last executing test programs:

3.948357436s ago: executing program 1 (id=3603):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0xc010) (async)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000100)={&(0x7f0000000140)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000440)='(', 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000084000000000000000080"], 0x18, 0x4008000}, 0x28008841)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[], 0x110) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bb57000fddbdf250100000024000300a03141d8cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4000)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x20004041) (async)
close(r1) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="170000919bddc546c338a700"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x41, 0x0, 0x0, 0x41100}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x3f47133b, @mcast1}]}, &(0x7f0000000180)=0x10) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000840)=0x92d, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000880)=0xcde, 0x4) (async)
syz_genetlink_get_family_id$nl80211(0x0, r4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d40)=0x14)
sendmsg$netlink(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="4c00000010000106"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xffffffffffffffc3, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xd3c69da7ddb89733}, 0x80)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0)
socket(0x11, 0xa, 0x3) (async)
socket$alg(0x26, 0x5, 0x0)

3.701399713s ago: executing program 1 (id=3604):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000e40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r2, &(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x2, 0x2}}, 0x10)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000e00)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000001040)="1c00010007008aaaaaaaaa1101", 0xd)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@arena={0x21, 0x0, 0x0, 0x1e, 0x0, r4, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xd, &(0x7f0000000b00)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @generic={0xb7}]}, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
close(0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="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", 0x4000}], 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000c40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl2\x00', r9, 0x1, 0x80, 0x7, 0x2e4, {{0x14, 0x4, 0x3, 0x3, 0x50, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "3a05f8d604f7b5eb0e36"}]}, @cipso={0x86, 0x11, 0x0, [{0x2, 0x7, "a05809259d"}, {0x5, 0x4, "1403"}]}, @ssrr={0x89, 0x13, 0x13, [@rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @remote]}]}}}}})
sendmsg$nl_route(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000f00)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2886}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_IFALIAS={0x14, 0x14, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040000}, 0x2400c000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r10, &(0x7f0000000100)=[{{&(0x7f0000000140)=@rc={0x1f, @none, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffd9}}], 0x18}}], 0x1, 0x404c8c5)

2.830508185s ago: executing program 4 (id=3611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRESDEC=0x0, @ANYBLOB='x\x00'/18, @ANYRES32=0x0, @ANYBLOB="000000cb00000000000091e80000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0}, 0x38)
socket$kcm(0x29, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) (async)
recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x7f, @private0, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x81, 0xa, 0x0, 0x0, 0xfffffffd, 0x7ff, 0x4]}}, 0x5c)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102})
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff, 0xa8, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
unshare(0x20040600) (async)
unshare(0x20040600)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000a80)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000a80)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r7, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000cc0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r7, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000cc0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})

2.575691482s ago: executing program 1 (id=3612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x7, 0x7ff, 0x7, 0x2}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000140)="719bfbb08d737f3256cc1ed7c59ba04a8057972f08a8f8e567d30d7c2b1008")
r3 = socket$inet(0x2, 0x6, 0x2fb) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000180)={<r4=>0x1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4e23}, &(0x7f0000000240)=0x90) (rerun: 32)
getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r3, 0x84, 0x85, &(0x7f0000000280)={<r5=>r4, @in6={{0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x9}, &(0x7f0000000340)=0x90) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x2, 0x30000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e22, 0x6ecfd88c, @empty, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @local}], 0xb8) (rerun: 64)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000440)=0x401, 0x4) (async, rerun: 64)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)) (async)
connect$netlink(r0, &(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc) (async, rerun: 32)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000500), &(0x7f0000000540)=0x10) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=<r10=>0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000007c0)={r5, <r11=>0xffffffffffffffff}, &(0x7f0000000800)=0xc)
setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f0000000840)={0x7fffffff, {{0xa, 0x4e22, 0x10000, @local, 0x4}}, {{0xa, 0x1000, 0x10000, @private2}}}, 0x108)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000000980)) (async)
write$nci(0xffffffffffffffff, &(0x7f00000009c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x7}, 0x4) (async)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x140c, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000084)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r13, &(0x7f00000020c0)={&(0x7f0000000b40)=@x25, 0x80, &(0x7f0000002040)=[{&(0x7f0000000bc0)=""/14, 0xe}, {&(0x7f0000000c00)=""/215, 0xd7}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/251, 0xfb}, {&(0x7f0000000e40)=""/60, 0x3c}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/186, 0xba}], 0x8}, 0x40000000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x74, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000090)

2.333678175s ago: executing program 2 (id=3614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9fb}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x8090}, 0x44004104)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x48001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000000010000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000004010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x98, &(0x7f0000000040)=""/152, 0x41000, 0xa}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x6, &(0x7f00000009c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9e}, @exit={0x95, 0x0, 0xa00}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000a00)='GPL\x00', 0x9, 0x29e, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000800)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="87a33680d21e3730b8fc9a5ebfbe54f5a5bde10623d6315eb95ca83b28b69c573b4395ca0eb4383f962d54aef475e410040e54742d2c2ded9891bc4b393607420e6a9303b30581ff70343a78176685486ebf2ae255e907e9ecc10ddc058ac8762823e5aff0391f0469fedd56b9bfd78586cfde7d5098a1b5c475"], 0x3c}}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0888000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, r3, 0x7}, 0xc)

2.160946803s ago: executing program 3 (id=3615):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2684, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2664, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x2594, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6303}, @NFTA_SET_ELEM_DATA={0x1210, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x57, 0x1, "eb2665011785dacaacb0506ea4b0bf22a6addfc49a9f24c1af2211fb5e47372a036998a46e5a8a048bc737fc224ad428338869b1bf5ba88884746a40e38484639d521d5b0434dc9c54c4a317d063eb1e319c84"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x100, 0x1, "e1193490117af1638bf30f57df418a580ca4f922f145fa4e01af0fbd8ff762f6361b8b328bb779e4e27d3b5f4fcd74bd12a23341bec5315c03f44842d82cf00048eeeec46e06594d9f336188dbf26a709fc64a8cdfed977f2d77b7d26d0cb9b046532abce7bc39c0d0eeacd088ab2b65d2ac6684dd7c39fca49fc30e515ca3938fa655ecf1049bcc69fac314454f50469f2a7c3170c6676844f52fc1a8b90ac6220f0bc0f03a5803fa6db4d9e4097ab736861d27a078f258d37274ec2ae0a4808620c98d62a9650a9085efa1235a491afcc757a82a38fd51eb9ddbb8ec6575572f0086cb684e51fbf5d3c3c7dde43121d837b2fa7c5f5baad0ca0329"}]}, @NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "b32fa0e6417d70aab4388199a29cf09a0ce500196db9e1785e88255db1549e9a0c49c9a3e3f6a163d678593fdd88a13b4adf193e6d3570d79e2d2bf7122265debcc1637c2601c1619c62c3fe6a0121814433ddc693ce8c08cfa257ca1941a47ec5a6ff62eb1a506774ec0de740a44dc126c5878092b6bc80f822c55fd22163ed62abf4019287d7a68b71aefda91426be929bddb4d3f040c3a73232e15a24a590"}, @NFTA_DATA_VALUE={0x91, 0x1, "5dd702be8947f19f049f07dcf8728400ed1909f9ae35a914db06f8ffb388466a8d1dfd816086792ff2fc9ea1c3f12cad3e8a4387b4f80d0320356d188179be6573942a1ff68216f099cb344aa215ee20b14bf52dec6bb3f0f58b277b3009d5db27c65213237310c1faf42589de400b05eecfdfd7a51cf32f073378d082fcfbbf5641ff94625759926dd32b1dc4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x11d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "50df7758df6a984e05b31effbf2e7452662e7f0f18748da94a672ec162768377141cd9627bc08d436f1716b1788f03d2f98fd674eacafa7c3727c7a59e8821eb470eda8e91c980d177a360dac9f61cdab2b3b9fbcc24e6c6e93a0b8c40d742f7e28adb3eb0b610233e19b549ff1fb3766e6758799323eac2cfc2e6844fea62354d793f9d13b7f0745e82a067d9be8c03e19361c3e3f17b568fc98204cbaeea8e30f85594e8f9adeea2e939ebdccff1f921640c8c726ddf7d7c280c8ec2b9be69e2bd22dc419aec09d3b41a7717aa2d2fb846bb9096a5b0591bcc8ecf8a92a68ab004531ae7e9f01fb12ebb5ad1b333"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "f3ac0ad3697cf8a5823ad4e0efc25afe422dca5f064fc5115839779fa7fff09a92fc71dae04b356d57960e20d52fef1afd75adb121e6b2952467fea37953342c2568f2235726cd389f92834c56aea7ddb832dd12466896ceccdb811fa555c0c493357113fcf7d1651362274cf91edd00e50d881a49aea11870219c521de6597416266b00dfdc39bc37f2f4a84835252ef8fa6a6bf80b34caaf9eb0c1c9ea62"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffff800}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "7058ab7196455c2f4c8ec8632febef90e510d84121bbf946d70a27582be260c80bc0d44605c9ca4c30a1f423e039df5a51c36f5917e637c3ec7ad1be3e80a9d3162451bee16dc3d5b7c234f48c803c60a657a9548f92fbeb94bbe14e4d3942d49117c1bbee25606716c49028a5a3dbdc59a50676acaf4b84e527eb859351171ae5e9b3dc95a3644f030e943b952701d2a66e54fb34095bc40c1eca0a10a8eec600307d4490f2d923982b7cf0beb59d299a"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x26ac}, 0x1, 0x0, 0x0, 0x4040056}, 0x4000840)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

2.071346975s ago: executing program 1 (id=3616):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000180)={<r1=>0x1, @in={{0x2, 0x4e23, @multicast2}}, 0x4e21}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r1, 0x2}, &(0x7f00000002c0)=0x8)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67)
recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69}, 0x42)
connect$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x3}}, 0x10)

2.045558341s ago: executing program 3 (id=3618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400011804000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000edfc48610bb00521490000001400048008000140000000000800"], 0xdc}}, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r7 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x0)
close(r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
r9 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1e, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000009c0)={0x9, <r11=>0x0}, 0x8)
r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r11, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a40)={r12, r10, 0x0, r9}, 0x10)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x6, 0x5, 0x80000001, 0x3, 0xff, 0x3, 0xffffffff}, 0x1c)

1.982025218s ago: executing program 2 (id=3619):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
sendmsg$nl_route(r1, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, 0x0, 0x0) (async)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x4, 0x9}}}, 0x24}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xe, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x81}]}, &(0x7f0000000980)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket(0x0, 0x7, 0x8)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'syz_tun\x00'}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newchain={0x24, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x4}, {0xfff8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x20040804) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.767722842s ago: executing program 0 (id=3620):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x4}], &(0x7f0000000000)='GPL\x00', 0x5, 0x9c, &(0x7f0000001300)=""/156, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0))

1.728710595s ago: executing program 4 (id=3621):
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x3, 0x5b}]}}, @echo={0x8, 0x0, 0x0, 0x0, 0x3}}}}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000740)={{0xffffffffffffffff, 0x0, 0x20040, &(0x7f0000000040)={@_ha_fsid={[0x6]}, {0x8, 0x6, 0x1482, 0x4000}}, 0x9, 0x0, 0x0}, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004)

1.679681463s ago: executing program 3 (id=3622):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x33c4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x67}, 0x94)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x8, {0x2, 0x0, 0x6, 0x203, 0x2}})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', <r2=>0x0, 0x0, 0x7800, 0x397, 0x2, {{0x14, 0x4, 0x1, 0x3d, 0x50, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x13, 0x14, [@private=0xa010102, @loopback, @multicast2, @local]}, @cipso={0x86, 0x26, 0x3, [{0x5, 0xe, "2b7ef1bcb6082dc14cb0e380"}, {0x7, 0x12, "06dd9a515fa089e443ef67fb5f36d52c"}]}]}}}}})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wg0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'ip6tnl0\x00', &(0x7f00000013c0)={'syztnl2\x00', <r8=>0x0, 0x2f, 0xe, 0x0, 0x8, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8000, 0x7, 0x7, 0x3}})
sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9172}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x7c, [@loopback, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @multicast1, @multicast2, @empty]}, @timestamp_addr={0x44, 0x4, 0xe1, 0x1, 0x2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xf8, 0x1, 0x7, [{@loopback, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @end, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x9, [{@multicast1, 0x80000000}, {@multicast1, 0x10001}]}, @end, @rr={0x7, 0x13, 0x30, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0x7b, [@multicast2]}, @end, @timestamp_prespec={0x44, 0x44, 0xdc, 0x3, 0xb, [{@private=0xa010102, 0x9}, {@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x28}, {@broadcast, 0x3}, {@rand_addr=0x64010101}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}], 0x130}}, {{&(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="da5258476a1c27ac5b185bb4399f6277844a3918e2c86ed166bcbd79374d045bc43e098f4e1835c215a0ac855702891b768ecf6e19c5661e69b45d1eaa73576f811ae1bf1e951a393d37691d6e3bd24c96e3b6058a1b81f451e9b7cb49124ee007f94e0321bcc7507ec02164819960994039532ef748fd37f6625af4867a3a2e1c66d7255d110b877a0444e4e359d0b52b06f17b306f710d498264d04a79bffad945066936ef8e6747bde2448a101263a1678e8b82269d65e7772149653b9e5e245c68ec23246cfb32d3df4219206ce45055176d7a8399bdb69fb6d88cc73952089a7b1c9848811c878a35070edac483b30b85", 0xf3}, {&(0x7f00000005c0)="9388159bd61f419eac0df0899eda3ebd9232642123f6f7cad2313fa1c08c72e80ee36363451d01e982e219a9e0da87e83b75ae000e1c1ac131474b2b3a69c52344f5ba38bf5fd68c009e28bf7aad84b364ca8b8474bcdeefab5b683a7c4752876ba34efd7ebc217f7b398a26e782347a3e67e6ede4208fb2febd140e81f94cffe6ecbd07f207058c", 0x88}, {&(0x7f0000000680)="f2d91baccdeb5db5b621c8148ef58bf20bf931b6f47810ec98bb283efbf157722ca3f4fd21af6ac1bf132ffe18e9201a305f9714d6979ac945815d8502a6d517087838c25d91e433824aedba93dfd59ea546f089f64c3b929ffae8820cdf8ac52b9e41873b3f7aca50b3b9ff14c0687df524edcc63", 0x75}, {&(0x7f0000000700)}, {&(0x7f0000000740)="646f49196938aaaa24cd821fa26feacd74c003fc23b8e2076ade9797e90f13640651f7464bbfc52ad008f9e136d968b783679ef49e65c25aaa84c082a10df45084119f21169804c6b0afe773666e18fe81e8b489f8a0b1ddd84efbece4d8a5ecaee5e385adc082e6637934c6bba9b2b75b83f7ff84c43fc94ba24ba424a3661b6d930ec3fc1e9dcf1282c2fc8d6a8c4a0a8ea7020f4560f2e012eb541112d4cc3c6cfd76a6d4ca18c6d02eb64755b62a641047883b29312d0f7f150153798b5d414df9f01968348053db27165aeaa902f7e59be6", 0xd4}], 0x5, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="1f8a0545aed851477175cce6562359ba8d436073f74518cfdc95fd32f443087bcebbe76863bf143d68831d17ba84ee1c62ca11d9e6501e42ba8618c75eb166b397cfacae98f616935de3d19375be19671a1c1d95e18042506927ec9fd2677dbc89216d5ee63866b0842a708632b4a6961e01d492ed2fcb9505594b94e6c1596f38122dab8766768e76ab", 0x8a}, {&(0x7f0000000d40)="27bd0e1764461a830630380a53c5f1d62fd5acbdd9220f25f2f0e5de59dc7142f926d1f8c22d1fc7", 0x28}], 0x2}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="9e3c997cbaffca18dfbf1cb92aee808dc6c7c74b733573977af0a28552db69567d51ac3af11dfa2145caf04ca7d48811e632338011bdbc645e49fc7a09c472a0917d942c62853b81571f13190b1767614a6f1857575b78ad35961595f82f568e80e15143fed3ae8d62eec2e9a9f72cbf157331d1375133457e9f2bed1d2e189fc450f0b736dab31a3a7a7bbc38da4646d8346babb95aaefe1d410d512dc11d893fc5157c9ef2556fb56314de3fcc37d327279e9ac9c4189f56733248f0f9be7ed402eb9b512d54bfcce7b4f746d451d9bf870fd3317f70edbd68cd064aab1fbaec0c6a27e8f99515ab378b8b", 0xec}, {&(0x7f0000000f00)="cb00dafa48bf7e4d4235abea3c9487d93aa3eebc6007cc671a746d8f3e1519ca4594077a94cfdba285bdecc0df74028305d7c1fbadf1541de46718a8ca6951da111ad60298b535fc377e6b7b", 0x4c}, {&(0x7f0000000f80)="75bd4d07f719ff64328290c02aea4ae0c869dfb4f4f51e13cf9a8c1bec68fe2f8daa52ec4dbb9c31b9c73028416b2691dde7689a62563d2a5371e1fc7eaeb9b1b9480a133e64177124aeba55d7fe192d5a97c5e227d96d1eec15a55a058002e6b3988d4aaa3891107e08b8ab856ec4250736591c5a13ae92355eeb831ffb47a28b4c118fabbcb1844907bcb93d4321d649", 0x91}, {&(0x7f0000001040)="880363afdebb7264b661a6decb676c1d6be167a63d8a55d885ea9b2c2c610b563356c7ba6013d13458f8e9c7f2b37c84046bcff132f3d954adbfce81b6a4d0a94707f5ee8ec089ac7fbdea9c8041d40bb332ddf8025f94d45007f9f709b43de114c09ec884f39125f2cbda8f44cbf7f92fde09f72f2208772da9737a8c4f73d2340aaadca48690c3611e73f0cc66", 0x8e}, {&(0x7f0000001100)="aff5e82caf59a8d516577fbd53721938c1f00fc834b8d2ad934690e85a3814d45373384c993cd248258242c2a07b3d93", 0x30}], 0x5, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @private=0xa010101}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001240)="01930abdb39fcd407d9d1bb38718aa5f58e65d20984dae6dc9f27362a0bf4361e20de4cac7a7e7a75a713a750e2db146bfde16ca1936ed20ef3cec24a39cd8c8253b15a45bcb6229b2acb9b66c2621d3d1481d291576e51398c4209b1adb1a1ece2fe79189670b9c9db98c008ba7bb4599344aad5aa83ea4c5913b753fc8e3dee4b14de6c0c861da9bb219b2f5c0a709fcb934de2f2a1cb0d385275a45a6f142ee5c", 0xa2}, {&(0x7f0000001300)="cef3b3c2304cb5303d2f333bd711f718f3200276383d36616e1f0d008a986de99c19884919da8494146ec62a150ef42f4c619d17e521a203303bac8989706fcb04b825fbb7f8ff0fa7725792b45456664322a21bc18cf5ad9f094f2d9d2e432c5f21207141", 0x65}], 0x2, &(0x7f0000001480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x44, 0x0, 0x7, {[@noop, @rr={0x7, 0xb, 0x70, [@multicast2, @multicast1]}, @ssrr={0x89, 0x27, 0x5, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}]}}}], 0xb0}}, {{&(0x7f0000001540)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001580)="2a65d280c573dded13b87e0b6c2251ebf98df701beec208140228ec276292e65f2990185553e2c77", 0x28}], 0x1, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x6, 0x8000)

