last executing test programs:

1m50.306606062s ago: executing program 3 (id=3858):
r0 = socket(0x23, 0x5, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00f\x00\r\v'], 0x20}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000008})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r4, &(0x7f0000000100)="484b3ce885a5a4d6a76d16392ffa847118ac853da8539c88cadb961bbbd7d409b484ea7ebbf260d2f01bf2b182bc48332fb9d78b0f88c6b817273d864971e700265a4fb3a781ae1112ce38367c9dd4685622e92b8978ae59954957598384940678a0e34e2316eeb224d43c087dfc39b3442eec9f1360e9fe853ab2c865383c073b9e", &(0x7f0000000200)=""/226, 0x4}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x80000001, 0x3, 0x4, 0x2080, r4, 0x80, '\x00', 0x0, r0, 0x1, 0x5, 0x3}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01300134b1ff"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x40000000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000006a07000000000000009976000000ad", @ANYRES32=r5, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000500"/28], 0x50)

1m50.151429674s ago: executing program 3 (id=3860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x9fd, 0x84, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x4a8, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x8, 0x9, 'pptp\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0x2f0, 0x310, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1, 0x1}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x33, 0x0, [{0xa5, 0x69, 0x4, 0xa66}, {0x1, 0x0, 0xff, 0x21bf}, {0x400, 0x45, 0x4, 0x1000}, {0xbcf, 0x8, 0xa6, 0x3}, {0x2, 0x7, 0xb, 0x6}, {0x3, 0x6, 0x5, 0x4}, {0x1, 0x4, 0x6, 0x5}, {0x7, 0x2, 0x3, 0x5}, {0x9, 0x8, 0xe0, 0x8}, {0xa, 0x56, 0xf, 0x7}, {0x16, 0x9, 0x2, 0xcf75710}, {0x7, 0x9, 0x6, 0x27}, {0x1, 0x2, 0x3, 0x268}, {0x0, 0xd, 0x5, 0x17}, {0xd35, 0x2, 0x4, 0x6c800000}, {0x7ff, 0x6, 0xd, 0x4}, {0x7, 0x20, 0xfb, 0x8}, {0x650, 0x9c, 0x8, 0x73cc}, {0x9, 0x3, 0x5, 0x10}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x7, 0x4, 0xfb03}, {0x3, 0x7a, 0x5, 0x8}, {0x200, 0x7, 0x4, 0x2}, {0xfffa, 0x6, 0x80, 0x4}, {0x5, 0x7, 0x68, 0x9}, {0x1000, 0xb, 0xa, 0x9}, {0x1, 0x6, 0x5, 0x232}, {0xb3ac, 0x81, 0xf3, 0x8}, {0x101, 0x6, 0x4, 0x8}, {0x0, 0x0, 0xa3, 0x5}, {0x9, 0x96, 0x80, 0x4}, {0x9, 0xfe, 0x8, 0x12}, {0x8, 0x7, 0x4, 0x8}, {0x2, 0x84, 0xfb, 0x8852}, {0xfff, 0x8b, 0x8, 0x4}, {0x5eb8, 0x8, 0x5c, 0x5}, {0xfff, 0x2, 0x9}, {0xf, 0x4, 0x5, 0xa}, {0x101, 0x7, 0xba, 0x7}, {0x1, 0x4, 0xe8, 0x3}, {0xa8, 0x88, 0x8}, {0x800, 0xd9, 0x5, 0x1}, {0x8, 0x0, 0x0, 0x6}, {0x8, 0x7, 0x4c, 0x6}, {0x2, 0x8, 0xeb, 0x151f8000}, {0x9, 0x94, 0xe1, 0xffffe0d8}, {0x400, 0x0, 0x7, 0x31e}, {0x5, 0x6, 0x5a, 0xc}, {0x7fff, 0x6, 0x8}, {0x7, 0x5, 0x65, 0xb7}, {0x7f, 0x5, 0xfc, 0x1ff}, {0xbb5, 0x1, 0x2, 0x2}, {0x8, 0xdd, 0x3}, {0x3954, 0xf, 0x8, 0x7e0e7e9c}, {0x6e, 0x1, 0x49, 0x5c46}, {0x4, 0x1, 0x9, 0xa94d}, {0x10, 0x2, 0x9, 0x100}, {0x6, 0x68, 0x61, 0x839}, {0x7, 0xfd, 0x1, 0x9}, {0x3, 0xf9, 0x4, 0x951}, {0x200, 0x7f, 0x7}, {0x1, 0x2, 0xa, 0x3}, {0x101, 0x21, 0xc, 0xb1}, {0x439, 0x7, 0x0, 0x1}], {0xf}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20044040}, 0x0)
close(r4)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @multicast}, 0x10)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, 0x0, 0x0)
accept$unix(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)

1m49.468308257s ago: executing program 2 (id=3867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="1800fd5bdf25e7fffd34741ae5c2d3b153f0eee5d75327013b88a131a3434fe2a01501000080126ab4ecd01edeb74f8eb4b9aa95933071423f05c5c4063802f281bb98390df7bb2e08bc5283941a3d22fdf1eeb27bf3f9ce6cf05241baaaa8163ce387f64161b2e6c6fe47ed416a4fb19340519866197412b21fdd00a94c3ae21f8f6f2b1d5dcea429d0f0d67143728a2a686b1b0aab", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x850)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010021000000fedbdf250e0000000c009900070000007700000044000e002a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4014080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r5=>0x0})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r7 = socket(0x6, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x70, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x5c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xd}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x15, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r13=>0x0})
r14 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @private=0xa010101, 0x9751304b5dc4b606, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r11, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRESOCT], 0xfdef)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001800)={{r3, &(0x7f0000000000)='\x00', 0x3, &(0x7f0000000040)={@align=0x8000000000000000, {0x0, 0xfffc, 0x4e15205a, 0x7}}, 0xffffff66, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x200}, 0x6, &(0x7f0000001740)=[{0x1, 0x1e56, &(0x7f0000000180)='-]^\x00', &(0x7f0000000380)="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", 0x1000, 0x30}, {0x2, 0xd30, &(0x7f0000001380)='bridge_slave_1\x00', &(0x7f00000013c0)="585bbb504ca265aeb96c", 0xa, 0x10}, {0x1, 0xfffffff0, &(0x7f0000001400)=')+\x00', &(0x7f0000001440), 0x0, 0xa}, {0x3, 0xaf, &(0x7f0000001480)='.^]$\x00', &(0x7f00000014c0)="86f5323fd3cf4bd61adc066f5056e5e4fe5dceae2a95d869f8304d42374f848c85893fa3ef5ca428a9b2e671abca86755875454cf03af3e31b8ca29d03c32a2da069f816bad3efed4c656a9734ec2904c26be53994bc612da593411fd350b014dcbbea4b48fd951ca1ee4474b9f085d73f52c9b2f550a2cfc0784a59285fde489479", 0x82, 0x2}, {0x2, 0x4, &(0x7f0000001580)='@\x00', &(0x7f00000015c0)="029817f8dbd46e42ee21c55f9c492006ea0723113cb73bc37e1bfc0045ecc3608ce0c75a4210f0137cd394ff4cf75daa60ae8048a80ca33c0c8ded6657f69bd92a8c0fbb57168a777f3f5fcce323ad6b689cc069f89994199867f23210a283d89cf4515eda491dab22fc909710e3855720d033f94912ae5ea8605f5149653aca3ef71030a67b70c9745a84e00f8bc3abebaa3bb1b4d837fd754764af050f0351b0ad8323fb632778344a63824ccabb3e3db5d83a95e43ed5a4b764", 0xbb, 0xa}, {0x3, 0x101, &(0x7f0000001680)='bridge_slave_1\x00', &(0x7f00000016c0)="d6f2ac4437975d9f54d4e67ccccb691f5b1f9a2fea308b7700404bbeea3f7b790077629a3969f3e04d116c37e36a6727d066f7b72389c56fb8ec3a8d34c71c10dd61b520d72ff795bc7775df6dc2e92cd06e6ca3680d709137bf9e810a94b945811d4cb96df8b6127e9a559cd4fd17a3fea79cb8d27ad190", 0x78}]})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r15, 0x8992, &(0x7f0000000040)={'syz_tun\x00', @ifru_names='bond_slave_0\x00'})

1m49.024191042s ago: executing program 3 (id=3872):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="000000000000001100000000000000000000000000000000000000001ebd7299243d507a570febc5bac19b5a33452329721314c6e7ef144c5acdd873fb1c2576d33863f17ec9d7518f8947a0c2e6587e30d149410b852797"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000000000002000dc66f8e9bb6d43e1f28064", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r5}, 0x20)
close(r5)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000300)}, 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES64=r8, @ANYRESOCT=r1, @ANYBLOB="2000010042f045b125e8dcec7d211f51d8640ea2eae87d14b4911393109b1ab876606029cfb666ccff75a6c95422b10aff7de3dbef31c760370dac49fecdae7c25e73c8d96654bebe0c1e2a2bd", @ANYRES32=r8, @ANYBLOB="01010000ac1414bb00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4052)
r9 = socket(0x10, 0x803, 0x9)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
write(r11, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003031e000500e1000c0400070280000f00", 0x33a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r12, @ANYRESOCT=r2, @ANYRESDEC=r8, @ANYRESOCT=0x0], 0x50)
r13 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xce3f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x8044)

1m48.89675785s ago: executing program 1 (id=3873):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r3, @ANYRES64=r3], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x1, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffe1d, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x3}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@tcp}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff00000000000000000000000000000000813262e7e86a9a86a685c9ec7dbffe24a55d29", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000060000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000049000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12}, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m48.857322798s ago: executing program 3 (id=3875):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r4, 0x50)
r5 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r5, 0x3)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESOCT=r8, @ANYRES32=r3, @ANYRES8=r6], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=0x0, @ANYRESOCT=r8, @ANYRES32=r3, @ANYRES8=r6], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r10, 0xc, 0x1, 0x7}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={r10, 0xc, 0x1, 0x7})
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x6}, {0xffff, 0xffe0}, {0xffee, 0x10}}, [{0x8, 0xb, 0x20000007}, {0x8, 0xb, 0x2de9}, {0x8, 0xb, 0x38}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x6}, {0xffff, 0xffe0}, {0xffee, 0x10}}, [{0x8, 0xb, 0x20000007}, {0x8, 0xb, 0x2de9}, {0x8, 0xb, 0x38}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20000001)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x60}}, 0x8000) (async)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x60}}, 0x8000)

1m47.00591699s ago: executing program 3 (id=3878):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x54, 0x12, 0x613, 0x70bd26, 0x25dfdbff, {0x6, 0x2, 0x41, 0x1, {0x4e24, 0x4e22, [0x3, 0xfffffffd, 0x3113, 0xdf4], [0x1007, 0xc8, 0x12, 0xa], 0x0, [0x4, 0x4]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0749330e"}]}, 0x54}, 0x1, 0x0, 0x0, 0xd0}, 0x2000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@ptr, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}, {0xd, 0x1, 0x7}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x52, 0x3, 0x1}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000004a14328ef43f827bfc73c96152628521531ec14567d027bca6657819950684546030ed334dd62a1daae57fa67c05d9562383e6a36121f3026dddb0394f502aeca628c311c8e5d35ab348259993bfc6f446a0a7d3d943e0e17b1179f211d395fd9ebb87a2460c46be888e6f21b09b22dd3fbfac"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
unshare(0x22020600)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r7, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
unshare(0x22020400)
r9 = socket(0x10, 0x4, 0xf99)
connect$pppoe(r9, &(0x7f0000000280)={0x18, 0x0, {0x0, @broadcast, 'syzkaller0\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000044a1f00020000000300000000000000f43656eb32a2624a39d00faf521b30a2c087e547", @ANYRES32=0x1, @ANYBLOB="940e00"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50)

1m46.993153069s ago: executing program 2 (id=3879):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0)=r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3e42}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000004c0)={<r4=>r1, &(0x7f00000003c0)='batadv_slave_0\x00', 0x80040, &(0x7f0000000400)={@align=0x1, {0x7, 0xffff, 0x6, 0x3}}, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x7})
setsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f0000000500)=0x10000, 0x4)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/65, 0x41}], 0x2}, 0x10000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000680))
getpeername$netlink(r4, &(0x7f00000006c0), &(0x7f0000000700)=0xc)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c004}, 0x801)
r5 = socket$inet6(0xa, 0x5, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r4, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], <r7=>0x0, 0x46, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf6}, [@jmp={0x5, 0x0, 0x7, 0xb, 0x0, 0x2, 0xffffffffffffffff}]}, &(0x7f00000008c0)='GPL\x00', 0x3ff, 0xe4, &(0x7f0000000900)=""/228, 0x41000, 0x30, '\x00', r0, @cgroup_device, r4, 0x8, &(0x7f0000000a00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xd, 0x4, 0xe5}, 0x10, r7, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[r4], &(0x7f0000000dc0)=[{0x4, 0x3, 0x5, 0x5}, {0x0, 0x5, 0x7, 0xf}, {0x4, 0x5, 0xf, 0x4}, {0x0, 0x3, 0x6, 0xb}, {0x5, 0x5, 0xb, 0xa}, {0x1, 0x4, 0x2, 0x1}, {0x3, 0x1, 0xb, 0xa}, {0x1, 0x4, 0xd, 0x5}, {0x4, 0x2, 0x8, 0x4}]}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000f40)=r8, 0x4)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000f80), 0x4)
pread64(r9, &(0x7f0000000fc0)=""/205, 0xcd, 0x6)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000001100), r4)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x98, r10, 0x180d, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1200}}}]}}]}, 0x98}}, 0x40000)
select(0x40, &(0x7f0000001280)={0x4, 0x8001, 0x400, 0x5, 0x20000000, 0xfffffffffffffff8, 0x5, 0x4d3b}, &(0x7f00000012c0)={0x9, 0x86, 0x0, 0x1, 0x8, 0x2, 0x7fff, 0x7}, &(0x7f0000001300)={0x7e0, 0x1000, 0x8, 0x0, 0x1, 0xb, 0x10001, 0xfffffffffffff800}, &(0x7f0000001340)={0x0, 0xea60})
socket$nl_generic(0x10, 0x3, 0x10)
recvfrom(r5, &(0x7f0000001380)=""/79, 0x4f, 0x0, &(0x7f0000001400)=@caif=@rfm={0x25, 0x7b66, "91cc015d4dda218fe3d1b3743e092c5a"}, 0x80)
getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000001480)={@multicast2, @loopback, <r11=>0x0}, &(0x7f00000014c0)=0xc)
close(r9)
getuid()
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff80d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c015)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x12, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000000}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000016c0)='syzkaller\x00', 0x5, 0xce, &(0x7f0000001700)=""/206, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x10, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001a00)=[0xffffffffffffffff, r4, r4, r4, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x5, 0x5, 0x1, 0xa}, {0x4, 0x4, 0x8, 0xa}, {0x4, 0x4, 0x1, 0x7}, {0x4, 0x1, 0x3, 0x3}, {0x2, 0x2, 0x5, 0x3}, {0x5, 0x5, 0x0, 0x1}, {0x4, 0xb, 0xf, 0x9}], 0x10, 0x4}, 0x94)

