last executing test programs:

1.73483519s ago: executing program 4 (id=3947):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x6000000, 0x0, 0x4000}, 0x4000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x48)
sendmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
r6 = socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
recvmmsg(r7, &(0x7f0000000480), 0x40000000000002a, 0x10000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r2, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14)

1.510299451s ago: executing program 0 (id=3953):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f7e801000000001c0012800b000100d2b0f91308524df20c000280060002404e220000140003006d616373656330000000009d8a8436e8790000000000b47ce8e09deaeb61a27b3b6f9c1a1203ed842ad072b0022fbf3d2aad4a00"/103], 0x50}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)

1.449450387s ago: executing program 3 (id=3954):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="91101e00000000000908fe4ef677ef30f2719414ebf8ef92000066cd0b4a00e6c9fc5913023cd91e6be379fd0f7e1644fe3006dc7ed205a5bb0000003a7ec55f9d220f3ad633871b00000000b060371df248ce48e8fe97f0c0f143ad66e89723dc03780c96a7ee85e33c388b6c937f6ba7b1100363f5ce4f5a670cd15fec9673390d7672dea251151419347700619350f429ad39832e2790b33906d89b10e5c0e11eca2322ce462704441c2e1cf456f121c6d527b45da0fc9306a5543c088600000000000000000000b322378afe5f35ee68bdfb96d38fb10addbefc46966c6303b7753be88048cf7d8110b967a7c980db77bf1795f4cbc9195463132ea4eb35fec4dbc5dcbc85c7b613ddd721998bb7356fbf37dd7e8cb6e0083770a6d4d8d7ede203b93994d62b63e3dd3b0b2390513528698f1573e0ef040d71ee43bf6fe16074b9b02b61b6b48ece179bfc00e800"/345], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x2, '\x00', r2}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3)

1.388883085s ago: executing program 1 (id=3955):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={<r3=>r2, 0x81, 0xaf47, 0x7})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r4=>0x0, 0x20, 0x7800, 0x3ff, 0x5, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x80, 0x4, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}}}})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0xf8, 0x6, 0x1, 0x5, 0x1ff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r6], 0x0, 0x10, 0x3}, 0x94)

1.367218782s ago: executing program 0 (id=3956):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8, 0x700, 0xfffffc00, 0x9, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x65, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}}}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@rand_addr=' \x01\x00', @remote, @loopback, 0x3, 0x2, 0x5, 0x100, 0xbc, 0xc20022, r3})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003500010326bd7000fcffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x41882}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r9 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r9, 0x29, 0x4, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
recvmmsg(r8, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x1, 0xa, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x48084)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r10, 0x8001)
setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000000)=0x100000001, 0x4)
sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r7, 0xda90)
setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0)
r11 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000380)=0x7, 0x4)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYRESOCT=r7], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8804)
splice(r11, &(0x7f0000000040)=0x2, r7, &(0x7f0000000080)=0x6, 0x8, 0x5)

1.327616697s ago: executing program 3 (id=3957):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = socket$alg(0x26, 0x5, 0x0)
unshare(0x6020400)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080)
poll(0x0, 0x0, 0x9)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) (async)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x0, r2}, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
recvmsg$unix(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000340)=""/75, 0x4b}], 0x2, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

1.276218206s ago: executing program 4 (id=3958):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4a20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000d}, 0x1c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf252800000005002b000200000005002e00780000000a0001007770616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800)

1.188681437s ago: executing program 4 (id=3959):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)
listen(r0, 0x100101)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket(0x25, 0x3, 0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'ip6tnl0\x00', @remote})
write$tun(r1, &(0x7f0000001100)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x2, 0x24, 0x68, 0x0, 0x0, 0x21, 0x0, @remote, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, "b2a985", 0x5, "76d6bd"}}}}}, 0x32)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
accept4(r0, 0x0, 0x0, 0x80800)

1.119016725s ago: executing program 3 (id=3960):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (async)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x60)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x9}, {0x7, 0xe}}}, 0x24}}, 0x0)
recvmmsg(r1, &(0x7f00000034c0)=[{{&(0x7f0000000180)=@caif=@util, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/111, 0x6f}, {&(0x7f0000000640)=""/4081, 0xff1}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000400)=""/96, 0x60}], 0x5, &(0x7f0000000500)=""/31, 0x1f}, 0x796}, {{&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001640)=""/111, 0x6f}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/105, 0x69}], 0x4, &(0x7f0000002800)=""/91, 0x5b}, 0x3}, {{&(0x7f0000002880)=@generic, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002900)=""/214, 0xd6}, {&(0x7f0000002a00)=""/235, 0xeb}], 0x2, &(0x7f0000002b40)=""/78, 0x4e}, 0x1ff}, {{&(0x7f0000002bc0)=@qipcrtr, 0x80, &(0x7f0000003000)=[{&(0x7f0000002c40)=""/117, 0x75}, {&(0x7f0000002cc0)=""/19, 0x13}, {&(0x7f0000002d00)=""/96, 0x60}, {&(0x7f0000002d80)=""/195, 0xc3}, {&(0x7f0000002e80)=""/104, 0x68}, {&(0x7f0000002f00)=""/177, 0xb1}, {&(0x7f0000002fc0)=""/62, 0x3e}], 0x7, &(0x7f0000003080)=""/55, 0x37}, 0x6}, {{&(0x7f00000030c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003140)=""/10, 0xa}, {&(0x7f0000003180)=""/146, 0x92}, {&(0x7f0000003240)=""/36, 0x24}, {&(0x7f0000003280)=""/158, 0x9e}, {&(0x7f0000003340)=""/193, 0xc1}], 0x5}, 0xd}], 0x5, 0x14043, 0x0)

1.073233406s ago: executing program 1 (id=3961):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x800})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000001080129fe00000000000000050000020500030006000000050003002f00000006000240000c0000090001"], 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x80)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e8005"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xf6, 0x8, 0xf480, 0x9, 0x120, 0x1, 0x3, 'syz0\x00'})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

1.004563693s ago: executing program 3 (id=3962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) (async)
recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket(0x2d, 0x2, 0x0) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@udp=r6, 0x2}, 0x20)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5", 0xc}, {&(0x7f0000000700)="37a8010059616da007f3c18c191f6ffa1401000000fd2c010000003c6b1bcc4ce1606b67309e18505efb3e0ce4f53252a65aa2e6", 0x34}], 0x3) (async)
r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c)
connect(r7, &(0x7f0000000180)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x80) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r10, 0x2, 0x40}, &(0x7f00000000c0)=0xc) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r10, 0x10}, 0x8)

890.431987ms ago: executing program 2 (id=3963):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x363c02, 0x0)
unshare(0x22020400)
write$rfkill(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000007f00)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

848.178401ms ago: executing program 4 (id=3964):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20008040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x40, r5, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000480)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x6, 0x8106, @void}, "134a3185f7b1806ddfe808783210947f8bd182344a7e976d7d870d0969cd71fb"}}}}}}}, 0x52)

757.230112ms ago: executing program 1 (id=3965):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)="59106dd3", 0x7, 0x0, 0x1}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x18, 0x76, 0xb0d, 0x2000, 0x25dfdbfd, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

751.049286ms ago: executing program 3 (id=3966):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x2c0, 0x2c0, 0xffffffff, 0x190, 0xe8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x6, 0x1, 0x0, 0x3, 0x4], 0x4}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x14, @broadcast, @loopback, @icmp_id=0x67, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xd, @multicast2, @empty, @port=0x4e24, @gre_key=0x7}}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x13}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@mcast2, @ipv4=@multicast2, @gre_key=0xe, @gre_key=0x5}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e24, 0x4e20], [0x4e21, 0x4e21]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @icmp_id=0x65, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r0 = socket$inet(0x2, 0x2, 0xa)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f00000005c0)={0x1050, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x35, 0x19, "c0993704de1fefc176a8115f708253c752646032d2798a3ed89ca547799046ebdb2b28123e5107513d2e8524480b6f31e9"}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000016c0), r2) (async)
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000001700)={r0, 0x7}) (async)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x10, 0x14, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xa6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001840)='GPL\x00', 0x8000, 0x2e, &(0x7f0000001880)=""/46, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x2, 0x0, 0x7, 0x5a3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000001900)=[0xffffffffffffffff], &(0x7f0000001940)=[{0x3, 0x2, 0xc, 0x8}, {0x0, 0x5, 0x3, 0x3}, {0x4, 0x1, 0x3, 0xc}, {0x2, 0x1, 0xa}, {0x0, 0x1, 0x3, 0xa}, {0x3, 0x5, 0x10, 0x7}, {0x0, 0x3, 0x3}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001a80)={r4, 0x1}, 0xc)
r5 = socket(0x1f, 0xa, 0x3)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000001c00)={{<r6=>0xffffffffffffffff, &(0x7f0000001ac0)='\x00', 0x10080, &(0x7f0000001b00)={@align=0x2, {0x7, 0x616, 0x2, 0x6}}, 0x4a, &(0x7f0000001b40), &(0x7f0000001b80)=0xa}, {[0x332d, 0x3d7, 0xd, 0x3546]}, 0x9, 0x0, &(0x7f0000001bc0)}) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001c80)={<r7=>0x0, 0xf9, "e9b500a396435fe32137b8b4be6019f04507dd25b369269a019d9dfd9ca1767dccd456aba0204a3b007d05e59936d590e237a18f5de9fe18454e7d775b39f11f6a883f7fab4ad36f12763babe90417d7b6c19df46ecd5fcde0713fb4201e4b20f9a7d639d56d1805bff6fe39a11d5d22b0ca3178c9a7fce7685d1f6c66fcd9f5e650cecb4976f243fbb1440d54880b8e0d35caee1a5a2d6c3bc780c751d025f676df36075e389e8ccfc09da2e69805d5533efbb1ad2ca6398e0ddee77b690bc3150f71d6e452e37dd316037a5ba34e472d3437104eb5914784c54b948626ff069a85fc771fa6a52f7ffe3e7e05df6408a74672d7a36b70ba41"}, &(0x7f0000001dc0)=0x101)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001e00)={r7, 0xd0, "cbe835477b52754ddc2375492385c8db175f5cf2f754a5b33cb5ff730260439ffffcb2d78a8d9f94534ef2707f37704025b156e57c937ea3169070a3b2e4400b4e2c58441c46a0816c57cb295821956efbe6c15e075dfd3ebc3d1b2f22b321b68f6d0630394773ad281332bf7073f3f1b6e28150f0abe0de52a08c0dcf91dbce86aad7a7b0908bf58aed88eac397c27b50b16167af3098935547a54f2c3bc15d1b253a2320610e68833b3fd6f3411a0679704711d3c3d21cdd32579176ff767be935d8db2bfcae530638b65a166307dd"}, &(0x7f0000001f00)=0xd8) (async)
bind$inet6(r5, &(0x7f0000001f40)={0xa, 0x4e24, 0x80000000, @empty, 0x100}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r6, &(0x7f0000001f80)={0xa, 0x4e20, 0xffffffff, @remote, 0x2}, 0x1c) (async)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000001fc0)={'broute\x00', 0x0, 0x0, 0x0, [0x75ec, 0x5, 0x3, 0x5b4a, 0xbbc]}, &(0x7f0000002040)=0x78)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000002480)={{<r8=>r6, &(0x7f0000002080)='ttl\x00', 0x40c703, &(0x7f00000020c0)={@align=0x2, {0x9, 0x9, 0x88000000, 0xf12a}}, 0x7, &(0x7f0000002100)={@_ha_fsid}, &(0x7f0000002140)=0x6}, 0x3, &(0x7f0000002400)=[{0x2, 0x9, &(0x7f0000002180)='set\x00', &(0x7f00000021c0)="b6b8c667e6aa6233fcf0e5be557c35e2081f4832f63b24c49041b9a9fda88af5381787753918984758", 0x29, 0x8}, {0x0, 0x8, &(0x7f0000002200)='\x00', &(0x7f0000002240)="a97a8098e04cd726f6202dc2fd476a1d24f9d42a2d328f4a89f89e555efd6ea9a913ef7013664086b8147192a919cb74b88de069579f66caf882f7fa33fa22bfa8f9ec950cccaded2b4062e989f97b98eb906a008751a1003798d4d1c3f2d654f767c50908e22d898b0c981e27d685852ba604bc059a62a9987ab5f3c27c9b0354e77d5c96d082d845329ed700b8bb3c498190239daa7967dbc981e9d9d7abc075", 0xa1, 0x8}, {0x1, 0x6, &(0x7f0000002300)='^-\x00', &(0x7f0000002340)="b35eefceb00b0476a0d928ed2c6c80f958d86be71e761868643638586c7e9068a179923b23ac1ea51581ed9a884f48160307a86243c0c270ee09193251ff6584ede3b67bb21f1f3b0a918597932ae84ec9acd3a2a9f24c30444e230cafed5864d0c76c483908bbd00a721830194cdc00a4667089e22abb91f09d8f576dd1ac6ee7f7cd5f7c2fb7673128038c2caafc4628f35fde3ac28de007df658cc447ffdaf71cc8800a75a81517", 0xa9, 0x28}]})
getsockname$unix(r8, &(0x7f0000002500), &(0x7f0000002580)=0x6e) (async)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000002600)={0x5, &(0x7f00000025c0)=[{0x9, 0x5, 0x1, 0x7}, {0x3ff, 0x29, 0x6}, {0x0, 0x8, 0xfa, 0xc853}, {0x2, 0x5, 0x1, 0x38f1}, {0xb5, 0xa, 0x71, 0x10000}]}, 0x10)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000002640)={{0x401, 0x9}, 0x100, './file0\x00'})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002800)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000029c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x38c0020}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x12c, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xfd, 0x2a, [@cf={0x4, 0x6, {0x7, 0x8, 0x2, 0x9}}, @random={0x6, 0xd9, "b555ea1159bee1d94bc9c5cbe7d318f2ab09e4c96a206220d31b091b4709780302bdd7f04d10488fc7bc49abf282f915a0e80d8f253f2a052d3dd6528c888af9b855bb226c9d65ca3018c5d46b2d3aa2fea0608f73fa65f58d8d6b08cbd5990c9fec5cd5deb3b12cf82cb11559bde579a6be542a4d2fc55cda3dc942f4d4d09ddd01c92fe7aca25b6bac777277323065758a80598279f7194e71d917541d0fa203e3cdff5ea46521ba441cc08e1e6963ea601e33c84c0434edc2b0431be0bbec91db2c41c8bb021624ef2ab3abe92952612609c611d6be014d"}, @mesh_chsw={0x76, 0x6, {0x9, 0x1, 0x3e, 0xfffb}}, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc, 0xae, 0x2}}]}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000002a00)) (async)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000002a40)={0x0, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x1, 0x5, 0x44}, 0x2c) (async)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000002a80)=0x1, 0x4) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000002ac0)={r8}, 0x8) (async)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000002b00)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3})

750.58452ms ago: executing program 2 (id=3967):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026c77000fedbdf2510000000050010000100000008000100db"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

643.458206ms ago: executing program 2 (id=3968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050425bd7000fedbdf250100000008000100", @ANYRES32=r2], 0xad}, 0x1, 0x0, 0x0, 0x4000431}, 0x20000084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000eb31000290f000000000078d3ee834956628300000000000000", @ANYRES32=0x0, @ANYBLOB="02000000000000001c00128009000100626f6e64000000000c00028008001e0020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0)

635.999446ms ago: executing program 3 (id=3969):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0x8)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112100000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f00000024c0)=0x5b6c, 0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x5, 0x928, 0x80000001, 0x100, 0x4, 0x897, 0x0, 0x7, 0x7, 0x247, 0x6, 0x200800, 0x8001, 0xffffffff, 0x4, 0x100, 0xffff, 0x2, 0x40, 0x5, 0x0, 0x9e}})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="050000fbffffffffffffff00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x7c}, &(0x7f00000001c0)=0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000040)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002000)={@map, 0xffffffffffffffff, 0x35, 0x2008}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

608.054629ms ago: executing program 1 (id=3970):
r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000004, 0x13, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x80d84d7d6edd4695)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="79360b92d73f0d8eeeea59485483", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000001c0)=0x9, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_ts_info})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000000900000000000000000000000000000d000000000000000001000005950600000038143469321cdb3bdebd27ea06e70000000000000901000000"], 0x0, 0x4a}, 0x20)
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10, 0x0)
unshare(0x400)
syz_emit_ethernet(0x1ae, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000000)={0xfffffffffffffffe, 0xd, 0x100000001, 0x0, 0xc, 0x4, 0xc})
r4 = epoll_create1(0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d})

448.912744ms ago: executing program 2 (id=3971):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010046bd7000020000000c000000180001801400020076657468305f746f5f626f6e6400000018000380140003800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)