1.587657374s ago: executing program 0 (id=3623):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002900)=@nat={'nat\x00', 0x19, 0x5, 0xfd8, [0x200000001900, 0x0, 0x0, 0x200000002530, 0x200000002730], 0x0, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x38, 0x1, 'gretap0\x00', 'veth0_macvtap\x00', 'dummy0\x00', 'macsec0\x00', @random="7682cbe6b121", [0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x4499258a7eb49227, 0xff], 0x0, 0xb0, 0x120, 0x158, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xca}, {0x300000000000000}], 0x1, 0x1}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}, {0x3, 0x0, 0x6000, 'ip_vti0\x00', 'veth1_macvtap\x00', 'team_slave_1\x00', 'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1f}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x978, 0x978, 0xaa8, [@among={{'among\x00', 0x0, 0x8b0}, {{@offset=0xc, @offset=0x468, 0x1, {[0x1, 0x7fffffff, 0x6, 0xdcde, 0x3, 0x6, 0x80000001, 0x9, 0x2, 0x9, 0x7, 0x7, 0x200, 0x1000, 0x8, 0x2, 0x5, 0x6, 0x40000, 0x66, 0xffff, 0x40, 0x80000001, 0x7, 0x7ce, 0x4, 0x0, 0x9, 0x7, 0x2, 0x8, 0x1000, 0x401, 0x7, 0x0, 0x3, 0x8, 0x1ff, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x5, 0x1, 0x2, 0x100, 0x4, 0x8, 0x9, 0xd57, 0x5, 0x6, 0x3ff, 0xb, 0xf, 0x7, 0x5, 0xef, 0x5, 0x1, 0x5, 0x5, 0x0, 0x5, 0x5, 0x60f9, 0x800, 0x0, 0x0, 0x8, 0x400, 0x1, 0x100, 0x8, 0x7, 0xab, 0x97, 0xfffffff8, 0x6, 0xf, 0xfffffffc, 0x4, 0xff, 0x4, 0x6, 0x8, 0x0, 0x1fb8ee08, 0x400, 0x7, 0xa, 0x800, 0xff, 0x9, 0x72101372, 0x10000, 0x4, 0x7ff, 0x0, 0x0, 0x8001, 0x4ada, 0x6, 0x4, 0x3ff, 0xff8, 0x8, 0xfffffff9, 0xff5, 0xfffffffd, 0x4, 0x5, 0x8, 0x200, 0x2, 0x5, 0x8, 0x7fffffff, 0x844, 0x7, 0x5, 0x7fff, 0x6, 0x9, 0xdd3a, 0x40, 0xa, 0x6, 0xf, 0x4, 0x3, 0x2, 0x2, 0xb5a, 0xff, 0x3, 0xfffffff8, 0x8, 0x7, 0xf5, 0x2, 0x2, 0x1916, 0xffff, 0x2, 0x4, 0x1, 0xe00, 0x8001, 0x2, 0x324, 0x1, 0x8, 0x80000001, 0x3, 0x1, 0x9, 0xc, 0x7, 0x5, 0x1b56, 0x10, 0x101, 0x8, 0x37c, 0xc8, 0x1, 0xcaa, 0x5, 0x3, 0x1, 0xffff, 0x9, 0x2, 0x6, 0xfffffff8, 0x3, 0x1, 0x621, 0x3, 0x0, 0x80000001, 0x3, 0x800, 0x8b, 0x21375cf, 0xe, 0xffffffff, 0x3ff, 0x2c3, 0x3, 0x3, 0x5, 0x704, 0x7fffffff, 0x8b1, 0x1f80, 0x7, 0xffff, 0x93a, 0x135, 0x4, 0x0, 0x1000, 0x2, 0x1, 0xaa, 0x6, 0x10, 0x5, 0x9, 0x1, 0x7, 0xeb7, 0x0, 0x7fffffff, 0xda, 0x7043, 0x8, 0xe, 0xa4c7, 0x96, 0x10001, 0xb1c, 0x332d, 0x7f, 0xd2, 0x4, 0xfffffff7, 0x8, 0x8, 0x2, 0x4, 0xba9, 0x10, 0x4, 0xc6, 0x1, 0xfffffffb, 0x4, 0x800, 0x6, 0x7, 0x3, 0xc080, 0x1, 0x9, 0x3, 0xdf70, 0x4, 0xfffffff9], 0x7, [{[0x200, 0x5], @multicast2}, {[0x8, 0x4], @multicast1}, {[0x10, 0x800], @dev={0xac, 0x14, 0x14, 0x15}}, {[0x8, 0x8], @private=0xa010101}, {[0x728e], @dev={0xac, 0x14, 0x14, 0x23}}, {[0x6, 0x6ec21e77], @remote}, {[0x10000], @multicast2}]}, {[0x81, 0x1, 0x4, 0x61de4b42, 0x6, 0x1000, 0x3, 0x3, 0x54, 0x1000, 0x3, 0x9, 0x2, 0x5, 0xc3, 0xf1, 0x3, 0x6, 0x3, 0x5, 0x8d, 0x7, 0x4, 0x0, 0x1, 0x4, 0x9, 0x1, 0x100, 0xfffffffa, 0x1, 0xfffffff9, 0x8, 0xf, 0x100, 0x40, 0x5f, 0x4, 0x9, 0x401, 0x6, 0x6, 0x200, 0xfffffff9, 0x80000000, 0x3, 0x6, 0x4, 0xfff, 0xfffffff7, 0xb102, 0x3, 0x8001, 0x1c, 0x5, 0xffffafa0, 0x6, 0x5, 0x3, 0x5, 0xffff, 0x2790, 0x584e, 0x3, 0x10001, 0x8, 0x27, 0xffffff6e, 0xc6e, 0x4, 0xc, 0x9, 0x4, 0x8, 0x3, 0xffffffff, 0x200, 0x5, 0x7, 0x40, 0x6, 0x6, 0x8, 0xfffffff8, 0x9, 0x10, 0x40, 0x7fffffff, 0xfff, 0x5, 0x8, 0x10000, 0x9, 0x5, 0x1f2, 0x7, 0xfcae, 0x6, 0x8001, 0x4, 0x7, 0x9a, 0xdee, 0x0, 0x9, 0x7, 0x8, 0x10, 0x1ff, 0x3ff, 0x344ec516, 0xba7, 0x679, 0x5, 0xa, 0x418, 0x97, 0xfffffffe, 0x2b, 0x0, 0x6, 0x3, 0x8001, 0x7, 0x9, 0xd, 0x4, 0x0, 0x300000, 0x6, 0x62, 0x3, 0x6, 0x9, 0x401, 0x800, 0x1, 0x8, 0x7, 0x401, 0x3907, 0x800, 0x3, 0x10000, 0x4, 0x4, 0x3, 0x8, 0x2f, 0x6, 0x6, 0x1, 0x3, 0x1000, 0x80, 0xfffff800, 0x6, 0x0, 0x9, 0x6, 0xd, 0x7, 0x4, 0xcc, 0x5, 0x9, 0x0, 0x61d0, 0x73ea81ea, 0x5, 0x4, 0xb, 0xaf9d, 0x4, 0xf, 0x0, 0x5682, 0xc50, 0x3, 0x6, 0x2, 0x77, 0x800, 0x8, 0x0, 0x9, 0x2, 0x9, 0x5, 0x4, 0x8001, 0x3, 0x9, 0x0, 0x0, 0x2, 0x7f, 0x3, 0x1000, 0x2, 0x9, 0x1800, 0xff, 0x0, 0x6, 0x0, 0x7, 0x4, 0x6, 0x1, 0x9be, 0xfb, 0x7fff, 0x8, 0x86350108, 0x1d, 0x2, 0x8, 0xb5, 0xc, 0x56, 0x34c, 0x1, 0xf15, 0x4, 0xffffffc5, 0x1ff, 0x8, 0x7, 0x5d, 0x2, 0x1, 0x8, 0x4, 0xb6, 0x6, 0x0, 0x4, 0x2, 0x6, 0x5, 0x539, 0x5, 0x4c12fac8, 0xe4, 0x2, 0x5, 0x8, 0x2e, 0x7, 0x3ff, 0x9, 0x7, 0x3, 0x0, 0x80, 0x80000000], 0x5, [{[0xfff, 0xf], @multicast2}, {[0x1, 0x7], @rand_addr=0x64010102}, {[0x7, 0x2], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x7f, 0x3ff], @dev={0xac, 0x14, 0x14, 0x26}}, {[0x8987, 0x6], @private=0xa010102}]}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x4519}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8000, 'system_u:object_r:devpts_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x12, 0x805, 'macvlan1\x00', 'veth1_to_bond\x00', 'wlan0\x00', 'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0x1fe, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xd8, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}, {0x9, 0x10, 0x10, 'macvlan0\x00', 'bridge_slave_0\x00', 'vxcan1\x00', 'erspan0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xff00, 0x70, 0xa8, 0xf8, [], [@snat={'snat\x00', 0x10, {{@random="7f903c95b0d6", 0xfffffffffffffffc}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x80000001, 'syz1\x00', {0x2}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x40, 0x9c4a665b21c55fbb, 'pimreg1\x00', 'pimreg\x00', 'veth0_to_batadv\x00', 'macvtap0\x00', @broadcast, [0x0, 0xff], @local, [0xff, 0x5305accd2022a5a5, 0x0, 0x0, 0xff, 0xff], 0x0, 0xa0, 0x110, 0x148, [@state={{'state\x00', 0x0, 0x8}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, 0x8000000000000002}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x1050)

1.545692938s ago: executing program 2 (id=3624):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000b00)="1408000000000000b89e08dcd85d", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000d40)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x0, 0x3, 0x0, 0x4}}, 0x26)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28038cb4b920f935527d4264191790680000f22dff481e497968a05000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c00070000000000000000000800090080000000"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8c000900950ab63b2f23f0d77fd00084de2215dfaafa37eafbed9806db97879bf49e36ffb3eaae33875404aa251477d4fd5c1c5667abdfe12dbfedef445bfd3bcb18834cead136c1c0c2c84c389765a3719c01a4cf3bfe308143a474fb49f1beca67538eb2b6c3da45155dae42bae1109334c9a43974b912bef444699bd7a2c40d796f2a405a15839109dde3427c312fbfb4c6abfda7c05c2a00de985263a3781225f4b17ec62c201cd7676a516768e27200ec903d2017fb2f11010f92e5457cba6fa9df101c3ff2a8", @ANYRES16=r3, @ANYBLOB="010000000000000000000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f9000004800028014000100ac1e0101000000000000000000000000060002001f900000080003000200000008000400010000000800050000000000080006000000000006000b0002000000"], 0x8c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000c40)={<r6=>r0, &(0x7f0000000b40)='IPVS\x00', 0x8040, &(0x7f0000000b80)={@align=0x661, {0x6f3, 0x81, 0x6, 0x8001}}, 0x303, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0x2})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b0ff0011000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035080100000040209500000000000000b7020000000000007b9af8fd000000007509fdff030000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e98f0ff000000008d080000000000008500000005110000b70000000000000095"], &(0x7f00000014c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000011c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x280, r8, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3baa}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffffffffffffffdc}, {0xc, 0x90, 0xffffffffffff506c}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xffffffffffffffca}}]}, 0x280}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, &(0x7f0000000600)=[{{&(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)='`', 0x1}], 0x1}}, {{&(0x7f0000000740)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000007c0)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
shutdown(r9, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000800)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000840)=0x20)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000400)={<r10=>r7, &(0x7f0000000300)='IPVS\x00', 0x25e080, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x34]}, {0xf0a6, 0x2, 0x7, 0x10001}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x1})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x50, 0x0, [{@empty}, {@dev}, {@loopback}, {}, {@multicast2}]}})

1.520171135s ago: executing program 4 (id=3625):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000000), 0x12)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x73, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r4, &(0x7f0000000800)="de26", &(0x7f0000000840)=""/9}, 0x20)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r5=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x11, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="17010000a4fc8a000500feff"], &(0x7f0000000980)='GPL\x00', 0x3, 0x3, &(0x7f00000009c0)=""/125, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca499"]}]}, 0x64}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="a80000001f0001000000000000000000980000807c00288008001600", @ANYRES32=r5, @ANYBLOB="081adaa8499768887d46b185b485009f07", @ANYRES32=r7, @ANYBLOB="159e52e6c3fb09a92041e99b71ee1d377b22d031f7f98d411fcfe2016199cfb1bba806c5bff8aaca068e2fd9f71a3075f1448f81d2db106e2c1139deef5b1abed4f33810607c8479aa00711379505180702cc44a31134b836da084cd917209ece787f43c362aa092080000000000000010006b800c0034000101000000000000"], 0xa8}], 0x1}, 0x0)
shutdown(r1, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x12}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1, {0x3, 0x8, 0x8c, 0x7}}}, @chandef_params]}, 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x894)
bind$x25(r0, &(0x7f0000000040), 0x12)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, &(0x7f0000000e80)='X', 0x34000, 0x0, &(0x7f0000000ec0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
unshare(0x2a020400)
shutdown(r11, 0x2)

1.419355094s ago: executing program 3 (id=3626):
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={<r0=>0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000040)=0xc)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x408, 0x1e0, 0x2a0, 0xffffffff, 0x2a0, 0x110, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, &(0x7f0000000080), {[{{@ip={@rand_addr=0x64010100, @empty, 0xffffff00, 0xff, 'nicvf0\x00', 'sit0\x00', {}, {}, 0xe, 0x1, 0x8}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x2, 0x1, 0xce9f, 0x9a9f, 0x5, 0x5d, 0x2}}, @common=@addrtype={{0x30}, {0x210, 0x80, 0x1, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @empty, @broadcast, @icmp_id=0x66, @gre_key=0x3}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x19}, @broadcast, 0xffffffff, 0x0, 'wg1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x5e, 0x2, 0x60}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x5, 0x0, 0x1, 0x0, 0x3], 0x1, 0x2}, {0x3, [0xc, 0x3, 0x4, 0x4, 0x0, 0x4], 0x6, 0x3}}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'netdevsim0\x00', 'pimreg1\x00', {0xff}, {}, 0x84, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xc}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x6, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, 0xff000000, 0xff, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x1d, 0x2, 0x10}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket2={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @private=0xa010102, @loopback, @port=0x4e24, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000580)={@dev={0xac, 0x14, 0x14, 0xd}, @remote})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000005c0)="beb507e11f5d1c45e247fcb4f3fc065c5070873019cc65721c094f325df12804bd73234da702e790896d6fe00490c98d1785eb7ccda2b998e1336b4715fa3fbd1bb47666e45c285786ae5eb8eba51c7e335456f08d9b0b103df82332234e689cfd2b2724c8b07563f40d42feaf4feeeed83e8bb690d0dfdcab52eb146c3523d87c3635dba220017a9c39e4a2895ff08d0aa477667b384d36d2de95c9bfba62b72df8bf10eb08e84905c3e51fbeb208d7a90a9984e028a1a6535eaa6a44a25789a9c2bd6890c7c68314a371c5edf6e4ce112e10a062b71e7d44dba595", 0xdc)
ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f00000006c0))
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000700))
pipe(&(0x7f0000000740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffd}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xa2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x7}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44004800}, 0x800)
ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000940)={&(0x7f0000000900)=[{0x6, 0x4, 0x2}, {0x7fffffffffffffff, 0x7e99, 0x2}], 0x2, 0x10, 0x2, 0xfffffffffffffffb})
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000980)={0xffff, 0x0, 0x3, 0x1, 0x5, 0x0, [{0x100000000, 0x20000000, 0x8, '\x00', 0x1000}, {0x2, 0x4, 0xbc1e, '\x00', 0x280}, {0x6, 0x9, 0x2a, '\x00', 0x1}, {0x5fb5, 0x8, 0x6, '\x00', 0x81}, {0x7, 0x5, 0x7fffffffffffffff, '\x00', 0x3900}]})
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000ac0)={{0x7, 0x400}, 0x10}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000000b00)={<r7=>0x0, 0x0, "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", "ae0ab31d1b71a1dc2483974bc175a13d791342bac93d8f1bfb14e461e70d13169cc258b448e33ec380097b7b59a229aa9e4000b165a6d192175d9380c353a9cda96ce039e37c7943cc938647d853667f25435d1bc62754787d80d6db59fe2a3d45e695e5bebdc03ba452ad78d228861de69cc725a61b311f70340ce19bad997719a66d746c7031cd948124374ea1f1d8274e3167ba79c8aa12a06385bd8ecfb23b5e023208e8719a66b60fcf31fdaeebce7e43c0845cb9b6710c6748f4027d34bd452e44cbec77c1f75f12a38c0b5850d33077b2baad869408d0fdb1d1d55b858521f7999a66e165a48c319f48b96b1ae91670362675461c3e6378c41cefacc8c431c933aaf51ee117516401558b2509de20ea6b80598a783033228b917d39f715eb1d34b78be25fcfa8eedef3d36308ac0fa14fafec074d803e9218bdfa4278ddff174bb65e559a5adc8331968ed7d17e56463f60bb02e417ec659c045a64c004413b1fdfebe8b2b0f47e758b64957d80031b1fa2db042d94acae68eb2a9a5d1aa804ffec8d22de7bbf8705ba3f5889b1175780001071482eac73735586a45fa6a23efffaf8ac7207069e40c0ae23c3bc134e6674c2c3f243fc01a65cfd75ce8f99737a1dc4b3cfa51c256c6ccf5658312f6e8deb430e7ffd8daeff5d6a954a7d6766208a36c4e82b3ea5dfd680fbae4233220c603442e763c71a59d4e21aa09192fecd6297fdf8e8f443edea68df3a5c507b797241853fa862b604e4bda8c56c3bf4d90fc490cd2e0b0c2f95579ed8ea895da7400499fcac5cdf60212de4557dec8c47c79cf9385720e52c601ff00249a0e995fe3b07faacce592d8483f285dc317362b102972768ae382711a598ddd447fc045d6f06e4c7945665829f7b323fd8b76302e09f85371028080a14d4389e1b5969a6be203a3b0f404a59640c02f691513afd79533ddcb4f44bc7bb06caa204be05274f7029f2dee2f83eebec68a952f90c2335fd6845f174d3cfe31b5b6a57bf1a954fe32303b1fdc11a05476fff9fa3dbfd1c11a30022c4fda14e43bd98aece209a52e0d6888fc4636da533360d44662af4d2cea99e72974c5783cde91ed452822a1c4e6e054f3d37f0689c9c7f8a944666ea027c9fbb06430f3c0d7cf5e3eeae879558999e2bbcde05f1dc23f9e123f70e226a3d88ddfb271a8d48ce6cee22b2bc0eb8389bcfe5021b0ce8b43412d4948b1d1c1e4b11cfafb9aa8dd0a5c69cf4bb3c7ac75b8a3ac9a44b9dadc9f17bb48f3fced68db6724a38e5a72841e02867500a2d1fc4c928e5034d8cb138b5670fc8fb587a17bf40d6d930358a593cd0b2f5ff5e6a2a4251f8a52b7c0a0cde239ef01002201e70536d5dd3686c6cc4719be828629214f4595ffd694036036e56aca7b82d5fe38bb7b800728ff8875620a4eb6f653f507395198446aee960d7aec91846c4e8dd27cf84129068f04a5babdbedb8c412a59f19f44acd515d83924f7047deebf38b2bbba90646c0cecbed18808a746900094eba63ada5868ae35b0478e44b7d84d7440a925e019f1f571cee842c5009cd05a237cf0a352dd9606abb854aba07a02ddfbdcf6afa464404af8c47d5115cc4810215b46c616ff90b9aa0abb84c09a8d267bacf21422488372698bbb8283b7b326c1794771c3b2414ce28f00349438440a9f58805f34fd652224a664bcff6054970ecc55accb511bccd9e82b48d26c6196369629e3d09505109e3810df7f4c9b574d5d50dd906a7452328747b88ad9aa23cfc6374d1a2de515dd8fd6ac7f3696f23d6101c0d758589d8911d1e3fad41f344bf5dd58a1151ed1edcd618896fb7c6bf200d6ffef912424368ce10eb200a031a72e8d76528bcb442ace5bf2b01efa589ecd5af4db6bf6e6fc9169c9b186a23ce4b5cb2f0621f39b17c9ecbc52206139ca778389138ad64be47e356fbf9a8409cef8f53d81e4baeb3ede6a198290df06a16ad380696c6cf99f6f232d88dfc80874525f07add65ddfa48274011e5a8d48f45bfc1fd661d6a5a1da6de2366c4582e943121bfeaa8123680e4ffbc82df5425ab1195eda883e826b6d68368ee41161820a670e89c5bd858c15abe2f548251542d0eae3cebd241cdbd72c1dbcd818027be0dbbb40147886e8b787ea9a77163cb22ffb10083da93b96ca1f9c2420a28affaaf405298cec2598b871d7da9d784443d648952951d2f11bccde61aaa8e271a2d7de1d86a65d6b3df51f7737d35fe5d7a7051179b2c2b0bee549eed8ae57a5c41ed483e453d168e14b58501da68ddb9e8cfa360dac2f6e77a94e48fae002de221b909a18282080f99349b1b0d9f475991395ca535a1defd2335c48d8cb438ac141df4f8d562b3e71980679bd8974a3beaf3ca7705c0c1e1722d73be95bcecdf22a4c1611dbe3a58de49f7e8f06b6790fe9f664e994b13cebccb9f065cafbe11f5160bdc32ad32756e8ce7df2c6f442ccc8d07e0e2a8f578047aa6c8d827e90c234e50d2c422f9da88759bfd5700ee97bb362af7d91516b05e8ec2c12ee81b595428f300d6d5fcde1fb771efc78b7b1575557bf664559b60dc40144444c33beea7dca293a2e7261292c9c4dbe45f02fcef3b56e77fb089ff285bd9a40d2071fbc1ee42f4f6ed890408581c9256f908506d5efbbec4ce16a7ab32f43243ceac9c16be5ab4b2c7e1d3bd931e544774bf4ef091b802b3c4c671dda91fbc2511baba42689f8561e9e48be3e260c67c323d2582c46baab843d27dfeb61b7f06fb6695979ce42c963e723d7f3df395c4a95994575a36f90e817c813b3445f190310856205177859a47fe01b45e63c9144d1ad4bf2d1ca2a201462967a06474dcadf78a51bd07e445bfa23ea0458b8b70acb72fcce54cb6f02e7d1681679902c1af2e83c8ddf6159fec4c96955e4a45a0820dc76ae9169b84bffcb3b4a21f5f31dea49cbbe63d18513cad5cbb9a6f69c6951768fc56188d65e4b4e38553a5925d6587c10aabef572f071e1478a604811671eb94fb72efc5ce8aa6f6a5011b5e9c7ea90300adb1948c8628a12ec9af9e0ac712ea019f10efd2e1d99ea1a4aec8e26e8eedcbd26923678a78a5c2d51d9df1246e352b94803bb28df5d3df81cfeaabf78f7f13ca02b0e8cfd1e63283b8f5e8e3b44e653bfdbeee8d26edd264cda195f28c7a4d61fcb87b179115b5d74f5291d88b99907cf6ac267844213678ebf07e4cf92ff2b425f20556e960a9cf3c3d0c26e8e27d1b340da507a0146c130321485c8cd9d38d466a742a875b60784f896d28402c222f2b8f60b3bb09613465a7f55f9402dd76c54849b7346a3f9b824ccf750a7129c2c61fc147b5b2d762634790afa23bb74d28ddaf5fbf3d592150fc934bfc43f734a2c96d45b87da23b68336932ca40bcee72c69acb69c5ae16f1e2ea18941f587ca415e927e705e2430df46145b6bac6a332b2d6f8f46b67667f9328e56a7e2821b9e8d3f08aa0019c792abe631f30236d8876283b91fe2cfb1426e4b448fcde0f89c77ffe767d1926b6fbc39580cb0dbfefaf85cf61e480f0b9141655407c0b0663af7c42886fbfd59375644b92cd022f0158960b032804963f6823bc727bf35d5ede35d7d3e716c44e423972bc7f7e6147cb4c174420525fa8c7cba1f0e434098654ebf1abc390a569dfbb767f607d99b4c5d65eb47067c5fe79f41034542ffa1868498fe09c0ba4105efac7ff5c2e31a70cde638555f763edd4f448df6e200304180c2c7540a4f22312acc1cec520ed4942b5b9dc4ddbed8009b677f93529d28af786967e1d68ce7622c08fb44f059595f6529784a2a051acd38a79aeb210de3098978adc7abf0df8dcf8afa674291879e9f0f2050247061d909baaf71aa213325701cf3236ff475ab1a58eb749aa8fa3154da8a0a546c9c4c1c3d67f826a1daec1915e6d02892fb99c82a4430b4e7429cb3af5e84b44dc738499d380bd61826ab4e58cdee3aad481ea5fb23b8546f60e47ad07be066bcfba3726eec121bb7c1f3659730516851f013eb9571b3e4530c1026b7d06619adff8fbb746100fdd7446db3e1b80eae953b67cc5ee40260855ec1ebe33f0896b48e11d85e2a97d77623e4d137f78f168fa8536308021b2fb666d78439388d6b9f37c913aedeef1f54b7da9f571c33e82409476684b79d7abef1bd3aebb01bdb9ea1b4597cb00de11cbb5563d07495c0403993d832cb465ff39bbe0f756c7369c100a8c28f4f29ea9cbe1e62ea86fa73eaf3987c266eab40915d9cc226a95e14df02945c939ad0fc64ea48d3d34ad82e853bd2606799145259cd085ba86cad56809c2e281ed236b2d085dfdbcc495e9e7be0732e8b803a42ae9f993f0778a0adebefa669ea8af1994cfbd8e462484d82d21ca7dcca7b9cfe1aa2ba506ba5885073e331794fad32645a8e03e44f4ecc6362d545d464a14123fdfccdde64243858128bbd93838693383673422f6921a074eba8b1b90416228debf2e8a64589fca5111c150d8216455bb82bb596aee56187c22d23808b94d6c8aa9115308a9e12a0480ba89869c9fa9d1c45764638e570d61ca49150c97272e0fb9d894bac35c40bff2d78d85629ad5690352c80d6d966b29bf22b74ef7ba138bf20e97a00bf64b95beb8effebb9b1486930c5f63a088fdb0c313ead47e88b2a55b44f624c1d64ed49427479fb52ca1245635680f97008ae361e6bb9127624c83a7f14defc1c7dcef054ea3dcdfd3a6b85d40fa6322ad8a51396f9ff455f159a938e40b36e6cacba1f1e28e544b2a23ec906cbd0474bde1b5c1dbb6bcd706229b6e741a332c3f31a3aab2ee31c7077594a993b269c425ed5903121b8c74bdb02a92aee129b49885d608f1b20952631da4fef687fe696e25e952507ba7f460a9857d8426d6704ff0f8751e8a7f18c92ae1d185506e8894ca7dbafc8077c6c3a8ffbee216985317c35543e7cef7b5149f914d06eb1332b5c53a4428080da614963cd67c955b95444f5fa5515da43ce8af5e089b03086349788c2a34213b77934603a167ba1a655e42e8cb09abb5d45c9a7e5ab182fe6e1ddb516dd1aa74541b2cdae0372cbed7cd9c9aeeed0eb084c60b18658e20f65f69058c298c1009c694dcbb912a6364f804fa7b7b7e39d9a264b7a84dc6213fe469b31e5f18e908e59150c0bd152743cf4a26eb78a35ca3df42342bf86c30dec91627efaadc9aa6346c325f8e3d8329f4cf04ab5469b1c33b8d527fe820f406ae8cc5a7a186be59c32144c8d0a4fd4256ef76631d6ae4757b1ba55265bbc91ac336861e4dd364d4932a0809adae6b93b20e16f2389434b8e1fa460f33e0d8a8b25b657de15f780f59ddf35fbfd86b43b3fc06d7fc94002a72fcd018f730e683b2aec07232de5916f1a97359705ca4ade9"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001b00)={r7, 0x0, "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", "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"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e00)={r3, 0xe0, &(0x7f0000002d00)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002b40)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002b80)=[0x0], &(0x7f0000002bc0)=[0x0], <r10=>0x0, 0x40, &(0x7f0000002c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002c40), &(0x7f0000002c80), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000002cc0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002b00)={@cgroup, r4, 0xe, 0x20, 0x0, @void, @void, @void, @value=r8}, 0x20)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000002e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000003080)=""/13)
bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x1c, 0x5, &(0x7f00000030c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x6}]}, &(0x7f0000003100)='GPL\x00', 0x2, 0x40, &(0x7f0000003140)=""/64, 0x41000, 0x4, '\x00', r9, @fallback=0x1b, r3, 0x8, &(0x7f0000003180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r4, 0x0, &(0x7f00000031c0)=[r3, r3, r3]}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)=@ipv6_getroute={0x40, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x3, 0xff, 0x1, 0x0, 0xb, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x5979, 0x5, 0x6, r9}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xd}, @RTA_PREF={0x5, 0x14, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc014)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000003400), r3)
sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x20, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4)
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000003500)={0x2000})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003540)={'wg1\x00'})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000003580)={0x2, 'veth1\x00', {0x5}, 0xe3b3})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r4, 0x84, 0x7a, &(0x7f00000035c0)={r0}, &(0x7f0000003600)=0xc)
sendmsg$inet(r6, &(0x7f0000003d40)={&(0x7f0000003640)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000003680)="72e9a2b3493895ac400022f9434114e9081401e565a65a37d3b8d913fa64cd6190a4258cbfb001311320d85f948bad772e677513f0ab70334d38c83c822961c2603c6086c77f2d438e9cfe255e3593392901938b2643497b0b9f44adc92aefda7c70df437f0d470555daf006589ae2de7660fd21fedf7ba2ac34486d71455a466a260b4654ba664f70f912a21a10", 0x8e}, {&(0x7f0000003740)="4ee5d09dccf6d45c0e8bebcf887da49cf81d41c785063d81c7d6c1858fbe4f132d17502b17c3e7f4ec9b30fd93e95b1ee74900935224ec084a3f12d74a925cc3535fa3cf390b36083f4644ad510a9a17c695a35a5b60f58864f07b7ebb87a6c5aa1937cc37f84943f97b1cdd9d49096194e65092406a9e97dbf2b82621bc18c36c34f1b205a7ff6884576d25271dc509beb4d67a40aea59da077274feef331270c1746947747cb902dd4810967fcb043df6aceed84c6d3f0d2f8e7b5bf901f", 0xbf}, {&(0x7f0000003800)="d7e66a879c464b066fe89c3305be922340a81d26325668bc4a40491daadc318148ea0dca7cb81e49cba596127cd39eb703639506bcbfe33d872f8783a6e3a10918bfff14f715916dce157b06bd7eda2e906ad947e49a563e6f467159788962fb875e74550d477b5cf38d3df60bd1bccc739f962d872d053d74fc", 0x7a}, {&(0x7f0000003880)}, {&(0x7f00000038c0)="8b30f91f359183bc4d1f0235e3596a9d909d57e6caa562953aaef6a263a38ab6f48157cab50155cd708acab943633136cca1835f0d12ec756d0dced0a6f81d62adc68b74c76525e6e86faff9f842d9aa8020d77d44e88cf100409d4b8b6d77cd0a31ff53ff6097c97f776ff3e7b72fd182", 0x71}, {&(0x7f0000003940)="754ac88f661dc00b2507d039661dc3bdd77df7113183044d03091864c40f7b17c79d6945", 0x24}, {&(0x7f0000003980)="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", 0xfc}, {&(0x7f0000003a80)="401d106f3d0a17c9b77b7f4cf5d66a72cdc18ffacf96f2c994a8f29a6256cca6a13fd1ba664851b740b6cf0a71128745530350204f179f2c75a6b826ed70d67f40b0c0955d1b0e3c208989ee9a839f6737af", 0x52}, {&(0x7f0000003b00)="520e71fae6abbb40294451b6e0270769b28f885f2332c93102284ba0ecef0a23d1415f59d6f8bdf9fca1363dfcee5f50e43fc55a8f5e209b713b52656c1ccf61cfa514a378c69917a094d61ca425a156472af2ce95dcc8d9caa591f653eb893cef21f911ed9859372219385416eb28ffcc4eef1f210900cdf257c068e56527e9321bd1a0f7b3e819698096f4addaed08f69b7f3047f63131c19c13f44179eac99d092118adbf54e533f33bd40dc18a1c9be7581b4ec77a98591fe74c395fea1abe2bef47fb640c3df51708be592f06c8d9c8f21d94098963e1ce3b9989f7018be8ef", 0xe2}], 0x9, &(0x7f0000003cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @loopback}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}], 0x50}, 0x0)

