last executing test programs:

15.109741619s ago: executing program 0 (id=3254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$netlink(0x10, 0x3, 0xb)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xfc0, &(0x7f00000017c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xf9e, 0x0, @gue={{0x2, 0x0, 0x3, 0x3, 0x100, @val=0x80}, "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"}}}}}}, 0x0)
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7)
r3 = socket(0x5, 0x3, 0xffff)
getsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$nl_route(r1, 0x0, 0x48094)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x4000805}, 0x80)

14.14537278s ago: executing program 0 (id=3262):
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

13.880272405s ago: executing program 0 (id=3264):
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000a"], 0x30}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x32, @loopback, 0x4e24, 0x1, 'fo\x00', 0x2, 0x10001, 0x3f}, {@local, 0x4e24, 0x2, 0x5, 0x1, 0x3}}, 0x44)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x180, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x100}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6fc0ff41}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040010}, 0x10)

13.635729048s ago: executing program 0 (id=3267):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000002540)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a={0x40, 0x2, 0x3, 0x0, 0xc9, 0x2, 0x3, {0x2, 0x0, "", 0x86, 0x7}, 0x59, 0x2b, 0x13, 0x40}}, 0x13)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

10.310868682s ago: executing program 0 (id=3276):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2dc, @mcast1, 0x9}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
pipe(&(0x7f0000000300))
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r0, 0x9)
r2 = accept$inet6(r0, 0x0, 0x0)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000140))
sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052)
setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "f4c309cbe0c5f9b7", "983c311b226c7f47ff00c81825980c490f1de32323e46c11199322c78f090642", "4e199aeb", "acdbf776fdeb4b87"}, 0x38)

9.437333146s ago: executing program 1 (id=3285):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
socket(0x6, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6a2803, 0x0) (async, rerun: 64)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
socket(0x1e, 0x800, 0x4) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32], 0x38}}, 0x10)
socket$pptp(0x18, 0x1, 0x2) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x1a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x380000}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0x8, 0x8, 0x2, 0xfffffffffffffff0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8c18a1f12ac76131}], 0x1, 0x20044881)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001264090001007866726d000001003654759b0c47ca87808671edea186ec00ea6b0b59a", @ANYRES32=0x0, @ANYBLOB="08000d000b0000000800040001feffff"], 0x4c}, 0x1, 0x0, 0x0, 0x44050}, 0x0)

9.228485067s ago: executing program 1 (id=3287):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0)
unshare(0x6a040000)
unshare(0x10020080)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r1)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8010)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async)
unshare(0x6a040000) (async)
unshare(0x10020080) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r1) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8010) (async)

9.228223868s ago: executing program 0 (id=3288):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x48}}, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
close(0x3)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x60, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44)
close(r1)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r9, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}})

5.359515789s ago: executing program 3 (id=3312):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) (async)
r8 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="4c4712d9456da294f803aec50c441dc5313d9f19ce468aa9d8bc6add644f202924b1fdd2b21437fa897370cf28b63d15172c8892d7712c"], 0x9) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x128, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xd}, {0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x2, 0x3, 0xe, 0x1, 0x4, 0x3, 0x9}}}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x600]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x40, 0x5, 0x2, 0x4}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x5, 0x0, 0x4020, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x2, 0x7, 0x10001, 0x9}}]}}]}, 0x128}}, 0x0) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

5.015808378s ago: executing program 3 (id=3313):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket(0x8, 0x3, 0x96fe)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000001c0)=<r10=>0x0, &(0x7f0000000240)=0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltclass={0x48, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0x9, 0xfff2}, {0xf, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x35}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x80}}, @tclass_kind_options=@c_prio={0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x86dd}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3, 0x1, 0x1, 0x1}, 0x34, 0x3, 0x0, 0x0, "dad49797bc8e1c4b19f0d81d6654de2a14b6f89a79fa2096889625f5ea991259cc819eace682d0040624382f623e121ef81ac7e8ca1cbca78ca072ec98641c2e"}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x20004080)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r11, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x4a}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20008000)

4.786479114s ago: executing program 3 (id=3315):
syz_emit_ethernet(0xb2, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@end, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2) (async)
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xc2)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x1e)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c001400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fba3c97d13b673cf64a8870d0e238e89e27aba6daa7d71d96c1383400b903a13a0d4af44ea3a8e657a"], 0x28}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.67631285s ago: executing program 1 (id=3316):
unshare(0x4030400)

4.497021473s ago: executing program 1 (id=3318):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) (async)
r6 = openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1) (async, rerun: 32)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async, rerun: 32)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) (async)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async, rerun: 64)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.171987028s ago: executing program 1 (id=3319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}}, 0x8000002)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xf5e543ecd220f989, 0x0)
close(r6)
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x8, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x40}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bb", 0x2}], 0x1}, 0x20004014)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bc28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffff}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x190ad186}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x7c}}, 0x8000002) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xf5e543ecd220f989, 0x0) (async)
close(r6) (async)
socket(0x400000000010, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x8, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x40}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bb", 0x2}], 0x1}, 0x20004014) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newchain={0x3c, 0x64, 0x300, 0x70bc28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xffff}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x959}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)

4.17164525s ago: executing program 3 (id=3320):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r0, 0x0, 0x0, 0x2100, &(0x7f0000000400)={0x2, 0x4e24, @private=0xa010100}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r2 = socket$inet6(0x10, 0xa, 0x2)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xff7c)
sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

4.032041028s ago: executing program 2 (id=3321):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="deb2288ad6331506dc1879d75d492f3f49135251a70c7acb0d0e09e96504d0f099f06a4377cfd1b19017e6a65db6cd3ef9fc693244a8ad6614a7946d0929018c9341894829f583837b7f16ec4b9152a949266e9ab7558ffcb345b87a6ae58fae9069141c38885d07b0d8640962735b0266db26aac0dd5734aa533c81b6366b43671d336ae11fe3eb1b6758ed0e85c66fcd8001cded6f5c44e7266ff4f9e66b5ab70222558b64fedb313fc78382197b25b80fe16cadc49f3329bc1978b5a36969cb911be37b455996503362e9191ce777d5036276d035333b2f9e865e4f043da5a71742e61f1c07", 0xe7, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @private0, 0x4}, 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000280)=0x9, 0x4)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000340)=0x4)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x5, 0xfffffffc, {{0x3d, 0x4, 0x3, 0xe, 0xf4, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x44, 0x1a, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x6}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast1, 0x7f}, {@loopback, 0x7}]}, @cipso={0x86, 0x3b, 0x3, [{0x2, 0x7, "f744eb364d"}, {0x0, 0x5, "57e47a"}, {0x5, 0x3, ','}, {0x0, 0x10, "e4095b4020a8d691977776b935ee"}, {0x6, 0xb, "b0db805d90e60bb440"}, {0x5, 0xb, "a9ab5f2e7cab40b148"}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x4, [{@broadcast, 0x9}, {@multicast1, 0x4}, {@broadcast, 0x80000000}]}, @noop, @rr={0x7, 0x23, 0xb8, [@loopback, @loopback, @local, @multicast1, @loopback, @empty, @local, @remote]}, @cipso={0x86, 0x13, 0x3, [{0x5, 0xd, "1af8d2533dc77595b15cf2"}]}, @lsrr={0x83, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000400)={'sit0\x00', <r5=>0x0, 0x8000, 0x8000, 0x5, 0xfffffffc, {{0x3d, 0x4, 0x3, 0xe, 0xf4, 0x68, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x44, 0x1a, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x6}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast1, 0x7f}, {@loopback, 0x7}]}, @cipso={0x86, 0x3b, 0x3, [{0x2, 0x7, "f744eb364d"}, {0x0, 0x5, "57e47a"}, {0x5, 0x3, ','}, {0x0, 0x10, "e4095b4020a8d691977776b935ee"}, {0x6, 0xb, "b0db805d90e60bb440"}, {0x5, 0xb, "a9ab5f2e7cab40b148"}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x4, [{@broadcast, 0x9}, {@multicast1, 0x4}, {@broadcast, 0x80000000}]}, @noop, @rr={0x7, 0x23, 0xb8, [@loopback, @loopback, @local, @multicast1, @loopback, @empty, @local, @remote]}, @cipso={0x86, 0x13, 0x3, [{0x5, 0xd, "1af8d2533dc77595b15cf2"}]}, @lsrr={0x83, 0xb, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000640)=<r7=>0x0, &(0x7f0000000680)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xb, 0x0, 0x4, 0x42, @mcast2, @local, 0x10, 0x10, 0x101, 0x7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0xb, 0x0, 0x4, 0x42, @mcast2, @local, 0x10, 0x10, 0x101, 0x7}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xa004010}, 0x0) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xa004010}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r2) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r2)
bind$tipc(r2, 0x0, 0x0) (async)
bind$tipc(r2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000a00)={<r9=>0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x9, 0x7, 0x3, 0x1, 0x7fffffffffffffff, 0x1000, 0x9, 0x0, 0x0, 0x3, 0x6, 0x7, 0x5, 0x2, 0x6]}, &(0x7f0000000b00)=0x100)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000b40)={r9, 0x2, 0x10}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan1\x00'})
sendmsg$tipc(r2, &(0x7f0000001080)={&(0x7f0000000bc0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000c00)="7bc9aa1ff4b21e988c27f411a73767a8fdc923264a8a23bac6b23084ee3e6c6df13a73f5b0ec83d41b923d8c09348292cde23ad2353865a898eea89d172a5980a9a051c8d7990361ac979eb0d98cb8f08a660901c20dfa60b6cb369b14f2141bb6e5ffce40a2511b3cb70c69dca0ac055324b8e5ef6d4c704abb8ba7b5e0df2b84cd14abee37e2f81fe4df05371607f52f2d451fa9f200fff6291e54dccf76607bee60392052db21b26e58021ee1e8ddf3c50a92ec54520c30ba49b0646f0e90d12d8c1e0d", 0xc5}, {&(0x7f0000000d00)="a7e4fc3f6bb47fca2c7a1d25c71e6cb6c8663d85c3132b8d728e02cf1abc850202c0d427620dd7176626b2d6f1db281d12cd88a394797451ba01be54b5296c8ae2aea4e4f3d774f16087d4763778d8f7f9516e9ae76b1c100da74aaf3ceeb9ff8c2d2d2433d361ce49bb89086ff1f6a92f438174d755fa7a184e6e1ba5d7b8f9e8cea6f5a44b7160dccbd639dc562d590281776081d02d", 0x97}, {&(0x7f0000000dc0)="63c586bf5d2d0ee2c74d10822df117800c9ee90276967029568b719a9fe2ba02c563263d70760a5f030dea5d713cc7bec0f4b97c835a2d00e865b054733a82ae30cfe933a1be2d65e281d0201ca4634bd463efa8c32c0d671ce05c682721d557937fd4af471606a1df33385b125e7822b1e0d1163c8eea653fb8c9f7c2de", 0x7e}, {&(0x7f0000000e40)="759d98653fd1cc0d1347bae739a93a9e9c03de25f21004bcdfdb0ef8b102e5897dde575551c333659537f49d5d6b3ff21dc0f50a3ab6cddb39a075e911c6a7d48f8afbde3d1ae63bbfe4888d5ae64286d1ad3a4bbfeaa8bbe1b8d731dfea07d36e644d29a5abef54585d9e72178e42e263e31e", 0x73}, {&(0x7f0000000ec0)="bbeccafa3c10ed2a87eacbecfaefba81f7931e97e8792a5945a5ae50aa7923e03f67b68c7cf01f2b8a76bd8a6dd79128aeb660bff42c6cc5f5d5fa9c8ce50964b3fd1a3744dd1bdc1986978dbdde30f1cbb1c2f16845fda08caff3dce394588a6300f674e43cd28a621a150641c400e419d1f880096e7a46", 0x78}, {&(0x7f0000000f40)="ec212091d1924994131887962b8dcea017b40f5c73ca6a77ced1ecf20cad561c679e985c69f020e9e2be1b62270974beefdf00d7616906dac0c3ebeb760c7875d23064850c0de4ca0545846e8af75dffa0698cb21fb20c47ee1f3f168ce4cc9baef7b2a7a4586cfed20f1500e9e911a18e333c4e7fbfcf1dee8fef98069ddec5498c", 0x82}], 0x6, 0x0, 0x0, 0x40000880}, 0x8900)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r2)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x138, r10, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040850)
socket$inet6(0xa, 0x6, 0x40) (async)
r11 = socket$inet6(0xa, 0x6, 0x40)
ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f0000001340)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x10}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x1}}, @sco, 0x0, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000001300)='netpci0\x00', 0x7, 0x3})
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000013c0), &(0x7f0000001400)=0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001440)={0x1, 0x1, 0xd, 0x6, @vifc_lcl_ifindex=r8, @rand_addr=0x64010100}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001440)={0x1, 0x1, 0xd, 0x6, @vifc_lcl_ifindex=r8, @rand_addr=0x64010100}, 0x10)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001480)={{0x2, 0x4e21, @remote}, {0x306, @remote}, 0x4c, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg2\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000001480)={{0x2, 0x4e21, @remote}, {0x306, @remote}, 0x4c, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'wg2\x00'})
accept$unix(r2, &(0x7f0000001500), &(0x7f0000001580)=0x6e) (async)
accept$unix(r2, &(0x7f0000001500), &(0x7f0000001580)=0x6e)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x13c, r12, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff34}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x6, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd301}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3.948422155s ago: executing program 3 (id=3322):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008010)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0)

