb/0x1f0
[  558.283191][T20213]  ? lockdep_hardirqs_on+0x7b/0x110
[  558.283220][T20213]  ? nlmon_xmit+0xb0/0x100
[  558.283246][T20213]  ? kmem_cache_free+0x182/0x650
[  558.283275][T20213]  ? __lock_acquire+0x6df/0x2e50
[  558.283298][T20213]  ? __dev_queue_xmit+0x29b/0x3820
[  558.283322][T20213]  ? __local_bh_enable_ip+0xd6/0x140
[  558.283345][T20213]  ? lockdep_hardirqs_on+0x7b/0x110
[  558.283368][T20213]  ? __dev_queue_xmit+0x29b/0x3820
[  558.283386][T20213]  ? __local_bh_enable_ip+0xd6/0x140
[  558.283406][T20213]  ? __dev_queue_xmit+0x29b/0x3820
[  558.283434][T20213]  ? lock_acquire+0x115/0x350
[  558.283466][T20213]  ? __pfx_rtnl_newlink+0x10/0x10
[  558.283481][T20213]  rtnetlink_rcv_msg+0x802/0xc00
[  558.283511][T20213]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  558.283535][T20213]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  558.283558][T20213]  ? ref_tracker_free+0x689/0x830
[  558.283580][T20213]  ? __pfx_ref_tracker_free+0x10/0x10
[  558.283609][T20213]  netlink_rcv_skb+0x226/0x4a0
[  558.283633][T20213]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  558.283660][T20213]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  558.283693][T20213]  ? netlink_deliver_tap+0x2e/0x1b0
[  558.283723][T20213]  ? netlink_deliver_tap+0x2e/0x1b0
[  558.283749][T20213]  netlink_unicast+0x7bd/0x940
[  558.283777][T20213]  netlink_sendmsg+0x813/0xb40
[  558.283812][T20213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  558.283842][T20213]  ? apparmor_socket_sendmsg+0x98/0x360
[  558.283872][T20213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  558.283892][T20213]  sock_sendmsg_nosec+0x13a/0x180
[  558.283921][T20213]  ____sys_sendmsg+0x54e/0x850
[  558.283947][T20213]  ? __pfx_____sys_sendmsg+0x10/0x10
[  558.283976][T20213]  ? import_iovec+0x73/0xa0
[  558.284000][T20213]  ___sys_sendmsg+0x2a5/0x360
[  558.284017][T20213]  ? __lock_acquire+0x6df/0x2e50
[  558.284039][T20213]  ? __pfx____sys_sendmsg+0x10/0x10
[  558.284094][T20213]  ? __fget_files+0x2a/0x420
[  558.284117][T20213]  ? __fget_files+0x3a2/0x420
[  558.284148][T20213]  __x64_sys_sendmsg+0x1b1/0x290
[  558.284170][T20213]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  558.284210][T20213]  do_syscall_64+0x166/0x520
[  558.284235][T20213]  ? trace_irq_disable+0x3b/0x140
[  558.284253][T20213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.284272][T20213]  ? clear_bhb_loop+0x70/0xc0
[  558.284294][T20213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.284313][T20213] RIP: 0033:0x7f3bb3b9e159
[  558.284334][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.284350][T20213] RSP: 002b:00007f3bb1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  558.284372][T20213] RAX: ffffffffffffffda RBX: 00007f3bb3e25fa0 RCX: 00007f3bb3b9e159
[  558.284386][T20213] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  558.284399][T20213] RBP: 00007f3bb1df6090 R08: 0000000000000000 R09: 0000000000000000
[  558.284411][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  558.284423][T20213] R13: 00007f3bb3e26038 R14: 00007f3bb3e25fa0 R15: 00007ffd5a66fdf8
[  558.284453][T20213]  </TASK>
[  558.419853][T19674] veth1_vlan: entered promiscuous mode
[  558.704004][T19674] veth0_macvtap: entered promiscuous mode
[  558.766957][T19674] veth1_macvtap: entered promiscuous mode
[  558.849791][T20226] syzkaller0: entered promiscuous mode
[  558.849842][T20226] syzkaller0: entered allmulticast mode
[  558.886641][T19674] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.067741][T20238] xt_esp: unknown flags DD
[  559.068104][T20238] xt_esp: unknown flags DD
[  559.068343][T20238] xt_esp: unknown flags DD
[  559.068516][T20238] xt_esp: unknown flags DD
[  559.068674][T20238] xt_esp: unknown flags DD
[  559.068836][T20238] xt_esp: unknown flags DD
[  559.069064][T20238] xt_esp: unknown flags DD
[  559.069224][T20238] xt_esp: unknown flags DD
[  559.107695][T20238] xt_esp: unknown flags DD
[  559.113951][T20238] xt_esp: unknown flags DD
[  559.425364][T19674] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.555240][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3400'.
[  559.832542][T20262] syzkaller0: entered promiscuous mode
[  559.832611][T20262] syzkaller0: entered allmulticast mode
[  559.842767][T11617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.999483][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'.
[  560.664423][T20315] __nla_validate_parse: 1 callbacks suppressed
[  560.666209][T20315] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3405'.
[  564.468890][T11617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  564.469918][T11617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  564.517500][T11617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  564.762276][T11618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.770836][T11618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.824624][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'.
[  564.835691][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3410'.
[  564.935977][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3410'.
[  564.936037][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3410'.
[  564.979441][T11623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.979493][T11623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.093197][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'.
[  565.094225][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'.
[  565.627635][T11623] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  565.628953][T11618] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  565.628999][T11618] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  565.629032][T11618] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  565.806241][T20351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  565.820473][T20351] batman_adv: batadv0: Adding interface: gretap1
[  565.820534][T20351] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.820573][T20351] batman_adv: batadv0: Interface activated: gretap1
[  566.119425][T20371] FAULT_INJECTION: forcing a failure.
[  566.119425][T20371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  566.133570][T20371] CPU: 1 UID: 0 PID: 20371 Comm: syz.0.3419 Not tainted syzkaller #0 PREEMPT(full) 
[  566.133601][T20371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  566.133615][T20371] Call Trace:
[  566.133624][T20371]  <TASK>
[  566.133635][T20371]  dump_stack_lvl+0xe8/0x150
[  566.133673][T20371]  should_fail_ex+0x410/0x560
[  566.133711][T20371]  _copy_to_user+0x31/0xb0
[  566.133738][T20371]  do_sock_getsockopt+0x6ea/0x7e0
[  566.133770][T20371]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  566.133812][T20371]  ? __fget_files+0x3a2/0x420
[  566.133840][T20371]  ? __fget_files+0x2a/0x420
[  566.133874][T20371]  __x64_sys_getsockopt+0x1a4/0x240
[  566.133908][T20371]  do_syscall_64+0x166/0x520
[  566.133938][T20371]  ? trace_irq_disable+0x3b/0x140
[  566.133959][T20371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.133981][T20371]  ? clear_bhb_loop+0x70/0xc0
[  566.134008][T20371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.134029][T20371] RIP: 0033:0x7f5d48f9e159
[  566.134050][T20371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.134069][T20371] RSP: 002b:00007f5d49e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  566.134093][T20371] RAX: ffffffffffffffda RBX: 00007f5d49225fa0 RCX: 00007f5d48f9e159
[  566.134109][T20371] RDX: 0000000000002717 RSI: 0000200000000114 RDI: 0000000000000003
[  566.134123][T20371] RBP: 00007f5d49e86090 R08: 0000200000000000 R09: 0000000000000000
[  566.134137][T20371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.134158][T20371] R13: 00007f5d49226038 R14: 00007f5d49225fa0 R15: 00007ffd671ad868
[  566.134193][T20371]  </TASK>
[  566.431701][T20379] netlink: 'syz.4.3424': attribute type 2 has an invalid length.