445.816505ms ago: executing program 4 (id=3972):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x40010)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000040000100fcff070080007368a600"/31], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={<r9=>0x0, <r10=>0x0, <r11=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r8, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x38, 0x40044}}], 0x1, 0x4014)
sendmsg$netlink(r6, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000840)=[{&(0x7f0000001400)={0x0, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x0, 0x8, 0x0, 0x1, [@nested={0x0, 0x6b}, @nested={0x0, 0xc1}, @typed={0x0, 0x10, 0x0, 0x0, @uid=r7}, @generic="3ed3e11bbe8d5bcd8620bef051a0644b0fd1d2292776afb009a953ceec8a5c5cd1750eaca2814625ba77e2bc3c4dba7195264f94463bf496cd587ca31a1a3ebe4184b57519559a384af35713c985a835b28b1c8b59b80e2bf72a9851af745fe0b6a8c86fcb489e6a90213ad9ee892fd1de708f6d27128b89ce6bee66b4853a9e627b58f7437115b977abfa3e258b621d149c873dd6", @nested={0x0, 0xd1, 0x0, 0x1, [@generic="7615c15bfd94a1abf2845c483e062e6c3aebd30cedb18a6f585822a4323bfbaa0deebfa0b6b7774663e01a8ea9ca75e2fa03f3b62cc32200677fd220cde7ab1508dd19bba763f0f92d57a104482825faceef4e227aed9f557be2869efd870143a03b1a3155e1e077594bc7ed", @typed={0x0, 0x15a, 0x0, 0x0, @fd=r0}, @nested={0x0, 0x11d}, @nested={0x0, 0xb2, 0x0, 0x1, [@nested={0x0, 0x128}, @generic="ad76504ff799f7351277e80c5772cd28db94a170d519c2c14a79b94c1f8d8e3f68125154710d8b19b80256bc91257e87af3976d984286635d112dae48f55d8322de094a27e2adef40a1f9d3fdd7c9c80e73fdf894e6521facf0aa561ca582c60b976d6046119bc7e33fcbcab1e980265c62bc380e5250ddbac1edb7b98960010365a9cd6bd4d36dea9e0bf790a8fca1ca0c90478974ec799", @generic="a1c86a46d9875682ce402208e2f3ec1838428662f337d0aeee808a39ef4fb9eaf5caf344effbf65c7bd24bc8866d6efa1f1999d1eb7f0357b819c558c1383738eaa5a6380783ec319aeb6bb77237b63099639e89f0987cec4bb33e1fc21668bde832602b761d63391589faffaa40d9cad11796254b6cb0e114f1065ba1eb9cd4755f759045093b33fa4144df1df9c73abcb6657cc799888e8781966e40252e6edfe80fe9c33407bb8b859c94add565340ed7e5e12e3abc7497d4a3d23f71ecf857709c5d2656471aa04aaad19aea1b307ee439505fff5403c338248078337d748e447769283cb06cc65309280f4abeb8", @nested={0x0, 0x1d}, @nested={0x0, 0xcf}, @generic="433695e9d607b916d1d8f59c78f9c0329e6d898c16a04e938f929ae2c9d6590523fbe36e0a6c0c1f7b8ba9a88c43dceb82d6633d", @nested={0x0, 0x156}, @generic="3155789319ecf4aff773da22c6d8a754639c471e9a8eb6cef6d5742d0fb0d791e034cb999101828fa753c52bee64adc7a69f86560dfe819680c0505071d8fd5397b74839803574d939eeb2658a37d5d1b5a759a402379c8a3d9fe65a0b20b2f80d7e96339e63b00d1634a6a6f9aa50eca20a9be9e77632cc00ea5e07cbfb57334b60512a84d2d8f5ff4594ef73ecd7ac69f87e5b2ac2512d26556143e56703867e8fa48a0b6c31ccd9e5b75af94fc93ec438baf7b8f0b90c6b1b14a3684f0c7279b87151a974d1c43d387a8a3a06b4c3ff1962b28af0efb93efa2125a248e73c0e3454db", @generic="f63ba73ccb541b27a18514d38a21d1bda8acaf1eb3f94c9f6b5d5e482cd6de58dd7dc17cb46166aecf4af7813c", @nested={0x0, 0x21, 0x0, 0x1, [@generic="427d41857f7522d7ecadd47f1d2f8d15a20388c03d4778dce3b56c50883638817bd3b30b61b74096a8b993f3377fac5e1432e503263d9e", @generic="459c6b73d6f826ee6f3150ae0d3d96d1d4db42433337c7093cb67780c2032ef481a9e3aef829b3aba7008cd5ebd2480029b83cf154a554b21551b00e38a7d68572f5528fe76c8a2cf7a19d57077f1e4d51b1d945687f6e50b965976ca1eb8cfb288e4001b5d244489653f2d7ef1cb41ede5bde6a5a9ba4347d1ce11bd5bb928b49b82a6c629b197978a56001eefef06561"]}]}, @nested={0x0, 0xba, 0x0, 0x1, [@typed={0x0, 0x61, 0x0, 0x0, @pid=r9}, @generic="51d8662f2c14fcfe29d2ea40869ffc728d6dc4828bcf58c55a84cd74eef2f934992965e34f601fb5893a134100d82a0b3f046366e86922159e8733201d3e108c8367135f5534792ec96a48f0c87334a00036ad933522c5b784c7db5cee2a6b7b8e4397cb4e32dd86efca5cb24bf00f02d855b13ff043a6de18f887a7ed0267083a10d5614b47033b751bac5775e70d9e790adab4f4deab1e6d35581880279adb2f5e3675d0fc0bb474c6f7007248464daf097129f58056998fb5be61"]}, @generic="a2ab6e7401a98eb608cf3843d6a3793a85d91d9051b69ab8af2613ef6e46d05c93", @generic="3d66f6287a7c04cb056962aa8f8712679e8130986d1e5e73ea104ae66b7b3888ad7703aa7c2b5eef0d3efaf1bec13a4dc7f50ca7691edeea4f0988c1136b7b35204468", @nested={0x0, 0x24, 0x0, 0x1, [@typed={0x0, 0xef, 0x0, 0x0, @fd=r4}, @typed={0x0, 0x146, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="fc34a50079e6ed078c85ec037cbd82d314dfe377e7aa573b339e3e4f00a83cae5cc0c1d43f11d03b79f6f869de315a3a31def121463432fb04932e3f49aa6f88b6721504d92047a60910054ca38209e23951e54388df7ce96e1d9b7611d20f23d750a123cb7085268b5c2e25e38736fa75a1f51e3b5bb3584acde2a90e28adedc48f20c44f19f0b88037d0f3641bb67f393c3fb86faeab494710133008231f83a153ec90e2d657f810c6c5ffc8fe206446603398d8d38f08d68db3c739b547314b3373724fa6ff9e3b5f074ad89929570a9613", @generic="2ef2fb1a85aa388e5cec3a2d460f046b24170ddde39a77e5c7c9b3fde3aad92032eb29802344f305f2beffff9ce0161a07f56c41bb61d297989672f9a6326e3e6879d7e54a46874a3170c60d137ca14c8ea79c5253c88a13ea3c8687cb00d9a378b9a59c0b96f112517878416a74885a9488307ec2f7aa929b38fbeb12153a86b47cc9cec88a147fdef80ca5cd74861faacb1c4ba48b416e855a14e6537a797cb0756a313b471e6b2e23fddda9302f11bdff9f4d0958c4bb8022d4d22e99ce2acee5962c553e29bc3337a7d3186e16a5247c4652c587", @nested={0x0, 0x10e}]}]}, @typed={0x0, 0x10c, 0x0, 0x0, @u32=0x8}, @typed={0x0, 0x8b, 0x0, 0x0, @u32=0x1ff}, @nested={0x0, 0x1c}, @typed={0x0, 0x10f, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x0, 0xb1, 0x0, 0x1, [@nested={0x0, 0x138}]}, @nested={0x0, 0xfb, 0x0, 0x1, [@nested={0x0, 0xc2}, @nested={0x0, 0x72}, @generic="124a0eccd7252c6b27554696682e8bcac50d5ee2ac52c725d36a410a8867194d20fb7bb448fa1aec37d4a9bd1d2bfc8c906ba79d86a6008d9861ae820fa0f2f93b0ccfff4cdee577cb73d05f8af6ffa13790833034bfd7d849cd65cb4570b3d878b52e475a33dd79d81d2c6cd2a896e2e942f2a6002f27ee4d7f5d3f373aeacda621656f1a6dd0708ed00875d1cb6fc29722bb38e89b2eef7d7cff0b8d59dc0a7fb86b5ae4f74ed42ba839efd6f4af29ff0e849f42435ac9078714a126185972dc193bf5d26559c245be0d5e62b02455db0b45332db24752f206ce2822fe226956b6352ff41cf08af93fb74baea83cd6252291aae28c0ddd", @typed={0x0, 0x128, 0x0, 0x0, @uid=r10}, @nested={0x0, 0x6d}, @generic="e99e5230b011ee50510d8469ef22fb08c5c436ba569e1755dee277c2741accf4811ea5e7b9b12a29227e21f30be2f501087b28b846c75ccc6995d2f7b18f0272d612e39dd9499e3c5ecb57f893da2f0a067cadf22c6cec89f69e10b8d7901b3ee3ee6be56d6eff00a1a09111ceb1734730c2497f989b50663864183e7e481329aef3ea16d67a02165a04d2794e3b0f5addfd4ba3dfba4d44e6d585ff9713a0f55036dbc81b4744759fbccf136e97dc4b767acb84b1fb73", @nested={0x0, 0x36}, @nested={0x0, 0xa1}, @typed={0x0, 0xf4, 0x0, 0x0, @ipv6=@remote}]}, @generic="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", @nested={0x0, 0x63, 0x0, 0x1, [@typed={0x0, 0xc9}, @typed={0x0, 0x8e, 0x0, 0x0, @u32=0xc}]}, @typed={0x0, 0x159, 0x0, 0x0, @ipv6=@remote}]}}]}, 0x4008000)
close(0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000800, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffdfe, 0x2}}, {0x8, 0x1b, [0x3ff, 0x0]}}]}]}, 0x54}}, 0x0)

409.027858ms ago: executing program 2 (id=3973):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24800}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x20048844) (async, rerun: 64)
r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r5, 0xa4617cec7f4d3cee, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40055}, 0x4004040) (async, rerun: 64)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async, rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="4915e7a92afaa5ef03729010f5ecbd28f307285aea985642a65d7806d387eda6d249de4748262a9a82effc70a0e2ce0bb77e60729dff72b60a77277058a5d07616cc54902afdd9dc429596e66a915405833d5c543fd482423884ab9d7653f069fcd8ec6aa31c76d121aa8a48ba18c6fb5cc00372c51a6f6d17644cb9e5d0367f56eb8eb7bf0536bdc3b3c7434b6af93cd1d553da69576b640f297ae78bc3f75d10dbce2a86c5752d28f57db0969a87589c69d36a447495090fded3b60839080aa9a909a6ec2d27b77804099810a7fb290555fb14521fc8467307d452fa31b68fc9fdefe9fc42", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES16=r3, @ANYBLOB="f5189e4f8592f9101f69a0c045f37ebee0fd3bc77c22b9adb065769c0b", @ANYRESDEC=r3, @ANYRES8=r3, @ANYRESDEC=r3], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000002000010026bd7000fedbdf250a0000000000000108000000050013000100"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x90)

375.795902ms ago: executing program 0 (id=3974):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf08}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x18}]}, 0x64}}, 0x20000844)
r1 = socket(0x23, 0x3, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x196}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20064800}, 0x4048850)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x0, 0x218, 0x0, 0xf8, 0x450, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000400), {[{{@ipv6={@mcast1, @loopback, [0xff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xffffffff, 0xffffff00], 'ip6gretap0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x87, 0x6, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, 'I\"', 0x1}}, @common=@hl={{0x28}, {0x3, 0x40}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x35}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00], 'veth1\x00', 'team0\x00', {0xff}, {0xff}, 0x2, 0x75, 0x2, 0xa}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x0, 0x1, [0x100, 0xff, 0x0, 0x6, 0x6, 0x2, 0x9, 0x5, 0x1ff, 0xde, 0x4, 0x10, 0x8, 0xf610, 0xf3, 0x8e], 0xf}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x7fa368f3819e6918, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0x0, 0xff, 0xff000000], 'team_slave_0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x33, 0x7, 0x1, 0x48}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "2edb"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, 0x35, 0x26, 0x7c0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698)
pipe(&(0x7f0000000b40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000b80)=0x10001, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000bc0)={0x6}, 0x8)
ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r5)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1dc, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_IE={0x1b3, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x18, 0x1}}, @chsw_timing={0x68, 0x4, {0x1, 0xca47}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x88, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0xb8, {0x53, 0x6, "a1f1d62b2ca75b90174352763d0e2bc9", "e655c5caac6ab2367d88586b7d355b4c2cee13830ca5fb5b93f7f4e13125e91f", "da825045e793dcebb86465c88ccedafd09d2de8a362ac7d5bee30ccd934c6a0d", [{0x1, 0x1a, "1f90962ea55862d91811f44a30681aceb877180ffe513d20dc87"}, {0x1, 0x15, "822f9449d391e28a7fb0c8fb036b1cf0c076f3c72c"}, {0x3, 0x16, "014cf4acbf832142d236379ae8d7e01fbd92deb056cf"}, {0x1, 0x5, "4eb5fc0c71"}, {0x2, 0xa, "b27b2c4753a0e3c47c5f"}, {0x2, 0x6, "2f7ea79199cb"}]}}, @prep={0x83, 0x1f, {{}, 0x7, 0x0, @device_a, 0xfffffffa, @void, 0x6c09, 0x1, @device_b, 0x1ff}}, @mic={0x8c, 0x10, {0x6ac, "b7c7f1ba5dca", @short="c5c058490ca334c6"}}, @channel_switch={0x25, 0x3, {0x0, 0xb8}}, @random_vendor={0xdd, 0xa3, "a1ff8721330e85d441447cbdf5553f4722a1f3e20ca7b038c4d4acbb2f3bdf72ab74109ce2516dd112b917d15d5f156d0a7fc520ea6b73ccc894e4eae09e09f9973309bf4c63b03b2d7599b3a5ff0e48bff611b65cab61a006009748663d852b182bc5d73760708ab1acfc449c0d3219ce96910113743cbf7d08bd02ab5b577f935dad6a14d7dad618665b1085bd53d41a02a3491b18f40da1f403d71175b3d03af7ba"}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x48086}, 0x8000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000f00)=0x9, 0x8)
sendfile(r5, r5, &(0x7f0000000f40)=0x3, 0x5)
bpf$LINK_DETACH(0x22, &(0x7f0000000f80)=r5, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x104, r0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x400, 0x3, 0x83, 0x7, 0xe4c9, 0x0, 0xffffff80]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7ff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4433869b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x71b4, 0x80, 0x8]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x387}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xfffffffd, 0xfffff848, 0x6, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x951}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x633}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a3}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x6000084}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x65}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x844}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @initial, @broadcast, {0xf, 0x3}, "", @value={0x7, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @broadcast}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@fallback=<r10=>r4, 0x3, 0x1, 0x1f, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0]}, 0x40)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), r5)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r12, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r11, 0xc0286687, &(0x7f0000001840)={0x3, 0x0, 0xe7, &(0x7f0000001740)=""/231})
socket$inet(0x2, 0x800, 0x6)

300.039508ms ago: executing program 1 (id=3975):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000240)={{0xe3, 0xb, 0xee, 0x809, 0x2843}, &(0x7f0000000000)=[{}, {}, {}]}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg0\x00', <r4=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'gre0\x00', <r5=>0x0, 0x8000, 0x7, 0xffffffff, 0x0, {{0x9, 0x4, 0x3, 0x4, 0x24, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @empty, {[@cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "a6ca039ec93b"}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', <r6=>0x0, 0x2b, 0x9, 0x9, 0x0, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x80, 0x40, 0x4, 0x4}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000840)={'tunl0\x00', <r7=>0x0, 0x7800, 0x7, 0x2f, 0x547, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x6e, 0x6, "0794897f"}]}}}}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'macvlan0\x00', <r8=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x188, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r1)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000cc0)={<r10=>0xffffffffffffffff, &(0x7f0000000bc0)=')#-@\x00', 0x80101, &(0x7f0000000c00)={@_ha_fsid={[0x1, 0x1]}, {0x899, 0x3, 0xe, 0x8}}, 0x5000000, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0xa9a})
sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x2, 0x70bd27, 0x4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10880}, 0x4018004) (async)
r11 = accept4$bt_l2cap(r10, &(0x7f0000000e40)={0x1f, 0x0, @none}, &(0x7f0000000e80)=0xe, 0x80000)
splice(r1, &(0x7f0000000e00)=0xae, r11, &(0x7f0000000ec0)=0x2cee, 0x100000000, 0x5)
sendmmsg$sock(r0, &(0x7f0000001780)=[{{&(0x7f0000000f00)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x4}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="14376da466f57644f6adf6863ac1a68c773f2ff95b13fcfa5b0a19e4de94643ac3e51552c46b98739dd5fa7665e51488d20f3c881321cb50d0598f979a8961160eaaa0c007c0e7bf3058003cecec36ae39642a01d8103c08a3bac28e299ec499d753494800b73c50a3371a87289fc854e31064017cb1ab7637e00c4315047a36bddf0b02545b4b4ee25c7df3e63608034d64765d2368fecebaca8a80810f415fe078e31722c17af38acd94002c83ecb2fe1f39a3ee6e2e0654a3993e127b8ce383852a97ad376bef8e1aeee84d9f1e8888a6f0fd10", 0xd5}, {&(0x7f0000001080)="6a60daa07ade0a864b02dba347cd90bebf1b2e8883451ae70be865a80cd1d61859c475d321e572fd4675f7c15920fa4c1ae39c5486fe452587661d8ae5ad8b581ab4a612fddf1fa95248ea546c0ccb1341cd9e087fe34ced44016ff9c7f3129685bda63e1f44be390e0220728fa09d45e71a9010fe94a5e1f9d844ea31c32f22dc5b2a975e9c72c3a4a37771e6fa8fa6557babe994609ef696081b24d9f8daba081132cf5a416ebc0e56e963900c4f813a5305c1232103407df6f05de240739e4155bc2a99ee96aa8f49048e32e0fa3b78f4bf27", 0xd4}, {&(0x7f0000001180)="901ee9946fef1a8aaa1da41a7600b604abf24fca813a5d128592443b716c9c74f7b5d0bb82084df1466ae3983a39", 0x2e}], 0x3, &(0x7f0000001200)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}, {{&(0x7f0000001240)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)="5244d40197a70ba6270d7a43d6d6da843ba2e0ebfae2f8f32f3468e1e3f1c738fca8d4b78cef7514d41df8b7951a3ad3cdd50f75e816fc18e67587925aba737aa3158a8df7defe087473ae5c9e02a8b7e3cc650df39485313c2a3ab477b79ab2bde7", 0x62}], 0x1, &(0x7f0000001380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000013c0)="a70725d0d3e165590428ea02d39cd384e3f5ebb06f60897df89b62dcab5be08f716c788f038798b56fca41cb4bdffc855b5d20dac9ea9f4a853711ea1eb7f71ecaffa4f74291a917d09dd00eb94adc9e6fe99df63b82e9c55bc905e4683195262c6a2ee2372c4216c90be7bc57504733e5d44a669f875175e7d232d7c1d20fdd549bd3a2e7d67e704272a348e6966381eed84ebfeea29b2a09f763d3d0603b35dc45cea29598d38e93da0c997d79c548b241f6838439f5737f12b7ed0c7b9effa4ec37eea5753d14325da59ea8932b2d54a23f70508890da226cc0896dfe02", 0xdf}, {&(0x7f00000014c0)="d5a6bb806143225c7f96c2460e798efb252a82c7b56aa33a70b0ab3911baad0902925ac963573c16f01f36f162596b0022da76e5df4478ad7b32ed2809e04ff636b94e78df6cc9e6e0634ba522d3a208f1353641a7dc73a9d843ecbd6e9d22a1443b", 0x62}, {&(0x7f0000001540)="34ef6731ea2f09e8ba4decdcff21d9ef4589934174862a30d72e153e19a124174a63525f0e008c0b8e01e6733f140687848486193da5bbe15483660e9d6b60aa7278275028c71eb54f51f2dd285e11706c07ec02ec4d74c9447c2a50437e153acb5899164d683f4f56bf876273bd0b998a923fcc5b64ffb3225b38d43abff5a591e877c887a98e84ebf0eb561a87e0aeac6a16cddedec28435c04805628a6a4f285d7e5909a3e2605485df636c4dc62689519d9f566d9cca4a1c6ee6200d7bbae49e0b1c54a173720e6381c18e82d0de377534ce863a70c4302f7a760af173fdc6b90040d6ed61a2ac", 0xe9}], 0x3, &(0x7f0000001680)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x982}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfffeffff}}, @txtime={{0x18, 0x1, 0x3d, 0x6000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0xd8}}], 0x3, 0x4001) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001840)=r10, 0x4) (async)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48c0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000001f80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f40)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFT_MSG_DELTABLE={0xb4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x74, 0x6, "892fa027083e228b3f62def5deacb171409a97db744177c87a8a6c2cf50bf9a94db2d44c4c81e66701424e6b33c2b1dcb23ee7f46c7f0a8a8c6762352d7ea02884a6e8afb7a0df8d00b50005420ad46c83e4b4b44316a81009bdcb64edec50617258dd21faac293d85c09d5e5285093f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x8, 0x6, "614db161"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "bf8a58e8e640146664c4223bccff7cfc1aa59ef716e88962b29142c01404274efb63ce07ef3ea6938785ade2c094e4e1c62fd98d316b63a7ae79e338448f6f0c9254c79ad178672b5190ddfd7703c592b7c5353db0f671834cdd441874dc1b60583cfd29dbd7922c9ebb266a625ddb967bcd5c151aadee53ec97"}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELSET={0x2b4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x38}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_DESC={0x198, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xad7e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc5e}]}]}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9446}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe1d4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x426}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa57}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x759c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r13, &(0x7f0000001fc0)={0x28, 0x0, 0x2711}, 0x10) (async)
r14 = openat$cgroup_ro(r10, &(0x7f0000002000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
getsockname$packet(r14, &(0x7f0000002040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002080)=0x14) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000002440)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x52200040}, 0xc, &(0x7f0000002400)={&(0x7f0000002100)={0x2d0, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x158, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x44850}, 0x4000000)
pipe(&(0x7f0000002480)={<r15=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r15, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x40, 0x1410, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044094}, 0x4000)

280.633593ms ago: executing program 4 (id=3976):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x40000019})
r2 = socket$netlink(0x10, 0x3, 0x4)
epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450)
epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r3 = socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)

240.296698ms ago: executing program 1 (id=3977):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ff070000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000000020000000a0001006f77ffff000000000000010073797a30000000000900020073797a320000000014000000110001000a512f7b16a28fb13c2c86a1f8c5984a9535a4da5b828dd52401029ec54ffa737c3b924b754c4b9d666b7e5703bdd014c99861a3043154de4d988c00755ffcbd8bb6467e9416f1f94c551c5dd28cc7d6556f1870d25a16625632b33fb135339e9caa2b3f0204abd225f170e05df88fe9c512a0a11f482c27c5dd0000008a1314ab22d806241adac4a8c641f399513c9437b22afd0261de39b3876252eb7d00"/309], 0x98}}, 0x4048010)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0d022bbd"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a0fa, 0xc574450d1af3b5bc}, [@IFLA_MAP={0x24, 0xe, {0x5f48, 0x415, 0x7, 0x2, 0x80, 0xfc}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44011}, 0x4040)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(0x3)
write$cgroup_subtree(r4, 0x0, 0xd)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000ff00000000000000000000a5000100003f00000500020027000000050000000000000085100000faffffff95000001000000000000003c74d789b050afe0d9d65c4a6753dc71807c690b5836d3e65db2bbcc794db9d3b850e3703ff54357c692353ebad68d9cf20622f949831bb41f2f68097e85b31284472d13e98d86a0f89dafcc3c51891e896aad291b80c56fc4a780a5bace64ec9a0a428cc79ea8facda01b3002dadacf2a931f1395796087a31cd1063b33b4953daf3d3921cc1be51c2674a614ddec"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x90)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r5, 0x0, 0x700, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffe96, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x20000000)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000680)=0x3, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = openat$cgroup_int(r2, &(0x7f0000000180)='io.weight\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000540)=0x4, 0x12)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r9, &(0x7f0000007f80)=[{{&(0x7f0000006200)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000006340)=[{&(0x7f0000006280)="09bec6ee42", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)=[{0x10, 0x10f, 0x7}, {0x10, 0x84, 0x1}], 0x20}}], 0x2, 0x480c1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000e00)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
sendto$inet6(r0, 0x0, 0xffffffffffffff65, 0x41, 0x0, 0x0)

116.729906ms ago: executing program 0 (id=3978):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r2, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x0, 0x0}, 0x10)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r5=>0x0, 0x4, 0x2, 0xb8, 0x0, 0x1c, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x7820, 0x80, 0x9, 0x12}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r6, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000900)=""/193, 0xc1, <r7=>0x0, &(0x7f0000000500)=""/19, 0x13}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x27, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x995}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2ebe}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x8, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xd6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x56, 0xc2, &(0x7f0000000240)=""/194, 0x41000, 0x18, '\x00', r5, @fallback=0x4, r6, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x2, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}, @generic="e6c7c164"]}, @nested={0x4, 0x37}]}, 0x34}], 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40)