1m46.626924434s ago: executing program 2 (id=3883):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c001280"], 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x24005000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000006c0)=0xbfe, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000080)=0x8) (async, rerun: 32)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
ioctl$PPPIOCSFLAGS(r6, 0x40047459, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0xe, 0xfffffffffffffe0b, &(0x7f0000000700)="b9d5e01a991e924ccc78cbc0a3ba", 0x0, 0xe8a5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r8)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r9, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

1m46.559763739s ago: executing program 1 (id=3885):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0x6e0f}, {0x6, 0x0, 0xff, 0x2000000}]}, 0x10)
sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000400000000080001"], 0x20}}, 0x4000000)

1m46.513846565s ago: executing program 0 (id=3886):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xe, 0x10}, {0x0, 0x2}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xc}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x80010}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x44}}, 0x2000c010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000003c0)=""/192, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0xffff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x1, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000003c0)=""/192, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0xffff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x201000, 0x0, 0x7, 0x0, 0x0})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) (async)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
pwrite64(r3, &(0x7f0000000640)="7e18ce6027b452d6209705c8e470c15d6c2a855a42029714523a3fb063061278ff3617dd9f6bb262f2943961dc25617dff3a51056ee68172479de3ed29d278f6c091d6393713b9246c6900de1fce734eb991aec9be", 0x55, 0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write$cgroup_int(r2, &(0x7f0000000140)=0xffffffffffffffff, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c00018008000100000001001400000011000100000000000000000a000a00"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m46.433415692s ago: executing program 4 (id=3887):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)='K', 0x1}, {&(0x7f0000000340)="923499", 0x3}], 0x2, 0x5)
tee(r0, r2, 0xfffffffffffffffd, 0x0)
close(r0)
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
pread64(r7, &(0x7f0000002200)=""/87, 0x57, 0xfffd)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={0x0}}, 0x4001)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x20040010)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)

1m46.343584247s ago: executing program 1 (id=3888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000e40))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg$unix(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/133, 0x85}, {&(0x7f0000001f40)=""/151, 0x97}], 0x8, &(0x7f0000002080)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0xaf4e3d36b12bd5e9)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x1888)

1m46.343426919s ago: executing program 2 (id=3889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x49)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20008010)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x49) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20008010) (async)

1m46.237146774s ago: executing program 4 (id=3890):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000010200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010026bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="92100000100200001400030076657468325f766c616e000010000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1m46.204973186s ago: executing program 2 (id=3891):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = gettid()
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/time_for_children\x00')
mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@gettfilter={0x34, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0x2, 0xc}, {0xb, 0xd}}, [{0x8, 0xb, 0x9}, {0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0)

1m46.127633791s ago: executing program 0 (id=3892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3f4, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ff98f7b24f4dc09b19889b8d1bf2e864b42fe28518599163e6919e88a257f095"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "348276d6b482ea88685beb3c31b7c6476902e0e57484442c4153878aa4118814d90353a171f5204d154fd2bdf5d0cb324a84d490719214c6f9cad4ab0f09b35f13f0ac6a51ae16d5469af8eb20c5636602f199b77e512a7ce314fd3ee4a76ebeae47b25261917baf8a0e2ed55a6fc4cd577e40774ebbaa4d98"}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "b89fb45db5db9133b7efa972e2df7ac6ec010c59bb21af99065765eb6a934a3c0d5487cb4d7e3fab1b6604c999de2e85239dc5861a129be220d5f045e0a73d7064fc54835f95fd1825baff63a6839563d1311cdfafb18348879fa6db7f64e6ebed991a1c247c4481489988a2f45da97357492e641cb0d475a1c37574d7a6ec32e7e12e5fa06598e69fe9b97f55288384f29ddf91b3e469b798cb119628b13869289f2b6c5ad90ecbd9ed229cad86f941f433b3ad29feac646e7920e32302dda0caf331087341c70567ebbb5c9b792aa8b0a433f71a526f1c6e"}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ae6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfae}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4ea}]}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2d, 0x3, "bcb76e625d3bf1d83e3696212f6f8e39bd3592d1dd30af1ef201e896a9059ec4640c285b8b7407aa37"}, @TIPC_NLA_NODE_ID={0xec, 0x3, "e28faf1605f6d15fb182aba534915fade32a7effe0c5661b5bef484ca3dc321a0aac9d3cf784c9a28f92d44a0b13bd8fe6870fcf7c34572bd81199982c0becc3105dad5190ccdf527bdd5be2ff6b9938f6861e2afe626592d769fd0a5fc8ce567323a824012d949715ac8bff39cf3a92c4deb0a05e23476a47e33f290c73d520b2c6e79c85185dee754ab88062690fb60b6df49899698e063427c5207d69e584f0449e76bbb9597ceab613fa096c6ced5a54e5ef9d70ea8cba50d6c2464eaea40ec1f14dc8b86da7f0cd56270ba38df90a55e0756a5569d8a50917d12a80cf395ebebacf941c5c9f"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x268, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_EXP={0x128, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}]}, @NFQA_EXP={0x12c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x98, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x80}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4004801}, 0x40000)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc4, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xa1, 0x6, "2eed08a9cf677d8a3d982c002898f6a556d1cecfded21b07e3d1abfef984de8edd5916bee49d51893f93f0aa6eebb72933fba791010340ab80cbb08fd99f1499ba1d6719cad6b027efe8ae44e380f9246d40f25bbd84c28aa1ed7a63c085c391b1c8820432ce0b74bca055abeb6a8ad821bd5d94722b09832532361d0890a82a43d76bf03009c7b6d0d54e2d60444f3e0dc1e9ea32fe7e7ec2b1992892"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000041}, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000b40)={<r6=>0x0, 0x1}, &(0x7f0000000b80)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000bc0)={r6, 0xc, 0xeaa3}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000c00)={<r7=>r3, 0x5, 0xc, 0x5a})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r8, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}}, 0x800)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, r8, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e6e0a0714f0a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x200600c0)
getsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000f00)=""/58, &(0x7f0000000f40)=0x3a)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000010c0)={{<r10=>r7, &(0x7f0000000f80)='sip\x00', 0x8000, &(0x7f0000000fc0)={@align=0xffff, {0x4, 0x4, 0x448d, 0xff}}, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0xfffffff8}, {[0x8, 0x5, 0x8, 0x2]}, 0x4, 0x21, &(0x7f0000001080)=""/33})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r7)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r10, &(0x7f0000001740)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f00000011c0)={0x538, r11, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@fils_params, @NL80211_ATTR_IE={0xe9, 0x2a, [@supported_rates, @random_vendor={0xdd, 0x87, "1ef4c887c711bac019eb630aaf28f03306d3a0459f7ed1ad2b490986b82393aaef6650aada777525f3a2895c81084f773ef166a77d234f202656feb8bb4911fb4ce132a749361cba5ec4dd28a12e991c7f4b0dfa7a16f468e2419ab9c1377c27c40dd6f0029957617a668f0036151c0d40c6b20627c1eb2a76545bea00764a95f1e63986b0e0ba"}, @random_vendor={0xdd, 0x48, "276deb0fc5db942683b2fef8610aabe09d0e8aaa9c15618bdc0b6a505f1fd415ee5878caea51710a5b07676df93336ef3c8010fc0c8211600c9bbace648678bf1e3b1a372bea9771"}, @mesh_chsw={0x76, 0x6, {0x40, 0xf, 0x5, 0xd24e}}, @cf={0x4, 0x6, {0x9c, 0xff, 0x8, 0x2}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "e61059c0704356242e4b8b323a8e25e5"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "933a81362016"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6ed}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "4bd58d701c4f04e4acab"}], @NL80211_ATTR_IE={0x14e, 0x2a, [@random={0x8, 0xe9, "0f3986a7e2fa23fefe660578c8b486b6560d2941870916e9803702ecb599d12f925cdac0b13ff7806b54760f6b8d8f5f93cc0581c6b64e80d82beade0aaf86098f965031ab1ef3c5c643506e791a4b88ce05059332f2b8c4b0387b140e39cffd6996f373865ae60977815be322bc2d23e5abff163f8c74a8daa4198fcdf0ef74ae961c7ed3ff477c2bb16cb527e69eee72506e893eff881cd3edaed046c458ade28d37fccb0c3b6136ddd06a95300ce6d4908e41405f6ca5e3ac8b6b611f628026377b3d0c5aaaddaa7ed7fedd8abc80c65fc9125e67a47575ec14544f5e80559642576f96aa3196fb"}, @chsw_timing={0x68, 0x4, {0x0, 0x79}}, @tim={0x5, 0x20, {0x1, 0x8c, 0x0, "ea92f2483624deb002ff85150d26ed8178f5ab29b00eff80d71a614574"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x3, 0x0, {0x8, 0x3, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3}, 0x6, 0xc7a, 0x8}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x2}}, @cf={0x4, 0x6, {0xb, 0xa, 0x2, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x6}]}, @NL80211_ATTR_IE={0x27, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @ssid={0x0, 0x6, @default_ap_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0xac}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x15b, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x0, 0x3, 0x3}}, @channel_switch={0x25, 0x3, {0x1, 0x99, 0x4}}, @fast_bss_trans={0x37, 0xf1, {0x5, 0x8, "277484264f76c27c44002b33dd87bccd", "3af6072a18170727966bc539f8b385bbb58ca95dbf2c6b8acb7a06a918dd7e7a", "950677d07fbdf9c1bfd0d9f85a9fe81514129b97668bfa90bbd34beb42e4aabb", [{0x3, 0x24, "aef978add38207c8086b1000421bb5fc0bf0a216fded59acb6c4574e23334f33224d9fae"}, {0x4, 0x1b, "281654a5e674e149e56a0de6702e8726abfd40445d82c644be5758"}, {0x4, 0x13, "6b958abad561f54bc4832ea3d6689fbf3f4e91"}, {0x4, 0xd, "8e9ca7b88ba7859c3fdcea29b6"}, {0x2, 0x3, "84f4de"}, {0x3, 0xd, "8fa3ed698168f7e56b39cd41ed"}, {0x4, 0x1e, "dad545cbeba824a5097cfdf74019e8f3aa5f86396b02eefea8a54867f6d7"}, {0x2, 0x2, "83f7"}]}}, @tim={0x5, 0xc, {0x9, 0x75, 0x37, "9d3735bced4ca9fe68"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x72, @broadcast, 0x200000, @value, 0x1, 0x7, @device_a, 0x8fc}}, @measure_req={0x26, 0x3, {0x1, 0x4, 0x5}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xea, 0xfc, "fb96de786e071acb11ba6770d2616d9e18792e3345af031c154c7ba75214312132b81011d8ff6e1b59b04df2fc452c0bd1e8f1eca418f4b02c17794b715a0a9029eba85f9e5333bf703e8a78513bfbbb7927179c699b98046a29cabcd908bd55cab3c1435dbe1f2d4fac0ae1564a9497430f117586c88a7bb80e89d594c696ca9b636a5d0aa99b1f5754a7182756fe99e0c78a5eaa41149c20c0e4b0ab8027e484f1f9b5d212d167513ef81eb3f0179e888dce58ab2d1fe06ed110f651d72e7abf9a1470b3de5dd3ee36ab8d538325cc6505a11dc8b79f2a36e28964e955d64f52b7397118c3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "c9a18f9ab7"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, ';'}, @NL80211_ATTR_FILS_ERP_RRK={0xa, 0xfc, "81aaf80ba986"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}]]}, 0x538}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
r12 = socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001780)={<r13=>0x0, 0x4, 0x101, 0x1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001b80)={{r12}, {@val={r13}, @actul_num={@val=0x2b, 0x1ff, 0x47}}})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20000044)
connect$unix(r7, &(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x17, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001e40)='GPL\x00', 0x100, 0x7b, &(0x7f0000001e80)=""/123, 0x41000, 0x28, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000001f00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001f40)={0x2, 0x7, 0x10, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001f80)=[{0x5, 0x5, 0x4, 0x4}, {0x2, 0x2, 0x7, 0xb}, {0x1, 0x1, 0x5, 0x7}, {0x5, 0x2, 0x2, 0x2}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r14, 0x0, 0x4b, 0xfe, &(0x7f0000002080)="cb919ab08762863fb804ebf836ca446de87f17e4db40900b10d33bdfb990342051dd744d2b1c3f2bc3e32c22a11cc73f2497f4db65031f56617eec93441239081f070babe011948325c4c6", &(0x7f0000002100)=""/254, 0xd1c1, 0x0, 0xf9, 0xb8, &(0x7f0000002200)="9247c1844494e9b8ababec57cf8924ba32f4581769ed64217702b1f6ea0dcdf912090d38b8f726846b456f3829afd1cd19a437ed88a7414e592ed5ac1ff6c5c4667ee2d7e5d243e218439905165a9d97d80598d76338072da631256b0ae4936502d36d31ebbeccd7c2a8c271addfd1a31f1dfb358e20d7c20fa2cc3e6baa8b9397ff2ffa6a6a341d9bd803d7b8aff6b64405b736f2a86af4d8ce46ae125e4e0657e4043631b069904e5162a0aa7935af7024dc03430ec13bf2bf8762aa92c9940b8d8a622e84a3cfef17289f6b3199aff22fee6f18f27e51aae551e9d3ebb6e4e168d3f7a815142fcd2d4ea3b4d76c315f04aaa670149df63e", &(0x7f0000002300)="1c675b2476fe3de9c1601c42aeefc7a5ee44972c1b29c16345563aa12f9614b3a61bdaa08836f4281461391aca7f91e1dcc87ce26026b0c1cc28d4a3ee21bba58bd09a8e3e84ba70ed6b97dcf45afac9234806c5035d68e1190092f4247a761fa0fecebd2bc45e2c7381bf705fe2543c6e0d3d004fd108313aa3c8ced0176910fe5bc95b5d86eaca779f15d2a7afc17dbfc922ddccf57d04d167de625e55b2f33512e63752c35b7a4a75dc037dfae45ba9235982791a7a24", 0x6, 0x0, 0x7}, 0x50)
connect$llc(r7, &(0x7f0000002440)={0x1a, 0x336, 0x3, 0x7, 0x1, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x78, 0x1, 0x7, 0x401, 0x0, 0x0, {0x46c5b12eef4dcabc}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe99}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5c}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a4}, 0x20004040)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