3.440346343s ago: executing program 3 (id=3323):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
connect$tipc(r0, &(0x7f0000000000), 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r3, 0x0, 0xd, 0x0, &(0x7f0000000080))
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0x1}, 0x8)
write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x1, 0x1}, 0x8)

3.438739912s ago: executing program 2 (id=3324):
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
sendto$inet(r0, &(0x7f0000000040)="a0fba6feca0d9181b32e2a45ae662a147578638c5493b0b45dd47038b7252d521c476236a475381cd2e663fc538cf3db5bf63beb49900d12ccd5693ca60af26c6187f2de", 0x44, 0x40000, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="dfffd4db3b0c259fa602eac759ad1a0e000000aedf8982a05329cca5c455abfe30212ccc1c8af22650409da03b70ba71a94bf05097e02746886fdb018a701a3af4f07aa46d9deccec405b812d67b961b34f77b7f65d1cd8c79120f5df8f337ee2d50bdcaff9bf8ed05d535b0ba499f51fee283d770e5769d55fa60128866c8e00aba99788bbf7cf85f96026322f6b0c7b288a330ae64a327c47efc631e719c8ecb13da", @ANYRES16=r4, @ANYBLOB="000125bd7000fcdbdf250e00000008000500490800000800050001000000080006004b08000008000500ff0f0000"], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x40004)

3.360107449s ago: executing program 1 (id=3325):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b008000000000000000000000da09400000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @private1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x134, r5, 0x1, 0x70bd2a, 0x1, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ee55f091fc"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd4ef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @key_params=[@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "4ff30c015113dafc4b17"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}], @key_params=[@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5265ff4e94"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8afd5c9db2"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r13=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054)
write$nci(r9, &(0x7f00000028c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @f={0x3, 0x2, 0x1, 0x2, 0xd9, 0x4, 0xff, {0xe6, 0x2d, "7b308fe7daef9ab7d65a5330e82ff8a71a5ba4ca46daee02a0e7ea69fc4dc55b49c6bcd49eb03b0bc9bf5f75cc"}, 0x9, 0x7, 0x9d, 0x3, 0xcb, "8ff8ece57ec6e5e4ed7337658a274082614ff5f8bc75bfdedae28c9d733c6aab771afe99fa15e68aee4865266c40ab9a2416f2986a79cd9eb94db78c2aa220d0b2d6c0d8f21ee94825506c98747df3fd3a18c53a33f811b3f02911dc76df8e622e690a4dfd50d11b7c41eb101fed85bd31158493f3ebd85c0a89634bc36237cb93923c5391161312d2f112f18b604b47b852dd3bcc800e42ded66edfdc939e6ebfcdf51ac13ca98067be3eb072b749375c55cba80e76bd3cb3091719e8bdc096fdbd55d83f14045df02691"}}, 0x109)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x104}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3dc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3b0, 0x3, 0x0, 0x1, [{0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x394, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "4493d83301962b8555703feafb5d6dbd8cf1df37f13a7a286135acd76121d1f103e2818a59878cd6d301d0f065d7344cc2368af8b23398a3f39411ac3486b1550a0ee0d8b166e8edd8f0ebca26c01779ab6e81ad01b8"}, @NFTA_DATA_VALUE={0x56, 0x1, "9a29b6cf4d8f6935bb929b7d672dee7594cf1cc6339da1c10c9e7edcb183e7fe3f28cae322785d0ce357df595d962f1110f51e8eea20178dbe31c0fdfc39317e0f3a79674bb2600a01ec8fd9d5a32dcf352a"}, @NFTA_DATA_VALUE={0x1e, 0x1, "8197e67cfb3677b2d68995c18966c05cd05332858a67cc078554"}, @NFTA_DATA_VALUE={0x64, 0x1, "33cb8975efcef0816a3296ff4e9032bfb526e2519bae18165e97489a2b1b49bef3acdfe94bdc9471c29202f8e6938dc0be6cff30046dbf0c3e48be66802431aeebc15f1b307db5ba637d6f57317fc9a0be1e61ebb8abea360ade052d4c1d33b6"}, @NFTA_DATA_VALUE={0xd4, 0x1, "66d8c13e6f246f6314925ffcf47b47dba5b31ad00c133cef2db81d4ad895246a067f307edae58e12a58daea5018be6fde9a8b558c2ca0726221a6ae9f98f5dd96964d8412770c89c8441e1e0ce13fdff87a5e24da48e4f7569cae96e180a036c22d76a4f3c86ca7fbb99c9f8543c99872a3b2ea86133d0990d8b4bc1646958749ffc51819c340bb203246ac9fc49884025437e93702f09cdfb5f42808f242c19f89daeeb46fdb2ffb85b467c7cee506809adfc6dc6185ae6a621ed9cdc41db5f000b7777ad668f0ce10d1bda3e2cc394"}, @NFTA_DATA_VALUE={0xd2, 0x1, "43b654e578c6e0c080cdefc3d9db4ef823fe38ec702fb4a0465e0f5c799774c00ce42d39ee436207f11742330b89d0916418d7a8c320af78842d03b4afc757541c96e1172306abe2b4c5cbdbeb992750a714222e4f49cf2e05635501dc9d3b66d76d4996c828ce63c192d54aca8749c5ac88b07ba1f7bfcc902dc9cf3b0d8deaa6529437747984c1a70fabbb2c94a2af9d304d1a31d25bf0faee37489882c9e7f44b2dbd52358e7a5a9ed9c465e478aec23acec91ee63ecc9646ea33cc6d47d0d1ac740fc3e8a6adcd703f656c49"}, @NFTA_DATA_VALUE={0x5b, 0x1, "9f842236af5074d10924aaffa875d9c30ef0ae6400acbb1eb87f4bf56ce6a00e07b42913870fabc9df29d0b496e3e03ee41f9a0cfc9df7068b0daa31fd4ebbe5f43468f5cb9d4cc2c68b38a8de9ecbe96b650a677f5b00"}, @NFTA_DATA_VALUE={0x16, 0x1, "cabaf1a70d7c75b1e5092e3636f7c02047ad"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x440}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3.185934572s ago: executing program 2 (id=3326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4000}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

2.968139808s ago: executing program 2 (id=3327):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000016c0)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x4000014) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x64, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x80) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000044}, 0x20000000) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@empty, @local}, 0x8) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58010000100003052abd70000005000000000000b60cb926ac5691ce50e7ac23633940676d81b2879dced48e3d7c93bf7bae8978a1ea67cdb85e052eeb29774fc16a057a8853f50c40a7975644f8c6361b4cf8d65f4d0aff7c0c1b9112f149ea85f99a19e08c", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b000100697036677265000020000280080005008c00000014000600fc01000000000000000000000000000008000a00", @ANYRES32, @ANYBLOB], 0x58}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000096e861100900000000000000facec67b78b7a49cf9b6d40420c13418c0d760b2dbf02dc178c87f22fc2c00a2949252b7b59e9637bdbcd58e4d549a13c21bea314ff6ccb2873a532dece30a82b54de853dd4f9b9491855a752753951c4a4f622ec54fc0a5de09372047ae415effd1cb03d3c380"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)

2.79039375s ago: executing program 2 (id=3328):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @local}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e22, 0x80000001, @private1, 0x3}], 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendto$inet6(r0, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in6={0xa, 0x4e22, 0x80000001, @private1, 0x3}], 0x38) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) (async)

2.526400796s ago: executing program 2 (id=3329):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0xfffffffa, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a08030000080a050000000000000000000500000a0900020073797a32000000002c000580080001400000002f0800014000000073080001400000006c08000140000000290800024000000002a0020480100001800b0001006f626a72656600000c00018008000100647570004c0001800b00010074756e6e656c00003c000280080002400000004000000000080002400000001e08000140000000010800034000000001080002400000000830000180080001006c6f6700240002800600014000040000080002407265640008000640000000080600044000030000480001800b0001006c6f6f6b757000003800028008000340000000130800044000000002080004400000000208000540000000010900010073797a31000000000800034000000004100001800a00010071756575650000002c0001800b0001006e756d67656e00001c000280080004400000000208000240800000000800044000000009800101800c0001006269747769736500700102806c010580180002800900020073797a310000000008000180fffffffe240002800900020073797a310000000008000340000000020900020073797a3200000000610001006827bf498cf83644da07ef4b5ff629279ea7854318a1887717feb53125b5f35c80b44081fb4262eb8e3b8587c696fc731ac63f203ee615aea8db2f9ce002b1bd0ec3f715b4032251b8df9addccb0047f23fa1340dabb87c9597e9f641800000004000100c20001007b66069d843c492f21f005290071b25f714c1c40373fc9c582628accbb6ba4fb17b149cb11fc93adaf2b1f8a97f3d961c57931c390153eb7a238612ed60939623a4121afd38859b7f98ff716178083d522bc85c85df1bd884dd8dac15caa70c9e0a504f5efc5fc69aad0524b22a0983ac36efe6ab6a91cf254192ad2dd4027e60b2bc72133a1076357577bc6288b756466c8b559a1145f54704fdcaaa06fcddee2ecb19cd06adb0b889f9b8c3623acf1e1c6f8dcd106739d082b7f2c7c1900000900020073797a3200000000100004800c00018008000100636d7000280000000e0a01080000000000000000030000070900020073797a30000000000800044000000000140000001100010000000000000000000700000ababd8286593e863e3d30827c6e5112164ed609348557a2441fe253232ef179646f3ddcb1cb1f3671f714a6248c22a636ee0884fb47"], 0x358}, 0x1, 0x0, 0x0, 0xd0}, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r6)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a06000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011b4e3c7f699f49eee6406b4f33f98d38d800c000100636f756e74657200500000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e746572000400028014000000"], 0xe4}}, 0x0)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30)

704.286839ms ago: executing program 4 (id=3330):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffff}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0)

673.66267ms ago: executing program 4 (id=3331):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000340)={'gretap0\x00', <r2=>0x0, 0x700, 0x1, 0x56, 0x8, {{0x3b, 0x4, 0x1, 0x33, 0xec, 0x65, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0xf, 0x4f, [@local, @local, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1b, 0xb4, [@loopback, @broadcast, @loopback, @broadcast, @rand_addr=0x64010100, @remote]}, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x3, [{@rand_addr=0x64010101, 0x3a0}, {@empty, 0x314be07a}, {@multicast1}]}, @timestamp_addr={0x44, 0x34, 0x13, 0x1, 0x4, [{@remote, 0xff}, {@local, 0xdb1f}, {@rand_addr=0x64010102, 0x1}, {@empty}, {@remote, 0x101}, {@private=0xa010101, 0xa1}]}, @timestamp_prespec={0x44, 0x44, 0xb9, 0x3, 0x5, [{@loopback, 0x6}, {@remote, 0x2}, {@multicast2, 0x58}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0x30d0379}, {@multicast2, 0x200}, {@multicast2, 0x26a6}]}, @lsrr={0x83, 0x17, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @broadcast]}]}}}}})
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="681be4773e3b72be7e7732c340306efa963b1ffa363e277421a14c3e173a22d03d70c6161e957e7d764f2107249454cad4cc5a992c2d1d20610888c33e50c3c5c7974ff200", 0x45, 0x0, &(0x7f00000004c0)={0x11, 0x11, r2, 0x1, 0xae, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

531.582202ms ago: executing program 4 (id=3332):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', <r1=>0x0, 0x7, 0x700, 0x732b4230, 0xffff, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x67, 0x0, 0x3c, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x4b, [@dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @loopback, @multicast1]}, @timestamp={0x44, 0xc, 0xe8, 0x0, 0x9, [0xa, 0x3bb2]}, @generic={0x44, 0xa, "8336e584c2782080"}, @end]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x1, 0x8000, 0xc7e6, 0x3464460, {{0x10, 0x4, 0x3, 0x6, 0x40, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x1b, 0xa2, [@multicast1, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}]}, @generic={0x44, 0x10, "cf43f1c47006583489497c0da173"}]}}}}})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x410, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048015}, 0x810)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4048004)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000480)=0xb, 0x8)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000004c0)={<r7=>0xffffffffffffffff})
getsockname$inet6(r7, &(0x7f0000000540), &(0x7f0000000580)=0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000005c0)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/192, 0xc0}, {&(0x7f0000000840)=""/51, 0x33}], 0x4, &(0x7f00000008c0)=""/230, 0xe6}, 0x44b}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/149, 0x95}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000c00)=""/114, 0x72}, {&(0x7f0000000c80)=""/242, 0xf2}], 0x4, &(0x7f0000000dc0)=""/160, 0xa0}, 0x3988}, {{&(0x7f0000000e80)=@x25, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000f00)=""/68, 0x44}, {&(0x7f0000000f80)=""/4096, 0x1000}], 0x2, &(0x7f0000001fc0)=""/208, 0xd0}, 0x7f}], 0x3, 0x10020, &(0x7f0000002180))
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002200), r7)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x74, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xea}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x20008080)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000002340)={'dvmrp1\x00', 0x6})
sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x64, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x4001)
ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f00000024c0)="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")
sendmmsg$unix(r7, &(0x7f0000002840)=[{{&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002640)="b6b24463c4db4f0fab63cd357d0a7f421aea38e0f812ef2a80ced8106a0510722e3c97187a7a16fecfb141f55d7c862c721bbffee5925292b6f8824eeff5a7feedc7557a732821400a0ae32f3259f9219101632f1876904a9ca3271fd02bb51e9c8887095bbd32045ad20626b9c92d55475b2e11a79b00e4026719e8ea941780171454e28ffea17bbf797a139d19d14abf6121f7d4d8817070", 0x99}, {&(0x7f0000002700)="52b8010bd39eb9006b2dcaac23005b64994c2bd1b0798d0470e6b34c1d62ddac9be0264aad8da81f915692cea0eae4bb946cce6fed2af543382ffd6e", 0x3c}, {&(0x7f0000002740)="5b3d3cac0b270b47fb4dc94843d9cb7709593417c6af5068c342f77c994268f24facb19c6def1a6dc55cecd03de883ac9bd5f49e1e485f6c00e94dc2d46599e048160e8dce3d911b0ac1457ba7a08ea8ea413c55d059d5874301f4f562c4557de8bf6a36360b44f2ba33314af0b3f0296918866800db8d7e133fb1a938e1e26415978e4a9d55fc77dec9a088a125757e50bcd0a3a437dbc3351b646ae8738d6f98f018099850146f9f33933e3911dc5806847a", 0xb3}], 0x3, 0x0, 0x0, 0x10}}], 0x1, 0x4000000)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), r7)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000002a80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002900)={0x104, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xfff8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x132}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040004}, 0x4040000)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d00)={0x18, 0x12, &(0x7f0000002ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002b80)='syzkaller\x00', 0x4d25, 0x72, &(0x7f0000002bc0)=""/114, 0x41100, 0x4c, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002c40)={0x3, 0x400, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002c80)=[r7, r7, r7, r7], &(0x7f0000002cc0)=[{0x5, 0x1, 0x4, 0x9}], 0x10, 0x742a}, 0x94)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ppoll(&(0x7f0000002dc0)=[{0xffffffffffffffff, 0x5000}, {r0, 0x400}, {r11, 0x2000}, {r12, 0x431a}], 0x4, &(0x7f0000002e00)={0x0, 0x989680}, &(0x7f0000002e40), 0x8)
setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc000)

