last executing test programs:

3.017759444s ago: executing program 1 (id=2569):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f00000009c0)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80), 0x1}}], 0x3, 0x1c000)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffbf83, @dev={0xfe, 0x80, '\x00', 0xc6}, 0x9, 0x1}, 0x20)
getpeername$l2tp6(r1, 0x0, &(0x7f0000000080))
ppoll(&(0x7f0000000ac0)=[{r0, 0x1200}], 0x1, &(0x7f0000000b00), 0x0, 0x0)

2.874452257s ago: executing program 1 (id=2572):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="83601a428e335e1fd2f90b182185fdea5fa0d99ae3c7dba2623d07000000f279d36aa89e19b707ce10fc2d", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000180000006703000020000000bfa400000000000007040000f8ffffffb70500000800000085000000190000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

2.653544547s ago: executing program 1 (id=2576):
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000880)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000001740)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000001780)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f00000017c0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000001800)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000001840)=0x101, 0x4)
recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x4c}}, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000764cab832ffc767ec71f3b00"/39], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r8, &(0x7f0000000880), &(0x7f00000008c0)=""/122}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x13, 0x25, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x1, 0x3, 0x3, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0xc3c0163, 0xc3, &(0x7f0000000380)=""/195, 0x60680, 0x70, '\x00', r3, @fallback=0x2d, r5, 0x8, &(0x7f00000006c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x1, 0xfffffff8}, 0x10, 0x0, r1, 0x3, &(0x7f0000000940)=[r7, r8], &(0x7f0000001540)=[{0x0, 0x1, 0x1, 0x7}, {0x4, 0x3, 0xc, 0x1}, {0x5, 0x2, 0x10, 0x4}], 0x10, 0x1}, 0x94)

2.045630134s ago: executing program 4 (id=2584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x8000)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x7, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @local}]}, &(0x7f00000003c0)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071101300000000007a050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

1.985513334s ago: executing program 3 (id=2585):
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x800)
connect$tipc(r0, &(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0)
sendto(r6, &(0x7f00000001c0)="472393d9c7c6c758cb9c587fef0103db81ba1b86a398354d119de1b278d5e68de6e3f3f72544f6b4a390a1ab83a31b5d789189d627e2b7acdd8651f78d7a52e67f2f02ae595155a05964f8d005e211eb053c62b70e818fb2b48b92f9aa1f201a41a25852cb830289b44041a7", 0x6c, 0x20044015, &(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4}, 0x80)
write$cgroup_subtree(r6, &(0x7f0000000480)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f00000004c0))
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x40, r11, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$nl_route(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001e000100000000200000000007000000", @ANYRES32=r9, @ANYBLOB="000004000a000200aaaaaaaaaa0b0000"], 0x28}}, 0xb240f6de09b96132)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x0, 0x3, 0x8, 0x100, 0xfffffffffffffffa}, @ldst={0x0, 0x3, 0x6, 0x2, 0x3, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x55, '\x00', r9, 0x0, r5, 0x8, &(0x7f0000000840)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x0, 0x633, 0xec8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r5, r6, r6, r6, r6], &(0x7f0000000900)=[{0x2, 0x4, 0xc}], 0x10, 0x4a69}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9, 0xd}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1.812696388s ago: executing program 4 (id=2587):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16, @ANYRES32], 0x44}}, 0x2040800)

1.631108591s ago: executing program 0 (id=2588):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x12, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000100000200000073011500000000009500000000000000"], &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, &(0x7f00000021c0)="01005e00001652540012345608004600002c000100000102830bc0a80101e000001694040000", 0x26, 0x0, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002240)={@local, <r1=>0x0}, &(0x7f0000002280)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002300)=0x14) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000025c0)={'ip_vti0\x00', &(0x7f0000002500)={'gretap0\x00', <r5=>0x0, 0x8000, 0x10, 0xfffffffc, 0xfffffff7, {{0x1d, 0x4, 0x3, 0x1, 0x74, 0x66, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@end, @rr={0x7, 0x7, 0x3b, [@empty]}, @generic={0x89, 0xf, "aae97bd8d0b8f15e4e801ce45f"}, @timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0x1, [{@remote, 0x8}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x7}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7fffffff}, {@multicast1, 0x8}, {@remote, 0xa}]}, @ra={0x94, 0x4}, @noop]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002680)={'ip6gre0\x00', &(0x7f0000002600)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x2, 0xf, 0x0, 0x2, @local, @private1, 0x700, 0x8000, 0x5a0df9ed}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'macvtap0\x00', <r7=>0x0}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000002700)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002740)=0x14) (async)
r9 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002780)={'team0\x00', <r10=>0x0})
bind$packet(r9, &(0x7f00000027c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002800)={'wg2\x00', <r11=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'batadv_slave_1\x00', <r12=>0x0}) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000002880)={'bridge0\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r15, @ANYBLOB="20000100", @ANYRES32=r15, @ANYBLOB="01000800000000208edd000000000000000000000001a600"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002980)={0x230, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3500dacf7d73fd63}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
write(r16, 0x0, 0x0)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async)
r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r18, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) (async)
write(r16, &(0x7f0000000000)="240000002a00010700000000000000000000000001000000010000000001000000000000", 0x24)

1.545587076s ago: executing program 1 (id=2589):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000200)=@framed={{}, [@alu={0x4, 0x0, 0x1, 0xa, 0x3, 0x50, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000300)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80000001, 0x5, 0xfffffffd}, 0x10)
write(r2, &(0x7f0000000640)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x76, 0xec0e]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000deff00001b20000008009a00"], 0x1c}}, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pimreg\x00'})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000240))
ioctl$PPPIOCGIDLE32(r6, 0x8008743f, &(0x7f0000000280))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r7, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$kcm(0x1e, 0x1, 0x0)
r8 = socket(0x1a, 0x1, 0x51)
ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0x400261f3, 0x0)

1.544865642s ago: executing program 3 (id=2590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
socket(0x27, 0x80000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8a41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x5})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x325)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x2, 0x4, 0x5, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_ident={0x2, 0xa, 0x5, 0x0, 0xf}]}, 0x58}, 0x1, 0x7}, 0x0)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="60000000320005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000", 0x60}], 0x1}, 0x0)

1.301795301s ago: executing program 4 (id=2592):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r1, 0x0, 0x0) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async, rerun: 64)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) (rerun: 64)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xfffff000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007ba8f0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a300000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.247519352s ago: executing program 3 (id=2593):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/84], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073756200"], 0x0, 0x5a}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000608)="0900000004000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1811000098da7ce45a4f27615b7da80000000000020001", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{<r3=>r0, &(0x7f00000000c0)='$\x00', 0x4c0, &(0x7f00000001c0)={@_ha_fsid={[0xfffffffa]}, {0x0, 0x8001, 0x9, 0x1}}, 0x70, &(0x7f0000000280), &(0x7f00000002c0)=0x6}, {[0x0, 0x359, 0x80000001, 0x7]}, 0x65df, 0xaa, &(0x7f00000003c0)=""/170})
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000540)={0x6, 0x0, 0xf9a})
r4 = socket$alg(0x26, 0x5, 0x0)
sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x0, 0x4841)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.181616077s ago: executing program 0 (id=2594):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0xa, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4040040)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000600020001000000080005000781c20829f44b027adffb7124ab4d337d83da7daf3406e9619058bc191c99f2399f30bc402a80f5fc7b7c427f8e2e12", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES8=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r4, &(0x7f0000000580), 0x40000000000009f, 0x20)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r5, 0x29, 0x4d, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0x1b, "449bd6b4e5eac9a62304dde5c9e47dc60728c83ac87ee65114f3c8"}, &(0x7f0000000500)=0x23)
unshare(0x20400)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x48)
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f00000005c0)={<r9=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000600))
setsockopt$sock_int(r7, 0x1, 0x10, 0x0, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYRESHEX=r3], 0x48}}, 0x4)
r11 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000014960000000000000000000010000d000100e8befaa30000000000"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000000640)={'virt_wifi0\x00', 0xbfd8})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x0)

1.103610189s ago: executing program 4 (id=2595):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x148, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x7}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3507, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}, @lastused={0xc, 0xf, 0x8}]}, 0x148}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

1.081828754s ago: executing program 0 (id=2596):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000000), 0x12d)
unshare(0x100000)
unshare(0x20080)

1.013619351s ago: executing program 3 (id=2597):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$rds(0x15, 0x5, 0x0)
close(r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x43}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@cgroup, r4, 0x2f, 0x28, r1, @void, @void, @void, @value=r2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r5, &(0x7f00000008c0), &(0x7f0000000900)=@tcp6=r6, 0x2}, 0x20)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
socket$inet6(0xa, 0x3, 0x86) (async)
r9 = socket$inet6(0xa, 0x3, 0x86)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@rand_addr=0x64010100, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x20, 0x5e}, {0x0, 0x5, 0x1, 0x1, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x4, 0x0, 0x4}, 0xf4, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x1}}, 0xe8)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c0002800800120003000008cfe9fd97dc2f760bad0a503bae289d5b7161ee7d00e1a6daaf73766d4d6a64f7cb3e1f39091b3884ff4092aed80d4e0c3d6b40d6720922980038de8ea8f0af410ea7ab5f16f6e411989cb20e725f7e456972633ab3fd66eee4bcf1"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)

878.842429ms ago: executing program 0 (id=2599):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)={'veth0_to_batadv\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000380)='GPL\x00', 0x9}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000500)={r6, 0x0, &(0x7f0000000540)=""/55}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) (async)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800)

864.208219ms ago: executing program 3 (id=2600):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f000000be80), 0x2, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000900)={{r0, &(0x7f0000000700)='syz2\x00', 0x50800, &(0x7f00000007c0)={@_ha_fsid={[0x200, 0x8]}, {0x7fff, 0x7, 0x5, 0x8}}, 0x80000000, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0xd5e8}, {[0x3f, 0x0, 0x7, 0x2]}, 0x3, 0x74, &(0x7f0000000880)=""/116}) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xa, "d92984bd1ca44c226af5160e961711a077609475b7a411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x22}, 0x60) (async)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x140) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@ipv6_getnetconf={0x3c, 0x52, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401f0028}]}, 0x3c}, 0x1, 0x5502000000000000, 0x0, 0x8000}, 0x0) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) (async)
nanosleep(&(0x7f0000000a40)={0x0, 0x5f5e100}, 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000a80), 0x4) (async)
bind$rds(r4, &(0x7f0000000ac0)={0x2, 0x4e20, @loopback}, 0x10) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000b00), 0x4)
bind$rds(r5, &(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10) (async)
connect$rds(r4, &(0x7f0000000b80)={0x2, 0x4e21, @loopback}, 0x10) (async)
sendmsg$rds(r4, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/4, 0x4}], 0x1}, 0x0)
nanosleep(&(0x7f0000000cc0)={0x0, 0x5f5e100}, 0x0) (async)
close(r4) (async)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000001040)={0x324, r8, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x174, 0x11d, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x48, 0x6c, 0x18, 0x36, 0x6c, 0x1b, 0x36, 0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x24, 0x6c, 0x1, 0x1b, 0x48, 0x9, 0x9, 0x6c, 0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0x9, 0x42, 0x6, 0x36, 0x4058374f1d802256, 0x14ebbb6ef45cec00, 0x48, 0x1, 0x0, 0x48, 0x9, 0x9, 0x3, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0xfff8, 0xd, 0x8, 0xe, 0x81, 0x7]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x4}, {0x4, 0x5}, {0x6, 0x8}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x1}, {0x0, 0x1}, {0x7, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x14}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0x15, 0xf46, 0xfff7, 0xf5fa, 0x7fff, 0x800a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x79c, 0x18, 0x6, 0x3ff, 0x5, 0x1, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x9, 0x8001, 0x7, 0xb, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x1b, 0x36, 0x6c, 0x0, 0x6, 0x16, 0x16, 0x6, 0x1b, 0x3, 0xb, 0xc, 0x48, 0x1b, 0x30, 0x0, 0x69, 0x12, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x49}]}]}, @NL80211_ATTR_TID_CONFIG={0x14c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff08a5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x1b, 0x1, 0x30, 0x48, 0x3, 0x2, 0x24, 0x9, 0x36, 0x30, 0x1b, 0x30, 0xc, 0x12, 0x3a, 0x1b, 0x4, 0x9, 0x3, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xe, 0x4, 0x4, 0x1, 0x7f, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x9, 0x12, 0x1, 0x2, 0x24, 0x1b, 0x47, 0x0, 0x1b, 0xb, 0x24, 0x6, 0x36, 0x4, 0x24, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffe, 0x2439, 0x2, 0xfff, 0x6, 0xe, 0x4000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x3, 0x2, 0x56, 0x2, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4f}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x50}, 0x90) (async)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x20000080)

709.217624ms ago: executing program 2 (id=2601):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000200)='cpu.max\x00', 0x2, 0x0) (async)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpu.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000100008003000000ffffff7f0a020000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020e924000000000000968f349dcbc55d9e6876016225eb3ef29df9785df1fef96db218c8011bb136e001f6a024d7d3f88ddad9e112240ecd1604b6a19632f0949c9561bce33598ecb4886d97474f50c216e94c1f0b64585fd6d6fe546e78938295a4753997edf459f8e92d6186385d699b6c3a35264af061110f7773aeba3856281dfb59967dcb5f38c7b8f500f6d45a2a92b96c567e782fe9ba943f58f936d485"], 0x48)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r3, 0x11e, 0x60, 0x0, &(0x7f00000001c0))
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8ac2}, &(0x7f00000000c0)=0x8)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x29) (async)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x29)

683.888872ms ago: executing program 2 (id=2602):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r0], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x4, 0x25ffdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x40, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x10)

677.597146ms ago: executing program 4 (id=2603):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000580)={0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xdc28dd, 0xb}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x50}}, 0x4c840)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2153274bf4b2"}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000feffffff060000000e0001006e657464657673696d0000000f0002006e657464657673686d300000080003000000000008000b005809000006001600940700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004)

581.619514ms ago: executing program 3 (id=2604):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000040000000000000000004000000bb7f1a00be00feff000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000600)=""/147, 0xffffffb0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xfd90, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x366, 0x10, &(0x7f0000000800), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000900)={&(0x7f0000000000)="30cf91930f43596573cd71370853bbc9594ac80a60286f9a1bec7f4cbd3e2537b1941f1c948117a3b0d88fec1d8db040423115ad08f509593d7f5f7fbde7bb93af4e08b72ee6b88ca35f90efff68db2c3429f8bea9b23c40476f7e5324a6e6ab02c797427872bfb388fa75c2c1c2566b05f3e48af644c1f230cc3bfde6219b17a3a24851b502d44cb20c057f4a9142daefcf37cd852becda95b15b4e138028f6aaff336a849048a25267df8d205873e82ea1184c553e2df9bafb78e71850ac6c91427c2535fa6d93b3982bfd36ad327bed1ba038f3b5eba685e356ccf0f2e2b0e7e682f66fc6eb378a0864690788182bbd411f62b71dad", &(0x7f0000000100)=""/85, &(0x7f0000000180), &(0x7f0000000300)="a8635e651ad1e7b612ede0778870581729bf942b9f4edf838e593d8789d0edbd934bc960253dfff91918e9bc8654f31f97e3b086fe2448e0bcb6e24cf180836c3c25a85fa6", 0x3ff, r1}, 0x38)