1m46.127059118s ago: executing program 1 (id=3893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x49, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fdffffff000000000400000018210000", @ANYRES32=r4, @ANYBLOB="0000000001000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0xc00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m45.97028782s ago: executing program 4 (id=3894):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000100000000000000000000000000000001050000001000000000000000000000030000000001"], 0x0, 0x53, 0x0, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

1m45.968137268s ago: executing program 3 (id=3895):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
preadv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socketpair(0x5, 0xa, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x4, &(0x7f0000000200)=[{0x3, 0x7, 0x7, 0x8}, {0x9, 0x0, 0x40, 0x9}, {0x7, 0xff, 0x7, 0x80000000}, {0x9c, 0xc, 0x5, 0x40}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000008000000010000eb9276d0e6522d0e31bb853784dc34c4896e48f313f6e62ffdf386d55ff4f378da97dd381c7ba8af41a57f909bbf5d4f2871fc3eb0b83055b39b7c05db409c027ce5713611f200bb4244470d6a518db4118d499294fdca10dbde834e559ebfaa39f6a9f3756f5569c4870a8e63aa61c8926933dd739f380a528e8d7a423ab2947200"/154, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m45.940189716s ago: executing program 0 (id=3896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$kcm(0x29, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

1m45.86834493s ago: executing program 1 (id=3897):
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
socket$kcm(0x2, 0xa, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socketpair(0x25, 0x800, 0x80000000, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x1800000000000000}, 0x70)

1m45.806756353s ago: executing program 0 (id=3898):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
close(0x4)

1m45.729718371s ago: executing program 0 (id=3899):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb0000000000"], 0x38}}, 0xc004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) (async)
sendto$inet(r3, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async)
sendmmsg(r3, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x4080) (async)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) (async)
sendto$inet6(r4, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038", 0x12, 0x40, 0x0, 0x0) (async)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async)
poll(&(0x7f0000000280), 0x0, 0x9) (async)
recvmsg(r1, 0x0, 0x1)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200020000000004000008080089fb00000100000080000000", @ANYRES32, @ANYBLOB="67ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x73) (async)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="060000000000069327de616776c7000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="03000000050000000100"/28], 0x50)

1m45.483207808s ago: executing program 0 (id=3900):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d)
write(r0, &(0x7f0000000000)="41000200010006", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0xfffffffffffffe39}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0xe4}}, 0x44840)
syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d83486bb56)
recvmmsg(r8, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/16, 0x10}, {0x0}], 0x2}, 0xf23}], 0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x40090)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$cgroup_subtree(r12, &(0x7f0000000700)=ANY=[], 0xfe33)
write$tun(r12, &(0x7f00000008c0)={@val={0x0, 0xfbfb}, @void, @ipv6=@tipc_packet={0x0, 0x6, "29c505", 0x220, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x73, 0x10, 0x1, 0x5, 0x0, [@remote, @loopback, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote]}, @srh={0x2c, 0xa, 0x4, 0x5, 0xea, 0x20, 0x6, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x3a, 0x0, 0x5, 0x0, 0x0, 0x9, 0x65}, @fragment={0x29, 0x0, 0x80, 0x0, 0x0, 0x2, 0x68}, @dstopts={0x2c, 0xa, '\x00', [@pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x10, 0x2, [0x9, 0x80, 0x7, 0x1, 0x800, 0x400, 0x419f]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}]}], @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x101, 0x0, 0x1, 0xdd, 0x8, 0x4, 0x4e21, 0x4e23, 0x2}, [{0x4, 0x3, 0x7f, 0x9467, 0x0, 0x2c5, 0x6, 0x7}, {0x9, 0x2, 0xc69d, 0xfffffff7, 0x6, 0x6, 0xc, 0x10000}, {0x6, 0x2, 0x6000000, 0x3ff, 0x3, 0x10001, 0x1, 0x200}, {0x4, 0x423d, 0x7, 0x3, 0x7fff, 0x4, 0x8, 0x9}, {0x1, 0xe, 0x2, 0x1, 0x5, 0x200, 0xe}, {0x1, 0x7fffffff, 0x80, 0x1, 0x4, 0x6, 0x1, 0x7}]}}}}, 0x24c)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000680)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})

1m44.994096263s ago: executing program 2 (id=3901):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000800000000000500000008000b400000000018000480140001800b00010074756e6e656c0000040002800900010073797a30000000000b000740ae30c665"], 0xc0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200488d0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x1, 'dh\x00', 0x0, 0xa7e, 0x13f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
unshare(0x20000600)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/186, 0xba}, 0x20)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

1m44.930081919s ago: executing program 4 (id=3902):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100210000002c000180deff0300200100000000000000000000000000011400040000000000000000000000ffffac1414aa3c00038000000340000100002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c0002800500010000"], 0xc8}}, 0x40000c2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x7813, 0x3, 0x0, 0xfffdffff, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9c"], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

1m44.864235054s ago: executing program 1 (id=3903):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(aegis128))\x00'}, 0x58)
close(0x3)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_subtree(r3, 0x0, 0xfffffeb0)
write$tun(r3, 0x0, 0x104a)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x20})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xe6)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1800000052000101000800000000000002"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r8 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
unshare(0x6020400)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4)
connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4)
socket$inet6(0xa, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)

1m44.724798103s ago: executing program 4 (id=3904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = socket(0x1e, 0x1, 0x0)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) (async)
r4 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2f, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8)
r7 = accept4$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000340)=0x6e, 0x80800)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000680)={0x2, 0x401, 0x3, 0x0, 0x0, [{{r1}, 0x6}, {{r7}, 0x2}, {{r4}, 0xc8}]}) (async)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000911147000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) (async)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xec601, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0)

1m44.416962091s ago: executing program 4 (id=3905):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xf, 0x2, 0x5a6, 0x400, 0x5, 0x10001, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0x5, 0xfffffffd, 0x8, 0x2, 0xb, 0x81, 0x4, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}})
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES8=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x11b}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
r5 = socket$netlink(0x10, 0x3, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x4}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x71e}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
accept4$x25(r7, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x0)

1m17.032331796s ago: executing program 32 (id=3900):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d)
write(r0, &(0x7f0000000000)="41000200010006", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x8084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0xfffffffffffffe39}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0xe4}}, 0x44840)
syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x2, 0x3, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d83486bb56)
recvmmsg(r8, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/16, 0x10}, {0x0}], 0x2}, 0xf23}], 0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x40090)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$cgroup_subtree(r12, &(0x7f0000000700)=ANY=[], 0xfe33)
write$tun(r12, &(0x7f00000008c0)={@val={0x0, 0xfbfb}, @void, @ipv6=@tipc_packet={0x0, 0x6, "29c505", 0x220, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x73, 0x10, 0x1, 0x5, 0x0, [@remote, @loopback, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @remote]}, @srh={0x2c, 0xa, 0x4, 0x5, 0xea, 0x20, 0x6, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x3a, 0x0, 0x5, 0x0, 0x0, 0x9, 0x65}, @fragment={0x29, 0x0, 0x80, 0x0, 0x0, 0x2, 0x68}, @dstopts={0x2c, 0xa, '\x00', [@pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x10, 0x2, [0x9, 0x80, 0x7, 0x1, 0x800, 0x400, 0x419f]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}]}], @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x101, 0x0, 0x1, 0xdd, 0x8, 0x4, 0x4e21, 0x4e23, 0x2}, [{0x4, 0x3, 0x7f, 0x9467, 0x0, 0x2c5, 0x6, 0x7}, {0x9, 0x2, 0xc69d, 0xfffffff7, 0x6, 0x6, 0xc, 0x10000}, {0x6, 0x2, 0x6000000, 0x3ff, 0x3, 0x10001, 0x1, 0x200}, {0x4, 0x423d, 0x7, 0x3, 0x7fff, 0x4, 0x8, 0x9}, {0x1, 0xe, 0x2, 0x1, 0x5, 0x200, 0xe}, {0x1, 0x7fffffff, 0x80, 0x1, 0x4, 0x6, 0x1, 0x7}]}}}}, 0x24c)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000680)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})

0s ago: executing program 33 (id=3895):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
preadv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socketpair(0x5, 0xa, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x4, &(0x7f0000000200)=[{0x3, 0x7, 0x7, 0x8}, {0x9, 0x0, 0x40, 0x9}, {0x7, 0xff, 0x7, 0x80000000}, {0x9c, 0xc, 0x5, 0x40}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000008000000010000eb9276d0e6522d0e31bb853784dc34c4896e48f313f6e62ffdf386d55ff4f378da97dd381c7ba8af41a57f909bbf5d4f2871fc3eb0b83055b39b7c05db409c027ce5713611f200bb4244470d6a518db4118d499294fdca10dbde834e559ebfaa39f6a9f3756f5569c4870a8e63aa61c8926933dd739f380a528e8d7a423ab2947200"/154, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

kernel console output (not intermixed with test programs):