398.400848ms ago: executing program 4 (id=3333):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

338.367914ms ago: executing program 4 (id=3334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000e"], 0x30}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000e"], 0x30}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) (async)
bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
listen(r4, 0x90004)
shutdown(r4, 0x1)
shutdown(r4, 0xf10958b175592617)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000000000006"], &(0x7f0000001f40)=""/4090, 0x82, 0xffa, 0x1}, 0x28)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000020601030000000000000000000000001400e9fb4268114000000000010006000000050005000a00000005000400000000000900020073797a30000000001500030068617368ffffffffffffff002c6e657400000000"], 0x64}}, 0x0)

0s ago: executing program 4 (id=3335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}})
ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000400)={0x0, 0x2, 0x7ff, 0x8, 0x1, 0x3})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xf, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9bad5", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x22020600)
write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x42, @b={0xf, 0x2, 0x2, 0x1, 0x81, 0x4, 0x7c, {0x55, "d3f11d79dcf9e09f0c0be3c09cef34fa5a8f1a9f0df1bc290e5eda1ece1e90d7fbe1ff31f547ff838b29bdcbd58ce2c7ce6baf30f7ff4b6887e5aca287286a02f440613e1d30605b978ac93a514b431fb1ddcd2b9e"}, 0x6, 0x8, 0x7, 0xd2, 0xb0, "7afd885f4ee2c128ad120e5294b683fadde1d6f576fbe03c84e34e42f4e2de9c02c5ff1de8fe511d580255b5566a7fa113cea0cb1d86461a2a4c38fbc510f700653762a849db53ac4ee888a3e2ff17fee84fab3e1ac2bac935738de8d3f88c5b84bbfe4bc03853472be2767bc8b5722eda80ede1d1d05d9aa317c2da64b00851a9782c93d7f2b3b83e8a589980c3c1c28d37f3725575694187619d7bfc1a38db2f8bd75039b99bd4aeeb3bae99bbb992"}}, 0x115)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$int_in(r8, 0x5452, &(0x7f00000000c0)=0x400)
r10 = getpid()
ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000140)=r10)
shutdown(r9, 0x0)
sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0x8b, &(0x7f0000000340)="7c840abe88df21457107c4664efc080999f3747a798b7ecf5668a8ced13646a5f8a9107363ba7a1d44fb3cd99ae9ed2a96204c7e5c23f78b0d13e895e0bbfafda8618d76e1cb6343cc1645f9b19e7d0299df18a4450a4c85d944dbe0e4e5f72a24485737ee9d24785976bec45234db5a9dd468fde68584fa3dae443ede87ecdd93873906be8b9e5f0748aa", 0xd4, 0x0, &(0x7f0000000540)="1f30961326990a71d1dc7ebfd825e08c2b97bd0d3f87bad66e54a8e1e4d12e7fda963d8816bdccdbbfe021197acfbe8b62e133eff89ab9d96fda1cd1f85d881ef5c009f5624c9ec8828eb66a21b6910a1f7ea00e43f8fb3fd58a56bec5c9f33e98ca7e6585bf17fd06299b4ea09ca4458ccbb2b6c8bebdecc9e55a9e6d99fbfe1e530142ac7cea6b4c80979027109fbc2df92194f1f56bea71e93ae3f8144d5a94685bd3476a2703d0b91a03583b5d3332cb22435157a7b7630868ed534eef7bd731c3cdf2eb8e55ad3bcf2150b2b3322979c2c1"})

kernel console output (not intermixed with test programs):