481.347316ms ago: executing program 2 (id=2605):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x20c, 0x70bd2a, 0x10001, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a11}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f46}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x84080}, 0x20004000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xc0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x40}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd6}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x75}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb6c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x344}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CSA_IES={0x34, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xd, 0x4, 0x3d, 0x143d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x7, 0x5, 0xfff8, 0x6, 0x9, 0xa4bc, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x8, 0xb511, 0x2, 0x400, 0x4, 0x1]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x82}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x600, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x815}, 0x60048000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r2, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8213, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000044)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xe8, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x2}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0x0, 0x2, 0x4}, {0xffffffffffffffff, 0x6, 0x4}, 0x0, 0xc04e}}}, {{@ip={@private=0xa010102, @remote, 0x1fe, 0xff, 'veth0_to_bridge\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0x1}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x2b]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="a0d64b76ccca", 0xc3f, 0x1, [0x3b, 0x2d, 0x9, 0x9, 0x26, 0x35, 0xb, 0xf, 0x33, 0x7, 0x6, 0x22, 0x34, 0x38, 0x28, 0x13], 0x2, 0x8, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xffffffff, 0xff, 'geneve1\x00', 'caif0\x00', {}, {0xff}, 0x0, 0x3, 0x20}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1, 0x2}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x9c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3c7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe0bb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1b}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x800)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc005)
openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xb17791e484d59a5e}, 0xc, &(0x7f0000002540)={&(0x7f0000000fc0)={0x1544, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x12}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1510, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc7, 0x0, "1fb9055b15776b5a332df0db4765a81f5b89d9db39746ab25340a723ba2248cc997e82ae0b4f98cc4b1c52a6698fb03cd8f3c2c016487c47b9f4f874dac4817ad2c24d2afe704053acc003160c9b8dcae15fb77372a13ee299ebaa08e49122ee6fdc0a2cf639ba92d67437da5f6cdd383d016c8bcba4b86234fee1c9e35f6751256cbba6c8916b96fe845d05e3ea57855b4c06e41a701e1e8d20fd5457e5c9022f087f8e0cec930f982325cb44cc93cca2f601a2cba08679788174201e07950c6b5c54"}, @NL80211_BAND_2GHZ={0x87, 0x0, "4b64d6b73edaeae1b76c0b35bdfdb6d1a758ffca6ceb958ed08bbb4881c0d614055ec71292dc1f7d90a07767d7e212654b7c8ddb0aecc7feaf5454df4b8678794ccf0a10eb23b76a477354dd5a769bab9a25e81f75f9f7c7648ad2df87a6c342150f1fe86ed36f955a698dc84ecce2be04706f12858d1adde01f4f0fbb505f0293bb57"}, @NL80211_BAND_2GHZ={0x59, 0x0, "8832c1d4887709173a953970fe129cb4a1d9d5e6fffe2c76322cd1ad34b8d385457ea228eb32accc4d9f943bd7cbc83c6ada931135cfa74f193c78cf9a691f21597cef4eaf5150b59ccab9a96bed4bbb79ced35333"}, @NL80211_BAND_2GHZ={0x68, 0x0, "ee3037f85f46794e9403a0d2bd7fbbafc62549a41c43c2e8f4a98a65281345e2346bc2f854222de70a10a4761463ba5f1710449fa3634f2b91ae7f28f190aefb3989eaad2f185aa55aa299738358842265d0de61f7452872f0c27dbb32805cd63a87656d"}, @NL80211_BAND_6GHZ={0x45, 0x3, "065d8cb316a9c786cc9d10f9d32d25dbee8833d018e464441ec56a6e6b77608bfa54cb46e85b562ff8e03402fcf3cdf112ca0ee0d53cac591e34da3416b3491a5f"}, @NL80211_BAND_2GHZ={0xd8, 0x0, "f58bbad1b09eaa2c2fbba4f9f282fae18f599b7590da4d4099523fd39aed4e1a79cd36563450ce3bf4364fff73b72f4577b0bf8afc81221059efc4a0c4f400fa496d2b6c4b58ed30a15c1153cba86647744d4d032eeb6f1235cc79763f3cb086dda014038b3db30927da150997df288cfe634a10a80f66a057dd8846f2f6a54a86912eb3fbebbf52a10f29d41947a4b79c6b91a5877dbf49b03ba02645e894c43cb9f22cbd254738693bbc994f9d51b63272d4629910c9f96a3bff30539e636c47f3c2c15b9e00d7b9c552c1626a5483b1678309"}, @NL80211_BAND_6GHZ={0xb1, 0x3, "96e0329a85d0fad2ee5126b6ec37379fffb292587a3875ac8980ab6ad3d6df565e469bbce0287457cd892e146139c294ac926010b74b8b60d32e258df820c7da56cae212f7f4d957bd26486f62f403db674ff3835b22890f28a0e3fc9e9b1db33bbf6f853cbc5f5491ded90b3c73705b827ff808266dfa14c2b49f0c2d75a8aa734be90418645a1001eedc04d26f116143aba311eae43eb02559812e659e3bd4a662a92c1aff57c79fb5ea3b20"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0x36, 0x3, "b48b7e5982d927e3fa3142853e6d9ea816e610266300a64d631dfd05d5d1aeea38265afdaa412fa794259d6621b7bb42d592"}, @NL80211_BAND_60GHZ={0xe8, 0x2, "d41da9a9cee6c8344b5470a32a57c0b940435e89802a550003e3d684bdfeb0a8a59c0ee9f2bf60452dd4e68da9d52a1658ee10ff4f4ea918f2a0aeb51aa836fdf13b3f4c987b9c538afc2b660c4d58bae67b0607801b986828be25f51fa343570d7a3631221863f5861fc7fd21691ccafa7491fbb5eedd1c0a36faf8a7222555714939d47366f4ed915c57ad7b900b5cbe233f68792357582799a8453f24cea85fe871862ee2daf3ee3e0ccc8f299214c5afb2b7f792b1925c882697a0d59a3e3876deef587f02e0377a985b3dccfc05b495a837f9805b8a49d6e84a052874a4baa8b486"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1544}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
r8 = openat$cgroup_devices(r4, &(0x7f00000025c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000002600)={'b', ' *:* ', 'wm\x00'}, 0x9)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)=@getchain={0x34, 0x66, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x6, 0x2}, {0x7, 0x2}, {0xfff1, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024800}, 0x8041)
getsockname$inet(r6, &(0x7f0000002740)={0x2, 0x0, @loopback}, &(0x7f0000002780)=0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x78, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040048}, 0x44008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000002a40)={&(0x7f0000002940), 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x50, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4a, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000003cc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c80)={&(0x7f0000002ac0)={0x11b4, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x9d, 0x45, "5b45186a262bc30197a843a53f54e66b818ea5efec60aadc64721aac0c29c4db3f302ec78500fd4c6cb23e235b7128f92020527cb09421ed2d78d37275671bf5e0e053a8fd27fc7e4b83f705437bfc805dbb3f1a379de91be7ca270325358a8c3a609b9834d66e578c790bbd03a56a4bc471fd1acc36d2d06ddfd1bd5306990d130fdf8a2aedd7b170a3e7ac7c2dea4cf50c9d4e780959249c"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xf2, 0x45, "067497b20f68254c98351c58db013f5b38c4ab066ab6732c8a626507c27f2f7612735b2e5eb6235ac7ec73065c54de4e9bf0318604b57daadad0e968214497680de4bf3f7ff2acb73519e84968d794e680cd3d3eef0d1b5c6b66a0b9458b8932c03996b815df75deec6abad609504a2c6e988eed5b8ba62952cba6e771fcb3993363ac9e42c91432ef338a8851d40e6d0ca0d99e39e3d1a84013ecaf5f059b86eb89ba1d66e03b76fd1a223a7d25ee70b4ba58737aae62870bed49d96173d6967138e818747b55c0c069fa4a6c0e1877cb013491807015c67442a1662f567147c4c2f8339531c11f11e869cd0d77"}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x4011}, 0x51)
socket$pptp(0x18, 0x1, 0x2)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0xef382f5a63bbe154}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1b7a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048010)

452.798447ms ago: executing program 0 (id=2606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010000000000000000001d01040008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x24}}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/net\x00')
syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/ipc\x00')
connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x8}, 0xa)

401.672988ms ago: executing program 1 (id=2607):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34ae9}]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feffffff0200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990100020000480000000800270001000000080026001c1600"], 0x38}}, 0x840)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)

358.204483ms ago: executing program 4 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18e0094})
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000bc0)=""/4123, 0x101b}, {&(0x7f0000001c00)=""/128, 0x80}, {&(0x7f0000001c80)=""/4094, 0xffe}, {&(0x7f0000002c80)=""/183, 0xb7}, {0x0}, {&(0x7f0000002d40)=""/109, 0x6d}, {&(0x7f0000002dc0)=""/4115, 0x1013}, {&(0x7f0000003e00)=""/246, 0xf6}, {&(0x7f0000003f00)=""/142, 0x8e}, {&(0x7f0000003fc0)=""/245, 0xf5}, {&(0x7f00000040c0)=""/158, 0x9e}], 0xc}, 0x10082)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'syz_tun\x00', <r4=>0x0})
r5 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10)
connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)
sendto$inet6(r5, &(0x7f0000000080)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xdc0, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00"], 0x0)

280.089297ms ago: executing program 2 (id=2609):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x114, 0x40, 0x107, 0x70bd2c, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xfc, 0x15e, 0x0, 0x1, [@nested={0xf7, 0x10, 0x0, 0x1, [@generic="82a726f9cefaf044d9cfe0606f5b0da9783d6b4c872ea4c18861b17a1d589838407909072143c4769b08429b0c235c55ce6676ed6ae2128719e7dbd5c4a3a96d2e2d8aa0358d4a4fd9fcbb04a6fbb9930d22d2fdd45dd7cd78c8bba148d489a1d36f0278d0092b53307bd72d3065cdd0dba6f8018c744a41a81c2755eda3309b7524b9c399e6421ebcfd2e7bbe08862576b3e68dcd67cce02d784cb63744810ef28be9d2b9de260b61d36dd21255b82967fd1c32c200935c5b0e1eeab2929d9f99f2accdf2174973fd57e424f13260c7bcb70ab3bb01efbbdcf1e8913e63bb07f9effaa6295de08e7d04d3335e50180db9b61f"]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c084}, 0x2000c000)

161.786313ms ago: executing program 2 (id=2610):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000040000000000000097aa000118430000fdffffff00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000f1b60300004000000085000000b400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0)

129.243315ms ago: executing program 1 (id=2611):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xa96)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=r4, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3af1678a9589c37097d99bc26a78f96b910612e9162d17c475a922e9c37b3c114c8d12739bf68a5489ff6ddcd8ccc9e5bc1bbd9"], 0x48}}, 0x4)

413.356µs ago: executing program 0 (id=2612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x1d, 0xf, &(0x7f0000002840)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f00000028c0)='GPL\x00'}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002580)={r4, &(0x7f00000025c0), &(0x7f0000002600)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000026c0)="01", 0x1}], 0x1}}], 0x1, 0x241)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x22a0, 0x2c, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x11, 0x1}, {0x9, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x14, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x225c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x9}}, @TCA_MATCHALL_ACT={0xd48, 0x2, [@m_gact={0xcc, 0x18, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8, 0x3, 0x4, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x27e6, 0x10000000, 0x5, 0x800}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc92, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x10000000, 0xcb43, 0x5}}]}, {0x49, 0x6, "be572fa41daaecd0b2a53a5f5c5a35c34b8e52fd9e277b0d2c15fe63c27719f50a24c6b1af237fd3b9dbc512f75568655b12b3a663581ffa9dc9783e59690c1116ef276a35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x900, 0x18, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x7, 0x7f, 0x5b5, {0x69, 0x2, 0x9, 0x0, 0x6, 0x9}, {0x3, 0x1, 0x8, 0x7, 0x3, 0x8}, 0xff, 0x9, 0x5f3d39df}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x60, 0x3, 0x5, 0x81, 0x0, 0x6, 0x1b5e240e, 0x5, 0x7, 0x9, 0x8, 0x6c, 0x9, 0x10001, 0xe75, 0x200, 0x4, 0x6, 0x9, 0x2, 0x6f3f, 0x1d08bff0, 0x5, 0x6, 0x5, 0xfae4, 0x5, 0x9, 0x10001, 0x1, 0x4, 0x1, 0x0, 0x4, 0x4, 0x3b84, 0x7, 0x400, 0x7, 0xffff, 0xce01, 0x7, 0x5, 0x2, 0x6, 0x8000, 0x3, 0x3, 0x5, 0x6, 0x0, 0x5, 0x1, 0x406, 0x4, 0x14e, 0x5, 0xa, 0x7, 0x80000001, 0x401, 0x1, 0x3, 0x1, 0x0, 0x1, 0x62, 0x3, 0x7, 0x4, 0x7ff, 0x6, 0x2, 0x0, 0x800, 0x214, 0x87f, 0x401, 0x7, 0xe8, 0x9, 0x63, 0x600a, 0x0, 0xbf6, 0x8e, 0xffffffff, 0x6, 0x1, 0x3ff, 0xec, 0x2, 0x9, 0x2037, 0x7, 0x7fff, 0x4, 0x81, 0x4, 0x6, 0x0, 0x2, 0x3, 0x4, 0xa9, 0x5, 0x10001, 0x70, 0x9, 0x1, 0x3, 0x6, 0x6, 0x1, 0x14, 0x0, 0x2, 0x76, 0x5ad, 0x4, 0x9, 0x808, 0x0, 0xaf3, 0x5, 0x9, 0x3, 0x18d, 0x2, 0x8, 0x53, 0x4, 0xb1e4, 0x1, 0x2, 0x200, 0x80000001, 0x2, 0x7fffffff, 0x81, 0xd027, 0xc, 0x3ff, 0x2, 0x6, 0x35, 0x6, 0xfffffffb, 0x0, 0x8, 0x5, 0x400, 0x22a57171, 0x8d, 0xeee, 0x2, 0xd0b, 0x6, 0xc2, 0xcafc, 0x5, 0x5, 0x4, 0x7fff, 0x20c2, 0x6, 0x2, 0x5, 0x7c, 0x3ff, 0x5, 0x3, 0x0, 0x8, 0x400, 0x0, 0x38, 0x80000001, 0x7fffffff, 0x3, 0x3, 0x10001, 0x1, 0x9, 0x7a, 0x5, 0x5, 0x8, 0xffffffff, 0x7fff, 0x10, 0x7, 0x800, 0xb02, 0x179b, 0x200, 0x7fff, 0xe, 0xffffffc1, 0x3, 0x8, 0x6, 0x5, 0x3, 0x2, 0x8, 0x3, 0xfffffff2, 0xf6f1, 0x3, 0x81, 0xc, 0x0, 0x401, 0x400, 0x9, 0x8, 0x1, 0x8, 0x8, 0x400, 0xbf21, 0x2, 0x9, 0x2, 0xfced, 0x7fff, 0x5, 0xffffff57, 0x6, 0x3, 0x9, 0x100, 0xc, 0x24, 0x2, 0x80, 0xfffeffff, 0x800, 0x2c5a, 0x0, 0x0, 0x7, 0xfffff000, 0x7, 0x0, 0xffffffff, 0x100, 0x7283, 0x3, 0x4, 0x27, 0x3, 0x9, 0x401, 0x440]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1000, 0x462, 0x5, 0xfffffffa, 0x3, 0x6, 0x7fffffff, 0x9, 0x5, 0x5, 0x2, 0x3, 0xf, 0x3, 0x9, 0x2, 0x8, 0x10001, 0x3, 0x6, 0x9, 0x1, 0xf7, 0x46000000, 0xffffff48, 0xfff, 0x80000000, 0xa, 0x946, 0x9, 0x2, 0x4, 0x0, 0x8, 0x97c0, 0x7, 0xfffffffd, 0xfffffffb, 0x9, 0x10000, 0x3, 0x4, 0xffff35f6, 0x9, 0x8001, 0x200, 0xffffff7f, 0x7, 0xffffffff, 0x6438b376, 0xffffff08, 0x1, 0x7, 0xfe4, 0x7ff, 0x6, 0x80, 0x2, 0x0, 0x70bc, 0x2, 0x3, 0x9, 0x7fffffff, 0x7, 0x100, 0x4, 0x9, 0x7, 0x4, 0x1, 0x3, 0x9f41, 0x8, 0x7ff, 0x80000000, 0x7, 0x9, 0xffffffff, 0x81, 0x7, 0x4, 0x848, 0x100, 0x36, 0x7, 0x3, 0x1, 0x1, 0x5, 0x4, 0x20000, 0x2ad, 0x77bb, 0x8, 0x1, 0xe, 0x1, 0x9, 0x178, 0x8000, 0x2, 0x100, 0x7ce609b1, 0xc2, 0xb08f, 0x0, 0x4, 0x10, 0x3, 0x4, 0xbd12, 0x0, 0x40, 0x9, 0x8, 0x2, 0x7, 0x7, 0xf, 0x1ff, 0x3, 0x60e, 0x9, 0x132b, 0x1, 0xfffff16f, 0xe52, 0xdce, 0x1, 0x943, 0x8001, 0x2, 0x800000, 0x7d6, 0x2, 0x4, 0x5, 0x1, 0x81, 0x2280a7d2, 0xa2, 0x7, 0xfffffffb, 0x8c, 0x97, 0xad, 0x0, 0x0, 0x7, 0x8001, 0x200, 0x7, 0x3, 0xfe2, 0xb2e9, 0x6, 0xbd, 0x2b81, 0xd, 0x726, 0x6, 0x4, 0xf5e, 0x2, 0x79, 0x1, 0xbe5f, 0x7, 0x3ae, 0x4, 0x0, 0xd, 0x0, 0x7, 0x3, 0x8, 0x7fff, 0x9, 0x5, 0x5, 0x5, 0x36fb, 0x101, 0x300000, 0x1, 0x10001, 0xb5b3, 0x1, 0x4, 0x200, 0x200, 0xfffffffe, 0x1, 0x5, 0x65f6, 0x8, 0x8, 0xd432, 0x5, 0x8, 0xffff3ba8, 0xc, 0xfffff8a7, 0x1, 0x0, 0x6, 0x60af, 0x7, 0x6, 0x7, 0x200, 0x100, 0x1, 0x800, 0xd, 0x2, 0x7, 0x1, 0x6, 0x2ae, 0x4, 0x4, 0x3, 0x24e0, 0x3, 0x3, 0x2, 0x5, 0x1000, 0x0, 0x6, 0x8, 0x4, 0x4, 0x6, 0x2, 0x7, 0x81, 0xeab5c37f, 0x80, 0x9, 0x40, 0x40, 0x9, 0x8, 0x2, 0x1000, 0x2, 0x2, 0xffffffc5, 0xfffff01e, 0x4, 0xfffffff9, 0x7]}]]}, {0x7c, 0x6, "ac517c681cd10aa2bdc5dcf0c869dcb7c6a2a0f9bf537c7487339ca284cb47d1a0a4331054863182a79c001513fbc2ebc434540209f842745dabebb68d599b02a6c87e8ca22dd2b65f02d436fcae76f098ec5bb1d905c383a58400fe16b12f5a5a7849a11c3e6280712e24b8a72ec637cf854c35a00e0948"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd66}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x292}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x10000000, 0x9, 0x8}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb54}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x84, 0x6, "4368d749df327fac33d57dde8fca3f7d769a0cb64b06a1d5d555618af877a28ec05a95c5441a43e2451f9ff6c5862bd05b6567698d375f1114991e156aa48820eaf13e7c4bc1d550f793a662083fd3d72953a5ee72fd50c03c8b82055f0a16f14722ac3140888ec0bd34cf2c02d14d639e091e100d40fe1d6f0be4d036079679"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xfc, 0x18, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5f, 0x6, {0x6598, 'filter\x00', 0x28, 0x5, "921ebd861f4d78296090af38f2a2cb5e7e706c6771103d3651b189205b22e6a6dd5d497df179203eb03afa5f4b1b8cfe2cc89bc975"}}, @TCA_IPT_HOOK={0x8}]}, {0x69, 0x6, "006e6ca8b46261abb8776e1e56eefc224b48f13639b73083a9e5d5f05f65fbe54833497a86f614cb54ac6b78c12504935e6f72d8a8397836710c4afd3b02dd03fbcc3046291aa944bbf0d3f471f37b5eed34a8e406e87ed9d7701a9950d64f8744f0243e6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xbc, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x6d, 0x6, "53ca9e596712c6a15a8197199989d6f11b5e8cfdd2a90aaa003b2bbd322ef856febcae48654f8ea35513caf502d9fa1a91b37e61b6d628d9c93d4990a8c0eb0ea641aad22dc90ba976ef060cd32c17836bf47213d9d892dcf29a374a4d4b336fa76f78b13665263c3a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xb4, 0x1c, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3, 0x6, 0x6c8, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1000000, 0x6, 0xcf, 0x88}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2136, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65a8, 0x8, 0x7, 0x400, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x2, 0x3, 0x8, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16f5, 0x5}}]}, {0xd, 0x6, "49a1efd5dd81b5c920"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xb}}, @TCA_MATCHALL_ACT={0x14e8, 0x2, [@m_simple={0x128, 0xa, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xf, 0x4, 0x4, 0x7}}, @TCA_DEF_DATA={0x8, 0x3, '-+$\x00'}, @TCA_DEF_DATA={0xa, 0x3, '-/^-(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4, 0x10000003, 0xf, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, '[@-:,\x00'}]}, {0xa9, 0x6, "ae9d7f168acf225cc3319d8876e1dc13b8e225840d9d99f86d895cf944535a6d82c39da3b5ccafd5cf21bf4c67fc76a2f26d6aaaa9f4364da24a7cd4c59bbe6173c556aea2d278e1f13c0eb29ccad18cc9a0fa24a400cd7e1d6f7c25f5e05003d03067643d8daad9c84e6ad9776b4eb38e8b6bfdacaab0df9e150bbb651f53d708840cc754f9f0bf76f2a3d735391da6f26b9c0b4cf540eccdeb67abd577459930f208a1a5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x10a8, 0x5, 0x0, 0x0, {{0xc}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x4, 0xffffffffffffffff, 0x8000, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x40}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xfff2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1b11}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81, 0x91, 0x7, 0xfffffff9, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x4, 0x66, 0xd}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x144, 0x17, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x272, 0xe8, 0x1, 0x1, 0x1}, 0x2}}]}, {0xea, 0x6, "9e5df060248fe69583c02c8fcd5ffe94e31ca87d7fec2a32f8d14951df14be0cecf66a90e6bee8910da8c3ba6c12b021070f805a32003e1c22e5b14a5c1af81b13a3dbcf7bb400b3a384b2c3c564d054d686986d43b0bf36788feb2db279ef64282f17c1b9f6a74679826948c963350f136e534d2ab1a219cefca3f61eec9426439fb2dd112a5b2220ba249add9404d00614339566eb48bb372e2e92159aa9f477d12a7b70b9466fd15f51e316ef87ae28f52f9b4d797b5b44013ee37940d8a951b9afd1235a6ee4aeff77e59dfecda81cfd40915524d92eb574092aafacd94f54da1a8ea450"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_nat={0xb0, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x22b, 0x3ff, 0x1, 0x5, 0x9}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x5, 0xff, 0x5}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, 0xff}}]}, {0x37, 0x6, "af64e69e28751f0f429eaabafedfbe84cfd374841282adc25cee66f8f2a2f9e2e666af9f1f565d1f62f74c79f2e048bede4f2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x120, 0xc, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x6, 0xff, 0x4}, 0x1}}]}, {0xd1, 0x6, "e1c03985d6071c493774111824bc76cd2bb0d7db485331d329b94ff9301b63445582d45fed24a8b60936b8104ae045542700fd5f293f8a450a87deec7220a46793a7c0ce7ec699b042aad74dd55abed4e4f5b1f80b9ff7ffdd967cb8b3f772df0e5b3552fe0f709498de160d9bebf311e81cfeb5922bce834fa2d410a979b16e34958a93b71a4b11488ee26424ba4a5bd15a9fb8a3d511839a544b887437b50760852252374cc928925029176ed697e5484d14703bdd1b0f607f9746d65cb7a826ba4209d2c014f2bee321e560"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}]}, 0x22a0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