m0 speed is unknown, defaulting to 1000
[  367.683779][T17501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.781887][T17496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.819234][T17496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.915073][T17299] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.926841][ T9844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  367.945024][T17299] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.961362][T17299] bridge_slave_0: entered allmulticast mode
[  367.976802][T17299] bridge_slave_0: entered promiscuous mode
[  367.993921][T17299] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.010002][T17299] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.023659][T17506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.027990][T17299] bridge_slave_1: entered allmulticast mode
[  368.048495][T17299] bridge_slave_1: entered promiscuous mode
[  368.070286][ T5632] Bluetooth: hci5: command tx timeout
[  368.118748][T17447] virt_wifi0 speed is unknown, defaulting to 1000
[  368.129664][ T5620] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  368.157762][T17447] lo speed is unknown, defaulting to 1000
[  368.175178][T17299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.211261][T17299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.317170][T17299] team0: Port device team_slave_0 added
[  368.334573][T17299] team0: Port device team_slave_1 added
[  368.401426][T17299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.418651][T17299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.469763][T17299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.494314][T17299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.501862][T17299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.550998][T17299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.754479][T17509] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  368.800006][T17509] bond11 (unregistering): Released all slaves
[  368.894798][T17299] hsr_slave_0: entered promiscuous mode
[  368.913999][T17299] hsr_slave_1: entered promiscuous mode
[  368.922761][T17299] debugfs: 'hsr0' already exists in 'hsr'
[  368.945827][T17299] Cannot create hsr debugfs directory
[  369.328054][T17531] openvswitch: netlink: Flow key attr not present in new flow.
[  369.509590][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  369.818578][   T30] audit: type=1107 audit(1786852651.803:9): pid=17549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ïïá(8}Ô"Ð蛘Öè÷¸ÝõW¢qèëzÌÿ§©e	ô	I!�Ï ›—#_§ñ_5"âÚºÖu…åw•qÅú„«ûÛŽÐÜ_[ð×¼ã8Ü×t=ð§5Û‰(åÑ…<	Ãåº(¥!%W�É-®1â|F0E»åoßÂlYŸ¨8Zz'
[  369.962674][T17299] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.151408][ T5632] Bluetooth: hci5: command tx timeout
[  370.190573][T17299] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.361532][T17570] team_slave_0: entered promiscuous mode
[  370.373285][T17570] macvtap1: entered allmulticast mode
[  370.379433][T17570] team_slave_0: entered allmulticast mode
[  370.388079][T17570] team_slave_0: left allmulticast mode
[  370.398610][T17570] team_slave_0: left promiscuous mode
[  370.437847][T17574] __nla_validate_parse: 9 callbacks suppressed
[  370.437864][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'.
[  370.455557][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'.
[  370.501865][T17299] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.564740][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3010'.
[  370.657256][T17299] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.771938][T17587] erspan0: entered promiscuous mode
[  371.099580][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3015'.
[  371.113192][T17299] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  371.134513][T17299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  371.152399][T17299] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  371.165779][T17299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  371.186408][T17299] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  371.276994][T17299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  371.334590][T17299] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  371.345119][T17299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  371.441249][T17625] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3020'.
[  371.460799][T17626] ip6erspan1: entered allmulticast mode
[  371.583482][T17299] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.600647][T17628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'.
[  371.637141][T17299] 8021q: adding VLAN 0 to HW filter on device team0
[  371.653054][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'.
[  371.678849][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.686063][ T3315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.800326][T17599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.816261][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.823496][ T3315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.228941][    C0] bridge0: port 3(veth0) entered forwarding state
[  372.236516][    C0] bridge0: topology change detected, propagating
[  372.249332][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.256589][    C0] bridge0: topology change detected, propagating
[  372.264580][ T5632] Bluetooth: hci5: command tx timeout
[  372.352024][T17649] IPVS: length: 176 != 24
[  372.602299][T17663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3028'.
[  374.308930][ T5632] Bluetooth: hci5: command tx timeout
[  374.510084][T17299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.828476][T17299] veth0_vlan: entered promiscuous mode
[  374.842787][T17299] veth1_vlan: entered promiscuous mode
[  374.875750][T17299] veth0_macvtap: entered promiscuous mode
[  374.888355][T17299] veth1_macvtap: entered promiscuous mode
[  374.904528][T17722] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  374.912727][T17299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.928271][T17299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.979105][  T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.059372][  T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.068221][  T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.079186][  T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.215855][T17685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  377.236897][T17720] netlink: 'syz.2.3036': attribute type 1 has an invalid length.
[  377.253595][T17720] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3036'.
[  377.285361][T17720] netlink: 'syz.2.3036': attribute type 1 has an invalid length.
[  377.346041][T17725] ip_tables: iptables: counters copy to user failed while replacing table
[  377.369157][T17724] ip_tables: iptables: counters copy to user failed while replacing table
[  377.451216][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'.
[  377.487740][ T3283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.514633][ T3283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.792674][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.815292][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.876466][T17750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3044'.
[  377.896361][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'.
[  377.910466][T17750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3044'.
[  377.934716][T17750] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3044'.
[  377.990893][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  378.027358][T17752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'.
[  378.037442][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3043'.
[  378.047875][T17752] bridge0: port 2(veth0) entered blocking state
[  378.054986][T17752] bridge0: port 2(veth0) entered disabled state
[  378.062386][T17752] veth0: entered allmulticast mode
[  378.093361][T17752] veth0: entered promiscuous mode
[  378.125025][T17752] bridge0: port 2(veth0) entered blocking state
[  378.131433][T17752] bridge0: port 2(veth0) entered forwarding state
[  378.356788][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.367634][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.379103][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.395161][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.410857][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.477156][T17769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.577578][T17782] netlink: 'syz.4.3051': attribute type 1 has an invalid length.
[  378.587392][T17782] netlink: 'syz.4.3051': attribute type 6 has an invalid length.
[  378.598507][T17782] netlink: 'syz.4.3051': attribute type 3 has an invalid length.
[  378.635514][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  378.641901][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  378.746517][T17789] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.3052'.
[  379.108372][T17773] lo speed is unknown, defaulting to 1000
[  379.119882][T17773] xfrm0 speed is unknown, defaulting to 1000
[  379.173069][T17820] xt_bpf: check failed: parse error
[  379.192903][T17820] xt_bpf: check failed: parse error
[  379.302582][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3063'.
[  379.473611][T17773] virt_wifi0 speed is unknown, defaulting to 1000
[  379.482146][T17773] lo speed is unknown, defaulting to 1000
[  379.588059][T17847] netlink: 'syz.1.3066': attribute type 11 has an invalid length.
[  379.909836][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  379.993934][T17865] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  380.311265][T17885] block nbd0: NBD_DISCONNECT
[  380.338511][T17885] block nbd0: Send disconnect failed -104
[  380.361709][T17885] block nbd0: shutting down sockets
[  380.470520][ T5630] Bluetooth: hci1: command tx timeout
[  380.546862][T17773] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.558404][T17773] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.566040][T17773] bridge_slave_0: entered allmulticast mode
[  380.574360][T17773] bridge_slave_0: entered promiscuous mode
[  380.583148][T17773] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.593254][T17773] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.603954][T17773] bridge_slave_1: entered allmulticast mode
[  380.612004][T17773] bridge_slave_1: entered promiscuous mode
[  380.688412][T17773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.717007][T17773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.862255][T17773] team0: Port device team_slave_0 added
[  380.880960][T17908] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  380.894769][T17773] team0: Port device team_slave_1 added
[  380.998289][T17773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.013243][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.046800][T17773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.093080][ T1082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  381.113004][ T1082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.134691][T17773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.142039][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.170720][T17760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  381.190404][T17773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.434992][T17917] syzkaller0: entered promiscuous mode
[  381.452559][T17917] syzkaller0: entered allmulticast mode
[  381.521119][T17936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.547428][ T1082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  381.565376][ T1082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.551687][ T5630] Bluetooth: hci1: command tx timeout
[  382.879566][  T146] wlan1: Trigger new scan to find an IBSS to join
[  383.357217][T17773] hsr_slave_0: entered promiscuous mode
[  383.364227][T17773] hsr_slave_1: entered promiscuous mode
[  383.370709][T17773] debugfs: 'hsr0' already exists in 'hsr'
[  383.376477][T17773] Cannot create hsr debugfs directory
[  383.406273][ T1082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  383.417541][ T1082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.588635][T17975] lo speed is unknown, defaulting to 1000
[  383.615035][T17975] xfrm0 speed is unknown, defaulting to 1000
[  383.750808][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  383.823443][ T1082] pim6reg: left allmulticast mode
[  383.841415][ T1082] dummy0: left allmulticast mode
[  384.302699][ T1082] bond8 (unregistering): (slave geneve2): Releasing active interface
[  384.438435][ T1082] bond9 (unregistering): (slave bridge4): Releasing backup interface
[  384.461737][ T1082] bond0 (unregistering): Released all slaves
[  384.473240][ T1082] bond1 (unregistering): Released all slaves
[  384.487141][ T1082] bond2 (unregistering): Released all slaves
[  384.501698][ T1082] bond3 (unregistering): Released all slaves
[  384.517926][ T1082] bond4 (unregistering): Released all slaves
[  384.539408][ T1082] bond5 (unregistering): (slave veth1): Releasing active interface
[  384.552950][ T1082] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  384.563329][ T1082] bond5 (unregistering): Released all slaves
[  384.578702][ T1082] bond6 (unregistering): Released all slaves
[  384.596205][ T1082] bond7 (unregistering): (slave veth3): Releasing active interface
[  384.605407][ T1082] bond7 (unregistering): Released all slaves
[  384.620176][ T1082] bond8 (unregistering): Released all slaves
[  384.629056][ T5630] Bluetooth: hci1: command tx timeout
[  384.644154][ T1082] bond9 (unregistering): Released all slaves
[  384.666800][ T1082] bond10 (unregistering): (slave veth5): Releasing active interface
[  384.676774][ T1082] bond10 (unregistering): (slave veth7): Releasing active interface
[  384.686213][ T1082] bond10 (unregistering): Released all slaves
[  384.704970][T17975] virt_wifi0 speed is unknown, defaulting to 1000
[  384.732603][T17975] lo speed is unknown, defaulting to 1000
[  384.856351][ T1082] tipc: Disabling bearer <eth:batadv0>
[  384.875528][ T1082] tipc: Left network mode
[  385.032261][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  385.440524][T17955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  385.764382][T17984] netlink: 'syz.1.3097': attribute type 1 has an invalid length.
[  385.886295][T17992] netlink: 'syz.1.3097': attribute type 10 has an invalid length.
[  385.906610][T17992] __nla_validate_parse: 9 callbacks suppressed
[  385.906624][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'.
[  385.923273][ T3315] wlan1: Trigger new scan to find an IBSS to join
[  386.093526][T17992] dummy0: entered promiscuous mode
[  386.132748][T17773] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  386.176457][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  386.205663][T17773] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  386.253351][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  386.277285][T17773] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  386.341019][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  386.373200][T17773] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  386.408461][T17773] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  386.708902][ T5632] Bluetooth: hci1: command tx timeout
[  386.725753][T17773] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.848111][T17773] 8021q: adding VLAN 0 to HW filter on device team0
[  386.895573][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.902850][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.987516][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.994781][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.288457][T18036] bond6: entered promiscuous mode
[  387.313631][T18036] bond6: entered allmulticast mode
[  387.398092][ T1082] hsr_slave_0: left promiscuous mode
[  387.413356][ T1082] hsr_slave_1: left promiscuous mode
[  387.499869][ T1082] veth1_macvtap: left promiscuous mode
[  387.506702][ T1082] veth0_macvtap: left promiscuous mode
[  387.512994][ T1082] veth1_vlan: left promiscuous mode
[  387.518329][ T1082] veth0_vlan: left promiscuous mode
[  387.534959][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'.
[  387.558656][T18053] openvswitch: netlink: Missing key (keys=c0, expected=40300)
[  387.913884][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  388.185337][T18061] netlink: 'syz.3.3112': attribute type 12 has an invalid length.
[  388.244269][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'.
[  388.482282][T18076] bridge1: entered promiscuous mode
[  388.513539][T18076] bridge1: entered allmulticast mode
[  388.536628][T18076] team0: Port device bridge1 added
[  388.564017][T18083] bridge0: port 3(team0) entered blocking state
[  388.594916][T18083] bridge0: port 3(team0) entered disabled state
[  388.638136][T18083] team0: entered allmulticast mode
[  388.656055][T18083] team_slave_0: entered allmulticast mode
[  388.682058][T18083] team_slave_1: entered allmulticast mode
[  388.734398][T18083] team0: entered promiscuous mode
[  388.765066][T18083] team_slave_0: entered promiscuous mode
[  388.793715][T18083] team_slave_1: entered promiscuous mode
[  388.827548][T18083] bridge0: port 3(team0) entered blocking state
[  388.833966][T18083] bridge0: port 3(team0) entered forwarding state
[  388.873509][ T1119] wlan1: Trigger new scan to find an IBSS to join
[  388.904560][ T1082] IPVS: stop unused estimator thread 0...
[  389.037657][T18113] netlink: 'syz.3.3120': attribute type 1 has an invalid length.
[  389.257895][T18113] bond11: entered promiscuous mode
[  389.303207][T18113] 8021q: adding VLAN 0 to HW filter on device bond11
[  389.371554][T18120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3121'.
[  389.450565][T18116] bond11: (slave veth3): making interface the new active one
[  389.480172][T18116] veth3: entered promiscuous mode
[  389.505165][T18116] bond11: (slave veth3): Enslaving as an active interface with an up link
[  389.563045][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'.
[  389.741396][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.771774][  T146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.833759][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.869147][ T1119] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.884193][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'.
[  389.892782][T18144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3126'.
[  389.902254][ T1119] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.902446][ T1119] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.954716][T17773] veth0_vlan: entered promiscuous mode
[  389.985648][T17773] veth1_vlan: entered promiscuous mode
[  390.052912][T17773] veth0_macvtap: entered promiscuous mode
[  390.084045][T17773] veth1_macvtap: entered promiscuous mode
[  390.123755][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.150403][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.216323][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3132'.
[  390.229727][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.238764][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.299379][  T146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.322872][  T146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.484416][ T3315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.520205][ T3315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.576353][T18175] netlink: 'syz.4.3137': attribute type 1 has an invalid length.
[  390.586853][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.603750][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.655571][T18175] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.758095][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3138'.
[  390.794484][T18189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3138'.
[  390.918393][T18193] __nla_validate_parse: 23 callbacks suppressed
[  390.918412][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'.
[  391.104457][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  391.116108][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  391.124944][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  391.135708][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  391.146474][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  391.620146][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'.
[  391.670177][T18089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.056703][T18204] lo speed is unknown, defaulting to 1000
[  392.082188][T18246] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.100592][T18204] xfrm0 speed is unknown, defaulting to 1000
[  392.122253][T18245] syzkaller0: mtu less than device minimum
[  392.147487][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'.
[  392.602259][T18204] virt_wifi0 speed is unknown, defaulting to 1000
[  392.611944][T18204] lo speed is unknown, defaulting to 1000
[  392.661061][T18269] netlink: 'syz.2.3159': attribute type 25 has an invalid length.
[  393.189022][ T5630] Bluetooth: hci3: command tx timeout
[  393.212406][T18300] netlink: 'syz.3.3166': attribute type 1 has an invalid length.
[  393.245241][T18300] netlink: 'syz.3.3166': attribute type 5 has an invalid length.
[  393.798629][T18326] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  393.813234][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.965509][T18335] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  393.999995][T18334] netlink: 'syz.1.3173': attribute type 25 has an invalid length.
[  394.017729][T18324] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.025379][T18324] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.337511][T18324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.371742][T18362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.400604][T18324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.586325][T18367] netlink: NAT attribute has 4 unknown bytes
[  394.594837][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.607682][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'.
[  394.618154][T18367] bond0: Unable to set up delay as MII monitoring is disabled
[  394.626302][T18367] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  394.669440][ T1082] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.701228][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'.
[  394.720720][T18358] netlink: 'syz.4.3176': attribute type 11 has an invalid length.
[  394.766116][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'.
[  394.787634][T18358] netlink: 'syz.4.3176': attribute type 11 has an invalid length.