12594] syzkaller0: entered allmulticast mode
[  289.327463][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'.
[  289.349639][T12610] net_ratelimit: 58 callbacks suppressed
[  289.349672][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.614183][T12628] netlink: 'syz.0.1764': attribute type 30 has an invalid length.
[  289.718362][T12630] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1762'.
[  289.733427][T12630] netlink: 'syz.1.1762': attribute type 21 has an invalid length.
[  289.741466][T12630] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1762'.
[  289.783779][T12634] netlink: 'syz.1.1762': attribute type 21 has an invalid length.
[  289.791833][T12634] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1762'.
[  291.449683][T12628] bond6: option arp_missed_max: invalid value (0)
[  291.456359][T12628] bond6: option arp_missed_max: allowed values 1 - 255
[  291.467383][T12628] bond6 (unregistering): Released all slaves
[  291.505734][T12640] netlink: 'syz.3.1766': attribute type 21 has an invalid length.
[  291.516427][T12640] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1766'.
[  291.544896][T12630] netlink: 'syz.1.1762': attribute type 4 has an invalid length.
[  291.565548][T12630] netlink: 'syz.1.1762': attribute type 5 has an invalid length.
[  291.623435][T12630] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1762'.
[  291.649553][T12634] netlink: 'syz.1.1762': attribute type 4 has an invalid length.
[  291.682481][T12634] netlink: 'syz.1.1762': attribute type 5 has an invalid length.
[  291.705417][T12634] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1762'.
[  291.762817][T12640] netlink: 'syz.3.1766': attribute type 5 has an invalid length.
[  291.785826][T12653] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.830644][T12652] IPv6: sit2: Disabled Multicast RS
[  291.862355][T12645] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[  291.873831][T12651] syzkaller0: entered promiscuous mode
[  291.886370][T12651] syzkaller0: entered allmulticast mode
[  292.207383][T12674] netlink: 'syz.4.1776': attribute type 1 has an invalid length.
[  292.308362][T12674] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  292.310763][T12681] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  292.374602][T12681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.778101][T12707] set match dimension is over the limit!
[  292.955084][T12713] syzkaller1: entered promiscuous mode
[  292.980813][T12713] syzkaller1: entered allmulticast mode
[  293.017636][T12713] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  293.344743][T12742] sch_fq: defrate 0 ignored.
[  293.377911][T12743] syzkaller0: entered promiscuous mode
[  293.384329][T12743] syzkaller0: entered allmulticast mode
[  293.635047][T12747] syzkaller1: entered promiscuous mode
[  293.640862][T12747] syzkaller1: entered allmulticast mode
[  296.150294][T12730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  296.426358][T12834] validate_nla: 2 callbacks suppressed
[  296.426381][T12834] netlink: 'syz.2.1801': attribute type 23 has an invalid length.
[  296.567818][T12840] IPv6: NLM_F_CREATE should be specified when creating new route
[  296.621772][T12840] xt_cgroup: invalid path, errno=-2
[  296.904407][T12854] syzkaller0: entered promiscuous mode
[  296.925677][T12854] syzkaller0: entered allmulticast mode
[  297.158820][T12863] __nla_validate_parse: 3 callbacks suppressed
[  297.158847][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'.
[  297.287033][T12862] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  297.304215][T12862] bond1: left promiscuous mode
[  297.321866][T12862] bond1: left allmulticast mode
[  297.337226][T12862] ip6erspan0: left allmulticast mode
[  297.355462][T12862] bridge1: left promiscuous mode
[  297.377340][T12862] bridge1: left allmulticast mode
[  297.564017][T12862] ip6gre1: left allmulticast mode
[  297.697302][T12862] gre1: left promiscuous mode
[  297.711869][T12862] gre1: left allmulticast mode
[  297.896494][   T78] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  297.937770][   T78] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  298.100408][   T78] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  298.115596][   T78] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  298.138213][   T78] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  298.159848][   T78] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  298.180645][   T78] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  298.202149][   T78] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  298.225974][T12900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.235556][T12901] FAULT_INJECTION: forcing a failure.
[  298.235556][T12901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.252307][T12901] CPU: 1 UID: 0 PID: 12901 Comm: syz.2.1819 Not tainted syzkaller #0 PREEMPT(full) 
[  298.252344][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  298.252358][T12901] Call Trace:
[  298.252366][T12901]  <TASK>
[  298.252376][T12901]  dump_stack_lvl+0xe8/0x150
[  298.252416][T12901]  should_fail_ex+0x40c/0x560
[  298.252449][T12901]  _copy_from_user+0x2d/0xb0
[  298.252483][T12901]  ___sys_recvmsg+0x173/0x5a0
[  298.252516][T12901]  ? __pfx____sys_recvmsg+0x10/0x10
[  298.252542][T12901]  ? __fget_files+0x2a/0x420
[  298.252613][T12901]  do_recvmmsg+0x31a/0x7f0
[  298.252639][T12901]  ? __pfx_do_recvmmsg+0x10/0x10
[  298.252671][T12901]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  298.252695][T12901]  ? __fget_files+0x3a2/0x420
[  298.252730][T12901]  __x64_sys_recvmmsg+0x198/0x250
[  298.252754][T12901]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  298.252782][T12901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.252805][T12901]  do_syscall_64+0x174/0x580
[  298.252824][T12901]  ? trace_irq_disable+0x3b/0x140
[  298.252850][T12901]  ? clear_bhb_loop+0x40/0x90
[  298.252894][T12901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.252914][T12901] RIP: 0033:0x7fe65719de99
[  298.252934][T12901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.252953][T12901] RSP: 002b:00007fe658061028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  298.252977][T12901] RAX: ffffffffffffffda RBX: 00007fe657425fa0 RCX: 00007fe65719de99
[  298.252992][T12901] RDX: 0000000000000004 RSI: 0000200000003c80 RDI: 0000000000000003
[  298.253004][T12901] RBP: 00007fe658061090 R08: 0000000000000000 R09: 0000000000000000
[  298.253016][T12901] R10: 0000000000020000 R11: 0000000000000246 R12: 0000000000000002
[  298.253027][T12901] R13: 00007fe657426038 R14: 00007fe657425fa0 R15: 00007fffd21c88f8
[  298.253060][T12901]  </TASK>
[  298.591365][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'.
[  298.853825][T12918] syzkaller0: entered promiscuous mode
[  298.861788][T12918] syzkaller0: entered allmulticast mode
[  299.140420][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'.
[  299.157942][T12931] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  299.568597][T12950] netlink: 'syz.1.1835': attribute type 2 has an invalid length.
[  299.594099][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'.
[  299.752233][T12958] syz_tun: entered allmulticast mode
[  299.761131][T12958] pim6reg: left allmulticast mode
[  299.767993][T12958] syz_tun: left allmulticast mode
[  299.789641][T12962] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  299.818590][T12962] Unsupported ieee802154 address type: 0
[  300.170588][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'.
[  300.194186][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'.
[  300.237254][T12981] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1842'.
[  300.290652][T12987] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1842'.
[  300.315444][T12981] 0ªî{X¹¦: entered promiscuous mode
[  300.330457][T12981] 0ªî{X¹¦: left allmulticast mode
[  300.357610][T12987] 1ªî{X¹¦: renamed from 
30ªî{X¹¦
[  300.367536][T12990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1844'.
[  300.382647][T12987] 1ªî{X¹¦: left promiscuous mode
[  300.395202][T12987] 1ªî{X¹¦: entered allmulticast mode
[  300.427301][T12987] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  300.559913][T12995] openvswitch: netlink: Flow key attr not present in new flow.
[  300.761920][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'.
[  300.800364][T13011] sctp: [Deprecated]: syz.1.1851 (pid 13011) Use of int in maxseg socket option.
[  300.800364][T13011] Use struct sctp_assoc_value instead
[  300.879236][T13013] team0: Device gtp1 is up. Set it down before adding it as a team port
[  300.946699][T13017] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.120311][T13022] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  301.155544][T13022] bond5 (unregistering): Released all slaves
[  301.585592][T13011] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  301.619027][T13048] openvswitch: netlink: Flow key attr not present in new flow.
[  302.883830][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[  303.683560][T13007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  303.808566][T13055] netlink: 'syz.2.1863': attribute type 1 has an invalid length.
[  304.358348][T13089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.536594][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a4eec00: rx timeout, send abort
[  304.548115][T13095] netlink: 'syz.3.1872': attribute type 1 has an invalid length.
[  304.566083][T13091] netlink: 'syz.3.1872': attribute type 1 has an invalid length.
[  304.627664][T13091] 8021q: adding VLAN 0 to HW filter on device bond8
[  304.700620][T13104] bond0: entered allmulticast mode
[  304.720657][T13104] bond_slave_0: entered allmulticast mode
[  304.897311][T13114] team0: Caught tx_queue_len zero misconfig
[  305.029656][T13122] x_tables: unsorted underflow at hook 1
[  305.037556][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a23a400: rx timeout, send abort
[  305.046566][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a4eec00: abort rx timeout. Force session deactivation
[  305.088779][T13125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.155763][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.546038][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a23a400: abort rx timeout. Force session deactivation
[  305.617366][T13155] __nla_validate_parse: 2 callbacks suppressed
[  305.617390][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'.
[  305.709606][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'.
[  305.766288][T13163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.810893][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1892'.
[  305.885455][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'.
[  305.896205][T13170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'.
[  306.057864][T13178] netlink: 'syz.3.1898': attribute type 1 has an invalid length.
[  306.106823][T13178] bond9: entered promiscuous mode
[  306.114228][T13178] 8021q: adding VLAN 0 to HW filter on device bond9
[  306.154530][T13180] bond9: (slave bridge2): making interface the new active one
[  306.164131][T13180] bridge2: entered promiscuous mode
[  306.180723][T13180] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  306.456905][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  306.474048][T13190] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  306.483423][T13190] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1902'.
[  308.527589][T13152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.536915][T13155] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1892'.
[  308.850136][T13213] netlink: 'syz.2.1905': attribute type 142 has an invalid length.
[  309.019221][T13217] netlink: 'syz.1.1909': attribute type 4 has an invalid length.
[  309.044871][T13217] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1909'.
[  309.117653][T13221] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1910'.
[  309.313886][T13234] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  309.560762][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.589634][T13249] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  309.867879][T13266] netlink: 'syz.2.1924': attribute type 20 has an invalid length.
[  309.954856][T13266] netlink: 'syz.2.1924': attribute type 20 has an invalid length.
[  309.956736][ T3374] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.994882][ T3374] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  310.015823][ T3374] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  310.024998][ T3374] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  310.337697][T13300] IPVS: length: 239 != 24
[  310.690237][T13268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.928897][T13314] Cannot find add_set index 2 as target
[  310.940166][T13315] ip6t_REJECT: ECHOREPLY is not supported
[  311.209525][T13318] __nla_validate_parse: 6 callbacks suppressed
[  311.209550][T13318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1936'.
[  311.237472][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'.
[  311.394429][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1938'.
[  311.462613][T13336] sctp: [Deprecated]: syz.3.1940 (pid 13336) Use of int in maxseg socket option.
[  311.462613][T13336] Use struct sctp_assoc_value instead
[  312.139473][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1952'.
[  312.288447][T13387] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  312.514057][T13403] netlink: 'syz.4.1960': attribute type 21 has an invalid length.
[  312.563874][T13403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1960'.
[  312.573908][   T30] audit: type=1804 audit(1784878072.273:4): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1959" name="/newroot/395/cgroup.controllers" dev="tmpfs" ino=2042 res=1 errno=0
[  312.597721][   T30] audit: type=1800 audit(1784878072.303:5): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1959" name="cgroup.controllers" dev="tmpfs" ino=2042 res=0 errno=0
[  312.789420][T13411] IPVS: length: 193 != 24
[  312.910014][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'.
[  313.097491][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.289070][T13436] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1969'.
[  313.418452][T13442] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1972'.
[  313.955934][T13464] netlink: 'syz.3.1979': attribute type 1 has an invalid length.
[  314.164852][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1980'.
[  314.216365][T13473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1980'.
[  315.049638][T13495] x_tables: duplicate underflow at hook 2
[  315.374882][T13513] openvswitch: netlink: Flow actions attr not present in new flow.
[  315.602411][T13525] veth0: entered promiscuous mode
[  315.742221][T13528] bridge0: port 1(batadv0) entered blocking state
[  315.752513][T13528] bridge0: port 1(batadv0) entered disabled state
[  315.776951][T13528] batadv0: entered allmulticast mode
[  315.804996][T13528] batadv0: entered promiscuous mode
[  315.850926][T13524] veth0: left promiscuous mode
[  315.887438][ T3334] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.910725][ T3334] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  315.970625][ T3334] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.062696][T13537] block nbd1: Unsupported socket: should be TCP or UNIX.
[  316.110856][T13529] syzkaller0: entered promiscuous mode
[  316.124640][T13529] syzkaller0: entered allmulticast mode
[  316.138734][ T3334] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.232814][ T3385] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  316.242666][ T3385] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  316.319184][T13562] __nla_validate_parse: 10 callbacks suppressed
[  316.319207][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  316.423249][T13568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.715855][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'.
[  316.762045][T13582] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2011'.
[  316.822074][T13585] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2013'.
[  318.529739][T13591] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.646073][T13604] veth0_macvtap: Caught tx_queue_len zero misconfig
[  318.787022][T13598] xfrm0 speed is unknown, defaulting to 1000
[  318.797061][T13609] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.2019'.
[  318.819156][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  318.831500][T13598] virt_wifi0 speed is unknown, defaulting to 1000
[  318.839469][T13610] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2018'.
[  318.865116][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  318.895373][T13609] 0ªX¹¦Dö»: renamed from gretap0
[  318.903871][T13609] 0ªX¹¦Dö»: entered allmulticast mode
[  318.920381][T13616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2021'.
[  319.097711][T13620] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  319.173278][T13623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.210160][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2025'.
[  319.923374][ T5636] block nbd1: Receive control failed (result -32)
[  320.467945][T13678] netlink: 'syz.4.2038': attribute type 7 has an invalid length.
[  320.579560][T13681] tipc: Started in network mode
[  320.602003][T13681] tipc: Node identity , cluster identity 4711
[  320.623456][T13681] tipc: Failed to obtain node identity
[  320.648962][T13681] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.690405][T13689] syzkaller0: entered promiscuous mode
[  320.696571][T13689] syzkaller0: entered allmulticast mode
[  321.087480][T13706] tipc: Failed to remove unknown binding: 66,0,0/2886997039:370298854/370298855
[  321.123653][T13706] tipc: Failed to remove unknown binding: 66,0,0/2886997039:370298854/370298855
[  321.379498][T13720] netlink: 'syz.0.2051': attribute type 1 has an invalid length.
[  321.487835][T13720] bond6: option mode: invalid value (9)
[  321.513566][T13720] bond6 (unregistering): Released all slaves
[  321.556613][T13735] __nla_validate_parse: 5 callbacks suppressed
[  321.556637][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'.
[  321.577435][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'.
[  321.590115][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2056'.
[  321.773312][T13741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2058'.
[  322.670212][T13786] Bluetooth: MGMT ver 1.23
[  322.748681][T13793] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2072'.
[  323.144708][T13809] SET target dimension over the limit!
[  323.178292][T13813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.203332][T13813] syzkaller0: entered promiscuous mode
[  323.227983][T13813] syzkaller0: entered allmulticast mode
[  323.264649][T13816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  323.345534][T13813] tipc: Resetting bearer <eth:syzkaller0>
[  323.402946][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2082'.
[  323.747644][T13812] tipc: Resetting bearer <eth:syzkaller0>
[  323.870669][T13812] tipc: Disabling bearer <eth:syzkaller0>
[  324.072376][T13856] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2095'.
[  324.288414][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'.
[  324.320763][T13863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2098'.
[  324.374447][T13863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2098'.
[  325.009471][T13899] syzkaller0: entered promiscuous mode
[  325.016342][T13899] syzkaller0: entered allmulticast mode
[  325.779078][T13930] syzkaller0: entered promiscuous mode
[  325.796747][T13930] syzkaller0: entered allmulticast mode
[  326.748839][T13990] netlink: 'syz.4.2135': attribute type 29 has an invalid length.
[  326.758637][T13989] __nla_validate_parse: 8 callbacks suppressed
[  326.758658][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'.
[  326.818382][T13992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2136'.
[  326.848255][T13992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2136'.
[  326.892736][ T7499] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  326.901204][T13996] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.909891][T13996] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.931413][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  327.102967][ T7499] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  327.277725][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2141'.