[  566.522929][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3424'.
[  566.573784][T20380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3423'.
[  566.874528][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  566.874587][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'.
[  566.877150][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  566.877176][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'.
[  566.935469][T20385] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  568.012297][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  568.021818][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  568.024221][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  568.029255][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  568.029871][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  568.310213][T20406] sctp: [Deprecated]: syz.0.3430 (pid 20406) Use of struct sctp_assoc_value in delayed_ack socket option.
[  568.310213][T20406] Use struct sctp_sack_info instead
[  568.334264][T20407] sctp: [Deprecated]: syz.0.3430 (pid 20407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  568.334264][T20407] Use struct sctp_sack_info instead
[  568.393121][T20406] x_tables: duplicate underflow at hook 1
[  568.690692][T20415] syzkaller1: entered promiscuous mode
[  568.696451][T20415] syzkaller1: entered allmulticast mode
[  568.747775][T20414] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3431'.
[  568.830607][T11603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.064365][T11603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.073856][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'.
[  569.073897][T20425] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3432'.
[  569.158932][T20422] batadv_slave_0: entered promiscuous mode
[  569.287776][T20425] bridge1: entered allmulticast mode
[  569.542740][T11603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.634525][T20420] batadv_slave_0: left promiscuous mode
[  569.643622][ T5637] Bluetooth: hci1: connection err: -111
[  569.805725][T11603] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  569.806304][T11603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.883363][T20395] hsr0 speed is unknown, defaulting to 1000
[  570.140361][ T5637] Bluetooth: hci2: command tx timeout
[  570.437424][T11613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.447379][T11613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.538289][T11613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.738312][T11611] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  570.974148][T11603] bridge_slave_0: left allmulticast mode
[  570.974195][T11603] bridge_slave_0: left promiscuous mode
[  570.974435][T11603] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.088075][T20473] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  571.500912][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'.
[  571.798753][T11603] gretap0 (unregistering): left promiscuous mode
[  571.859189][T11603] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  572.059566][T11603] bond0 (unregistering): (slave geneve2): Releasing active interface
[  572.068459][T11603] geneve2 (unregistering): left allmulticast mode
[  572.219682][ T5637] Bluetooth: hci2: command tx timeout
[  572.273824][T11603] bond0 (unregistering): Released all slaves
[  572.301353][T11603] bond1 (unregistering): Released all slaves
[  572.326586][T11603] bond2 (unregistering): (slave bond3): Releasing backup interface
[  572.349134][T11603] bond2 (unregistering): Released all slaves
[  572.372233][T11603] bond3 (unregistering): Released all slaves
[  572.394394][T11603] bond4 (unregistering): Released all slaves
[  572.411037][T11603] bond5 (unregistering): Released all slaves
[  572.426105][T11603] bond6 (unregistering): Released all slaves
[  572.462883][T11603] bond7 (unregistering): Released all slaves
[  572.476027][T11603] bond8 (unregistering): Released all slaves
[  572.489722][T11603] bond9 (unregistering): Released all slaves
[  572.500914][T11603] bond10 (unregistering): Released all slaves
[  572.584350][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  572.846180][T20503] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3447'.
[  572.920842][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'.
[  573.030547][T11603] 
þ: left promiscuous mode
[  573.061501][T20513] bridge_slave_1: left allmulticast mode
[  573.061538][T20513] bridge_slave_1: left promiscuous mode
[  573.062212][T20513] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.075473][T20513] bridge_slave_0: left allmulticast mode
[  573.075502][T20513] bridge_slave_0: left promiscuous mode
[  573.075732][T20513] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.168337][T11603] tipc: Disabling bearer <udp:syz2>
[  573.177273][T11603] tipc: Disabling bearer <udp:s>
[  573.185313][T11603] tipc: Disabling bearer <eth:syzkaller0>
[  573.193286][T11603] tipc: Left network mode
[  573.254969][T20395] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.274643][T20395] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.274822][T20395] bridge_slave_0: entered allmulticast mode
[  573.284660][T20395] bridge_slave_0: entered promiscuous mode
[  573.296196][T20395] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.296426][T20395] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.296590][T20395] bridge_slave_1: entered allmulticast mode
[  573.302591][T20395] bridge_slave_1: entered promiscuous mode
[  573.446610][T11603] IPVS: stopping master sync thread 18240 ...
[  573.451649][T11603] IPVS: stopping backup sync thread 11187 ...
[  573.480857][T20395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.504747][T20395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.545049][T20532] openvswitch: netlink: VLAN attribute unexpected.
[  573.700971][T20395] team0: Port device team_slave_0 added
[  573.710934][T20395] team0: Port device team_slave_1 added
[  574.297461][ T5637] Bluetooth: hci2: command tx timeout
[  574.676222][T20395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.676271][T20395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.678674][T20395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.683803][T20395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.683828][T20395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.683871][T20395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.751028][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[  575.064557][T20581] netlink: 'syz.0.3460': attribute type 1 has an invalid length.
[  575.072927][T20581] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3460'.
[  575.076787][T20395] hsr_slave_0: entered promiscuous mode
[  575.080600][T20395] hsr_slave_1: entered promiscuous mode
[  575.110836][T20583] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  575.112990][T20583] netlink: 'syz.3.3459': attribute type 10 has an invalid length.
[  575.113015][T20583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3459'.
[  575.326250][T20584] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  575.342764][T20584] bond1 (unregistering): Released all slaves
[  575.432783][T20583] team0: Device wg2 is of different type
[  575.819546][T20613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'.
[  576.038952][   T32] audit: type=1800 audit(1788806545.968:12): pid=20621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3469" name="blkio.bfq.time_recursive" dev="tmpfs" ino=573 res=0 errno=0
[  576.379065][ T5637] Bluetooth: hci2: command tx timeout
[  576.703744][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3
[  576.910204][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  576.910261][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  576.910276][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  576.910290][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  576.910302][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  577.313976][T20395] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.945767][T20395] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.054025][T20669] netlink: 'syz.4.3479': attribute type 1 has an invalid length.
[  578.106385][T20676] __nla_validate_parse: 12 callbacks suppressed
[  578.114188][T20676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'.
[  578.141636][T20669] 8021q: adding VLAN 0 to HW filter on device bond1
[  578.236871][T20395] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.342538][T20669] batman_adv: batadv0: Adding interface: vlan1
[  578.350057][T20669] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active
[  578.608143][T20395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.679195][T11603] hsr_slave_0: left promiscuous mode
[  580.704166][T11603] veth1_macvtap: left promiscuous mode
[  580.711582][T11603] veth0_macvtap: left promiscuous mode
[  580.720073][T11603] veth1_vlan: left promiscuous mode
[  580.725792][T11603] veth0_vlan: left promiscuous mode
[  581.702682][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3495'.
[  582.155070][T20395] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  582.205862][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  582.309964][T20395] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  582.355788][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  582.366356][T20395] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  582.416719][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.434732][T20395] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  582.485045][T20395] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  582.692002][T11603] IPVS: stop unused estimator thread 0...
[  582.946427][T20395] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.030532][T20395] 8021q: adding VLAN 0 to HW filter on device team0
[  583.058820][T11617] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.058979][T11617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.125308][T11617] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.125464][T11617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.362263][T20837] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3507'.
[  583.371779][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3507'.
[  583.382597][T20837] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3507'.
[  583.392204][T20837] netlink: 'syz.4.3507': attribute type 2 has an invalid length.
[  583.400775][T20837] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3507'.
[  583.896105][T20855] netlink: 'syz.3.3512': attribute type 15 has an invalid length.
[  583.896174][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3512'.