[  394.867815][T18204] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.889416][T18204] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.897944][T18377] netlink: 'syz.1.3180': attribute type 2 has an invalid length.
[  394.900330][T18204] bridge_slave_0: entered allmulticast mode
[  394.923048][T18378] netlink: 'syz.3.3181': attribute type 1 has an invalid length.
[  394.940955][T18204] bridge_slave_0: entered promiscuous mode
[  394.972954][T18204] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.982765][T18376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3181'.
[  394.994707][T18204] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.002369][T18204] bridge_slave_1: entered allmulticast mode
[  395.011395][T18204] bridge_slave_1: entered promiscuous mode
[  395.269264][ T5630] Bluetooth: hci3: command tx timeout
[  395.725481][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.769463][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.865738][T18204] team0: Port device team_slave_0 added
[  395.903624][T18204] team0: Port device team_slave_1 added
[  395.931818][T18395] netlink: 'syz.4.3186': attribute type 25 has an invalid length.
[  396.087199][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.105390][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.156348][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.193626][ T1119] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.215247][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.238580][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.319293][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.444195][T18204] hsr_slave_0: entered promiscuous mode
[  396.458762][T18204] hsr_slave_1: entered promiscuous mode
[  396.513493][T18429] netlink: 'syz.2.3194': attribute type 2 has an invalid length.
[  396.529146][ T1119] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.558931][ T1119] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.614948][T18433] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  396.645860][T18433] bond1 (unregistering): Released all slaves
[  396.890722][T18204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.901493][T18204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.912053][T18204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.001398][T18204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.013029][T18204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.023888][T18204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.181469][T18204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.211900][T18204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.236651][T18204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  397.349237][ T5630] Bluetooth: hci3: command tx timeout
[  397.572561][T18441] team0: No ports can be present during mode change
[  398.154816][T18204] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  398.182857][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  398.206782][T18204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  398.244980][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  398.262061][T18204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  398.286827][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  398.343426][T18204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  398.363383][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  398.466537][T18497] validate_nla: 1 callbacks suppressed
[  398.466552][T18497] netlink: 'syz.1.3209': attribute type 25 has an invalid length.
[  398.545919][T18204] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.593548][T18204] 8021q: adding VLAN 0 to HW filter on device team0
[  398.616395][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.623583][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  398.657549][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.664758][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.705597][T18512] netlink: 'syz.1.3211': attribute type 1 has an invalid length.
[  398.800493][T18512] 8021q: adding VLAN 0 to HW filter on device bond13
[  398.920809][T18520] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:21
[  399.032801][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'.
[  399.105448][T18525] 8021q: adding VLAN 0 to HW filter on device bond12
[  399.124300][T18531] bond12: option ad_select: unable to set because the bond device is up
[  399.217114][T18536] netlink: 'syz.4.3215': attribute type 15 has an invalid length.
[  399.241845][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3215'.
[  399.395805][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.439339][ T5630] Bluetooth: hci3: command tx timeout
[  399.457166][T18204] veth0_vlan: entered promiscuous mode
[  399.471992][T18204] veth1_vlan: entered promiscuous mode
[  399.526218][T18548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3217'.
[  399.541861][T18204] veth0_macvtap: entered promiscuous mode
[  399.552260][T18550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3217'.
[  399.561435][T18204] veth1_macvtap: entered promiscuous mode
[  399.591036][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.621144][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.660102][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.680008][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.731457][ T3327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.786101][ T3327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.007665][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'.
[  400.019509][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.028312][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.302758][T18580] netdevsim netdevsim3 
€Â: renamed from netdevsim0
[  400.595766][T18595] netlink: 'syz.2.3229': attribute type 2 has an invalid length.
[  400.673756][T18599] syzkaller0: entered promiscuous mode
[  400.679502][T18599] syzkaller0: entered allmulticast mode
[  401.023032][T18610] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.3232'.
[  401.084495][T18612] netlink: 'syz.3.3233': attribute type 1 has an invalid length.
[  401.108056][T18612] 8021q: adding VLAN 0 to HW filter on device bond13
[  401.133494][T18612] veth5: entered allmulticast mode
[  401.141682][T18612] bond13: (slave veth5): Enslaving as an active interface with an up link
[  401.508644][T18618] openvswitch: netlink: Duplicate or invalid key (type 0).
[  402.959684][T18557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  403.028710][ T3327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.049147][ T3327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.165300][T18623] x_tables: duplicate underflow at hook 2
[  403.515689][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'.
[  403.698618][T18659] netlink: 'syz.4.3246': attribute type 1 has an invalid length.
[  403.768440][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  403.785533][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  403.794804][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  403.808643][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  403.824759][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  404.188162][ T5612] bond9: (slave syz_tun): Releasing active interface
[  404.462786][ T3315] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.676908][T18693] bridge0: port 3(team0) entered disabled state
[  404.683645][T18693] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.691295][T18693] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.786251][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.801224][T18693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.863335][T18693] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  404.961717][ T3315] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.061663][T18714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3260'.
[  405.076511][T18714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3260'.
[  405.087351][T18662] lo speed is unknown, defaulting to 1000
[  405.091414][  T896] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.108525][  T896] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.131981][  T896] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.157219][  T896] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.186681][T18662] xfrm0 speed is unknown, defaulting to 1000
[  405.219770][ T3315] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.241424][T18723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3260'.
[  405.269413][  T896] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.288660][  T896] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.321222][  T896] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.352733][  T896] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.432897][ T3315] netdevsim netdevsim3 
€Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.566473][T18662] virt_wifi0 speed is unknown, defaulting to 1000
[  405.639841][T18662] lo speed is unknown, defaulting to 1000
[  405.652193][T18741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  405.820459][ T3315] veth0: left allmulticast mode
[  405.837122][ T3315] bridge0: port 1(veth0) entered disabled state
[  405.896945][ T3315] pim6reg: left allmulticast mode
[  405.909748][ T5630] Bluetooth: hci2: command tx timeout
[  406.516489][ T3315] bond8 (unregistering): (slave bridge3): Releasing backup interface
[  406.524799][ T3315] bridge3 (unregistering): left promiscuous mode
[  406.569869][ T3315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.580582][ T3315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.593726][ T3315] bond0 (unregistering): Released all slaves
[  406.612650][ T3315] bond1 (unregistering): Released all slaves
[  406.626959][ T3315] bond2 (unregistering): Released all slaves
[  406.642745][ T3315] bond3 (unregistering): Released all slaves
[  406.657282][ T3315] bond4 (unregistering): Released all slaves
[  406.676170][ T3315] bond5 (unregistering): Released all slaves
[  406.697673][ T3315] bond6 (unregistering): Released all slaves
[  406.716490][ T3315] bond7 (unregistering): Released all slaves
[  406.733600][ T3315] bond8 (unregistering): Released all slaves
[  406.748099][ T3315] bond9 (unregistering): Released all slaves
[  406.762656][ T3315] bond10 (unregistering): Released all slaves
[  406.778280][ T3315] bond11 (unregistering): (slave veth3): Releasing backup interface
[  406.798250][ T3315] veth3: left promiscuous mode
[  406.804711][ T3315] bond11 (unregistering): Released all slaves
[  406.821418][ T3315] bond12 (unregistering): Released all slaves
[  406.837269][ T3315] bond13 (unregistering): (slave veth5): Releasing backup interface
[  406.846776][ T3315] bond13 (unregistering): Released all slaves
[  406.886910][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1
[  406.971633][T18777] ip_tables: iptables: counters copy to user failed while replacing table
[  407.123338][ T3315] tipc: Disabling bearer <udp:syz2>
[  407.133671][ T3315] tipc: Left network mode
[  407.505608][ T3315] IPVS: stopping backup sync thread 13989 ...
[  407.588368][T18793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3277'.
[  407.957702][T18823] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3280'.
[  408.002296][ T5630] Bluetooth: hci2: command tx timeout
[  408.421844][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2
[  408.474911][T18662] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.482602][T18662] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.493799][T18662] bridge_slave_0: entered allmulticast mode
[  408.501622][T18662] bridge_slave_0: entered promiscuous mode
[  408.530868][T18662] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.543423][T18662] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.560987][T18662] bridge_slave_1: entered allmulticast mode
[  408.569550][T18662] bridge_slave_1: entered promiscuous mode
[  408.576833][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3283'.
[  408.623595][T18842] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  408.660363][T18841] syzkaller1: entered promiscuous mode
[  408.667740][T18841] syzkaller1: entered allmulticast mode
[  408.687111][T18662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.725813][T18662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.741144][T18844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3284'.
[  408.845486][T18662] team0: Port device team_slave_0 added
[  408.877268][T18662] team0: Port device team_slave_1 added
[  409.026729][T18662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.037489][T18852] netlink: 'syz.0.3285': attribute type 13 has an invalid length.
[  409.055972][T18662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.080184][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  409.107948][T18662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.160202][T18861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3287'.
[  409.184376][T18662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.194847][T18662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.227276][T18662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.238709][T18852] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  409.311949][T18865] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  409.324803][T18871] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  409.405959][T18662] hsr_slave_0: entered promiscuous mode
[  409.428693][T18662] hsr_slave_1: entered promiscuous mode
[  409.435718][T18662] debugfs: 'hsr0' already exists in 'hsr'
[  409.441657][T18662] Cannot create hsr debugfs directory
[  409.701185][T18917] openvswitch: netlink: Actions may not be safe on all matching packets
[  409.726642][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3
[  410.070881][ T5630] Bluetooth: hci2: command tx timeout
[  410.087862][ T3315] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.197923][ T3315] team0 (unregistering): Port device team_slave_1 removed
[  410.221166][ T3315] team0 (unregistering): Port device team_slave_0 removed
[  410.313898][ T3315] dummy0 (unregistering): left promiscuous mode
[  410.321443][ T3315] team0 (unregistering): Port device dummy0 removed
[  410.488603][T18922] syz_tun: entered allmulticast mode
[  410.502670][T18895] IPVS: starting estimator thread 0...
[  410.514130][T18921] syz_tun: left allmulticast mode
[  410.599222][T18923] IPVS: using max 31 ests per chain, 74400 per kthread
[  410.729885][ T3315] IPVS: stop unused estimator thread 0...
[  411.910328][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  411.959569][T18853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  412.047209][T18662] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  412.073344][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  412.098052][T18662] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  412.148474][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  412.158962][ T5630] Bluetooth: hci2: command tx timeout
[  412.193373][T18662] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  412.224298][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  412.235769][T18662] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  412.256649][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  412.371900][T18958] netlink: 'syz.4.3301': attribute type 2 has an invalid length.
[  412.695290][T18977] __nla_validate_parse: 1 callbacks suppressed
[  412.695309][T18977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3305'.
[  412.766994][T18662] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.861246][T18662] 8021q: adding VLAN 0 to HW filter on device team0
[  412.905776][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.912965][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.986668][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.993892][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.086087][T19001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3309'.
[  413.170806][T18998] netlink: 'syz.0.3307': attribute type 1 has an invalid length.
[  413.811816][T18991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.834835][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.842635][    C1] bridge0: topology change detected, propagating
[  414.143014][T19058] macsec1: entered promiscuous mode
[  414.251646][T19063] ip6tnl1: entered allmulticast mode
[  414.292125][T19063] netlink: 'syz.0.3319': attribute type 1 has an invalid length.
[  414.334431][T19063] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3319'.
[  414.387153][T19066] xt_hashlimit: size too large, truncated to 1048576
[  414.642450][T18662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.751024][T19060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.876426][T18662] veth0_vlan: entered promiscuous mode
[  414.936276][T18662] veth1_vlan: entered promiscuous mode
[  415.102962][T18662] veth0_macvtap: entered promiscuous mode
[  415.163459][T19109] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  415.183366][T18662] veth1_macvtap: entered promiscuous mode
[  415.348143][T18662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.422542][T18662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.480567][T18908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.510775][T18908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.622430][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.668817][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.814822][T18905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.856157][T18905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.856801][T19147] vlan2: entered promiscuous mode
[  415.903287][T19147] gretap0: entered promiscuous mode
[  415.966017][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3334'.
[  416.051545][T19155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3334'.
[  416.076202][T19158] tipc: Can't bind to reserved service type 1
[  416.102146][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'.
[  416.118026][ T3307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.151278][ T3307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.179485][T19156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  416.297522][T19163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3338'.
[  416.346023][T19163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3338'.
[  416.621258][   T30] audit: type=1800 audit(1786852698.603:10): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3241" name="blkio.bfq.time_recursive" dev="tmpfs" ino=18 res=0 errno=0
[  416.643367][T19185] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3241'.
[  416.833558][T19193] ip_tables: iptables: counters copy to user failed while replacing table
[  416.903798][T19197] tipc: Started in network mode
[  416.939825][T19197] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  416.956835][T19197] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  417.123935][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.141557][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.156182][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.172949][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.185764][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.296346][T19218] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  417.396156][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3347'.
[  417.410131][T19224] netlink: 'syz.0.3348': attribute type 11 has an invalid length.
[  417.515154][ T5630] block nbd0: Receive control failed (result -1)
[  417.577941][T19234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.094502][ T5616] bridge0: port 1(syz_tun) entered disabled state
[  418.183193][ T5616] syz_tun (unregistering): left allmulticast mode
[  418.201820][ T5616] syz_tun (unregistering): left promiscuous mode
[  418.216513][ T5616] bridge0: port 1(syz_tun) entered disabled state
[  418.320534][ T9844] tipc: Node number set to 10136234
[  418.643087][T18888] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  418.680688][T19265] __nla_validate_parse: 1 callbacks suppressed
[  418.680703][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  419.190656][T19297] netlink: 'syz.2.3358': attribute type 7 has an invalid length.
[  419.206958][T19297] netlink: 'syz.2.3358': attribute type 7 has an invalid length.
[  419.220467][T18913] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  419.247988][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'.
[  419.248388][T19211] lo speed is unknown, defaulting to 1000
[  419.268264][T18913] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  419.286899][ T5630] Bluetooth: hci0: command tx timeout
[  419.310426][T18913] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  419.326415][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.358670][T19299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.450847][T19211] xfrm0 speed is unknown, defaulting to 1000
[  419.479367][T18888] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  419.635136][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'.
[  419.686925][T19321] bridge0: port 4(vlan2) entered blocking state
[  419.695686][T19321] bridge0: port 4(vlan2) entered disabled state
[  419.715665][T19321] vlan2: entered allmulticast mode
[  419.727255][T19321] geneve0: entered allmulticast mode
[  419.752854][T19321] vlan2: entered promiscuous mode
[  419.756761][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'.
[  419.767689][T19321] geneve0: entered promiscuous mode
[  419.793351][T19319] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3364'.
[  419.848285][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'.
[  419.878068][T19327] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  420.085428][T19211] virt_wifi0 speed is unknown, defaulting to 1000
[  420.103718][T19211] lo speed is unknown, defaulting to 1000
[  420.228968][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  420.324652][T19357] netlink: 'syz.3.3371': attribute type 3 has an invalid length.
[  420.346401][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3371'.
[  420.386243][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'.
[  420.724673][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'.
[  420.733815][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3373'.
[  420.758596][T19372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.966756][T19378] netlink: 'syz.2.3377': attribute type 6 has an invalid length.
[  421.359561][ T5630] Bluetooth: hci0: command tx timeout