0s ago: executing program 2 (id=2613):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1400000013faff000000000006000002"], 0x14}], 0x1}, 0x0) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000200)={@loopback, @broadcast}, &(0x7f0000000280)=0x8) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002d00)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002d40)=r4, 0x4) (async, rerun: 64)
sendmsg$kcm(r3, &(0x7f0000002d80)={0x0, 0xc, &(0x7f0000002dc0)=[{&(0x7f0000002e00)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (rerun: 64)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0x1d4}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000580)=0x3e0)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(r6, &(0x7f00000001c0)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180200000300008279ea200015000000c5200000fd5103009500000000000000d42755965b5e0e54611b529387c81a57ba759ea1b5b824c67b39880d08c71ef55347f1d6e357fe5a201b699fc0ff0c164e213aa886400619fe7c1e9b45d9a8abfb370eadd192fe27e182657d65ccf71cd3ee77da8228f88e72171b6af73e39dd21cffb7a5ff902d4568256cc2f64876c2d8622b15955908de2e06f"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0xf3, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000020a010100000000000000d6f4527360d599a407000a0000030900010073797a31000000001400000011000100000000854b1fddac45e1400bb864910173c2eab89d8058fc33260dfbc7582e"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (rerun: 32)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000)
accept4(r1, 0x0, &(0x7f0000000b40), 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r5, 0x1000) (async)
socket$inet6_sctp(0xa, 0x801, 0x84)

kernel console output (not intermixed with test programs):