1.390418661s ago: executing program 0 (id=3627):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000500)={{<r3=>r0, &(0x7f0000000000)='hsr0\x00', 0x48001, &(0x7f0000000080)={@align=0x6, {0x2bf1, 0xff, 0x9, 0x2}}, 0x80000001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, {[0x100, 0x5, 0x6, 0x1000000]}, 0x1, 0xec, &(0x7f0000000400)=""/236})
sendmsg$NFT_BATCH(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000010000008000000700000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4041)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x5, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x1, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18030016a823b050319f860006000000181000"/28, @ANYRES32=r4, @ANYBLOB="0000000000000000250000000002000018000000000001000000000000000000950000000000000037030100020100009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000940)={{<r7=>r6, &(0x7f00000009c0)=' \x01\x00', 0x10000, &(0x7f0000000a00)={@align=0x3, {0x7ff, 0x0, 0x100, 0x81}}, 0x383, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x40}, 0xa, &(0x7f0000000ac0)=[{0x3, 0x1, &(0x7f0000000c00)='.\x00', &(0x7f0000000c40)="9bee7d7ec77116f3c8f14235a248b351af4c8fad471aae7b1c6f137fdce938d69acd72715078c2331e227f8754a3a3d54135adc8755f52375ae2aed5a9cd5a4c37867beadb6beee4c425b6dcb8099eaf460a467b6a28347dc3117aa149b91d6f65f12f20e6487b6170d26e1a481ba5b63e52c52f96ae3c358b6febde7be5d71067aeabd410c7aa98d331e1ddc78effa711e26d70438b78b688f20cf3ec2754eb2885d76429f18e24420d0957601ad91bdb0b2ec0075c710931a98b7db90dd706eea0e86de5f679a8ea4812a462719a9fbc67883a672ad51080d84a4c7c0b0745162f53eb75adf4", 0xe7, 0x10}, {0x2, 0x5, &(0x7f0000000d40)='\x00', &(0x7f0000000d80)="53e5e2c79950b9b9b051f6987c37af642f82b107fe94e7f6a5c0ee93017e8a397dd49fddc5a92338a5cc9dc4ece1d9567a26bb349e0ee5b6f145b1e832a436dbbfdbc5f85fcd1f4bcd315a0f0e11d2cecf53dc61a71e9ea99fd0d607dfa6211dcd5dff45c19340dc3e79a709b7a0b2ab82ef77dcbf459dbddca5a53d2ea474022389e216d9028bcee9e27bebdb5457bc726b4a1e7a010177debd3388305b2f1abc1e23cd88bec41aecbb", 0xaa}, {0x3, 0x3, &(0x7f0000000e40)=' \x01\x00', &(0x7f0000000e80)="503d2a44528baa245551a40546fdee8a3ea8b199a752aa34a67a0097b404285fe3682eb725896881eb50e027113eb8d9210cb6abb9358e67245a175c3199d0e67c2629f44e7ce734fa06a9f78be6f1", 0x4f}, {0x1, 0x40, &(0x7f0000000f00)='GPL\x00', &(0x7f0000000f40), 0x0, 0x30}, {0x2, 0x9, &(0x7f0000000f80)=']\x00', &(0x7f0000000fc0)="920bdd75dc739b5a72f14b2433ece3031e2acd6ef2708ddd624c055f17c6e58b0f931ff3617656f98d41622265b969bdd05b281835927291130caa285a72cc19edac8cdb41bbf8ad8d26e6a1d989465062e82d3808d0dbff252c91d24749435937ab8b3855c329cb905194a9aea3f4f8e734f9e6efe63b04730f413af9df61c7659f37b1f241ddfe350064d9c90bf52e2f6d9a66df922d22be57735ff741e8771a803bb382327afa29862c7f7e6311e3", 0xb0, 0x2}, {0x2, 0x9, &(0x7f0000001080)='GPL\x00', &(0x7f00000010c0)="cb2d00a2d20e20b6edfcbf414ec0bd12f3857d8a0f2897c34029c7b153fdf02202896512270bea2e4c6694e79b3e7740bdc5e90da968de67", 0x38}, {0x1, 0x3, &(0x7f0000001100)='GPL\x00', &(0x7f0000001140)="cf3d89c941be71c66f095adab5e8fddfffe0073d909e0a6aacc852a8e3d8ad11c74c9109781287943c1bc5cfef100eda536025148a3561d8476cf7b256b014e78895727908c0f754b0018400f612eff9168de757d0c7ad072509519678ab8422f584da9e6367787ef6d05a", 0x6b}, {0x2, 0x55ab, &(0x7f00000011c0)='nl80211\x00', &(0x7f0000001200)="edfce7611acbcb8ef483c7826b15f6e605da833cf0cf5b01cd4f13d63d592e19f4a12561e24f9d30e07fe8cd76b19fe74ead3e624a1f03a01a24720b0f0d501ec9cf15b94ded15e42e0dae42882ecab3220c65d14091a84dfe49ebc39e5aa8", 0x5f, 0x10}, {0x1, 0x3, &(0x7f0000001280)='GPL\x00', &(0x7f00000012c0)="910334b4bdccb560af195a50e7f6677e17bea6a6c076b251659cd956dde739207175dfb6e8d4caf76db22e22c50cf7c8d8b7bc71d64e511aa0f4018299dfb1c05bdd90cf88d977d4273324b041fb87bd9e3cacda57cf2c516ee9837cd678daecb7e78e9392359c7089da21da1b82c53dc1c821e23bc72c83a6882b0121ca1eb67b10d423e0290d9902743485df48abee8e7aa1cb9c5c553828bb0800bb5cfef1bf4431a5740276192dd88aab37a5487bae892730e9", 0xb5, 0x20}, {0x2, 0x9, &(0x7f0000001380)=',]*]^)}$\xa7&\x00', &(0x7f00000013c0)="961fe290e1bd8258", 0x8, 0x28}]})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000001440)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001500)={0x794, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc, 0x17}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_PEER_MEASUREMENTS={0x744, 0x111, 0x0, 0x1, {0x740, 0x5, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x524, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x324, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x28}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfa33}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x563}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc687}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffe8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x76}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe01}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x238}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x794}, 0x1, 0x0, 0x0, 0x8004}, 0x83)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000001d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000021}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8014)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c)

1.273669418s ago: executing program 3 (id=3628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000050900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103004f57febd3cf941d5c9ea35000c000440000000002df31ab30c000080080003400000000204000080140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\x00\x00\x00\x00 \x00', "bb6710bc8150e4a1a117d7b27caf00", "2026d12a", "ffffffffffffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000140)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000240)="93ba", 0x2)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r8}, 0xc)
sendmmsg(r4, &(0x7f00000002c0), 0x400000000000235, 0x0)

1.123547138s ago: executing program 1 (id=3629):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', <r3=>r2, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x20, 0x8, 0x100, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', r3, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
r4 = socket(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001f00)={@private, @empty}, &(0x7f0000001f40)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r6)
getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x202, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8d0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, 0x0, 0x6048004)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x10, 0x1, 0x9, 0x7f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0xa3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1}}}})
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000002080)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001d80)={0x34, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6784}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4000}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}]}, 0x34}}, 0x1)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r11, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYRES32=r13, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004"], &(0x7f0000000c80)='GPL\x00', 0xa, 0x1000, &(0x7f0000000cc0)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x21, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @exit, @alu={0x4, 0x0, 0x6, 0x0, 0x2, 0x20, 0x8}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{0x0, 0x1, 0x4, 0x1}, {0x1, 0x3, 0x2, 0x1}, {0x5, 0x4, 0x7, 0x6}], 0x10, 0xfffffd2b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

528.073943ms ago: executing program 2 (id=3630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0c0009800800014008"], 0x98}}, 0x20050800)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0xffef, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x4004804)
r2 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x801, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3121, 0x28a04}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x48}}, 0x400c040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x13, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208150f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

520.651676ms ago: executing program 4 (id=3631):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0xe22}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={&(0x7f0000000980)=@hci={0x1f, 0x3, 0x2}, 0xfffffffffffffdeb, &(0x7f0000000a00)=[{&(0x7f0000000a40)=')', 0x1}], 0x1}, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000a80), 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x20, 0x3, 0x3, 0xf}, {0x16, 0x0, 0x3, 0x2}]}, 0x10)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001"], 0x128)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000d40)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r8, &(0x7f0000000ac0)="0405e74b7c444bf3a8b0eb00000004740000001c5663400a52ec6e8893dcd5dfa93a2fadc70c11", 0xffba)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r10, @ANYBLOB="000127bd70208908c553fbe600ffdbdf252d00000008000300cc5ac1c1f8b8213a2df5e86b150a4e510241ca6b31a757de8a00dd5e631e8ad9441328c9980fcd7dc48e3108a2e8c3ae017c76e25976372dda221b4c08b19b1fd7bd385c38789e73642a3e0e42b9436bea2e6da507491c52a92bfc8aa82091740988adf5ba044d", @ANYRES32=0x0, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) (async)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r10, @ANYBLOB="000127bd70208908c553fbe600ffdbdf252d00000008000300cc5ac1c1f8b8213a2df5e86b150a4e510241ca6b31a757de8a00dd5e631e8ad9441328c9980fcd7dc48e3108a2e8c3ae017c76e25976372dda221b4c08b19b1fd7bd385c38789e73642a3e0e42b9436bea2e6da507491c52a92bfc8aa82091740988adf5ba044d", @ANYRES32=0x0, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x4004040)

444.326819ms ago: executing program 3 (id=3632):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020011669e3504a669eb000400000085000000619e5c871c8e2700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x85, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r9, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0xdb22, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x4, 0x4, 0x0, 0x9}, 0x50)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
sendfile(r8, r0, 0x0, 0x7d1d7457)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)

432.90248ms ago: executing program 0 (id=3633):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x74, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e23, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x4, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x2, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

358.621858ms ago: executing program 1 (id=3634):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010400000000ff5bdf2500000000", @ANYRES32=r2, @ANYBLOB="10000500420005003c0012800b00010067656e65766500002c000280140012"], 0x5c}}, 0x40)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000000)={0x0, 0x8}, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000109500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000ac0)=""/222}, 0x78)

276.534595ms ago: executing program 2 (id=3635):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="70000007ffffffffffffaaaaaaaaaabb88a8"], 0x1d)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)

235.993263ms ago: executing program 4 (id=3636):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r0=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2000000000000052, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r0}, 0x94)