[  584.028804][T20858] lo: entered promiscuous mode
[  584.029134][T20858] tunl0: entered promiscuous mode
[  584.034603][T20858] gre0: entered promiscuous mode
[  584.100883][T20858] gretap0: entered promiscuous mode
[  584.114956][T20858] erspan0: entered promiscuous mode
[  584.132745][T20858] ip_vti0: entered promiscuous mode
[  584.155436][T20858] ip6_vti0: entered promiscuous mode
[  584.168726][T20858] sit0: entered promiscuous mode
[  584.183162][T20858] ip6tnl0: entered promiscuous mode
[  584.192112][T20858] ip6gre0: entered promiscuous mode
[  584.243373][T20858] syz_tun: entered promiscuous mode
[  584.289572][T20858] ip6gretap0: entered promiscuous mode
[  584.291761][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3515'.
[  584.308681][T20858] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.309401][T20858] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.328960][T20858] bridge0: entered promiscuous mode
[  584.338291][T20858] vcan0: entered promiscuous mode
[  584.351282][T20858] bond0: entered promiscuous mode
[  584.356618][T20858] bond_slave_0: entered promiscuous mode
[  584.362849][T20858] bond_slave_1: entered promiscuous mode
[  584.376060][T20858] team0: entered promiscuous mode
[  584.384290][T20858] team_slave_0: entered promiscuous mode
[  584.390529][T20858] team_slave_1: entered promiscuous mode
[  584.403280][T20858] dummy0: entered promiscuous mode
[  584.435299][T20858] nlmon0: entered promiscuous mode
[  584.441439][T20858] batadv0: entered promiscuous mode
[  584.462684][T20858] veth0: entered promiscuous mode
[  584.472632][T20858] veth1: entered promiscuous mode
[  584.486988][T20858] wg0: entered promiscuous mode
[  584.508562][T20858] wg1: entered promiscuous mode
[  584.517175][T20858] wg2: entered promiscuous mode
[  584.535635][T20858] veth0_to_bridge: entered promiscuous mode
[  584.551118][T20858] veth1_to_bridge: entered promiscuous mode
[  584.565725][T20858] veth0_to_bond: entered promiscuous mode
[  584.576991][T20858] veth1_to_bond: entered promiscuous mode
[  584.589085][T20858] veth0_to_team: entered promiscuous mode
[  584.602081][T20858] veth1_to_team: entered promiscuous mode
[  584.611228][T20877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3517'.
[  584.628329][T20858] veth0_to_batadv: entered promiscuous mode
[  584.643058][T20858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.651704][T20858] batadv_slave_0: entered promiscuous mode
[  584.664094][T20858] veth1_to_batadv: entered promiscuous mode
[  584.676879][T20858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.684771][T20858] batadv_slave_1: entered promiscuous mode
[  584.711050][T20858] xfrm0: entered promiscuous mode
[  584.719568][T20858] veth0_to_hsr: entered promiscuous mode
[  584.733614][T20858] veth1_to_hsr: entered promiscuous mode
[  584.746164][T20858] hsr0: entered promiscuous mode
[  584.754676][T20858] veth1_virt_wifi: entered promiscuous mode
[  584.765128][T20858] veth0_virt_wifi: entered promiscuous mode
[  584.776441][T20858] virt_wifi0: entered promiscuous mode
[  584.792582][T20858] vlan0: entered promiscuous mode
[  584.801131][T20858] vlan1: entered promiscuous mode
[  584.812787][T20858] macvlan0: entered promiscuous mode
[  584.828884][T20858] macvlan1: entered promiscuous mode
[  584.841803][T20858] ipvlan0: entered promiscuous mode
[  584.842178][T20858] ipvlan1: entered promiscuous mode
[  584.857044][T20858] macvtap0: entered promiscuous mode
[  584.869609][T20858] macsec0: entered promiscuous mode
[  584.872896][T20858] geneve0: entered promiscuous mode
[  584.876455][T20858] geneve1: entered promiscuous mode
[  584.890120][T20858] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  584.899185][T20858] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  584.913289][T20858] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  584.922953][T20858] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  584.925063][T20858] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode
[  584.925240][T20858] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode
[  584.925540][T20858] ip6gretap1: entered promiscuous mode
[  584.940104][T20858] syztnl0: entered promiscuous mode
[  584.940624][T20858] vlan2: entered promiscuous mode
[  584.943315][T20858] mac80211_hwsim hwsim50 wlan2: entered promiscuous mode
[  584.943860][T20858] gre1: entered promiscuous mode
[  584.948550][T20858] vlan3: entered promiscuous mode
[  584.959820][T20858] batman_adv: batadv0: Interface deactivated: gretap1
[  584.993342][T20858] gretap1: entered promiscuous mode
[  584.997091][T20858] vxlan0: entered promiscuous mode
[  585.032570][T11618] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.032650][T11618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.033320][T11617] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.033347][T11617] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.033407][T11617] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.033431][T11617] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.033465][T11617] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.033488][T11617] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.833073][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'.
[  585.833145][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'.
[  586.127146][T20395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.251313][T20395] veth0_vlan: entered promiscuous mode
[  586.297231][T20395] veth1_vlan: entered promiscuous mode
[  586.632740][T20952] netlink: 'syz.4.3533': attribute type 10 has an invalid length.
[  586.634666][T20954] netlink: 'syz.1.3534': attribute type 27 has an invalid length.
[  586.634689][T20954] netlink: 'syz.1.3534': attribute type 3 has an invalid length.
[  586.822475][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'.
[  587.109036][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  587.114530][T20952] team0: Port device netdevsim1 added
[  587.237062][T20395] veth0_macvtap: entered promiscuous mode
[  587.263495][T20395] veth1_macvtap: entered promiscuous mode
[  587.554989][T20973] syzkaller0: entered promiscuous mode
[  587.562502][T20973] syzkaller0: entered allmulticast mode
[  587.598871][T20395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.724712][T20395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.758940][T11611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.759823][T11617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.759864][T11617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.759897][T11617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.994965][T20994] netlink: 'syz.1.3544': attribute type 1 has an invalid length.
[  587.995033][T20994] netlink: 'syz.1.3544': attribute type 1 has an invalid length.
[  588.308139][T11611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.319341][T11611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.455833][T11611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.455889][T11611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.946946][T21031] __nla_validate_parse: 2 callbacks suppressed
[  588.954280][T21031] netlink: 416 bytes leftover after parsing attributes in process `syz.0.3554'.
[  589.196998][T21041] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3558'.
[  589.295496][T21041] netlink: 'syz.0.3558': attribute type 4 has an invalid length.
[  590.505052][T21103] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  590.915297][T21121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3581'.
[  591.049809][T21128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'.
[  591.156829][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'.
[  591.156870][T21125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'.
[  591.158020][T21125] netlink: 'syz.1.3584': attribute type 14 has an invalid length.
[  591.158040][T21125] netlink: 'syz.1.3584': attribute type 13 has an invalid length.
[  591.317109][T21138] x_tables: duplicate underflow at hook 2
[  591.363268][T21140] netlink: 'syz.1.3588': attribute type 1 has an invalid length.
[  591.423152][T21146] tipc: Started in network mode
[  591.429807][T21146] tipc: Node identity 7f000001, cluster identity 4711
[  591.437538][T21146] tipc: New replicast peer: 127.0.0.2
[  591.445557][T21146] tipc: Enabled bearer <udp:syz0>, priority 10
[  592.459151][T21181] netlink: 'syz.0.3595': attribute type 10 has an invalid length.
[  592.518311][T21182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3595'.
[  592.518937][T21147] bond1: (slave veth3): Enslaving as an active interface with a down link
[  592.584308][T21182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  592.624781][T21182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  592.655238][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3596'.