[  327.518332][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'.
[  327.694040][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  328.017164][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2151'.
[  328.026620][T14044] syzkaller0: entered promiscuous mode
[  328.038955][T14044] syzkaller0: entered allmulticast mode
[  328.339556][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'.
[  328.385074][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'.
[  328.395994][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2154'.
[  328.594266][T14077] tc_dump_action: action bad kind
[  328.693111][T14081] SET target dimension over the limit!
[  328.886921][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2164'.
[  328.950989][T14090] netlink: 'syz.3.2164': attribute type 7 has an invalid length.
[  329.028108][T14090] netlink: 'syz.3.2164': attribute type 8 has an invalid length.
[  329.065856][T14102] netlink: 'syz.1.2165': attribute type 1 has an invalid length.
[  329.068050][T14103] sctp: [Deprecated]: syz.3.2164 (pid 14103) Use of int in max_burst socket option.
[  329.068050][T14103] Use struct sctp_assoc_value instead
[  329.097968][T14102] veth0_to_bond: left allmulticast mode
[  329.916149][T14150] netlink: 'syz.3.2177': attribute type 1 has an invalid length.
[  330.375312][T14168] netlink: 'syz.0.2185': attribute type 11 has an invalid length.
[  330.403357][T14167] netlink: 'syz.0.2185': attribute type 11 has an invalid length.
[  330.752704][ T7499] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  330.784109][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.285744][T14216] ipt_REJECT: TCP_RESET invalid for non-tcp
[  331.683937][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  331.763757][ T7499] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  332.040095][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  332.232407][T14257] bridge2: entered promiscuous mode
[  332.238433][T14257] bridge2: entered allmulticast mode
[  332.249557][T14260] __nla_validate_parse: 6 callbacks suppressed
[  332.249579][T14260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  332.293816][T14260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2213'.
[  332.443566][T14267] sctp: [Deprecated]: syz.4.2214 (pid 14267) Use of int in max_burst socket option deprecated.
[  332.443566][T14267] Use struct sctp_assoc_value instead
[  332.529353][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.977328][T14297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'.
[  333.008287][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'.
[  333.050443][T14297] openvswitch: netlink: Missing key (keys=40, expected=100)
[  333.159979][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'.
[  333.401281][T14318] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  333.444027][T14318] ¾x9ÿÿÿÿ: renamed from bridge_slave_0
[  333.471464][T14323] netlink: 'syz.2.2234': attribute type 1 has an invalid length.
[  333.560646][T14331] netlink: 'syz.1.2235': attribute type 2 has an invalid length.
[  333.589003][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2232'.
[  333.613208][   T36] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  333.626916][T14331] netlink: 'syz.1.2235': attribute type 1 has an invalid length.
[  333.676017][T14331] veth1_macvtap: left promiscuous mode
[  333.702732][T14331] macsec0: entered promiscuous mode
[  333.986913][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'.
[  334.004414][T14348] bridge_slave_0: entered promiscuous mode
[  334.175643][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'.
[  334.607153][T14379] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2247'.
[  334.936495][T14399] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  334.955109][T14399] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  334.999209][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'.
[  335.155970][T14412] ip6gretap1: entered promiscuous mode
[  335.166161][T14412] ip6gretap1: entered allmulticast mode
[  335.291280][T14420] tipc: Resetting bearer <eth:syzkaller0>
[  335.326711][T14422] netlink: 'syz.0.2259': attribute type 1 has an invalid length.
[  335.375350][T14422] netlink: 'syz.0.2259': attribute type 1 has an invalid length.
[  335.474706][T14427] xt_cgroup: invalid path, errno=-2
[  336.865817][T14511] netlink: 'syz.2.2283': attribute type 21 has an invalid length.
[  337.061286][T14516] team0: left allmulticast mode
[  337.089946][T14516] team_slave_0: left allmulticast mode
[  337.110002][T14516] team_slave_1: left allmulticast mode
[  337.129295][T14516] team0: left promiscuous mode
[  337.145543][T14516] team_slave_0: left promiscuous mode
[  337.158371][T14516] team_slave_1: left promiscuous mode
[  337.165830][T14516] bridge0: port 3(team0) entered disabled state
[  337.175963][T14516] bridge_slave_1: left allmulticast mode
[  337.183232][T14516] bridge_slave_1: left promiscuous mode
[  337.189187][T14516] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.202872][T14516] ¾x9ÿÿÿÿ: left allmulticast mode
[  337.223798][T14516] ¾x9ÿÿÿÿ: left promiscuous mode
[  337.247045][T14516] bridge0: port 1(
1¾x9ÿÿÿÿ) entered disabled state
[  337.605620][T14540] netlink: 'syz.0.2293': attribute type 11 has an invalid length.
[  337.759719][T14548] __nla_validate_parse: 12 callbacks suppressed
[  337.759767][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'.
[  337.834605][T14544] IPVS: length: 24 != 31014936
[  338.121343][T14563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2300'.
[  339.365791][T14634] sctp: [Deprecated]: syz.4.2318 (pid 14634) Use of int in maxseg socket option.
[  339.365791][T14634] Use struct sctp_assoc_value instead
[  339.439908][T14638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2319'.
[  339.455316][T14638] openvswitch: netlink: Flow key attr not present in new flow.
[  339.474409][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'.
[  339.879805][T14618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.126560][   T30] audit: type=1804 audit(1784878099.853:6): pid=14656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2324" name="/newroot/437/cgroup.controllers" dev="tmpfs" ino=2253 res=1 errno=0
[  340.177618][   T30] audit: type=1800 audit(1784878099.853:7): pid=14656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2324" name="cgroup.controllers" dev="tmpfs" ino=2253 res=0 errno=0
[  340.283674][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2327'.
[  340.401909][T14662] team0: Device gtp2 is up. Set it down before adding it as a team port
[  340.668098][T14683] netlink: 'syz.0.2332': attribute type 1 has an invalid length.
[  340.683567][T14683] netlink: 'syz.0.2332': attribute type 1 has an invalid length.
[  341.166796][T14711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2336'.
[  341.199809][T14711] ip6gre0: Caught tx_queue_len zero misconfig
[  341.479845][T14728] xt_TCPMSS: Only works on TCP SYN packets
[  341.726422][T14741] netlink: 'syz.3.2346': attribute type 1 has an invalid length.
[  343.623401][T14741] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  343.950905][T14766] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2353'.
[  343.999292][T14766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2353'.
[  344.027159][T14759] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2353'.
[  344.105292][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'.
[  344.159952][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'.
[  344.226539][T14771] xfrm1: entered promiscuous mode
[  344.234741][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'.
[  344.244397][T14771] xfrm1: entered allmulticast mode
[  344.260477][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'.
[  344.278051][T14779] netlink: 'syz.0.2356': attribute type 12 has an invalid length.
[  344.286515][T14779] netlink: 'syz.0.2356': attribute type 11 has an invalid length.
[  344.303614][T14778] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2356'.
[  344.418654][ T1333] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.476185][ T1333] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.515289][ T1333] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.530921][ T1333] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.769103][T14807] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  345.403804][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.441100][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.667944][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'.
[  345.816762][T14852] team0: Port device syz_tun added
[  345.970147][T14860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'.
[  345.988966][T14854] netlink: 'syz.2.2379': attribute type 5 has an invalid length.
[  346.022277][T14854] openvswitch: netlink: IP tunnel TTL not specified.
[  346.450684][T14886] xt_hashlimit: size too large, truncated to 1048576
[  346.664681][T14895] netlink: 'syz.2.2393': attribute type 11 has an invalid length.
[  346.690684][T14895] netlink: 'syz.2.2393': attribute type 11 has an invalid length.
[  346.716337][T14896] netlink: 'syz.2.2393': attribute type 4 has an invalid length.
[  346.754208][T14898] nbd: couldn't find a device at index 0
[  346.776909][T14901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  346.785295][T14902] team0: Port device syz_tun removed
[  346.868428][T14902] team0: Port device dummy0 removed
[  346.941332][T14902] team0: Port device team_slave_1 removed
[  346.960776][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.980204][T14902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.021081][T14902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  347.138038][T14902] team0: Mode changed to "broadcast"
[  347.395434][T14935] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  347.481071][T14935] bond4: entered promiscuous mode
[  347.489233][T14935] 8021q: adding VLAN 0 to HW filter on device bond4
[  347.629763][T14935] ipvlan3: entered allmulticast mode
[  347.649232][T14935] bond4: entered allmulticast mode
[  347.730566][T14949] bond4: (slave bridge0): making interface the new active one
[  347.738927][T14949] bridge0: entered promiscuous mode
[  347.746615][T14949] bridge0: entered allmulticast mode
[  347.765314][T14949] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  347.818960][T14950] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  347.964029][T14966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  347.971378][T14966] IPv6: NLM_F_CREATE should be set when creating new route
[  347.978704][T14966] IPv6: NLM_F_CREATE should be set when creating new route
[  347.986012][T14966] IPv6: NLM_F_CREATE should be set when creating new route
[  347.998540][T14965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.271733][T14978] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  348.316906][T14978] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.426392][T14981] bond5: (slave geneve4): making interface the new active one
[  348.443260][T14981] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  348.672777][T14999] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  348.966215][T15006] veth5: entered promiscuous mode
[  348.971330][T15006] veth5: entered allmulticast mode
[  349.075125][T15019] __nla_validate_parse: 8 callbacks suppressed
[  349.075150][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'.
[  349.091004][T15019] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2431'.
[  349.131694][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'.
[  349.197447][T15022] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'.
[  349.809305][T15052] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2440'.
[  349.839797][T15054] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2440'.
[  349.896581][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'.
[  349.913762][T15052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'.
[  349.949226][T15052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.371984][T15073] netlink: 'syz.4.2450': attribute type 58 has an invalid length.
[  350.405246][T15073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2450'.
[  350.786993][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'.
[  351.829057][T15149] gre1: entered promiscuous mode
[  351.959141][T15154] pim6reg: left allmulticast mode
[  352.037464][T15156] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  352.125623][T15160] netlink: 'syz.1.2474': attribute type 10 has an invalid length.
[  352.704029][T15196] netlink: 'syz.4.2484': attribute type 1 has an invalid length.
[  352.718991][T15196] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  353.216248][T15227] netlink: 'syz.1.2492': attribute type 1 has an invalid length.
[  353.263096][T15227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.319373][T15227] netlink: 'syz.1.2492': attribute type 1 has an invalid length.
[  353.857386][T15251] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  353.887113][T15251] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  354.244911][T15264] __nla_validate_parse: 14 callbacks suppressed
[  354.244934][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'.
[  354.263184][T15259] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  354.302737][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2502'.
[  354.356902][T15259] bond11 (unregistering): Released all slaves
[  354.712438][T15291] batadv_slave_1: entered promiscuous mode
[  354.763250][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2510'.
[  354.782911][T15296] netlink: 'syz.2.2510': attribute type 7 has an invalid length.
[  354.790845][T15296] netlink: 'syz.2.2510': attribute type 8 has an invalid length.
[  354.799899][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'.
[  354.860430][T15287] batadv_slave_1: left promiscuous mode
[  354.990177][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'.
[  355.020828][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'.
[  355.073566][T15308] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.088373][T15308] 8021q: adding VLAN 0 to HW filter on device team0
[  355.099445][T15308] batman_adv: batadv0: Interface activated: team0
[  355.114019][T15308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.247031][T15308] veth1_vlan: left promiscuous mode
[  355.254747][T15308] veth0_vlan: left promiscuous mode
[  355.262681][T15308] veth0_vlan: entered promiscuous mode
[  355.289159][T15308] veth1_vlan: entered promiscuous mode
[  355.308670][T15308] veth1_macvtap: left promiscuous mode
[  355.316075][T15308] veth0_macvtap: left promiscuous mode
[  355.323250][T15308] veth0_macvtap: entered promiscuous mode
[  355.330887][T15308] veth1_macvtap: entered promiscuous mode
[  355.353266][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.363570][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  355.372629][T15308] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  355.387547][T15308] 8021q: adding VLAN 0 to HW filter on device bond1
[  355.449360][T15308] 8021q: adding VLAN 0 to HW filter on device bond2
[  355.463018][T15308] 8021q: adding VLAN 0 to HW filter on device bond3
[  355.473743][T15308] 8021q: adding VLAN 0 to HW filter on device bond4
[  355.488634][T15308] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check.
[  355.715982][   T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.725982][   T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.745648][ T3374] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.775939][T15325] team_slave_1: Caught tx_queue_len zero misconfig
[  355.793931][ T3374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.876720][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'.
[  355.893422][ T1333] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  355.907140][ T5756] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  356.193723][T15299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.355533][T15353] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20003
[  356.392243][T15349] bond5: invalid ARP target 0.0.0.0 specified for addition
[  356.392700][T15358] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  356.400340][T15349] bond5: option arp_ip_target: invalid value (0)
[  356.415237][ T5756] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  356.430293][T15349] bond5 (unregistering): Released all slaves
[  356.439652][T15360] netlink: 'syz.3.2526': attribute type 10 has an invalid length.
[  356.523029][T15360] 8021q: adding VLAN 0 to HW filter on device team0
[  356.583649][T15360] team0: entered allmulticast mode
[  356.610513][T15360] bond0: (slave team0): Enslaving as an active interface with an up link
[  356.632438][T15360] netlink: 'syz.3.2526': attribute type 10 has an invalid length.
[  356.665146][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.739325][T15360] netlink: 'syz.3.2526': attribute type 10 has an invalid length.
[  356.757113][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.808016][T15360] netlink: 'syz.3.2526': attribute type 10 has an invalid length.
[  356.940738][T15372] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2529'.
[  356.963325][ T1333] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  357.021182][ T1333] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  357.029827][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  357.080198][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  357.323980][T15391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.334551][ T7500] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  357.370048][T15403] validate_nla: 29 callbacks suppressed
[  357.370071][T15403] netlink: 'syz.4.2537': attribute type 4 has an invalid length.
[  358.156158][T15435] xt_hashlimit: size too large, truncated to 1048576
[  358.405600][T15453] syzkaller1: entered promiscuous mode
[  358.436766][T15453] syzkaller1: entered allmulticast mode
[  359.383326][T15511] bond11 (unregistering): Released all slaves
[  359.895462][T15548] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  359.926485][T15535] xt_CT: No such helper "snmp_trap"
[  360.078704][T15554] syzkaller1: entered promiscuous mode
[  360.085659][T15554] syzkaller1: entered allmulticast mode
[  360.096743][T15554] __nla_validate_parse: 6 callbacks suppressed
[  360.096764][T15554] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2574'.
[  360.117866][T15552] netlink: 'syz.4.2573': attribute type 1 has an invalid length.
[  360.247256][T15562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2573'.
[  360.248942][T15552] bond12: entered promiscuous mode
[  360.281251][T15552] 8021q: adding VLAN 0 to HW filter on device bond12
[  360.303890][T15563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'.
[  360.362834][T15563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2576'.
[  360.418535][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'.
[  360.828405][T15589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2584'.
[  360.848223][T15591] syzkaller1: entered promiscuous mode
[  360.862846][T15591] syzkaller1: entered allmulticast mode
[  360.964012][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  361.519219][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'.
[  361.551492][T15615] netlink: 'syz.1.2594': attribute type 7 has an invalid length.
[  361.570300][T15615] netlink: 'syz.1.2594': attribute type 8 has an invalid length.
[  361.584168][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'.
[  361.954080][T15635] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  361.962850][T15635] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  361.970747][T15635] tipc: Resetting bearer <eth:syzkaller0>
[  361.981972][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2602'.
[  362.199312][T15643] netlink: 'syz.4.2604': attribute type 1 has an invalid length.
[  362.368107][T15651] 8021q: adding VLAN 0 to HW filter on device bond14
[  362.378369][T15651] bond13: (slave bond14): making interface the new active one
[  362.387168][T15651] bond13: (slave bond14): Enslaving as an active interface with an up link
[  362.478405][ T1333] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  362.531244][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'.