183.337361ms ago: executing program 0 (id=3637):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002900)=@nat={'nat\x00', 0x19, 0x5, 0xfd8, [0x200000001900, 0x0, 0x0, 0x200000002530, 0x200000002730], 0x0, 0x0, &(0x7f0000001900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x38, 0x1, 'gretap0\x00', 'veth0_macvtap\x00', 'dummy0\x00', 'macsec0\x00', @random="7682cbe6b121", [0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x4499258a7eb49227, 0xff], 0x0, 0xb0, 0x120, 0x158, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xca}, {0x300000000000000}], 0x1, 0x1}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}, {0x3, 0x0, 0x6000, 'ip_vti0\x00', 'veth1_macvtap\x00', 'team_slave_1\x00', 'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1f}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x978, 0x978, 0xaa8, [@among={{'among\x00', 0x0, 0x8b0}, {{@offset=0xc, @offset=0x468, 0x1, {[0x1, 0x7fffffff, 0x6, 0xdcde, 0x3, 0x6, 0x80000001, 0x9, 0x2, 0x9, 0x7, 0x7, 0x200, 0x1000, 0x8, 0x2, 0x5, 0x6, 0x40000, 0x66, 0xffff, 0x40, 0x80000001, 0x7, 0x7ce, 0x4, 0x0, 0x9, 0x7, 0x2, 0x8, 0x1000, 0x401, 0x7, 0x0, 0x3, 0x8, 0x1ff, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0x9, 0x5, 0x5, 0x5, 0x9, 0x5, 0x1, 0x2, 0x100, 0x4, 0x8, 0x9, 0xd57, 0x5, 0x6, 0x3ff, 0xb, 0xf, 0x7, 0x5, 0xef, 0x5, 0x1, 0x5, 0x5, 0x0, 0x5, 0x5, 0x60f9, 0x800, 0x0, 0x0, 0x8, 0x400, 0x1, 0x100, 0x8, 0x7, 0xab, 0x97, 0xfffffff8, 0x6, 0xf, 0xfffffffc, 0x4, 0xff, 0x4, 0x6, 0x8, 0x0, 0x1fb8ee08, 0x400, 0x7, 0xa, 0x800, 0xff, 0x9, 0x72101372, 0x10000, 0x4, 0x7ff, 0x0, 0x0, 0x8001, 0x4ada, 0x6, 0x4, 0x3ff, 0xff8, 0x8, 0xfffffff9, 0xff5, 0xfffffffd, 0x4, 0x5, 0x8, 0x200, 0x2, 0x5, 0x8, 0x7fffffff, 0x844, 0x7, 0x5, 0x7fff, 0x6, 0x9, 0xdd3a, 0x40, 0xa, 0x6, 0xf, 0x4, 0x3, 0x2, 0x2, 0xb5a, 0xff, 0x3, 0xfffffff8, 0x8, 0x7, 0xf5, 0x2, 0x2, 0x1916, 0xffff, 0x2, 0x4, 0x1, 0xe00, 0x8001, 0x2, 0x324, 0x1, 0x8, 0x80000001, 0x3, 0x1, 0x9, 0xc, 0x7, 0x5, 0x1b56, 0x10, 0x101, 0x8, 0x37c, 0xc8, 0x1, 0xcaa, 0x5, 0x3, 0x1, 0xffff, 0x9, 0x2, 0x6, 0xfffffff8, 0x3, 0x1, 0x621, 0x3, 0x0, 0x80000001, 0x3, 0x800, 0x8b, 0x21375cf, 0xe, 0xffffffff, 0x3ff, 0x2c3, 0x3, 0x3, 0x5, 0x704, 0x7fffffff, 0x8b1, 0x1f80, 0x7, 0xffff, 0x93a, 0x135, 0x4, 0x0, 0x1000, 0x2, 0x1, 0xaa, 0x6, 0x10, 0x5, 0x9, 0x1, 0x7, 0xeb7, 0x0, 0x7fffffff, 0xda, 0x7043, 0x8, 0xe, 0xa4c7, 0x96, 0x10001, 0xb1c, 0x332d, 0x7f, 0xd2, 0x4, 0xfffffff7, 0x8, 0x8, 0x2, 0x4, 0xba9, 0x10, 0x4, 0xc6, 0x1, 0xfffffffb, 0x4, 0x800, 0x6, 0x7, 0x3, 0xc080, 0x1, 0x9, 0x3, 0xdf70, 0x4, 0xfffffff9], 0x7, [{[0x200, 0x5], @multicast2}, {[0x8, 0x4], @multicast1}, {[0x10, 0x800], @dev={0xac, 0x14, 0x14, 0x15}}, {[0x8, 0x8], @private=0xa010101}, {[0x728e], @dev={0xac, 0x14, 0x14, 0x23}}, {[0x6, 0x6ec21e77], @remote}, {[0x10000], @multicast2}]}, {[0x81, 0x1, 0x4, 0x61de4b42, 0x6, 0x1000, 0x3, 0x3, 0x54, 0x1000, 0x3, 0x9, 0x2, 0x5, 0xc3, 0xf1, 0x3, 0x6, 0x3, 0x5, 0x8d, 0x7, 0x4, 0x0, 0x1, 0x4, 0x9, 0x1, 0x100, 0xfffffffa, 0x1, 0xfffffff9, 0x8, 0xf, 0x100, 0x40, 0x5f, 0x4, 0x9, 0x401, 0x6, 0x6, 0x200, 0xfffffff9, 0x80000000, 0x3, 0x6, 0x4, 0xfff, 0xfffffff7, 0xb102, 0x3, 0x8001, 0x1c, 0x5, 0xffffafa0, 0x6, 0x5, 0x3, 0x5, 0xffff, 0x2790, 0x584e, 0x3, 0x10001, 0x8, 0x27, 0xffffff6e, 0xc6e, 0x4, 0xc, 0x9, 0x4, 0x8, 0x3, 0xffffffff, 0x200, 0x5, 0x7, 0x40, 0x6, 0x6, 0x8, 0xfffffff8, 0x9, 0x10, 0x40, 0x7fffffff, 0xfff, 0x5, 0x8, 0x10000, 0x9, 0x5, 0x1f2, 0x7, 0xfcae, 0x6, 0x8001, 0x4, 0x7, 0x9a, 0xdee, 0x0, 0x9, 0x7, 0x8, 0x10, 0x1ff, 0x3ff, 0x344ec516, 0xba7, 0x679, 0x5, 0xa, 0x418, 0x97, 0xfffffffe, 0x2b, 0x0, 0x6, 0x3, 0x8001, 0x7, 0x9, 0xd, 0x4, 0x0, 0x300000, 0x6, 0x62, 0x3, 0x6, 0x9, 0x401, 0x800, 0x1, 0x8, 0x7, 0x401, 0x3907, 0x800, 0x3, 0x10000, 0x4, 0x4, 0x3, 0x8, 0x2f, 0x6, 0x6, 0x1, 0x3, 0x1000, 0x80, 0xfffff800, 0x6, 0x0, 0x9, 0x6, 0xd, 0x7, 0x4, 0xcc, 0x5, 0x9, 0x0, 0x61d0, 0x73ea81ea, 0x5, 0x4, 0xb, 0xaf9d, 0x4, 0xf, 0x0, 0x5682, 0xc50, 0x3, 0x6, 0x2, 0x77, 0x800, 0x8, 0x0, 0x9, 0x2, 0x9, 0x5, 0x4, 0x8001, 0x3, 0x9, 0x0, 0x0, 0x2, 0x7f, 0x3, 0x1000, 0x2, 0x9, 0x1800, 0xff, 0x0, 0x6, 0x0, 0x7, 0x4, 0x6, 0x1, 0x9be, 0xfb, 0x7fff, 0x8, 0x86350108, 0x1d, 0x2, 0x8, 0xb5, 0xc, 0x56, 0x34c, 0x1, 0xf15, 0x4, 0xffffffc5, 0x1ff, 0x8, 0x7, 0x5d, 0x2, 0x1, 0x8, 0x4, 0xb6, 0x6, 0x0, 0x4, 0x2, 0x6, 0x5, 0x539, 0x5, 0x4c12fac8, 0xe4, 0x2, 0x5, 0x8, 0x2e, 0x7, 0x3ff, 0x9, 0x7, 0x3, 0x0, 0x80, 0x80000000], 0x5, [{[0xfff, 0xf], @multicast2}, {[0x1, 0x7], @rand_addr=0x64010102}, {[0x7, 0x2], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x7f, 0x3ff], @dev={0xac, 0x14, 0x14, 0x26}}, {[0x8987, 0x6], @private=0xa010102}]}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x4519}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8000, 'system_u:object_r:devpts_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x12, 0x805, 'macvlan1\x00', 'veth1_to_bond\x00', 'wlan0\x00', 'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0x1fe, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xd8, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}, {0x9, 0x10, 0x10, 'macvlan0\x00', 'bridge_slave_0\x00', 'vxcan1\x00', 'erspan0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xa8, 0xa8, 0xf8, [], [@snat={'snat\x00', 0x10, {{@random="7f903c95b0d6", 0xfffffffffffffffc}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x80000001, 'syz1\x00', {0x2}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x40, 0x9c4a665b21c55fbb, 'pimreg1\x00', 'pimreg\x00', 'veth0_to_batadv\x00', 'macvtap0\x00', @broadcast, [0x0, 0xff], @local, [0xff, 0x5305accd2022a5a5, 0x0, 0x0, 0xff, 0xff], 0x0, 0xa0, 0x110, 0x148, [@state={{'state\x00', 0x0, 0x8}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, 0x8000000000000002}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0x1050)

19.602574ms ago: executing program 4 (id=3638):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=<r1=>r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) (async)
r2 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00'}, 0x94) (async, rerun: 32)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20004855) (async)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000130006000000850000006100000085000100070000009500000000000000a4d17bfd12dc5c64507749cf50cf374fde2b73a4fee1cb33689f39c28d9ab54cf361e016516b6d23f6ca2d48"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendfile(r7, r8, 0x0, 0x1)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0x658}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async, rerun: 32)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async, rerun: 32)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r10 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)

13.689561ms ago: executing program 0 (id=3639):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000b00)={0x8, 0x4, 0x80000000}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000400)=""/222}, 0x78)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000c40)='GPL\x00'}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000000c40)='GPL\x00'}, 0x94)
writev(r2, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='X\x00\x00', 0x3}], 0x1) (async)
writev(r2, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='X\x00\x00', 0x3}], 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/249, 0x101d0}], 0x1}, 0x40000000)
sendmsg$tipc(r4, &(0x7f00000006c0)={0x0, 0x810100, &(0x7f0000000700)=[{&(0x7f0000000740)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007000000800000001f0000009111ac00000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

0s ago: executing program 2 (id=3640):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@private=0xa010101, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x87}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0x52ab, 0x8, 0x2, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0xf, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getpid() (async)
r3 = getpid()
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@remote, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x5}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@remote, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x5}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f0000000a40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000000000000000400020004000b00060003008a"], 0x28}, 0x1, 0x0, 0x0, 0x4000018}, 0x4004880)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
r7 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r7, &(0x7f0000000900)={0xa, 0x5000, 0x0, @loopback, 0x3}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084)
writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000b80)="06a5a714e3887ccdf7f97506f176b8887366992f93a239c9ec880c05a77e6e4594e3e1dba79b819dc66a1412bfae3200c03783ef3f8a4709338a71c043f6f8c7f31450d1dc4e27ffc3c608a055ad3d1aed9289374e8d07172456de4393b0edbfbf77ccfaae67adc77d64548e7e03db81bf9a530ad3c2ab781da0ba4f6ff0eca5304f032bd7eab545113cf8", 0x8b}, {&(0x7f0000000c40)="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", 0x37c}], 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r4, 0x0, 0xe, 0x0, &(0x7f0000000b40)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