[  592.656910][T21182] bond0 (unregistering): Released all slaves
[  592.668121][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3596'.
[  592.697002][T21140] bond1: (slave veth5): Enslaving as an active interface with a down link
[  592.749868][T21152] veth7: entered allmulticast mode
[  592.782218][T20265] tipc: Node number set to 2130706433
[  592.807163][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3596'.
[  593.548393][T21213] syzkaller1: entered promiscuous mode
[  593.554153][T21213] syzkaller1: entered allmulticast mode
[  594.472642][T21256] __nla_validate_parse: 4 callbacks suppressed
[  594.472696][T21256] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3618'.
[  594.631759][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'.
[  595.277029][T21265] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  595.624925][T21293] netlink: 'syz.0.3627': attribute type 2 has an invalid length.
[  595.642130][T21296] netlink: 'syz.0.3627': attribute type 2 has an invalid length.
[  595.714549][T21303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3629'.
[  595.728816][T21303] netlink: 'syz.1.3629': attribute type 1 has an invalid length.
[  595.985402][T21312] syzkaller0: entered promiscuous mode
[  595.985448][T21312] syzkaller0: entered allmulticast mode
[  597.443621][ T5637] Bluetooth: hci1: SCO packet too small
[  597.584061][T21341] netlink: 'syz.3.3640': attribute type 1 has an invalid length.
[  600.951361][T21341] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  601.372215][T21368] netlink: 'syz.3.3647': attribute type 10 has an invalid length.
[  601.393578][T21368] syz_tun: entered promiscuous mode
[  601.611300][T21378] syzkaller0: entered promiscuous mode
[  601.611358][T21378] syzkaller0: entered allmulticast mode
[  601.620866][T21378] netlink: 'syz.3.3651': attribute type 13 has an invalid length.
[  601.620902][T21378] netlink: 'syz.3.3651': attribute type 17 has an invalid length.
[  601.662698][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  601.711324][T21378] syz_tun: left promiscuous mode
[  601.992530][T21378] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  602.440172][T21404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3659'.
[  602.633932][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3661'.
[  602.741858][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'.
[  602.776389][T21421] û: renamed from bridge_slave_0 (while UP)
[  603.836079][T21456] syzkaller0: entered promiscuous mode
[  603.836138][T21456] syzkaller0: entered allmulticast mode
[  604.148851][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'.
[  604.226188][T21481] ip_tables: iptables: counters copy to user failed while replacing table
[  605.025678][T21477] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  605.164074][T21496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3679'.
[  605.378849][T21507] netlink: 'syz.2.3682': attribute type 18 has an invalid length.
[  605.388503][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3682'.
[  605.412702][T21507] netlink: 'syz.2.3682': attribute type 18 has an invalid length.
[  605.412758][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3682'.
[  605.438327][T11620] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  605.438423][T11620] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  605.438481][T11620] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  605.457384][T21094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  605.750284][T21517] netlink: 'syz.2.3686': attribute type 3 has an invalid length.
[  605.919764][T21528] bond2: Removing last arp target with arp_interval on
[  606.338013][T21535] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3690'.
[  606.486902][T21540] netlink: 'syz.0.3692': attribute type 1 has an invalid length.
[  606.578749][T21540] 8021q: adding VLAN 0 to HW filter on device bond0
[  606.594516][T21542] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  606.643133][T21540] bridge1: entered promiscuous mode
[  606.652037][T21540] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  606.746239][T21551] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3693'.
[  606.746289][T21551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3693'.
[  606.809910][T21551] syzkaller0: entered promiscuous mode
[  606.809956][T21551] syzkaller0: entered allmulticast mode
[  608.654874][T21515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.192109][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3697'.
[  609.192170][T21568] netlink: 'syz.3.3697': attribute type 2 has an invalid length.
[  609.192203][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'.
[  609.432501][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3698'.
[  612.206787][T21563] ip6gretap2: entered allmulticast mode
[  612.238815][T21563] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  612.239608][T21563] batman_adv: batadv0: Adding interface: ip6gretap2
[  612.239648][T21563] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  612.239684][T21563] batman_adv: batadv0: Interface activated: ip6gretap2
[  612.740950][T21604] openvswitch: netlink: Message has 8 unknown bytes.
[  612.741017][T21604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  613.278227][T21627] ip_tables: iptables: counters copy to user failed while replacing table
[  614.006523][T21647] hsr0 speed is unknown, defaulting to 1000
[  614.152345][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'.
[  614.422787][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'.
[  614.508184][T21666] syzkaller0: entered promiscuous mode
[  614.515272][T21666] syzkaller0: entered allmulticast mode
[  614.569314][T21666] sctp: [Deprecated]: syz.1.3722 (pid 21666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  614.569314][T21666] Use struct sctp_sack_info instead
[  614.591946][T21669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3721'.
[  616.065901][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'.
[  616.129639][T21709] xt_ecn: cannot match TCP bits for non-tcp packets
[  616.141396][T21709] netlink: 'syz.4.3734': attribute type 2 has an invalid length.
[  616.180470][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'.
[  616.190304][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3735'.
[  616.344441][T21710] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3735'.
[  616.352095][T21710] netlink: 'syz.3.3735': attribute type 1 has an invalid length.
[  616.586058][T21715] xt_CT: No such helper "netbios-ns"
[  616.678710][T21725] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  616.678961][T21727] netlink: 'syz.1.3736': attribute type 11 has an invalid length.
[  617.003805][ T5276] veth0_vlan: left promiscuous mode
[  617.053700][T20287] veth0_vlan: entered promiscuous mode
[  617.288866][T21747] syzkaller1: entered promiscuous mode
[  617.288928][T21747] syzkaller1: entered allmulticast mode
[  618.258576][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3750'.
[  618.954625][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'.
[  619.361378][T21823] syzkaller0: entered promiscuous mode
[  619.370875][T21823] syzkaller0: entered allmulticast mode
[  619.589926][T21841] netlink: 'syz.0.3769': attribute type 1 has an invalid length.
[  622.064079][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  624.040307][T21845] 
: renamed from dummy0
[  624.328586][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3775'.
[  624.583154][T21877] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3779'.
[  624.606561][T21887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3780'.
[  624.640358][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'.
[  624.788218][T21896] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3781'.
[  624.817647][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3781'.
[  624.828610][T21896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'.
[  624.939356][T21899] syzkaller0: entered promiscuous mode
[  624.946525][T21899] syzkaller0: entered allmulticast mode
[  624.993718][T21899] netlink: 'syz.3.3783': attribute type 13 has an invalid length.
[  625.004401][T21899] netlink: 'syz.3.3783': attribute type 17 has an invalid length.
[  625.115939][T21899] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  625.841956][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'.
[  625.914626][T21933] syzkaller0: entered promiscuous mode
[  625.914800][T21933] syzkaller0: entered allmulticast mode
[  626.044790][T21939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3794'.
[  628.562059][T21916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  629.021617][T21979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3803'.
[  629.337588][T22004] tipc: Started in network mode
[  629.337645][T22004] tipc: Node identity ac14140f, cluster identity 4711
[  629.337964][T22004] tipc: New replicast peer: 255.255.255.255
[  629.339807][T22004] tipc: Enabled bearer <udp:syz2>, priority 10
[  629.339979][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.340129][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.344903][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.345056][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.345206][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.345342][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.345491][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.345710][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.349465][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.352142][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.352312][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.352455][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.352605][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.354265][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.354419][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.354559][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.354697][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.354838][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.360689][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.361037][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.361247][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.361404][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.361552][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.366710][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.366878][T22004] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  629.519280][T22001] netlink: 'syz.3.3808': attribute type 1 has an invalid length.