[  363.033498][T15684] ip6t_rpfilter: unknown options
[  363.195443][ T5636] block nbd2: Receive control failed (result -107)
[  364.097530][T15709] netlink: 'syz.1.2621': attribute type 1 has an invalid length.
[  364.194433][T15709] bond6: entered promiscuous mode
[  364.202292][T15709] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.251143][T15722] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.277158][T15722] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  364.288152][T15722] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  364.314134][T15722] bond6: (slave ip6gre3): making interface the new active one
[  364.328540][T15722] ip6gre3: entered promiscuous mode
[  364.349051][T15722] bond6: (slave ip6gre3): Enslaving as an active interface with an up link
[  364.380214][T15709] syzkaller1: entered promiscuous mode
[  364.417013][T15709] syzkaller1: entered allmulticast mode
[  364.523145][T15720] syzkaller0: entered promiscuous mode
[  364.529435][T15720] syzkaller0: entered allmulticast mode
[  366.828478][T15749] netlink: 'syz.3.2631': attribute type 12 has an invalid length.
[  366.882290][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  366.977834][T15760] __nla_validate_parse: 6 callbacks suppressed
[  366.977861][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'.
[  367.035797][T15760] openvswitch: netlink: Flow actions attr not present in new flow.
[  367.088710][  T782] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.118339][  T782] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.258492][T15777] batadv0: left allmulticast mode
[  367.294648][T15781] sctp: [Deprecated]: syz.2.2638 (pid 15781) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.294648][T15781] Use struct sctp_sack_info instead
[  367.324966][T15777] batadv0: left promiscuous mode
[  367.355991][T15777] bridge0: port 1(batadv0) entered disabled state
[  367.440451][T15788] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  367.442682][T15789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2639'.
[  367.716635][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'.
[  367.751858][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'.
[  367.784940][T15802] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2645'.
[  368.161470][  T782] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  368.187191][  T782] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  368.244117][ T1333] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  368.287963][ T1333] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  368.399135][T15830] netlink: 'syz.2.2651': attribute type 1 has an invalid length.
[  368.426729][T15830] netlink: 'syz.2.2651': attribute type 3 has an invalid length.
[  368.453743][T15830] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2651'.
[  368.497165][T15830] NCSI netlink: No device for ifindex 813332851
[  368.585214][T15830] SET target dimension over the limit!
[  369.443364][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  369.561281][T15887] netlink: 'syz.2.2664': attribute type 30 has an invalid length.
[  369.585848][T15884] x_tables: unsorted entry at hook 1
[  369.601052][T15879] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  369.724981][T15879] bond15 (unregistering): Released all slaves
[  369.954859][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'.
[  370.005240][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2670'.
[  370.307941][T15923] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2675'.
[  370.334288][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'.
[  371.327358][T15934] 1ªî{X¹¦: left allmulticast mode
[  371.366090][T15934] sit0: left promiscuous mode
[  371.414742][T15934] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.422755][T15934] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.594955][T15934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  372.230259][T15990] __nla_validate_parse: 1 callbacks suppressed
[  372.230284][T15990] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2693'.
[  372.659265][T16013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2700'.
[  372.665299][T16008] syzkaller1: entered promiscuous mode
[  372.700752][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2700'.
[  372.714288][T16008] syzkaller1: entered allmulticast mode
[  372.720308][T16017] openvswitch: netlink: IP tunnel TTL not specified.
[  372.742681][T16017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.745183][T16014] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2700'.
[  372.759336][T16020] netlink: 'syz.3.2700': attribute type 10 has an invalid length.
[  372.802749][T16020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2700'.
[  372.819113][T16025] ip6tnl0: Caught tx_queue_len zero misconfig
[  372.851838][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'.
[  372.935540][T16020] geneve1: entered allmulticast mode
[  372.966960][T16020] team0: Port device geneve1 added
[  373.089231][T16036] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2704'.
[  373.233128][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2705'.
[  373.275796][T16043] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  373.424642][T16038] 8021q: adding VLAN 0 to HW filter on device bond11
[  373.809380][T16073] netlink: 'syz.2.2716': attribute type 13 has an invalid length.
[  373.840731][T16073] veth1_macvtap: left promiscuous mode
[  373.860370][T16073] macsec0: entered allmulticast mode
[  374.469132][T16108] netlink: 'syz.3.2725': attribute type 17 has an invalid length.
[  374.478763][T16109] netlink: 'syz.3.2725': attribute type 17 has an invalid length.
[  374.488558][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'.
[  374.500992][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'.
[  374.603114][T16108] erspan0: entered promiscuous mode
[  374.610881][T16108] gretap0: entered promiscuous mode
[  374.687201][T16117] x_tables: duplicate underflow at hook 1
[  375.509419][T16157] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  375.520183][T16157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.189138][T16248] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  377.563481][T16271] __nla_validate_parse: 7 callbacks suppressed
[  377.563509][T16271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2764'.
[  377.636599][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  377.959257][T16294] IPv6: NLM_F_CREATE should be specified when creating new route
[  377.970678][T16295] IPv6: NLM_F_CREATE should be specified when creating new route
[  377.985796][T16295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  377.993138][T16295] IPv6: NLM_F_CREATE should be set when creating new route
[  378.120638][T16303] xt_hashlimit: size too large, truncated to 1048576
[  378.180966][T16305] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2773'.
[  378.212277][T16305] 0ªX¹¦Dö»: renamed from gretap0
[  378.244652][T16305] 0ªX¹¦Dö»: entered allmulticast mode
[  379.223328][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2789'.
[  379.643456][T16364] bridge6: entered promiscuous mode
[  379.671133][T16364] bridge6: entered allmulticast mode
[  380.055217][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2799'.
[  380.099282][T16383] syzkaller0: entered promiscuous mode
[  380.119420][T16383] syzkaller0: entered allmulticast mode
[  380.944388][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.969451][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.000176][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.028406][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.048419][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.194931][T16433] syz.3.2807: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  383.205489][ T5636] Bluetooth: hci5: command tx timeout
[  383.276543][T16433] CPU: 0 UID: 0 PID: 16433 Comm: syz.3.2807 Not tainted syzkaller #0 PREEMPT(full) 
[  383.276569][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  383.276580][T16433] Call Trace:
[  383.276588][T16433]  <TASK>
[  383.276597][T16433]  dump_stack_lvl+0xe8/0x150
[  383.276636][T16433]  warn_alloc+0x24c/0x270
[  383.276666][T16433]  ? stack_depot_save_flags+0x33/0x800
[  383.276695][T16433]  ? __pfx_warn_alloc+0x10/0x10
[  383.276717][T16433]  ? kasan_save_track+0x3e/0x80
[  383.276739][T16433]  ? __kasan_kmalloc+0x93/0xb0
[  383.276761][T16433]  ? xsk_setsockopt+0x52a/0x960
[  383.276790][T16433]  ? do_sock_setsockopt+0x17c/0x1b0
[  383.276819][T16433]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  383.276843][T16433]  ? do_syscall_64+0x174/0x580
[  383.276865][T16433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.276889][T16433]  __vmalloc_node_range_noprof+0x12c/0x1730
[  383.276931][T16433]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  383.276954][T16433]  ? __kasan_kmalloc+0x93/0xb0
[  383.276977][T16433]  ? __kmalloc_cache_noprof+0x32d/0x660
[  383.277000][T16433]  ? __kmalloc_cache_noprof+0x150/0x660
[  383.277022][T16433]  vmalloc_user_noprof+0xad/0xe0
[  383.277042][T16433]  ? xskq_create+0xbf/0x170
[  383.277067][T16433]  xskq_create+0xbf/0x170
[  383.277094][T16433]  xsk_init_queue+0x8a/0xe0
[  383.277120][T16433]  xsk_setsockopt+0x52a/0x960
[  383.277143][T16433]  ? __fget_files+0x2a/0x420
[  383.277167][T16433]  ? __pfx_xsk_setsockopt+0x10/0x10
[  383.277229][T16433]  ? __pfx_aa_sk_perm+0x10/0x10
[  383.277275][T16433]  ? aa_sock_opt_perm+0xff/0x1a0
[  383.277294][T16433]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  383.277315][T16433]  ? __pfx_xsk_setsockopt+0x10/0x10
[  383.277341][T16433]  do_sock_setsockopt+0x17c/0x1b0
[  383.277377][T16433]  __x64_sys_setsockopt+0x13d/0x1b0
[  383.277405][T16433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.277423][T16433]  do_syscall_64+0x174/0x580
[  383.277439][T16433]  ? trace_irq_disable+0x3b/0x140
[  383.277462][T16433]  ? clear_bhb_loop+0x40/0x90
[  383.277484][T16433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.277499][T16433] RIP: 0033:0x7f25de19de99
[  383.277517][T16433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.277532][T16433] RSP: 002b:00007f25df004028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  383.277551][T16433] RAX: ffffffffffffffda RBX: 00007f25de426090 RCX: 00007f25de19de99
[  383.277563][T16433] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  383.277589][T16433] RBP: 00007f25de233eaf R08: 0000000000000004 R09: 0000000000000000
[  383.277600][T16433] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.277610][T16433] R13: 00007f25de426128 R14: 00007f25de426090 R15: 00007ffc3bc3b288
[  383.277636][T16433]  </TASK>
[  383.277648][T16433] Mem-Info:
[  383.644994][T16433] active_anon:6105 inactive_anon:0 isolated_anon:0
[  383.644994][T16433]  active_file:0 inactive_file:43213 isolated_file:0
[  383.644994][T16433]  unevictable:768 dirty:45 writeback:0
[  383.644994][T16433]  slab_reclaimable:11105 slab_unreclaimable:105557
[  383.644994][T16433]  mapped:30449 shmem:1294 pagetables:1318
[  383.644994][T16433]  sec_pagetables:0 bounce:0
[  383.644994][T16433]  kernel_misc_reclaimable:0
[  383.644994][T16433]  free:1320785 free_pcp:9012 free_cma:0
[  383.704465][T16434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2807'.
[  383.757836][T16444] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  383.765494][T16433] Node 0 active_anon:24620kB inactive_anon:0kB active_file:0kB inactive_file:172652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121896kB dirty:180kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14224kB pagetables:5340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  383.819221][T16433] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  383.856172][T16433] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  383.890043][T16433] lowmem_reserve[]: 0 2488 2489 2489 2489
[  383.899233][T16433] Node 0 DMA32 free:1325616kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24420kB inactive_anon:0kB active_file:0kB inactive_file:172652kB unevictable:1536kB writepending:180kB zspages:0kB present:3129332kB managed:2548652kB mlocked:0kB bounce:0kB free_pcp:36008kB local_pcp:20960kB free_cma:0kB
[  383.974451][T16433] lowmem_reserve[]: 0 0 0 0 0
[  383.996806][T16433] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  384.032868][T16433] lowmem_reserve[]: 0 0 0 0 0
[  384.055073][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'.
[  384.086448][T16433] Node 1 Normal free:3942164kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  384.093046][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2813'.
[  384.143827][T16451] netlink: 'syz.4.2813': attribute type 12 has an invalid length.
[  384.152574][T16451] netlink: 'syz.4.2813': attribute type 11 has an invalid length.
[  384.172452][T16433] lowmem_reserve[]: 0 0 0 0 0
[  384.177581][T16433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  384.209678][T16433] Node 0 DMA32: 1045*4kB (UME) 546*8kB (UME) 196*16kB (UME) 274*32kB (UME) 169*64kB (UM) 76*128kB (UM) 36*256kB (UME) 17*512kB (UME) 9*1024kB (UM) 6*2048kB (ME) 304*4096kB (UM) = 1325604kB
[  384.238415][T16433] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  384.253891][T16433] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 10*16kB (UM) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3942164kB
[  384.316805][T16433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  384.340415][T16433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  384.364191][T16433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  384.399581][T16433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  384.423525][T16466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2815'.
[  384.436327][T16433] 44628 total pagecache pages
[  384.464228][T16433] 0 pages in swap cache
[  384.483231][T16433] Free swap  = 124996kB
[  384.498623][T16433] Total swap = 124996kB
[  384.506712][T16433] 2097051 pages RAM
[  384.510670][T16433] 0 pages HighMem/MovableOnly
[  384.516759][T16433] 428208 pages reserved
[  384.532335][T16418] xfrm0 speed is unknown, defaulting to 1000
[  384.538588][T16433] 0 pages cma reserved
[  384.548504][T16418] virt_wifi0 speed is unknown, defaulting to 1000
[  384.759432][T16476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2820'.
[  384.768972][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'.
[  384.815679][T16472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2818'.
[  384.866618][T16477] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2818'.
[  384.952291][T16477] 0ªî{X¹¦: renamed from gretap0
[  384.986172][T16477] 0ªî{X¹¦: entered allmulticast mode
[  385.022801][T16477] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  385.078875][T16486] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2823'.
[  385.182354][T16493] netlink: 'syz.2.2824': attribute type 2 has an invalid length.
[  385.286076][ T5636] Bluetooth: hci5: command tx timeout
[  385.442258][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  385.710342][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2830'.
[  385.896385][T16522] syzkaller1: entered promiscuous mode
[  385.902302][T16522] syzkaller1: entered allmulticast mode
[  385.988553][T16418] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.996002][T16418] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.004382][T16418] bridge_slave_0: entered allmulticast mode
[  386.012968][T16418] bridge_slave_0: entered promiscuous mode
[  386.026716][T16418] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.034554][T16418] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.047301][T16418] bridge_slave_1: entered allmulticast mode
[  386.068423][T16418] bridge_slave_1: entered promiscuous mode
[  386.171622][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.187691][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.295291][T16540] netlink: 'syz.4.2834': attribute type 12 has an invalid length.
[  386.342950][T16418] team0: Port device team_slave_0 added
[  386.364057][T16418] team0: Port device team_slave_1 added
[  386.577930][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.608725][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.683196][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.776889][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.798866][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.827247][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.141109][T16418] hsr_slave_0: entered promiscuous mode
[  387.149415][T16418] hsr_slave_1: entered promiscuous mode
[  387.372854][ T5636] Bluetooth: hci5: command tx timeout
[  387.714924][T16603] 8021q: VLANs not supported on 
2
6±ÿª¨ú
rBº“
[  388.361038][T16418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  388.389509][T16418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.609513][T16418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  388.629200][T16418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.909191][T16640] __nla_validate_parse: 13 callbacks suppressed
[  388.909216][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2855'.
[  389.441856][ T5636] Bluetooth: hci5: command tx timeout
[  390.416499][T16591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  390.458912][T16418] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  390.490514][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.523996][T16418] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  390.629092][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  390.677372][T16418] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  390.745866][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  390.772729][T16658] C: entered promiscuous mode
[  390.785445][T16658] tunl0: entered promiscuous mode
[  390.804342][T16658] gre0: entered promiscuous mode
[  390.844335][T16666] netlink: 'syz.0.2863': attribute type 1 has an invalid length.
[  390.856028][T16658] 0ªX¹¦Dö»: entered promiscuous mode
[  390.863723][T16667] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  390.869618][T16658] 0ªX¹¦Dö»: left allmulticast mode
[  390.888418][T16658] erspan0: entered promiscuous mode
[  390.894653][T16658] ip_vti0: entered promiscuous mode
[  390.900778][T16418] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  390.960177][T16418] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  390.998190][T16666] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  391.001460][T16673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.074336][T16674] tipc: Resetting bearer <eth:syzkaller0>
[  391.366823][T16418] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.402991][T16418] 8021q: adding VLAN 0 to HW filter on device team0
[  391.433749][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.441087][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.491268][T16695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2869'.
[  391.519410][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.526801][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.538135][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2870'.
[  391.559974][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'.
[  391.684095][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'.
[  392.156110][T16729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.213430][T16729] IPVS: Unknown mcast interface: vcan0
[  392.917755][T16761] nbd: couldn't find a device at index 0
[  392.940809][T16762] x_tables: duplicate underflow at hook 3
[  393.134277][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.393481][  T566] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  393.410630][T16769] netlink: 'syz.4.2888': attribute type 10 has an invalid length.
[  393.423997][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'.
[  393.506593][T16418] veth0_vlan: entered promiscuous mode
[  393.574658][T16418] veth1_vlan: entered promiscuous mode
[  393.665029][T16786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2892'.
[  393.693803][T16789] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2894'.
[  393.706618][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'.
[  393.746536][T16418] veth0_macvtap: entered promiscuous mode
[  393.789932][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'.
[  393.828481][T16789] bond5: option min_links: invalid value (18446744073709551614)