id length.
[  305.276761][T15908] netlink: 'syz.1.2482': attribute type 1 has an invalid length.
[  305.362932][T15911] 8021q: adding VLAN 0 to HW filter on device bond15
[  305.448453][T15917] syzkaller0: entered promiscuous mode
[  305.448475][T15917] syzkaller0: entered allmulticast mode
[  305.523989][T15924] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  305.545765][T15914] bond15: entered promiscuous mode
[  305.545808][T15914] bond15: entered allmulticast mode
[  306.885054][T16031] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  306.930401][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  307.075375][T16059] x_tables: unsorted underflow at hook 3
[  307.253785][T16076] __nla_validate_parse: 69 callbacks suppressed
[  307.253803][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2506'.
[  307.343867][T15983] workqueue: Failed to create a rescuer kthread for wq "nfc26_nci_tx_wq": -EINTR
[  307.741736][T16108] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  307.763511][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2511'.
[  308.133201][T16134] ip_tables: iptables: counters copy to user failed while replacing table
[  308.210381][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  308.251120][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'.
[  308.492402][T16152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'.
[  308.650753][T16160] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  308.660579][T16166] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2524'.
[  309.749413][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'.
[  309.791941][T16208] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2531'.
[  309.856718][T16216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2533'.
[  309.857610][T16216] sctp: [Deprecated]: syz.3.2533 (pid 16216) Use of int in max_burst socket option.
[  309.857610][T16216] Use struct sctp_assoc_value instead
[  309.858435][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2533'.
[  310.098128][T16224] xt_connbytes: Forcing CT accounting to be enabled
[  310.098153][T16224] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  310.257278][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'.
[  310.691661][T16248] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  310.755401][T16248] smc: net device lo applied user defined pnetid SYZ0
[  311.002373][T16268] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  311.038677][T16264] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  311.147487][T16273] 8021q: adding VLAN 0 to HW filter on device team0
[  311.208673][T16273] veth1_macvtap: left promiscuous mode
[  311.209775][T16273] veth0_macvtap: left promiscuous mode
[  311.223357][T16273] veth0_macvtap: entered promiscuous mode
[  311.224506][T16273] veth1_macvtap: entered promiscuous mode
[  311.244696][T16275] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  311.266448][T16273] 8021q: adding VLAN 0 to HW filter on device bond1
[  311.270388][T16273] 8021q: adding VLAN 0 to HW filter on device bond2
[  311.287202][T16273] 8021q: adding VLAN 0 to HW filter on device bond3
[  311.304111][T16273] 8021q: adding VLAN 0 to HW filter on device eth0
[  311.305946][T16273] 8021q: adding VLAN 0 to HW filter on device eth1
[  311.307772][T16273] 8021q: adding VLAN 0 to HW filter on device eth2
[  311.309730][T16273] 8021q: adding VLAN 0 to HW filter on device eth3
[  311.342697][T16273] 8021q: adding VLAN 0 to HW filter on device bond4
[  311.346237][T16273] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  311.451361][T14885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.451392][T14885] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  311.451792][T14885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.451815][T14885] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  311.452382][T14885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.452404][T14885] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  311.533755][T14885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.533787][T14885] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  312.435147][T16346] syzkaller1: entered promiscuous mode
[  312.435168][T16346] syzkaller1: entered allmulticast mode
[  312.787036][T16366] __nla_validate_parse: 3 callbacks suppressed
[  312.787056][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'.
[  312.987904][T16374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2576'.
[  312.989541][T16374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2576'.
[  312.989559][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'.
[  312.989575][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'.
[  313.030180][T16374] validate_nla: 59 callbacks suppressed
[  313.030196][T16374] netlink: 'syz.3.2576': attribute type 1 has an invalid length.
[  313.085069][T16374] 8021q: adding VLAN 0 to HW filter on device bond16
[  313.149188][T16381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2576'.
[  313.162787][T16385] netlink: 'syz.3.2576': attribute type 1 has an invalid length.
[  313.169458][T16379] bond16: (slave gretap3): making interface the new active one
[  313.195575][T16379] bond16: (slave gretap3): Enslaving as an active interface with an up link
[  313.196499][T16374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2576'.
[  313.196517][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'.
[  313.196532][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'.
[  313.364879][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2579'.
[  313.679530][T16406] ipip0: entered allmulticast mode
[  314.468813][T16426] x_tables: duplicate underflow at hook 2
[  314.518008][T16423] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  314.527388][T16423] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  315.056166][T16456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.061924][T16455] netlink: 'syz.3.2595': attribute type 5 has an invalid length.
[  315.558673][T16460] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  315.638179][T16477] netlink: 'syz.3.2602': attribute type 1 has an invalid length.
[  315.651558][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  315.802509][T16477] 8021q: adding VLAN 0 to HW filter on device bond18
[  315.806011][T16477] bond17: (slave bond18): making interface the new active one
[  315.808252][T16477] bond17: (slave bond18): Enslaving as an active interface with an up link
[  315.909635][T16479] bond17: (slave gretap4): Enslaving as a backup interface with an up link
[  315.924042][T16477] 8021q: adding VLAN 0 to HW filter on device bond17
[  316.419394][T16507] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  316.735995][T16526] vlan0: entered promiscuous mode
[  317.044658][T16549] ±ÿ: renamed from lo (while UP)
[  317.175091][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  317.769617][T16579] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  317.861901][T16588] __nla_validate_parse: 20 callbacks suppressed
[  317.861920][T16588] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2633'.
[  317.861941][T16588] netlink: 'syz.2.2633': attribute type 3 has an invalid length.
[  317.940443][T16587] netlink: 'syz.0.2634': attribute type 2 has an invalid length.
[  317.940464][T16587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2634'.
[  318.034470][T16601] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  318.034879][T16601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2638'.
[  318.167356][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'.
[  318.227273][T16614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2644'.
[  318.240489][T16607] ip_tables: iptables: counters copy to user failed while replacing table
[  318.293258][T16610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'.
[  318.442641][T16621] bridge0: port 1(veth0) entered disabled state
[  318.476538][T16621] tipc: Resetting bearer <eth:syzkaller0>
[  318.476742][T16621] tipc: Resetting bearer <eth:syzkaller0>
[  318.504280][T16626] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  318.960942][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'.
[  319.006028][T16654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2654'.
[  319.185597][T16674] netlink: 'syz.4.2656': attribute type 3 has an invalid length.
[  319.185618][T16674] netlink: 'syz.4.2656': attribute type 1 has an invalid length.
[  319.185629][T16674] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2656'.
[  319.185655][T16674] NCSI netlink: No device for ifindex 0
[  319.186147][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'.
[  319.275628][T16677] team0: entered promiscuous mode
[  319.280430][T16677] team0: entered allmulticast mode
[  319.519376][T16688] xt_connbytes: Forcing CT accounting to be enabled
[  319.519403][T16688] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  319.699679][T16699] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  320.138237][T16731] xt_hashlimit: size too large, truncated to 1048576
[  324.051777][T16722] syzkaller0: left promiscuous mode
[  324.051798][T16722] syzkaller0: left allmulticast mode
[  324.054284][T16733] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.084855][T16733] bridge_slave_0 (unregistering): left allmulticast mode
[  324.084878][T16733] bridge_slave_0 (unregistering): left promiscuous mode
[  324.084960][T16733] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.447946][T16762] __nla_validate_parse: 3 callbacks suppressed
[  324.447964][T16762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2672'.
[  324.544154][T16739] syzkaller1: entered promiscuous mode
[  324.544180][T16739] syzkaller1: entered allmulticast mode
[  324.629232][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'.
[  324.852322][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  324.894836][T16783] netlink: 'syz.1.2683': attribute type 153 has an invalid length.
[  324.977187][T16787] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  324.984549][T16787] ip_tables: iptables: counters copy to user failed while replacing table
[  325.013264][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'.
[  325.032447][T16790] macsec0: entered promiscuous mode
[  325.032468][T16790] bridge0: entered promiscuous mode
[  325.032668][T16790] macsec0: entered allmulticast mode
[  325.032680][T16790] bridge0: entered allmulticast mode
[  325.035250][T16790] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  325.086618][T16792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2686'.
[  325.238032][T16797] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  325.339315][T16798] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  325.519205][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2694'.
[  325.544764][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'.
[  325.544784][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2695'.
[  325.555292][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2694'.
[  325.871963][T16847] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2698'.
[  326.969002][T16878] sctp: [Deprecated]: syz.3.2709 (pid 16878) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.969002][T16878] Use struct sctp_sack_info instead
[  326.969057][T16879] sctp: [Deprecated]: syz.3.2709 (pid 16879) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.969057][T16879] Use struct sctp_sack_info instead
[  327.757330][T16911] netlink: 'syz.2.2708': attribute type 1 has an invalid length.
[  327.843914][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  327.847999][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  327.865588][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  327.866978][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  327.869827][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  327.928043][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  327.937999][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  327.947443][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  327.951157][T16911] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.962419][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  327.965439][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  328.000428][T16915] bond0: (slave geneve4): making interface the new active one
[  328.003020][T16915] bond0: (slave geneve4): Enslaving as an active interface with an up link
[  328.164397][T16922] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2719'.
[  328.958529][T16914] rxe_eth0 speed is unknown, defaulting to 1000
[  329.023594][T16959] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  329.396485][T16979] netlink: 'syz.2.2735': attribute type 1 has an invalid length.
[  329.398748][T16979] netlink: 'syz.2.2735': attribute type 4 has an invalid length.
[  329.423936][T16976] nbd: must specify at least one socket
[  329.467384][T16914] lo speed is unknown, defaulting to 1000
[  329.669814][T16990] __nla_validate_parse: 2 callbacks suppressed
[  329.677479][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2736'.
[  329.972145][T16997] netlink: 'syz.1.2737': attribute type 1 has an invalid length.
[  329.972166][T16997] netlink: 'syz.1.2737': attribute type 1 has an invalid length.
[  330.052056][ T5647] Bluetooth: hci5: command tx timeout
[  330.642759][T17021] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  331.027964][T17044] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  331.034073][T17046] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  331.034098][T17046] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  331.275143][T17056] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2745'.
[  331.275164][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'.
[  331.275177][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'.
[  331.377397][T17061] xt_l2tp: v2 doesn't support IP mode
[  331.379617][T16914] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.379784][T16914] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.400228][T16914] bridge_slave_0: entered allmulticast mode
[  331.401897][T16914] bridge_slave_0: entered promiscuous mode
[  331.403000][T17061] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2747'.
[  331.430255][T16914] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.430455][T16914] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.430599][T16914] bridge_slave_1: entered allmulticast mode
[  331.434445][T16914] bridge_slave_1: entered promiscuous mode
[  331.520661][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.523912][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.574588][T16914] team0: Port device team_slave_0 added
[  331.577501][T16914] team0: Port device team_slave_1 added
[  331.618499][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.618515][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.618535][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.665390][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.665406][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.665429][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.671244][T17064] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2748'.
[  331.823939][T17073] macsec1: entered promiscuous mode
[  331.823967][T17073] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  331.824198][T17073] macsec1: entered allmulticast mode
[  331.824215][T17073] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  331.824603][T17073] 8021q: adding VLAN 0 to HW filter on device macsec1
[  331.825907][T17073] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  331.825931][T17073] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  331.887607][T17076] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  331.887671][T17076] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  331.966447][T16914] hsr_slave_0: entered promiscuous mode
[  331.967501][T16914] hsr_slave_1: entered promiscuous mode
[  331.968222][T16914] debugfs: 'hsr0' already exists in 'hsr'
[  331.968320][T16914] Cannot create hsr debugfs directory
[  332.141315][ T5647] Bluetooth: hci5: command tx timeout
[  332.283459][T16914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.283492][T16914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  332.283514][T16914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  332.416975][T16914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.417009][T16914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  332.417031][T16914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  332.553505][T17105] ip_tables: iptables: counters copy to user failed while replacing table
[  332.639711][T17113] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2758'.
[  332.665169][T16914] team0: Port device netdevsim1 removed
[  332.666199][T16914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.666227][T16914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  332.666248][T16914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  332.668178][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'.
[  332.668194][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2759'.
[  332.673894][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'.
[  332.891581][T16914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.891616][T16914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  332.891638][T16914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  333.112469][T16914] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  333.273224][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  333.274798][T16914] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  333.292493][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  333.311274][T16914] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  333.330965][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  333.331794][T16914] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.342703][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  333.438711][T17155] netlink: 'syz.2.2769': attribute type 1 has an invalid length.
[  333.498660][T17155] 8021q: adding VLAN 0 to HW filter on device bond15
[  333.566787][T17155] bond15: (slave veth0_to_bond): making interface the new active one
[  333.567690][T17155] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  333.598860][T17155] macvlan0: entered promiscuous mode
[  333.598889][T17155] macvlan0: entered allmulticast mode
[  333.599510][T17155] bond15: entered promiscuous mode
[  333.599525][T17155] veth0_to_bond: entered promiscuous mode
[  333.624358][T17155] bond15: entered allmulticast mode
[  333.624376][T17155] veth0_to_bond: entered allmulticast mode
[  333.625073][T17155] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  333.625532][T17155] bond15: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  333.625779][T17155] bond15: left allmulticast mode
[  333.625794][T17155] veth0_to_bond: left allmulticast mode
[  333.625829][T17155] bond15: left promiscuous mode
[  333.625840][T17155] veth0_to_bond: left promiscuous mode
[  333.865480][T16914] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.962160][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.962183][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.988930][T17176] bond1: entered allmulticast mode
[  333.997499][T17176] 8021q: adding VLAN 0 to HW filter on device bond1
[  333.998412][T17177] bond1: option mode: unable to set because the bond device is up
[  333.999040][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.999057][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.999264][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.999277][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  333.999482][T17171] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  334.017112][T16914] 8021q: adding VLAN 0 to HW filter on device team0
[  334.035960][T17179] xt_HMARK: proto mask must be zero with L3 mode
[  334.086918][T14887] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.087054][T14887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.127528][T17176] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  334.135543][T17176] bond1: (slave macvlan4): Enslaving as a backup interface with a down link
[  334.166624][T14904] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.166734][T14904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.210505][ T5647] Bluetooth: hci5: command tx timeout
[  334.307988][T16914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  334.564234][T17189] bond12 (unregistering): Released all slaves
[  335.473559][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.612103][T17222] __nla_validate_parse: 7 callbacks suppressed
[  335.612123][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'.
[  335.642476][T17222] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2782'.
[  335.669879][T16914] veth0_vlan: entered promiscuous mode
[  335.698555][T16914] veth1_vlan: entered promiscuous mode
[  335.835108][T16914] veth0_macvtap: entered promiscuous mode
[  335.842700][T16914] veth1_macvtap: entered promiscuous mode
[  335.889456][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.922401][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.962246][T14907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.962287][T14907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.087273][T17243] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  336.154748][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.233836][ T1152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.290186][ T5647] Bluetooth: hci5: command tx timeout
[  336.356523][T14887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.356544][T14887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.556304][T14907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.556325][T14907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.844700][T17268] x_tables: duplicate underflow at hook 1
[  337.130175][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'.
[  337.130257][T17279] bridge_slave_1: left allmulticast mode
[  337.130275][T17279] bridge_slave_1: left promiscuous mode
[  337.130484][T17279] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.202367][T17279] bridge_slave_0: left allmulticast mode
[  337.202394][T17279] bridge_slave_0: left promiscuous mode
[  337.202618][T17279] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.217521][T17284] ip_tables: iptables: counters copy to user failed while replacing table
[  337.328956][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2795'.
[  337.586766][T17300] validate_nla: 59 callbacks suppressed
[  337.586785][T17300] netlink: 'syz.4.2797': attribute type 1 has an invalid length.
[  337.642450][T17298] syzkaller0: entered promiscuous mode
[  337.642472][T17298] syzkaller0: entered allmulticast mode
[  337.945944][T17320] vlan2: entered promiscuous mode
[  337.945969][T17320] bond0: entered promiscuous mode
[  337.945981][T17320] bond_slave_0: entered promiscuous mode
[  337.946191][T17320] bond_slave_1: entered promiscuous mode
[  338.022674][T17322] netlink: 'syz.4.2802': attribute type 1 has an invalid length.
[  338.086243][T17325] x_tables: duplicate underflow at hook 1
[  338.166551][T17328] netlink: 'syz.4.2802': attribute type 10 has an invalid length.
[  338.166573][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'.
[  338.167535][T17328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.167548][T17328] IPv6: NLM_F_CREATE should be set when creating new route
[  338.167586][T17328] IPv6: NLM_F_CREATE should be set when creating new route
[  338.425829][T17342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2807'.
[  338.504413][T17347] ip_tables: iptables: counters copy to user failed while replacing table
[  338.579110][T17344] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  338.866283][T17358] xt_hashlimit: max too large, truncated to 1048576
[  338.884309][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'.
[  338.884352][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'.
[  338.916914][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'.
[  339.021309][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880543fc400: rx timeout, send abort
[  339.127738][T17377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2819'.
[  339.147985][T17373] dvmrp0: entered allmulticast mode
[  339.155387][T17374] dvmrp0: left allmulticast mode
[  339.282099][T17371] netlink: 'syz.1.2818': attribute type 1 has an invalid length.
[  339.337486][T17384] netlink: 'syz.2.2822': attribute type 1 has an invalid length.
[  339.508650][T17387] xt_connbytes: Forcing CT accounting to be enabled
[  339.508675][T17387] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  340.971662][T17436] netlink: 'syz.3.2837': attribute type 1 has an invalid length.
[  340.992266][T17432] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  341.517264][T17454] veth1_vlan: left promiscuous mode
[  341.519109][T17438] __nla_validate_parse: 6 callbacks suppressed
[  341.519125][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2835'.
[  341.525115][T17454] veth0_vlan: left promiscuous mode
[  341.527019][T17454] veth0_vlan: entered promiscuous mode
[  341.544496][T17454] veth1_vlan: entered promiscuous mode
[  341.586608][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  341.593893][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  341.601453][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  341.602555][T17454] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  341.634358][T17454] bridge1: left promiscuous mode
[  341.647830][T17454] 8021q: adding VLAN 0 to HW filter on device bond2
[  341.654174][T17454] bond3: left promiscuous mode
[  341.654193][T17454] bridge2: left promiscuous mode
[  341.658472][T17454] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.831935][T17454] 8021q: adding VLAN 0 to HW filter on device batadv1
[  341.848525][T17454] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.869645][T17454] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.886030][T17454] 8021q: adding VLAN 0 to HW filter on device bond5
[  341.905424][T17454] bond8: left promiscuous mode
[  341.905445][T17454] geneve2: left promiscuous mode
[  341.915966][T17454] bond9: left promiscuous mode
[  341.916378][T17454] 8021q: adding VLAN 0 to HW filter on device bond9
[  341.928827][T17454] 8021q: adding VLAN 0 to HW filter on device bond11
[  341.931502][ T6378] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  341.942172][T17454] bridge0: port 1(vlan2) entered blocking state
[  341.942289][T17454] bridge0: port 1(vlan2) entered forwarding state
[  341.946713][T17454] bond12: left promiscuous mode
[  341.947341][T17454] bridge7: left promiscuous mode
[  341.960927][T17454] 8021q: adding VLAN 0 to HW filter on device bond13
[  341.963847][T17454] veth0_to_team: entered promiscuous mode
[  341.976260][T17454] macsec0: left promiscuous mode
[  341.980673][T14887] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  341.980700][T14887] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  341.980735][T14887] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  341.980755][T14887] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  341.980785][T14887] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  341.980806][T14887] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  342.077572][T14886] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  342.088402][T14886] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  342.110497][T14886] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.110526][T14886] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  342.130130][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  342.130366][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  342.191278][T17478] syzkaller0: entered promiscuous mode
[  342.191299][T17478] syzkaller0: entered allmulticast mode
[  342.345377][T17488] macsec0: entered promiscuous mode
[  342.348056][T17488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'.
[  342.377523][T17488] veth1_macvtap: left promiscuous mode
[  342.413185][T17488] macsec0 (unregistering): left promiscuous mode
[  342.432866][T17494] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2849'.
[  342.644151][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.644219][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.668156][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.673359][T17507] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  342.675504][T17507] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  342.675539][T17507] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  342.766364][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.774300][ T6376] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  342.784624][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.793975][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.799491][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.815469][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.817353][T17507] syzkaller0 speed is unknown, defaulting to 1000
[  342.931164][T17511] Cannot find del_set index 3 as target
[  343.105735][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'.
[  345.402896][T17529] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  345.458697][T17529] bond12: entered promiscuous mode
[  345.459202][T17529] 8021q: adding VLAN 0 to HW filter on device bond12
[  345.459673][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2859'.
[  345.515614][T17540] bond12: (slave bridge9): making interface the new active one
[  345.515636][T17540] bridge9: entered promiscuous mode
[  345.538161][T17540] bond12: (slave bridge9): Enslaving as an active interface with an up link
[  345.618462][T17538] bond16: option ad_select: invalid value (34)
[  345.635145][T17538] bond16 (unregistering): Released all slaves
[  345.753093][T17538] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2861'.
[  345.970558][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  346.248674][T17572] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2872'.
[  346.370268][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  346.489633][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2874'.
[  346.567322][T17594] bridge0: entered allmulticast mode
[  346.792924][T17616] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  346.966650][T17625] netlink: 'syz.1.2881': attribute type 10 has an invalid length.
[  347.004938][T17629] netlink: 'syz.1.2881': attribute type 10 has an invalid length.
[  347.066497][T17632] netlink: 'syz.0.2882': attribute type 1 has an invalid length.
[  347.186294][T17642] netlink: 'syz.1.2885': attribute type 2 has an invalid length.
[  347.186316][T17642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2885'.
[  347.211309][T17642] netlink: 'syz.1.2885': attribute type 10 has an invalid length.
[  347.214808][T17642] team0: Device dummy0 failed to register rx_handler