[  629.519312][T22001] __nla_validate_parse: 5 callbacks suppressed
[  629.519325][T22001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3808'.
[  629.519547][T22001] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.519927][T22001] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.520055][T22001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.945444][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'.
[  629.973448][T22027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3812'.
[  630.003162][T22025] x_tables: unsorted entry at hook 2
[  630.017641][T22028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3811'.
[  630.154220][T21095] IPVS: starting estimator thread 0...
[  630.249481][T22032] IPVS: using max 29 ests per chain, 69600 per kthread
[  630.454934][T22042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3815'.
[  630.454999][T22042] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3815'.
[  630.455479][T22042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3815'.
[  630.487758][T20266] tipc: Node number set to 2886997007
[  631.088006][T22071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3824'.
[  631.088061][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  631.301900][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3824'.
[  631.770825][T21895] udevd[21895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  631.993058][T22112] xt_TPROXY: Can be used only with -p tcp or -p udp
[  632.028018][T22115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  632.453823][T22115] hsr0 speed is unknown, defaulting to 1000
[  633.490434][T22197] openvswitch: netlink: Actions may not be safe on all matching packets
[  633.588850][T22197] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  633.595725][T22197] 0ªî{X¹¦: entered allmulticast mode
[  633.596130][T22197] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  633.605313][T22197] syzkaller1: entered promiscuous mode
[  633.605337][T22197] syzkaller1: entered allmulticast mode
[  634.080371][T22216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.326218][T22225] netlink: NAT attribute has 4 unknown bytes
[  634.336307][T22225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.378314][T22225] pim6reg: entered allmulticast mode
[  634.383036][T22223] pim6reg: left allmulticast mode
[  634.415106][T22233] sctp: [Deprecated]: syz.1.3859 (pid 22233) Use of int in max_burst socket option.
[  634.415106][T22233] Use struct sctp_assoc_value instead
[  635.195984][T22262] __nla_validate_parse: 4 callbacks suppressed
[  635.204644][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'.
[  635.265369][T22265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.275849][T22259] tipc: Disabling bearer <eth:syzkaller0>
[  635.540700][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3871'.
[  635.716004][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3877'.
[  635.890195][ T5637] block nbd2: Receive control failed (result -1)
[  635.899449][T22300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  635.899502][T22300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  635.899660][T22299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  635.899690][T22299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  635.952675][T22302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  635.952745][T22302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  636.900633][T22347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3890'.
[  636.916193][T22347] veth1_macvtap: left promiscuous mode
[  638.228658][T22386] Cannot find map_set index 2 as target
[  638.719674][T22418] sctp: [Deprecated]: syz.4.3903 (pid 22418) Use of struct sctp_assoc_value in delayed_ack socket option.
[  638.719674][T22418] Use struct sctp_sack_info instead
[  639.441282][T22441] netlink: 'syz.4.3906': attribute type 4 has an invalid length.
[  639.686112][T22434] netlink: 'syz.1.3905': attribute type 10 has an invalid length.
[  640.293055][T22465] macsec0: entered promiscuous mode
[  640.297882][T22465] __nla_validate_parse: 3 callbacks suppressed
[  640.297905][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3912'.
[  640.349883][T22465] macsec0 (unregistering): left promiscuous mode
[  640.640466][T22480] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3916'.
[  640.669814][T22480] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3916'.
[  640.718788][T22488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3915'.
[  641.267820][T22504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'.
[  641.544526][T22510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3922'.
[  641.633424][T22510] hsr_slave_1 (unregistering): left promiscuous mode
[  641.651937][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'.
[  641.652341][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'.
[  641.652421][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'.
[  641.652495][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3923'.
[  642.063880][T22544] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  642.506398][T22529] netlink: 'syz.3.3925': attribute type 10 has an invalid length.
[  642.563546][ T5637] Bluetooth: hci0: command 0x0406 tx timeout
[  643.069244][T22578] syzkaller1: entered promiscuous mode
[  643.076333][T22578] syzkaller1: entered allmulticast mode
[  643.245864][T22594] IPVS: set_ctl: invalid protocol: 58 172.20.20.30:20002
[  643.306623][T22598] netlink: 'syz.1.3945': attribute type 11 has an invalid length.
[  643.310015][T22598] netlink: 'syz.1.3945': attribute type 11 has an invalid length.
[  644.175181][T22645] bridge1: entered promiscuous mode
[  644.234200][T22651] bridge2: entered promiscuous mode
[  644.558816][T22662] syzkaller1: entered promiscuous mode
[  644.558866][T22662] syzkaller1: entered allmulticast mode
[  644.562830][T22662] SET target dimension over the limit!
[  644.652352][T22640] netlink: 'syz.0.3958': attribute type 10 has an invalid length.
[  644.676013][T22663] syzkaller0: entered promiscuous mode
[  644.676060][T22663] syzkaller0: entered allmulticast mode
[  645.349754][T22701] xt_l2tp: invalid flags combination: 8
[  645.379555][T22705] __nla_validate_parse: 66 callbacks suppressed
[  645.386818][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3977'.
[  645.402078][T22696] bond2 (unregistering): Released all slaves
[  645.412127][T22684] xt_hashlimit: size too large, truncated to 1048576
[  645.516293][T20287] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3
[  645.560846][T20287] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22
[  645.865388][T22716] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  645.878867][T22716] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  645.890548][T22716] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  645.924664][T22720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3981'.
[  646.110673][T22724] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  646.131493][T22724] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  646.339822][T22741] netlink: 'syz.0.3986': attribute type 1 has an invalid length.
[  646.425021][T22741] 8021q: adding VLAN 0 to HW filter on device bond1
[  646.514573][T22745] tipc: Invalid UDP bearer configuration
[  646.514655][T22745] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  646.645545][T22741] bond1: (slave geneve3): making interface the new active one
[  646.678137][T22741] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  646.689097][T21093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  646.729329][T11617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.730983][T11617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.731020][T11617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.912781][T22757] openvswitch: netlink: Duplicate or invalid key (type 0).
[  646.924271][T22757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.108075][T22766] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  647.108874][T22757] : option downdelay: invalid value (18446744073709547007)
[  647.108897][T22757] : option downdelay: allowed values 0 - 2147483647
[  647.173142][T22757]  (unregistering): Released all slaves
[  647.239227][T22761] bridge0: port 3(erspan0) entered blocking state
[  647.239427][T22761] bridge0: port 3(erspan0) entered disabled state
[  647.239595][T22761] erspan0: entered allmulticast mode
[  647.240790][T22772] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3995'.
[  647.241688][T22761] erspan0: entered promiscuous mode
[  647.242327][T22761] bridge0: port 3(erspan0) entered blocking state
[  647.242419][T22761] bridge0: port 3(erspan0) entered forwarding state
[  647.310756][T22775] tap0: tun_chr_ioctl cmd 1074025672
[  647.310809][T22775] tap0: ignored: set checksum disabled
[  647.575901][T22781] syzkaller0: entered promiscuous mode
[  647.575960][T22781] syzkaller0: entered allmulticast mode
[  647.965023][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'.
[  647.968638][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'.
[  647.971234][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'.
[  648.190776][T22818] netlink: 'syz.2.4007': attribute type 1 has an invalid length.
[  648.271786][T22821] veth1_macvtap: left promiscuous mode
[  648.277672][T22821] macsec0: entered allmulticast mode
[  648.294739][T22821] veth1_macvtap: entered promiscuous mode
[  648.294800][T22821] veth1_macvtap: entered allmulticast mode
[  648.294941][T22821] macsec0: left allmulticast mode
[  648.294956][T22821] veth1_macvtap: left allmulticast mode
[  648.670840][T22836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4011'.