[  422.055188][T19211] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.070404][T19211] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.085300][T19211] bridge_slave_0: entered allmulticast mode
[  422.093581][T19211] bridge_slave_0: entered promiscuous mode
[  422.105395][T19211] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.119081][T19211] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.134230][T19211] bridge_slave_1: entered allmulticast mode
[  422.151954][ T3307] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  422.155943][T19211] bridge_slave_1: entered promiscuous mode
[  422.391626][T19433] syzkaller0: entered promiscuous mode
[  422.408883][T19433] syzkaller0: entered allmulticast mode
[  422.639006][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  423.433636][ T5630] Bluetooth: hci0: command tx timeout
[  424.115482][T19211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.206543][T19211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.355880][T19460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3395'.
[  424.362616][T19211] team0: Port device team_slave_0 added
[  424.392129][T19211] team0: Port device team_slave_1 added
[  424.516719][T19211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.540235][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.583932][T19211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.598568][T19211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.607147][T19211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.635417][T19211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.797317][T19211] hsr_slave_0: entered promiscuous mode
[  424.808387][T19211] hsr_slave_1: entered promiscuous mode
[  424.816706][T19211] debugfs: 'hsr0' already exists in 'hsr'
[  424.822749][T19211] Cannot create hsr debugfs directory
[  424.904003][T19487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3403'.
[  425.244135][T19498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3405'.
[  425.401429][T19507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3408'.
[  425.512173][T19501] syzkaller0: entered promiscuous mode
[  425.517763][T19501] syzkaller0: entered allmulticast mode
[  425.524509][ T5630] Bluetooth: hci0: command tx timeout
[  425.604353][T19211] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.735456][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3410'.
[  427.306677][T19211] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.392190][T19525] syzkaller0: entered promiscuous mode
[  427.400317][T19525] syzkaller0: entered allmulticast mode
[  427.533814][T19211] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.559432][T19543] syzkaller0: entered promiscuous mode
[  427.567869][T19543] syzkaller0: entered allmulticast mode
[  427.678679][T19549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3418'.
[  427.734389][T19211] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.186518][T19573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3425'.
[  428.412289][T19211] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  428.453055][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.484556][T19588] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  428.538262][T19211] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  428.567550][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  428.593903][T19211] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  428.622490][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  428.634793][T19211] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  428.653868][T19211] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  428.743571][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3432'.
[  428.953224][T19211] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.979611][T19622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3434'.
[  429.003376][T19624] tipc: Started in network mode
[  429.025591][T19624] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  429.067872][T19624] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  429.094994][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'.
[  429.157704][T19211] 8021q: adding VLAN 0 to HW filter on device team0
[  429.205469][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.212632][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.275645][T18895] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.282834][T18895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.630780][T19658] netlink: Unknown NAT attribute (type=13315, max=9)
[  429.651492][T19658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.705687][T19662] syzkaller0: entered promiscuous mode
[  429.733226][T19662] syzkaller0: entered allmulticast mode
[  429.754224][T19666] __nla_validate_parse: 1 callbacks suppressed
[  429.754239][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'.
[  430.124859][T19211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.190274][ T9843] tipc: Node number set to 43690
[  430.251144][T19211] veth0_vlan: entered promiscuous mode
[  430.292225][T19211] veth1_vlan: entered promiscuous mode
[  430.412871][T19211] veth0_macvtap: entered promiscuous mode
[  430.468274][T19211] veth1_macvtap: entered promiscuous mode
[  430.474277][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  430.605505][T19211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.660366][T19211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.810602][T18906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.891603][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.909576][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.969729][T18895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.996996][T18895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.032958][T18895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.098178][T18906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.118620][T18906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.345708][T19722] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  431.427082][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3457'.
[  431.552915][T19729] netlink: 'syz.0.3459': attribute type 2 has an invalid length.
[  431.605881][T19729] : entered promiscuous mode
[  431.932335][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'.
[  431.962446][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'.
[  432.299941][T19769] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  432.336770][T19778] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3470'.
[  432.346732][T19769] batman_adv: batadv0: Adding interface: gretap1
[  432.353841][T19769] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.407474][T19769] batman_adv: batadv0: Interface activated: gretap1
[  432.441733][T19777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3473'.
[  432.468763][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3473'.
[  432.502690][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3473'.
[  432.517570][T19785] ip6tnl1: entered allmulticast mode
[  432.545225][ T3283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  432.567836][ T3283] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  432.576788][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  432.607509][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3473'.
[  432.622203][T19777] bridge_slave_1: left allmulticast mode
[  432.628013][T19777] bridge_slave_1: left promiscuous mode
[  432.634975][T19777] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.646327][T19777] bridge_slave_0: left allmulticast mode
[  432.653426][T19777] bridge_slave_0: left promiscuous mode
[  432.659533][T19777] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.701746][T19789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3476'.
[  432.862674][T19799] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  433.013028][T19802] netlink: 'syz.0.3481': attribute type 1 has an invalid length.
[  433.349106][ T9859] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.367692][ T9859] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.771216][T19850] bridge0: port 5(veth0) entered blocking state
[  433.822329][T19850] bridge0: port 5(veth0) entered disabled state
[  433.864196][T19850] veth0: entered allmulticast mode
[  433.902063][T19850] veth0: entered promiscuous mode
[  433.952731][T19855] bridge0: port 6(veth1) entered blocking state
[  433.980474][T19855] bridge0: port 6(veth1) entered disabled state
[  434.008718][T19855] veth1: entered allmulticast mode
[  434.023361][T19855] veth1: entered promiscuous mode
[  434.222628][T19870] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  434.435360][T19880] netlink: 'syz.1.3503': attribute type 39 has an invalid length.
[  434.795579][T19900] can: request_module (can-proto-0) failed.
[  435.051786][T19909] syzkaller0: entered promiscuous mode
[  435.062240][T19909] syzkaller0: entered allmulticast mode
[  435.175832][T19921] __nla_validate_parse: 6 callbacks suppressed
[  435.175850][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'.
[  435.207887][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3514'.
[  435.264705][T19921] netlink: 'syz.2.3514': attribute type 11 has an invalid length.
[  435.318422][T19927] netlink: 'syz.3.3517': attribute type 39 has an invalid length.
[  435.825623][T19950] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003
[  435.869402][T19954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3525'.
[  435.920083][T19958] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  436.106065][T19968] Cannot find set identified by id 0 to match
[  436.367849][T19991] sctp: [Deprecated]: syz.3.3530 (pid 19991) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.367849][T19991] Use struct sctp_sack_info instead
[  436.709239][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  436.830185][T20003] netlink: 'syz.0.3534': attribute type 1 has an invalid length.
[  436.859970][T20003] macvtap1: entered allmulticast mode
[  436.866472][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  436.878376][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  436.890089][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  436.899927][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  436.909175][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  436.924533][T20003] macvtap2: entered allmulticast mode
[  436.940416][T20003] bond1: (slave bridge0): making interface the new active one
[  436.953786][T20003] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  437.135852][T20018] team0: Device vlan3 is already an upper device of the team interface
[  437.168558][T20017] team0: Device vlan3 is already an upper device of the team interface
[  437.222564][T20021] vxcan2: entered allmulticast mode
[  437.278100][T20021] vxcan2: entered allmulticast mode
[  437.338614][T20021] vxcan2: entered allmulticast mode
[  437.392753][T20030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3542'.
[  437.408174][T20021] vxcan2: entered allmulticast mode
[  437.477263][T20021] vxcan2: entered allmulticast mode
[  437.539871][T20021] vxcan2: entered allmulticast mode
[  437.595979][T20021] vxcan2: entered allmulticast mode
[  437.656769][T20021] vxcan2: entered allmulticast mode
[  437.718335][T20021] vxcan2: entered allmulticast mode
[  437.776276][T20021] vxcan2: entered allmulticast mode
[  437.849149][T20021] vxcan2: entered allmulticast mode
[  437.916198][T20021] vxcan2: entered allmulticast mode
[  437.991825][T20021] vxcan2: entered allmulticast mode
[  438.062468][T20042] openvswitch: netlink: Flow key attr not present in new flow.
[  438.269763][T20055] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3547'.
[  439.043747][T19968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  439.319293][T20073] 8021q: adding VLAN 0 to HW filter on device batadv1
[  439.477959][T20093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.817499][T20103] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  439.885221][T20103] bond2 (unregistering): Released all slaves
[  440.068588][T20135] pimreg: tun_chr_ioctl cmd 1074025677
[  440.080934][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  440.089008][T20135] pimreg: linktype set to 778
[  440.112154][T20133] xt_CT: No such helper "syz1"
[  440.131813][T20139] pimreg: tun_chr_ioctl cmd 1074025692
[  440.154559][T20125] pimreg: tun_chr_ioctl cmd 1074025673
[  440.324798][T20146] __nla_validate_parse: 6 callbacks suppressed
[  440.324814][T20146] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3574'.
[  440.384445][T20146] syzkaller1: entered promiscuous mode
[  440.392623][T20146] syzkaller1: entered allmulticast mode
[  441.147132][T20201] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3590'.
[  441.288664][T20206] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3594'.
[  441.360144][T20206] Bluetooth: MGMT ver 1.23
[  441.379665][T20206] openvswitch: netlink: IP tunnel dst address not specified
[  441.807531][T20227] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.833385][T20227] bond1: entered allmulticast mode
[  441.838605][T20227] bridge0: entered allmulticast mode
[  441.847102][T20227] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  441.856673][T20227] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  441.885686][T20227] bridge0: entered promiscuous mode
[  441.961594][T20239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3602'.
[  442.023032][T20239] nbd: socks must be embedded in a SOCK_ITEM attr
[  442.184379][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'.
[  442.219700][T20248] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.3603'.
[  442.439801][T20267] netlink: 'syz.1.3609': attribute type 2 has an invalid length.
[  442.667674][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'.
[  442.700210][T20287] batadv_slave_1: entered promiscuous mode
[  442.721114][T20281] batadv_slave_1: left promiscuous mode
[  442.807877][T20292] netlink: 'syz.1.3618': attribute type 1 has an invalid length.
[  442.836660][T20292] netlink: 'syz.1.3618': attribute type 2 has an invalid length.
[  442.859251][T20292] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3618'.
[  442.883111][T20292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'.
[  442.905124][T20292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3618'.
[  443.167606][ T6135] udevd[6135]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  443.251741][ T5627] udevd[5627]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  443.384306][T20318] Bluetooth: MGMT ver 1.23
[  443.389501][T20318] Bluetooth: hci0: invalid len left 17, exp >= 23
[  445.200027][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  445.444298][T20405] __nla_validate_parse: 18 callbacks suppressed
[  445.444315][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'.
[  445.482287][T20407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3655'.
[  445.492792][T20407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3655'.
[  445.519412][T20407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3655'.
[  445.833047][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'.
[  446.056497][T20434] netlink: 'syz.4.3661': attribute type 30 has an invalid length.
[  446.304814][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'.
[  446.387043][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'.
[  446.468962][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  446.517248][T20457] pim6reg: entered allmulticast mode
[  447.314431][T20324] Set syz0 is full, maxelem 65536 reached
[  447.543771][T20483] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3677'.
[  449.127647][T20438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  449.338956][T20509] nbd: nbd1 already in use
[  449.359174][T20509] block nbd1: NBD_DISCONNECT
[  449.373345][T20509] block nbd1: Send disconnect failed -104
[  449.386855][T20509] block nbd1: shutting down sockets
[  449.889420][T20536] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  450.030858][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3691'.
[  450.082781][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3691'.
[  450.165151][T20562] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16)
[  450.186930][T20562] openvswitch: netlink: Message has 512 unknown bytes.
[  450.442237][T20580] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  450.468053][T20580] __nla_validate_parse: 1 callbacks suppressed
[  450.468068][T20580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3698'.
[  454.149893][T18886] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  462.469877][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  475.910760][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  477.189530][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  488.230591][ T5632] Bluetooth: hci5: command 0x0406 tx timeout
[  491.269016][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  492.820600][T20601] veth1_to_bond: entered allmulticast mode
[  492.880893][T20612] veth1_to_bond: entered promiscuous mode
[  492.888655][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'.
[  492.915833][T20612] syzkaller0: entered promiscuous mode
[  492.934782][T20612] syzkaller0: entered allmulticast mode
[  492.959756][T20610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3705'.
[  493.081225][T20621] netlink: 'syz.1.3705': attribute type 1 has an invalid length.
[  493.091928][T20620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3704'.
[  493.109416][T20621] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3705'.
[  493.167384][T20600] veth1_to_bond: left promiscuous mode
[  493.177186][T20600] veth1_to_bond: left allmulticast mode
[  493.728815][T20638] tipc: New replicast peer: 120.0.0.2
[  493.764697][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  493.778504][T20638] tipc: Enabled bearer <udp:syz0>, priority 10
[  493.829474][T20624] tipc: Disabling bearer <udp:syz0>
[  495.751647][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  496.595656][T20655] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  496.818633][T20679] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3723'.
[  496.851967][T20681] FAULT_INJECTION: forcing a failure.
[  496.851967][T20681] name failslab, interval 1, probability 0, space 0, times 0
[  496.874619][T20681] CPU: 0 UID: 0 PID: 20681 Comm: syz.0.3720 Not tainted syzkaller #0 PREEMPT(full) 
[  496.874650][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  496.874666][T20681] Call Trace:
[  496.874673][T20681]  <TASK>
[  496.874681][T20681]  dump_stack_lvl+0xe8/0x150
[  496.874790][T20681]  should_fail_ex+0x40c/0x560
[  496.874917][T20681]  should_failslab+0xa8/0x100
[  496.874969][T20681]  __kmalloc_noprof+0xfe/0x720
[  496.875003][T20681]  ? bpf_test_init+0x9f/0x150
[  496.875110][T20681]  ? bpf_test_init+0x9f/0x150
[  496.875138][T20681]  bpf_test_init+0x9f/0x150
[  496.875164][T20681]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  496.875201][T20681]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  496.875229][T20681]  ? __fget_files+0x2a/0x420
[  496.875268][T20681]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  496.875292][T20681]  bpf_prog_test_run+0x2c5/0x340
[  496.875339][T20681]  __sys_bpf+0xa22/0xd90
[  496.875367][T20681]  ? __pfx___sys_bpf+0x10/0x10
[  496.875397][T20681]  ? __fget_files+0x2a/0x420
[  496.875433][T20681]  ? ksys_write+0x242/0x270
[  496.875468][T20681]  ? __pfx_ksys_write+0x10/0x10
[  496.875498][T20681]  __x64_sys_bpf+0xba/0xd0
[  496.875519][T20681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.875555][T20681]  do_syscall_64+0x174/0x580
[  496.875666][T20681]  ? clear_bhb_loop+0x70/0xc0
[  496.875688][T20681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.875705][T20681] RIP: 0033:0x7f2e6579e0d9
[  496.875721][T20681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.875736][T20681] RSP: 002b:00007f2e66601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  496.875755][T20681] RAX: ffffffffffffffda RBX: 00007f2e65a25fa0 RCX: 00007f2e6579e0d9
[  496.875768][T20681] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  496.875779][T20681] RBP: 00007f2e66601090 R08: 0000000000000000 R09: 0000000000000000
[  496.875790][T20681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.875799][T20681] R13: 00007f2e65a26038 R14: 00007f2e65a25fa0 R15: 00007fff6f77b7c8
[  496.875827][T20681]  </TASK>
[  497.178522][T20688] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3727'.
[  497.188442][T20688] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3727'.
[  497.293733][T20693] netlink: 'syz.4.3726': attribute type 5 has an invalid length.
[  497.423426][T20697] bridge0: port 3(vlan2) entered blocking state
[  497.451596][T20697] bridge0: port 3(vlan2) entered disabled state
[  497.457990][T20697] vlan2: entered allmulticast mode
[  497.463167][T20697] geneve0: entered allmulticast mode
[  497.470191][T20697] vlan2: entered promiscuous mode
[  497.475237][T20697] geneve0: entered promiscuous mode
[  497.500633][T20706] syzkaller0: entered promiscuous mode
[  497.506229][T20706] syzkaller0: entered allmulticast mode
[  497.528915][T20709] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3730'.
[  497.703143][T20714] syz_tun: entered allmulticast mode
[  498.314417][T20735] xt_CT: You must specify a L4 protocol and not use inversions on it
[  498.606950][T20713] syz_tun: left allmulticast mode
[  500.223886][T20690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  500.393987][T20742] FAULT_INJECTION: forcing a failure.
[  500.393987][T20742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.407073][T20742] CPU: 0 UID: 0 PID: 20742 Comm: syz.2.3735 Not tainted syzkaller #0 PREEMPT(full) 
[  500.407095][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  500.407106][T20742] Call Trace:
[  500.407113][T20742]  <TASK>
[  500.407120][T20742]  dump_stack_lvl+0xe8/0x150
[  500.407150][T20742]  should_fail_ex+0x40c/0x560
[  500.407176][T20742]  _copy_from_user+0x2d/0xb0
[  500.407296][T20742]  bpf_test_init+0xd8/0x150
[  500.407323][T20742]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  500.407361][T20742]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  500.407389][T20742]  ? __fget_files+0x2a/0x420
[  500.407417][T20742]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  500.407442][T20742]  bpf_prog_test_run+0x2c5/0x340
[  500.407471][T20742]  __sys_bpf+0xa22/0xd90
[  500.407502][T20742]  ? __pfx___sys_bpf+0x10/0x10
[  500.407535][T20742]  ? __fget_files+0x2a/0x420