[  347.241968][T17642] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  347.747197][T17663] syzkaller0: entered promiscuous mode
[  347.747218][T17663] syzkaller0: entered allmulticast mode
[  347.756476][ T6403] syzkaller0 speed is unknown, defaulting to 1000
[  347.935098][T17673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2894'.
[  348.143254][T17686] ip_tables: iptables: counters copy to user failed while replacing table
[  348.167609][T17689] netlink: 'syz.1.2898': attribute type 16 has an invalid length.
[  348.167627][T17689] netlink: 'syz.1.2898': attribute type 17 has an invalid length.
[  348.238903][T17689] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.239013][T17689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.258500][T17689] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.271053][T17689] 8021q: adding VLAN 0 to HW filter on device team0
[  348.357623][T17695] ip_tables: iptables: counters copy to user failed while replacing table
[  348.479306][T17689] veth1_vlan: left promiscuous mode
[  348.484972][T17689] veth0_vlan: left promiscuous mode
[  348.497414][T17689] veth0_vlan: entered promiscuous mode
[  348.503647][T17689] veth1_vlan: entered promiscuous mode
[  348.527224][T17689] veth1_macvtap: left promiscuous mode
[  348.541659][T17689] veth0_macvtap: left promiscuous mode
[  348.542978][T17689] veth0_macvtap: entered promiscuous mode
[  348.548890][T17689] veth1_macvtap: entered promiscuous mode
[  348.564796][T17689] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  348.566608][T17689] 8021q: adding VLAN 0 to HW filter on device bond1
[  348.572691][T17689] 8021q: adding VLAN 0 to HW filter on device bond2
[  348.622832][T17689] syzkaller0: left promiscuous mode
[  348.622851][T17689] syzkaller0: left allmulticast mode
[  348.645584][T17689] 8021q: adding VLAN 0 to HW filter on device bond3
[  348.662242][T17689] 8021q: adding VLAN 0 to HW filter on device bond4
[  348.664508][T17689] bond5: left promiscuous mode
[  348.664524][T17689] bridge4: left promiscuous mode
[  348.664715][T17689] bond5: left allmulticast mode
[  348.664727][T17689] bridge4: left allmulticast mode
[  348.666419][T17689] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.688537][T17689] 8021q: adding VLAN 0 to HW filter on device bond6
[  348.689644][T17689] vlan2: left promiscuous mode
[  348.689664][T17689] bridge0: left promiscuous mode
[  348.706094][T17689] 8021q: adding VLAN 0 to HW filter on device bond7
[  348.745623][T17689] dummy0: entered allmulticast mode
[  348.745664][T17689] dummy0: entered promiscuous mode
[  348.749546][T17689] macvtap1: left allmulticast mode
[  348.749564][T17689] dummy0: left allmulticast mode
[  348.768070][T17689] 8021q: adding VLAN 0 to HW filter on device eth0
[  348.775647][T17689] 8021q: adding VLAN 0 to HW filter on device eth1
[  348.779208][T17689] 8021q: adding VLAN 0 to HW filter on device eth2
[  348.784974][T17689] 8021q: adding VLAN 0 to HW filter on device eth3
[  348.786786][T17689] vcan0: left promiscuous mode
[  348.786802][T17689] vcan0: left allmulticast mode
[  348.787757][T17689] vti0: left promiscuous mode
[  348.794468][T17689] 8021q: adding VLAN 0 to HW filter on device bond10
[  348.796800][T17689] 8021q: adding VLAN 0 to HW filter on device bond11
[  348.804524][T17689] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  348.809122][T17689] bond12: left promiscuous mode
[  348.809138][T17689] bridge9: left promiscuous mode
[  348.821750][T14886] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  348.841548][T14886] bond2: (slave veth3): making interface the new active one
[  348.853091][T14886] bond2: active interface up!
[  348.909589][T14907] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.909732][T14907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.167637][T17711] netlink: 'syz.1.2901': attribute type 11 has an invalid length.
[  349.173882][T14887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.178908][ T5985] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.179025][ T5985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.179073][ T5985] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.119503][T17732] xt_hashlimit: size too large, truncated to 1048576
[  350.128082][T17732] xt_NFQUEUE: number of queues (65529) out of range (got 65536)
[  350.500522][T17737] netlink: 'syz.0.2907': attribute type 11 has an invalid length.
[  350.564904][T17739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2908'.
[  350.666135][T17742] syzkaller0: entered promiscuous mode
[  350.666155][T17742] syzkaller0: entered allmulticast mode
[  351.044981][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2916'.
[  351.195988][T17767] vti0: entered promiscuous mode
[  351.679472][   T30] audit: type=1804 audit(1794071302.560:9): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2926" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3071 res=1 errno=0
[  351.679523][   T30] audit: type=1800 audit(1794071302.560:10): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2926" name="cgroup.controllers" dev="tmpfs" ino=3071 res=0 errno=-22
[  351.679637][   T30] audit: type=1804 audit(1794071302.560:11): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2926" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3071 res=1 errno=0
[  351.893903][T17815] syzkaller0: entered promiscuous mode
[  351.893925][T17815] syzkaller0: entered allmulticast mode
[  352.271870][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.271894][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.305215][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.305235][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.305646][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.305669][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'.
[  352.452720][T17839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.485403][T17842] netlink: 'syz.4.2935': attribute type 5 has an invalid length.
[  352.703793][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  352.718350][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  352.726729][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  352.728217][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  352.728853][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  352.781851][T17852] GUP no longer grows the stack in syz.0.2937 (17852): 200000003000-20000000a000 (200000001000)
[  352.781885][T17852] CPU: 1 UID: 0 PID: 17852 Comm: syz.0.2937 Not tainted syzkaller #0 PREEMPT(full) 
[  352.781929][T17852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  352.781955][T17852] Call Trace:
[  352.781963][T17852]  <TASK>
[  352.781971][T17852]  dump_stack_lvl+0xe8/0x150
[  352.782077][T17852]  __get_user_pages+0x1b01/0x1ea0
[  352.782158][T17852]  ? rcu_is_watching+0x16/0xb0
[  352.782211][T17852]  __gup_longterm_locked+0xe24/0x16f0
[  352.782261][T17852]  gup_fast_fallback+0x3a4/0x27f0
[  352.782336][T17852]  ? __pfx_gup_fast_fallback+0x10/0x10
[  352.782365][T17852]  ? is_valid_gup_args+0x11f/0x200
[  352.782392][T17852]  ? get_user_pages_fast+0x4d/0xb0
[  352.782419][T17852]  __iov_iter_get_pages_alloc+0x378/0xa40
[  352.782562][T17852]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  352.782655][T17852]  ? __fget_files+0x2a/0x420
[  352.782707][T17852]  iov_iter_get_pages2+0x5e/0xa0
[  352.782733][T17852]  __se_sys_vmsplice+0x844/0x16f0
[  352.782778][T17852]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  352.782803][T17852]  ? __pfx_futex_wait+0x10/0x10
[  352.782923][T17852]  do_syscall_64+0x166/0x520
[  352.783016][T17852]  ? trace_irq_disable+0x3b/0x140
[  352.783045][T17852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.783081][T17852]  ? clear_bhb_loop+0x70/0xc0
[  352.783103][T17852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.783121][T17852] RIP: 0033:0x7fc4a0f9fb19
[  352.783148][T17852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.783163][T17852] RSP: 002b:00007fc49f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  352.783184][T17852] RAX: ffffffffffffffda RBX: 00007fc4a1225fa0 RCX: 00007fc4a0f9fb19
[  352.783196][T17852] RDX: 0000000000000001 RSI: 0000200000000e00 RDI: 0000000000000007
[  352.783207][T17852] RBP: 00007fc4a1037b70 R08: 0000000000000000 R09: 0000000000000000
[  352.783218][T17852] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  352.783228][T17852] R13: 00007fc4a1226038 R14: 00007fc4a1225fa0 R15: 00007ffc4b4cfda8
[  352.783260][T17852]  </TASK>
[  352.786436][T17852] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  352.787445][T17852] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  353.010048][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  353.168562][T17864] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2938'.
[  353.573867][T17876] netlink: 'syz.0.2942': attribute type 9 has an invalid length.
[  353.573887][T17876] netlink: 'syz.0.2942': attribute type 4 has an invalid length.
[  353.650149][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  353.678662][T17881] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  353.679141][T17850] rxe_eth0 speed is unknown, defaulting to 1000
[  353.883469][T17850] lo speed is unknown, defaulting to 1000
[  353.942803][T17883] pimreg0: tun_chr_ioctl cmd 1074025677
[  353.942919][T17883] pimreg0: linktype set to 804
[  354.117210][T17850] syzkaller0 speed is unknown, defaulting to 1000
[  354.151328][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2944'.
[  354.151352][T17888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2944'.
[  354.151366][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2944'.
[  354.553243][T17914] gretap1: entered promiscuous mode
[  354.653951][T17914] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  354.705806][T17917] ksmbd: Unknown IPC event: 8, ignore.
[  354.853367][ T5647] Bluetooth: hci0: command tx timeout
[  354.930067][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  355.132957][T17850] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.133260][T17850] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.134067][T17850] bridge_slave_0: entered allmulticast mode
[  355.139688][T17850] bridge_slave_0: entered promiscuous mode
[  355.172502][T17850] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.172611][T17850] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.173606][T17850] bridge_slave_1: entered allmulticast mode
[  355.177900][T17850] bridge_slave_1: entered promiscuous mode
[  355.263352][T17850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.266747][T17850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.317252][T17850] team0: Port device team_slave_0 added
[  355.328475][T17850] team0: Port device team_slave_1 added
[  355.380041][T17850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.380058][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.380079][T17850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.381998][T17850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.382011][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.382033][T17850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.481601][T17940] netlink: 'syz.0.2954': attribute type 11 has an invalid length.
[  355.537686][T17850] hsr_slave_0: entered promiscuous mode
[  355.539039][T17850] hsr_slave_1: entered promiscuous mode
[  355.539707][T17850] debugfs: 'hsr0' already exists in 'hsr'
[  355.539722][T17850] Cannot create hsr debugfs directory
[  355.911143][T17953] x_tables: duplicate underflow at hook 1
[  355.928705][T17957] IPVS: ip_vs_edit_dest(): server weight less than zero
[  355.995720][T17957] pimreg9: entered allmulticast mode
[  356.196021][T17972] ip_tables: iptables: counters copy to user failed while replacing table
[  356.285337][T17973] x_tables: duplicate underflow at hook 3
[  356.293419][T17850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.293449][T17850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  356.421684][T17972] Bluetooth: MGMT ver 1.23
[  356.511729][T17850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.511762][T17850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  356.584635][T17978] syzkaller1: entered promiscuous mode
[  356.584664][T17978] syzkaller1: entered allmulticast mode
[  356.728806][T17994] bond22: entered promiscuous mode
[  356.732677][T17994] 8021q: adding VLAN 0 to HW filter on device bond22
[  356.809478][T17850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.809510][T17850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  356.931769][ T5647] Bluetooth: hci0: command tx timeout
[  357.003692][T17850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.003725][T17850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  357.202120][T18009] Bluetooth: hci0: unsupported parameter 1280
[  357.202141][T18009] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[  357.602081][T17850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  357.619713][T18004] netlink: 'syz.4.2969': attribute type 5 has an invalid length.
[  357.634167][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.635000][T17850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  357.657711][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.658601][T17850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  357.682651][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  357.699907][T17850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.708279][T17850] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.764503][T18030] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  357.897492][T18037] netlink: 'syz.0.2976': attribute type 12 has an invalid length.
[  357.947676][T17850] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.995741][T18042] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  357.998489][T18043] __nla_validate_parse: 1 callbacks suppressed
[  357.998504][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'.
[  358.025928][T17850] 8021q: adding VLAN 0 to HW filter on device team0
[  358.045155][T14887] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.045244][T14887] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.067166][T14887] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.067288][T14887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.287569][T14886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.287590][T14886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.317466][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'.
[  358.461578][T18064] sctp: [Deprecated]: syz.4.2985 (pid 18064) Use of int in max_burst socket option.
[  358.461578][T18064] Use struct sctp_assoc_value instead
[  358.712215][T18080] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2989'.
[  358.741706][T18081] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.743223][T18081] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.787738][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2990'.
[  359.010974][ T5647] Bluetooth: hci0: command tx timeout
[  359.097306][T18086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2991'.
[  359.339148][T18103] bridge10: the hash_elasticity option has been deprecated and is always 16
[  359.398572][T18102] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  359.527640][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.613477][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'.
[  359.645353][T17850] veth0_vlan: entered promiscuous mode
[  359.671482][T17850] veth1_vlan: entered promiscuous mode
[  359.688444][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'.
[  359.759522][T17850] veth0_macvtap: entered promiscuous mode
[  359.778699][T17850] veth1_macvtap: entered promiscuous mode
[  359.814051][T17850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.859505][T17850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.911571][T14907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.911613][T14907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.911649][T14907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.911677][T14907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.127904][T14885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.127925][T14885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.169731][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3001'.
[  360.244883][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'.
[  360.246027][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'.
[  360.279173][T14904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.279191][T14904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  360.566124][T18158] nbd: must specify a device to reconfigure
[  360.981220][T18183] netlink: 'syz.3.3012': attribute type 1 has an invalid length.
[  360.981353][T18184] netlink: 'syz.3.3012': attribute type 1 has an invalid length.
[  361.090636][ T5647] Bluetooth: hci0: command tx timeout
[  361.674234][T18183] bond1: entered promiscuous mode
[  361.674528][T18183] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.752424][T18184] bond2: entered promiscuous mode
[  361.752857][T18184] 8021q: adding VLAN 0 to HW filter on device bond2
[  362.062310][T18213] netlink: 'syz.1.3018': attribute type 1 has an invalid length.
[  362.106384][T18213] bond13: option mode: invalid value (8)
[  362.118445][T18213] bond13 (unregistering): Released all slaves
[  362.243868][T18214] netlink: 'syz.1.3018': attribute type 10 has an invalid length.
[  362.669753][T18238] netlink: 'syz.1.3023': attribute type 39 has an invalid length.
[  363.053763][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.056725][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.057597][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.060394][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.076362][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.465710][T18257] batman_adv: batadv0: Adding interface: macvlan2
[  363.465728][T18257] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.465756][T18257] batman_adv: batadv0: Interface activated: macvlan2
[  363.468825][T18257] syzkaller1: entered promiscuous mode
[  363.468843][T18257] syzkaller1: entered allmulticast mode
[  363.822705][T14885] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  363.822740][T14885] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  363.822762][T14885] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.024454][T18247] rxe_eth0 speed is unknown, defaulting to 1000
[  364.055829][T14885] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.055862][T14885] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  364.055884][T14885] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.194380][T14885] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.194415][T14885] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  364.194438][T14885] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.211580][T18281] __nla_validate_parse: 10 callbacks suppressed
[  364.211598][T18281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'.
[  364.275389][T18284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3037'.
[  364.275425][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3037'.
[  364.329532][T14885] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.329563][T14885] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  364.329583][T14885] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.522718][T18247] lo speed is unknown, defaulting to 1000
[  364.720581][T18247] syzkaller0 speed is unknown, defaulting to 1000
[  364.881129][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3038'.
[  364.893166][T18298] bond13: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms
[  364.905293][T18298] bond13 (unregistering): Released all slaves
[  364.946106][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'.
[  365.138537][T14885] bridge_slave_1: left allmulticast mode
[  365.138582][T14885] bridge_slave_1: left promiscuous mode
[  365.139938][T14885] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.162590][T18313] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  365.176919][ T5647] Bluetooth: hci3: command tx timeout
[  365.553695][T14885] bond6 (unregistering): (slave bridge3): Releasing backup interface
[  365.567012][T14885] bond0 (unregistering): (slave bridge4): Releasing backup interface
[  365.567068][T14885] bridge4 (unregistering): left allmulticast mode
[  365.604408][T14885] bond1 (unregistering): Released all slaves
[  365.625944][T14885] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  365.627397][T14885] bond2 (unregistering): Released all slaves
[  365.655270][T14885] bond3 (unregistering): Released all slaves
[  365.668077][T14885] bond4 (unregistering): Released all slaves
[  365.688193][T14885] bond5 (unregistering): Released all slaves
[  365.703293][T14885] bond6 (unregistering): Released all slaves
[  365.719102][T14885] bond7 (unregistering): Released all slaves
[  365.737378][T14885] bond0 (unregistering): Released all slaves
[  365.850688][T14885] : left promiscuous mode
[  366.149724][T18340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3047'.
[  366.153209][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'.
[  366.288835][T14885] tipc: Left network mode
[  366.759928][T18356] tap0: tun_chr_ioctl cmd 2152240185
[  366.804533][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3050'.
[  366.896134][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2
[  366.936808][T18247] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.936900][T18247] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.937005][T18247] bridge_slave_0: entered allmulticast mode
[  366.938856][T18247] bridge_slave_0: entered promiscuous mode
[  366.966262][T18247] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.966368][T18247] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.966496][T18247] bridge_slave_1: entered allmulticast mode
[  366.973638][T18247] bridge_slave_1: entered promiscuous mode
[  367.164954][   T30] audit: type=1800 audit(1794071318.050:12): pid=18392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3052" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3110 res=0 errno=-22
[  367.218116][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'.
[  367.255511][ T5639] Bluetooth: hci3: command tx timeout
[  367.479069][T18247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.495248][T18247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.714420][T18247] team0: Port device team_slave_0 added
[  367.815792][T18390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.876291][T18247] team0: Port device team_slave_1 added
[  367.919999][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  368.076789][T18247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.076807][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.076827][T18247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.134590][T18247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.134606][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.134627][T18247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.256454][T18390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.339763][T18425] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  368.589727][T18390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.667659][T18247] hsr_slave_0: entered promiscuous mode
[  368.668900][T18247] hsr_slave_1: entered promiscuous mode
[  368.669689][T18247] debugfs: 'hsr0' already exists in 'hsr'
[  368.669703][T18247] Cannot create hsr debugfs directory
[  368.837371][T18390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.010080][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  369.148761][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3
[  369.340925][ T5639] Bluetooth: hci3: command tx timeout
[  369.392931][T18466] __nla_validate_parse: 2 callbacks suppressed
[  369.392950][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'.
[  369.420670][T14891] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.420723][T14891] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.890446][T14907] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.013046][T18487] netlink: 'syz.0.3074': attribute type 1 has an invalid length.
[  370.258935][T18504] smc: net device lo erased user defined pnetid SYZ0
[  370.392013][T14904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.525885][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  370.525909][T18520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3080'.
[  370.714118][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'.
[  370.763382][T18520] bond1: invalid ARP target 0.0.0.0 specified for addition
[  370.763407][T18520] bond1: option arp_ip_target: invalid value (0)
[  370.763422][T18520] bond1: Removing last arp target with arp_interval on
[  370.767621][T18520] bond1 (unregistering): Released all slaves
[  370.874672][T14885] hsr_slave_0: left promiscuous mode
[  370.886590][T14885] hsr_slave_1: left promiscuous mode
[  370.909055][T14885] veth1_macvtap: left promiscuous mode
[  370.909118][T14885] veth0_macvtap: left promiscuous mode
[  370.930913][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  370.944387][T18504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.106042][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  371.258676][T18539] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  371.271055][T18545] xt_hashlimit: size too large, truncated to 1048576
[  371.410498][ T5639] Bluetooth: hci3: command tx timeout
[  371.467087][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3086'.
[  371.518802][T14885] team0 (unregistering): Port device team_slave_1 removed
[  371.598016][T14885] team0 (unregistering): Port device team_slave_0 removed
[  372.441819][T14885] IPVS: stop unused estimator thread 0...
[  372.492950][T18247] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  372.514837][T18247] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  372.524236][T18247] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  372.557792][T18247] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  372.563048][T18247] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  372.585015][T18247] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  372.585786][T18247] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  372.641746][T18247] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  372.844925][T18247] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.887277][T18247] 8021q: adding VLAN 0 to HW filter on device team0
[  372.906600][T14907] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.906759][T14907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.938910][T14907] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.939013][T14907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.952783][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'.
[  373.358132][T18599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.490911][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  373.725832][T18618] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3098'.
[  373.823328][T18625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3098'.
[  373.856252][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[  374.187384][T18247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.918146][T18247] veth0_vlan: entered promiscuous mode
[  374.959765][T18247] veth1_vlan: entered promiscuous mode
[  375.026683][T18681] __nla_validate_parse: 2 callbacks suppressed
[  375.026702][T18681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3105'.
[  375.045248][T18247] veth0_macvtap: entered promiscuous mode
[  375.065400][T18247] veth1_macvtap: entered promiscuous mode
[  375.156838][T18247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.184972][T18684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3106'.
[  375.184996][T18684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3106'.
[  375.185507][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3106'.
[  375.185524][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3106'.
[  375.200412][T18247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.231749][T14905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.231815][T14905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.231845][T14905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.231874][T14905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.404374][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'.
[  375.478280][T14891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.478300][T14891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.635688][T14885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.635709][T14885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.856336][T18720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3114'.
[  376.002458][T18725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3114'.
[  376.076579][T18731] ip6t_rpfilter: unknown options
[  377.106814][T18763] xt_CT: No such helper "netbios-ns"
[  377.135940][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.160953][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.163644][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.187808][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.188511][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.331390][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  377.380717][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'.
[  378.626729][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.889006][T18782] xfrm0: entered allmulticast mode
[  378.897458][T18782] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  378.988189][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'.
[  379.001884][T18776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.001917][T18776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  379.001942][T18776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.026490][T18784] netlink: 'syz.0.3123': attribute type 4 has an invalid length.
[  379.158886][T18776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.158919][T18776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  379.158944][T18776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.252488][ T5639] Bluetooth: hci2: command tx timeout
[  379.324752][T18776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.324785][T18776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  379.324810][T18776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.504377][T18776] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  379.506325][T18776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.506345][T18776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  379.506358][T18776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.552481][T18767] rxe_eth0 speed is unknown, defaulting to 1000