[  648.744002][T22829] netlink: 'syz.2.4011': attribute type 4 has an invalid length.
[  648.821994][T22848] syzkaller0: entered promiscuous mode
[  648.828052][T22848] syzkaller0: entered allmulticast mode
[  648.885091][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4012'.
[  649.080321][T22859] netlink: 'syz.4.4016': attribute type 1 has an invalid length.
[  649.336938][T22871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'.
[  649.365142][T22859] bond3: entered promiscuous mode
[  649.369342][T22859] 8021q: adding VLAN 0 to HW filter on device bond3
[  649.458156][T22864] macvtap1: entered allmulticast mode
[  649.525733][T22867] bond3: (slave bridge2): making interface the new active one
[  649.535524][T22867] bridge2: entered promiscuous mode
[  649.545562][T22867] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  652.412307][T22877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  652.723221][T22941] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  653.166406][T22976] tipc: Started in network mode
[  653.166478][T22976] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  653.166975][T22976] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  653.200774][T22977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4045'.
[  653.265956][T22979] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  653.285839][T22981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4047'.
[  654.304180][T23025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4059'.
[  654.414539][T23017] syzkaller0: entered promiscuous mode
[  654.420415][T23017] syzkaller0: entered allmulticast mode
[  654.431080][T23026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4057'.
[  655.016771][T23036] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.020052][T23036] bridge0: port 1(û) entered disabled state
[  655.123282][T23038] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4066'.
[  655.231388][T23049] netlink: 'syz.0.4068': attribute type 2 has an invalid length.
[  655.231466][T23049] netlink: 'syz.0.4068': attribute type 2 has an invalid length.
[  655.314075][T23055] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  655.329341][T23054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  655.580415][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'.
[  655.699870][T23068] bridge1: left promiscuous mode
[  655.705009][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057bce400: rx timeout, send abort
[  655.747761][T21084] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.747890][T21084] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.747959][T21084] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.748026][T21084] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.949916][T23082] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  656.205090][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057bce400: abort rx timeout. Force session deactivation
[  656.616523][T23091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'.
[  657.215367][T23105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4084'.
[  661.694455][T23121] netlink: 'syz.3.4087': attribute type 12 has an invalid length.
[  661.944465][T23140] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4093'.
[  661.964663][T23128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'.
[  662.967461][T23160] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  663.017936][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  663.070597][T23162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  663.228998][T23172] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  663.573937][T23194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4106'.
[  663.573999][T23194] nbd: must specify at least one socket
[  663.597052][T23196] xt_bpf: check failed: parse error
[  663.601010][T23200] xt_bpf: check failed: parse error
[  663.651527][T23196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.676422][T23200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.921861][T23215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4110'.
[  664.494347][T23236] netlink: 'syz.1.4114': attribute type 1 has an invalid length.
[  664.659264][T23236] 8021q: adding VLAN 0 to HW filter on device bond2
[  664.668973][T23246] dummy0: left promiscuous mode
[  664.735186][T23252] netlink: 'syz.2.4115': attribute type 49 has an invalid length.
[  664.770995][T23246] bond2: (slave dummy0): making interface the new active one
[  664.797903][T23246] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  664.850074][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880531f1c00: rx timeout, send abort
[  665.062465][T23252] ip6gretap0: entered promiscuous mode
[  665.062526][T23252] ip6gretap0: entered allmulticast mode
[  665.330182][T23269] netlink: 'syz.0.4122': attribute type 32 has an invalid length.
[  665.350159][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880531f1c00: abort rx timeout. Force session deactivation
[  665.354132][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880531f2400: rx timeout, send abort
[  665.379613][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880531f2400: connection exists (fe ff). last cmd: 20
[  665.447878][T23272] netlink: 'syz.0.4122': attribute type 1 has an invalid length.
[  665.627118][    C1] vcan0: j1939_tp_rxtimer: 0xffff888068607400: rx timeout, send abort
[  666.127319][    C1] vcan0: j1939_tp_rxtimer: 0xffff888068607400: abort rx timeout. Force session deactivation
[  666.396679][    C1] vcan0: j1939_tp_rxtimer: 0xffff888068605c00: rx timeout, send abort
[  666.896778][    C1] vcan0: j1939_tp_rxtimer: 0xffff888068605c00: abort rx timeout. Force session deactivation
[  666.897044][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807c795000: rx timeout, send abort
[  666.919359][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88807c795000: connection exists (fe ff). last cmd: 20
[  667.136871][T23327] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.4136'.
[  667.146916][T23327] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.4136'.
[  667.160588][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032801400: rx timeout, send abort
[  667.660713][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032801400: abort rx timeout. Force session deactivation
[  667.921990][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800800: rx timeout, send abort
[  668.141811][T23347] bridge0: port 1(wlan1) entered blocking state
[  668.142223][T23347] bridge0: port 1(wlan1) entered disabled state
[  668.142413][T23347] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode
[  668.144733][T23347] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode
[  668.235651][T23351] nbd1: detected capacity change from 0 to 63
[  668.256303][T23353] block nbd1: NBD_DISCONNECT
[  668.268066][ T1876] 
[  668.270446][ T1876] ======================================================
[  668.277505][ T1876] WARNING: possible circular locking dependency detected
[  668.284618][ T1876] syzkaller #0 Not tainted
[  668.289045][ T1876] ------------------------------------------------------
[  668.296123][ T1876] kworker/1:1H/1876 is trying to acquire lock:
[  668.302360][ T1876] ffff888057627668 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0
[  668.311442][ T1876] 
[  668.311442][ T1876] but task is already holding lock:
[  668.318809][ T1876] ffff8880423b7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  668.327264][ T1876] 
[  668.327264][ T1876] which lock already depends on the new lock.