115.704751ms ago: executing program 2 (id=3979):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)='6', 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0xa, 0x1, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000010)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x1000400000de, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x35c, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x32c, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x372, 0x6, 0x10, 0xc, 0x1d, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "5d33559b1baa74e0bf3ea85c4b28af83f122961c6c920e6dc2405b1670d436965c2fdb01b5651df80dffda9c4c8b015774b13a6b8784f33ec864aa45d5f7ab42c697962a5d566273e0de9a8d1aeee0ced0ffa37ab8245eda3c540fef92329eec0703c8deacd955f0ee027640083c5ee58b9dd495a3b5b614d9f9579dbcb88bb4925298dbb297585e33dc8954aeef92901306b2f89e6dfc0eaab994f81f257497df047b5df496ee7ad911542a0229abae8e5800d550e36a8d1f57a8cad9ce6794415db537a563133c2763a7a72feb967adfbd7191f502c55a26f42ab80d9e42e942c97b4e8b65a1a695093a78205b75213eafd6afa58edb30f172787fc9b0e5d3"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "f89f11043fef2954dad9668a13a0c240b36946cdf94dae9adca9878465dc268dd25ba8b978923480897f1f34c5836e33c08473adce4b480203fc391e70a0ce534d17f22e9e595fb5900d4362262ca104397444f7c84d0a823a87aef4d551d30f0ad52541a6d0f93f9cc41c0b659fff4e317f30d95d4d400333c04d56d3d175d4f1e01754bd67eb0411163c5c04384d8542b7f5d917ddcfda7a2160288e8266cc6d12a28d6993a7772970c2fdc71f29a6f20afa9803a1a47d68475425d9cf5b77ddc86be2b7e2e09613093ec061654b9612cc8d4ba51319f57ed5738cfed28f3d7e8e910c06188e7f998ea2acad7a54abd90ad930b324a5db22baf79047e01507"}]}}]}, 0x35c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r12, 0x1, 0xfffffffd, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

75.599333ms ago: executing program 0 (id=3980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000078367b5f34bc02220df544634b19eeedfc76d091523d2eba01dc3f83383d194bd1ff109b1f04700b41a5a34bd43f3b1603c3bf20a0ac2cf3dc94f33e25accaef341d6417bf4f7eca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket(0x2b, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x20000084)
connect$x25(r3, &(0x7f0000001600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x13, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910280000000000de500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

0s ago: executing program 0 (id=3981):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={<r1=>0x0, 0x0, "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", "65266b4f83539638ebb03d9405abe0574154f9c3ee34a2110c78ddb08de46ed448bdc01d118a7b2c307103df518fe9ecc91328637dc7f10dc885f0a025d2b1e307c026f95ed77757c2749c27bc35d952cf5ef14b26526d9cf4663ff0c34410b4824df32bf90d4e887443b9be6b57d837a4d404ec7387017fa514a05a78f1dfc390cae1ac66218206e7fc8e790693bbb3a99a84ebfbf76a2f025ed1678ecc806b676f18afd34fa665e5d098ba6ece21284e3ef7ffde96adc28e15d2ed86afeb985bfb6ebf866a25c66d9c5d050ccf221822a577961f16fb814ce0141acefc004d024a718a3db35ad7b3b5ad540956d6675b56fedf92d49e38ec5cbb2fbb85976a6218d5c1164397f529ed371bec57eebc6f7b580361c082db0300bd8c8fe3ee3e1ac62cb20bb95427b61c89f42f3538fc51bf1669e87d5f47e5da7ef6d1e3d64b176b5be6692878c0170d9ec9dc2f9682f39c083e1e260b749d37fe1ce69dfa1b8a32e794884ba743a01f373cfa5a4c2e4feb83d5a14fa754f3faa4701fac7d4339fa6b8c13435b759e596a7c73238f3d0cbbd0be835d68f382a0fc61c4ee964a88201af44f43d5a6b61fc47fea2f7dfb4a1ea4ad35b23e9bc9f772a09fb5a41f59f318aa54f026ad4dfcde0e9d50b1c3cac668f6c56d951f549c8abfa1cc9dc1ffa760907f3639eef7960812f8372b4ce31055dfa6f5d4cfff3676a2d091ff0aa2243d042f877ab0ac4dc4cd1cb9096cba4fd1046c1c15ab00850fba540b86008e4ad4a817be39764e4ca7faf3bf080bc0d963f35fc63751e7ba122b3bf0478e448cb9d07e7c54370f6a9e1b8d359080a75a8ffe985196cf8a0269a2344586fca95feb8b91b45ff724dacc03c8c7f43c6f83f5d5c92b5cb3bc7ed0c421692e94eb1008955f1c7cd8c6f6d9f60008994757615ee854045023fa8efa904e240697fd32b52e95fbb42a671ec8b9979d4165a87a6b4147bce0ca0cf50f87c4fbe3ff483e499dbb833ab2df82b6def778ed48f45ddf8c315670cbc2ed5756007d14418dac73ce1847737d1ce31691525c7f475b84925c88ea663b4cc8fe97de78a393bbfbbf282f4c5ab99f98f1e571f2b94d4899241b9add4908c57e3b4b7d07526568280e576f92e283475d8a1c897623a9a505e1f3be123f8557636675f6f40d0a563163a1a7b99dea06940e1b821258a2e5436c4ca51cb44193cb9a5aa0259ff3987d1ca5423047bfbdc21e56fa2202f57701624d4c148f63f8e2675ce6b6060f029c35018e1e5213d04572fffa59658053027af112be6462b244ecabdad753b1b2b248c711cdc467319958d7bfe5a7fa330570d355a1705262653bae5692b9cb98900ef48cee0080e9443209e2102933eacb13eaed62d72dac83f3d68a75bb26425feaf2cf8ccb0e252c69ca7a90ba20fd5d6af72c803bf61d1845da80e9a708677678e29f5e911c5b1048e8c65b74edb15fa9f4db6de823b11239909a151213416144790cc08a9705a38dd99c2ecb1d2cd01fd4c504b13720d21c2be92738235006966129f700361c60755ead2240f11bab100a967b889d217c37dfad811cfac722479bd31fcc618f5899b614aa915a42698288c257dc4745cd7c7261802391404ba9790c858adeaf9fdc5b1befc2c6e8669095c8c66f3acde271adf041e8aa0d0dd3f86d67f574cc51607ae06b57fb0b41b1e119a79c4f6a9b3c8c1d45e150591f910288b598942d2e6803764bce294f8d66d81fe9a2bcfeba08537210a51444f3607207693a9d23867af3de24bd1388a1473ef720b0c69d20bdb8ef8027b752b38c00f3e0aaa214e5d2dc77c14f5082d3b7bf9f7f289e126a980ce3aa5bbc2bfafd65781620c7a668f03108875e067120ed75cf7c8c4d855dfa8d56b07058c9a09f381b3982ce1a36636f88696f94a7e3621e4b90334dff1af753d750b5fceddad43f57f03528361361a8d167cf6494ec3ee2791d2892e0cba417be660ff98351c0f11aa5db23a5d0e905e98529c897213f678b4c0be2411515d34f29f918f74c07374e66b176cedcfef3bf48e4cded795a781521a8893f66ab009f805eef7827e7f3116167591188f236af1f3b5851bb6cdd1617199177948a4fb97c5ad0c6858ff5f671fc730271ba03add891f917bee473316bccece2103154cb32d56fc6d169580bbc87e25ff5f77c9d967b5abdc387e2a163330c085094296e318de7e091c744ae9f0012e244747a1c0cde46873ee5ebc75043cd4b993e7ba6c4aea0655b13bd029b8bb279ef28741d10d06db63397cbb8562fa0e66010e3592f71d70b20c5017cddac8e5d4703bdaf4b3e675b97cfafad3f14e73a6fa4fcbee37a10c6d8654ba303b42e366da4404589833bcaa32586f6ccddfbf5c1fcd22c22a87ace2d82695f8c822742b674c3f5901b14c307579eb3d603d3f306bbab74dc43abef34152d98e28337e2d91dbfab31dba158fab0aa4beda9ac268dfb53b7d2b17ba4fb357863a1f5c83053f0a63e7c424336561a57bb65abca55731eaa4495829f06eab751da26df983d428a12c0222de0b177b282ffa80bf27d9c8215c27ee6d57a4ec50f973af8603b70530b743c5add754669e72d515cffccea98e78bc1212239e8b1ec5502ee6753c58d1d9f64d83642ac9a0bddb36128d236a717f544c8232143348aab63f94486b93c88a5a87ff3aac2df6480a47bbff9f653e6670b07696159fc48c5ce07ba4f2aa0ad841ce9ec31b34e35c72f50398b31fafaf1b6e24ddc69db41bf789af7325931843b9cb7505d304bcef993d98242390a4c14ab8c09ef9847ae8ee8fe39e654ae8c124441d7982e178e4ac175630287f0db26ba2b5ef319eccb4f27114e7c1093e4d9e19b489de363c1c56e8337de46273fd038943a903e8e68bd6ddb7aa65366def329636f196062cc7383b01fffe94329931f12a608996bc4e467011c7b6fd33235fed73791e62cdb27b0cb6ff5c6c00d88cf0d2162043b5f582ac45f7086ee45bf1dbb38e01e5ce25821eed078851a584f74d39e07ab05a6c76595c11ecab344ad709f86e6a825d6eddf7001941ae2aaba328f608472068e0480b65d036e7170f345518fa84744c498099b52548ea6477132bd4e48457050d052e1ca29b4a5180bc124988173349498ef188158433c8ab4ad73c2702232c8aba62237c945f7ba975212e8a1bf48f4eea3cf38a98a516c708d5407b0fd79ba92fff0acd0a7c73665aaf6f50119a0e2982c23071078e2c007825b6975204dc34d4796c6ee53091cd0ec4c5842e7dc413fc140cf8061ffdbba36d452a42f8efbaef6bb93f81ca8ee5a6ec06aa1b843b7b28d1328a976c38a04e67a7c33c65f8f7d1d79fcc3e56dfe89cb1244777d5cf7c504f41ad28e3032db41bcc122976f370937ba2c130297db7b7d558516b92e044ed257125da0df76c393461ad5acb7bc10e540ab72e72557e7150f05a7ee5934e0608083489c55fd3215688a77593499c68771ef18e1ac46ab4a68fffbe2504e03327bb301d0cb9a5dd4e545dbb5fee0f792339e3b94cbe13234a11d845087b36d26651b2e1d2b5fc59fbb74419d070dc2f55d1f634938d588597a85bafe3341e9e3397bddcba2b8ec47f7d25edc5a5f5a3224556041fd1e5cbed2b89ac1ee465627cad800f99f1dc85cf53cf089956b293dfb26232fee1220fb0e6c81bbbdd9bd2459be1ae8f8cfa985cdb4848d8393dec4dc90383d5b9d6b9f2e1760968824fe00545842ea253d371e05a38205e61964a17f9b6d396d245b3eb1d5228564e2baba56b915562c2bfa8d245d1e827e126c50eed28230d214749acbd7010187df6ddc55357232f5ad27f4367209e24db25ea5bff00936e2141aed4d49a8d43c8cbbb557e975333afbbb7fe870aa008817b398f3997eb515790bfd5acbed008bebbf6793c7b91e3f8514c29425908bde8b34238468899f8e1fa5162e63bc8662a0175e47b1ae0a91aa0846a8c2ca2b4f0393cbad622f82e3ad7a10e078469271f34e73b47c999dccb1cccf8042dbcc899aec785f941df7b3366fdb4596fb387d830ef976a4b1759c5fa07403bf6afa7550d8add02a65e11e5d79a07bcecd246f1bc002cbec091bfd621fc709a337ad59d66c95c643ab4b07f5298476478a5f4625daa47000fd6d15285a30915604b18113d9754d4fd5be458699bbf7c6166139309f8078984946bbd7faef16ff9e619104fce6d8181bdf317e793a39adef65da13b753bf927f3a69bd56d7af70e0180b45c375e16beb0c0eb5791004ff2ad805d6e90bab513a5d2bd80d51172f77a5bd9cd1ff1306afdf75269a23c73b14eabfbfecb4a6cc05de9dc0340da1a6bdf0202827884d60935a503df47145a3a41a7953360f7faf32fb1d41815f56bb2e447268858212ef11647ffee56ded0592627ff6c151948db1495779d62b4f873402463f796c19daeeea4b25b91afabdbe9d3b5f331129adf5079a0ba57173d9ab2884ca4ee4582c2d06395920f180a36426f3affd376dc73c4a69cf521fc067d020ca7063d5cb9430eb7f3524699d1212c28a3e3733346737ce8dee0c666f7c5399f418f47c10b0d6a4e327772906779526858f05513e1a02401c689c7eddbcb3d57f3eb436ef2dccec5ec4fb07add2f645fbc5ff1a2ef7c2173708429e6e2381a8eb7126d8de2e820c72a072d8291831ff842a7827358539a48d9d1bd195d11e629c1e64aca4b002e7f3b7ae82564a7bf97cdbdd7f72c293cd560bbcdce1f0a42d322dec2aa8fd644874293fdc2b43bcba3032d01949cc0d50ea93c17a937d9071edb31a45ba1e2d4069fc90058e0b0d96a35e9dc11ec8e47f94536b61dcc4e90da1cf2be1735830d9b5151c85e9b96c1c1cd23e0361f1caf9b80528a1335b70eec1df285dcb8bbeef81d9aa97b6bba04da4d96ad9797d09cc4b1faa2728080d871362eb075d9949562c078e87353da0c3b5b41bc0681acbd30602ee80cc3e24effcf224cc94e9660a3646ec13c5681bf9fb59e32436ec9ae115b9f58d5eb1837858d53b4d6a04b5079ed1c33a648485bbd98bf19e7127743de46d8f89d8c77ac2048111503f50656a2306d7547e8537f8755372233e24ea6ca4498f5ef33763863f4051bfea5ecfa282d01cc1db0bc9a9041b38987be25b8f20817a560ca3e97a560232e420f9ab837785b789b5a7675030da67c112bffdca009e0931ac4cfb2ebecae7eb21b12335bc88c4b00581df6361d7deaa91a6544d1a3774724118fedf85a25451f3735649f89e7216a6c6bdf0e58230bdeb7dd515685704fa1eeabee68d1d4684b3686755f20439a4e5e7a648e7477414b452a1e362d1780161e165248e049973ed9621052c27f36e243165179ff92a9293d034d0d98866ad7a9688e66a5e2fafb967d819173922939f70"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001000)={r1, 0x0, "d243f5ab3833b6b81e7ad4ce07024f47cc57645b9695006ded00520ad2506b429182d3bf84b410315bb637298a61500b104831a0513c30ea7c5e4c3f5b7fb6ac7507abc56e8ae55db4b41a2bf417c6fdefcd30925aa36f3ea36da5cf29676a599d392093564d5ad409046f95860c7215a6f082af205f7c274678099c4959aeb57f79407965a6a1a9af12914d0187a8f5eec8765913a0b6fed22e1155bb9e1d01c441ddba1805933738aba300c7ebdb19bd3f11f85c93052c8161452bde654c98e7fba85d661669cef447181328e76de52c56f87e5761bbcdfe82f7cd08fb64b790d90a55c827c9942026f7c757f51e52c0b5a9841f1c681ae42dc0d538a92cc3", "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"}) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
clock_gettime(0x0, &(0x7f00000020c0)={<r2=>0x0, <r3=>0x0})
pselect6(0x40, &(0x7f0000002000)={0x1, 0x1800000, 0x9, 0xb46, 0x9, 0x4, 0x1, 0x8}, &(0x7f0000002040)={0x9, 0x0, 0xffff, 0x1, 0x7, 0x54e, 0xffffffffffffffff, 0xfff}, &(0x7f0000002080)={0xae3c, 0x6, 0x8001, 0xffffffff988e87d4, 0x7, 0x6, 0x6, 0x6}, &(0x7f0000002100)={r2, r3+10000000}, &(0x7f0000002180)={&(0x7f0000002140)={[0x84]}, 0x8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x5, &(0x7f0000002200))
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000002240)='syz0\x00', 0x1ff) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002280)={<r6=>r0, 0x5, 0x3, 0xf12})
r7 = openat$cgroup_procs(r6, &(0x7f00000022c0)='cgroup.threads\x00', 0x2, 0x0)
bind$phonet(r0, &(0x7f0000002300)={0x23, 0xff, 0x0, 0x5}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002340)) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x5, &(0x7f0000002380)=0x2, 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x1411, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x880)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000024c0)={<r9=>0x0, 0x50}, &(0x7f0000002500)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000002540)={r9, 0x2, 0x30}, 0xc) (async)
r10 = openat$cgroup_ro(r6, &(0x7f0000002580)='memory.events.local\x00', 0x0, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r10)
sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000003a80)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003a40)={&(0x7f0000002640)={0x13e8, r11, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6fef, 0x52}}}}, [@NL80211_ATTR_TESTDATA={0xca, 0x45, "29e9ba5f393c5de924ae0d953feca39d5a596a906eacc71f2db8eff6e2b691ef4609449d48d5d1085050f76b58990e066662697e2f6f3830546eebdf4d69a50d3ad44d313975681c2fb309ec3b439aaedbad3170172f8062adaa3e55ecb28f5aa84ced41ebdb962aa5509e33d4835c18bf09dfcd2fcbfc4b67d74ba67efb70c442387b6c73a74066df13164f9535b369e0a558e8b9a998f6211d97bd8da68e3d7afe15860568120e3c0e1380623b42402206ad4b304b4bc2b840543724e9758772202e60100d"}, @NL80211_ATTR_TESTDATA={0x90, 0x45, "ae568f3ac1f60d094914bb7c5e0b9c5c09e4581531e3c1cd125937d3777abdf2a14860fea344dc794c73d1232e282dd992e85ae45fc1d04f508ef3f66f8bb4a510737e21731cde583804ca8321d0084e4d21bea0b85f883bb49fa1182a2756f088ff62bae9d0692a947845b26d3ab68371a9146d93bd8785ffb6623eebc56ae3cd01472e9b3159f60b1269e2"}, @NL80211_ATTR_TESTDATA={0xf9, 0x45, "4c443141303fd910e35bfacc2caff39b511288f67da68a2043f15917c33a4bd39832e55a57331933842f4bc1ea471c617c30ecbf6d5294475ec69ea24f4971eb4d6bedc6ce0c938dd5319324042a74698b8298dbf671cd382969679576a1e7c0589f06228f72364620bc2c0906ac7ad97a5bf8572c4b6acb2b3661caf557da9aec790b8ab8a6d9720c84f3bdff4b4210b68e9c3143c9b4ec39226c0bdb0860bb03a8f57bf0d799c935a29954ec27952912555ee20c73676807db115a6acb63e56174daad196243d4bfd7bec0c5d7a6b74944bfbefa50c914617680a33068917719c97ac0ada9fb7ab764e2a47a67ff8529544db742"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x30, 0x45, "77ca222959f82f3555a49d66539a0a01b7b76b68fc8653f9857bfe4d394a634e46b5e0b8026d7c38ac528cac"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "91d6340973f0ff4ae15fdb75425001772a2666a74fb10900f1266933d14d2ee8a3b95e2bd4522eca3b6fff26ebcf219c76fd439cb1e764ceb3ce981e27677dcfee5662cf062786711339d183d4586df17a7e6e85a3be1292ff8a4a1305e531a2e4567f1f83515a38c6cf8c0a9f0e79fa1a69081cef9c4faef33945a5297c3749798dc4c98329f33c3472ed6e6137a0c11e58bb0b"}, @NL80211_ATTR_TESTDATA={0xa3, 0x45, "bb5527f0e3bcfc035bfcdecdbeaee9d87465f666fb4e720b0b920cdeca5da815243695ea568676261f706b4ca1e5954387f9c30252ba471693b5e54055b302b428f88fd5c96cea79c64efebe072444cd7b318ed63bfde510b7e325d5537cd25f7b76c6ea217bfca1161fff806ba2f7af6344f9946837443ec72f54a8a69ba70b8ee9b413f1ba1d0b43a19efa86721223ebab83fb2065747971b6f6f76fdc1a"}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x4000}, 0x4040001) (async)
getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000003ac0)={@loopback, @broadcast, <r12=>0x0}, &(0x7f0000003b00)=0xc)
sendto$phonet(r10, &(0x7f0000003b40)="ea586c92bd329ca4d64cae9dd0ed6ffbaf8edfd9f2b549b8875ab44d7a2a87afa9b989c35dff8ef65f3e2e3fef4728ce76b0e1fdd27601f83408d8091af82730b9b43eacff0d57e49af203cdf0", 0x4d, 0xb6e5a455b84ac719, &(0x7f0000003bc0)={0x23, 0x1, 0x6, 0x6}, 0x10)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003c40), r10)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000003d40)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)={0x64, r13, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x78b}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x88}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x80)
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000003d80)=0x1, 0x4)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000003dc0)=@bloom_filter={0x1e, 0x5, 0x4e, 0xcc, 0x4004, r10, 0xe7de, '\x00', r12, r6, 0x1, 0x5, 0x1}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003e40)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x0, '\x00', r12, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