[  393.855243][T16789] bond5: option min_links: allowed values 0 - 2147483647
[  393.889979][T16789] bond5 (unregistering): Released all slaves
[  393.951003][T16418] veth1_macvtap: entered promiscuous mode
[  393.981953][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.994291][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  394.054342][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.072701][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.159424][ T1333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.209774][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.495612][T16814] vlan2: entered promiscuous mode
[  394.515635][T16814] geneve1: entered promiscuous mode
[  394.534657][T16814] vlan2: entered allmulticast mode
[  394.593567][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.610484][T16824] __nla_validate_parse: 3 callbacks suppressed
[  394.610499][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'.
[  394.645378][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.749237][T16833] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2903'.
[  394.835933][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.872817][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.880663][T16837] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2904'.
[  395.325636][T16846] bridge6: entered promiscuous mode
[  395.377464][T16845] bridge7: entered promiscuous mode
[  395.404679][T16854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2907'.
[  395.456826][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'.
[  395.492252][T16854] nbd: couldn't find a device at index 0
[  395.567140][T16854] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  395.669097][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2909'.
[  395.717246][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2909'.
[  395.906572][T16878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2914'.
[  396.016522][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2916'.
[  396.212699][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.331079][T16902] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  396.343408][T16905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2923'.
[  396.493336][ T6204] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  396.992585][ T6204] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  397.231270][T16943] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  397.251102][T16944] veth1_macvtap: left promiscuous mode
[  397.367780][T16948] xfrm0 speed is unknown, defaulting to 1000
[  397.378311][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.393179][T16948] virt_wifi0 speed is unknown, defaulting to 1000
[  397.899428][T16973] netlink: 'syz.4.2941': attribute type 4 has an invalid length.
[  397.918181][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.927969][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.937965][T16973] netlink: 'syz.4.2941': attribute type 4 has an invalid length.
[  397.974766][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.986112][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.021938][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.092948][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.107724][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.118945][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.613424][T16994] netlink: 'syz.2.2945': attribute type 2 has an invalid length.
[  398.692082][T16997] netlink: 'syz.0.2947': attribute type 30 has an invalid length.
[  398.793524][T16994] : entered promiscuous mode
[  398.964919][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  398.994365][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  399.005180][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  399.026422][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  399.034444][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  399.119438][T17010] Cannot find add_set index 65532 as target
[  399.199023][ T5291] veth1_macvtap: entered promiscuous mode
[  399.548580][T17030] netlink: 'syz.1.2955': attribute type 2 has an invalid length.
[  399.569743][T17028] 8021q: VLANs not supported on ip6gre0
[  399.595525][T17031] 8021q: VLANs not supported on ip6gre0
[  399.807154][T17045] ipt_ECN: cannot use operation on non-tcp rule
[  399.819262][T17043] __nla_validate_parse: 6 callbacks suppressed
[  399.819283][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'.
[  399.873349][T17044] netlink: 4784 bytes leftover after parsing attributes in process `syz.3.2958'.
[  400.097742][T17060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'.
[  400.399602][T17073] xt_TCPMSS: Only works on TCP SYN packets
[  400.404254][T17070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.438970][T17006] xfrm0 speed is unknown, defaulting to 1000
[  400.458364][T17070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.478119][T17006] virt_wifi0 speed is unknown, defaulting to 1000
[  400.496632][T17070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.678021][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'.
[  400.726573][T17085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2969'.
[  400.763553][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'.
[  400.785507][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2967'.
[  400.932314][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2970'.
[  401.121812][ T5636] Bluetooth: hci3: command tx timeout
[  401.308016][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'.
[  401.403877][T17109] netlink: 'syz.0.2973': attribute type 1 has an invalid length.
[  401.548570][T17121] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  401.629769][T17123] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2975'.
[  401.878435][T17006] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.886340][T17006] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.894454][T17006] bridge_slave_0: entered allmulticast mode
[  401.903353][T17006] bridge_slave_0: entered promiscuous mode
[  401.917839][T17006] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.925600][T17006] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.933765][T17006] bridge_slave_1: entered allmulticast mode
[  401.942957][T17006] bridge_slave_1: entered promiscuous mode
[  402.041407][T17006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.073168][T17006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.161198][T17006] team0: Port device team_slave_0 added
[  402.180914][T17006] team0: Port device team_slave_1 added
[  402.340572][T17006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.348217][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.377849][T17006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.401416][T17006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.421617][T17006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.469785][T17153] Bluetooth: MGMT ver 1.23
[  402.482764][ T7472] net_ratelimit: 11 callbacks suppressed
[  402.482785][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.503251][T17006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.599700][T17153] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  402.676120][T17006] hsr_slave_0: entered promiscuous mode
[  402.693486][T17006] hsr_slave_1: entered promiscuous mode
[  402.699962][T17006] debugfs: 'hsr0' already exists in 'hsr'
[  402.719358][T17006] Cannot create hsr debugfs directory
[  402.966404][T17171] netlink: 'syz.2.2990': attribute type 1 has an invalid length.
[  403.142535][T17168] bond5: Unable to set up delay as MII monitoring is disabled
[  403.198484][T17168] bond5 (unregistering): Released all slaves
[  403.205756][ T4946] Bluetooth: hci3: command tx timeout
[  403.436217][T17181] syzkaller1: tun_chr_ioctl cmd 1074025677
[  403.455659][T17181] syzkaller1: linktype set to 823
[  403.525409][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.857356][T17189] syzkaller0: entered promiscuous mode
[  403.862927][T17189] syzkaller0: entered allmulticast mode
[  403.899061][T17200] bond0: (slave bond_slave_1): Releasing backup interface
[  403.926547][T17207] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  404.109128][T17215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.124974][T17215] IPv6: NLM_F_CREATE should be set when creating new route
[  404.132313][T17215] IPv6: NLM_F_CREATE should be set when creating new route
[  404.163020][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.561921][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  404.571406][ T4946] Bluetooth: hci2: command 0x0406 tx timeout
[  404.580912][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.284858][ T4946] Bluetooth: hci3: command tx timeout
[  405.602594][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.924195][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.934145][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.514067][T17245] __nla_validate_parse: 8 callbacks suppressed
[  406.514094][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'.
[  406.552239][T17245] netlink: 'syz.0.3007': attribute type 11 has an invalid length.
[  406.573764][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'.
[  406.644899][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.678537][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'.
[  406.703153][T17245] netlink: 'syz.0.3007': attribute type 11 has an invalid length.
[  406.728214][T17250] syzkaller0: entered promiscuous mode
[  406.734443][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'.
[  406.737357][T17250] syzkaller0: entered allmulticast mode
[  406.758867][T17252] netlink: 'syz.3.3010': attribute type 11 has an invalid length.
[  406.769669][T17252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3010'.
[  406.794269][T17252] netlink: 'syz.3.3010': attribute type 11 has an invalid length.
[  406.809946][T17252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3010'.
[  407.160975][T17259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3012'.
[  407.204624][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.334124][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'.
[  407.381841][ T4946] Bluetooth: hci3: command tx timeout
[  407.687170][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.735204][T17273] syzkaller0: entered promiscuous mode
[  407.756480][T17273] syzkaller0: entered allmulticast mode
[  407.842669][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.955243][T17281] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  407.981608][T17281] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  408.365823][T17286] netlink: 'syz.0.3019': attribute type 1 has an invalid length.
[  408.461472][T17290] bond6: (slave gretap1): making interface the new active one
[  408.470857][T17290] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  408.482744][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.577943][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3020'.
[  408.610781][T17006] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  408.647063][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  408.668380][T17006] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  408.706474][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  408.722438][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.759731][T17006] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  408.789454][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  408.816940][T17006] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  408.876429][T17006] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  409.024014][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'.
[  409.140399][T17317] bond5: Invalid ad_actor_system MAC address.
[  409.162316][T17317] bond5: option ad_actor_system: invalid value (1)
[  409.197927][T17317] bond5 (unregistering): Released all slaves
[  409.615331][T17006] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.669017][T17006] 8021q: adding VLAN 0 to HW filter on device team0
[  409.722521][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.729848][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.776856][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.835213][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.842570][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.142800][T17345] IPVS: Unknown mcast interface: caif0
[  410.409024][T17354] netlink: 'syz.0.3035': attribute type 3 has an invalid length.
[  410.803083][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.129635][T17373] netlink: 'syz.3.3040': attribute type 4 has an invalid length.
[  411.173626][T17373] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  411.191440][T17373] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  411.522208][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.649279][T17006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.695558][T17395] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  411.732066][T17395] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  411.786024][T17391] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.843097][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  411.926914][T17412] __nla_validate_parse: 4 callbacks suppressed
[  411.926946][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'.
[  412.026420][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'.
[  412.497417][T17428] IPVS: sh: FWM 3 0x00000003 - no destination available
[  412.694274][T17436] netlink: 'syz.2.3049': attribute type 1 has an invalid length.
[  412.806885][T17441] openvswitch: netlink: Flow actions attr not present in new flow.
[  412.830597][T17441] xt_ecn: cannot match TCP bits for non-tcp packets
[  412.885790][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.944340][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3052'.
[  412.958111][T17450] netlink: 'syz.3.3052': attribute type 16 has an invalid length.
[  412.967619][T17450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3052'.
[  413.035625][T17442] 8021q: adding VLAN 0 to HW filter on device bond5
[  413.186058][T17006] veth0_vlan: entered promiscuous mode
[  413.300820][T17006] veth1_vlan: entered promiscuous mode
[  413.537223][T17006] veth0_macvtap: entered promiscuous mode
[  413.608791][T17006] veth1_macvtap: entered promiscuous mode
[  413.770414][T17006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.860300][T17006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.924025][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.990782][ T3334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.034425][ T3334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.071459][ T3334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.107868][ T3334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.139772][T17490] sctp: [Deprecated]: syz.0.3058 (pid 17490) Use of struct sctp_assoc_value in delayed_ack socket option.
[  414.139772][T17490] Use struct sctp_sack_info instead
[  414.326804][T17492] syz.2.3059 (17492) used obsolete PPPIOCDETACH ioctl
[  414.563259][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.587001][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.620269][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.944685][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.971467][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.995647][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.089432][T17518] syzkaller0: entered promiscuous mode
[  415.112605][T17518] syzkaller0: entered allmulticast mode
[  415.186314][T17518] netlink: 'syz.2.3064': attribute type 1 has an invalid length.
[  416.003629][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.162830][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  416.212949][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'.
[  416.495462][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  416.509662][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  416.521474][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  416.541023][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  416.548887][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  416.763303][T17573] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3074'.
[  416.803393][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.830577][T17573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  416.872381][T17572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3075'.
[  416.886124][T17572] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3075'.
[  417.048161][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.256481][T17584] bond0: invalid NS target :: specified for addition
[  417.282457][T17584] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  417.378559][T17588] syzkaller0: entered promiscuous mode
[  417.396429][T17588] syzkaller0: entered allmulticast mode
[  417.457746][T17588] openvswitch: netlink: VXLAN extension 317 out of range max 1
[  417.617577][T17598] syzkaller0: entered promiscuous mode
[  417.641432][T17598] syzkaller0: entered allmulticast mode
[  418.070683][T17565] xfrm0 speed is unknown, defaulting to 1000
[  418.086985][  T810] net_ratelimit: 1 callbacks suppressed
[  418.087004][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.117332][T17565] virt_wifi0 speed is unknown, defaulting to 1000
[  418.310249][T17610] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  418.341154][T17614] netlink: 'syz.0.3085': attribute type 1 has an invalid length.
[  418.555968][T17619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3086'.
[  418.568139][T17620] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3087'.
[  418.642508][ T4946] Bluetooth: hci0: command tx timeout
[  418.992566][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3092'.
[  419.013096][T17637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.055463][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'.
[  419.124377][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.226370][T17645] tipc: Started in network mode
[  419.255720][T17645] tipc: Node identity 4a1230926296, cluster identity 4711
[  419.308522][T17645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.406693][T17643] syzkaller0: entered promiscuous mode
[  419.433976][T17643] syzkaller0: entered allmulticast mode
[  419.473618][T17645] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  419.682392][T17645] tipc: Resetting bearer <eth:syzkaller0>
[  419.813776][T17565] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.839317][T17565] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.855919][T17565] bridge_slave_0: entered allmulticast mode
[  419.881256][T17565] bridge_slave_0: entered promiscuous mode
[  419.890893][T17642] tipc: Resetting bearer <eth:syzkaller0>
[  419.966583][T17642] tipc: Disabling bearer <eth:syzkaller0>
[  420.162515][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.184936][T17565] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.208935][T17565] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.238292][T17565] bridge_slave_1: entered allmulticast mode
[  420.287312][T17565] bridge_slave_1: entered promiscuous mode
[  420.570482][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.643223][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.658531][  T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.722861][ T4946] Bluetooth: hci0: command tx timeout
[  420.740174][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.015210][T17565] team0: Port device team_slave_0 added
[  421.046685][T17565] team0: Port device team_slave_1 added
[  421.097310][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'.
[  421.116495][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.130984][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.199190][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.203170][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.290927][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.313469][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.391721][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.509417][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'.
[  421.565135][T17710] netlink: 'syz.4.3109': attribute type 1 has an invalid length.
[  421.713827][T17565] hsr_slave_0: entered promiscuous mode
[  421.724902][T17565] hsr_slave_1: entered promiscuous mode