unters copy to user failed while replacing table
[  106.796611][ T6952] Cannot find add_set index 0 as target
[  106.813451][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.814123][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.000028][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.008933][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.392686][   T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.392732][   T43] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.392764][   T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.511190][ T6973] __nla_validate_parse: 5 callbacks suppressed
[  107.511211][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[  107.536187][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[  107.628652][ T6972] dvmrp1: entered allmulticast mode
[  107.747177][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'.
[  107.790054][ T6978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.790079][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.796650][ T6980] netlink: 'syz.4.278': attribute type 12 has an invalid length.
[  107.976715][ T6993] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[  107.989852][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'.
[  107.992449][ T6990] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  108.010471][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'.
[  108.047978][ T7000] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[  108.120011][ T6993] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.187863][ T6990] bond1: option mode: invalid value (107)
[  108.191086][ T6990] bond1 (unregistering): Released all slaves
[  108.217024][ T7012] netlink: 80 bytes leftover after parsing attributes in process `syz.2.285'.
[  108.270623][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.285'.
[  108.279865][ T6990] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  108.291001][ T6994] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  108.370097][ T6990] bond1: option mode: invalid value (107)
[  108.373190][ T6990] bond1 (unregistering): Released all slaves
[  108.407963][ T6990] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  108.450248][ T6990] bond1: option mode: invalid value (107)
[  108.452108][ T6990] bond1 (unregistering): Released all slaves
[  108.546422][ T7030] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  108.548842][ T6990] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  108.619543][ T6990] bond1: option mode: invalid value (107)
[  108.621263][ T6990] bond1 (unregistering): Released all slaves
[  108.676569][ T7030] netlink: 'syz.4.288': attribute type 4 has an invalid length.
[  108.736287][ T6990] netlink: 'syz.3.281': attribute type 1 has an invalid length.
[  108.793702][ T6990] bond1: option mode: invalid value (107)
[  108.804961][ T6990] bond1 (unregistering): Released all slaves
[  108.858795][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  108.995348][ T7051] netlink: 'syz.3.293': attribute type 1 has an invalid length.
[  109.028364][ T7051] bond1: entered promiscuous mode
[  109.028811][ T7051] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.048888][ T7051] bond1: (slave bridge1): making interface the new active one
[  109.048907][ T7051] bridge1: entered promiscuous mode
[  109.050130][ T7051] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  109.067664][ T7051] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  109.067685][ T7051] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  109.213796][ T7057] netlink: 1 bytes leftover after parsing attributes in process `syz.1.296'.
[  109.220324][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'.
[  109.225727][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  109.336915][ T7061] syzkaller0: entered promiscuous mode
[  109.336937][ T7061] syzkaller0: entered allmulticast mode
[  109.483063][ T5641] block nbd0: Receive control failed (result -32)
[  109.483525][   T53] block nbd0: Receive control failed (result -32)
[  109.925168][ T7103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.925547][ T7102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.086024][ T7109] netlink: 'syz.2.314': attribute type 83 has an invalid length.
[  110.099212][ T7110] netlink: 'syz.2.314': attribute type 83 has an invalid length.
[  110.135990][ T7115] xt_ecn: cannot match TCP bits for non-tcp packets
[  110.217568][ T7121] openvswitch: netlink: IPv6 tunnel dst address is zero
[  110.262974][ T1151] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82
[  110.351635][ T7132] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[  110.489456][ T7137] raw_sendmsg: syz.1.319 forgot to set AF_INET. Fix it!
[  110.516466][ T7135] bond1: (slave bridge1): making interface the new active one
[  110.517778][ T7135] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  110.880536][ T7158] ip_tables: iptables: counters copy to user failed while replacing table
[  110.981670][ T7166] bond0: (slave bond_slave_1): Releasing backup interface
[  111.154777][ T7178] netlink: 'syz.4.329': attribute type 10 has an invalid length.
[  111.155396][ T7178] syz_tun: entered promiscuous mode
[  111.191448][ T7178] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  111.213629][ T1174] bond0: (slave bond_slave_0): interface is now down
[  111.213657][ T1174] bond0: (slave bond_slave_1): interface is now down
[  111.213670][ T1174] bond0: (slave syz_tun): interface is now down
[  111.237803][ T1174] bond0: (slave bond_slave_0): interface is now down
[  111.237824][ T1174] bond0: (slave bond_slave_1): interface is now down
[  111.237836][ T1174] bond0: (slave syz_tun): interface is now down
[  111.285326][ T1174] bond0: now running without any active interface!
[  111.419654][ T7184] xt_hashlimit: size too large, truncated to 1048576
[  111.457395][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.478948][ T7185] bridge_slave_0 (unregistering): left allmulticast mode
[  111.478972][ T7185] bridge_slave_0 (unregistering): left promiscuous mode
[  111.479064][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.884663][ T7209] xt_hashlimit: size too large, truncated to 1048576
[  112.895995][ T7261] netlink: 'syz.3.352': attribute type 1 has an invalid length.
[  112.900649][ T7261] __nla_validate_parse: 5 callbacks suppressed
[  112.900665][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.352'.
[  112.902212][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'.
[  112.997056][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'.
[  112.997083][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'.
[  113.117234][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'.
[  113.148073][ T7279] netlink: 'syz.0.356': attribute type 11 has an invalid length.
[  113.148093][ T7279] netlink: 224 bytes leftover after parsing attributes in process `syz.0.356'.
[  113.371914][ T7287] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  113.378819][ T7287] xt_socket: unknown flags 0xc
[  113.723119][ T7317] netlink: Conntrack attr has 8 unknown bytes
[  114.117423][ T7340] ip_tables: iptables: counters copy to user failed while replacing table
[  114.327628][ T7357] syzkaller0: entered promiscuous mode
[  114.327650][ T7357] syzkaller0: entered allmulticast mode
[  114.401921][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'.
[  114.401943][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'.
[  114.556578][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'.
[  114.610377][ T7380] Bluetooth: hci0: unsupported parameter 5135
[  114.610398][ T7380] Bluetooth: hci0: unsupported parameter 8192
[  114.610408][ T7380] Bluetooth: hci0: unsupported parameter 5135
[  114.610419][ T7380] Bluetooth: hci0: unsupported parameter 8192
[  114.669026][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'.
[  114.968508][ T7396] netlink: 'syz.0.387': attribute type 2 has an invalid length.
[  115.226964][ T7413] netlink: zone id is out of range
[  115.231471][ T7415] ip_tables: iptables: counters copy to user failed while replacing table
[  115.259208][ T7415] syzkaller1: entered promiscuous mode
[  115.259229][ T7415] syzkaller1: entered allmulticast mode
[  116.637689][ T7443] lo: entered allmulticast mode
[  116.801931][ T7451] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[  116.888923][ T7451] bond2: entered promiscuous mode
[  116.889339][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.890098][ T7459] bond2: entered allmulticast mode
[  116.914200][   T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.945069][ T7451] bond2: (slave bridge1): making interface the new active one
[  116.945090][ T7451] bridge1: entered promiscuous mode
[  116.945290][ T7451] bridge1: entered allmulticast mode
[  116.946218][ T7451] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  117.544564][   T53] Bluetooth: hci1: command tx timeout
[  117.577327][ T7500] netlink: 'syz.3.410': attribute type 30 has an invalid length.
[  117.668123][ T7507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.923969][ T7525] __nla_validate_parse: 10 callbacks suppressed
[  117.923988][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'.
[  117.929387][ T7524] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  118.091353][ T7534] tipc: Started in network mode
[  118.091389][ T7534] tipc: Node identity ac14142f, cluster identity 4711
[  118.113864][ T7534] tipc: Enabled bearer <udp:syz2>, priority 10
[  118.160955][ T7534] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  118.344753][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'.
[  118.386099][ T7543] bridge2: entered promiscuous mode
[  118.386121][ T7543] bridge2: entered allmulticast mode
[  118.399529][ T7543] team0: Port device bridge2 added
[  118.432445][ T7543] tipc: Enabling of bearer <if:i> rejected, media not registered
[  118.479820][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'.
[  118.524504][ T7549] bridge3: entered promiscuous mode
[  118.524526][ T7549] bridge3: entered allmulticast mode
[  118.539587][ T7549] team0: Port device bridge3 added
[  118.544862][ T7554] tipc: Enabling of bearer <if:i> rejected, media not registered
[  118.885599][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  118.989910][ T7576] netlink: 'syz.3.426': attribute type 2 has an invalid length.
[  119.012114][ T7576] netlink: 'syz.3.426': attribute type 58 has an invalid length.
[  119.012143][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'.
[  119.156110][ T7593] netlink: 'syz.4.432': attribute type 1 has an invalid length.
[  119.181340][ T7593] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.186460][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'.
[  119.196159][ T7593] netlink: 'syz.4.432': attribute type 10 has an invalid length.
[  119.196177][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'.
[  119.215872][ T7593] bond1: (slave bridge3): making interface the new active one
[  119.228718][ T7593] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  119.229291][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'.
[  119.251114][ T6936] tipc: Node number set to 2886997039
[  119.320637][ T7603] netlink: 'syz.3.435': attribute type 83 has an invalid length.
[  119.514190][   T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.514434][   T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.543106][ T6936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.553608][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.033997][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.941304][ T7624] netlink: 'syz.2.444': attribute type 3 has an invalid length.
[  121.032470][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'.
[  121.035451][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'.
[  121.217115][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.265978][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.450'.
[  121.830361][ T7700] ip_tables: iptables: counters copy to user failed while replacing table
[  121.974360][ T7710] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  121.998147][ T7712] netlink: 'syz.0.459': attribute type 1 has an invalid length.
[  121.998752][ T7711] netlink: 'syz.2.462': attribute type 12 has an invalid length.
[  122.056202][ T7706] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.083541][ T7710] bridge4: entered allmulticast mode
[  122.180877][ T7712] 8021q: adding VLAN 0 to HW filter on device bond3
[  122.280428][ T7711] bond2: option primary_reselect: invalid value (255)
[  122.291985][ T7711] bond2 (unregistering): Released all slaves
[  122.384311][ T7728] hsr_slave_1 (unregistering): left promiscuous mode
[  122.449724][ T7729] hsr_slave_0: left promiscuous mode
[  122.460915][ T7729] hsr_slave_1: left promiscuous mode
[  122.728452][ T7748] syzkaller0: entered promiscuous mode
[  122.728474][ T7748] syzkaller0: entered allmulticast mode
[  122.774139][ T7758] netlink: 'syz.0.478': attribute type 1 has an invalid length.
[  122.916917][ T7757] block nbd3: not configured, cannot reconfigure
[  122.938176][ T7762] veth1_to_team: entered promiscuous mode
[  122.948741][ T7762] veth1_to_team: left promiscuous mode
[  123.036669][ T7769] __nla_validate_parse: 9 callbacks suppressed
[  123.036690][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'.
[  123.036709][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'.
[  123.036738][ T7769] netlink: 'syz.2.481': attribute type 3 has an invalid length.
[  123.151768][ T7772] syzkaller0: entered promiscuous mode
[  123.151793][ T7772] syzkaller0: entered allmulticast mode
[  123.243924][ T7786] xt_bpf: check failed: parse error
[  123.255525][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  123.306752][ T7782] tap0: tun_chr_ioctl cmd 1074025672
[  123.306793][ T7782] tap0: ignored: set checksum disabled
[  123.382565][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  123.483239][ T7801] xt_socket: unknown flags 0xc
[  124.183124][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  124.183894][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  124.521486][ T7810] gre0: Caught tx_queue_len zero misconfig
[  124.521876][ T7814] lo: entered promiscuous mode
[  124.556861][ T7814] netlink: 'syz.0.493': attribute type 2 has an invalid length.
[  124.556883][ T7814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.561641][ T7819] netlink: 'syz.0.493': attribute type 2 has an invalid length.
[  124.561670][ T7819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.434299][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.505'.
[  125.486241][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'.
[  125.486595][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'.
[  125.553534][ T7890] netlink: 'syz.3.508': attribute type 2 has an invalid length.
[  125.810246][ T7897] gretap0: entered promiscuous mode
[  125.896207][ T7856] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  126.165225][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'.
[  126.211628][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  126.426600][ T7937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  126.489904][ T7943] netlink: 'syz.1.522': attribute type 1 has an invalid length.
[  126.707091][ T7957] bond3: (slave gretap2): making interface the new active one
[  126.707509][ T7957] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  126.753278][ T7963] syzkaller0: entered promiscuous mode
[  126.753300][ T7963] syzkaller0: entered allmulticast mode
[  127.302898][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.558409][ T8017] smc: net device lo applied user defined pnetid SYZ0
[  127.675069][ T8026] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[  128.112661][ T8051] tipc: Can't bind to reserved service type 2
[  128.134377][ T8050] netlink: 232 bytes leftover after parsing attributes in process `syz.1.547'.
[  128.222484][ T8059] unsupported nlmsg_type 40
[  128.341241][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'.
[  128.394794][ T8075] netlink: 'syz.1.553': attribute type 9 has an invalid length.
[  128.394815][ T8075] netlink: 23 bytes leftover after parsing attributes in process `syz.1.553'.
[  128.511186][ T8084] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  128.681301][ T8100] x_tables: duplicate underflow at hook 2
[  128.694261][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'.
[  128.962775][ T5641] Bluetooth: hci3: hardware error 0x0d
[  129.143150][ T1038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.144186][ T1038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.165040][ T7979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.247157][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'.
[  129.249013][ T8139] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  129.249032][ T8139] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  129.445271][ T8151] netlink: 'syz.4.573': attribute type 4 has an invalid length.
[  129.451221][ T8151] netlink: 36 bytes leftover after parsing attributes in process `syz.4.573'.
[  129.451241][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'.
[  129.709652][ T8165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.577'.
[  130.392203][   T62] IPVS: starting estimator thread 0...
[  130.483200][ T8197] IPVS: using max 33 ests per chain, 79200 per kthread
[  130.495472][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'.
[  130.511693][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.578169][ T8204] netlink: 27 bytes leftover after parsing attributes in process `syz.2.587'.
[  130.677807][ T8200] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  130.700582][ T8200] bond4 (unregistering): Released all slaves
[  130.852039][ T8217] team0: Device gtp0 is up. Set it down before adding it as a team port
[  130.907130][ T8229] team0: Device gtp1 is up. Set it down before adding it as a team port
[  130.935325][ T8217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.062880][ T5641] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  131.178420][ T8238] v: renamed from vlan1
[  131.494475][ T8259] netlink: 'syz.1.603': attribute type 2 has an invalid length.
[  131.494495][ T8259] netlink: 'syz.1.603': attribute type 8 has an invalid length.
[  131.622428][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.160133][ T8295] geneve2: entered promiscuous mode
[  132.160157][ T8295] geneve2: entered allmulticast mode
[  132.193170][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  132.193215][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  132.193248][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  132.860612][ T8330] netlink: 'syz.3.620': attribute type 1 has an invalid length.
[  132.905201][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  132.997287][ T8335] bond2: (slave gretap2): making interface the new active one
[  133.001821][ T8335] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  133.025669][ T8336] netlink: 'syz.0.621': attribute type 2 has an invalid length.
[  133.075871][ T8347] netlink: 'syz.0.621': attribute type 2 has an invalid length.
[  133.150878][ T8350] veth0_to_team: Caught tx_queue_len zero misconfig
[  133.288200][ T8353] __nla_validate_parse: 12 callbacks suppressed
[  133.288221][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[  133.307112][ T8359] gtp1: entered promiscuous mode
[  133.307133][ T8359] gtp1: entered allmulticast mode
[  133.310366][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.310387][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.317739][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.317758][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.465196][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.465972][ T5641] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  133.634625][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'.
[  133.804541][ T8385] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  134.019546][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  134.051352][ T8399] vlan1: entered promiscuous mode
[  134.051373][ T8399] bridge0: entered promiscuous mode
[  134.051539][ T8399] vlan1: entered allmulticast mode
[  134.051552][ T8399] bridge0: entered allmulticast mode
[  134.093439][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  134.103090][ T7979] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.103789][ T7979] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.103895][ T7979] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.104007][ T7979] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.190130][ T8405] netlink: 'syz.2.637': attribute type 11 has an invalid length.
[  134.364495][ T7979] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  134.563768][ T8433] netlink: 348 bytes leftover after parsing attributes in process `syz.3.647'.
[  134.569048][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'.
[  134.569574][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'.
[  134.569755][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'.
[  134.569913][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'.
[  134.570031][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'.
[  135.133649][ T8452] netlink: 'syz.2.650': attribute type 3 has an invalid length.
[  135.135993][ T8453] netlink: 'syz.2.650': attribute type 3 has an invalid length.
[  135.215352][ T8456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.399577][ T8465] veth3: entered allmulticast mode
[  135.435805][ T5641] Bluetooth: hci2: Malformed HCI Event
[  137.295483][ T8410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  137.544366][ T8496] bond4: option xmit_hash_policy: invalid value (64)
[  137.560453][ T8496] bond4 (unregistering): Released all slaves
[  137.928318][ T8530] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  138.005159][ T8533] xt_nat: multiple ranges no longer supported
[  138.116676][ T5641] block nbd1: Receive control failed (result -32)
[  138.117559][   T53] block nbd1: Receive control failed (result -32)
[  138.217886][ T8543] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.239204][ T8543] bond4: (slave lo): Enslaving as an active interface with an up link
[  138.262043][ T8543] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  138.383879][ T8552] __nla_validate_parse: 32 callbacks suppressed
[  138.383900][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'.
[  138.536607][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'.
[  138.561293][ T8568] netlink: 'syz.1.682': attribute type 2 has an invalid length.
[  138.561313][ T8568] netlink: 244 bytes leftover after parsing attributes in process `syz.1.682'.
[  138.664807][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.013486][ T8602] netlink: 'syz.4.689': attribute type 3 has an invalid length.
[  139.015508][ T8599] netlink: 'syz.4.689': attribute type 24 has an invalid length.
[  139.025905][ T8596] syzkaller0: entered promiscuous mode
[  139.025924][ T8596] syzkaller0: entered allmulticast mode
[  139.080309][ T8596] netlink: 'syz.3.688': attribute type 1 has an invalid length.
[  139.080961][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[  139.178213][ T8607] 8021q: VLANs not supported on vcan0
[  139.199330][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'.
[  139.547657][ T8643] ip_tables: iptables: counters copy to user failed while replacing table
[  139.636823][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'.
[  139.636845][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.699'.
[  140.038242][ T8655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.038276][ T8655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.086103][ T8673] ip_tables: iptables: counters copy to user failed while replacing table
[  140.155134][ T8675] netlink: 84 bytes leftover after parsing attributes in process `syz.3.706'.
[  140.226511][ T8677] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  140.264390][ T8655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.264424][ T8655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.374873][ T8683] bond3: (slave bridge6): making interface the new active one
[  140.375364][ T8683] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  140.449867][ T8655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.449901][ T8655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.657723][ T8655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.657753][ T8655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.803483][   T62] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.803517][   T62] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.821599][   T62] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.821631][   T62] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.822525][  T141] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.822550][  T141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.892549][   T62] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.892583][   T62] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.541776][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'.
[  141.541797][ T8715] netlink: 2 bytes leftover after parsing attributes in process `syz.4.718'.
[  142.805771][ T8727] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  143.640339][ T8702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  143.640722][ T8709] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  143.641446][ T8711] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[  143.951228][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.079868][ T8740] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.091020][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.153496][ T8741] bond2: (slave geneve2): making interface the new active one
[  144.184041][ T8741] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  144.205490][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.205701][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.206436][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.206613][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.206800][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.211393][ T8740] netlink: 'syz.4.723': attribute type 1 has an invalid length.