x87/0x650
[  345.232214][T14845]  ? apparmor_capable+0x126/0x170
[  345.232239][T14845]  skb_clone+0x212/0x3a0
[  345.232260][T14845]  ? nfnetlink_rcv+0x4b0/0x27b0
[  345.232288][T14845]  nfnetlink_rcv+0x4e2/0x27b0
[  345.232325][T14845]  ? lockdep_hardirqs_on+0x7a/0x110
[  345.232345][T14845]  ? __dev_queue_xmit+0x28b/0x3870
[  345.232365][T14845]  ? __local_bh_enable_ip+0xd0/0x130
[  345.232388][T14845]  ? __dev_queue_xmit+0x1efe/0x3870
[  345.232409][T14845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.232439][T14845]  ? __dev_queue_xmit+0x28b/0x3870
[  345.232463][T14845]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  345.232504][T14845]  ? ref_tracker_free+0x693/0x840
[  345.232527][T14845]  ? __copy_skb_header+0xa3/0x4a0
[  345.232550][T14845]  ? __pfx_ref_tracker_free+0x10/0x10
[  345.232591][T14845]  ? skb_clone+0x246/0x3a0
[  345.232615][T14845]  ? __netlink_deliver_tap+0x807/0x850
[  345.232642][T14845]  ? netlink_deliver_tap+0x2e/0x1b0
[  345.232687][T14845]  netlink_unicast+0x80f/0x9b0
[  345.232721][T14845]  ? __pfx_netlink_unicast+0x10/0x10
[  345.232746][T14845]  ? netlink_sendmsg+0x650/0xb40
[  345.232763][T14845]  ? skb_put+0x11b/0x210
[  345.232786][T14845]  netlink_sendmsg+0x813/0xb40
[  345.232812][T14845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  345.232834][T14845]  ? aa_sock_msg_perm+0xf1/0x1b0
[  345.232862][T14845]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  345.232886][T14845]  ____sys_sendmsg+0x972/0x9f0
[  345.232915][T14845]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.232945][T14845]  ? import_iovec+0x73/0xa0
[  345.232969][T14845]  ___sys_sendmsg+0x2a5/0x360
[  345.232997][T14845]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.233054][T14845]  ? __fget_files+0x2a/0x420
[  345.233081][T14845]  ? __fget_files+0x3a0/0x420
[  345.233125][T14845]  __x64_sys_sendmsg+0x1bd/0x2a0
[  345.233149][T14845]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  345.233179][T14845]  ? __pfx_ksys_write+0x10/0x10
[  345.233211][T14845]  do_syscall_64+0x14d/0xf80
[  345.233230][T14845]  ? trace_irq_disable+0x3b/0x150
[  345.233256][T14845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.233275][T14845]  ? clear_bhb_loop+0x40/0x90
[  345.233297][T14845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.233315][T14845] RIP: 0033:0x7f8ec439c799
[  345.233332][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.233348][T14845] RSP: 002b:00007f8ec25f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  345.233368][T14845] RAX: ffffffffffffffda RBX: 00007f8ec4615fa0 RCX: 00007f8ec439c799
[  345.233382][T14845] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  345.233394][T14845] RBP: 00007f8ec25f6090 R08: 0000000000000000 R09: 0000000000000000
[  345.233405][T14845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.233416][T14845] R13: 00007f8ec4616038 R14: 00007f8ec4615fa0 R15: 00007ffcb45565e8
[  345.233446][T14845]  </TASK>
[  345.234627][T14840] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  345.614304][T14853] __nla_validate_parse: 152 callbacks suppressed
[  345.614325][T14853] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2582'.
[  345.631719][T14853] netlink: 'syz.2.2582': attribute type 9 has an invalid length.
[  345.660293][T14853] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2582'.
[  345.681912][T14857] tipc: Resetting bearer <eth:syzkaller0>
[  345.688082][T14853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2582'.
[  347.003063][T14858] tipc: Resetting bearer <eth:syzkaller0>
[  347.087080][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2589'.
[  347.243839][T14885] tipc: Enabled bearer <udp:syz2>, priority 10
[  347.254422][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2588'.
[  347.658047][T14907] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2597'.
[  347.747298][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2596'.
[  347.989393][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2603'.
[  348.010666][T14917] syzkaller0: entered promiscuous mode
[  348.016174][T14917] syzkaller0: entered allmulticast mode
[  348.042800][ T1149] tipc: Resetting bearer <eth:syzkaller0>
[  348.360453][T14946] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2610'.
[  348.512561][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'.
[  348.538535][T14959] syzkaller0: entered promiscuous mode
[  348.547238][T14959] syzkaller0: entered allmulticast mode
[  348.615975][T14969] IPVS: length: 24 != 16106127384
[  348.734737][T14967] syzkaller0: entered promiscuous mode
[  348.740978][T14967] syzkaller0: entered allmulticast mode
[  348.885581][T14980] dummy0: entered promiscuous mode
[  348.942345][T14980] dummy0: left promiscuous mode
[  349.224037][T14999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.252480][T14999] syzkaller0: entered promiscuous mode
[  349.257984][T14999] syzkaller0: entered allmulticast mode
[  349.344638][T14999] tipc: Resetting bearer <eth:syzkaller0>
[  349.374432][T15009] bridge: RTM_NEWNEIGH with invalid ether address
[  349.382939][T15009] bridge: RTM_NEWNEIGH with invalid ether address
[  349.476430][T15013] netlink: 'syz.0.2628': attribute type 10 has an invalid length.
[  349.522341][T14998] tipc: Resetting bearer <eth:syzkaller0>
[  349.565322][T14998] tipc: Disabling bearer <eth:syzkaller0>
[  349.715845][T15023] netlink: 'syz.4.2634': attribute type 8 has an invalid length.
[  349.757953][T15023] sctp: [Deprecated]: syz.4.2634 (pid 15023) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.757953][T15023] Use struct sctp_sack_info instead
[  349.826171][T15023] pim6reg1: entered promiscuous mode
[  349.839801][T15023] pim6reg1: entered allmulticast mode
[  349.858842][T15031] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  350.091756][T15040] netlink: 'syz.2.2641': attribute type 10 has an invalid length.
[  350.762341][T15097] netlink: 'syz.3.2657': attribute type 11 has an invalid length.
[  350.771008][T15088] __nla_validate_parse: 8 callbacks suppressed
[  350.771026][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'.
[  350.793494][T15088] netlink: 'syz.0.2655': attribute type 2 has an invalid length.
[  350.800846][T15097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2657'.
[  350.827384][T15087] syzkaller0: entered promiscuous mode
[  350.834009][T15087] syzkaller0: entered allmulticast mode
[  350.852589][T15100] sctp: [Deprecated]: syz.2.2658 (pid 15100) Use of int in maxseg socket option.
[  350.852589][T15100] Use struct sctp_assoc_value instead
[  350.874102][T15094] netlink: 'syz.0.2655': attribute type 2 has an invalid length.
[  350.888725][T15097] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2657'.
[  350.916401][T15097] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  350.928418][T15088] !©�9: entered promiscuous mode
[  350.944776][T15094] !©�9: left promiscuous mode
[  350.964900][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'.
[  351.143166][T15115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2661'.
[  352.551423][T15108] veth3: entered promiscuous mode
[  352.573906][T15119] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.756558][T15147] netlink: 'syz.4.2667': attribute type 3 has an invalid length.
[  352.883090][T15154] netem: incorrect gi model size
[  352.907265][T15154] netem: change failed
[  353.006201][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2670'.
[  353.214437][T15171] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2676'.
[  353.290785][T15178] netlink: 'syz.1.2678': attribute type 1 has an invalid length.
[  353.338636][T15178] syzkaller0: entered promiscuous mode
[  353.348134][T15180] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  353.363512][T15178] syzkaller0: entered allmulticast mode
[  353.532888][T15186] openvswitch: netlink: IP tunnel dst address not specified
[  353.626366][T15189] pim6reg: entered allmulticast mode
[  353.704498][T15196] netlink: 'syz.0.2685': attribute type 5 has an invalid length.
[  353.972228][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2690'.
[  354.012555][T15220] netlink: 'syz.1.2692': attribute type 1 has an invalid length.
[  354.100329][T15220] 8021q: adding VLAN 0 to HW filter on device bond6
[  354.147339][T15225] bond6: (slave veth5): Enslaving as an active interface with a down link
[  354.157664][T15224] tipc: Resetting bearer <eth:syzkaller0>
[  354.224474][T15232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  354.268934][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2695'.
[  354.323333][T15223] tipc: Resetting bearer <eth:syzkaller0>
[  354.345315][T15235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2694'.
[  354.373184][T15235] dummy0: entered promiscuous mode
[  354.381273][T15235] dummy0: left promiscuous mode
[  354.596172][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  355.014430][T15271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.161106][T15275] syzkaller0: mtu less than device minimum
[  355.781528][T15314] __nla_validate_parse: 8 callbacks suppressed
[  355.781573][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'.
[  355.827261][T15320] netlink: 'syz.3.2721': attribute type 4 has an invalid length.
[  355.908040][T15329] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  356.187670][T15350] tipc: Cannot configure node identity twice
[  356.406050][T15357] geneve2: entered promiscuous mode
[  356.439914][T15357] geneve2: entered allmulticast mode
[  356.449123][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  356.481930][   T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  356.529826][   T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  356.568201][   T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  356.768197][T15373] netlink: 'syz.1.2739': attribute type 2 has an invalid length.
[  357.232204][T15397] netlink: 'syz.1.2748': attribute type 64 has an invalid length.
[  357.305393][T15401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2747'.
[  357.322546][T15397] ieee802154 phy0 wpan0: encryption failed: -22
[  357.498132][T15403] netlink: 'syz.1.2749': attribute type 13 has an invalid length.
[  357.538684][T15403] netlink: 'syz.1.2749': attribute type 17 has an invalid length.
[  357.558962][T15403] netlink: 'syz.1.2749': attribute type 27 has an invalid length.
[  357.607195][T15409] netlink: 'syz.0.2750': attribute type 11 has an invalid length.
[  357.620921][T15409] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2750'.
[  357.645081][T15410] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.655689][T15410] syzkaller0: mtu less than device minimum
[  358.378216][T15419] team0: left promiscuous mode
[  358.394124][T15419] team_slave_0: left promiscuous mode
[  358.405923][T15419] team_slave_1: left promiscuous mode
[  358.421208][T15419] team0: left allmulticast mode
[  358.426245][T15419] team_slave_0: left allmulticast mode
[  358.432380][T15419] team_slave_1: left allmulticast mode
[  358.471718][T15439] netlink: 'syz.0.2758': attribute type 2 has an invalid length.
[  358.530688][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'.
[  358.755189][T15419] veth0_to_hsr: left promiscuous mode
[  358.770060][T15419] veth0_to_hsr: left allmulticast mode
[  359.085420][T15419] bond1: left promiscuous mode
[  359.128403][T15419] bridge6: left promiscuous mode
[  359.149554][T15419] bridge6: left allmulticast mode
[  359.236377][T15419] gtp0: left promiscuous mode
[  359.244635][T15419] gtp0: left allmulticast mode
[  359.270917][T15419] veth3: left promiscuous mode
[  359.431252][T15439] !: entered promiscuous mode
[  359.436437][   T35] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  359.450119][   T35] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  359.458590][   T35] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.476805][T15452] netlink: 'syz.3.2762': attribute type 4 has an invalid length.
[  359.496429][   T35] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  359.511252][T15452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2762'.
[  359.532546][   T35] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  359.568318][   T35] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.630976][   T35] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  359.647620][   T35] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  359.660568][   T35] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.669099][   T35] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  359.681565][   T35] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  359.692253][   T35] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  359.702232][T15458] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  359.726044][T15459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.755436][T15468] syzkaller0: left promiscuous mode
[  359.760944][T15468] syzkaller0: left allmulticast mode
[  359.767135][T15468] tipc: Resetting bearer <eth:syzkaller0>
[  359.809018][T15459] syzkaller0: entered promiscuous mode
[  359.829958][T15459] syzkaller0: entered allmulticast mode
[  359.946727][T15459] tipc: Resetting bearer <eth:syzkaller0>
[  360.010076][T15457] tipc: Resetting bearer <eth:syzkaller0>
[  360.018114][T15482] FAULT_INJECTION: forcing a failure.
[  360.018114][T15482] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  360.057014][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.4.2769 Not tainted syzkaller #0 PREEMPT(full) 
[  360.057040][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  360.057052][T15482] Call Trace:
[  360.057154][T15482]  <TASK>
[  360.057163][T15482]  dump_stack_lvl+0xe8/0x150
[  360.057336][T15482]  should_fail_ex+0x412/0x560
[  360.057437][T15482]  prepare_alloc_pages+0x22a/0x650
[  360.057495][T15482]  __alloc_frozen_pages_noprof+0x12f/0x380
[  360.057529][T15482]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  360.057585][T15482]  ? __pfx_policy_nodemask+0x10/0x10
[  360.057616][T15482]  ? __lock_acquire+0x6b5/0x2cf0
[  360.057665][T15482]  alloc_pages_mpol+0x232/0x4a0
[  360.057700][T15482]  alloc_pages_noprof+0xa8/0x190
[  360.057726][T15482]  __pud_alloc+0x3a/0x460
[  360.057757][T15482]  handle_mm_fault+0x2040/0x3310
[  360.057792][T15482]  ? mt_find+0x186/0x630
[  360.057878][T15482]  ? __pfx_mt_find+0x10/0x10
[  360.057900][T15482]  ? handle_mm_fault+0xee/0x3310
[  360.057934][T15482]  ? __pfx_handle_mm_fault+0x10/0x10
[  360.057982][T15482]  ? lock_mm_and_find_vma+0xa7/0x340
[  360.058006][T15482]  do_user_addr_fault+0x75b/0x1340
[  360.058057][T15482]  exc_page_fault+0x6a/0xc0
[  360.058105][T15482]  asm_exc_page_fault+0x26/0x30
[  360.058138][T15482] RIP: 0010:rep_movs_alternative+0x30/0x90
[  360.058244][T15482] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  360.058259][T15482] RSP: 0018:ffffc90005467d58 EFLAGS: 00050202
[  360.058305][T15482] RAX: 00007ffffffff001 RBX: 000000000000000a RCX: 000000000000000a
[  360.058317][T15482] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90005467dc0
[  360.058328][T15482] RBP: ffffc90005467eb8 R08: ffffc90005467dc9 R09: 1ffff92000a8cfb9
[  360.058341][T15482] R10: dffffc0000000000 R11: fffff52000a8cfba R12: 000000000000000a
[  360.058352][T15482] R13: 000000000000000a R14: ffffc90005467dc0 R15: 0000200000000000
[  360.058379][T15482]  _copy_from_user+0x7a/0xb0
[  360.058429][T15482]  __sys_connect+0x156/0x450
[  360.058509][T15482]  ? __pfx___sys_connect+0x10/0x10
[  360.058541][T15482]  ? __pfx_ksys_write+0x10/0x10
[  360.058577][T15482]  __x64_sys_connect+0x7a/0x90
[  360.058596][T15482]  do_syscall_64+0x14d/0xf80
[  360.058613][T15482]  ? trace_irq_disable+0x3b/0x150
[  360.058655][T15482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.058673][T15482]  ? clear_bhb_loop+0x40/0x90
[  360.058705][T15482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.058722][T15482] RIP: 0033:0x7f541b59c799
[  360.058739][T15482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.058754][T15482] RSP: 002b:00007f541c523028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  360.058773][T15482] RAX: ffffffffffffffda RBX: 00007f541b815fa0 RCX: 00007f541b59c799
[  360.058785][T15482] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004
[  360.058796][T15482] RBP: 00007f541c523090 R08: 0000000000000000 R09: 0000000000000000
[  360.058807][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.058817][T15482] R13: 00007f541b816038 R14: 00007f541b815fa0 R15: 00007ffd3785e7e8
[  360.058848][T15482]  </TASK>
[  360.391272][T15457] tipc: Disabling bearer <eth:syzkaller0>
[  360.402386][T15484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2771'.
[  360.430543][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'.
[  360.439756][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2771'.
[  360.448716][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'.
[  360.458763][T15484] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2771'.
[  360.610852][T15500] netlink: 'syz.1.2774': attribute type 15 has an invalid length.
[  360.684556][T15500] netlink: 'syz.1.2774': attribute type 18 has an invalid length.
[  360.873838][T15517] __nla_validate_parse: 5 callbacks suppressed
[  360.873858][T15517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2778'.
[  361.669573][T15537] netlink: 'syz.4.2784': attribute type 6 has an invalid length.
[  361.678867][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.691946][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.710182][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.718343][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.726787][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.747146][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.755354][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.763538][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.772226][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.799892][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.490646][T15538] chnl_net:caif_netlink_parms(): no params data found
[  362.796728][T15538] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.805233][T15538] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.822880][T15538] bridge_slave_0: entered allmulticast mode
[  362.831880][T15538] bridge_slave_0: entered promiscuous mode
[  362.842088][T15591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.884666][T15538] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.895280][T15538] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.904374][T15538] bridge_slave_1: entered allmulticast mode
[  362.913066][T15538] bridge_slave_1: entered promiscuous mode
[  362.927274][T15591] syzkaller0: entered promiscuous mode
[  362.935437][T15591] syzkaller0: entered allmulticast mode
[  363.022869][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.051884][T15591] tipc: Resetting bearer <eth:syzkaller0>
[  363.081531][T15589] tipc: Resetting bearer <eth:syzkaller0>
[  363.119093][T15589] tipc: Disabling bearer <eth:syzkaller0>
[  363.151681][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.341203][T15538] team0: Port device team_slave_0 added
[  363.364307][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'.
[  363.382787][T15538] team0: Port device team_slave_1 added
[  363.448583][T15624] tipc: Resetting bearer <eth:syzkaller0>
[  363.458501][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.465711][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.513098][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.711099][T15625] syzkaller0: entered promiscuous mode
[  363.732141][T15625] syzkaller0: entered allmulticast mode
[  363.769732][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.776717][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  363.829599][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.900245][ T5834] Bluetooth: hci5: command tx timeout
[  364.020903][T15538] hsr_slave_0: entered promiscuous mode
[  364.027769][T15538] hsr_slave_1: entered promiscuous mode
[  364.050511][T15538] debugfs: 'hsr0' already exists in 'hsr'
[  364.056284][T15538] Cannot create hsr debugfs directory
[  364.282905][T15626] tipc: Resetting bearer <eth:syzkaller0>
[  364.424581][T15538] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.591208][T15538] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.777393][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.787296][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.796985][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.808731][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.818567][T15670] netlink: 'syz.2.2814': attribute type 6 has an invalid length.
[  365.490517][T15538] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.585351][   T58] tipc: Resetting bearer <eth:syzkaller0>
[  365.638674][T15538] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.720220][T15695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.873214][T15703] ip6t_srh: unknown srh invflags 4000
[  365.884442][T15700] netlink: 'syz.3.2821': attribute type 1 has an invalid length.
[  365.941817][T15700] bond2: entered promiscuous mode
[  365.943374][T15709] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  365.947354][T15700] 8021q: adding VLAN 0 to HW filter on device bond2
[  365.979989][ T5834] Bluetooth: hci5: command tx timeout
[  366.011889][T15538] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  366.071041][T15538] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  366.111205][T15538] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  366.170744][T15538] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  366.427062][T15538] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.451172][T15742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.488992][T15538] 8021q: adding VLAN 0 to HW filter on device team0
[  366.515639][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.522876][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.566121][ T1149] tipc: Resetting bearer <eth:syzkaller0>
[  366.581552][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2836'.
[  366.593477][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.600660][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.735449][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'.
[  366.754471][T15760] netlink: 'syz.1.2838': attribute type 5 has an invalid length.
[  366.772665][T15760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2838'.
[  366.930050][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'.
[  367.207442][T15786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.281019][T15792] syzkaller0: entered promiscuous mode
[  367.296740][T15792] syzkaller0: entered allmulticast mode
[  367.316823][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'.
[  367.344251][T15790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2845'.
[  367.373498][T15538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.388677][T15790] ip6tnl2: entered promiscuous mode
[  367.408028][T15790] ip6tnl2: entered allmulticast mode
[  367.420968][T15785] tipc: Resetting bearer <eth:syzkaller0>
[  367.496409][T15785] tipc: Disabling bearer <eth:syzkaller0>
[  367.513953][T15800] FAULT_INJECTION: forcing a failure.
[  367.513953][T15800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.540189][T15800] CPU: 0 UID: 0 PID: 15800 Comm: syz.3.2850 Not tainted syzkaller #0 PREEMPT(full) 
[  367.540216][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  367.540230][T15800] Call Trace:
[  367.540237][T15800]  <TASK>
[  367.540245][T15800]  dump_stack_lvl+0xe8/0x150
[  367.540278][T15800]  should_fail_ex+0x412/0x560
[  367.540313][T15800]  _copy_to_user+0x31/0xb0
[  367.540337][T15800]  simple_read_from_buffer+0xe1/0x170
[  367.540385][T15800]  proc_fail_nth_read+0x1bb/0x230
[  367.540437][T15800]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  367.540467][T15800]  ? rw_verify_area+0x2a6/0x4d0
[  367.540486][T15800]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  367.540512][T15800]  vfs_read+0x20c/0xa70
[  367.540530][T15800]  ? __pfx_aa_sk_perm+0x10/0x10
[  367.540665][T15800]  ? __pfx_vfs_read+0x10/0x10
[  367.540681][T15800]  ? rfcomm_sock_connect+0x16e/0x640
[  367.540766][T15800]  ? bpf_lsm_socket_connect+0x9/0x20
[  367.540797][T15800]  ? __sys_connect+0x335/0x450
[  367.540817][T15800]  ? __pfx___sys_connect+0x10/0x10
[  367.540841][T15800]  ksys_read+0x150/0x270
[  367.540862][T15800]  ? __pfx_ksys_read+0x10/0x10
[  367.540893][T15800]  do_syscall_64+0x14d/0xf80
[  367.540918][T15800]  ? trace_irq_disable+0x3b/0x150
[  367.540943][T15800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.540962][T15800]  ? clear_bhb_loop+0x40/0x90
[  367.540984][T15800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.541006][T15800] RIP: 0033:0x7f02bf95cfce
[  367.541024][T15800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  367.541039][T15800] RSP: 002b:00007f02bdbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  367.541059][T15800] RAX: ffffffffffffffda RBX: 00007f02bdbf66c0 RCX: 00007f02bf95cfce
[  367.541072][T15800] RDX: 000000000000000f RSI: 00007f02bdbf60a0 RDI: 0000000000000003
[  367.541082][T15800] RBP: 00007f02bdbf6090 R08: 0000000000000000 R09: 0000000000000000
[  367.541093][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.541105][T15800] R13: 00007f02bfc16038 R14: 00007f02bfc15fa0 R15: 00007ffc69dda5d8
[  367.541135][T15800]  </TASK>
[  367.647338][T15538] veth0_vlan: entered promiscuous mode
[  367.927689][T15538] veth1_vlan: entered promiscuous mode
[  367.933166][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'.
[  367.961659][T15538] veth0_macvtap: entered promiscuous mode
[  367.973885][T15538] veth1_macvtap: entered promiscuous mode