[  379.635902][T18801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  379.636507][T18801] batman_adv: batadv0: Adding interface: gretap1
[  379.636518][T18801] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.636540][T18801] batman_adv: batadv0: Interface activated: gretap1
[  379.944690][T14905] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.944722][T14905] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.944743][T14905] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  380.036466][T18813] __nla_validate_parse: 4 callbacks suppressed
[  380.036485][T18813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3132'.
[  380.060881][T14891] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.060911][T14891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.060932][T14891] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  380.070650][T14885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  380.070678][T14885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.070698][T14885] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  380.070899][T14885] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.070922][T14885] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.070941][T14885] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  380.093877][T18767] lo speed is unknown, defaulting to 1000
[  380.222012][T18815] batadv0: entered promiscuous mode
[  380.228785][T18815] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  380.446200][T18823] bond23: entered promiscuous mode
[  380.446224][T18823] bond23: entered allmulticast mode
[  380.459256][T18823] 8021q: adding VLAN 0 to HW filter on device bond23
[  380.625657][T18767] syzkaller0 speed is unknown, defaulting to 1000
[  380.694543][T18833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3136'.
[  380.794071][T18839] xt_TPROXY: Can be used only with -p tcp or -p udp
[  380.845124][T18843] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3138'.
[  380.845266][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3138'.
[  380.890300][T18809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3131'.
[  380.894245][T18844] dummy0: entered promiscuous mode
[  380.979332][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3139'.
[  381.122318][T18848] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4256276815/4256276817
[  381.122350][T18848] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4256276815/4256276816
[  381.153405][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'.
[  381.164403][T18848] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4256276815/4256276817
[  381.164420][T18848] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4256276815/4256276816
[  381.204244][T18853] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3140'.
[  381.204263][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3140'.
[  381.204275][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3140'.
[  381.330767][ T5639] Bluetooth: hci2: command tx timeout
[  381.693882][T18869] bond24: entered allmulticast mode
[  381.694349][T18869] 8021q: adding VLAN 0 to HW filter on device bond24
[  381.753462][T18767] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.753700][T18767] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.753841][T18767] bridge_slave_0: entered allmulticast mode
[  381.760344][T18767] bridge_slave_0: entered promiscuous mode
[  381.767270][T18767] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.767364][T18767] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.767484][T18767] bridge_slave_1: entered allmulticast mode
[  381.771812][T18767] bridge_slave_1: entered promiscuous mode
[  381.842912][T18767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.850093][T18767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.927342][T18767] team0: Port device team_slave_0 added
[  381.939698][T18767] team0: Port device team_slave_1 added
[  382.002466][T18767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.002484][T18767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.002506][T18767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.008020][T18767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.008033][T18767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.008053][T18767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.162773][T18767] hsr_slave_0: entered promiscuous mode
[  382.163748][T18767] hsr_slave_1: entered promiscuous mode
[  382.274341][T18896] veth0_to_team: entered promiscuous mode
[  382.303153][T18896] 8021q: adding VLAN 0 to HW filter on device eth0
[  382.306799][T18896] 8021q: adding VLAN 0 to HW filter on device eth1
[  382.309406][T18896] 8021q: adding VLAN 0 to HW filter on device eth2
[  382.334318][T18896] 8021q: adding VLAN 0 to HW filter on device eth3
[  382.405657][T18910] netlink: 'syz.4.3150': attribute type 1 has an invalid length.
[  382.405677][T18910] netlink: 'syz.4.3150': attribute type 2 has an invalid length.
[  382.413527][T18896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.703943][T18767] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.703965][T18767] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.733156][T18919] batman_adv: batadv0: Adding interface: veth0
[  382.733173][T18919] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.733200][T18919] batman_adv: batadv0: Interface activated: veth0
[  382.757454][T18919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.757478][T18919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.774796][T18919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.774817][T18919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.775863][T18919] batman_adv: batadv0: Interface deactivated: macvlan2
[  382.775880][T18919] batman_adv: batadv0: Removing interface: macvlan2
[  382.785045][T18919] batman_adv: batadv0: Interface deactivated: gretap1
[  382.785063][T18919] batman_adv: batadv0: Removing interface: gretap1
[  382.791683][T18919] batman_adv: batadv0: Interface deactivated: veth0
[  382.791700][T18919] batman_adv: batadv0: Removing interface: veth0
[  382.892917][T18767] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.892939][T18767] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.966855][T18767] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.966888][T18767] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.097845][T18767] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.097876][T18767] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.410546][ T5639] Bluetooth: hci2: command tx timeout
[  383.456501][T18946] netlink: 'syz.0.3158': attribute type 4 has an invalid length.
[  383.553846][T18767] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  383.575627][T18767] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  383.659089][T18767] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  383.677836][T18767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  383.678587][T18767] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  383.707583][T18767] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  383.718963][T18953] IPVS: Unknown mcast interface: macsec0
[  383.719001][T18952] IPVS: Unknown mcast interface: macsec0
[  383.729222][T18953] tap0: tun_chr_ioctl cmd 1074025677
[  383.729287][T18953] tap0: linktype set to 805
[  383.730139][T18952] tap0: tun_chr_ioctl cmd 1074025677
[  383.730194][T18952] tap0: linktype set to 805
[  383.741419][T18767] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  383.762463][T18767] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  383.997436][T18767] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.038600][T18767] 8021q: adding VLAN 0 to HW filter on device team0
[  384.068998][T14893] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.069112][T14893] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.077595][T14893] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.077696][T14893] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.515128][T18998] netpci0: tun_chr_ioctl cmd 1074025678
[  384.515151][T18998] netpci0: group set to 0
[  384.526802][T18998] bridge0: entered promiscuous mode
[  384.528091][T18998] ip6gretap0: entered promiscuous mode
[  384.749706][T19004] netlink: 'syz.0.3176': attribute type 1 has an invalid length.
[  384.758874][T19011] can: request_module (can-proto-0) failed.
[  385.046476][T18767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.076938][T19028] x_tables: duplicate underflow at hook 1
[  385.195636][T18767] veth0_vlan: entered promiscuous mode
[  385.216957][T18767] veth1_vlan: entered promiscuous mode
[  385.254302][T18767] veth0_macvtap: entered promiscuous mode
[  385.258805][T18767] veth1_macvtap: entered promiscuous mode
[  385.297761][T18767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.315263][T18767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.336086][T14910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.336174][T14910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.336232][T14910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.336288][T14910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.428721][T19044] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  385.483110][T19043] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  385.492652][ T5639] Bluetooth: hci2: command tx timeout
[  385.516284][T19043] __nla_validate_parse: 46 callbacks suppressed
[  385.516298][T19043] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3185'.
[  385.571110][T19041] syzkaller0: MTU not usable for tipc bearer
[  385.571146][T19041] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  385.577660][T14893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.577678][T14893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.711954][T14893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.711975][T14893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.022286][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'.
[  386.271334][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  386.272879][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  386.273626][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  386.274556][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  386.275202][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  386.354953][T19082] ip_tables: iptables: counters copy to user failed while replacing table
[  386.779700][T19086] rxe_eth0 speed is unknown, defaulting to 1000
[  387.508845][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'.
[  387.508879][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'.
[  387.752348][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'.
[  387.771494][T19122] syz_tun: entered promiscuous mode
[  387.771756][T19122] macvtap1: entered allmulticast mode
[  387.771770][T19122] syz_tun: entered allmulticast mode
[  387.776679][T19122] syz_tun: left allmulticast mode
[  387.776769][T19122] syz_tun: left promiscuous mode
[  387.828502][T19123] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.3200'.
[  387.828527][T19123] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.3200'.
[  387.907645][T19079] rxe_eth0 speed is unknown, defaulting to 1000
[  387.907697][T19086] lo speed is unknown, defaulting to 1000
[  388.055616][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'.
[  388.141705][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3202'.
[  388.291035][ T5647] Bluetooth: hci4: command tx timeout
[  388.517843][T19147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3205'.
[  388.575777][T19079] lo speed is unknown, defaulting to 1000
[  388.577262][T19086] syzkaller0 speed is unknown, defaulting to 1000
[  388.887003][T19162] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  388.887080][T19162] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  389.137427][T19079] syzkaller0 speed is unknown, defaulting to 1000
[  389.512396][T19163] gretap1: entered promiscuous mode
[  390.373110][ T5647] Bluetooth: hci4: command tx timeout
[  390.572312][T19196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.693013][T19079] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.693191][T19079] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.693313][T19079] bridge_slave_0: entered allmulticast mode
[  390.694974][T19079] bridge_slave_0: entered promiscuous mode
[  390.726704][T19079] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.726903][T19079] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.727083][T19079] bridge_slave_1: entered allmulticast mode
[  390.728829][T19079] bridge_slave_1: entered promiscuous mode
[  390.846760][T19079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.860637][T19079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.999500][T19079] team0: Port device team_slave_0 added
[  391.026315][T19079] team0: Port device team_slave_1 added
[  391.026818][T19214] syzkaller0: entered promiscuous mode
[  391.026835][T19214] syzkaller0: entered allmulticast mode
[  391.169414][T19079] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.169432][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.169455][T19079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.178686][T19079] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.178701][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.178723][T19079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.291561][T19079] hsr_slave_0: entered promiscuous mode
[  391.294463][T19079] hsr_slave_1: entered promiscuous mode
[  391.295164][T19079] debugfs: 'hsr0' already exists in 'hsr'
[  391.295179][T19079] Cannot create hsr debugfs directory
[  391.509023][T19224] __nla_validate_parse: 3 callbacks suppressed
[  391.509042][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3222'.
[  391.642890][T19226] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3223'.
[  391.669136][T19226] gretap0: entered promiscuous mode
[  391.790436][T19232] netlink: 'syz.1.3223': attribute type 4 has an invalid length.
[  391.817609][T19234] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3225'.
[  391.868018][T19079] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.868051][T19079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.868072][T19079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  391.975310][T19079] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.975342][T19079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.975365][T19079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  391.993826][ T5984] IPVS: starting estimator thread 0...
[  392.029740][T19239] IPVS: rr: UDP [fe80::aa]:8080 - no destination available
[  392.080832][T19241] IPVS: using max 32 ests per chain, 76800 per kthread
[  392.224580][T19251] Bluetooth: hci0: invalid length 0, exp 2 for type 21
[  392.278467][T19079] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.278499][T19079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.278522][T19079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  392.406966][T19079] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.406999][T19079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.407029][T19079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  392.409611][T19259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3232'.
[  392.457582][T19261] netlink: 'syz.4.3231': attribute type 10 has an invalid length.
[  392.457601][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'.
[  392.463234][ T5647] Bluetooth: hci4: command tx timeout
[  392.627543][T19265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3234'.
[  392.627578][T19265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3234'.
[  392.628040][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'.
[  392.977221][T19079] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  393.009981][T19287] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3241'.
[  393.012684][   T30] audit: type=1800 audit(1794071343.900:13): pid=19287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3241" name="blkio.bfq.time_recursive" dev="tmpfs" ino=518 res=0 errno=-22
[  393.129294][T19290] Bluetooth: hci0: unsupported parameter 5135
[  393.129310][T19290] Bluetooth: hci0: invalid length 0, exp 2 for type 30
[  393.135867][T19290] ipt_ah: unknown flags FF
[  393.243471][T19079] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  393.244326][T19079] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  393.282706][T19079] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  393.283975][T19079] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  393.314562][T19079] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  393.316179][T19079] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  393.340755][T19079] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  393.641459][T19079] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.685168][T19079] 8021q: adding VLAN 0 to HW filter on device team0
[  393.707002][T14907] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.707064][T14907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.737145][T14907] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.737234][T14907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.808544][T19316] xt_bpf: check failed: parse error
[  394.192625][T19340] Bluetooth: MGMT ver 1.23
[  394.235628][T19344] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3254'.
[  394.532051][ T5647] Bluetooth: hci4: command tx timeout
[  394.618082][T19079] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.787745][T19374] bridge_slave_0: entered allmulticast mode
[  394.835369][T19079] veth0_vlan: entered promiscuous mode
[  394.924038][T19079] veth1_vlan: entered promiscuous mode
[  395.073917][T19079] veth0_macvtap: entered promiscuous mode
[  395.100975][T19079] veth1_macvtap: entered promiscuous mode
[  395.135580][T19079] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.149330][T19079] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.173398][T14910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.173440][T14910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.368312][T19397] bridge_slave_0: left allmulticast mode
[  395.368334][T19397] bridge_slave_0: left promiscuous mode
[  395.368567][T19397] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.403551][T19397] bridge_slave_1: left allmulticast mode
[  395.403566][T19397] bridge_slave_1: left promiscuous mode
[  395.403728][T19397] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.443201][T19397] bond0: (slave bond_slave_0): Releasing backup interface
[  395.471016][T19397] bond0: (slave bond_slave_1): Releasing backup interface
[  395.472368][T19393] can: request_module (can-proto-0) failed.
[  395.492051][T19397] team0: Port device team_slave_0 removed
[  395.506985][T19397] team0: Port device team_slave_1 removed
[  395.507782][T19397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  395.507798][T19397] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.518698][T19397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.518719][T19397] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.528564][T19397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  395.561593][ T5984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.581464][   T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.602237][T14893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.602255][T14893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.747974][T14890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.747994][T14890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.770984][T19416] vlan2: entered promiscuous mode
[  395.771007][T19416] hsr0: entered promiscuous mode
[  395.771293][T19416] vlan2: entered allmulticast mode
[  395.771307][T19416] hsr0: entered allmulticast mode
[  395.771318][T19416] hsr_slave_0: entered allmulticast mode
[  395.771331][T19416] hsr_slave_1: entered allmulticast mode
[  395.828045][T19416] hsr_slave_0: left promiscuous mode
[  395.830768][T19416] hsr_slave_1: left promiscuous mode
[  395.932827][T19424] netlink: 'syz.1.3270': attribute type 10 has an invalid length.
[  395.934197][T19424] FAULT_INJECTION: forcing a failure.
[  395.934197][T19424] name failslab, interval 1, probability 0, space 0, times 0
[  395.934227][T19424] CPU: 1 UID: 0 PID: 19424 Comm: syz.1.3270 Not tainted syzkaller #0 PREEMPT(full) 
[  395.934251][T19424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  395.934265][T19424] Call Trace:
[  395.934272][T19424]  <TASK>
[  395.934280][T19424]  dump_stack_lvl+0xe8/0x150
[  395.934313][T19424]  should_fail_ex+0x3eb/0x540
[  395.934433][T19424]  should_failslab+0xa8/0x100
[  395.934458][T19424]  ? skb_clone+0x212/0x3a0
[  395.934544][T19424]  kmem_cache_alloc_noprof+0x9c/0x600
[  395.934575][T19424]  ? skb_clone+0x212/0x3a0
[  395.934603][T19424]  skb_clone+0x212/0x3a0
[  395.934628][T19424]  __netlink_deliver_tap+0x355/0x6e0
[  395.934723][T19424]  ? netlink_deliver_tap+0x2e/0x1b0
[  395.934751][T19424]  netlink_deliver_tap+0x19c/0x1b0
[  395.934778][T19424]  netlink_unicast+0x8c1/0xa80
[  395.934822][T19424]  netlink_sendmsg+0x7f0/0xb20
[  395.934846][T19424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.934867][T19424]  ? aa_sock_msg_perm+0x144/0x210
[  395.934933][T19424]  ? apparmor_socket_sendmsg+0x98/0x360
[  395.934986][T19424]  ? __pfx_netlink_sendmsg+0x10/0x10
[  395.935002][T19424]  sock_sendmsg_nosec+0x14e/0x190
[  395.935078][T19424]  ____sys_sendmsg+0x54e/0x850
[  395.935103][T19424]  ? __pfx_____sys_sendmsg+0x10/0x10
[  395.935132][T19424]  ? import_iovec+0x73/0xa0
[  395.935159][T19424]  ___sys_sendmsg+0x2a5/0x360
[  395.935177][T19424]  ? __lock_acquire+0x747/0x2de0
[  395.935213][T19424]  ? __pfx____sys_sendmsg+0x10/0x10
[  395.935275][T19424]  ? __fget_files+0x3a2/0x420
[  395.935296][T19424]  ? __fget_files+0x2a/0x420
[  395.935328][T19424]  __x64_sys_sendmsg+0x1b1/0x290
[  395.935352][T19424]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  395.935404][T19424]  do_syscall_64+0x166/0x520
[  395.935426][T19424]  ? trace_irq_disable+0x3b/0x140
[  395.935449][T19424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.935468][T19424]  ? clear_bhb_loop+0x70/0xc0
[  395.935490][T19424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.935511][T19424] RIP: 0033:0x7f47a679fb19
[  395.935528][T19424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.935543][T19424] RSP: 002b:00007f47a75c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  395.935563][T19424] RAX: ffffffffffffffda RBX: 00007f47a6a25fa0 RCX: 00007f47a679fb19
[  395.935576][T19424] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  395.935587][T19424] RBP: 00007f47a75c2090 R08: 0000000000000000 R09: 0000000000000000
[  395.935598][T19424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.935608][T19424] R13: 00007f47a6a26038 R14: 00007f47a6a25fa0 R15: 00007ffc0f68a0d8
[  395.935641][T19424]  </TASK>
[  396.384603][T19429] netlink: 'syz.1.3271': attribute type 1 has an invalid length.
[  396.387158][T19431] syzkaller0: entered allmulticast mode
[  396.793553][T19472] ip_tables: iptables: counters copy to user failed while replacing table
[  396.839531][T19472] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  396.855898][T19472] __nla_validate_parse: 8 callbacks suppressed
[  396.855915][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.856161][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.856369][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.856582][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.856824][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.857029][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.857232][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.864784][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.865019][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  396.865217][T19472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3279'.
[  397.961275][T19501] netlink: 'syz.4.3288': attribute type 10 has an invalid length.
[  398.503414][T19523] netlink: 'syz.4.3292': attribute type 1 has an invalid length.
[  399.323094][T19567] netlink: 'syz.3.3300': attribute type 10 has an invalid length.
[  399.379121][T19564] xt_connbytes: Forcing CT accounting to be enabled
[  399.379146][T19564] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  399.636555][T19582] tipc: Failed to remove unknown binding: 66,0,0/0:3128846251/3128846253
[  399.636583][T19582] tipc: Failed to remove unknown binding: 66,0,0/0:3128846251/3128846252
[  399.637100][T19582] tipc: Failed to remove unknown binding: 66,0,0/0:3128846251/3128846253
[  399.637123][T19582] tipc: Failed to remove unknown binding: 66,0,0/0:3128846251/3128846252
[  399.851511][T19594] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  399.851572][T19594] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  399.851607][T19594] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  399.938089][T19600] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  399.955392][T19600] bond1: (slave lo): Enslaving as an active interface with an up link
[  399.967987][T19600] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  400.087597][T19602] netlink: 'syz.3.3311': attribute type 39 has an invalid length.
[  400.167174][T19606] netlink: 'syz.4.3312': attribute type 10 has an invalid length.
[  400.324176][T19615] batadv_slave_1: entered promiscuous mode
[  400.370729][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  400.494905][T19613] batadv_slave_1: left promiscuous mode
[  401.010490][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  401.229530][T19656] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  401.679210][T19670] netlink: 'syz.1.3326': attribute type 10 has an invalid length.
[  401.900898][T19678] ip_tables: iptables: counters copy to user failed while replacing table
[  401.930192][T19678] netlink: 'syz.2.3329': attribute type 1 has an invalid length.
[  402.019213][T19685] team_slave_1: entered allmulticast mode
[  402.276447][T19699] __nla_validate_parse: 34 callbacks suppressed
[  402.276466][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3336'.
[  402.545637][T19721] netlink: 'syz.3.3344': attribute type 1 has an invalid length.
[  402.627224][T19721] bond3: entered promiscuous mode
[  402.627671][T19721] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.653608][T19721] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.654281][T19721] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[  402.654300][T19721] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  402.658951][T19721] bond3: (slave gre1): making interface the new active one
[  402.658968][T19721] gre1: entered promiscuous mode
[  402.662116][T19728] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3347'.
[  402.694863][T19721] bond3: (slave gre1): Enslaving as an active interface with an up link
[  402.962634][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'.
[  403.219002][T19746] block nbd1: NBD_DISCONNECT
[  403.219033][T19746] block nbd1: Send disconnect failed -32
[  403.219051][T19746] block nbd1: Send disconnect failed -32
[  403.219068][T19746] block nbd1: shutting down sockets
[  403.355142][T19756] netlink: 'syz.1.3354': attribute type 10 has an invalid length.
[  403.355162][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3354'.
[  403.515853][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'.
[  403.515884][T19765] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3356'.
[  403.515896][T19765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3356'.
[  403.515912][T19765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'.
[  403.725427][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3358'.
[  403.797766][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3357'.
[  403.799070][T19781] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  403.823672][T19781] netlink: 'syz.2.3357': attribute type 11 has an invalid length.
[  403.846482][T19772] bond4: entered promiscuous mode
[  403.860816][T19772] 8021q: adding VLAN 0 to HW filter on device bond4
[  403.894723][T19784] netlink: 'syz.0.3362': attribute type 10 has an invalid length.
[  404.113672][T19796] netlink: 'syz.1.3367': attribute type 10 has an invalid length.
[  404.183052][T14893] IPVS: starting estimator thread 0...
[  404.197907][T19795] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  404.276876][T19806] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  404.277004][    C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  404.303415][T19804] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  404.303632][T19801] IPVS: using max 31 ests per chain, 74400 per kthread
[  404.841983][T19844] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  404.842010][T19844] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  404.889572][T19842] netlink: 'syz.0.3379': attribute type 10 has an invalid length.
[  405.217735][T19861] syzkaller0: entered promiscuous mode
[  405.217756][T19861] syzkaller0: entered allmulticast mode
[  405.347417][T19865] netlink: 'syz.2.3386': attribute type 12 has an invalid length.
[  405.379723][T19870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.503849][T19878] openvswitch: netlink: Message has -3 unknown bytes.
[  405.518979][T19879] openvswitch: netlink: Message has -3 unknown bytes.
[  405.647305][T19891] bond0: (slave bond_slave_0): Releasing backup interface
[  405.649189][T19891] bond_slave_0: left promiscuous mode
[  405.672430][T19891] bond0: (slave bond_slave_1): Releasing backup interface
[  405.675559][T19891] bond_slave_1: left promiscuous mode
[  405.704217][T19891] team0: Port device team_slave_0 removed
[  405.712424][T19891] team0: Port device team_slave_1 removed
[  405.713365][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.713383][T19891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.717781][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.717798][T19891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.729477][T19891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  405.777784][T19898] netlink: 'syz.4.3394': attribute type 10 has an invalid length.
[  405.812455][T19898] team0: Port device dummy0 added
[  405.837395][T19891] vlan0: entered promiscuous mode
[  405.867662][T19891] team0: Port device vlan0 added
[  408.371584][T19870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.484008][T19911] __nla_validate_parse: 13 callbacks suppressed
[  408.484026][T19911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3399'.
[  408.882831][T19937] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.883318][T19937] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.029128][T19939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3405'.