[  144.352409][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'.
[  144.365246][ T8755] !;: entered promiscuous mode
[  144.419562][ T8761] bond0: (slave bond_slave_0): Releasing backup interface
[  144.497683][ T8761] bond_slave_0: entered promiscuous mode
[  144.497721][ T8761] bond_slave_0: entered allmulticast mode
[  144.757543][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[  144.795388][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[  144.924018][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'.
[  146.001778][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'.
[  146.078427][ T8858] 8021q: adding VLAN 0 to HW filter on device bond5
[  146.092874][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.745'.
[  146.100814][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'.
[  146.133304][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.745'.
[  146.164927][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'.
[  146.709383][ T8914] openvswitch: netlink: IP tunnel dst address not specified
[  147.268525][ T8941] netlink: 32 bytes leftover after parsing attributes in process `syz.1.763'.
[  147.414260][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  147.487247][ T5831] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.622588][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.654616][ T5831] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.782951][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.451077][ T8998] IPVS: Scheduler module ip_vs_mh  not found
[  149.455110][ T9090] __nla_validate_parse: 3 callbacks suppressed
[  149.455130][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[  149.480402][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[  149.608955][ T9104] validate_nla: 28 callbacks suppressed
[  149.608974][ T9104] netlink: 'syz.4.785': attribute type 1 has an invalid length.
[  149.663517][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'.
[  149.731221][ T9104] bond3: entered promiscuous mode
[  149.737274][ T9104] 8021q: adding VLAN 0 to HW filter on device bond3
[  149.777839][ T9104] tap0: tun_chr_ioctl cmd 1074025672
[  149.777860][ T9104] tap0: ignored: set checksum disabled
[  150.147650][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  150.169250][ T9134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'.
[  150.196776][ T9134] netlink: 64 bytes leftover after parsing attributes in process `syz.2.791'.
[  150.778496][ T9156] syzkaller0: entered promiscuous mode
[  150.778531][ T9156] syzkaller0: entered allmulticast mode
[  150.870277][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'.
[  150.976982][ T9171] netlink: 'syz.3.801': attribute type 9 has an invalid length.
[  150.977003][ T9171] netlink: 23 bytes leftover after parsing attributes in process `syz.3.801'.
[  151.139440][ T9178] netlink: 164 bytes leftover after parsing attributes in process `syz.0.804'.
[  151.297267][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'.
[  151.364162][ T9199] block nbd2: Unsupported socket: should be TCP or UNIX.
[  151.450180][ T9209] smc: smcd device lo applied user defined pnetid SYZ0
[  151.587399][ T9217] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003
[  151.706070][ T9229] netlink: 'syz.3.820': attribute type 1 has an invalid length.
[  151.737733][ T9229] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.777950][ T9229] bond4: (slave geneve3): making interface the new active one
[  151.780772][ T9229] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  152.316107][ T9260] IPv6: sit1: Disabled Multicast RS
[  152.341102][ T9266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.460267][ T9377] netlink: set zone limit has 4 unknown bytes
[  154.573996][ T9390] policy can only be matched on NF_INET_PRE_ROUTING
[  154.574010][ T9390] unable to load match
[  154.664876][ T5641] Bluetooth: hci1: command tx timeout
[  154.837554][ T9400] __nla_validate_parse: 18 callbacks suppressed
[  154.837573][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.837757][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.837938][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.838113][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.849609][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.849792][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.849960][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.850157][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.934836][ T9417] netlink: 156 bytes leftover after parsing attributes in process `syz.1.858'.
[  154.935629][ T9400] netlink: 100 bytes leftover after parsing attributes in process `syz.1.858'.
[  155.046298][ T9415] netlink: 'syz.0.859': attribute type 49 has an invalid length.
[  156.310724][ T9483] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  157.086628][ T9543] netlink: 'syz.1.890': attribute type 11 has an invalid length.
[  157.130524][ T9545] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  157.303667][ T6936] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec
[  157.391933][ T9565] netlink: 'syz.4.897': attribute type 8 has an invalid length.
[  157.829419][ T9588] netlink: 'syz.0.902': attribute type 6 has an invalid length.
[  158.478797][ T9627] dvmrp0: entered allmulticast mode
[  158.891030][ T9656] netlink: 'syz.3.918': attribute type 30 has an invalid length.
[  159.087581][ T9666] bond4: (slave lo): Releasing backup interface
[  159.088365][ T9666] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  159.179803][ T9666] bridge_slave_0: left allmulticast mode
[  159.179829][ T9666] bridge_slave_0: left promiscuous mode
[  159.189906][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.223863][ T9666] bridge_slave_1: left allmulticast mode
[  159.223887][ T9666] bridge_slave_1: left promiscuous mode
[  159.224070][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.276990][ T9666] bond0: (slave bond_slave_0): Releasing backup interface
[  159.303115][ T9666] bond0: (slave bond_slave_1): Releasing backup interface
[  159.361837][ T9666] team0: Port device team_slave_0 removed
[  159.413282][ T9666] team0: Port device team_slave_1 removed
[  159.429858][ T9666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.598182][ T9668] team0: Port device xfrm0 added
[  159.601877][ T9673] tipc: Started in network mode
[  159.601907][ T9673] tipc: Node identity 9240b91a105b, cluster identity 4711
[  159.602136][ T9673] tipc: Enabled bearer <eth:team0>, priority 0
[  159.922515][ T9686] ip_tables: iptables: counters copy to user failed while replacing table
[  160.448842][ T9712] Bluetooth: hci0: unsupported parameter 5135
[  160.448864][ T9712] Bluetooth: hci0: unsupported parameter 8192
[  160.448875][ T9712] Bluetooth: hci0: unsupported parameter 5135
[  160.448886][ T9712] Bluetooth: hci0: unsupported parameter 8192
[  160.593982][ T5831] tipc: Node number set to 2182854938
[  160.765234][ T9734] sctp: [Deprecated]: syz.3.932 (pid 9734) Use of int in maxseg socket option.
[  160.765234][ T9734] Use struct sctp_assoc_value instead
[  160.828872][ T9736] __nla_validate_parse: 34 callbacks suppressed
[  160.828890][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'.
[  160.867850][ T9739] netlink: 'syz.2.933': attribute type 97 has an invalid length.
[  160.867874][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'.
[  160.867888][ T9739] netlink: 'syz.2.933': attribute type 97 has an invalid length.
[  160.867900][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'.
[  160.929199][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'.
[  161.057941][ T9746] netlink: 'syz.4.937': attribute type 15 has an invalid length.
[  161.060742][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'.
[  161.370268][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'.
[  161.370337][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'.
[  161.417185][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'.
[  162.079864][ T9807] syzkaller0: entered promiscuous mode
[  162.079887][ T9807] syzkaller0: entered allmulticast mode
[  162.288647][ T9822] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  162.290945][ T9819] ip_tables: iptables: counters copy to user failed while replacing table
[  162.309955][ T9819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.956'.
[  162.310294][ T9819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.956'.
[  162.375006][ T9715] NFSD: Failed to start, no listeners configured.
[  162.462783][ T9835] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[  162.779904][ T9847] xt_hashlimit: overflow, try lower: 3/0
[  162.841479][ T9846] bond7: Removing last ns target with arp_interval on
[  163.307024][ T9896] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  163.307306][ T9896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.410425][ T9904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.979181][ T9922] lo: left promiscuous mode
[  164.104787][ T9056] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.104861][ T9056] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.104895][ T9056] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.216214][ T9939] ipvlan2: entered allmulticast mode
[  164.216237][ T9939] virt_wifi0: entered allmulticast mode
[  164.219717][ T9939] batman_adv: batadv0: Adding interface: ipvlan2
[  164.219733][ T9939] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.219761][ T9939] batman_adv: batadv0: Interface activated: ipvlan2
[  164.286755][ T9939] ipvlan3: entered allmulticast mode
[  164.288277][ T9939] batman_adv: batadv0: Adding interface: ipvlan3
[  164.288291][ T9939] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.288344][ T9939] batman_adv: The newly added mac address (1e:bc:c3:e3:a7:08) already exists on: ipvlan2
[  164.288359][ T9939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.288371][ T9939] batman_adv: batadv0: Interface activated: ipvlan3
[  164.436417][ T9954] openvswitch: netlink: Message has -1 unknown bytes.
[  164.942894][ T9986] netlink: 'syz.4.995': attribute type 1 has an invalid length.
[  165.021153][ T9989] bridge_slave_1: left allmulticast mode
[  165.021178][ T9989] bridge_slave_1: left promiscuous mode
[  165.021389][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.053899][ T9989] bridge_slave_0: left allmulticast mode
[  165.053921][ T9989] bridge_slave_0: left promiscuous mode
[  165.054132][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.090435][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.128063][ T9995] 8021q: adding VLAN 0 to HW filter on device bond5
[  165.129622][ T9995] bond4: (slave bond5): making interface the new active one
[  165.129905][ T9995] bond4: (slave bond5): Enslaving as an active interface with an up link
[  165.166475][ T9986] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  165.181388][T10008] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.247663][T10013] x_tables: unsorted underflow at hook 2
[  165.444740][T10028] syzkaller0: entered promiscuous mode
[  165.444764][T10028] syzkaller0: entered allmulticast mode
[  165.598914][T10033] team0: Caught tx_queue_len zero misconfig
[  165.781932][T10057] netlink: 'syz.4.1014': attribute type 19 has an invalid length.
[  165.928617][T10070] __nla_validate_parse: 24 callbacks suppressed
[  165.928637][T10070] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1016'.
[  166.106998][T10084] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  166.110523][T10078] 8021q: adding VLAN 0 to HW filter on device macsec1
[  166.386765][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1025'.
[  166.751785][T10125] ip6tnl0: Caught tx_queue_len zero misconfig
[  166.829054][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'.
[  166.830845][T10136] syzkaller0: left promiscuous mode
[  166.830863][T10136] syzkaller0: left allmulticast mode
[  166.932035][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'.
[  167.508155][T10181] sctp: [Deprecated]: syz.2.1050 (pid 10181) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.508155][T10181] Use struct sctp_sack_info instead
[  167.616191][T10188] netlink: 'syz.4.1051': attribute type 22 has an invalid length.
[  167.616227][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'.
[  167.645035][T10188] netlink: 'syz.4.1051': attribute type 22 has an invalid length.
[  167.645055][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'.
[  167.674348][ T9056] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.674437][ T9056] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.674469][ T9056] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.674500][ T9056] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.938954][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'.
[  168.161960][T10208] vlan4: entered allmulticast mode
[  168.161980][T10208] bond0: entered allmulticast mode
[  168.161991][T10208] bond_slave_0: entered allmulticast mode
[  168.162004][T10208] bond_slave_1: entered allmulticast mode
[  168.162016][T10208] syz_tun: entered allmulticast mode
[  168.199969][T10214] xt_l2tp: wrong L2TP version: 255
[  168.298627][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'.
[  168.349098][T10221] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  169.828229][T10221] bond8 (unregistering): Released all slaves
[  170.036953][T10239] tc_dump_action: action bad kind
[  170.079590][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'.
[  170.105727][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'.
[  170.429248][T10273] Bluetooth: hci0: unsupported parameter 5134
[  170.429270][T10273] Bluetooth: hci0: unsupported parameter 8192
[  170.429282][T10273] Bluetooth: hci0: unsupported parameter 5134
[  170.429294][T10273] Bluetooth: hci0: unsupported parameter 8192
[  170.430440][T10271] netlink: 'syz.2.1073': attribute type 2 has an invalid length.
[  170.626404][T10280] ip_tables: iptables: counters copy to user failed while replacing table
[  170.641373][T10283] netlink: 'syz.1.1077': attribute type 1 has an invalid length.
[  170.803915][T10279] C: renamed from lo (while UP)
[  170.806606][T10279] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  170.846602][T10296] ip_tables: iptables: counters copy to user failed while replacing table
[  171.076983][T10313] block nbd2: server does not support multiple connections per device.
[  171.077370][T10313] block nbd2: shutting down sockets
[  171.094370][T10315] tipc: Failed to remove unknown binding: 66,0,0/2886997039:391634211/391634213
[  171.094406][T10315] tipc: Failed to remove unknown binding: 66,0,0/2886997039:391634211/391634212
[  171.094576][T10317] tipc: Failed to remove unknown binding: 66,0,0/2886997039:391634211/391634213
[  171.094597][T10317] tipc: Failed to remove unknown binding: 66,0,0/2886997039:391634211/391634212
[  171.239620][T10323] rxe_eth0 speed is unknown, defaulting to 1000
[  171.798656][T10348] wlan1 speed is unknown, defaulting to 1000
[  171.798738][T10348] wlan1 speed is unknown, defaulting to 1000
[  171.801448][T10348] wlan1 speed is unknown, defaulting to 1000
[  171.821086][T10348] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  171.821119][T10348] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  171.821157][T10348] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  171.893379][T10348] wlan1 speed is unknown, defaulting to 1000
[  171.904871][T10348] wlan1 speed is unknown, defaulting to 1000
[  171.911472][T10348] wlan1 speed is unknown, defaulting to 1000
[  172.011316][T10348] wlan1 speed is unknown, defaulting to 1000
[  172.025730][T10348] wlan1 speed is unknown, defaulting to 1000
[  172.027506][T10348] wlan1 speed is unknown, defaulting to 1000
[  172.028627][T10355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.492558][T10373] __nla_validate_parse: 12 callbacks suppressed
[  172.492577][T10373] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.1102'.
[  172.492748][T10373] 0�X��D��: renamed from gretap0 (while UP)
[  172.526950][T10373] 0�X��D��: entered allmulticast mode
[  172.529030][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  172.560270][T10373] bridge5: entered allmulticast mode
[  172.717377][T10384] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1105'.
[  172.728062][T10384] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1105'.
[  172.842921][T10387] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1105'.
[  172.864295][T10387] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1105'.
[  172.976421][T10392] bridge0: entered promiscuous mode
[  172.976447][T10392] bridge0: entered allmulticast mode
[  173.070309][T10394] rxe_eth0 speed is unknown, defaulting to 1000
[  173.337682][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[  173.524654][T10410] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  173.829144][T10425] syzkaller0: entered promiscuous mode
[  173.829165][T10425] syzkaller0: entered allmulticast mode
[  173.849188][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'.
[  173.849211][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'.
[  173.851131][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'.
[  173.885020][T10394] wlan1 speed is unknown, defaulting to 1000
[  175.440890][T10523] bond5 (unregistering): Released all slaves
[  175.576055][T10530] ip_tables: iptables: counters copy to user failed while replacing table
[  175.587966][T10530] netlink: 'syz.2.1131': attribute type 1 has an invalid length.
[  176.071519][T10566] xt_IDLETIMER: timeout value is zero
[  176.123315][T10569] geneve4: entered promiscuous mode
[  176.123339][T10569] geneve4: entered allmulticast mode
[  176.142558][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  176.142622][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  176.142652][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  176.142682][ T1174] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  176.375567][T10581] netlink: 'syz.2.1145': attribute type 21 has an invalid length.
[  177.047635][T10621] netlink: 'syz.3.1156': attribute type 2 has an invalid length.
[  177.076389][   T50] IPVS: starting estimator thread 0...
[  177.076773][T10620] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  177.164169][T10629] IPVS: using max 41 ests per chain, 98400 per kthread
[  178.210517][T10703] xt_IDLETIMER: label is empty or not nul-terminated
[  178.282935][T10705] __nla_validate_parse: 7 callbacks suppressed
[  178.282957][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1174'.
[  178.370175][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'.
[  178.466907][T10711] gretap1: entered promiscuous mode
[  178.467770][T10711] batman_adv: batadv0: Adding interface: gretap1
[  178.467785][T10711] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  178.796206][T10734] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  178.982499][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.005201][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  179.008357][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1192'.
[  179.033273][T10753] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1192'.
[  179.193523][T10762] netlink: 'syz.0.1196': attribute type 2 has an invalid length.
[  179.217221][T10769] Bluetooth: hci0: unsupported parameter 5161
[  179.217243][T10769] Bluetooth: hci0: unsupported parameter 8192
[  179.217256][T10769] Bluetooth: hci0: unsupported parameter 5161
[  179.217267][T10769] Bluetooth: hci0: unsupported parameter 8192
[  179.508988][T10781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1200'.
[  179.509011][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'.
[  179.545004][T10783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1202'.
[  179.584139][T10786] netlink: 'syz.3.1203': attribute type 1 has an invalid length.
[  179.647279][T10786] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.659488][T10791] netlink: 'syz.1.1204': attribute type 4 has an invalid length.
[  179.679824][T10792] bond5: (slave veth5): Enslaving as an active interface with a down link
[  179.682578][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'.
[  179.688565][T10794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.710922][T10794] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.729564][T10791] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1204'.
[  179.736223][T10791] netlink: 'syz.1.1204': attribute type 4 has an invalid length.
[  180.104491][T10821] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  180.104703][T10821] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  180.104896][T10821] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  180.208039][T10825] syzkaller1: entered promiscuous mode
[  180.208078][T10825] syzkaller1: entered allmulticast mode
[  180.465664][T10828] syz.1.1215 (10828) used obsolete PPPIOCDETACH ioctl
[  180.486500][T10831] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  180.599719][T10837] xt_hashlimit: size too large, truncated to 1048576
[  180.665740][T10842] ip_tables: iptables: counters copy to user failed while replacing table
[  180.745528][T10836] bridge_slave_0 (unregistering): left promiscuous mode
[  180.745616][T10836] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.873958][T10837] xt_hashlimit: size too large, truncated to 1048576
[  181.151679][T10837] xt_hashlimit: size too large, truncated to 1048576
[  181.431135][T10859] validate_nla: 30 callbacks suppressed
[  181.431157][T10859] netlink: 'syz.3.1223': attribute type 4 has an invalid length.
[  181.609874][T10862] netlink: 'syz.3.1223': attribute type 17 has an invalid length.
[  183.940468][T10852] bond0: (slave syz_tun): Releasing backup interface
[  183.951586][T10852] syz_tun (unregistering): left allmulticast mode
[  184.539232][T10937] __nla_validate_parse: 5 callbacks suppressed
[  184.539252][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'.
[  184.906191][T10953] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING
[  185.521672][T10992] erspan0: entered promiscuous mode
[  185.589209][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  185.719740][T11010] netlink: 'syz.3.1251': attribute type 1 has an invalid length.
[  185.758611][T11010] 8021q: adding VLAN 0 to HW filter on device bond6
[  185.761739][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'.
[  185.761769][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'.
[  185.854293][T11016] xt_hashlimit: size too large, truncated to 1048576
[  185.937153][T11024] xt_hashlimit: size too large, truncated to 1048576
[  185.939055][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  185.948560][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'.
[  185.960766][T11028] : renamed from bond_slave_1
[  185.991187][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  186.023759][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'.
[  186.176575][T11047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1258'.
[  186.525681][T11067] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1262'.
[  186.545647][T11069] netlink: 'syz.0.1263': attribute type 3 has an invalid length.
[  186.759821][T11079] ip_tables: iptables: counters copy to user failed while replacing table
[  187.101197][T11105] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  187.377005][T11119] xt_l2tp: wrong L2TP version: 255
[  187.797225][T11145] macsec0: entered allmulticast mode
[  187.827241][T11145] veth1_macvtap: entered allmulticast mode
[  187.827369][T11145] macsec0: left allmulticast mode
[  187.827382][T11145] veth1_macvtap: left allmulticast mode
[  188.081596][T11168] dvmrp1: entered allmulticast mode
[  188.326925][T11191] netlink: 'syz.0.1300': attribute type 1 has an invalid length.
[  188.624689][T11213] netlink: 'syz.1.1304': attribute type 5 has an invalid length.
[  188.748386][T11217] ip6gre1: entered promiscuous mode
[  188.748411][T11217] ip6gre1: entered allmulticast mode
[  188.766120][T11222] veth0: entered promiscuous mode
[  188.771083][T11221] veth0: left promiscuous mode
[  188.873603][T11233] netlink: 'syz.3.1313': attribute type 4 has an invalid length.
[  189.000148][T11238] C: entered promiscuous mode
[  189.011802][T11238] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  189.252043][T11259] xt_cgroup: invalid path, errno=-2
[  189.284695][T11259] xt_cgroup: invalid path, errno=-2
[  189.323734][T11259] xt_cgroup: invalid path, errno=-2
[  189.327922][T11259] xt_cgroup: invalid path, errno=-2
[  189.335034][T11259] xt_cgroup: invalid path, errno=-2
[  189.364220][T11259] xt_cgroup: invalid path, errno=-2
[  189.376174][T11259] xt_cgroup: invalid path, errno=-2
[  189.388470][T11259] xt_cgroup: invalid path, errno=-2
[  189.399021][T11259] xt_cgroup: invalid path, errno=-2
[  189.408611][T11259] xt_cgroup: invalid path, errno=-2
[  189.691381][T11275] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[  189.696128][T11278] ebt_among: dst integrity fail: 102
[  189.792123][T11279] __nla_validate_parse: 19 callbacks suppressed
[  189.792143][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'.
[  189.792158][T11279] bridge_slave_0: default FDB implementation only supports local addresses
[  189.812133][T11275] 8021q: VLANs not supported on syzkaller1
[  189.816651][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'.
[  189.948975][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'.
[  190.311642][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'.
[  190.512135][T11319] xt_limit: Overflow, try lower: 536871034/0
[  190.567207][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  190.577611][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'.
[  190.744583][T11325] syzkaller1: entered promiscuous mode
[  190.744607][T11325] syzkaller1: entered allmulticast mode
[  190.797952][T11331] netlink: 'syz.4.1345': attribute type 1 has an invalid length.
[  190.849061][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'.