[  368.055612][T15538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.063240][ T5834] Bluetooth: hci5: command tx timeout
[  368.079951][T15538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.096021][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.116015][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.143726][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.152740][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.247620][T15828] netlink: 'syz.2.2855': attribute type 21 has an invalid length.
[  368.308104][T15828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2855'.
[  368.439425][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.463221][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.615243][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.634341][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.645771][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.668286][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.712264][T15841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2858'.
[  368.975510][   T29] audit: type=1800 audit(1774074111.621:5): pid=15836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2856" name="memory.events" dev="tmpfs" ino=2936 res=0 errno=0
[  369.158894][T15858] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2861'.
[  370.100605][T15894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.117844][T15895] syzkaller0: entered promiscuous mode
[  370.136773][T15895] syzkaller0: entered allmulticast mode
[  370.149836][ T5834] Bluetooth: hci5: command tx timeout
[  370.377897][T15895] tipc: Resetting bearer <eth:syzkaller0>
[  370.473862][T15895] tipc: Disabling bearer <eth:syzkaller0>
[  371.067032][T15942] netlink: 'syz.2.2882': attribute type 21 has an invalid length.
[  371.319104][T15942] 8021q: adding VLAN 0 to HW filter on device bond6
[  371.342166][T15956] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  371.361625][T15962] veth0: entered promiscuous mode
[  371.491827][T15962] bond0: entered promiscuous mode
[  371.498020][T15962] bond_slave_0: entered promiscuous mode
[  371.507740][T15962] bond_slave_1: entered promiscuous mode
[  371.555432][T15976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.592879][T15977] __nla_validate_parse: 6 callbacks suppressed
[  371.592892][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'.
[  371.644985][T15971] bond0: left promiscuous mode
[  371.662427][T15971] bond_slave_0: left promiscuous mode
[  371.668258][T15971] bond_slave_1: left promiscuous mode
[  371.674757][T15971] veth0: left promiscuous mode
[  372.002011][T16004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2898'.
[  372.005847][T16010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2898'.
[  372.030916][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2896'.
[  372.065921][T16017] netlink: 'syz.2.2901': attribute type 1 has an invalid length.
[  372.124004][T16017] 8021q: adding VLAN 0 to HW filter on device bond7
[  372.203538][T16017] bond7: (slave dummy0): making interface the new active one
[  372.234801][T16017] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  372.452458][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2905'.
[  372.801916][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'.
[  373.072182][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'.
[  373.092418][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'.
[  373.103527][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'.
[  373.147273][T16062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2913'.
[  373.464806][T16079] gretap1: entered promiscuous mode
[  375.052953][T16145] bridge0: entered promiscuous mode
[  375.069534][T16145] macsec1: entered promiscuous mode
[  375.190690][T16151] bridge6: port 1(veth5) entered blocking state
[  375.198527][T16151] bridge6: port 1(veth5) entered disabled state
[  375.235754][T16151] veth5: entered allmulticast mode
[  375.271773][T16151] veth5: entered promiscuous mode
[  375.293928][T16141] netlink: 'syz.4.2934': attribute type 16 has an invalid length.
[  375.344080][T16146] bridge6: port 2(veth7) entered blocking state
[  375.350775][T16146] bridge6: port 2(veth7) entered disabled state
[  375.357323][T16146] veth7: entered allmulticast mode
[  375.365901][T16146] veth7: entered promiscuous mode
[  375.600684][T16170] IPv6: Can't replace route, no match found
[  375.609223][T16170] IPv6: Can't replace route, no match found
[  375.789549][T16173] syzkaller0: entered promiscuous mode
[  375.800883][T16173] syzkaller0: entered allmulticast mode
[  376.620526][T16189] sctp: [Deprecated]: syz.4.2948 (pid 16189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  376.620526][T16189] Use struct sctp_sack_info instead
[  376.641742][T16189] sctp: [Deprecated]: syz.4.2948 (pid 16189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  376.641742][T16189] Use struct sctp_sack_info instead
[  377.001652][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.014954][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.030034][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.038448][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.046731][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.062480][T16211] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  378.071872][ T3550] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  378.072370][ T3550] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  378.089147][T16211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  378.124295][T16211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  378.187863][ T3550] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  378.210411][ T3550] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  378.480496][T16223] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.491051][T16223] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.543840][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  378.631721][T16223] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.641862][T16223] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.731642][T16223] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.742940][T16223] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  378.764801][T16202] chnl_net:caif_netlink_parms(): no params data found
[  378.795095][T16223] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  378.819447][T16223] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  379.094122][T16256] gretap1: entered promiscuous mode
[  379.100746][T16256] batman_adv: batadv0: Adding interface: gretap1
[  379.107036][ T5834] Bluetooth: hci1: command tx timeout
[  379.107088][T16256] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  379.136996][T16256] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  379.157703][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.167568][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  379.246608][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.258254][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  379.272835][T16202] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.280323][T16202] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.302209][T16202] bridge_slave_0: entered allmulticast mode
[  379.318177][T16202] bridge_slave_0: entered promiscuous mode
[  379.359231][T16262] syzkaller0: entered promiscuous mode
[  379.374374][T16262] syzkaller0: entered allmulticast mode
[  379.437557][T16202] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.444966][T16202] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.452542][T16202] bridge_slave_1: entered allmulticast mode
[  379.461774][T16202] bridge_slave_1: entered promiscuous mode
[  379.470283][   T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.478962][   T58] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  379.594426][T16265] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[  381.090256][ T3550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.098545][ T3550] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  381.193664][ T5834] Bluetooth: hci1: command tx timeout
[  381.242832][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.260579][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.274542][T16277] netlink: 'syz.3.2969': attribute type 1 has an invalid length.
[  381.301518][T16202] team0: Port device team_slave_0 added
[  381.307826][T16280] syzkaller0: entered promiscuous mode
[  381.314180][T16275] __nla_validate_parse: 3 callbacks suppressed
[  381.314195][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'.
[  381.350229][T16280] syzkaller0: entered allmulticast mode
[  381.368833][T16202] team0: Port device team_slave_1 added
[  381.406127][T16277] 8021q: adding VLAN 0 to HW filter on device bond3
[  381.445129][T16275] bond3: (slave veth9): Enslaving as an active interface with a down link
[  381.566175][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.580227][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.631736][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.669565][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.676540][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.745793][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.841117][T16308] netlink: 'syz.3.2976': attribute type 1 has an invalid length.
[  381.862704][T16308] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2976'.
[  381.873303][T16308] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2976'.
[  381.883968][T16308] netlink: 'syz.3.2976': attribute type 1 has an invalid length.
[  381.899519][T16308] netlink: 634 bytes leftover after parsing attributes in process `syz.3.2976'.
[  381.905487][T16202] hsr_slave_0: entered promiscuous mode
[  381.914118][T16311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2976'.
[  381.924384][T16202] hsr_slave_1: entered promiscuous mode
[  381.930624][T16202] debugfs: 'hsr0' already exists in 'hsr'
[  381.936453][T16202] Cannot create hsr debugfs directory
[  382.117325][T16319] syzkaller0: entered promiscuous mode
[  382.129723][T16319] syzkaller0: entered allmulticast mode
[  383.260058][ T5834] Bluetooth: hci1: command tx timeout
[  383.638757][T16329] syzkaller1: entered promiscuous mode
[  383.644665][T16329] syzkaller1: entered allmulticast mode
[  383.660206][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'.
[  383.805479][T16339] bond8: option mode: invalid value (254)
[  383.813638][T16339] bond8 (unregistering): Released all slaves
[  383.943988][T16339] syz.2.2984 (16339) used obsolete PPPIOCDETACH ioctl
[  384.008021][T16350] ieee802154 phy0 wpan0: encryption failed: -22
[  384.587875][T16378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.756633][T16202] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  384.810216][T16202] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  384.828037][T16202] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  384.908301][T16386] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  384.921514][T16386] bond4 (unregistering): Released all slaves
[  384.947089][T16202] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  385.166914][T16202] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.235620][T16202] 8021q: adding VLAN 0 to HW filter on device team0
[  385.277544][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.284745][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.303994][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3001'.
[  385.317141][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  385.329564][T16403] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  385.339706][ T5834] Bluetooth: hci1: command tx timeout
[  385.391426][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.398630][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.630360][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3003'.
[  386.017971][T16202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.029987][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'.
[  386.052169][T16441] pim6reg: entered allmulticast mode
[  386.068067][T16441] pim6reg: left allmulticast mode
[  386.103883][T16442] veth3: entered promiscuous mode
[  386.113054][T16442] ipt_ECN: cannot use operation on non-tcp rule
[  386.138236][T16445] gre0: entered promiscuous mode
[  386.159338][T16445] gre0: entered allmulticast mode
[  386.456055][T16459] netlink: 'syz.2.3014': attribute type 2 has an invalid length.
[  386.465736][T16459] netlink: 'syz.2.3014': attribute type 1 has an invalid length.
[  386.476596][T16459] __nla_validate_parse: 1 callbacks suppressed
[  386.476612][T16459] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3014'.
[  386.493255][T16460] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  386.573746][T16202] veth0_vlan: entered promiscuous mode
[  386.675062][T16202] veth1_vlan: entered promiscuous mode
[  386.716598][T16475] bond0: entered promiscuous mode
[  386.759821][T16475] bond_slave_0: entered promiscuous mode
[  386.781321][T16475] bond_slave_1: entered promiscuous mode
[  386.808936][T16475] bond0: left promiscuous mode
[  386.847982][T16475] bond_slave_0: left promiscuous mode
[  386.866599][T16475] bond_slave_1: left promiscuous mode
[  386.903373][T16485] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3021'.
[  386.971232][T16202] veth0_macvtap: entered promiscuous mode
[  386.996107][T16202] veth1_macvtap: entered promiscuous mode
[  387.021998][T16202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.051958][T16202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.083019][  T106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.110124][  T106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.127562][T16487] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3022'.
[  387.140865][T16487] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3022'.
[  387.158143][  T106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.227437][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.240890][T16493] netlink: 'syz.3.3024': attribute type 1 has an invalid length.
[  387.427716][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.454019][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.648908][T16512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3028'.
[  387.682705][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.699417][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.823102][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.860124][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.909006][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.940322][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.995122][T16522] netlink: 'syz.0.3032': attribute type 10 has an invalid length.
[  388.003271][T16522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3032'.
[  388.014032][T16522] dummy0: entered promiscuous mode
[  388.023028][T16522] bridge0: port 3(dummy0) entered blocking state
[  388.041594][T16522] bridge0: port 3(dummy0) entered disabled state
[  388.048178][T16522] dummy0: entered allmulticast mode
[  388.097104][T16522] bridge0: port 3(dummy0) entered blocking state
[  388.103670][T16522] bridge0: port 3(dummy0) entered forwarding state
[  388.365341][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  388.376509][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  388.389697][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  388.410658][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  388.418737][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  388.612445][T16546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3040'.
[  388.981893][T16537] chnl_net:caif_netlink_parms(): no params data found
[  389.415452][T16567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.496739][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  389.504511][T16537] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.518144][T16537] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.526081][T16537] bridge_slave_0: entered allmulticast mode
[  389.534144][T16537] bridge_slave_0: entered promiscuous mode
[  389.589385][T16537] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.616917][T16537] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.678358][T16537] bridge_slave_1: entered allmulticast mode
[  389.697730][T16537] bridge_slave_1: entered promiscuous mode
[  389.764939][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.791992][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.845023][T16594] SET target dimension over the limit!
[  389.915549][T16537] team0: Port device team_slave_0 added
[  390.063861][T16537] team0: Port device team_slave_1 added
[  390.119509][T16586] tipc: Resetting bearer <eth:syzkaller0>
[  390.148540][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.167275][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'.
[  390.167447][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.211868][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.338452][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.428675][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.460866][ T5834] Bluetooth: hci3: command tx timeout
[  390.566347][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.601485][T16586] syzkaller1: entered promiscuous mode
[  390.607013][T16586] syzkaller1: entered allmulticast mode
[  390.691185][T16613] xt_bpf: check failed: parse error
[  390.901378][T16624] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3060'.
[  390.981872][T16585] tipc: Resetting bearer <eth:syzkaller0>
[  391.045479][T16619] bond1: (slave bond_slave_1): Device is not our slave
[  391.071117][T16619] bond1: option active_slave: invalid value (bond_slave_1)
[  391.112272][T16619] bond1 (unregistering): Released all slaves
[  391.149017][T16537] hsr_slave_0: entered promiscuous mode
[  391.156591][T16537] hsr_slave_1: entered promiscuous mode
[  391.164519][T16537] debugfs: 'hsr0' already exists in 'hsr'
[  391.171141][T16537] Cannot create hsr debugfs directory
[  391.227037][ T3550] tipc: Resetting bearer <eth:syzkaller0>
[  391.353582][T16537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.434386][T16537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.525703][T16537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.635420][T16537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.776055][T16660] __nla_validate_parse: 2 callbacks suppressed
[  391.776074][T16660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3069'.
[  392.074579][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'.
[  392.115232][T16537] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  392.143422][T16537] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  392.183014][T16537] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  392.213304][T16537] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  392.363887][T16537] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.388240][T16537] 8021q: adding VLAN 0 to HW filter on device team0
[  392.404518][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.411716][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.424335][T16670] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3072'.
[  392.468723][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.475944][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.538477][T16691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3075'.
[  392.548379][ T5830] Bluetooth: hci3: command tx timeout
[  392.761897][T16698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.910993][T16698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.955174][T16716] netlink: 'syz.4.3078': attribute type 1 has an invalid length.
[  393.033766][T16698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.075668][T16716] macvlan2: entered promiscuous mode
[  393.081142][T16716] macvlan2: entered allmulticast mode
[  393.108017][T16715] syzkaller0: entered promiscuous mode
[  393.114324][T16715] syzkaller0: entered allmulticast mode
[  393.224743][T16698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.360202][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.463245][   T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.507945][ T3550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.548940][  T106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.637825][  T106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.719742][T16537] veth0_vlan: entered promiscuous mode
[  393.745139][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'.
[  393.748036][T16729] delete_channel: no stack
[  393.784132][T16537] veth1_vlan: entered promiscuous mode
[  393.854569][T16537] veth0_macvtap: entered promiscuous mode
[  393.867557][T16537] veth1_macvtap: entered promiscuous mode
[  393.907968][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.924716][T16734] Unknown options in mask 6
[  393.932922][T16734] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  393.964731][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.993747][T16735] syzkaller0: entered promiscuous mode
[  394.016762][T16735] syzkaller0: entered allmulticast mode
[  394.024990][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.042269][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3088'.
[  394.052072][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.070085][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'.
[  394.093702][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.119404][   T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.167363][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3088'.
[  394.173025][T16741] netlink: 'syz.4.3089': attribute type 1 has an invalid length.
[  394.319757][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.335109][T16746] netlink: 'syz.0.3092': attribute type 1 has an invalid length.
[  394.343975][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.374725][T16746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3092'.
[  394.454072][T16757] netlink: 'syz.3.3094': attribute type 1 has an invalid length.
[  394.476570][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.488448][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.499822][T16757] netlink: 'syz.3.3094': attribute type 2 has an invalid length.
[  394.500707][T16755] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3093'.
[  394.619561][ T5830] Bluetooth: hci3: command 0x040f tx timeout
[  394.731654][T16775] openvswitch: netlink: Actions may not be safe on all matching packets
[  394.784371][T16777] syzkaller0: entered promiscuous mode
[  394.796653][T16777] syzkaller0: entered allmulticast mode
[  395.222006][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  395.233248][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  395.243300][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  395.254850][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  395.271442][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  395.380530][T16797] netlink: 'syz.4.3106': attribute type 1 has an invalid length.
[  395.636387][T16804] bridge0: port 1(macsec0) entered blocking state
[  395.642988][T16804] bridge0: port 1(macsec0) entered disabled state
[  395.658898][T16804] macsec0: entered allmulticast mode
[  395.668155][T16804] macsec0: entered promiscuous mode
[  395.993674][T16815] syzkaller0: entered promiscuous mode
[  396.001467][T16815] syzkaller0: entered allmulticast mode
[  396.085089][T16794] chnl_net:caif_netlink_parms(): no params data found
[  396.703521][ T5834] Bluetooth: hci3: command 0x040f tx timeout
[  397.341989][ T5834] Bluetooth: hci2: command tx timeout
[  397.738921][T16794] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.750829][T16794] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.758107][T16794] bridge_slave_0: entered allmulticast mode
[  397.767240][T16794] bridge_slave_0: entered promiscuous mode
[  397.788916][T16870] __nla_validate_parse: 8 callbacks suppressed
[  397.788934][T16870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3123'.
[  397.805599][T16794] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.815203][T16794] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.823626][T16794] bridge_slave_1: entered allmulticast mode
[  397.845739][T16794] bridge_slave_1: entered promiscuous mode
[  397.938358][T16794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.964714][T16794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.016853][T16794] team0: Port device team_slave_0 added
[  398.030959][T16794] team0: Port device team_slave_1 added
[  398.166204][T16794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.174227][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.201083][T16794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.215227][T16893] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3128'.
[  398.216637][T16794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.234019][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.289816][T16794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.400480][T16794] hsr_slave_0: entered promiscuous mode
[  398.407572][T16794] hsr_slave_1: entered promiscuous mode
[  398.414660][T16794] debugfs: 'hsr0' already exists in 'hsr'
[  398.421502][T16794] Cannot create hsr debugfs directory
[  398.474301][T16900] syzkaller0: entered promiscuous mode
[  398.484507][T16900] syzkaller0: entered allmulticast mode
[  398.546550][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'.
[  398.644085][T16907] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3134'.
[  398.674479][T16794] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.715096][T16794] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  398.780160][ T5834] Bluetooth: hci3: command 0x040f tx timeout