[  500.407573][T20742]  ? ksys_write+0x242/0x270
[  500.407603][T20742]  ? __pfx_ksys_write+0x10/0x10
[  500.407634][T20742]  __x64_sys_bpf+0xba/0xd0
[  500.407655][T20742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.407675][T20742]  do_syscall_64+0x174/0x580
[  500.407701][T20742]  ? trace_irq_disable+0x3b/0x140
[  500.407734][T20742]  ? clear_bhb_loop+0x70/0xc0
[  500.407756][T20742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.407773][T20742] RIP: 0033:0x7f08d6d9e0d9
[  500.407789][T20742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.407804][T20742] RSP: 002b:00007f08d7d00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  500.407823][T20742] RAX: ffffffffffffffda RBX: 00007f08d7025fa0 RCX: 00007f08d6d9e0d9
[  500.407835][T20742] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  500.407847][T20742] RBP: 00007f08d7d00090 R08: 0000000000000000 R09: 0000000000000000
[  500.407871][T20742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.407882][T20742] R13: 00007f08d7026038 R14: 00007f08d7025fa0 R15: 00007ffc5c7c76a8
[  500.407911][T20742]  </TASK>
[  500.821504][T20755] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  500.835747][T20748] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3740'.
[  500.878563][T20748] 0·: renamed from hsr0 (while UP)
[  500.912796][T20748] 0·: entered allmulticast mode
[  500.926546][T20748] hsr_slave_0: entered allmulticast mode
[  500.951120][T20748] hsr_slave_1: entered allmulticast mode
[  500.957373][T20748] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  501.076629][T20766] "syz.0.3745" (20766) uses obsolete ecb(arc4) skcipher
[  501.123225][T20765] lo speed is unknown, defaulting to 1000
[  501.130507][T20765] xfrm0 speed is unknown, defaulting to 1000
[  501.558594][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3750'.
[  501.634918][T20765] virt_wifi0 speed is unknown, defaulting to 1000
[  501.643131][T20765] lo speed is unknown, defaulting to 1000
[  501.775581][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'.
[  502.535472][T20825] sctp: [Deprecated]: syz.4.3760 (pid 20825) Use of int in max_burst socket option deprecated.
[  502.535472][T20825] Use struct sctp_assoc_value instead
[  502.814688][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3765'.
[  502.875674][T20838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3765'.
[  503.181992][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'.
[  503.589481][ T5632] Bluetooth: hci1: command 0x0406 tx timeout
[  503.827672][T20860] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.838106][T20860] 8021q: adding VLAN 0 to HW filter on device team0
[  503.900641][T20860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.004268][T20860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.017680][T20860] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  504.067039][T18886] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.074233][T18886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.086583][T18886] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.093820][T18886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.317749][T20887] macvlan1: entered promiscuous mode
[  504.323206][T20887] macvlan1: entered allmulticast mode
[  504.328591][T20887] veth1_vlan: entered allmulticast mode
[  504.361909][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3779'.
[  504.539350][T20896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3780'.
[  504.558907][T20896] netlink: 'syz.4.3780': attribute type 4 has an invalid length.
[  504.566752][T20896] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3780'.
[  504.580360][T20896] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.860876][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'.
[  504.962917][T18886] wlan0: Trigger new scan to find an IBSS to join
[  505.005834][T20911] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  505.020863][T20911] bond2 (unregistering): Released all slaves
[  505.057906][T20917] sctp: [Deprecated]: syz.3.3785 (pid 20917) Use of int in max_burst socket option.
[  505.057906][T20917] Use struct sctp_assoc_value instead
[  505.418644][ T5632] Bluetooth: hci0: command tx timeout
[  505.864139][T20949] __nla_validate_parse: 1 callbacks suppressed
[  505.864156][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3793'.
[  505.881496][T20949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3793'.
[  505.891581][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'.
[  506.194743][T20968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3799'.
[  506.207101][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'.
[  507.266077][T21027] Unsupported ieee802154 address type: 0
[  507.319545][T21026] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3814'.
[  507.333780][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3814'.
[  507.372193][T21029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3815'.
[  507.675633][T21037] syzkaller0: entered promiscuous mode
[  507.706596][T21037] syzkaller0: entered allmulticast mode
[  507.779912][T21032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3816'.
[  508.063522][T21053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  508.132025][T21057] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3824'.
[  508.631244][T21086] Cannot find add_set index 3840 as target
[  508.796926][T21098] xt_CT: You must specify a L4 protocol and not use inversions on it
[  508.870061][ T6811] wlan0: Trigger new scan to find an IBSS to join
[  510.223471][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.044262][T21144] __nla_validate_parse: 3 callbacks suppressed
[  511.044278][T21144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3849'.
[  511.143178][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3849'.
[  511.497859][T21170] ±ÿ: renamed from lo
[  511.589659][T21178] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  511.616970][T21179] x_tables: duplicate underflow at hook 3
[  511.625571][T21179] batadv_slave_1: entered promiscuous mode
[  512.055398][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'.
[  512.187186][T21200] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3865'.
[  512.206600][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  512.208662][T21200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.496587][T21176] batadv_slave_1: left promiscuous mode
[  512.678189][T21205] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.809116][T21219] netlink: 'syz.3.3872': attribute type 15 has an invalid length.
[  512.818724][T21219] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3872'.
[  512.950748][T21223] netlink: 'syz.3.3875': attribute type 1 has an invalid length.
[  512.960566][T21224] netlink: 'syz.3.3875': attribute type 1 has an invalid length.
[  513.187798][T21238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  514.647464][T21224] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  514.648684][T21223] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  514.685517][T21238] tipc: Started in network mode
[  514.713655][T21238] tipc: Node identity 822bb33fecd8, cluster identity 4711
[  514.754995][T21238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  514.782396][T21240] syzkaller0: entered promiscuous mode
[  514.787901][T21240] syzkaller0: entered allmulticast mode
[  514.839829][T21249] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3873'.
[  514.855513][T21246] tipc: Resetting bearer <eth:syzkaller0>
[  514.881799][T21221] tipc: Resetting bearer <eth:syzkaller0>
[  514.951914][ T1119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  514.971350][T21221] tipc: Disabling bearer <eth:syzkaller0>
[  516.159479][T21324] gretap0: entered promiscuous mode
[  516.274039][T21335] Bluetooth: MGMT ver 1.23
[  516.281953][T21324] bridge0: entered promiscuous mode
[  516.320040][T21324] 8021q: adding VLAN 0 to HW filter on device team0
[  516.332679][T21324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.377872][T21324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.388589][T21324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.456345][T21324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  516.466716][T21324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  516.486875][T21324] veth1_vlan: left promiscuous mode
[  516.493431][T21324] veth0_vlan: left promiscuous mode
[  516.500277][T21324] veth0_vlan: entered promiscuous mode
[  516.543343][T21324] veth1_vlan: entered promiscuous mode
[  516.564408][T21324] tipc: Resetting bearer <eth:ipvlan1>
[  516.570156][T21324] tipc: Resetting bearer <eth:ipvlan1>
[  516.577120][T21324] veth0_macvtap: left promiscuous mode
[  516.583787][T21324] veth0_macvtap: entered promiscuous mode
[  516.598416][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  516.606859][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  516.616525][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  516.637909][T21324] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  516.656190][T21324] 8021q: adding VLAN 0 to HW filter on device bond1
[  516.665291][T21324] macsec1: left promiscuous mode
[  516.680578][T21324] bridge0: port 4(vlan2) entered blocking state
[  516.687073][T21324] bridge0: port 4(vlan2) entered forwarding state
[  516.778135][ T1119] bridge0: port 6(veth1) entered blocking state
[  516.784579][ T1119] bridge0: port 6(veth1) entered forwarding state
[  516.792676][ T1119] bridge0: port 5(veth0) entered blocking state
[  516.799037][ T1119] bridge0: port 5(veth0) entered forwarding state
[  516.820222][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.827412][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.845851][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.853095][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.915428][ T6811] IPVS: starting estimator thread 0...
[  516.954246][T21352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3902'.
[  517.023048][ T1119] bridge0: port 3(team0) entered blocking state
[  517.029555][ T1119] bridge0: port 3(team0) entered forwarding state
[  517.099468][ T1119] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  517.113783][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.127548][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.140608][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.152845][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.164999][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.177149][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.189295][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.201406][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.213523][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  517.221460][T21350] IPVS: using max 35 ests per chain, 84000 per kthread
[  517.235643][ T1119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.251132][ T1119] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  517.259858][ T1119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.189232][    C0] net_ratelimit: 2074 callbacks suppressed
[  518.189251][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.190685][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.218418][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.226018][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.232238][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.242732][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.254247][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.265162][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.276463][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  518.287470][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.199123][    C1] net_ratelimit: 10307 callbacks suppressed
[  523.199142][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.200136][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.206073][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.206897][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.207899][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.208708][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.209700][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.210550][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.211517][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  523.212366][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  525.905795][    C1] sched: DL replenish lagged too much
[  528.208776][    C1] net_ratelimit: 10684 callbacks suppressed
[  528.208796][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.226651][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.229001][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.240064][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.250558][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.264472][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.272516][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.285009][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.294698][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  528.307493][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  530.411847][T20929] Bluetooth: hci3: command 0x0406 tx timeout
[  533.218799][    C1] net_ratelimit: 10885 callbacks suppressed
[  533.218818][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.218985][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.226526][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.237267][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.249090][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.259527][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.271040][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.281681][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.294807][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  533.303910][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  535.296601][ T5632] Bluetooth: hci2: command 0x0406 tx timeout
[  537.379801][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  538.229232][    C1] net_ratelimit: 10685 callbacks suppressed
[  538.229251][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.230317][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.237519][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.248885][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.260597][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.271246][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.281673][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.293299][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.304224][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  538.336110][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.238773][    C0] net_ratelimit: 10528 callbacks suppressed
[  543.238792][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.239439][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.248020][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.257862][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.269708][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.281440][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.292801][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.302628][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.313964][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  543.325185][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.248823][    C0] net_ratelimit: 10705 callbacks suppressed
[  548.248843][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.250966][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.257086][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.268152][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.279083][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.290142][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.301237][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.312502][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.323423][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  548.334377][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.259162][    C1] net_ratelimit: 10714 callbacks suppressed
[  553.259183][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.259185][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.262538][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.267292][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.278914][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.289996][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.301039][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.311873][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.324641][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  553.334617][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  554.557284][ T1082] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.269408][    C0] net_ratelimit: 10991 callbacks suppressed
[  558.269428][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.270804][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.277681][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.288335][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.299739][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.310658][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.322486][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.332775][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.344124][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  558.353925][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  562.157459][T18884] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  563.055891][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  563.165817][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  563.278951][    C1] net_ratelimit: 10413 callbacks suppressed
[  563.278968][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.280028][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.286590][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.299120][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.309444][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.321340][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.331143][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.343521][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.354538][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.385780][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  563.578114][ T1082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.288982][    C0] net_ratelimit: 10446 callbacks suppressed
[  568.289003][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.289744][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.297542][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.307264][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.308208][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.309282][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.310255][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.311420][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.313019][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  568.313899][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.299731][    C0] net_ratelimit: 10011 callbacks suppressed
[  573.299753][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.300096][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.307811][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.319589][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.330003][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.341490][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.352365][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.362362][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.363172][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  573.364105][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.309706][    C1] net_ratelimit: 10146 callbacks suppressed
[  578.309730][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.327799][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.328553][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.341735][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.351621][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.363602][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.373902][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.386307][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.397850][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  578.408062][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.318855][    C0] net_ratelimit: 10071 callbacks suppressed
[  583.318877][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.321359][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.327187][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.339157][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.349571][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.361459][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.393277][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.405478][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.406030][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  583.418997][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.329080][    C0] net_ratelimit: 9821 callbacks suppressed
[  588.329103][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.329719][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.337771][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.347226][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.348251][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.349209][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.350768][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.351716][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.352635][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  588.353524][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.339067][    C0] net_ratelimit: 9891 callbacks suppressed
[  593.339087][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.340811][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.347414][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.358334][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.369810][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.380494][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.391946][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.403679][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.435115][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  593.447114][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.348803][    C1] net_ratelimit: 9469 callbacks suppressed