[  190.849630][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1345'.
[  190.879983][T11331] bridge5: entered promiscuous mode
[  190.881119][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1348'.
[  190.899795][T11331] bond6: (slave bridge5): making interface the new active one
[  190.900547][T11331] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  190.927530][T11341] ip_tables: iptables: counters copy to user failed while replacing table
[  190.977506][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'.
[  190.977539][T11346] netlink: 'syz.1.1350': attribute type 14 has an invalid length.
[  190.977552][T11346] netlink: 'syz.1.1350': attribute type 13 has an invalid length.
[  191.133701][T11351] syzkaller1: entered promiscuous mode
[  191.133722][T11351] syzkaller1: entered allmulticast mode
[  191.176746][T11361] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available
[  191.277825][T11366] ip_tables: iptables: counters copy to user failed while replacing table
[  191.696216][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.696551][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.700268][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.704336][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.704643][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.764985][T11394] net_ratelimit: 21 callbacks suppressed
[  191.765003][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.765312][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.769822][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.770220][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.770526][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.773188][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.773499][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.785225][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.785877][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.786170][T11394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.207190][T11398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.211819][T11398] bond_slave_0: left allmulticast mode
[  192.231343][T11398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.247255][T11374] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  192.251527][T11398] bond_slave_1: left allmulticast mode
[  192.256948][T11398] bond0 (unregistering): Released all slaves
[  192.380275][T11409] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  193.196508][T11459] netlink: 'syz.1.1381': attribute type 1 has an invalid length.
[  193.196531][T11459] netlink: 'syz.1.1381': attribute type 1 has an invalid length.
[  193.462468][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout
[  193.898139][T11488] x_tables: duplicate underflow at hook 3
[  194.088344][T11494] netlink: 'syz.2.1393': attribute type 49 has an invalid length.
[  194.345460][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.729943][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733187][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733314][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733426][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733537][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733660][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.733769][T11500] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  194.897924][T11513] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.910295][T11508] xt_l2tp: invalid flags combination: 0
[  194.941447][T11397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.062482][ T5641] Bluetooth: hci4: command 0x0405 tx timeout
[  195.250704][T11538] __nla_validate_parse: 6 callbacks suppressed
[  195.250723][T11538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1405'.
[  195.290112][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1405'.
[  195.480812][T11552] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004
[  195.857538][T11569] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  195.861643][T11569] bond7 (unregistering): Released all slaves
[  195.971931][T11577] 8021q: adding VLAN 0 to HW filter on device team0
[  196.055947][T11577] 8021q: adding VLAN 0 to HW filter on device bond2
[  196.061679][T11577] 8021q: adding VLAN 0 to HW filter on device bond3
[  196.064195][ T6936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  196.164118][ T5765] geneve3: entered promiscuous mode
[  196.208598][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'.
[  196.211005][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'.
[  196.318044][T11602] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1418'.
[  196.319369][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1418'.
[  196.321974][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1418'.
[  196.360353][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'.
[  196.419473][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'.
[  196.538951][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1424'.
[  196.635624][T11636] veth1_macvtap: left promiscuous mode
[  196.737789][T11643] IPv6: Can't replace route, no match found
[  196.738115][T11643] IPv6: Can't replace route, no match found
[  196.984266][ T6936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  197.131214][T11671] lo: entered promiscuous mode
[  197.131399][T11671] net_ratelimit: 33 callbacks suppressed
[  197.131410][T11671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.132168][T11672] xt_LOG: level 8 >= 8
[  197.387023][T11684] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  197.935597][T11730] netlink: 'syz.0.1456': attribute type 11 has an invalid length.
[  198.209880][T11750] validate_nla: 58 callbacks suppressed
[  198.209902][T11750] netlink: 'syz.0.1462': attribute type 2 has an invalid length.
[  198.358106][T11761] macsec0: entered promiscuous mode
[  198.429303][T11759] netlink: get zone limit has 8 unknown bytes
[  198.721098][ T5641] Bluetooth: hci4: connection err: -111
[  198.769284][T11780] netlink: 'syz.2.1472': attribute type 2 has an invalid length.
[  198.947832][T11788] Bluetooth: ISO socket layer initialized
[  199.036900][T11796] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  199.096345][T11792] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  199.117687][T11792] bond0 (unregistering): Released all slaves
[  199.191401][T11800] gretap2: entered promiscuous mode
[  199.191425][T11800] gretap2: entered allmulticast mode
[  199.468323][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.653450][T11836] netlink: 'syz.0.1488': attribute type 2 has an invalid length.
[  200.178813][T11880] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  200.375031][T11886] netlink: 'syz.0.1501': attribute type 1 has an invalid length.
[  200.375053][T11886] __nla_validate_parse: 18 callbacks suppressed
[  200.375064][T11886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1501'.
[  200.409156][T11886] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  200.555397][T11889] netlink: 'syz.3.1503': attribute type 1 has an invalid length.
[  200.656128][ T5641] Bluetooth: hci0: unexpected event for opcode 0x0005
[  200.747184][ T5641] Bluetooth: hci0: unexpected event for opcode 0x0005
[  201.174993][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'.
[  201.175044][T11926] openvswitch: netlink: EtherType 520 is less than min 600
[  201.246839][T11930] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1514'.
[  201.288363][T11936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.306697][T11931] syzkaller1: entered promiscuous mode
[  201.306716][T11931] syzkaller1: entered allmulticast mode
[  201.328225][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'.
[  201.328793][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  201.378419][T11939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1516'.
[  201.547542][ T4952] Bluetooth: hci2: command 0x0406 tx timeout
[  201.548044][ T5641] Bluetooth: hci1: command 0x0406 tx timeout
[  201.660553][ T9057] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa
[  201.713110][T11955] netlink: 'syz.1.1521': attribute type 1 has an invalid length.
[  201.787162][T11955] 8021q: adding VLAN 0 to HW filter on device bond10
[  201.789607][T11955] bond9: (slave bond10): making interface the new active one
[  201.790868][T11955] bond9: (slave bond10): Enslaving as an active interface with an up link
[  201.794931][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'.
[  201.794960][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'.
[  201.803695][T11955] 8021q: adding VLAN 0 to HW filter on device bond9
[  201.864719][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'.
[  202.714681][T12000] ip_tables: iptables: counters copy to user failed while replacing table
[  202.784931][T12000] xt_limit: Overflow, try lower: 536871034/0
[  202.881329][T12009] batadv_slave_0: Caught tx_queue_len zero misconfig
[  202.928967][T12007] vlan4: entered allmulticast mode
[  202.928989][T12007] gretap0: entered allmulticast mode
[  203.037820][T12015] gtp3: entered promiscuous mode
[  203.037844][T12015] gtp3: entered allmulticast mode
[  203.309133][T12024] IPv6: NLM_F_CREATE should be specified when creating new route
[  203.323008][T12025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.329276][T12024] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  203.329276][T12024] Please contact the netfilter-devel mailing list or update your nftables rules.
[  203.470163][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'.
[  205.463891][T12131] __nla_validate_parse: 39 callbacks suppressed
[  205.463911][T12131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1557'.
[  205.561023][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'.
[  205.675337][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'.
[  205.914846][T12151] netlink: 'syz.4.1562': attribute type 1 has an invalid length.
[  205.932045][T12154] netlink: 'syz.2.1563': attribute type 21 has an invalid length.
[  205.970638][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1562'.
[  206.046233][T12150] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  206.048432][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  206.063020][T12153] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.383159][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'.
[  206.784315][T12191] x_tables: duplicate entry at hook 2
[  206.845100][T12191] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  207.126391][T12209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'.
[  207.146025][T12206] bond0: Caught tx_queue_len zero misconfig
[  207.270529][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  207.435331][T12215] bond11: entered promiscuous mode
[  207.435355][T12215] bond11: entered allmulticast mode
[  207.470399][T12202] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.470966][T12202] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.521414][T12224] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.521546][T12224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.521901][T12224] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.522026][T12224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.534399][T12224] bridge0: entered promiscuous mode
[  207.534423][T12224] bridge0: entered allmulticast mode
[  207.767164][T12240] Bluetooth: hci0: unsupported parameter 5161
[  207.767187][T12240] Bluetooth: hci0: unsupported parameter 8192
[  207.767200][T12240] Bluetooth: hci0: unsupported parameter 5161
[  207.767211][T12240] Bluetooth: hci0: unsupported parameter 8192
[  208.046969][T12261] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1594'.
[  208.070935][T12251] 8021q: adding VLAN 0 to HW filter on device bond5
[  208.240088][T12268] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003
[  208.289782][T12267] netlink: 'syz.0.1597': attribute type 75 has an invalid length.
[  208.401778][T12282] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003
[  208.418051][T12279] Bluetooth: hci0: unsupported parameter 5134
[  208.418070][T12279] Bluetooth: hci0: unsupported parameter 8192
[  208.418081][T12279] Bluetooth: hci0: unsupported parameter 5134
[  208.418091][T12279] Bluetooth: hci0: unsupported parameter 8192
[  208.516216][T12288] veth0: entered promiscuous mode
[  208.529742][T12288] veth0: left promiscuous mode
[  208.898906][T12319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.019267][T12326] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  209.019290][T12326] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1616'.
[  209.227644][T12344] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  209.368240][T12352] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  210.353725][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  210.353798][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  212.163799][T12338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  212.457387][T12384] netlink: 'syz.0.1628': attribute type 2 has an invalid length.
[  212.869018][T12407] tipc: Started in network mode
[  212.869045][T12407] tipc: Node identity ac14140f, cluster identity 4711
[  212.873755][T12407] tipc: New replicast peer: 255.255.255.255
[  212.874999][T12407] tipc: Enabled bearer <udp:syz2>, priority 10
[  213.190628][T12422] ip_tables: iptables: counters copy to user failed while replacing table
[  213.205261][T12423] bond0: entered promiscuous mode
[  213.205280][T12423] bond_slave_0: entered promiscuous mode
[  213.205470][T12423] bond_slave_1: entered promiscuous mode
[  213.508211][T12438] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  213.788341][T12442] 8021q: adding VLAN 0 to HW filter on device bond12
[  213.918344][T12453] bridge7: entered allmulticast mode
[  213.967767][   T30] audit: type=1800 audit(1794192844.080:3): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1642" name="memory.events" dev="tmpfs" ino=1773 res=0 errno=-22
[  213.992382][ T6936] tipc: Node number set to 2886997007
[  214.003636][T12445] syzkaller0: entered promiscuous mode
[  214.003656][T12445] syzkaller0: entered allmulticast mode
[  214.220919][T12468] block nbd0: reconnected socket
[  214.220944][T12468] block nbd0: Unsupported socket: should be TCP or UNIX.
[  214.239787][ T5639] block nbd0: Receive control failed (result -32)
[  214.319678][T12472] __nla_validate_parse: 1 callbacks suppressed
[  214.319697][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1651'.
[  214.481116][T12492] syzkaller0: MTU not usable for tipc bearer
[  214.481256][T12492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  214.482074][T12492] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  214.535795][T12493] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  214.552049][T12493] syzkaller0: mtu less than device minimum
[  214.622127][T12495] xt_addrtype: ipv6 does not support BROADCAST matching
[  214.642444][  T141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.677880][T12498] netlink: 'syz.1.1658': attribute type 4 has an invalid length.
[  215.169263][T12507] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  215.374856][T12512] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1663'.
[  215.599396][T12538] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  215.865971][T12551] bond8 (unregistering): Released all slaves
[  216.116097][T12571] netlink: 'syz.3.1679': attribute type 12 has an invalid length.
[  216.285122][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1683'.
[  216.306997][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'.
[  216.592422][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'.
[  216.592458][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'.
[  216.635048][T12596] ip6gretap0: entered promiscuous mode
[  216.775518][T12612] ip_tables: iptables: counters copy to user failed while replacing table
[  216.849810][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'.
[  216.890142][ T5639] Bluetooth: hci2: unexpected event for opcode 0x2035
[  216.893572][T12619] xt_TCPMSS: Only works on TCP SYN packets
[  217.095576][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1693'.
[  217.141407][T12628] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  217.152967][T12628] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1693'.
[  217.570370][T12654] netlink: 'syz.0.1699': attribute type 30 has an invalid length.
[  217.643961][T12654] bond7: option arp_missed_max: invalid value (0)
[  217.643983][T12654] bond7: option arp_missed_max: allowed values 1 - 255
[  217.676160][T12654] bond7 (unregistering): Released all slaves
[  217.700077][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1701'.
[  218.078301][T12679] ip6gretap0: entered promiscuous mode
[  218.129905][T12684] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  218.692043][T12729] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  218.773965][T12740] netlink: 'syz.1.1716': attribute type 9 has an invalid length.
[  218.837925][ T6936] wlan1 speed is unknown, defaulting to 1000
[  218.846654][ T6936] syz2: Port: 1 Link DOWN
[  219.032872][T12748] tc_dump_action: action bad kind
[  219.057827][T12748] tc_dump_action: action bad kind
[  219.322753][T12777] __nla_validate_parse: 21 callbacks suppressed
[  219.322773][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.324367][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.324767][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.328874][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.329300][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.329845][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.330264][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.333546][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.333955][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.337120][T12777] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1724'.
[  219.518015][T12785] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  219.540487][T12787] netlink: 'syz.1.1727': attribute type 29 has an invalid length.
[  220.072648][T12815] ip_tables: iptables: counters copy to user failed while replacing table
[  221.303595][ T9059] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.303681][ T9059] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.303712][ T9059] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.056721][T12982] dvmrp1: entered allmulticast mode
[  222.388040][T13008] netlink: ct family unspecified
[  223.006550][T13046] netlink: 'syz.1.1766': attribute type 1 has an invalid length.
[  223.031830][T13039] bond3: option downdelay: invalid value (18446744073709551615)
[  223.031854][T13039] bond3: option downdelay: allowed values 0 - 2147483647
[  223.079201][T13039] bond3 (unregistering): Released all slaves
[  223.208617][T13038] netlink: 'syz.0.1765': attribute type 16 has an invalid length.
[  223.299051][T13038] veth0_macvtap: entered allmulticast mode
[  224.463371][T13130] __nla_validate_parse: 24 callbacks suppressed
[  224.463391][T13130] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1787'.
[  224.949052][T13156] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  225.066426][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  225.087044][T13156] 8021q: adding VLAN 0 to HW filter on device bond3
[  225.155369][T13162] bond3: (slave gretap1): making interface the new active one
[  225.156854][T13162] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  225.662941][T13189] batman_adv: batadv0: Adding interface: veth0
[  225.666775][T13189] batman_adv: batadv0: Interface activated: veth0
[  225.699900][T13189] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16
[  225.840229][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'.
[  225.840251][T13200] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1801'.
[  225.954931][T13204] veth1_macvtap: left promiscuous mode
[  226.359720][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.359839][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.359925][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360011][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360096][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360251][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360338][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360422][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360506][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360588][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360671][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360761][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360844][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.360926][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361010][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361092][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361170][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361254][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361333][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361421][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361504][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361588][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361665][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.361678][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1812'.
[  226.361754][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.364700][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.364787][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.364864][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.364944][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365023][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365101][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365180][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365259][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365338][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365423][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365501][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365580][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365659][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365758][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365837][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365914][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.365990][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366068][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366147][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366255][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366334][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366435][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366516][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366601][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366679][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366763][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366842][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366920][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.366999][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367077][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367155][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367231][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367312][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367391][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367469][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367546][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367624][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.367713][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.373025][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.373111][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.373191][ T5639] Bluetooth: hci4: unexpected event for opcode 0x00ea
[  226.395507][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'.
[  227.100747][T12691] udevd[12691]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  227.119177][T13269] xt_bpf: check failed: parse error
[  227.137156][T13254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.137188][T13254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  227.213157][T13274] wg2: Caught tx_queue_len zero misconfig
[  227.407908][T13285] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  227.407930][T13285] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1826'.
[  227.430307][T13254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.430338][T13254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  227.815306][T13254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.815336][T13254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  227.869832][T13309] smc: removing ib device rxe0
[  228.129203][T13309] smbdirect: ib_dev[rxe0] removed
[  228.463691][ T7982] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  228.463725][ T7982] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  228.464608][ T1174] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  228.464635][ T1174] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  228.637514][T13349] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  228.710956][T13349] netlink: 'syz.2.1838': attribute type 20 has an invalid length.
[  228.710988][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  228.884187][ T1174] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  228.884222][ T1174] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  228.884364][ T1174] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  228.884388][ T1174] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  228.932896][T13349] netlink: 'syz.2.1838': attribute type 20 has an invalid length.
[  228.932918][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  229.396317][T13381] netlink: 'syz.0.1844': attribute type 4 has an invalid length.
[  230.091093][T13422] netlink: 'syz.3.1854': attribute type 2 has an invalid length.
[  230.309109][T13420] wg1 speed is unknown, defaulting to 1000