[  398.908991][T16794] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.944441][T16794] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  398.974074][T16919] netlink: 'syz.4.3138': attribute type 1 has an invalid length.
[  399.083357][T16920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.095516][T16928] syzkaller0: entered promiscuous mode
[  399.109908][T16928] syzkaller0: entered allmulticast mode
[  399.124262][T16927] bond2: (slave gretap1): making interface the new active one
[  399.137625][T16927] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  399.154550][T16794] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.167504][T16794] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  399.223501][T16919] macvlan2: entered promiscuous mode
[  399.228829][T16919] macvlan2: entered allmulticast mode
[  399.235674][T16919] bond2: entered promiscuous mode
[  399.248297][T16919] gretap1: entered promiscuous mode
[  399.255735][T16919] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  399.263504][T16919] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  399.281567][T16919] bond2: left promiscuous mode
[  399.286336][T16919] gretap1: left promiscuous mode
[  399.317362][T16920] tipc: Resetting bearer <eth:syzkaller0>
[  399.328122][T16794] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.338977][T16794] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  399.407552][T16932] syzkaller0: entered promiscuous mode
[  399.413693][T16932] syzkaller0: entered allmulticast mode
[  399.421734][ T5834] Bluetooth: hci2: command tx timeout
[  399.443966][T16918] tipc: Resetting bearer <eth:syzkaller0>
[  399.481022][T16918] tipc: Disabling bearer <eth:syzkaller0>
[  400.008487][T16971] netlink: 'syz.0.3150': attribute type 2 has an invalid length.
[  400.065997][T16972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3150'.
[  401.157386][T16971] !©�9: entered promiscuous mode
[  401.345317][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'.
[  401.354082][T16794] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  401.385460][T16984] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3155'.
[  401.407954][T16794] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  401.417941][T16794] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  401.444659][T16982] pim6reg1: entered promiscuous mode
[  401.450999][T16982] pim6reg1: entered allmulticast mode
[  401.460403][T16794] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  401.499576][ T5834] Bluetooth: hci2: command tx timeout
[  401.738650][T17002] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  401.753472][T17002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'.
[  401.803945][T16794] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.857044][T17007] Cannot find add_set index 0 as target
[  401.932987][T16794] 8021q: adding VLAN 0 to HW filter on device team0
[  401.940445][T17009] syzkaller0: entered promiscuous mode
[  401.945963][T17009] syzkaller0: entered allmulticast mode
[  401.968877][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.976092][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.987519][T17012] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3162'.
[  402.063247][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.070476][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.123438][T17016] syzkaller0: entered promiscuous mode
[  402.136434][T17016] syzkaller0: entered allmulticast mode
[  402.535604][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'.
[  402.813104][T16794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.882086][T16794] veth0_vlan: entered promiscuous mode
[  402.908432][T16794] veth1_vlan: entered promiscuous mode
[  402.947933][T16794] veth0_macvtap: entered promiscuous mode
[  402.969167][T16794] veth1_macvtap: entered promiscuous mode
[  403.012022][T16794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.055882][T16794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.064970][T17057] syzkaller0: entered promiscuous mode
[  403.071538][T17057] syzkaller0: entered allmulticast mode
[  403.089000][  T106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.108157][  T106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.140616][  T106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.167065][  T106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.384756][T17060] netlink: 'syz.4.3176': attribute type 4 has an invalid length.
[  403.528411][T17068] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.536095][T17068] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.579840][ T5834] Bluetooth: hci2: command tx timeout
[  403.761360][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.776893][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.035538][T17088] vlan2: entered promiscuous mode
[  404.044599][T17088] bridge0: entered promiscuous mode
[  404.050576][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'.
[  404.092600][T17078] syzkaller0: entered promiscuous mode
[  404.098143][T17078] syzkaller0: entered allmulticast mode
[  404.106356][ T1149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.151432][T17102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3183'.
[  404.213700][T17106] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  405.449545][   T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.458485][   T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.490626][   T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.537128][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.569919][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.648633][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'.
[  405.712754][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.759696][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.835533][T17118] bridge0: port 3(dummy0) entered disabled state
[  405.842155][T17118] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.849715][T17118] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.016332][T17118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.038755][T17118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.267824][T17118] macsec1: left promiscuous mode
[  406.278131][T17118] gretap1: left promiscuous mode
[  406.285875][T17118] veth3: left promiscuous mode
[  406.496581][T17134] syzkaller0: entered promiscuous mode
[  406.502563][T17134] syzkaller0: entered allmulticast mode
[  406.508973][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.686920][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.714185][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'.
[  407.083373][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'.
[  408.135985][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.185219][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.361747][T17184] tipc: Started in network mode
[  408.379818][T17184] tipc: Node identity 0a7ecda8c4eb, cluster identity 4711
[  408.387101][T17184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.413103][T17188] syzkaller0: entered promiscuous mode
[  408.420456][T17188] syzkaller0: entered allmulticast mode
[  408.801274][T17202] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3203'.
[  408.825852][T17202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'.
[  408.887102][T17184] tipc: Resetting bearer <eth:syzkaller0>
[  408.947452][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  408.956499][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  408.965933][T17184] tipc: Disabling bearer <eth:syzkaller0>
[  408.977309][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  408.992053][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  409.006591][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  409.195541][ T7038] IPVS: starting estimator thread 0...
[  409.332714][T17220] IPVS: using max 35 ests per chain, 84000 per kthread
[  409.403647][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3210'.
[  409.420979][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'.
[  409.466047][T17228] netlink: 'syz.1.3210': attribute type 14 has an invalid length.
[  409.520590][T17228] netlink: 'syz.1.3210': attribute type 11 has an invalid length.
[  409.547044][T17234] syzkaller0: entered promiscuous mode
[  409.552752][T17234] syzkaller0: entered allmulticast mode
[  410.073827][T17206] chnl_net:caif_netlink_parms(): no params data found
[  410.425338][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'.
[  410.585615][ T1149] macsec0: left allmulticast mode
[  410.596440][ T1149] macsec0: left promiscuous mode
[  410.604338][ T1149] bridge0: port 1(macsec0) entered disabled state
[  410.721008][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'.
[  410.912266][T17305] nbd1: detected capacity change from 0 to 63
[  410.930265][T17312] netlink: 'syz.3.3222': attribute type 1 has an invalid length.
[  410.968854][T17312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3222'.
[  411.044350][ T1149] bond3 (unregistering): (slave geneve3): Releasing active interface
[  411.056853][ T1149] bond2 (unregistering): (slave geneve2): Releasing active interface
[  411.101131][ T5834] Bluetooth: hci4: command tx timeout
[  411.354188][ T1149] team0: Port device bridge6 removed
[  411.465189][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.476886][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.487131][ T1149] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  411.497281][ T1149] bond0 (unregistering): Released all slaves
[  411.510964][ T1149] bond1 (unregistering): Released all slaves
[  411.527401][ T1149] bond2 (unregistering): Released all slaves
[  411.542014][ T1149] bond3 (unregistering): Released all slaves
[  411.554746][ T1149] bond4 (unregistering): Released all slaves
[  411.569942][ T1149] bond5 (unregistering): Released all slaves
[  411.593417][ T1149] bond6 (unregistering): Released all slaves
[  411.612554][ T1149] bond7 (unregistering): (slave dummy0): Releasing active interface
[  411.631058][ T1149] bond7 (unregistering): Released all slaves
[  411.647191][ T1149] bond8 (unregistering): Released all slaves
[  411.661078][T17206] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.668216][T17206] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.675710][T17206] bridge_slave_0: entered allmulticast mode
[  411.683987][T17206] bridge_slave_0: entered promiscuous mode
[  411.706924][T17299] lapb5: entered promiscuous mode
[  411.713748][T17299] lapb5: entered allmulticast mode
[  411.722603][ T5830] block nbd1: Receive control failed (result -104)
[  411.851990][T17206] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.860722][T17206] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.868101][T17206] bridge_slave_1: entered allmulticast mode
[  411.877123][T17206] bridge_slave_1: entered promiscuous mode
[  411.887054][ T1149] tipc: Disabling bearer <udp:syz2>
[  411.910769][ T1149] tipc: Left network mode
[  412.021645][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.035445][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'.
[  412.049649][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'.
[  412.078361][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.243496][T17333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.314068][T17330] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  412.353449][T17206] team0: Port device team_slave_0 added
[  412.398844][T17206] team0: Port device team_slave_1 added
[  412.471763][T17337] syzkaller0: entered promiscuous mode
[  412.491159][T17337] syzkaller0: entered allmulticast mode
[  412.554088][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3232'.
[  412.612909][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.635936][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.716830][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.762705][T17352] tap0: tun_chr_ioctl cmd 1074025677
[  412.777849][T17352] tap0: linktype set to 769
[  412.831478][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.844613][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.875692][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.917716][T17368] x_tables: duplicate underflow at hook 1
[  413.036944][T17206] hsr_slave_0: entered promiscuous mode
[  413.054531][T17377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3237'.
[  413.067749][T17206] hsr_slave_1: entered promiscuous mode
[  413.075872][T17206] debugfs: 'hsr0' already exists in 'hsr'
[  413.082070][T17206] Cannot create hsr debugfs directory
[  413.180001][ T5830] Bluetooth: hci4: command tx timeout
[  413.188971][T17377] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  413.224781][T17377] bond3 (unregistering): Released all slaves
[  413.336611][T17379] syzkaller0: entered promiscuous mode
[  413.357558][T17379] syzkaller0: entered allmulticast mode
[  414.877554][T17398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.969812][ T1149] hsr_slave_0: left promiscuous mode
[  415.017424][ T1149] hsr_slave_1: left promiscuous mode
[  415.032816][T17413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3242'.
[  415.099452][T17415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3241'.
[  415.243150][ T1149] team0 (unregistering): Port device team_slave_1 removed
[  415.257590][ T1149] team0 (unregistering): Port device team_slave_0 removed
[  415.260104][ T5830] Bluetooth: hci4: command tx timeout
[  415.283980][T17421] netlink: 'syz.0.3244': attribute type 1 has an invalid length.
[  415.489794][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.498846][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.539226][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.552097][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.575689][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.599882][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.619037][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'.
[  415.638531][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'.
[  416.895714][T17458] syzkaller0: entered promiscuous mode
[  416.920024][T17458] syzkaller0: entered allmulticast mode
[  417.342805][ T5830] Bluetooth: hci4: command tx timeout
[  418.468063][ T1149] IPVS: stop unused estimator thread 0...
[  418.516134][T17478] vlan3: entered promiscuous mode
[  418.525584][T17478] geneve1: entered promiscuous mode
[  418.533247][T17478] vlan3: entered allmulticast mode
[  418.538595][T17478] geneve1: entered allmulticast mode
[  418.553838][T17487] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  418.801605][T17497] netlink: 'syz.4.3255': attribute type 1 has an invalid length.
[  418.975665][T17497] 8021q: adding VLAN 0 to HW filter on device bond3
[  419.024774][T17500] batadv1: entered promiscuous mode
[  419.033713][T17500] batadv1: entered allmulticast mode
[  419.041181][T17500] 8021q: adding VLAN 0 to HW filter on device batadv1
[  419.082192][T17506] bond3: (slave gretap2): making interface the new active one
[  419.092934][T17506] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  419.125530][T17507] bond3 (unregistering): (slave gretap2): Releasing active interface
[  419.155452][T17507] bond3 (unregistering): Released all slaves
[  419.436502][T17523] netlink: 'syz.3.3260': attribute type 10 has an invalid length.
[  419.457109][T17206] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  419.479017][T17206] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  419.536835][T17523] veth0_vlan: left promiscuous mode
[  419.546329][T17523] veth0_vlan: entered promiscuous mode
[  419.572202][T17523] team0: Device veth0_vlan failed to register rx_handler
[  419.601695][T17206] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  419.626817][T17206] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  419.639121][T17530] netlink: 'syz.0.3263': attribute type 14 has an invalid length.
[  419.986552][T17547] syzkaller0: entered promiscuous mode
[  420.002831][T17547] syzkaller0: entered allmulticast mode
[  420.327604][T17571] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001
[  420.521311][T17579] __nla_validate_parse: 14 callbacks suppressed
[  420.521332][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'.
[  421.894238][T17206] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.946720][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3274'.
[  421.971562][T17206] 8021q: adding VLAN 0 to HW filter on device team0
[  421.992659][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.999837][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.045396][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.052601][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.258058][T17599] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3276'.
[  422.304458][T17206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  422.564973][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'.
[  422.613984][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'.
[  422.783420][T17614] hsr_slave_1 (unregistering): left promiscuous mode
[  422.817612][T17639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3284'.
[  423.010694][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.165359][T17206] veth0_vlan: entered promiscuous mode
[  423.207721][T17206] veth1_vlan: entered promiscuous mode
[  423.288145][T17206] veth0_macvtap: entered promiscuous mode
[  423.323391][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3288'.
[  423.334543][T17206] veth1_macvtap: entered promiscuous mode
[  423.352698][T17657] geneve2: entered promiscuous mode
[  423.362831][ T1111] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.372020][ T1111] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.474237][ T1111] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.482884][ T1111] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.513060][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.549538][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.640185][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.649194][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.704979][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.722434][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.941278][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.969309][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.026315][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.035264][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.196768][T17669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3291'.
[  424.218681][T17667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3202'.
[  424.373702][T17676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3292'.
[  424.424405][T17676] netlink: 'syz.0.3292': attribute type 1 has an invalid length.
[  424.590884][T17678] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.598750][T17678] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.736247][T17693] netlink: 'syz.0.3297': attribute type 1 has an invalid length.
[  424.933701][T17678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.953574][T17678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.126102][T17698] netlink: 'syz.3.3298': attribute type 1 has an invalid length.
[  425.188654][T17693] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  425.202101][ T1111] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.291256][ T1111] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.354924][ T1111] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.405436][ T1111] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.589539][ T5830] Bluetooth: hci4: command tx timeout
[  425.710455][T17720] __nla_validate_parse: 6 callbacks suppressed
[  425.710476][T17720] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3305'.
[  425.823665][T17725] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3305'.
[  425.898344][T17723] syzkaller0: entered promiscuous mode
[  425.905490][T17723] syzkaller0: entered allmulticast mode
[  426.333042][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'.
[  426.397099][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.431578][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.604088][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  426.651329][T17745] netlink: 'syz.1.3312': attribute type 9 has an invalid length.
[  426.676362][T17745] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3312'.
[  426.712422][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'.
[  426.734494][T17748] team0 (unregistering): Port device team_slave_0 removed
[  426.815718][T17748] team0 (unregistering): Port device team_slave_1 removed
[  427.129041][T17762] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3315'.
[  427.140687][T17628] Set syz1 is full, maxelem 65536 reached
[  427.214202][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  427.432626][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'.
[  427.571258][T17780] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3319'.
[  427.623363][T17786] netlink: 'syz.2.3321': attribute type 1 has an invalid length.
[  427.713846][T17798] netlink: 'syz.0.3323': attribute type 10 has an invalid length.
[  427.774464][T17798] dummy0: left allmulticast mode
[  427.786966][T17798] dummy0: left promiscuous mode
[  427.805506][T17798] bridge0: port 3(dummy0) entered disabled state
[  427.856163][T17805] netlink: 'syz.2.3324': attribute type 2 has an invalid length.
[  427.954957][T17798] team0: Port device dummy0 added
[  428.032782][T17803] nbd: must specify an index to disconnect
[  429.243745][T17867] ve: renamed from erspan0
[  429.271634][T17857] netlink: 'syz.4.3339': attribute type 1 has an invalid length.
[  429.582302][T17891] netlink: 'syz.3.3347': attribute type 1 has an invalid length.
[  429.825998][T17906] hsr0: entered promiscuous mode
[  429.861012][T17906] hsr_slave_0: left promiscuous mode
[  429.868349][T17906] hsr_slave_1: left promiscuous mode
[  429.878443][T17906] hsr0 (unregistering): left promiscuous mode
[  429.880677][T17912] netlink: 'syz.0.3354': attribute type 1 has an invalid length.
[  429.894850][T17908] syzkaller0: entered promiscuous mode
[  430.009904][T17917] delete_channel: no stack
[  430.016689][T17919] netlink: 'syz.0.3355': attribute type 10 has an invalid length.
[  430.036042][T17919] syz_tun: entered promiscuous mode
[  430.045186][T17919] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  430.068440][T17924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.294601][T17945] IPVS: Error connecting to the multicast addr
[  430.417101][T17951] hsr0: entered promiscuous mode
[  430.789869][T17983] netlink: 'syz.2.3372': attribute type 1 has an invalid length.
[  430.790594][T17987] __nla_validate_parse: 13 callbacks suppressed
[  430.790609][T17987] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3375'.
[  430.797659][T17983] netlink: 944 bytes leftover after parsing attributes in process `syz.2.3372'.
[  430.838831][T17991] tipc: Started in network mode
[  430.844222][T17991] tipc: Node identity de933a003a62, cluster identity 4711
[  430.867065][T17990] netlink: 'syz.1.3377': attribute type 12 has an invalid length.
[  430.885597][T17991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.957662][T17983] vti0: entered promiscuous mode
[  430.988793][T17983] vti0: entered allmulticast mode
[  431.036167][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3380'.
[  431.036298][T17991] tipc: Disabling bearer <eth:syzkaller0>
[  431.092847][T18006] netlink: 'syz.1.3380': attribute type 8 has an invalid length.
[  431.109552][T18006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3380'.
[  431.617748][T18025] tipc: Started in network mode
[  431.648553][T18025] tipc: Node identity be6921baf2ec, cluster identity 4711
[  431.684004][T18025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.708894][T18031] syzkaller0: entered promiscuous mode
[  431.754234][T18031] syzkaller0: entered allmulticast mode
[  431.823384][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'.
[  431.866424][T18031] tipc: Resetting bearer <eth:syzkaller0>
[  432.121445][T17999] tipc: Resetting bearer <eth:syzkaller0>
[  432.182109][T18059] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3392'.
[  432.333377][T17999] tipc: Disabling bearer <eth:syzkaller0>
[  432.890306][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'.
[  432.949891][T18078] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.957611][T18078] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.322656][T18078] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.348243][T18078] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.807700][T18090] netlink: 'syz.1.3402': attribute type 1 has an invalid length.
[  433.816485][T18090] netlink: 'syz.1.3402': attribute type 2 has an invalid length.
[  433.850254][   T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.886828][T18101] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3405'.
[  433.889870][   T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.934808][   T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.966226][   T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.979722][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'.
[  434.015526][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'.
[  434.024560][   T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  434.039603][   T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  434.058602][   T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.080388][   T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.121780][T18108] dummy0: entered promiscuous mode
[  434.127804][T18108] vlan2: entered promiscuous mode