[  668.327264][ T1876] 
[  668.338035][ T1876] 
[  668.338035][ T1876] the existing dependency chain (in reverse order) is:
[  668.347152][ T1876] 
[  668.347152][ T1876] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  668.354488][ T1876]        __mutex_lock+0x19d/0x1550
[  668.359758][ T1876]        nbd_queue_rq+0xc1/0xff0
[  668.364880][ T1876]        blk_mq_dispatch_rq_list+0x499/0x1990
[  668.371208][ T1876]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  668.378092][ T1876]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  668.384598][ T1876]        blk_mq_run_work_fn+0x16c/0x300
[  668.390152][ T1876]        process_scheduled_works+0xc3d/0x1630
[  668.396232][ T1876]        worker_thread+0xa47/0xfb0
[  668.401433][ T1876]        kthread+0x38b/0x480
[  668.406035][ T1876]        ret_from_fork+0x514/0xb70
[  668.411153][ T1876]        ret_from_fork_asm+0x1a/0x30
[  668.416537][ T1876] 
[  668.416537][ T1876] -> #5 (set->srcu){.+.+}-{0:0}:
[  668.423839][ T1876]        __synchronize_srcu+0xc9/0x2f0
[  668.429300][ T1876]        elevator_switch+0x1e8/0x7b0
[  668.434666][ T1876]        elevator_change+0x2fa/0x480
[  668.439997][ T1876]        elevator_set_default+0x375/0x440
[  668.445725][ T1876]        blk_register_queue+0x3f3/0x4e0
[  668.451424][ T1876]        __add_disk+0x6cb/0xe30
[  668.456619][ T1876]        add_disk_fwnode+0x100/0x3a0
[  668.462032][ T1876]        nbd_dev_add+0x733/0xb60
[  668.467068][ T1876]        nbd_init+0x168/0x1f0
[  668.472263][ T1876]        do_one_initcall+0x250/0x870
[  668.478195][ T1876]        do_initcall_level+0x10a/0x1a0
[  668.484051][ T1876]        do_initcalls+0x59/0xa0
[  668.489251][ T1876]        kernel_init_freeable+0x29d/0x3e0
[  668.495234][ T1876]        kernel_init+0x22/0x1d0
[  668.500180][ T1876]        ret_from_fork+0x514/0xb70
[  668.505297][ T1876]        ret_from_fork_asm+0x1a/0x30
[  668.510680][ T1876] 
[  668.510680][ T1876] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  668.518953][ T1876]        __mutex_lock+0x19d/0x1550
[  668.524110][ T1876]        elevator_change+0x1af/0x480
[  668.529603][ T1876]        elevator_set_none+0xb5/0x140
[  668.534988][ T1876]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  668.541322][ T1876]        nbd_start_device+0x189/0xb30
[  668.546703][ T1876]        nbd_genl_connect+0x167d/0x1cd0
[  668.552259][ T1876]        genl_family_rcv_msg_doit+0x233/0x340
[  668.558426][ T1876]        genl_rcv_msg+0x614/0x7a0
[  668.563541][ T1876]        netlink_rcv_skb+0x226/0x4a0
[  668.568826][ T1876]        genl_rcv+0x28/0x40
[  668.573336][ T1876]        netlink_unicast+0x7bd/0x940
[  668.578636][ T1876]        netlink_sendmsg+0x813/0xb40
[  668.584024][ T1876]        sock_sendmsg_nosec+0x13a/0x180
[  668.589580][ T1876]        ____sys_sendmsg+0x54e/0x850
[  668.595338][ T1876]        ___sys_sendmsg+0x2a5/0x360
[  668.600741][ T1876]        __x64_sys_sendmsg+0x1b1/0x290
[  668.606218][ T1876]        do_syscall_64+0x166/0x520
[  668.611346][ T1876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.618156][ T1876] 
[  668.618156][ T1876] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  668.627429][ T1876]        blk_alloc_queue+0x544/0x690
[  668.632739][ T1876]        __blk_mq_alloc_disk+0x194/0x390
[  668.638548][ T1876]        nbd_dev_add+0x494/0xb60
[  668.643505][ T1876]        nbd_init+0x168/0x1f0
[  668.648242][ T1876]        do_one_initcall+0x250/0x870
[  668.653534][ T1876]        do_initcall_level+0x10a/0x1a0
[  668.659388][ T1876]        do_initcalls+0x59/0xa0
[  668.664416][ T1876]        kernel_init_freeable+0x29d/0x3e0
[  668.670333][ T1876]        kernel_init+0x22/0x1d0
[  668.675295][ T1876]        ret_from_fork+0x514/0xb70
[  668.680409][ T1876]        ret_from_fork_asm+0x1a/0x30
[  668.685706][ T1876] 
[  668.685706][ T1876] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  668.692919][ T1876]        fs_reclaim_acquire+0x71/0x100
[  668.698397][ T1876]        __kmalloc_noprof+0xbc/0x720
[  668.703697][ T1876]        tls_sw_sendmsg+0x59b/0x2b50
[  668.709094][ T1876]        sock_sendmsg_nosec+0x90/0x180
[  668.714690][ T1876]        sock_sendmsg+0x1ca/0x2d0
[  668.719811][ T1876]        splice_to_socket+0xb5e/0x12a0
[  668.725282][ T1876]        direct_splice_actor+0x101/0x160
[  668.731017][ T1876]        splice_direct_to_actor+0x57b/0xcb0
[  668.736915][ T1876]        do_splice_direct+0x195/0x290
[  668.742516][ T1876]        do_sendfile+0x52e/0x7c0
[  668.748862][ T1876]        __se_sys_sendfile64+0x144/0x1a0
[  668.755171][ T1876]        do_syscall_64+0x166/0x520
[  668.760428][ T1876]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.766964][ T1876] 
[  668.766964][ T1876] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  668.775608][ T1876]        lock_sock_nested+0x41/0x100
[  668.781198][ T1876]        inet_shutdown+0x6a/0x390
[  668.786674][ T1876]        nbd_mark_nsock_dead+0x2cb/0x550
[  668.792510][ T1876]        recv_work+0x1cee/0x1e10
[  668.797640][ T1876]        process_scheduled_works+0xc3d/0x1630
[  668.803807][ T1876]        worker_thread+0xa47/0xfb0
[  668.809013][ T1876]        kthread+0x38b/0x480
[  668.813609][ T1876]        ret_from_fork+0x514/0xb70
[  668.818727][ T1876]        ret_from_fork_asm+0x1a/0x30
[  668.824020][ T1876] 
[  668.824020][ T1876] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  668.831861][ T1876]        __lock_acquire+0x15ff/0x2e50
[  668.837249][ T1876]        lock_acquire+0x115/0x350
[  668.842274][ T1876]        __mutex_lock+0x19d/0x1550
[  668.847402][ T1876]        nbd_queue_rq+0x373/0xff0
[  668.852548][ T1876]        blk_mq_dispatch_rq_list+0x499/0x1990
[  668.859232][ T1876]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  668.866548][ T1876]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  668.873330][ T1876]        blk_mq_run_work_fn+0x16c/0x300
[  668.879604][ T1876]        process_scheduled_works+0xc3d/0x1630
[  668.885691][ T1876]        worker_thread+0xa47/0xfb0
[  668.890818][ T1876]        kthread+0x38b/0x480
[  668.895421][ T1876]        ret_from_fork+0x514/0xb70
[  668.901065][ T1876]        ret_from_fork_asm+0x1a/0x30
[  668.906378][ T1876] 
[  668.906378][ T1876] other info that might help us debug this:
[  668.906378][ T1876] 
[  668.917169][ T1876] Chain exists of:
[  668.917169][ T1876]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  668.917169][ T1876] 
[  668.929388][ T1876]  Possible unsafe locking scenario:
[  668.929388][ T1876] 
[  668.937021][ T1876]        CPU0                    CPU1
[  668.942563][ T1876]        ----                    ----
[  668.947960][ T1876]   lock(&cmd->lock);
[  668.952006][ T1876]                                lock(set->srcu);
[  668.958434][ T1876]                                lock(&cmd->lock);
[  668.964939][ T1876]   lock(&nsock->tx_lock);
[  668.969448][ T1876] 
[  668.969448][ T1876]  *** DEADLOCK ***
[  668.969448][ T1876] 
[  668.977851][ T1876] locks held by kworker/1:1H/1876: 4, last CPU#1:
[  668.984631][ T1876]  #0: ffff88801eebb540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  668.995698][ T1876]  #1: ffffc900056e7c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  669.008842][ T1876]  #2: ffff88802bcd4798 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  669.018445][ T1876]  #3: ffff8880423b7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  669.027450][ T1876] 
[  669.027450][ T1876] stack backtrace:
[  669.033462][ T1876] CPU: 1 UID: 0 PID: 1876 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) 
[  669.042988][ T1876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.053176][ T1876] Workqueue: kblockd blk_mq_run_work_fn
[  669.058782][ T1876] Call Trace:
[  669.062093][ T1876]  <TASK>
[  669.065045][ T1876]  dump_stack_lvl+0xe8/0x150
[  669.069933][ T1876]  print_circular_bug+0x2e2/0x300
[  669.075072][ T1876]  check_noncircular+0x12f/0x150
[  669.080198][ T1876]  __lock_acquire+0x15ff/0x2e50
[  669.085072][ T1876]  ? iowrite16+0x31/0x80
[  669.089404][ T1876]  lock_acquire+0x115/0x350
[  669.093940][ T1876]  ? nbd_queue_rq+0x373/0xff0
[  669.098678][ T1876]  __mutex_lock+0x19d/0x1550
[  669.103293][ T1876]  ? nbd_queue_rq+0x373/0xff0
[  669.107984][ T1876]  ? ret_from_fork_asm+0x1a/0x30
[  669.112938][ T1876]  ? unwind_next_frame+0x8f/0x2550
[  669.118063][ T1876]  ? nbd_queue_rq+0x373/0xff0
[  669.123055][ T1876]  ? __pfx___mutex_lock+0x10/0x10