[  230.313590][T13428] rdma_rxe: rxe_newlink: failed to add wg1
[  230.335167][T13420] wg1 speed is unknown, defaulting to 1000
[  230.337179][T13434] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1856'.
[  230.366963][T13420] wg1 speed is unknown, defaulting to 1000
[  230.426592][ T5639] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  230.426663][ T5639] Bluetooth: hci4: Injecting HCI hardware error event
[  230.429159][   T53] Bluetooth: hci4: hardware error 0x00
[  230.563275][T13440] �����': renamed from xfrm0 (while UP)
[  230.992145][T13462] netlink: 'syz.2.1866': attribute type 1 has an invalid length.
[  230.992166][T13462] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1866'.
[  231.017428][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  231.134741][T13420] infiniband syz0: set active
[  231.134793][    T9] wg1 speed is unknown, defaulting to 1000
[  231.134930][T13420] infiniband syz0: added wg1
[  231.140559][T13420] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  231.161553][T13420] infiniband syz0: Couldn't open port 1
[  231.161924][T13420] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  231.161953][T13420] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  231.161987][T13420] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  231.258062][T13420] RDS/IB: syz0: added
[  231.258117][T13420] smc: adding ib device syz0 with port count 1
[  231.258136][T13420] smc:    ib device syz0 port 1 has no pnetid
[  231.258206][    T9] wg1 speed is unknown, defaulting to 1000
[  231.259972][T13420] wg1 speed is unknown, defaulting to 1000
[  231.502081][T13420] wg1 speed is unknown, defaulting to 1000
[  231.761730][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.761753][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.761957][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.761972][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.767659][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.767678][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.767892][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.767906][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.768107][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.768119][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.768338][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.768351][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.775128][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'.
[  231.775146][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.775432][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.775632][T13494] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.833842][T13420] wg1 speed is unknown, defaulting to 1000
[  232.280817][T13513] netlink: 'syz.3.1881': attribute type 1 has an invalid length.
[  232.280838][T13513] netlink: 'syz.3.1881': attribute type 2 has an invalid length.
[  232.449510][T13420] wg1 speed is unknown, defaulting to 1000
[  232.585407][   T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  232.610374][T13543] netlink: 'syz.3.1886': attribute type 21 has an invalid length.
[  233.020516][T13420] wg1 speed is unknown, defaulting to 1000
[  233.076263][T13570] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  233.833593][T13629] netlink: 'syz.0.1907': attribute type 1 has an invalid length.
[  233.919571][T13629] bond7: entered promiscuous mode
[  233.920004][T13629] 8021q: adding VLAN 0 to HW filter on device bond7
[  233.973018][T13614] 8021q: adding VLAN 0 to HW filter on device bond7
[  233.973343][T13614] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address
[  233.973361][T13614] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  234.042262][T13614] bond7: (slave xfrm1): making interface the new active one
[  234.042286][T13614] xfrm1: entered promiscuous mode
[  234.061275][T13614] xfrm1: left promiscuous mode
[  234.775183][T13691] xt_CT: No such helper "pptp"
[  234.797543][T13690] xt_CT: No such helper "pptp"
[  234.838356][T13703] net_ratelimit: 4 callbacks suppressed
[  234.838375][T13703] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  234.839076][T13703] sctp: [Deprecated]: syz.3.1925 (pid 13703) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.839076][T13703] Use struct sctp_sack_info instead
[  234.839684][T13703] openvswitch: netlink: IP tunnel dst address not specified
[  235.032323][T13715] sctp: [Deprecated]: syz.4.1930 (pid 13715) Use of int in maxseg socket option.
[  235.032323][T13715] Use struct sctp_assoc_value instead
[  235.132039][T13721] netlink: 'syz.1.1932': attribute type 1 has an invalid length.
[  235.208597][T13723] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  235.211716][T13723] syzkaller0: entered promiscuous mode
[  235.211730][T13723] syzkaller0: entered allmulticast mode
[  235.215016][T13723] netlink: 'syz.1.1933': attribute type 3 has an invalid length.
[  235.493597][T13736] netlink: 'syz.4.1938': attribute type 1 has an invalid length.
[  235.508922][T13734] __nla_validate_parse: 16 callbacks suppressed
[  235.508938][T13734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'.
[  235.527056][T13739] netlink: 'syz.4.1938': attribute type 1 has an invalid length.
[  235.871553][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1942'.
[  236.252916][T13782] ip_tables: iptables: counters copy to user failed while replacing table
[  236.263418][T13786] tls_set_device_offload_rx: netdev not found
[  236.266458][T13784] netlink: 'syz.2.1949': attribute type 4 has an invalid length.
[  236.271176][T13787] netlink: 'syz.2.1949': attribute type 4 has an invalid length.
[  236.343753][T13792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'.
[  236.482003][T13801] netlink: 344 bytes leftover after parsing attributes in process `syz.3.1955'.
[  236.898548][T13830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.899257][T13830] syzkaller0: entered promiscuous mode
[  236.899277][T13830] syzkaller0: entered allmulticast mode
[  236.976663][T13836] netlink: 'syz.0.1966': attribute type 1 has an invalid length.
[  237.019886][T13843] Bluetooth: MGMT ver 1.23
[  237.046949][T13828] tipc: Resetting bearer <eth:syzkaller0>
[  237.103086][T13828] tipc: Disabling bearer <eth:syzkaller0>
[  237.104281][T13826] xt_hashlimit: size too large, truncated to 1048576
[  237.189743][T13850] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1968'.
[  237.342011][T13863] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1968'.
[  237.544364][T13875] netlink: 'syz.0.1971': attribute type 4 has an invalid length.
[  237.941270][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'.
[  239.426324][T13986] netlink: 'syz.3.2001': attribute type 1 has an invalid length.
[  239.503499][T13990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2001'.
[  239.518320][T13986] 8021q: adding VLAN 0 to HW filter on device bond9
[  239.615657][T13986] bond9: (slave bridge10): making interface the new active one
[  239.620457][T13986] bond9: (slave bridge10): Enslaving as an active interface with an up link
[  239.876469][   T30] audit: type=1800 audit(1794192869.990:4): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1997" name="memory.events" dev="tmpfs" ino=1846 res=0 errno=-22
[  239.914093][T14002] IPv6: NLM_F_REPLACE set, but no existing node found!
[  240.119812][ T7982] bond0: (slave bond_slave_0): interface is now down
[  240.121249][T14011] netlink: 'syz.3.2008': attribute type 10 has an invalid length.
[  240.142717][ T9058] bond0: (slave bond_slave_0): interface is now down
[  240.147639][T14011] syz_tun: entered promiscuous mode
[  240.173040][ T9057] bond0: (slave bond_slave_0): interface is now down
[  240.192809][ T7982] bond0: (slave bond_slave_0): interface is now down
[  240.210240][T14011] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  240.213686][ T7982] bond0: (slave bond_slave_0): interface is now down
[  240.213704][ T7982] bond0: (slave syz_tun): interface is now down
[  240.234895][ T7982] bond0: now running without any active interface!
[  240.647572][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2016'.
[  240.770151][T14036] ip_tables: iptables: counters copy to user failed while replacing table
[  240.803073][T14040] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2020'.
[  240.940197][T14049] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2023'.
[  240.951297][T14049] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2023'.
[  241.090801][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'.
[  241.090831][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'.
[  241.329335][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2028'.
[  241.354904][T14061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2028'.
[  241.959620][T14086] Bluetooth: hci0: unsupported parameter 5161
[  241.959643][T14086] Bluetooth: hci0: unsupported parameter 8192
[  241.959653][T14086] Bluetooth: hci0: unsupported parameter 5161
[  241.959663][T14086] Bluetooth: hci0: unsupported parameter 8192
[  242.288089][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  242.372092][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  242.430171][T14093] 8021q: adding VLAN 0 to HW filter on device bond7
[  242.481439][T14104] 8021q: adding VLAN 0 to HW filter on device bond8
[  243.199669][T14130] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000
[  243.199973][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807a915000: rx timeout, send abort
[  243.202000][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a915000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  243.538212][T14152] netlink: 'syz.1.2049': attribute type 1 has an invalid length.
[  243.542561][T14151] netlink: 'syz.1.2049': attribute type 1 has an invalid length.
[  243.577013][T14156] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  243.644639][T14152] bond14: option mode: invalid value (12)
[  243.648820][T14152] bond14 (unregistering): Released all slaves
[  243.684569][T14166] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  243.720103][T14164] netlink: 'syz.1.2049': attribute type 10 has an invalid length.
[  243.721969][T14170] netlink: 'syz.1.2049': attribute type 10 has an invalid length.
[  243.888826][T14151] bond14: option mode: invalid value (12)
[  243.910797][T14151] bond14 (unregistering): Released all slaves
[  244.136919][T14181] 0�X��D��: renamed from gretap0 (while UP)
[  244.154250][T14181] 0�X��D��: entered allmulticast mode
[  244.282480][T14190] netlink: ct family unspecified
[  244.591932][T14217] nbd: must specify a size in bytes for the device
[  244.623962][T14218] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  245.453421][T14247] tc_dump_action: action bad kind
[  245.542580][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.710584][T14258] __nla_validate_parse: 11 callbacks suppressed
[  245.710603][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'.
[  246.186942][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  246.372366][T14288] blkio.reset_stats is deprecated
[  246.375689][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2085'.
[  246.431700][   T53] block nbd3: Receive control failed (result -32)
[  246.624915][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'.
[  246.812377][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2090'.
[  246.823351][T14301] netlink: 'syz.4.2090': attribute type 1 has an invalid length.
[  246.823369][T14301] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2090'.
[  246.862703][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2090'.
[  246.862724][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'.
[  246.961218][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'.
[  247.458215][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  247.458239][T14320] bridge_slave_0: default FDB implementation only supports local addresses
[  248.159234][T14356] syzkaller0: left promiscuous mode
[  248.159257][T14356] syzkaller0: left allmulticast mode
[  248.613401][T14382] lo: Caught tx_queue_len zero misconfig
[  249.277780][T14408] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (11337696) !
[  249.424358][T14415] netlink: 'syz.2.2116': attribute type 1 has an invalid length.
[  249.424380][T14415] netlink: 'syz.2.2116': attribute type 2 has an invalid length.
[  249.519527][T14417] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  249.761289][T14431] veth0: entered promiscuous mode
[  249.779889][T14430] veth0: left promiscuous mode
[  250.075907][T14445] netlink: 'syz.0.2125': attribute type 15 has an invalid length.
[  250.350488][T14460] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  250.837710][T14484] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  250.960338][T14488] netlink: 'syz.2.2140': attribute type 1 has an invalid length.
[  250.960365][T14488] __nla_validate_parse: 11 callbacks suppressed
[  250.960378][T14488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2140'.
[  250.977785][T14487] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  250.993828][T14490] netlink: 'syz.4.2141': attribute type 16 has an invalid length.
[  250.993850][T14490] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2141'.
[  251.025196][T14487] bond4: (slave lo): Enslaving as an active interface with an up link
[  251.025497][T14487] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  251.267539][T14502] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2145'.
[  251.494221][T14519] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  251.520975][T14520] netlink: set zone limit has 4 unknown bytes
[  251.687773][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'.
[  252.320537][T14552] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.405264][T14552] bridge_slave_0 (unregistering): left allmulticast mode
[  252.405291][T14552] bridge_slave_0 (unregistering): left promiscuous mode
[  252.410183][T14552] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.441100][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'.
[  252.625739][T14564] syz_tun: entered promiscuous mode
[  252.644479][T14564] macvtap1: entered allmulticast mode
[  252.644502][T14564] syz_tun: entered allmulticast mode
[  252.652196][T14574] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2166'.
[  252.675561][T14564] syz_tun: left allmulticast mode
[  252.675588][T14564] syz_tun: left promiscuous mode
[  252.829144][T14580] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  253.165556][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'.
[  253.190885][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2176'.
[  253.221832][T14609] netlink: 'syz.0.2179': attribute type 1 has an invalid length.
[  253.221851][T14609] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.232760][T14609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'.
[  253.250759][T14602] bond4: Invalid ad_actor_system MAC address.
[  253.250776][T14602] bond4: option ad_actor_system: invalid value (1)
[  253.255489][T14602] bond4 (unregistering): Released all slaves
[  253.750179][T14644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.905237][T14644] 8021q: adding VLAN 0 to HW filter on device bond9
[  253.934173][T14648] lo: entered allmulticast mode
[  253.956718][T14647] lo: left allmulticast mode
[  256.026001][T14736] x_tables: unsorted entry at hook 1
[  256.265998][T14745] IPv6: sit2: Disabled Multicast RS
[  256.427067][T14749] syzkaller1: entered promiscuous mode
[  256.427091][T14749] syzkaller1: entered allmulticast mode
[  256.457192][T14749] 0: reclassify loop, rule prio 0, protocol 800
[  256.967367][T14763] netlink: 'syz.2.2218': attribute type 1 has an invalid length.
[  257.017204][T14762] __nla_validate_parse: 5 callbacks suppressed
[  257.017223][T14762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2218'.
[  257.017236][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2218'.
[  257.017248][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'.
[  257.026214][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  257.195696][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'.
[  257.195729][T14774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2222'.
[  257.331215][T14778] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2223'.
[  257.644368][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'.
[  257.665885][T14792] x_tables: unsorted entry at hook 1
[  257.879073][T14802] macvlan0: mtu less than device minimum
[  257.999952][T14808] netlink: 'syz.3.2235': attribute type 10 has an invalid length.
[  257.999987][T14808] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2235'.
[  258.000122][T14809] netlink: 'syz.3.2235': attribute type 10 has an invalid length.
[  258.000135][T14809] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2235'.
[  258.655970][T14826] bridge0: port 1(syz_tun) entered blocking state
[  258.656090][T14826] bridge0: port 1(syz_tun) entered disabled state
[  258.656243][T14826] syz_tun: entered allmulticast mode
[  258.664725][T14826] syz_tun: left allmulticast mode
[  259.067759][T14848] netlink: 'syz.2.2244': attribute type 16 has an invalid length.
[  259.067780][T14848] netlink: 'syz.2.2244': attribute type 17 has an invalid length.
[  259.096982][T14846] bridge11: entered allmulticast mode
[  259.098821][T14848] C: left promiscuous mode
[  259.160627][T14848] ip6gretap0: left promiscuous mode
[  259.190399][T14848] bond0: left promiscuous mode
[  259.190419][T14848] bond_slave_0: left promiscuous mode
[  259.190631][T14848] bond_slave_1: left promiscuous mode
[  259.203025][T14848] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.227102][T14848] 8021q: adding VLAN 0 to HW filter on device team0
[  259.316072][T14848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.478547][T14848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.533865][T14848] veth1_vlan: left promiscuous mode
[  259.535725][T14848] veth0_vlan: left promiscuous mode
[  259.552272][T14868] netlink: 'syz.3.2248': attribute type 1 has an invalid length.
[  259.555443][T14848] veth0_vlan: entered promiscuous mode
[  259.559361][T14848] veth1_vlan: entered promiscuous mode
[  259.597225][T14848] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  259.638098][T14869] openvswitch: netlink: Duplicate key (type 16).
[  259.802997][T14871] 8021q: adding VLAN 0 to HW filter on device bond11
[  259.807253][T14871] bond10: (slave bond11): making interface the new active one
[  259.807659][T14871] bond10: (slave bond11): Enslaving as an active interface with an up link
[  259.851632][T14863] pimreg: entered allmulticast mode
[  259.861927][T14859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.874635][T14858] pimreg: left allmulticast mode
[  260.127323][T14888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.131017][T14888] netlink: 'syz.2.2256': attribute type 5 has an invalid length.
[  260.351272][T14897] ip_tables: iptables: counters copy to user failed while replacing table
[  260.872786][T14921] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  261.337567][T14942] xfrm2: entered promiscuous mode
[  261.337589][T14942] xfrm2: entered allmulticast mode
[  261.478605][T14958] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  261.683037][T14959] netlink: 'syz.3.2273': attribute type 32 has an invalid length.
[  261.762886][T14959] bond12: option coupled_control: invalid value (192)
[  261.769919][T14959] bond12 (unregistering): Released all slaves
[  261.888823][T14966] syzkaller1: entered promiscuous mode
[  261.888846][T14966] syzkaller1: entered allmulticast mode
[  261.911595][T14981] x_tables: unsorted entry at hook 3
[  262.068261][T14985] __nla_validate_parse: 77 callbacks suppressed
[  262.068281][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2281'.
[  262.218177][T15002] Cannot find set identified by id 65534 to match
[  262.700691][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2290'.
[  262.738065][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'.
[  263.279984][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2299'.
[  263.315907][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2300'.
[  263.757574][T15081] netlink: 'syz.0.2307': attribute type 2 has an invalid length.
[  263.757597][T15081] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2307'.
[  263.840285][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'.
[  264.075256][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'.
[  264.076767][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'.
[  264.509173][T15119] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2318'.
[  264.511585][T15119] 0��{X��: renamed from gretap0
[  264.534261][T15119] 0��{X��: left promiscuous mode
[  264.534282][T15119] 0��{X��: entered allmulticast mode
[  264.538636][T15119] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  264.719390][T15132] netlink: 'syz.0.2323': attribute type 10 has an invalid length.
[  264.719425][T15132] ieee802154 phy0 wpan0: entered promiscuous mode
[  264.890512][T15144] pimreg: entered allmulticast mode
[  265.455304][T15178] sch_tbf: burst 0 is lower than device gre0 mtu (32793) !
[  265.632783][T15183] netlink: 'syz.1.2334': attribute type 4 has an invalid length.
[  265.654986][T15184] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  265.657315][T15184] netlink: 'syz.2.2335': attribute type 21 has an invalid length.
[  265.666384][T15183] netlink: 'syz.1.2334': attribute type 12 has an invalid length.
[  265.993229][T15208] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  266.250419][T15219] netlink: 'syz.4.2345': attribute type 1 has an invalid length.
[  266.563903][T15235] tipc: Started in network mode
[  266.563933][T15235] tipc: Node identity ac14140f, cluster identity 4711
[  266.564407][T15235] tipc: New replicast peer: 255.255.255.255
[  266.565381][T15235] tipc: Enabled bearer <udp:syz2>, priority 10
[  267.399000][T15283] __nla_validate_parse: 11 callbacks suppressed
[  267.399021][T15283] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2357'.
[  267.693904][ T5815] tipc: Node number set to 2886997007
[  267.842543][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'.
[  268.257835][T15330] syz.0.2366 (15330) used greatest stack depth: 17800 bytes left
[  268.328414][T15345] netlink: 'syz.0.2370': attribute type 5 has an invalid length.
[  268.630369][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'.
[  268.729474][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'.
[  269.338142][T15421] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2381'.
[  269.401865][T15424] Bluetooth: hci0: invalid length 0, exp 1 for type 31
[  269.410857][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'.
[  269.730939][T15441] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  269.759352][T15446] xt_HMARK: proto mask must be zero with L3 mode
[  270.458133][T15434] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  270.498819][T15463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2391'.
[  272.617882][T15432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.747545][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2394'.
[  272.747583][T15472] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2394'.
[  272.852753][T15476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2395'.
[  272.909760][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2399'.
[  272.910332][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2399'.
[  272.988855][T15486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2400'.
[  273.404206][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'.
[  273.434767][T15519] syz_tun: entered allmulticast mode
[  273.475804][T15523] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  273.554595][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2414'.
[  273.729241][T15534] netlink: 'syz.1.2418': attribute type 8 has an invalid length.
[  273.730983][T15534] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2418'.
[  273.928133][T15539] macvlan0: entered promiscuous mode
[  274.450971][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'.
[  275.027948][T15603] netlink: 'syz.3.2437': attribute type 6 has an invalid length.
[  275.050939][T15603] netlink: 'syz.3.2437': attribute type 29 has an invalid length.
[  275.074845][T15606] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  275.752296][T15649] netlink: 'syz.3.2449': attribute type 1 has an invalid length.
[  275.795994][T15649] netlink: 'syz.3.2449': attribute type 1 has an invalid length.
[  275.835007][ T5297] veth0_vlan: left promiscuous mode
[  275.877234][ T5765] veth0_vlan: entered promiscuous mode
[  277.263299][T15740] netlink: 'syz.3.2468': attribute type 1 has an invalid length.
[  277.263323][T15740] netlink: 'syz.3.2468': attribute type 2 has an invalid length.
[  277.263336][T15740] netlink: 'syz.3.2468': attribute type 3 has an invalid length.
[  277.680757][T15765] netlink: 'syz.3.2474': attribute type 30 has an invalid length.
[  277.729028][T15765] netlink: 'syz.3.2474': attribute type 30 has an invalid length.
[  277.779436][T15773] __nla_validate_parse: 18 callbacks suppressed
[  277.779458][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2476'.
[  277.781801][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'.
[  277.808292][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2474'.
[  277.840738][T15773] veth2: entered promiscuous mode
[  277.840761][T15773] veth2: entered allmulticast mode
[  277.952747][ T9042] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.952791][ T9042] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.952823][ T9042] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.952854][ T9042] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.220878][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2484'.
[  278.223650][T15804] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  278.769432][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'.
[  278.949715][T15852] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