[  434.215328][T18109] gretap0: entered promiscuous mode
[  434.296000][T18109] syz_tun: left promiscuous mode
[  434.317914][T18109] bridge0: left promiscuous mode
[  434.332924][T18118] Bluetooth: MGMT ver 1.23
[  434.356658][T18109] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.372240][T18109] 8021q: adding VLAN 0 to HW filter on device team0
[  434.405342][T18109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.777391][T18136] netlink: 'syz.0.3417': attribute type 6 has an invalid length.
[  435.563546][T18173] netlink: 'syz.2.3424': attribute type 1 has an invalid length.
[  435.656628][T18173] bond1: entered promiscuous mode
[  435.664884][T18173] 8021q: adding VLAN 0 to HW filter on device bond1
[  435.677329][T18185] IPv6: Can't replace route, no match found
[  435.686547][T18185] IPv6: Can't replace route, no match found
[  435.704030][T18182] 8021q: adding VLAN 0 to HW filter on device bond1
[  435.711119][T18182] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  435.722033][T18182] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  435.736144][T18182] bond1: (slave wireguard0): making interface the new active one
[  435.745164][T18182] wireguard0: entered promiscuous mode
[  435.752152][T18182] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  435.996064][ T7042] IPVS: starting estimator thread 0...
[  436.139432][T18205] IPVS: using max 32 ests per chain, 76800 per kthread
[  436.216697][T18217] __nla_validate_parse: 3 callbacks suppressed
[  436.216716][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.249726][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.269219][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.308481][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.364110][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.403779][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.452800][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.463128][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.473528][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'.
[  436.543190][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'.
[  437.728211][T18290] netlink: 'syz.3.3454': attribute type 1 has an invalid length.
[  437.944316][T18301] netlink: 'syz.1.3456': attribute type 13 has an invalid length.
[  438.171654][T18312] bridge0: entered allmulticast mode
[  438.177170][T18312] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  438.603615][ T5895] IPVS: starting estimator thread 0...
[  438.618138][T18337] macvtap1: entered promiscuous mode
[  438.628096][T18337] veth1_to_hsr: entered promiscuous mode
[  438.658640][T18337] macvtap1: entered allmulticast mode
[  438.681076][T18337] veth1_to_hsr: entered allmulticast mode
[  438.709859][T18340] IPVS: using max 30 ests per chain, 72000 per kthread
[  438.892693][  T146] nci: nci_rx_work: unknown MT 0x7
[  440.177440][T18420] sctp: [Deprecated]: syz.4.3489 (pid 18420) Use of struct sctp_assoc_value in delayed_ack socket option.
[  440.177440][T18420] Use struct sctp_sack_info instead
[  440.194317][T18421] sctp: [Deprecated]: syz.4.3489 (pid 18421) Use of struct sctp_assoc_value in delayed_ack socket option.
[  440.194317][T18421] Use struct sctp_sack_info instead
[  441.261133][ T5161] block nbd1: Possible stuck request ffff888048620000: control (read@0,1024B). Runtime 30 seconds
[  441.273022][ T5161] block nbd1: Possible stuck request ffff888048620200: control (read@1024,1024B). Runtime 30 seconds
[  441.284066][ T5161] block nbd1: Possible stuck request ffff888048620400: control (read@2048,1024B). Runtime 30 seconds
[  441.295028][ T5161] block nbd1: Possible stuck request ffff888048620600: control (read@3072,1024B). Runtime 30 seconds
[  441.805444][T18350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.009476][T18432] __nla_validate_parse: 67 callbacks suppressed
[  442.009497][T18432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3494'.
[  442.095008][T18438] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  442.118887][T18438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3495'.
[  442.161185][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3495'.
[  442.184374][T18443] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3498'.
[  442.218813][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'.
[  442.233149][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3497'.
[  443.127283][T18495] 8021q: VLANs not supported on gre0
[  443.283139][T18489] syzkaller0: entered promiscuous mode
[  443.288680][T18489] syzkaller0: entered allmulticast mode
[  443.394338][T18510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3514'.
[  443.575549][T18515] netlink: 'syz.2.3517': attribute type 2 has an invalid length.
[  443.705626][T18525] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3520'.
[  443.748989][T18533] tipc: Started in network mode
[  443.786566][T18533] tipc: Node identity 6ebd592df4c7, cluster identity 4711
[  443.806895][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'.
[  443.849663][T18537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3516'.
[  443.851986][T18533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.968122][T18533] tipc: Disabling bearer <eth:syzkaller0>
[  444.092178][T18552] netlink: 'syz.2.3526': attribute type 1 has an invalid length.
[  444.149678][T18552] bond2: entered promiscuous mode
[  444.154821][T18552] bond2: entered allmulticast mode
[  444.173733][T18552] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.209141][T18561] netlink: 'syz.3.3527': attribute type 4 has an invalid length.
[  444.221077][T18561] netlink: 'syz.3.3527': attribute type 4 has an invalid length.
[  444.261149][T18563] bridge1: entered promiscuous mode
[  444.288164][T18563] bridge1: entered allmulticast mode
[  444.295056][   T58] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  444.322862][T18563] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  444.367342][T18552] bridge2: entered promiscuous mode
[  444.372949][T18552] bridge2: entered allmulticast mode
[  444.379200][T18552] bond2: (slave bridge2): Enslaving as a backup interface with a down link
[  444.448340][  T146] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  444.509155][T18572] batman_adv: batadv0: Adding interface: vlan2
[  444.516137][T18572] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.542784][T18572] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  444.668019][T18580] syzkaller1: entered promiscuous mode
[  444.674995][T18580] syzkaller1: entered allmulticast mode
[  444.786527][T18589] netlink: 'syz.3.3534': attribute type 1 has an invalid length.
[  445.200525][T18600] netlink: 'syz.0.3537': attribute type 5 has an invalid length.
[  445.268617][T18605] netlink: 'syz.0.3537': attribute type 5 has an invalid length.
[  445.314410][T18608] netlink: 'syz.2.3541': attribute type 3 has an invalid length.
[  445.333789][T18608] netlink: 'syz.2.3541': attribute type 1 has an invalid length.
[  445.396363][T18610] netlink: 'syz.4.3542': attribute type 18 has an invalid length.
[  445.622608][T18631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  446.126908][T18648] sctp: [Deprecated]: syz.4.3550 (pid 18648) Use of int in max_burst socket option.
[  446.126908][T18648] Use struct sctp_assoc_value instead
[  446.812731][T18683] lo speed is unknown, defaulting to 1000
[  446.845253][T18679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  446.876905][T18683] lo speed is unknown, defaulting to 1000
[  446.916080][T18683] lo speed is unknown, defaulting to 1000
[  446.969000][T18683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  447.097073][T18683] lo speed is unknown, defaulting to 1000
[  447.118197][T18693] pim6reg1: entered promiscuous mode
[  447.139930][T18693] pim6reg1: entered allmulticast mode
[  447.171809][T18683] lo speed is unknown, defaulting to 1000
[  447.198151][T18683] lo speed is unknown, defaulting to 1000
[  447.215746][T18683] lo speed is unknown, defaulting to 1000
[  447.219135][T18697] __nla_validate_parse: 31 callbacks suppressed
[  447.219154][T18697] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3562'.
[  447.251573][T18683] lo speed is unknown, defaulting to 1000
[  447.322532][T18683] lo speed is unknown, defaulting to 1000
[  447.331733][T18683] lo speed is unknown, defaulting to 1000
[  447.339610][T18683] lo speed is unknown, defaulting to 1000
[  447.346301][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'.
[  447.347166][T18683] lo speed is unknown, defaulting to 1000
[  447.356394][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3563'.
[  447.441924][T18706] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3564'.
[  447.598952][T18712] lo speed is unknown, defaulting to 1000
[  447.617601][T18710] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  447.735231][T18710] 8021q: VLANs not supported on gre0
[  447.913073][T18721] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3567'.
[  447.928291][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3567'.
[  448.068178][T18721] team0 (unregistering): Port device team_slave_0 removed
[  448.106675][T18721] team0 (unregistering): Port device team_slave_1 removed
[  448.132050][T18721] team0 (unregistering): Port device dummy0 removed
[  448.276910][T18747] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3574'.
[  448.371488][T18743] bond1: (slave geneve3): making interface the new active one
[  448.381105][T18743] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  448.388039][T18754] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3576'.
[  448.397126][  T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  448.410586][  T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  448.467341][  T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  448.499980][  T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  448.603818][T18751] syzkaller0: entered promiscuous mode
[  448.615873][T18765] sock: sock_timestamping_bind_phc: sock not bind to device
[  448.625379][T18751] syzkaller0: entered allmulticast mode
[  448.651729][T18766] syzkaller0: entered promiscuous mode
[  448.657241][T18766] syzkaller0: entered allmulticast mode
[  450.371024][T18771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.429990][T18764] tipc: Resetting bearer <eth:syzkaller0>
[  450.562545][T18764] tipc: Disabling bearer <eth:syzkaller0>
[  450.638067][T18794] syzkaller0: entered promiscuous mode
[  450.644492][T18794] syzkaller0: entered allmulticast mode
[  450.722703][T18799] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3587'.
[  450.855062][T18803] syzkaller0: entered promiscuous mode
[  450.865043][T18803] syzkaller0: entered allmulticast mode
[  450.869151][T18806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3590'.
[  450.876013][T18808] syzkaller0: entered promiscuous mode
[  450.887328][T18808] syzkaller0: entered allmulticast mode
[  450.974797][T18813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.071452][T18820] validate_nla: 2 callbacks suppressed
[  451.071470][T18820] netlink: 'syz.3.3593': attribute type 1 has an invalid length.
[  451.224139][T18818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.243126][T18808] tipc: Resetting bearer <eth:syzkaller0>
[  451.316845][T18804] tipc: Resetting bearer <eth:syzkaller0>
[  451.402038][T18804] tipc: Disabling bearer <eth:syzkaller0>
[  452.205420][T18885] netlink: 'syz.1.3610': attribute type 10 has an invalid length.
[  452.221057][T18885] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  452.237262][T18886] __nla_validate_parse: 8 callbacks suppressed
[  452.237283][T18886] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.3607'.
[  452.287676][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'.
[  452.292620][T18886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3607'.
[  452.320061][T18886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3607'.
[  452.330358][T18885] bridge_slave_1: left allmulticast mode
[  452.336017][T18885] bridge_slave_1: left promiscuous mode
[  452.399746][T18885] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.415422][T18885] bridge_slave_0: left allmulticast mode
[  452.423783][T18885] bridge_slave_0: left promiscuous mode
[  452.442433][T18885] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.494323][T18892] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3612'.
[  452.515261][T18885] bond0: (slave bridge0): Releasing backup interface
[  452.620750][T18896] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  452.648922][T18895] netlink: 'syz.0.3614': attribute type 1 has an invalid length.
[  452.762829][T18895] bond1: entered promiscuous mode
[  452.785242][T18895] bond1: entered allmulticast mode
[  452.808039][T18895] 8021q: adding VLAN 0 to HW filter on device bond1
[  452.913477][T18901] erspan1: entered allmulticast mode
[  452.924906][T18901] bond1: (slave erspan1): making interface the new active one
[  452.932579][T18901] erspan1: entered promiscuous mode
[  452.939830][T18901] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  453.037790][T18919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3620'.
[  453.067117][T18908] lo: Caught tx_queue_len zero misconfig
[  453.239227][T18934] IPVS: Error connecting to the multicast addr
[  453.301539][T18938] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3625'.
[  453.439236][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'.
[  453.521667][T18958] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  453.561836][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3627'.
[  453.795152][T18973] sit1: entered promiscuous mode
[  453.986541][T18989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3638'.
[  454.534787][T19017] pim6reg: entered allmulticast mode
[  454.657530][T19017] pim6reg: left allmulticast mode
[  454.675543][T19021] gre0: entered promiscuous mode
[  454.709094][T19021] gre0: entered allmulticast mode
[  454.851305][T19026] netlink: 'syz.3.3650': attribute type 1 has an invalid length.
[  454.859099][T19026] netlink: 'syz.3.3650': attribute type 1 has an invalid length.
[  454.923327][T19024] syzkaller0: entered promiscuous mode
[  454.981596][T19024] syzkaller0: entered allmulticast mode
[  455.037909][T19033] ip6gretap0: entered promiscuous mode
[  455.069564][T19033] ip6gretap0: left promiscuous mode
[  455.143146][ T5834] Bluetooth: hci4: link tx timeout
[  455.158221][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  455.221786][T19048] xt_addrtype: ipv6 does not support BROADCAST matching
[  455.231170][ T5834] Bluetooth: hci4: link tx timeout
[  455.236366][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  456.877509][T19033] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  457.040600][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.101322][T19087] tipc: Failed to remove unknown binding: 66,0,0/0:2137043140/2137043141
[  457.112593][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.130048][T19087] tipc: Failed to remove unknown binding: 66,0,0/0:2137043140/2137043141
[  457.145173][ T5834] Bluetooth: hci4: link tx timeout
[  457.151007][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  457.181957][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  457.196735][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.221786][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.550053][T19115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.630156][T19115] syzkaller0: entered promiscuous mode
[  457.635731][T19115] syzkaller0: entered allmulticast mode
[  457.642205][T19115] tipc: Resetting bearer <eth:syzkaller0>
[  457.776221][T19113] tipc: Resetting bearer <eth:syzkaller0>
[  461.919065][T19113] tipc: Disabling bearer <eth:syzkaller0>
[  461.939746][ T5895] tipc: Node number set to 2591709485
[  462.125638][T19161] lo speed is unknown, defaulting to 1000
[  462.704074][T19193] __nla_validate_parse: 18 callbacks suppressed
[  462.704094][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[  462.846663][T19213] netlink: 'syz.1.3699': attribute type 1 has an invalid length.
[  462.980589][T19211] syzkaller0: entered promiscuous mode
[  462.996408][T19211] syzkaller0: entered allmulticast mode
[  463.040000][T19220] ipt_REJECT: TCP_RESET invalid for non-tcp
[  463.075910][T19225] netlink: 'syz.2.3703': attribute type 1 has an invalid length.
[  464.561723][T19221] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  464.575413][T19225] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  464.664817][T19235] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  464.754816][T19231] lo speed is unknown, defaulting to 1000
[  464.791944][T19252] netlink: 'syz.1.3705': attribute type 2 has an invalid length.
[  464.819537][T19252] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3705'.
[  464.967246][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'.
[  464.989906][T19269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3710'.
[  465.207061][T19284] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  465.306467][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'.
[  465.517367][T19300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  465.667946][T19298] syzkaller0: entered promiscuous mode
[  465.739596][T19298] syzkaller0: entered allmulticast mode
[  467.303614][T19329] veth0_to_bond: mtu less than device minimum
[  467.485166][T19345] syzkaller0: entered promiscuous mode
[  467.500135][T19345] syzkaller0: entered allmulticast mode
[  467.564550][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3726'.
[  467.678215][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'.
[  467.821011][T19370] netlink: 'syz.1.3731': attribute type 58 has an invalid length.
[  467.826454][T19372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3732'.
[  468.001532][T19379] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3736'.
[  468.165134][T19382] syzkaller0: entered promiscuous mode
[  468.177035][T19382] syzkaller0: entered allmulticast mode
[  468.361203][T19402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3741'.
[  469.049191][T19419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3743'.
[  470.474522][T19398] netlink: 'syz.3.3740': attribute type 3 has an invalid length.
[  470.484461][T19426] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  470.841519][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'.
[  470.860402][T19452] netlink: 'syz.3.3753': attribute type 4 has an invalid length.
[  470.862792][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'.
[  471.244891][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'.
[  471.264273][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3759'.
[  471.290363][T19465] can: request_module (can-proto-0) failed.
[  471.301683][T19466] syzkaller0: entered promiscuous mode
[  471.307673][T19466] syzkaller0: entered allmulticast mode
[  471.332633][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'.
[  471.351981][ T5161] block nbd1: Possible stuck request ffff888048620000: control (read@0,1024B). Runtime 60 seconds
[  471.363005][ T5161] block nbd1: Possible stuck request ffff888048620200: control (read@1024,1024B). Runtime 60 seconds
[  471.374068][ T5161] block nbd1: Possible stuck request ffff888048620400: control (read@2048,1024B). Runtime 60 seconds
[  471.385066][ T5161] block nbd1: Possible stuck request ffff888048620600: control (read@3072,1024B). Runtime 60 seconds
[  471.495245][T19481] netlink: 'syz.3.3761': attribute type 1 has an invalid length.
[  471.567181][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3760'.
[  472.934687][T19483] veth3: entered promiscuous mode
[  472.948903][T19481] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  473.184701][T19497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3764'.
[  473.472563][T19525] netlink: 'syz.1.3770': attribute type 7 has an invalid length.
[  473.533326][T19525] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3770'.
[  473.716564][T19534] syzkaller0: entered promiscuous mode
[  473.723243][T19534] syzkaller0: entered allmulticast mode
[  473.907336][T19548] xt_bpf: check failed: parse error
[  473.982584][T19552] IPv6: NLM_F_REPLACE set, but no existing node found!
[  474.080022][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3779'.
[  474.134323][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'.
[  474.171366][T19559] xt_ecn: cannot match TCP bits for non-tcp packets
[  474.374329][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3782'.
[  475.588489][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'.
[  475.600313][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'.
[  475.609886][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'.
[  475.619207][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'.
[  475.628870][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3776'.
[  475.645608][T19554] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  475.702163][ T1149] bond2: (slave bridge1): link status up again after 0 ms
[  475.719918][ T1149] bond2: (slave bridge1): failed to get link speed/duplex
[  475.829367][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  475.866913][T19565] netlink: 'syz.2.3783': attribute type 1 has an invalid length.
[  475.932318][T19565] 8021q: adding VLAN 0 to HW filter on device bond3
[  476.003626][T19579] bond3: (slave veth3): Enslaving as an active interface with a down link
[  476.038621][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  476.100462][T19565] bond3: (slave dummy0): making interface the new active one
[  476.121687][T19565] dummy0: entered promiscuous mode
[  476.127304][T19565] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  476.164582][T19581] lo speed is unknown, defaulting to 1000
[  476.189054][T19579] bond3: (slave dummy0): Releasing active interface
[  476.196102][T19579] dummy0 (unregistering): left promiscuous mode
[  476.351276][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  476.495883][T19608] syzkaller0: entered promiscuous mode
[  476.503002][T19608] syzkaller0: entered allmulticast mode
[  476.528534][ T1149] bond2: (slave bridge1): failed to get link speed/duplex
[  476.647441][T19625] netlink: 'syz.1.3800': attribute type 1 has an invalid length.
[  478.176753][T19634] syzkaller0: entered promiscuous mode
[  478.189387][T19634] syzkaller0: entered allmulticast mode
[  478.212205][ T1149] bond2: (slave bridge1): failed to get link speed/duplex
[  478.231136][T19643] __nla_validate_parse: 89 callbacks suppressed
[  478.231155][T19643] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3804'.
[  478.359585][ T1149] bond2: (slave bridge1): failed to get link speed/duplex
[  478.470039][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  478.563158][T19656] siw: device registration error -23
[  478.579495][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  478.860724][T19680] syzkaller0: entered promiscuous mode
[  478.866216][T19680] syzkaller0: entered allmulticast mode
[  479.646000][T19681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  479.787382][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3821'.
[  479.819901][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3820'.
[  479.835952][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'.
[  479.874111][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3821'.
[  479.914665][T19707] netlink: 'syz.0.3820': attribute type 1 has an invalid length.
[  480.608465][T19705] bridge2: entered promiscuous mode
[  480.615973][T19705] bridge2: port 1(macsec1) entered blocking state
[  480.623203][T19705] bridge2: port 1(macsec1) entered disabled state
[  480.631154][T19705] macsec1: entered allmulticast mode
[  480.636445][T19705] bridge2: entered allmulticast mode
[  480.645273][T19705] macsec1: left allmulticast mode
[  480.650436][T19705] bridge2: left allmulticast mode
[  480.656508][T19705] bridge2: left promiscuous mode
[  480.682374][T19707] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  480.823402][T19720] lo speed is unknown, defaulting to 1000
[  480.832380][   T58] net_ratelimit: 3 callbacks suppressed
[  480.832399][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  480.878248][T19724] 
@0Ù: renamed from bond_slave_1
[  481.074250][T19739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3832'.
[  481.083375][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  481.207315][T19743] lo speed is unknown, defaulting to 1000
[  481.213290][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  481.338019][T19751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.347079][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  481.357331][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3835'.
[  481.449701][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  481.559671][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  481.679454][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  481.789705][   T58] bond2: (slave bridge1): failed to get link speed/duplex
[  481.798281][T19765] openvswitch: netlink: EtherType 50a is less than min 600
[  481.955048][T19761] nbd3: detected capacity change from 0 to 63
[  481.977181][ T5830] block nbd3: Receive control failed (result -32)
[  481.986168][ T5834] block nbd3: Receive control failed (result -32)
[  481.994540][ T8104] block nbd3: Send control failed (result -32)
[  482.002688][T19775] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3841'.
[  482.003030][ T8104] block nbd3: Request send failed, requeueing
[  482.021858][ T5161] block nbd3: Dead connection, failed to find a fallback
[  482.028926][ T5161] block nbd3: shutting down sockets
[  482.036545][ T5161] blk_print_req_error: 138 callbacks suppressed