[  669.128124][ T1876]  ? ret_from_fork_asm+0x1a/0x30
[  669.133142][ T1876]  ? stack_trace_save+0xa9/0x100
[  669.138232][ T1876]  ? __pfx_stack_trace_save+0x10/0x10
[  669.143633][ T1876]  nbd_queue_rq+0x373/0xff0
[  669.148152][ T1876]  ? __lock_acquire+0x14b9/0x2e50
[  669.153197][ T1876]  ? __pfx_nbd_queue_rq+0x10/0x10
[  669.158244][ T1876]  blk_mq_dispatch_rq_list+0x499/0x1990
[  669.163842][ T1876]  ? sbitmap_get+0x229/0x390
[  669.168476][ T1876]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  669.174567][ T1876]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  669.180398][ T1876]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  669.187022][ T1876]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  669.193830][ T1876]  ? lock_acquire+0x115/0x350
[  669.198726][ T1876]  ? process_scheduled_works+0x97a/0x1630
[  669.204464][ T1876]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  669.210454][ T1876]  ? blk_mq_run_work_fn+0x144/0x300
[  669.216537][ T1876]  blk_mq_run_work_fn+0x16c/0x300
[  669.221597][ T1876]  ? process_scheduled_works+0x97a/0x1630
[  669.227420][ T1876]  process_scheduled_works+0xc3d/0x1630
[  669.233074][ T1876]  ? __pfx_process_scheduled_works+0x10/0x10
[  669.239162][ T1876]  ? assign_work+0x3cf/0x5d0
[  669.243853][ T1876]  worker_thread+0xa47/0xfb0
[  669.248681][ T1876]  ? __kthread_parkme+0x71/0x1f0
[  669.253776][ T1876]  kthread+0x38b/0x480
[  669.257888][ T1876]  ? __pfx_worker_thread+0x10/0x10
[  669.263120][ T1876]  ? __pfx_kthread+0x10/0x10
[  669.267734][ T1876]  ret_from_fork+0x514/0xb70
[  669.272578][ T1876]  ? __pfx_ret_from_fork+0x10/0x10
[  669.278004][ T1876]  ? __switch_to+0xc89/0x1420
[  669.283126][ T1876]  ? __pfx_kthread+0x10/0x10
[  669.288040][ T1876]  ret_from_fork_asm+0x1a/0x30
[  669.292830][ T1876]  </TASK>
[  669.297440][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800800: abort rx timeout. Force session deactivation
[  669.297554][    C1] vcan0: j1939_tp_rxtimer: 0xffff888026946800: rx timeout, send abort
[  669.297754][T23353] block nbd1: Disconnected due to user request.
[  669.298326][T23353] block nbd1: shutting down sockets
[  669.310842][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888026946800: connection exists (fe ff). last cmd: 20
[  669.329514][ T1876] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  669.329659][ T1876] Buffer I/O error on dev nbd1, logical block 0, async page read
[  669.351130][T23361] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  669.351176][T23361] Buffer I/O error on dev nbd1, logical block 1, async page read
[  669.351195][T23361] Buffer I/O error on dev nbd1, logical block 2, async page read
[  669.351211][T23361] Buffer I/O error on dev nbd1, logical block 3, async page read
[  669.351400][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.351424][T23361] Buffer I/O error on dev nbd1, logical block 0, async page read
[  669.351437][T23361] Buffer I/O error on dev nbd1, logical block 1, async page read
[  669.351450][T23361] Buffer I/O error on dev nbd1, logical block 2, async page read
[  669.351463][T23361] Buffer I/O error on dev nbd1, logical block 3, async page read
[  669.351569][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.351667][T23361] Buffer I/O error on dev nbd1, logical block 0, async page read
[  669.351869][T23361] Buffer I/O error on dev nbd1, logical block 1, async page read
[  669.352048][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.352262][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.352413][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.352565][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.352704][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.352757][T23355] ldm_validate_partition_table(): Disk read failed.
[  669.352852][T23361] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  669.353238][T23355] Dev nbd1: unable to read RDB block 0
[  669.353987][T23355]  nbd1: unable to read partition table
[  669.359109][T23355] ldm_validate_partition_table(): Disk read failed.
[  669.359508][T23355] Dev nbd1: unable to read RDB block 0
[  669.360020][T23355]  nbd1: unable to read partition table
[  669.430683][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4141'.
[  669.435065][T23354] netlink: 'syz.1.4140': attribute type 1 has an invalid length.
[  669.523454][T23354] 8021q: adding VLAN 0 to HW filter on device bond3
[  669.567571][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032801c00: rx timeout, send abort
[  669.572395][T23351] netlink: 328 bytes leftover after parsing attributes in process `syz.1.4140'.
[  669.572464][T23351] netlink: 'syz.1.4140': attribute type 9 has an invalid length.
[  669.572478][T23351] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4140'.
[  669.572492][T23351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4140'.
[  670.067624][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032801c00: abort rx timeout. Force session deactivation
[  670.332880][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800400: rx timeout, send abort
[  670.832977][    C1] vcan0: j1939_tp_rxtimer: 0xffff888073cf0400: rx timeout, send abort
[  670.833033][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800400: abort rx timeout. Force session deactivation
[  670.856266][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888073cf0400: connection exists (fe ff). last cmd: 20
[  671.106293][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800000: rx timeout, send abort
[  671.606383][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032800000: abort rx timeout. Force session deactivation
[  671.871626][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032802000: rx timeout, send abort
[  672.371677][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804904e800: rx timeout, send abort
[  672.371722][    C1] vcan0: j1939_tp_rxtimer: 0xffff888032802000: abort rx timeout. Force session deactivation
[  672.391517][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804904e800: connection exists (fe ff). last cmd: 20
[  672.641520][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a69400: rx timeout, send abort
[  673.141623][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a69400: abort rx timeout. Force session deactivation
[  673.409865][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a69000: rx timeout, send abort
[  673.909933][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802aa9b400: rx timeout, send abort
[  673.909988][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a69000: abort rx timeout. Force session deactivation
[  673.922199][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88802aa9b400: connection exists (fe ff). last cmd: 20
[  674.172207][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a68c00: rx timeout, send abort
[  674.672295][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a68c00: abort rx timeout. Force session deactivation
[  674.936484][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a6a800: rx timeout, send abort
[  675.436565][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880480b4400: rx timeout, send abort
[  675.436651][    C1] vcan0: j1939_tp_rxtimer: 0xffff888025a6a800: abort rx timeout. Force session deactivation
[  675.460872][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880480b4400: connection exists (fe ff). last cmd: 20
[  675.710912][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055db5400: rx timeout, send abort
[  676.211059][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055db5400: abort rx timeout. Force session deactivation
[  676.486369][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055db5800: rx timeout, send abort
[  676.986438][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033ecac00: rx timeout, send abort
[  676.986496][    C1] vcan0: j1939_tp_rxtimer: 0xffff888055db5800: abort rx timeout. Force session deactivation
[  676.998729][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888033ecac00: connection exists (fe ff). last cmd: 20
[  677.248732][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034d65000: rx timeout, send abort
[  677.748833][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034d65000: abort rx timeout. Force session deactivation
[  678.024048][    C1] vcan0: j1939_tp_rxtimer: 0xffff888034d67800: rx timeout, send abort