[  598.348824][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.349957][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.356982][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.368970][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.379469][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.411240][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.423290][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.428393][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.436770][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  598.448885][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.359076][    C1] net_ratelimit: 9330 callbacks suppressed
[  603.359097][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.360325][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.365802][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.366701][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.367548][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.368373][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.369893][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.371065][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.372232][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.373483][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  603.922019][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  608.369245][    C0] net_ratelimit: 9566 callbacks suppressed
[  608.369267][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.370167][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.377521][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.389312][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.399987][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.411631][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.423685][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.431906][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.432955][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  608.434101][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.378854][    C1] net_ratelimit: 9831 callbacks suppressed
[  613.378874][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.380390][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.387756][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.398538][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.410348][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.419631][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.432067][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.442048][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.454666][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  613.464436][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.389293][    C0] net_ratelimit: 10039 callbacks suppressed
[  618.389315][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.389912][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.418918][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.430203][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.433533][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.443631][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.457722][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.465932][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.477220][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  618.488033][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.398955][    C0] net_ratelimit: 9474 callbacks suppressed
[  623.398978][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.399020][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.406664][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.418538][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.429103][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.441022][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.451944][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.461494][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.463537][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  623.464590][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.409249][    C1] net_ratelimit: 9428 callbacks suppressed
[  628.409271][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.428045][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.434571][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.441340][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.453378][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.463675][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.474568][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.485773][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.496881][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  628.508174][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  629.559976][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  633.418798][    C0] net_ratelimit: 9498 callbacks suppressed
[  633.418821][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.421041][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.427788][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.439679][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.450089][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.461183][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.472303][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.481468][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.483187][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  633.484217][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.429872][    C1] net_ratelimit: 9264 callbacks suppressed
[  638.429896][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.448194][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.459341][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.461982][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.472367][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.484003][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.494657][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.506684][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.517075][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  638.528571][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.438878][    C1] net_ratelimit: 9845 callbacks suppressed
[  643.438900][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.440193][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.449260][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.459001][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.470218][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.479797][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.490097][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.490883][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.491662][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  643.492439][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.449586][    C1] net_ratelimit: 9736 callbacks suppressed
[  648.449609][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.449939][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.457538][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.469063][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.481911][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.491686][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.502111][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.513713][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.524373][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  648.556462][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  651.168724][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  651.175721][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=104961, q=90843 ncpus=2)
[  651.183723][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 3586 (4295002230-4294998644), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  651.197034][    C1] rcu: rcu_preempt kthread starved for 3586 jiffies! g104961 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  651.208256][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  651.218239][    C1] rcu: RCU grace-period kthread stack dump:
[  651.224162][    C1] task:rcu_preempt     state:R  running task     stack:27752 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  651.237687][    C1] Call Trace:
[  651.240989][    C1]  <TASK>
[  651.243945][    C1]  __schedule+0x17d9/0x56c0
[  651.248578][    C1]  ? __lock_acquire+0x683/0x2cf0
[  651.253621][    C1]  ? __pfx___schedule+0x10/0x10
[  651.258506][    C1]  ? schedule+0x90/0x2b0
[  651.262775][    C1]  schedule+0x164/0x2b0
[  651.266992][    C1]  schedule_timeout+0x152/0x2c0
[  651.271976][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  651.277377][    C1]  ? __pfx_process_timeout+0x10/0x10
[  651.282711][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  651.288548][    C1]  ? prepare_to_swait_event+0x322/0x350
[  651.294138][    C1]  rcu_gp_fqs_loop+0x30c/0x11f0
[  651.299029][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  651.304259][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  651.310117][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  651.316302][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  651.321614][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  651.326865][    C1]  rcu_gp_kthread+0x9e/0x2b0
[  651.331496][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  651.336739][    C1]  ? __kthread_parkme+0x71/0x1f0
[  651.341744][    C1]  ? __kthread_parkme+0x196/0x1f0
[  651.346808][    C1]  kthread+0x388/0x470
[  651.350915][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  651.356131][    C1]  ? __pfx_kthread+0x10/0x10
[  651.360747][    C1]  ret_from_fork+0x514/0xb70
[  651.365392][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  651.370529][    C1]  ? __switch_to+0xc89/0x1420
[  651.375234][    C1]  ? __pfx_kthread+0x10/0x10
[  651.379887][    C1]  ret_from_fork_asm+0x1a/0x30
[  651.384699][    C1]  </TASK>
[  651.387739][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  651.394082][    C1] Sending NMI from CPU 1 to CPUs 0:
[  651.399300][    C0] NMI backtrace for cpu 0
[  651.399325][    C0] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  651.399342][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  651.399358][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  651.399453][    C0] RIP: 0010:advance_sched+0x1b7/0xc80
[  651.399542][    C0] Code: d8 48 c1 e8 03 48 89 44 24 60 42 80 3c 30 00 74 08 48 89 df e8 0a 0d 58 f8 48 89 5c 24 30 48 8b 03 48 89 04 24 e8 69 1a f7 01 <89> c3 31 ff 89 c6 e8 0e 75 ea f7 85 db 74 2d 48 8b 44 24 28 48 8d
[  651.399555][    C0] RSP: 0018:ffffc90000005eb8 EFLAGS: 00000046
[  651.399568][    C0] RAX: 0000000000000001 RBX: ffff888051cb62f0 RCX: ffff88801c390000
[  651.399579][    C0] RDX: 0000000000010100 RSI: 0000000000000001 RDI: 0000000000000000
[  651.399589][    C0] RBP: ffff888051cb6300 R08: 0000000000000003 R09: 0000000000000004
[  651.399599][    C0] R10: dffffc0000000000 R11: fffff52000000bc8 R12: 0000000000000000
[  651.399610][    C0] R13: ffff888051cb6000 R14: dffffc0000000000 R15: ffff88807dd89800
[  651.399622][    C0] FS:  0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000
[  651.399635][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  651.399645][    C0] CR2: 00007fc3a7000218 CR3: 0000000073e58000 CR4: 00000000003526f0
[  651.399660][    C0] Call Trace:
[  651.399666][    C0]  <IRQ>
[  651.399676][    C0]  ? __pfx_advance_sched+0x10/0x10
[  651.399699][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  651.399717][    C0]  ? __pfx_advance_sched+0x10/0x10
[  651.399739][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  651.399765][    C0]  hrtimer_interrupt+0x448/0x910
[  651.399794][    C0]  __sysvec_apic_timer_interrupt+0x102/0x430
[  651.399831][    C0]  sysvec_apic_timer_interrupt+0x52/0xc0
[  651.399854][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  651.399872][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  651.399893][    C0] Code: f7 e8 2d fd cc f5 f7 c3 00 02 00 00 74 05 e8 90 dd f8 f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> c4 10 be f5 65 8b 05 bd e0 96 07 85 c0 74 18 5b 41 5e c3 cc cc
[  651.399905][    C0] RSP: 0018:ffffc90000006268 EFLAGS: 00000206
[  651.399918][    C0] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000080000302
[  651.399927][    C0] RDX: 0000000000000002 RSI: ffffffff8e23666e RDI: 0000000000000001
[  651.399937][    C0] RBP: 0000000000a12110 R08: ffffffff90576d37 R09: 1ffffffff20aeda6
[  651.399949][    C0] R10: dffffc0000000000 R11: fffffbfff20aeda7 R12: 0000000000000000
[  651.399959][    C0] R13: ffff88809d754000 R14: ffffffff9aa71e68 R15: 0000000000000000
[  651.399980][    C0]  debug_check_no_obj_freed+0x39e/0x450
[  651.400057][    C0]  ? skb_scrub_packet+0x2c8/0x3d0
[  651.400107][    C0]  kmem_cache_free+0xfd/0x650
[  651.400128][    C0]  ? __skb_ext_put+0x221/0x2f0
[  651.400145][    C0]  ? veth_xmit+0x66/0xe60
[  651.400231][    C0]  ? lock_acquire+0x106/0x350
[  651.400253][    C0]  skb_scrub_packet+0x2c8/0x3d0
[  651.400272][    C0]  __dev_forward_skb2+0x28c/0x730
[  651.400310][    C0]  ? __dev_forward_skb+0x12/0x30
[  651.400326][    C0]  ? veth_xmit+0x66/0xe60
[  651.400346][    C0]  veth_xmit+0x493/0xe60
[  651.400371][    C0]  ? veth_xmit+0x66/0xe60
[  651.400396][    C0]  dev_hard_start_xmit+0x2cd/0x830
[  651.400445][    C0]  __dev_queue_xmit+0x14c0/0x3820
[  651.400472][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  651.400490][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  651.400510][    C0]  ? __dev_queue_xmit+0x29b/0x3820
[  651.400530][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  651.400603][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  651.400619][    C0]  ? ipt_do_table+0x137f/0x15d0
[  651.400645][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  651.400665][    C0]  ? nf_nat_inet_fn+0x90c/0xb50
[  651.400736][    C0]  ? br_nf_dev_queue_xmit+0x4f6/0x2540
[  651.400822][    C0]  br_dev_queue_push_xmit+0x370/0x4b0
[  651.400861][    C0]  ? NF_HOOK+0xa2/0x6e0
[  651.400879][    C0]  NF_HOOK+0x64e/0x6e0
[  651.400900][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  651.400917][    C0]  ? unwind_next_frame+0x1baf/0x2550
[  651.400939][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  651.400960][    C0]  ? unwind_next_frame+0x8f/0x2550
[  651.400978][    C0]  br_nf_post_routing+0xa53/0xee0
[  651.400996][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  651.401016][    C0]  ? trace_br_fdb_update+0x98/0x230
[  651.401031][    C0]  ? __pfx_br_nf_post_routing+0x10/0x10
[  651.401052][    C0]  nf_hook_slow+0xc5/0x220
[  651.401113][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  651.401130][    C0]  NF_HOOK+0x23e/0x3f0
[  651.401148][    C0]  ? NF_HOOK+0xa2/0x3f0
[  651.401163][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  651.401177][    C0]  ? net_generic+0x1e/0x240
[  651.401195][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  651.401216][    C0]  ? net_generic+0x1e/0x240
[  651.401234][    C0]  br_forward_finish+0xd3/0x130
[  651.401250][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  651.401268][    C0]  br_nf_forward_finish+0xa76/0xea0
[  651.401293][    C0]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  651.401314][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  651.401333][    C0]  ? NF_HOOK+0xa2/0x6e0
[  651.401356][    C0]  ? NF_HOOK+0xa2/0x6e0
[  651.401374][    C0]  NF_HOOK+0x64e/0x6e0
[  651.401394][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  651.401410][    C0]  ? net_generic+0x1e/0x240
[  651.401429][    C0]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  651.401449][    C0]  ? net_generic+0x1e/0x240
[  651.401466][    C0]  ? net_generic+0x1e/0x240
[  651.401486][    C0]  br_nf_forward_ip+0x7eb/0xa30
[  651.401504][    C0]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  651.401525][    C0]  ? __pfx_br_nf_forward+0x10/0x10
[  651.401544][    C0]  nf_hook_slow+0xc5/0x220
[  651.401567][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  651.401583][    C0]  NF_HOOK+0x23e/0x3f0
[  651.401600][    C0]  ? NF_HOOK+0xa2/0x3f0
[  651.401615][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  651.401632][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  651.401650][    C0]  ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70
[  651.401693][    C0]  ? br_handle_vlan+0x3dc/0x530
[  651.401746][    C0]  __br_forward+0x397/0x540
[  651.401761][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  651.401779][    C0]  br_flood+0x3e6/0x8d0
[  651.401800][    C0]  br_handle_frame_finish+0x1119/0x1950
[  651.401825][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  651.401842][    C0]  ? ipt_do_table+0x2b9/0x15d0
[  651.401882][    C0]  ? ipt_do_table+0x137f/0x15d0
[  651.401904][    C0]  ? kasan_save_track+0x4f/0x80
[  651.401927][    C0]  ? nf_nat_inet_fn+0x90c/0xb50
[  651.401944][    C0]  ? nf_hook_slow+0x176/0x220
[  651.401969][    C0]  br_nf_pre_routing_finish+0x138a/0x1a10
[  651.401997][    C0]  ? __pfx_br_nf_pre_routing_finish+0x10/0x10
[  651.402018][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  651.402040][    C0]  ? NF_HOOK+0xa2/0x6e0
[  651.402057][    C0]  ? NF_HOOK+0xa2/0x6e0
[  651.402075][    C0]  NF_HOOK+0x64e/0x6e0
[  651.402092][    C0]  ? net_generic+0x1e/0x240
[  651.402112][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  651.402131][    C0]  ? __pfx_br_nf_pre_routing_finish+0x10/0x10
[  651.402153][    C0]  ? setup_pre_routing+0x4d2/0x6e0
[  651.402174][    C0]  br_nf_pre_routing+0xec2/0x14b0
[  651.402192][    C0]  ? __pfx_br_nf_pre_routing_finish+0x10/0x10
[  651.402216][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  651.402235][    C0]  br_handle_frame+0x127f/0x1510
[  651.402259][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  651.402279][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  651.402298][    C0]  ? __asan_memmove+0x40/0x70
[  651.402320][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  651.402337][    C0]  __netif_receive_skb_core+0x989/0x30b0
[  651.402419][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  651.402436][    C0]  ? __netif_receive_skb_core+0x2a2d/0x30b0
[  651.402462][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  651.402496][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  651.402518][    C0]  ? unwind_next_frame+0x8f/0x2550
[  651.402538][    C0]  __netif_receive_skb_list_core+0x24d/0x830
[  651.402561][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  651.402582][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[  651.402608][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  651.402632][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  651.402657][    C0]  ? dev_gro_receive+0x1097/0x2380
[  651.402723][    C0]  napi_complete_done+0x299/0x730
[  651.402749][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[  651.402775][    C0]  ? gro_cell_poll+0x175/0x5d0
[  651.402818][    C0]  gro_cell_poll+0x5ab/0x5d0
[  651.402839][    C0]  ? gro_cell_poll+0x175/0x5d0
[  651.402857][    C0]  __napi_poll+0xaa/0x330
[  651.402874][    C0]  net_rx_action+0x61d/0xf50
[  651.402897][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  651.402927][    C0]  handle_softirqs+0x225/0x840
[  651.402946][    C0]  ? do_softirq+0x76/0xd0
[  651.402964][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40
[  651.403037][    C0]  do_softirq+0x76/0xd0
[  651.403053][    C0]  </IRQ>
[  651.403058][    C0]  <TASK>
[  651.403063][    C0]  __local_bh_enable_ip+0xf8/0x130
[  651.403080][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40
[  651.403110][    C0]  ? process_scheduled_works+0xa8e/0x14e0
[  651.403130][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40
[  651.403154][    C0]  ? __lock_acquire+0x683/0x2cf0
[  651.403174][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  651.403212][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  651.403234][    C0]  ? kcov_remote_start+0x181/0x790
[  651.403266][    C0]  ieee80211_iface_work+0x78a/0x1010
[  651.403288][    C0]  cfg80211_wiphy_work+0x29e/0x420
[  651.403310][    C0]  ? process_scheduled_works+0xa20/0x14e0
[  651.403326][    C0]  process_scheduled_works+0xa8e/0x14e0
[  651.403357][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  651.403381][    C0]  ? assign_work+0x3cf/0x5d0
[  651.403399][    C0]  worker_thread+0xa47/0xfb0
[  651.403430][    C0]  kthread+0x388/0x470
[  651.403451][    C0]  ? __pfx_worker_thread+0x10/0x10
[  651.403466][    C0]  ? __pfx_kthread+0x10/0x10
[  651.403486][    C0]  ret_from_fork+0x514/0xb70
[  651.403509][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  651.403529][    C0]  ? __switch_to+0xc89/0x1420
[  651.403548][    C0]  ? __pfx_kthread+0x10/0x10
[  651.403569][    C0]  ret_from_fork_asm+0x1a/0x30
[  651.403599][    C0]  </TASK>
[  652.235617][T21368] Bluetooth: hci0: command 0x0405 tx timeout
[  653.458715][    C1] net_ratelimit: 7898 callbacks suppressed
[  653.458736][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.476604][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.484193][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.490057][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.500714][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.512207][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.522996][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.534664][    C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.547036][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  653.556773][    C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.468899][    C0] net_ratelimit: 9951 callbacks suppressed
[  658.468918][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.469583][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.477698][    C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.488230][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.499020][    C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.509036][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.509951][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.510788][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.511618][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  658.512465][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  660.245514][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!