(�h\E3�~����ϱ�o���R!Fo�?���<
[  279.005794][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'.
[  279.191384][T15858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2497'.
[  279.873471][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2505'.
[  279.887831][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2505'.
[  280.089995][T15871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.149885][T15915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'.
[  280.853816][T15966] 8021q: VLANs not supported on syzkaller1
[  281.042404][T15978] syzkaller0: entered promiscuous mode
[  281.042426][T15978] syzkaller0: entered allmulticast mode
[  281.942756][T16017] syzkaller0: left promiscuous mode
[  281.942781][T16017] syzkaller0: left allmulticast mode
[  282.745270][T16065] nbd4: detected capacity change from 0 to 274877906944
[  282.750071][   T53] block nbd4: Receive control failed (result -32)
[  282.781363][ T1994] block nbd4: Dead connection, failed to find a fallback
[  282.781387][ T1994] block nbd4: shutting down sockets
[  282.781489][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.781602][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.820808][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.820840][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.821455][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.821497][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.821637][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.821661][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.821762][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.821784][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.821907][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.821930][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.822060][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.822082][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.822305][ T1994] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.822330][ T1994] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.858837][T15374] ldm_validate_partition_table(): Disk read failed.
[  282.859017][ T2026] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.859046][ T2026] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.861806][ T2026] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  282.861835][ T2026] Buffer I/O error on dev nbd4, logical block 0, async page read
[  282.863401][T15374] Dev nbd4: unable to read RDB block 0
[  282.865508][ T5297] 8021q: adding VLAN 0 to HW filter on device bond1
[  282.867484][T15374]  nbd4: unable to read partition table
[  282.945347][T15374] ldm_validate_partition_table(): Disk read failed.
[  282.951325][T15374] Dev nbd4: unable to read RDB block 0
[  282.951954][T15374]  nbd4: unable to read partition table
[  283.159404][T16081] validate_nla: 2 callbacks suppressed
[  283.159423][T16081] netlink: 'syz.3.2544': attribute type 5 has an invalid length.
[  283.240319][T16080] netlink: 'syz.2.2546': attribute type 21 has an invalid length.
[  283.258595][T16088] __nla_validate_parse: 1 callbacks suppressed
[  283.258613][T16088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2545'.
[  283.291869][T16080] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  283.317910][T16080] bond4 (unregistering): Released all slaves
[  283.517094][T16088] tipc: Resetting bearer <eth:team0>
[  283.855071][T16120] sctp: [Deprecated]: syz.1.2553 (pid 16120) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.855071][T16120] Use struct sctp_sack_info instead
[  284.388417][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'.
[  284.464248][T16156] netlink: 'syz.4.2563': attribute type 1 has an invalid length.
[  284.464270][T16156] netlink: 'syz.4.2563': attribute type 3 has an invalid length.
[  284.464282][T16156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2563'.
[  285.009026][T16186] batman_adv: batadv0: Adding interface: syzkaller0
[  285.009048][T16186] batman_adv: batadv0: Interface activated: syzkaller0
[  285.118701][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'.
[  285.278149][T16212] netlink: 'syz.3.2578': attribute type 11 has an invalid length.
[  285.278171][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'.
[  285.418315][T16212] netlink: 'syz.3.2578': attribute type 11 has an invalid length.
[  285.418339][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'.
[  285.530017][T16227] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  285.530420][T16227] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  285.549548][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'.
[  285.585553][T16220] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  285.596296][T16220] bond14 (unregistering): Released all slaves
[  285.601013][T16223] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2577'.
[  285.823905][T16243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2583'.
[  285.839409][T16243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2583'.
[  285.934763][T16246] netlink: 'syz.4.2584': attribute type 21 has an invalid length.
[  285.938197][T16246] sch_tbf: burst 4398 is lower than device lo mtu (32783) !
[  286.077495][T16259] syz_tun: left allmulticast mode
[  286.436612][T16274] netlink: 'syz.2.2591': attribute type 7 has an invalid length.
[  286.477543][T16282] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  286.564692][T16270] xt_cgroup: path and classid specified
[  286.997302][T16308] netlink: 'syz.2.2598': attribute type 2 has an invalid length.
[  287.094346][T16312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  287.547438][T16339] x_tables: duplicate underflow at hook 2
[  287.661868][T16351] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  287.824225][T16359] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  287.891857][T16359] 
[  287.894257][T16359] ======================================================
[  287.901275][T16359] WARNING: possible circular locking dependency detected
[  287.908312][T16359] syzkaller #0 Not tainted
[  287.912727][T16359] ------------------------------------------------------
[  287.919748][T16359] syz.1.2611/16359 is trying to acquire lock:
[  287.925813][T16359] ffff8880358f9c98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0
[  287.934718][T16359] 
[  287.934718][T16359] but task is already holding lock:
[  287.942078][T16359] ffff88802b8a0ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  287.951506][T16359] 
[  287.951506][T16359] which lock already depends on the new lock.
[  287.951506][T16359] 
[  287.961913][T16359] 
[  287.961913][T16359] the existing dependency chain (in reverse order) is:
[  287.970937][T16359] 
[  287.970937][T16359] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  287.978773][T16359]        __mutex_lock+0x197/0x15a0
[  287.983904][T16359]        elevator_change+0x1af/0x480
[  287.989207][T16359]        elevator_set_none+0xb5/0x140
[  287.994631][T16359]        blk_mq_update_nr_hw_queues+0x60b/0x1b70
[  288.000972][T16359]        nbd_start_device+0x189/0xb30
[  288.006351][T16359]        nbd_genl_connect+0x167d/0x1cd0
[  288.011902][T16359]        genl_family_rcv_msg_doit+0x233/0x340
[  288.017986][T16359]        genl_rcv_msg+0x614/0x7a0
[  288.023021][T16359]        netlink_rcv_skb+0x226/0x4a0
[  288.028333][T16359]        genl_rcv+0x28/0x40
[  288.032851][T16359]        netlink_unicast+0x8ef/0xa80
[  288.038168][T16359]        netlink_sendmsg+0x7f0/0xb20
[  288.043479][T16359]        sock_sendmsg_nosec+0x14e/0x190
[  288.049043][T16359]        ____sys_sendmsg+0x54e/0x850
[  288.054339][T16359]        ___sys_sendmsg+0x2a5/0x360
[  288.059539][T16359]        __x64_sys_sendmsg+0x1b1/0x290
[  288.065009][T16359]        do_syscall_64+0x166/0x520
[  288.070127][T16359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.076546][T16359] 
[  288.076546][T16359] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  288.085175][T16359]        blk_alloc_queue+0x544/0x690
[  288.090482][T16359]        __blk_mq_alloc_disk+0x194/0x390
[  288.096125][T16359]        nbd_dev_add+0x494/0xb60
[  288.101070][T16359]        nbd_init+0x168/0x1f0
[  288.105767][T16359]        do_one_initcall+0x250/0x870
[  288.111054][T16359]        do_initcall_level+0x10a/0x1a0
[  288.116532][T16359]        do_initcalls+0x59/0xa0
[  288.121385][T16359]        kernel_init_freeable+0x29d/0x3e0
[  288.127113][T16359]        kernel_init+0x22/0x1d0
[  288.131971][T16359]        ret_from_fork+0x514/0xb70
[  288.137086][T16359]        ret_from_fork_asm+0x1a/0x30
[  288.142370][T16359] 
[  288.142370][T16359] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  288.149596][T16359]        fs_reclaim_acquire+0x71/0x100
[  288.155124][T16359]        __kmalloc_cache_node_noprof+0x66/0x620
[  288.161379][T16359]        create_worker+0x112/0x7c0
[  288.166504][T16359]        workqueue_prepare_cpu+0xe4/0x170
[  288.172242][T16359]        cpuhp_invoke_callback+0x434/0x810
[  288.178069][T16359]        _cpu_up+0x2ce/0x5b0
[  288.182676][T16359]        cpu_up+0x1d2/0x220
[  288.187189][T16359]        cpuhp_bringup_mask+0xb2/0x1a0
[  288.192668][T16359]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  288.199009][T16359]        bringup_nonboot_cpus+0x17/0x30
[  288.204578][T16359]        smp_init+0x32/0x110
[  288.209180][T16359]        kernel_init_freeable+0x27f/0x3e0
[  288.214911][T16359]        kernel_init+0x22/0x1d0
[  288.219766][T16359]        ret_from_fork+0x514/0xb70
[  288.224877][T16359]        ret_from_fork_asm+0x1a/0x30
[  288.230150][T16359] 
[  288.230150][T16359] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  288.237870][T16359]        cpus_read_lock+0x3d/0x160
[  288.242973][T16359]        static_key_slow_inc+0x12/0x30
[  288.248418][T16359]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  288.254647][T16359]        nbd_genl_foreach_sock+0x265/0x450
[  288.260435][T16359]        nbd_genl_reconfigure+0xbbb/0x1040
[  288.266220][T16359]        genl_family_rcv_msg_doit+0x233/0x340
[  288.272278][T16359]        genl_rcv_msg+0x614/0x7a0
[  288.277286][T16359]        netlink_rcv_skb+0x226/0x4a0
[  288.282562][T16359]        genl_rcv+0x28/0x40
[  288.287063][T16359]        netlink_unicast+0x8ef/0xa80
[  288.292358][T16359]        netlink_sendmsg+0x7f0/0xb20
[  288.297654][T16359]        sock_sendmsg_nosec+0x14e/0x190
[  288.303199][T16359]        ____sys_sendmsg+0x54e/0x850
[  288.308475][T16359]        ___sys_sendmsg+0x2a5/0x360
[  288.313662][T16359]        __x64_sys_sendmsg+0x1b1/0x290
[  288.319118][T16359]        do_syscall_64+0x166/0x520
[  288.324237][T16359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.330648][T16359] 
[  288.330648][T16359] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  288.338288][T16359]        __mutex_lock+0x197/0x15a0
[  288.343400][T16359]        nbd_queue_rq+0x373/0xff0
[  288.348419][T16359]        blk_mq_dispatch_rq_list+0x499/0x1990
[  288.354489][T16359]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  288.361323][T16359]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  288.367812][T16359]        blk_mq_run_work_fn+0x167/0x2f0
[  288.373345][T16359]        process_scheduled_works+0xc3d/0x1630
[  288.379403][T16359]        worker_thread+0xa47/0xfb0
[  288.384505][T16359]        kthread+0x38b/0x480
[  288.389083][T16359]        ret_from_fork+0x514/0xb70
[  288.394182][T16359]        ret_from_fork_asm+0x1a/0x30
[  288.399455][T16359] 
[  288.399455][T16359] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  288.406652][T16359]        __mutex_lock+0x197/0x15a0
[  288.411754][T16359]        nbd_queue_rq+0xc1/0xff0
[  288.416678][T16359]        blk_mq_dispatch_rq_list+0x499/0x1990
[  288.422745][T16359]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  288.429591][T16359]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  288.436077][T16359]        blk_mq_run_work_fn+0x167/0x2f0
[  288.441647][T16359]        process_scheduled_works+0xc3d/0x1630
[  288.447709][T16359]        worker_thread+0xa47/0xfb0
[  288.452820][T16359]        kthread+0x38b/0x480
[  288.457396][T16359]        ret_from_fork+0x514/0xb70
[  288.462493][T16359]        ret_from_fork_asm+0x1a/0x30
[  288.467762][T16359] 
[  288.467762][T16359] -> #0 (set->srcu){.+.+}-{0:0}:
[  288.474871][T16359]        __lock_acquire+0x164c/0x2de0
[  288.480231][T16359]        lock_sync+0xb3/0x130
[  288.484893][T16359]        __synchronize_srcu+0xca/0x2f0
[  288.490344][T16359]        elevator_switch+0x1e8/0x7b0
[  288.495626][T16359]        elevator_change+0x2fa/0x480
[  288.500904][T16359]        elevator_set_default+0x375/0x440
[  288.506616][T16359]        blk_register_queue+0x404/0x4f0
[  288.512146][T16359]        __add_disk+0x6b8/0xdb0
[  288.516985][T16359]        add_disk_fwnode+0x100/0x3a0
[  288.522256][T16359]        nbd_dev_add+0x733/0xb60
[  288.527181][T16359]        nbd_genl_connect+0x96c/0x1cd0
[  288.532624][T16359]        genl_family_rcv_msg_doit+0x233/0x340
[  288.538681][T16359]        genl_rcv_msg+0x614/0x7a0
[  288.543695][T16359]        netlink_rcv_skb+0x226/0x4a0
[  288.548973][T16359]        genl_rcv+0x28/0x40
[  288.553460][T16359]        netlink_unicast+0x8ef/0xa80
[  288.558736][T16359]        netlink_sendmsg+0x7f0/0xb20
[  288.564012][T16359]        sock_sendmsg_nosec+0x14e/0x190
[  288.569556][T16359]        ____sys_sendmsg+0x54e/0x850
[  288.574826][T16359]        ___sys_sendmsg+0x2a5/0x360
[  288.580010][T16359]        __x64_sys_sendmsg+0x1b1/0x290
[  288.585457][T16359]        do_syscall_64+0x166/0x520
[  288.590558][T16359]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.596988][T16359] 
[  288.596988][T16359] other info that might help us debug this:
[  288.596988][T16359] 
[  288.607199][T16359] Chain exists of:
[  288.607199][T16359]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  288.607199][T16359] 
[  288.620837][T16359]  Possible unsafe locking scenario:
[  288.620837][T16359] 
[  288.628268][T16359]        CPU0                    CPU1
[  288.633615][T16359]        ----                    ----
[  288.638971][T16359]   lock(&q->elevator_lock);
[  288.643546][T16359]                                lock(&q->q_usage_counter(io)#49);
[  288.651430][T16359]                                lock(&q->elevator_lock);
[  288.658536][T16359]   sync(set->srcu);
[  288.662419][T16359] 
[  288.662419][T16359]  *** DEADLOCK ***
[  288.662419][T16359] 
[  288.670541][T16359] locks held by syz.1.2611/16359: 6, last CPU#0:
[  288.676848][T16359]  #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  288.685021][T16359]  #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  288.693977][T16359]  #2: ffff888013afc1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[  288.704329][T16359]  #3: ffff88802b8a0f60 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0
[  288.714154][T16359]  #4: ffff88802b8a09e8 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  288.725024][T16359]  #5: ffff88802b8a0ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  288.734853][T16359] 
[  288.734853][T16359] stack backtrace:
[  288.740771][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.1.2611 Not tainted syzkaller #0 PREEMPT(full) 
[  288.750137][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  288.760199][T16359] Call Trace:
[  288.763470][T16359]  <TASK>
[  288.766391][T16359]  dump_stack_lvl+0xe8/0x150
[  288.770981][T16359]  print_circular_bug+0x2e2/0x300
[  288.776013][T16359]  check_noncircular+0x12f/0x150
[  288.780948][T16359]  __lock_acquire+0x164c/0x2de0
[  288.785799][T16359]  ? lockdep_unlock+0x5c/0xd0
[  288.790467][T16359]  ? __lock_acquire+0x1511/0x2de0
[  288.795490][T16359]  lock_sync+0xb3/0x130
[  288.799637][T16359]  ? __synchronize_srcu+0xb6/0x2f0
[  288.804745][T16359]  ? __synchronize_srcu+0xb6/0x2f0
[  288.809863][T16359]  __synchronize_srcu+0xca/0x2f0
[  288.814791][T16359]  ? __pfx___synchronize_srcu+0x10/0x10
[  288.820324][T16359]  ? do_raw_spin_lock+0x12b/0x2f0
[  288.825342][T16359]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  288.831136][T16359]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  288.836676][T16359]  ? synchronize_srcu+0x20c/0x270
[  288.841696][T16359]  elevator_switch+0x1e8/0x7b0
[  288.846453][T16359]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  288.851898][T16359]  elevator_change+0x2fa/0x480
[  288.856654][T16359]  ? do_raw_spin_unlock+0xf5/0x200
[  288.861753][T16359]  elevator_set_default+0x375/0x440
[  288.866948][T16359]  ? __pfx_elevator_set_default+0x10/0x10
[  288.872662][T16359]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  288.879674][T16359]  ? blk_crypto_sysfs_register+0x11c/0x170
[  288.885475][T16359]  blk_register_queue+0x404/0x4f0
[  288.890503][T16359]  __add_disk+0x6b8/0xdb0
[  288.894835][T16359]  add_disk_fwnode+0x100/0x3a0
[  288.899597][T16359]  nbd_dev_add+0x733/0xb60
[  288.904010][T16359]  ? __pfx_nbd_dev_add+0x10/0x10
[  288.908944][T16359]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[  288.914740][T16359]  ? security_capable+0x7e/0x2c0
[  288.919677][T16359]  ? radix_tree_lookup+0x240/0x290
[  288.924780][T16359]  nbd_genl_connect+0x96c/0x1cd0
[  288.929711][T16359]  ? __pfx_nbd_genl_connect+0x10/0x10
[  288.935074][T16359]  ? rcu_is_watching+0x16/0xb0
[  288.939922][T16359]  ? trace_kmalloc+0x2a/0xf0
[  288.944505][T16359]  ? __kmalloc_noprof+0x387/0x710
[  288.949519][T16359]  ? __nla_parse+0x40/0x60
[  288.953930][T16359]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  288.960249][T16359]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  288.966567][T16359]  genl_family_rcv_msg_doit+0x233/0x340
[  288.972105][T16359]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  288.978165][T16359]  ? __lock_acquire+0x747/0x2de0
[  288.983099][T16359]  genl_rcv_msg+0x614/0x7a0
[  288.987594][T16359]  ? __pfx_genl_rcv_msg+0x10/0x10
[  288.992606][T16359]  ? __pfx_nbd_genl_connect+0x10/0x10
[  288.997968][T16359]  netlink_rcv_skb+0x226/0x4a0
[  289.002724][T16359]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.007739][T16359]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.013032][T16359]  ? down_read+0x2b9/0x320
[  289.017446][T16359]  genl_rcv+0x28/0x40
[  289.021414][T16359]  netlink_unicast+0x8ef/0xa80
[  289.026178][T16359]  netlink_sendmsg+0x7f0/0xb20
[  289.030941][T16359]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.036222][T16359]  ? aa_sock_msg_perm+0x144/0x210
[  289.041420][T16359]  ? apparmor_socket_sendmsg+0x98/0x360
[  289.046959][T16359]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.052238][T16359]  sock_sendmsg_nosec+0x14e/0x190
[  289.057259][T16359]  ____sys_sendmsg+0x54e/0x850
[  289.062011][T16359]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.067284][T16359]  ? import_iovec+0x73/0xa0
[  289.071778][T16359]  ___sys_sendmsg+0x2a5/0x360
[  289.076445][T16359]  ? __lock_acquire+0x747/0x2de0
[  289.081377][T16359]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.086571][T16359]  ? futex_wake+0x51b/0x5f0
[  289.091092][T16359]  ? __fget_files+0x3a2/0x420
[  289.095763][T16359]  ? __fget_files+0x2a/0x420
[  289.100523][T16359]  __x64_sys_sendmsg+0x1b1/0x290
[  289.105450][T16359]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.110905][T16359]  do_syscall_64+0x166/0x520
[  289.115488][T16359]  ? trace_irq_disable+0x3b/0x140
[  289.120621][T16359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.126681][T16359]  ? clear_bhb_loop+0x70/0xc0
[  289.131348][T16359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.137227][T16359] RIP: 0033:0x7fdb65b9fb19
[  289.141629][T16359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.161219][T16359] RSP: 002b:00007fdb66a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.169622][T16359] RAX: ffffffffffffffda RBX: 00007fdb65e25fa0 RCX: 00007fdb65b9fb19
[  289.177583][T16359] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000c
[  289.185541][T16359] RBP: 00007fdb65c37b70 R08: 0000000000000000 R09: 0000000000000000
[  289.193496][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.201450][T16359] R13: 00007fdb65e26038 R14: 00007fdb65e25fa0 R15: 00007ffff7711078
[  289.209414][T16359]  </TASK>