[  482.036562][ T5161] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.052471][ T5161] buffer_io_error: 138 callbacks suppressed
[  482.052489][ T5161] Buffer I/O error on dev nbd3, logical block 0, async page read
[  482.076150][ T8104] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.087806][ T8104] Buffer I/O error on dev nbd3, logical block 1, async page read
[  482.096049][ T8104] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.112500][ T8104] Buffer I/O error on dev nbd3, logical block 2, async page read
[  482.120578][ T8104] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.130174][ T8104] Buffer I/O error on dev nbd3, logical block 3, async page read
[  482.137990][ T8104] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.147750][ T8104] Buffer I/O error on dev nbd3, logical block 0, async page read
[  482.155644][ T8104] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.165214][ T8104] Buffer I/O error on dev nbd3, logical block 1, async page read
[  482.173194][ T8104] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.191770][ T8104] Buffer I/O error on dev nbd3, logical block 2, async page read
[  482.199657][ T8104] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.209152][ T8104] Buffer I/O error on dev nbd3, logical block 3, async page read
[  482.217404][ T8104] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.232355][ T8104] Buffer I/O error on dev nbd3, logical block 0, async page read
[  482.246483][ T8104] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  482.269403][ T8104] Buffer I/O error on dev nbd3, logical block 1, async page read
[  482.277824][ T8104] ldm_validate_partition_table(): Disk read failed.
[  482.312635][ T8104] Dev nbd3: unable to read RDB block 0
[  482.331049][ T8104]  nbd3: unable to read partition table
[  482.364736][ T8104] ldm_validate_partition_table(): Disk read failed.
[  482.390644][ T8104] Dev nbd3: unable to read RDB block 0
[  482.397149][ T8104]  nbd3: unable to read partition table
[  482.710788][T19800] 
: renamed from bond_slave_0
[  482.730082][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3846'.
[  482.763238][T19800] netlink: 'syz.2.3846': attribute type 3 has an invalid length.
[  482.844833][T19813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3849'.
[  482.995613][T19820] netlink: 'syz.3.3848': attribute type 1 has an invalid length.
[  483.044928][T19820] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.139734][T19820] bond2: (slave ip6erspan0): making interface the new active one
[  483.149659][T19820] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  483.296364][T19829] bond4: Unable to set down delay as MII monitoring is disabled
[  483.401425][T19829] bond4 (unregistering): Released all slaves
[  483.626815][T19839] __nla_validate_parse: 7 callbacks suppressed
[  483.626833][T19839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3855'.
[  483.858884][T19847] ip6tnl3: entered allmulticast mode
[  483.932069][T19851] Bluetooth: MGMT ver 1.23
[  483.962308][T19851] x_tables: duplicate underflow at hook 3
[  484.070927][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3862'.
[  484.104598][T19858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3864'.
[  484.556523][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'.
[  484.723970][T19904] bond1 (unregistering): Released all slaves
[  484.742400][T19908] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3880'.
[  484.972472][T19931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3885'.
[  485.245778][T19943] syzkaller0: entered promiscuous mode
[  485.264192][T19943] syzkaller0: entered allmulticast mode
[  485.788451][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3893'.
[  485.818481][T19964] syzkaller1: entered promiscuous mode
[  485.824824][T19964] syzkaller1: entered allmulticast mode
[  485.859547][   T12] net_ratelimit: 30 callbacks suppressed
[  485.859570][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  485.979817][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  486.099775][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  486.209723][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  486.329641][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  486.439427][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  486.549814][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  486.660003][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  486.769768][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  486.889533][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  487.896039][T19922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  488.086775][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'.
[  488.202887][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'.
[  488.213107][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3895'.
[  488.624819][T20008] netlink: 'syz.1.3907': attribute type 5 has an invalid length.
[  488.648192][T20008] __nla_validate_parse: 31 callbacks suppressed
[  488.648219][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3907'.
[  488.784506][T20021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3912'.
[  488.828982][T20024] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3913'.
[  489.133804][T20035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3916'.
[  489.198419][T20038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3917'.
[  489.326248][T20037] syzkaller0: entered promiscuous mode
[  489.331956][T20037] syzkaller0: entered allmulticast mode
[  489.376465][T20046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3920'.
[  489.841930][ T7042] IPVS: starting estimator thread 0...
[  489.854991][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'.
[  489.934458][T20065] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  489.939983][T20063] IPVS: using max 30 ests per chain, 72000 per kthread
[  490.083120][T20069] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3928'.
[  490.093014][T20069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3928'.
[  490.120300][T20071] netlink: 'syz.1.3927': attribute type 4 has an invalid length.
[  490.181328][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3928'.
[  490.999619][ T1111] net_ratelimit: 21 callbacks suppressed
[  490.999637][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  491.055167][T20049] lo speed is unknown, defaulting to 1000
[  491.260151][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  491.409450][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  491.532077][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  491.602907][T20116] pim6reg1: entered promiscuous mode
[  491.608375][T20116] pim6reg1: entered allmulticast mode
[  491.689702][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  491.802939][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  491.939401][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  491.955153][T20142] netlink: 'syz.3.3949': attribute type 4 has an invalid length.
[  491.997114][T20142] netlink: 'syz.3.3949': attribute type 4 has an invalid length.
[  492.048832][T20150] netlink: 'syz.0.3953': attribute type 10 has an invalid length.
[  492.057328][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  492.077794][T20150] netlink: 'syz.0.3953': attribute type 10 has an invalid length.
[  492.108518][T20150] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  492.159478][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  492.270106][   T35] bond2: (slave bridge1): failed to get link speed/duplex
[  492.458547][T20175] netlink: 'syz.3.3960': attribute type 10 has an invalid length.
[  492.470026][T20176] bridge_slave_0: default FDB implementation only supports local addresses
[  492.479816][T20178] bridge_slave_0: default FDB implementation only supports local addresses
[  493.008255][T20210] sctp: [Deprecated]: syz.3.3969 (pid 20210) Use of struct sctp_assoc_value in delayed_ack socket option.
[  493.008255][T20210] Use struct sctp_sack_info instead
[  493.451963][T20235] nbd: socks must be embedded in a SOCK_ITEM attr
[  493.463910][T20235] block nbd4: shutting down sockets
[  493.554332][T20235] 8021q: adding VLAN 0 to HW filter on device bond5
[  493.581129][T20235] 
[  493.583491][T20235] ======================================================
[  493.590512][T20235] WARNING: possible circular locking dependency detected
[  493.597710][T20235] syzkaller #0 Not tainted
[  493.602124][T20235] ------------------------------------------------------
[  493.609126][T20235] syz.2.3979/20235 is trying to acquire lock:
[  493.615171][T20235] ffffffff8e883040 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  493.624491][T20235] 
[  493.624491][T20235] but task is already holding lock:
[  493.631837][T20235] ffff888040489538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  493.641180][T20235] 
[  493.641180][T20235] which lock already depends on the new lock.
[  493.641180][T20235] 
[  493.651583][T20235] 
[  493.651583][T20235] the existing dependency chain (in reverse order) is:
[  493.660589][T20235] 
[  493.660589][T20235] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  493.668251][T20235]        __mutex_lock+0x19f/0x1300
[  493.673495][T20235]        __ipv6_dev_mc_inc+0x4e/0xa50
[  493.678863][T20235]        __ipv6_sock_mc_join+0x503/0x750
[  493.684484][T20235]        ipv6_mcast_join_leave+0x1a2/0x240
[  493.690354][T20235]        do_ipv6_setsockopt+0x190e/0x3150
[  493.696074][T20235]        ipv6_setsockopt+0x59/0x170
[  493.701259][T20235]        do_sock_setsockopt+0x17c/0x1b0
[  493.706793][T20235]        __x64_sys_setsockopt+0x13d/0x1b0
[  493.712500][T20235]        do_syscall_64+0x14d/0xf80
[  493.717600][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.724007][T20235] 
[  493.724007][T20235] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  493.731730][T20235]        lock_sock_nested+0x41/0x100
[  493.737082][T20235]        inet_shutdown+0x6a/0x390
[  493.742174][T20235]        nbd_mark_nsock_dead+0x2e9/0x560
[  493.747907][T20235]        sock_shutdown+0x15e/0x260
[  493.753014][T20235]        nbd_clear_sock+0x24/0x170
[  493.758112][T20235]        nbd_config_put+0x2dd/0x580
[  493.763302][T20235]        nbd_genl_connect+0x19d5/0x1cf0
[  493.768832][T20235]        genl_family_rcv_msg_doit+0x22a/0x330
[  493.774976][T20235]        genl_rcv_msg+0x61c/0x7a0
[  493.780004][T20235]        netlink_rcv_skb+0x232/0x4b0
[  493.785347][T20235]        genl_rcv+0x28/0x40
[  493.789843][T20235]        netlink_unicast+0x80f/0x9b0
[  493.795119][T20235]        netlink_sendmsg+0x813/0xb40
[  493.800525][T20235]        ____sys_sendmsg+0x972/0x9f0
[  493.805797][T20235]        ___sys_sendmsg+0x2a5/0x360
[  493.810990][T20235]        __x64_sys_sendmsg+0x1bd/0x2a0
[  493.816435][T20235]        do_syscall_64+0x14d/0xf80
[  493.821537][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.827938][T20235] 
[  493.827938][T20235] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  493.835574][T20235]        __mutex_lock+0x19f/0x1300
[  493.840674][T20235]        nbd_queue_rq+0x37b/0x1100
[  493.845773][T20235]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  493.851933][T20235]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  493.858819][T20235]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  493.865310][T20235]        blk_mq_run_hw_queue+0x348/0x4f0
[  493.870954][T20235]        blk_mq_dispatch_list+0xd16/0xe10
[  493.876748][T20235]        blk_mq_flush_plug_list+0x48d/0x570
[  493.882627][T20235]        __blk_flush_plug+0x3ed/0x4d0
[  493.888051][T20235]        __submit_bio+0x28d/0x580
[  493.893067][T20235]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  493.899208][T20235]        block_read_full_folio+0x599/0x830
[  493.905029][T20235]        filemap_read_folio+0x137/0x3b0
[  493.910575][T20235]        do_read_cache_folio+0x358/0x590
[  493.916197][T20235]        read_part_sector+0xb6/0x2b0
[  493.921537][T20235]        adfspart_check_ICS+0xa5/0xa40
[  493.926985][T20235]        bdev_disk_changed+0x7ba/0x1550
[  493.932517][T20235]        blkdev_get_whole+0x380/0x510
[  493.937947][T20235]        bdev_open+0x31e/0xd30
[  493.942699][T20235]        blkdev_open+0x470/0x610
[  493.947628][T20235]        do_dentry_open+0x785/0x14e0
[  493.952907][T20235]        vfs_open+0x3b/0x340
[  493.957486][T20235]        path_openat+0x2e08/0x3860
[  493.962603][T20235]        do_file_open+0x23e/0x4a0
[  493.967614][T20235]        do_sys_openat2+0x113/0x200
[  493.972804][T20235]        __x64_sys_openat+0x138/0x170
[  493.978168][T20235]        do_syscall_64+0x14d/0xf80
[  493.983264][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.989663][T20235] 
[  493.989663][T20235] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  493.996867][T20235]        __mutex_lock+0x19f/0x1300
[  494.001967][T20235]        nbd_queue_rq+0xc6/0x1100
[  494.006984][T20235]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  494.013040][T20235]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  494.019876][T20235]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  494.026365][T20235]        blk_mq_run_hw_queue+0x348/0x4f0
[  494.031983][T20235]        blk_mq_dispatch_list+0xd16/0xe10
[  494.037687][T20235]        blk_mq_flush_plug_list+0x48d/0x570
[  494.043572][T20235]        __blk_flush_plug+0x3ed/0x4d0
[  494.048940][T20235]        __submit_bio+0x28d/0x580
[  494.053974][T20235]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  494.060117][T20235]        block_read_full_folio+0x599/0x830
[  494.065920][T20235]        filemap_read_folio+0x137/0x3b0
[  494.071460][T20235]        do_read_cache_folio+0x358/0x590
[  494.077082][T20235]        read_part_sector+0xb6/0x2b0
[  494.082361][T20235]        adfspart_check_ICS+0xa5/0xa40
[  494.087806][T20235]        bdev_disk_changed+0x7ba/0x1550
[  494.093340][T20235]        blkdev_get_whole+0x380/0x510
[  494.098704][T20235]        bdev_open+0x31e/0xd30
[  494.103458][T20235]        blkdev_open+0x470/0x610
[  494.108385][T20235]        do_dentry_open+0x785/0x14e0
[  494.113660][T20235]        vfs_open+0x3b/0x340
[  494.118242][T20235]        path_openat+0x2e08/0x3860
[  494.123341][T20235]        do_file_open+0x23e/0x4a0
[  494.128350][T20235]        do_sys_openat2+0x113/0x200
[  494.133538][T20235]        __x64_sys_openat+0x138/0x170
[  494.138901][T20235]        do_syscall_64+0x14d/0xf80
[  494.143999][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.150402][T20235] 
[  494.150402][T20235] -> #3 (set->srcu){.+.+}-{0:0}:
[  494.157514][T20235]        __synchronize_srcu+0xca/0x3e0
[  494.162987][T20235]        elevator_switch+0x1e8/0x7a0
[  494.168257][T20235]        elevator_change+0x2cc/0x450
[  494.173529][T20235]        elevator_set_default+0x36c/0x430
[  494.179243][T20235]        blk_register_queue+0x366/0x430
[  494.184784][T20235]        __add_disk+0x677/0xd50
[  494.189637][T20235]        add_disk_fwnode+0xfb/0x480
[  494.194825][T20235]        nbd_dev_add+0x72c/0xb50
[  494.199759][T20235]        nbd_init+0x168/0x1f0
[  494.204560][T20235]        do_one_initcall+0x250/0x8d0
[  494.209839][T20235]        do_initcall_level+0x104/0x190
[  494.215347][T20235]        do_initcalls+0x59/0xa0
[  494.220190][T20235]        kernel_init_freeable+0x2a6/0x3e0
[  494.225903][T20235]        kernel_init+0x1d/0x1d0
[  494.230743][T20235]        ret_from_fork+0x51e/0xb90
[  494.235848][T20235]        ret_from_fork_asm+0x1a/0x30
[  494.241127][T20235] 
[  494.241127][T20235] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  494.248941][T20235]        __mutex_lock+0x19f/0x1300
[  494.254041][T20235]        elevator_change+0x1b3/0x450
[  494.259318][T20235]        elevator_set_none+0xb5/0x140
[  494.264689][T20235]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  494.271031][T20235]        nbd_start_device+0x17f/0xb10
[  494.276420][T20235]        nbd_genl_connect+0x165b/0x1cf0
[  494.281977][T20235]        genl_family_rcv_msg_doit+0x22a/0x330
[  494.288126][T20235]        genl_rcv_msg+0x61c/0x7a0
[  494.293143][T20235]        netlink_rcv_skb+0x232/0x4b0
[  494.298425][T20235]        genl_rcv+0x28/0x40
[  494.302918][T20235]        netlink_unicast+0x80f/0x9b0
[  494.308195][T20235]        netlink_sendmsg+0x813/0xb40
[  494.313468][T20235]        ____sys_sendmsg+0x972/0x9f0
[  494.318738][T20235]        ___sys_sendmsg+0x2a5/0x360
[  494.323922][T20235]        __x64_sys_sendmsg+0x1bd/0x2a0
[  494.329367][T20235]        do_syscall_64+0x14d/0xf80
[  494.334473][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.340885][T20235] 
[  494.340885][T20235] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  494.349523][T20235]        blk_alloc_queue+0x546/0x680
[  494.354807][T20235]        __blk_mq_alloc_disk+0x197/0x390
[  494.360445][T20235]        nbd_dev_add+0x499/0xb50
[  494.365371][T20235]        nbd_init+0x168/0x1f0
[  494.370043][T20235]        do_one_initcall+0x250/0x8d0
[  494.375325][T20235]        do_initcall_level+0x104/0x190
[  494.380779][T20235]        do_initcalls+0x59/0xa0
[  494.385624][T20235]        kernel_init_freeable+0x2a6/0x3e0
[  494.391334][T20235]        kernel_init+0x1d/0x1d0
[  494.396178][T20235]        ret_from_fork+0x51e/0xb90
[  494.401286][T20235]        ret_from_fork_asm+0x1a/0x30
[  494.406565][T20235] 
[  494.406565][T20235] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  494.413766][T20235]        __lock_acquire+0x15a5/0x2cf0
[  494.419127][T20235]        lock_acquire+0xf0/0x2e0
[  494.424052][T20235]        fs_reclaim_acquire+0x71/0x100
[  494.429498][T20235]        __kmalloc_cache_noprof+0x40/0x660
[  494.435293][T20235]        __ipv6_dev_mc_inc+0x44f/0xa50
[  494.440745][T20235]        pndisc_constructor+0xe0/0x150
[  494.446193][T20235]        pneigh_create+0x246/0x4b0
[  494.451403][T20235]        neigh_add+0x6ea/0xf70
[  494.456169][T20235]        rtnetlink_rcv_msg+0x77e/0xbe0
[  494.461657][T20235]        netlink_rcv_skb+0x232/0x4b0
[  494.466948][T20235]        netlink_unicast+0x80f/0x9b0
[  494.472252][T20235]        netlink_sendmsg+0x813/0xb40
[  494.477546][T20235]        ____sys_sendmsg+0x972/0x9f0
[  494.482827][T20235]        ___sys_sendmsg+0x2a5/0x360
[  494.488020][T20235]        __x64_sys_sendmsg+0x1bd/0x2a0
[  494.493477][T20235]        do_syscall_64+0x14d/0xf80
[  494.498581][T20235]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.504982][T20235] 
[  494.504982][T20235] other info that might help us debug this:
[  494.504982][T20235] 
[  494.515191][T20235] Chain exists of:
[  494.515191][T20235]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  494.515191][T20235] 
[  494.527782][T20235]  Possible unsafe locking scenario:
[  494.527782][T20235] 
[  494.535287][T20235]        CPU0                    CPU1
[  494.540637][T20235]        ----                    ----
[  494.545985][T20235]   lock(&idev->mc_lock);
[  494.550309][T20235]                                lock(sk_lock-AF_INET6);
[  494.557317][T20235]                                lock(&idev->mc_lock);
[  494.564157][T20235]   lock(fs_reclaim);
[  494.568148][T20235] 
[  494.568148][T20235]  *** DEADLOCK ***
[  494.568148][T20235] 
[  494.576282][T20235] 3 locks held by syz.2.3979/20235:
[  494.581464][T20235]  #0: ffffffff8fbc7dc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  494.590871][T20235]  #1: ffffffff8fcf2ba0 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0
[  494.600366][T20235]  #2: ffff888040489538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  494.610046][T20235] 
[  494.610046][T20235] stack backtrace:
[  494.615927][T20235] CPU: 0 UID: 0 PID: 20235 Comm: syz.2.3979 Not tainted syzkaller #0 PREEMPT(full) 
[  494.615946][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  494.615957][T20235] Call Trace:
[  494.615966][T20235]  <TASK>
[  494.615975][T20235]  dump_stack_lvl+0xe8/0x150
[  494.616000][T20235]  print_circular_bug+0x2e1/0x300
[  494.616025][T20235]  check_noncircular+0x12e/0x150
[  494.616055][T20235]  __lock_acquire+0x15a5/0x2cf0
[  494.616076][T20235]  ? trace_contention_end+0x3d/0x150
[  494.616128][T20235]  ? __mutex_lock+0x319/0x1300
[  494.616146][T20235]  ? kernel_text_address+0xa5/0xe0
[  494.616166][T20235]  lock_acquire+0xf0/0x2e0
[  494.616184][T20235]  ? __kmalloc_cache_noprof+0x40/0x660
[  494.616203][T20235]  ? in6_dev_get+0x1a/0x290
[  494.616222][T20235]  fs_reclaim_acquire+0x71/0x100
[  494.616239][T20235]  ? __kmalloc_cache_noprof+0x40/0x660
[  494.616255][T20235]  __kmalloc_cache_noprof+0x40/0x660
[  494.616271][T20235]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  494.616291][T20235]  __ipv6_dev_mc_inc+0x44f/0xa50
[  494.616314][T20235]  pndisc_constructor+0xe0/0x150
[  494.616330][T20235]  ? __pfx_pndisc_constructor+0x10/0x10
[  494.616346][T20235]  ? pneigh_create+0x15b/0x4b0
[  494.616369][T20235]  pneigh_create+0x246/0x4b0
[  494.616392][T20235]  neigh_add+0x6ea/0xf70
[  494.616411][T20235]  ? __pfx_neigh_add+0x10/0x10
[  494.616437][T20235]  ? __pfx_neigh_add+0x10/0x10
[  494.616452][T20235]  rtnetlink_rcv_msg+0x77e/0xbe0
[  494.616476][T20235]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  494.616497][T20235]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  494.616521][T20235]  ? __lock_acquire+0x6b5/0x2cf0
[  494.616544][T20235]  netlink_rcv_skb+0x232/0x4b0
[  494.616567][T20235]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  494.616590][T20235]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  494.616616][T20235]  ? netlink_deliver_tap+0x2e/0x1b0
[  494.616641][T20235]  netlink_unicast+0x80f/0x9b0
[  494.616664][T20235]  ? __pfx_netlink_unicast+0x10/0x10
[  494.616684][T20235]  ? netlink_sendmsg+0x650/0xb40
[  494.616697][T20235]  ? skb_put+0x11b/0x210
[  494.616714][T20235]  netlink_sendmsg+0x813/0xb40
[  494.616731][T20235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.616746][T20235]  ? aa_sock_msg_perm+0xf1/0x1b0
[  494.616828][T20235]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  494.616846][T20235]  ____sys_sendmsg+0x972/0x9f0
[  494.616863][T20235]  ? futex_unqueue+0x211/0x240
[  494.616891][T20235]  ? __pfx_____sys_sendmsg+0x10/0x10
[  494.616911][T20235]  ? import_iovec+0x73/0xa0
[  494.616952][T20235]  ___sys_sendmsg+0x2a5/0x360
[  494.616971][T20235]  ? __pfx____sys_sendmsg+0x10/0x10
[  494.616990][T20235]  ? futex_wait+0x29a/0x380
[  494.617020][T20235]  ? __fget_files+0x2a/0x420
[  494.617047][T20235]  ? __fget_files+0x3a0/0x420
[  494.617072][T20235]  __x64_sys_sendmsg+0x1bd/0x2a0
[  494.617090][T20235]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  494.617110][T20235]  ? rcu_is_watching+0x15/0xb0
[  494.617135][T20235]  do_syscall_64+0x14d/0xf80
[  494.617151][T20235]  ? trace_irq_disable+0x3b/0x150
[  494.617173][T20235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.617188][T20235]  ? clear_bhb_loop+0x40/0x90
[  494.617205][T20235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.617220][T20235] RIP: 0033:0x7fd47979c799
[  494.617236][T20235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.617250][T20235] RSP: 002b:00007fd47a71a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.617266][T20235] RAX: ffffffffffffffda RBX: 00007fd479a15fa0 RCX: 00007fd47979c799
[  494.617277][T20235] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 000000000000000b
[  494.617287][T20235] RBP: 00007fd479832c99 R08: 0000000000000000 R09: 0000000000000000
[  494.617297][T20235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.617306][T20235] R13: 00007fd479a16038 R14: 00007fd479a15fa0 R15: 00007fff80dea4e8
[  494.617324][T20235]  </TASK>
[  496.039690][   T12] net_ratelimit: 21 callbacks suppressed
[  496.039711][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  496.160049][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  496.269690][   T35] bond2: (slave bridge1): failed to get link speed/duplex
[  496.379671][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  496.489778][   T35] bond2: (slave bridge1): failed to get link speed/duplex
[  496.599369][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  496.709654][  T146] bond2: (slave bridge1): failed to get link speed/duplex
[  496.819650][   T35] bond2: (slave bridge1): failed to get link speed/duplex
[  496.929524][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  497.039387][   T35] bond2: (slave bridge1): failed to get link speed/duplex
[  498.049870][ T5196] udevd[5196]: worker [8117] /devices/virtual/block/nbd1 is taking a long time
[  498.379969][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  501.099830][ T1111] net_ratelimit: 35 callbacks suppressed
[  501.099850][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  501.219845][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  501.329455][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  501.423020][ T5161] block nbd1: Possible stuck request ffff888048620000: control (read@0,1024B). Runtime 90 seconds
[  501.433789][ T5161] block nbd1: Possible stuck request ffff888048620200: control (read@1024,1024B). Runtime 90 seconds
[  501.444990][ T1111] bond2: (slave bridge1): failed to get link speed/duplex
[  501.445032][ T5161] block nbd1: Possible stuck request ffff888048620400: control (read@2048,1024B). Runtime 90 seconds
[  501.463350][ T5161] block nbd1: Possible stuck request ffff888048620600: control (read@3072,1024B). Runtime 90 seconds
[  501.569730][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  501.679451][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  501.789619][ T3550] bond2: (slave bridge1): failed to get link speed/duplex
[  501.899577][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  502.009451][   T12] bond2: (slave bridge1): failed to get link speed/duplex
[  502.129744][   T12] bond2: (slave bridge1): failed to get link speed/duplex