[  409.096869][T19937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.124330][T19937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.340477][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  409.501679][T14893] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.501765][T14893] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.501806][T14893] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.501839][T14893] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.850761][T19972] netlink: 'syz.1.3412': attribute type 1 has an invalid length.
[  409.887787][T19972] 8021q: adding VLAN 0 to HW filter on device bond1
[  409.923214][T19972] bond1: (slave veth0_to_bond): making interface the new active one
[  409.928981][T19972] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  410.009661][T19982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3411'.
[  410.020759][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'.
[  410.038260][T19951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  410.136617][T19982] 8021q: adding VLAN 0 to HW filter on device bond1
[  410.187666][T19968] ovs-dp0: entered promiscuous mode
[  410.355896][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3416'.
[  410.473895][T20008] netlink: 'syz.2.3420': attribute type 10 has an invalid length.
[  410.473915][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'.
[  410.587329][T20019] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3423'.
[  410.626819][T20021] netlink: 'syz.0.3422': attribute type 5 has an invalid length.
[  410.915498][T20037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3426'.
[  411.155923][T20047] netlink: 'syz.3.3428': attribute type 11 has an invalid length.
[  411.486797][T20062] netlink: 'syz.4.3432': attribute type 4 has an invalid length.
[  411.931549][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'.
[  412.117103][T20082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3439'.
[  412.241646][T20088] IPv6: sit1: Disabled Multicast RS
[  412.479724][T20082] rxe_eth0 speed is unknown, defaulting to 1000
[  412.815937][T20082] lo speed is unknown, defaulting to 1000
[  413.168946][T20126] syzkaller1: tun_chr_ioctl cmd 3229636669
[  413.180853][T20126] syzkaller1: tun_chr_ioctl cmd 1074812118
[  413.207893][T20128] netlink: 'syz.1.3453': attribute type 10 has an invalid length.
[  413.261476][T20082] syzkaller0 speed is unknown, defaulting to 1000
[  413.509095][T14893] tipc: Subscription rejected, illegal request
[  414.088056][T20166] xt_socket: unknown flags 0x4c
[  414.257813][T20168] __nla_validate_parse: 1 callbacks suppressed
[  414.257832][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'.
[  414.313465][T20170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3464'.
[  414.329646][T20170] bond2: entered promiscuous mode
[  414.329686][T20170] bond2: entered allmulticast mode
[  414.330609][T20170] 8021q: adding VLAN 0 to HW filter on device bond2
[  414.342129][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f401000: rx timeout, send abort
[  414.379112][T20172] netlink: 'syz.0.3465': attribute type 10 has an invalid length.
[  414.379130][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'.
[  414.585371][T20178] netlink: 'syz.1.3467': attribute type 2 has an invalid length.
[  414.613175][T20178] !: entered promiscuous mode
[  414.707157][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'.
[  414.734604][T20181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3468'.
[  414.737977][T20181] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  414.738922][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'.
[  414.738939][T20183] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  414.757428][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'.
[  414.757447][T20184] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[  414.823218][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3470'.
[  414.838980][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888035f4e000: rx timeout, send abort
[  414.847614][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f401000: abort rx timeout. Force session deactivation
[  415.232908][T20220] Bluetooth: MGMT ver 1.23
[  415.339437][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888035f4e000: abort rx timeout. Force session deactivation
[  415.696522][T20222] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3481'.
[  416.114000][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'.
[  416.178986][T20238] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  416.847206][T20265] batadv_slave_0: entered promiscuous mode
[  416.881637][T20263] batadv_slave_0: left promiscuous mode
[  417.638111][T20287] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  417.650224][T20287] bond5 (unregistering): Released all slaves
[  417.980345][T20296] IPVS: sh: FWM 3 0x00000003 - no destination available
[  418.007621][T20294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  418.486672][T20311] ipvlan2: entered allmulticast mode
[  418.486694][T20311] syz_tun: entered allmulticast mode
[  418.742199][T20315] netlink: 'syz.0.3507': attribute type 1 has an invalid length.
[  419.918794][T20351] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  420.005363][T20354] __nla_validate_parse: 12 callbacks suppressed
[  420.005384][T20354] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3516'.
[  420.079049][T20359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3516'.
[  420.094254][T20358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3516'.
[  420.094967][T20359] ip_tables: iptables: counters copy to user failed while replacing table
[  420.284586][T14893] IPVS: starting estimator thread 0...
[  420.370244][T20367] IPVS: using max 28 ests per chain, 67200 per kthread
[  420.596293][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3519'.
[  420.599030][T20378] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  423.913800][T20402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3523'.
[  423.917155][T20400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3523'.
[  424.076840][T20412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3525'.
[  424.118711][T20414] syzkaller1: entered promiscuous mode
[  424.118732][T20414] syzkaller1: entered allmulticast mode
[  424.263998][T20421] netlink: 'syz.0.3529': attribute type 49 has an invalid length.
[  424.593360][T20437] netlink: 'syz.0.3534': attribute type 2 has an invalid length.
[  424.593383][T20437] netlink: 'syz.0.3534': attribute type 2 has an invalid length.
[  424.629269][T20439] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3535'.
[  424.629300][T20439] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  424.652265][T20434] netlink: 'syz.0.3534': attribute type 1 has an invalid length.
[  424.772469][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'.
[  424.909752][T20448] SET target dimension over the limit!
[  425.095101][T20462] netlink: 'syz.4.3541': attribute type 1 has an invalid length.
[  425.156356][T20462] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.251247][T20465] bond1: (slave veth3): Enslaving as an active interface with a down link
[  425.284910][T20462] team0: Port device dummy0 removed
[  425.314332][T20462] bond1: (slave dummy0): Enslaving as an active interface with a down link
[  425.432323][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3536'.
[  425.591455][T20479] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3544'.
[  426.191927][T20506] netlink: 'syz.0.3551': attribute type 2 has an invalid length.
[  426.317653][T20493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3548'.
[  426.731050][T20517] sctp_setsockopt_delayed_ack: 55 callbacks suppressed
[  426.731069][T20517] sctp: [Deprecated]: syz.3.3553 (pid 20517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  426.731069][T20517] Use struct sctp_sack_info instead
[  426.783843][T20525] netlink: 'syz.0.3555': attribute type 1 has an invalid length.
[  426.849123][T20500] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  426.849145][T20500] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  427.094694][T20500] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  427.094718][T20500] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  427.227742][T20500] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  427.227764][T20500] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  427.303983][T20500] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  427.304005][T20500] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  427.362696][T20549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.507955][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3562'.
[  427.627725][T20557] bond2: entered allmulticast mode
[  427.655147][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'.
[  427.664682][T20557] bond2: (slave macvlan2): Opening slave failed
[  427.725347][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'.
[  427.902896][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3569'.
[  427.909025][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3569'.
[  427.909054][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3569'.
[  427.944208][T20579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3569'.
[  428.187350][T20588] netlink: 'syz.0.3571': attribute type 1 has an invalid length.
[  428.337011][T20592] netlink: 'syz.3.3572': attribute type 1 has an invalid length.
[  428.337033][T20592] netlink: 'syz.3.3572': attribute type 2 has an invalid length.
[  428.655910][ T6370] s`z1: Port: 1 Link DOWN
[  428.711194][T20588] 8021q: adding VLAN 0 to HW filter on device bond3
[  428.797033][T20589] bond3: (slave gretap1): making interface the new active one
[  428.798222][T20589] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  428.831958][T20609] block nbd0: reconnected socket
[  428.852989][   T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.854964][T14890] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.855037][T14890] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.855067][T14890] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.921436][ T5647] block nbd0: Receive control failed (result -32)
[  429.061710][ T5984] bridge0: left allmulticast mode
[  429.061830][ T5984] pim6reg: left allmulticast mode
[  429.854409][ T5984] bond11 (unregistering): (slave xfrm1): Releasing backup interface
[  429.854435][ T5984] xfrm1 (unregistering): left promiscuous mode
[  430.031178][ T5984] bond0 (unregistering): (slave geneve4): Releasing active interface
[  430.093336][ T5984] team0: Port device bridge2 removed
[  430.110447][ T5984] bond4 (unregistering): (slave bridge3): Releasing backup interface
[  430.154909][ T5984] bond7 (unregistering): (slave bridge6): Releasing backup interface
[  430.154936][ T5984] bridge6 (unregistering): left promiscuous mode
[  430.154953][ T5984] bridge6 (unregistering): left allmulticast mode
[  430.173577][ T5984] bond9 (unregistering): (slave bridge7): Releasing backup interface
[  430.235386][ T5984] bond1 (unregistering): Released all slaves
[  430.250067][ T5984] bond2 (unregistering): Released all slaves
[  430.289351][T20668] netlink: 'syz.1.3589': attribute type 11 has an invalid length.
[  430.291979][ T5984] bond3 (unregistering): Released all slaves
[  430.325806][ T5984] bond4 (unregistering): Released all slaves
[  430.362207][ T5984] bond5 (unregistering): Released all slaves
[  430.381126][ T5984] bond6 (unregistering): Released all slaves
[  430.398391][ T5984] bond7 (unregistering): Released all slaves
[  430.429448][ T5984] bond8 (unregistering): Released all slaves
[  430.460513][ T5984] bond9 (unregistering): Released all slaves
[  430.475496][ T5984] bond10 (unregistering): Released all slaves
[  430.499293][ T5984] bond11 (unregistering): Released all slaves
[  430.518067][ T5984] bond12 (unregistering): Released all slaves
[  430.551912][ T5984] bond13 (unregistering): Released all slaves
[  430.573346][ T5984] bond14 (unregistering): Released all slaves
[  430.606342][ T5984] bond0 (unregistering): Released all slaves
[  430.629229][ T5984] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface
[  430.642901][ T5984] bond15 (unregistering): Released all slaves
[  430.699050][T20629] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  430.805341][   T62] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  430.805387][   T62] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  430.805420][   T62] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  430.805452][   T62] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  430.963734][T20680] validate_nla: 1 callbacks suppressed
[  430.963753][T20680] netlink: 'syz.4.3590': attribute type 10 has an invalid length.
[  430.963764][T20680] __nla_validate_parse: 164 callbacks suppressed
[  430.963771][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  430.982387][ T5984] tipc: Disabling bearer <udp:syz2>
[  430.982614][ T5984] tipc: Left network mode
[  431.206570][T20690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3595'.
[  431.226223][T20693] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  431.226885][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'.
[  431.235398][T20694] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  431.236227][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'.
[  431.358183][T20703] netlink: 'syz.1.3598': attribute type 11 has an invalid length.
[  431.358275][T20703] netlink: 'syz.1.3598': attribute type 5 has an invalid length.
[  431.400301][T20684] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  431.624120][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3600'.
[  431.627309][T20711] ip_tables: iptables: counters copy to user failed while replacing table
[  431.636821][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'.
[  431.780231][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3603'.
[  431.855327][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3601'.
[  431.883126][T20717] vlan2: entered allmulticast mode
[  431.883149][T20717] dummy0: entered allmulticast mode
[  432.106828][T20742] netlink: 'syz.1.3604': attribute type 1 has an invalid length.
[  432.436154][T20742] bond3: entered promiscuous mode
[  432.448998][T20742] 8021q: adding VLAN 0 to HW filter on device bond3
[  432.782973][ T5984] veth1_macvtap: left promiscuous mode
[  432.783007][ T5984] veth0_macvtap: left promiscuous mode
[  433.337847][T20802] netlink: 'syz.2.3614': attribute type 1 has an invalid length.
[  433.396605][T20776] tipc: Started in network mode
[  433.396627][T20776] tipc: Node identity fc020000000000000000000000000001, cluster identity 4711
[  433.396656][T20776] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  433.462897][T20802] 8021q: adding VLAN 0 to HW filter on device bond2
[  433.507839][T20803] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  433.655911][   T62] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  433.656137][   T62] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  433.656201][   T62] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  433.656238][   T62] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  433.683661][T20813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3618'.
[  433.785206][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3619'.
[  433.806337][T20819] IPv6: NLM_F_CREATE should be specified when creating new route
[  433.855558][T20819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.855570][T20819] IPv6: NLM_F_CREATE should be set when creating new route
[  433.988924][T20827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.990860][T14873] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  433.990899][T14873] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  433.990928][T14873] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  433.990956][T14873] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.087397][ T5984] IPVS: stop unused estimator thread 0...
[  434.177231][T20832] xt_connbytes: Forcing CT accounting to be enabled
[  434.177255][T20832] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  434.314541][T20843] hsr0: entered promiscuous mode
[  434.452480][T20843] hsr_slave_0: left promiscuous mode
[  434.454443][T20843] hsr_slave_1: left promiscuous mode
[  435.049148][T20843] hsr0 (unregistering): left promiscuous mode
[  435.539379][T20877] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  435.865885][T20894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  435.867801][T20895] ip6_tables: ip6tables: co
** replaying previous printk message **
[  435.867801][T20895] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  435.883394][T20889] 
[  435.899157][T20889] ======================================================
[  435.906168][T20889] WARNING: possible circular locking dependency detected
[  435.913239][T20889] syzkaller #0 Not tainted
[  435.917658][T20889] ------------------------------------------------------
[  435.924671][T20889] syz.2.3640/20889 is trying to acquire lock:
[  435.930742][T20889] ffff88803d84e698 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0
[  435.939671][T20889] 
[  435.939671][T20889] but task is already holding lock:
[  435.947032][T20889] ffff88802cdb6bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  435.956560][T20889] 
[  435.956560][T20889] which lock already depends on the new lock.
[  435.956560][T20889] 
[  435.966982][T20889] 
[  435.966982][T20889] the existing dependency chain (in reverse order) is:
[  435.976024][T20889] 
[  435.976024][T20889] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  435.983871][T20889]        __mutex_lock+0x197/0x15a0
[  435.989078][T20889]        elevator_change+0x1af/0x480
[  435.994383][T20889]        elevator_set_none+0xb5/0x140
[  435.999858][T20889]        blk_mq_update_nr_hw_queues+0x60b/0x1b70
[  436.006280][T20889]        nbd_start_device+0x189/0xb30
[  436.011735][T20889]        nbd_genl_connect+0x167d/0x1cd0
[  436.017278][T20889]        genl_family_rcv_msg_doit+0x233/0x340
[  436.023419][T20889]        genl_rcv_msg+0x614/0x7a0
[  436.028452][T20889]        netlink_rcv_skb+0x226/0x4a0
[  436.033835][T20889]        genl_rcv+0x28/0x40
[  436.038422][T20889]        netlink_unicast+0x8ef/0xa80
[  436.043721][T20889]        netlink_sendmsg+0x7f0/0xb20
[  436.049010][T20889]        sock_sendmsg_nosec+0x14e/0x190
[  436.054547][T20889]        ____sys_sendmsg+0x54e/0x850
[  436.059822][T20889]        ___sys_sendmsg+0x2a5/0x360
[  436.065020][T20889]        __x64_sys_sendmsg+0x1b1/0x290
[  436.070465][T20889]        do_syscall_64+0x166/0x520
[  436.075569][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.081974][T20889] 
[  436.081974][T20889] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  436.090581][T20889]        blk_alloc_queue+0x544/0x690
[  436.095960][T20889]        __blk_mq_alloc_disk+0x194/0x390
[  436.101585][T20889]        nbd_dev_add+0x494/0xb60
[  436.106507][T20889]        nbd_init+0x168/0x1f0
[  436.111270][T20889]        do_one_initcall+0x250/0x870
[  436.116539][T20889]        do_initcall_level+0x10a/0x1a0
[  436.122060][T20889]        do_initcalls+0x59/0xa0
[  436.126900][T20889]        kernel_init_freeable+0x29d/0x3e0
[  436.132600][T20889]        kernel_init+0x22/0x1d0
[  436.137436][T20889]        ret_from_fork+0x514/0xb70
[  436.142563][T20889]        ret_from_fork_asm+0x1a/0x30
[  436.147834][T20889] 
[  436.147834][T20889] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  436.155024][T20889]        fs_reclaim_acquire+0x71/0x100
[  436.160514][T20889]        __kmalloc_cache_node_noprof+0x66/0x620
[  436.166741][T20889]        create_worker+0x112/0x7c0
[  436.171851][T20889]        workqueue_prepare_cpu+0xe4/0x170
[  436.177553][T20889]        cpuhp_invoke_callback+0x434/0x810
[  436.183361][T20889]        _cpu_up+0x2ce/0x5b0
[  436.187938][T20889]        cpu_up+0x1d2/0x220
[  436.192425][T20889]        cpuhp_bringup_mask+0xb2/0x1a0
[  436.197939][T20889]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  436.204250][T20889]        bringup_nonboot_cpus+0x17/0x30
[  436.209783][T20889]        smp_init+0x32/0x110
[  436.214445][T20889]        kernel_init_freeable+0x27f/0x3e0
[  436.220147][T20889]        kernel_init+0x22/0x1d0
[  436.224978][T20889]        ret_from_fork+0x514/0xb70
[  436.230082][T20889]        ret_from_fork_asm+0x1a/0x30
[  436.235359][T20889] 
[  436.235359][T20889] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  436.243076][T20889]        cpus_read_lock+0x3d/0x160
[  436.248173][T20889]        static_key_slow_inc+0x12/0x30
[  436.253643][T20889]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  436.259866][T20889]        nbd_genl_foreach_sock+0x265/0x450
[  436.265657][T20889]        nbd_genl_reconfigure+0xbbb/0x1040
[  436.271443][T20889]        genl_family_rcv_msg_doit+0x233/0x340
[  436.277494][T20889]        genl_rcv_msg+0x614/0x7a0
[  436.282501][T20889]        netlink_rcv_skb+0x226/0x4a0
[  436.287772][T20889]        genl_rcv+0x28/0x40
[  436.292259][T20889]        netlink_unicast+0x8ef/0xa80
[  436.297569][T20889]        netlink_sendmsg+0x7f0/0xb20
[  436.302836][T20889]        sock_sendmsg_nosec+0x14e/0x190
[  436.308368][T20889]        ____sys_sendmsg+0x54e/0x850
[  436.313633][T20889]        ___sys_sendmsg+0x2a5/0x360
[  436.318818][T20889]        __x64_sys_sendmsg+0x1b1/0x290
[  436.324258][T20889]        do_syscall_64+0x166/0x520
[  436.329356][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.335752][T20889] 
[  436.335752][T20889] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  436.343382][T20889]        __mutex_lock+0x197/0x15a0
[  436.349010][T20889]        nbd_queue_rq+0x373/0xff0
[  436.354015][T20889]        blk_mq_dispatch_rq_list+0x499/0x1990
[  436.360156][T20889]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  436.367027][T20889]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  436.373511][T20889]        blk_mq_run_work_fn+0x167/0x2f0
[  436.379042][T20889]        process_scheduled_works+0xc3d/0x1630
[  436.385097][T20889]        worker_thread+0xa47/0xfb0
[  436.390196][T20889]        kthread+0x38b/0x480
[  436.394769][T20889]        ret_from_fork+0x514/0xb70
[  436.399863][T20889]        ret_from_fork_asm+0x1a/0x30
[  436.405131][T20889] 
[  436.405131][T20889] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  436.412321][T20889]        __mutex_lock+0x197/0x15a0
[  436.417422][T20889]        nbd_queue_rq+0xc1/0xff0
[  436.422343][T20889]        blk_mq_dispatch_rq_list+0x499/0x1990
[  436.428398][T20889]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  436.435228][T20889]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  436.441719][T20889]        blk_mq_run_work_fn+0x167/0x2f0
[  436.447252][T20889]        process_scheduled_works+0xc3d/0x1630
[  436.453308][T20889]        worker_thread+0xa47/0xfb0
[  436.458404][T20889]        kthread+0x38b/0x480
[  436.463006][T20889]        ret_from_fork+0x514/0xb70
[  436.468105][T20889]        ret_from_fork_asm+0x1a/0x30
[  436.473373][T20889] 
[  436.473373][T20889] -> #0 (set->srcu){.+.+}-{0:0}:
[  436.480482][T20889]        __lock_acquire+0x164c/0x2de0
[  436.485854][T20889]        lock_sync+0xb3/0x130
[  436.490512][T20889]        __synchronize_srcu+0xca/0x2f0
[  436.495955][T20889]        elevator_switch+0x1e8/0x7b0
[  436.501228][T20889]        elevator_change+0x2fa/0x480
[  436.506497][T20889]        elevator_set_default+0x375/0x440
[  436.512202][T20889]        blk_register_queue+0x404/0x4f0
[  436.517732][T20889]        __add_disk+0x6b8/0xdb0
[  436.522564][T20889]        add_disk_fwnode+0x100/0x3a0
[  436.527831][T20889]        nbd_dev_add+0x733/0xb60
[  436.532751][T20889]        nbd_genl_connect+0x96c/0x1cd0
[  436.538201][T20889]        genl_family_rcv_msg_doit+0x233/0x340
[  436.544264][T20889]        genl_rcv_msg+0x614/0x7a0
[  436.549300][T20889]        netlink_rcv_skb+0x226/0x4a0
[  436.554580][T20889]        genl_rcv+0x28/0x40
[  436.559071][T20889]        netlink_unicast+0x8ef/0xa80
[  436.564344][T20889]        netlink_sendmsg+0x7f0/0xb20
[  436.569614][T20889]        sock_sendmsg_nosec+0x14e/0x190
[  436.575148][T20889]        ____sys_sendmsg+0x54e/0x850
[  436.580418][T20889]        ___sys_sendmsg+0x2a5/0x360
[  436.585606][T20889]        __x64_sys_sendmsg+0x1b1/0x290
[  436.591049][T20889]        do_syscall_64+0x166/0x520
[  436.596145][T20889]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.602543][T20889] 
[  436.602543][T20889] other info that might help us debug this:
[  436.602543][T20889] 
[  436.612925][T20889] Chain exists of:
[  436.612925][T20889]   set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock
[  436.612925][T20889] 
[  436.626554][T20889]  Possible unsafe locking scenario:
[  436.626554][T20889] 
[  436.633984][T20889]        CPU0                    CPU1
[  436.639335][T20889]        ----                    ----
[  436.644679][T20889]   lock(&q->elevator_lock);
[  436.649258][T20889]                                lock(&q->q_usage_counter(io)#50);
[  436.657134][T20889]                                lock(&q->elevator_lock);
[  436.664238][T20889]   sync(set->srcu);
[  436.668133][T20889] 
[  436.668133][T20889]  *** DEADLOCK ***
[  436.668133][T20889] 
[  436.676259][T20889] locks held by syz.2.3640/20889: 6, last CPU#0:
[  436.682571][T20889]  #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  436.690744][T20889]  #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  436.699693][T20889]  #2: ffff8880805669c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[  436.710118][T20889]  #3: ffff88802cdb6c80 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0
[  436.719947][T20889]  #4: ffff88802cdb6708 (&q->q_usage_counter(queue)#57){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  436.730838][T20889]  #5: ffff88802cdb6bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  436.740682][T20889] 
[  436.740682][T20889] stack backtrace:
[  436.746569][T20889] CPU: 0 UID: 0 PID: 20889 Comm: syz.2.3640 Not tainted syzkaller #0 PREEMPT(full) 
[  436.755924][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  436.765964][T20889] Call Trace:
[  436.769239][T20889]  <TASK>
[  436.772159][T20889]  dump_stack_lvl+0xe8/0x150
[  436.776746][T20889]  print_circular_bug+0x2e2/0x300
[  436.781768][T20889]  check_noncircular+0x12f/0x150
[  436.786705][T20889]  __lock_acquire+0x164c/0x2de0
[  436.791553][T20889]  ? lockdep_unlock+0x5c/0xd0
[  436.796219][T20889]  ? __lock_acquire+0x1511/0x2de0
[  436.801234][T20889]  lock_sync+0xb3/0x130
[  436.805380][T20889]  ? __synchronize_srcu+0xb6/0x2f0
[  436.810484][T20889]  ? __synchronize_srcu+0xb6/0x2f0
[  436.815587][T20889]  __synchronize_srcu+0xca/0x2f0
[  436.820512][T20889]  ? __pfx___synchronize_srcu+0x10/0x10
[  436.826044][T20889]  ? do_raw_spin_lock+0x12b/0x2f0
[  436.831058][T20889]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  436.836918][T20889]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  436.842455][T20889]  ? synchronize_srcu+0x20c/0x270
[  436.847468][T20889]  elevator_switch+0x1e8/0x7b0
[  436.852228][T20889]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  436.857676][T20889]  elevator_change+0x2fa/0x480
[  436.862430][T20889]  ? do_raw_spin_unlock+0xf5/0x200
[  436.867529][T20889]  elevator_set_default+0x375/0x440
[  436.872717][T20889]  ? __pfx_elevator_set_default+0x10/0x10
[  436.878430][T20889]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  436.885509][T20889]  ? blk_crypto_sysfs_register+0x11c/0x170
[  436.891393][T20889]  blk_register_queue+0x404/0x4f0
[  436.896412][T20889]  __add_disk+0x6b8/0xdb0
[  436.900735][T20889]  add_disk_fwnode+0x100/0x3a0
[  436.905489][T20889]  nbd_dev_add+0x733/0xb60
[  436.909894][T20889]  ? __pfx_nbd_dev_add+0x10/0x10
[  436.914822][T20889]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[  436.920613][T20889]  ? bpf_lsm_capable+0x9/0x20
[  436.925276][T20889]  ? security_capable+0x7e/0x2c0
[  436.930281][T20889]  ? radix_tree_lookup+0x240/0x290
[  436.935434][T20889]  nbd_genl_connect+0x96c/0x1cd0
[  436.940365][T20889]  ? __pfx_nbd_genl_connect+0x10/0x10
[  436.945725][T20889]  ? rcu_is_watching+0x16/0xb0
[  436.950480][T20889]  ? trace_kmalloc+0x2a/0xf0
[  436.955062][T20889]  ? __kmalloc_noprof+0x387/0x710
[  436.960075][T20889]  ? __nla_parse+0x40/0x60
[  436.964487][T20889]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  436.970805][T20889]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  436.977129][T20889]  genl_family_rcv_msg_doit+0x233/0x340
[  436.982696][T20889]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  436.988784][T20889]  genl_rcv_msg+0x614/0x7a0
[  436.993281][T20889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.998295][T20889]  ? __pfx_nbd_genl_connect+0x10/0x10
[  437.003658][T20889]  netlink_rcv_skb+0x226/0x4a0
[  437.008413][T20889]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.013422][T20889]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.018704][T20889]  ? down_read+0x2b9/0x320
[  437.023125][T20889]  genl_rcv+0x28/0x40
[  437.027095][T20889]  netlink_unicast+0x8ef/0xa80
[  437.031857][T20889]  netlink_sendmsg+0x7f0/0xb20
[  437.036609][T20889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.041881][T20889]  ? aa_sock_msg_perm+0x144/0x210
[  437.046894][T20889]  ? apparmor_socket_sendmsg+0x98/0x360
[  437.052431][T20889]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.057700][T20889]  sock_sendmsg_nosec+0x14e/0x190
[  437.062726][T20889]  ____sys_sendmsg+0x54e/0x850
[  437.067478][T20889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.072752][T20889]  ? import_iovec+0x73/0xa0
[  437.077244][T20889]  ___sys_sendmsg+0x2a5/0x360
[  437.081905][T20889]  ? __lock_acquire+0x747/0x2de0
[  437.086835][T20889]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.092025][T20889]  ? futex_wait+0x2a2/0x390
[  437.096537][T20889]  ? __fget_files+0x3a2/0x420
[  437.101202][T20889]  ? __fget_files+0x2a/0x420
[  437.105785][T20889]  __x64_sys_sendmsg+0x1b1/0x290
[  437.110711][T20889]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.116164][T20889]  do_syscall_64+0x166/0x520
[  437.120742][T20889]  ? trace_irq_disable+0x3b/0x140
[  437.125756][T20889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.131810][T20889]  ? clear_bhb_loop+0x70/0xc0
[  437.136484][T20889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.142363][T20889] RIP: 0033:0x7f46ca39fb19
[  437.146766][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.166357][T20889] RSP: 002b:00007f46cb2a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.174784][T20889] RAX: ffffffffffffffda RBX: 00007f46ca625fa0 RCX: 00007f46ca39fb19
[  437.182740][T20889] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000007
[  437.190697][T20889] RBP: 00007f46ca437b70 R08: 0000000000000000 R09: 0000000000000000
[  437.198652][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.206605][T20889] R13: 00007f46ca626038 R14: 00007f46ca625fa0 R15: 00007ffd1465cc18
[  437.214572][T20889]  </TASK>
[  437.353284][T20896] __nla_validate_parse: 14 callbacks suppressed
[  437.353301][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3639'.
[  437.411294][T20890] nbd: nbd508 already in use