[  421.733953][T17565] debugfs: 'hsr0' already exists in 'hsr'
[  421.754042][T17565] Cannot create hsr debugfs directory
[  421.801087][T17719] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  421.923750][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.019348][T17726] netlink: 'syz.0.3114': attribute type 8 has an invalid length.
[  422.049746][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3114'.
[  422.072101][T17730] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  422.242169][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.595351][T17748] x_tables: unsorted entry at hook 3
[  422.614482][T17748] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  422.803861][ T4946] Bluetooth: hci0: command tx timeout
[  422.832096][T17755] netlink: 'syz.4.3123': attribute type 2 has an invalid length.
[  422.840581][T17755] netlink: 'syz.4.3123': attribute type 8 has an invalid length.
[  422.848673][T17755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3123'.
[  422.924684][T17565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.958831][T17767] netlink: 'syz.0.3125': attribute type 27 has an invalid length.
[  422.966967][T17565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.990952][T17767] netlink: 'syz.0.3125': attribute type 4 has an invalid length.
[  422.999167][T17767] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3125'.
[  423.282276][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.350985][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3127'.
[  423.402742][T17565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.416042][T17565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.473880][T17774] netlink: 'syz.4.3128': attribute type 1 has an invalid length.
[  423.610016][T17784] __nla_validate_parse: 1 callbacks suppressed
[  423.610041][T17784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3129'.
[  423.655561][T17774] bond1 (unregistering): Released all slaves
[  423.733506][T17786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3129'.
[  423.837357][T17565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  423.846083][T17786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3129'.
[  423.879960][T17565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.018130][T17784] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  424.073421][T17793] bridge8: the hash_elasticity option has been deprecated and is always 16
[  424.220048][T17565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.231150][T17565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.253457][T17771] Bluetooth: hci0: Opcode 0x080f failed: -4
[  424.324512][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.493211][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.540666][T17809] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3137'.
[  424.611100][T17815] syzkaller0: entered promiscuous mode
[  424.620492][T17815] syzkaller0: entered allmulticast mode
[  424.764396][T17814] syzkaller0: entered promiscuous mode
[  424.780403][T17814] syzkaller0: entered allmulticast mode
[  424.882324][ T4946] Bluetooth: hci0: command tx timeout
[  424.961975][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.124104][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.254602][T17841] netlink: 'syz.3.3143': attribute type 4 has an invalid length.
[  425.305857][T17843] netlink: 'syz.3.3143': attribute type 4 has an invalid length.
[  425.362572][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.483137][T17565] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  425.530803][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  425.580066][T17565] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  425.641380][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  425.684217][T17565] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  425.697727][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3146'.
[  425.724381][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  425.840082][T17565] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  425.854094][T17859] openvswitch: netlink: IPv6 tunnel dst address is zero
[  425.907313][T17565] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  426.000582][T17863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3147'.
[  426.316684][T17876] netlink: 'syz.3.3151': attribute type 2 has an invalid length.
[  426.408969][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.423334][T17565] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.478854][T17565] 8021q: adding VLAN 0 to HW filter on device team0
[  426.507493][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.514766][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.568391][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.575656][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.961670][ T4946] Bluetooth: hci0: command 0x080f tx timeout
[  427.120083][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3157'.
[  427.197734][T17902] veth0_macvtap: left promiscuous mode
[  427.278349][T17907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3160'.
[  427.445758][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.653924][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3164'.
[  428.016035][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.111083][T17940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3169'.
[  428.201336][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.417195][T17948] syzkaller0: entered promiscuous mode
[  428.431784][T17948] syzkaller0: entered allmulticast mode
[  428.484356][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.607438][T17565] veth0_vlan: entered promiscuous mode
[  428.613716][T17953] __nla_validate_parse: 34 callbacks suppressed
[  428.613734][T17953] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3173'.
[  428.637304][T17957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3175'.
[  428.654452][T17957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3175'.
[  428.718097][T17565] veth1_vlan: entered promiscuous mode
[  428.888625][T17565] veth0_macvtap: entered promiscuous mode
[  428.943642][T17565] veth1_macvtap: entered promiscuous mode
[  428.989104][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.017796][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.061052][ T3334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.092264][ T3334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.109340][ T3334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.148059][ T3334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.523427][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.556077][T17996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3183'.
[  429.628283][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'.
[  429.641073][T18001] netlink: 'syz.0.3183': attribute type 2 has an invalid length.
[  429.661867][T18001] netlink: 'syz.0.3183': attribute type 1 has an invalid length.
[  430.562125][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.042668][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.558892][T17957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  431.606546][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.737266][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.766205][T18012] x_tables: duplicate underflow at hook 1
[  431.783709][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.813470][T18014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3189'.
[  431.898315][T16841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.932157][T16841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.163605][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.232236][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'.
[  432.294372][T18029] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3193'.
[  432.502727][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'.
[  432.517604][T18049] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3198'.
[  432.643538][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.332652][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  433.347805][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  433.357410][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  433.368542][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  433.376551][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  433.683881][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.768292][T18104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.780108][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.015451][T18117] __nla_validate_parse: 3 callbacks suppressed
[  434.015476][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'.
[  434.210172][T18122] SET target dimension over the limit!
[  434.320783][T18083] xfrm0 speed is unknown, defaulting to 1000
[  434.348920][T18083] virt_wifi0 speed is unknown, defaulting to 1000
[  434.544599][T18109] infiniband syz1: set down
[  434.564767][T18109] infiniband syz1: added team0
[  434.645086][T18135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3218'.
[  434.665890][T18109] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  434.692436][T18109] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  434.710459][T18109] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  434.722915][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.734856][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.792128][T18109] RDS/IB: syz1: added
[  434.798977][T18109] smc: adding ib device syz1 with port count 1
[  434.811448][T18109] smc:    ib device syz1 port 1 has no pnetid
[  434.957526][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3221'.
[  435.088668][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  435.202524][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.336954][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'.
[  435.442353][ T5636] Bluetooth: hci2: command tx timeout
[  435.498540][T18160] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3224'.
[  435.545914][T18160] openvswitch: netlink: Message has 512 unknown bytes.
[  435.565864][T18160] netlink: 'syz.1.3224': attribute type 1 has an invalid length.
[  435.767621][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.986773][T18083] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.998234][T18083] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.022124][T18083] bridge_slave_0: entered allmulticast mode
[  436.030586][T18083] bridge_slave_0: entered promiscuous mode
[  436.045068][T18083] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.052879][T18083] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.061405][T18083] bridge_slave_1: entered allmulticast mode
[  436.070156][T18083] bridge_slave_1: entered promiscuous mode
[  436.146654][T18083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.191940][T18083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.274030][T18083] team0: Port device team_slave_0 added
[  436.285996][T18083] team0: Port device team_slave_1 added
[  436.338308][T18083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.346534][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.378136][T18083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.398585][T18083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.407687][T18083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.437756][T18083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.522372][T18083] hsr_slave_0: entered promiscuous mode
[  436.529460][T18083] hsr_slave_1: entered promiscuous mode
[  436.536726][T18083] debugfs: 'hsr0' already exists in 'hsr'
[  436.546459][T18083] Cannot create hsr debugfs directory
[  436.815670][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.876141][T18083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  436.888730][T18083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.522378][ T5636] Bluetooth: hci2: command tx timeout
[  437.842380][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.925572][T18186] xfrm0 speed is unknown, defaulting to 1000
[  437.944662][T18186] virt_wifi0 speed is unknown, defaulting to 1000
[  437.958962][T18169] rdma_rxe: rxe_newlink: failed to add lo
[  438.244322][T18083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.255151][T18083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.376101][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3234'.
[  438.502801][T18083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.513666][T18083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.806676][T18205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3238'.
[  438.886800][ T7499] net_ratelimit: 1 callbacks suppressed
[  438.886822][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.604880][ T5636] Bluetooth: hci2: command tx timeout
[  439.922605][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.969433][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.193048][T18214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  441.212724][T18216] bridge0: port 4(dummy0) entered blocking state
[  441.228378][T18216] bridge0: port 4(dummy0) entered disabled state
[  441.248356][T18216] dummy0: entered allmulticast mode
[  441.283038][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.284262][T18216] dummy0: entered promiscuous mode
[  441.311011][T18219] netlink: 'syz.1.3240': attribute type 1 has an invalid length.
[  441.355667][T18083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.384360][T18083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.469909][T18219] bond1: entered promiscuous mode
[  441.476597][T18219] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.503934][T18225] syzkaller1: entered promiscuous mode
[  441.516421][T18225] syzkaller1: entered allmulticast mode
[  441.600779][T18219] bond1: (slave bridge1): making interface the new active one
[  441.635098][T18219] bridge1: entered promiscuous mode
[  441.647030][T18219] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  441.696036][ T5636] Bluetooth: hci2: command tx timeout
[  441.803916][T18232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3244'.
[  441.974249][T18234] team0: Device gtp0 is up. Set it down before adding it as a team port
[  442.005678][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.484080][T18083] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  442.500601][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  442.521288][T18083] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  442.549640][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.610509][T18083] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  442.648990][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.725673][T18083] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  442.734979][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3251'.
[  442.769521][T18083] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  442.930390][T18262] xt_hl: Unknown Hop Limit match mode: 206
[  442.946522][T18262] xt_ecn: cannot match TCP bits for non-tcp packets
[  442.972805][T18262] x_tables: duplicate underflow at hook 1
[  443.044278][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.153361][T18284] dvmrp0: entered allmulticast mode
[  443.241317][T18289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'.
[  443.425002][T18083] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.500702][T18295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3257'.
[  443.561430][T18083] 8021q: adding VLAN 0 to HW filter on device team0
[  443.602797][ T3385] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.610133][ T3385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.661160][ T3385] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.668503][ T3385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.903978][  T810] IPVS: starting estimator thread 0...
[  444.029728][T18316] IPVS: using max 35 ests per chain, 84000 per kthread
[  444.085236][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.117724][T18323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3264'.
[  444.146581][T18311] syzkaller0: entered promiscuous mode
[  444.162957][T18311] syzkaller0: entered allmulticast mode
[  444.325279][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.335761][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.124307][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.166483][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.092162][T18359] syzkaller1: entered promiscuous mode
[  447.098019][T18359] syzkaller1: entered allmulticast mode
[  447.204142][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.340142][T18083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.363617][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.388147][T18337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  447.438474][T18083] veth0_vlan: entered promiscuous mode
[  447.538543][T18083] veth1_vlan: entered promiscuous mode
[  447.654203][T18083] veth0_macvtap: entered promiscuous mode
[  447.691218][T18083] veth1_macvtap: entered promiscuous mode
[  447.781840][T18083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.813894][T18378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3275'.
[  447.836781][T18083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.931367][ T3385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.113000][ T3385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.139785][ T3385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.164908][ T3385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.246765][ T7499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.413163][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.426567][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.585469][ T3334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.605239][ T3334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.826793][T18408] xfrm0 speed is unknown, defaulting to 1000
[  448.832380][T18412] netlink: 'syz.0.3288': attribute type 11 has an invalid length.
[  448.891244][T18408] virt_wifi0 speed is unknown, defaulting to 1000
[  448.987132][T18419] syzkaller0: entered promiscuous mode
[  448.996855][T18419] syzkaller0: entered allmulticast mode
[  449.096441][T18413] xfrm0 speed is unknown, defaulting to 1000
[  449.215048][T18413] virt_wifi0 speed is unknown, defaulting to 1000
[  449.251438][T18423] syzkaller0: entered promiscuous mode
[  449.257383][T18423] syzkaller0: entered allmulticast mode
[  449.282851][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.649355][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  449.664109][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  449.675176][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  449.691997][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  449.699779][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  450.084415][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.348671][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.406560][ T6204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.746320][T18468] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3297'.
[  450.896067][T18470] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  450.953422][T18466] bridge_slave_0: left allmulticast mode
[  450.969472][T18466] bridge_slave_0: left promiscuous mode
[  450.997823][T18466] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.050299][T18466] bridge_slave_1: left allmulticast mode
[  451.078126][T18466] bridge_slave_1: left promiscuous mode
[  451.084631][T18466] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.108590][T18466] bond0: (slave bond_slave_0): Releasing backup interface
[  451.140412][T18466] bond0: (slave bond_slave_1): Releasing backup interface
[  451.180479][T18466] team0: Port device team_slave_0 removed
[  451.198669][T18466] team0: Port device team_slave_1 removed
[  451.208090][T18466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.222808][T18466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.234294][T18466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.241813][T18466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.256674][T18466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  451.365735][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.549369][T18430] xfrm0 speed is unknown, defaulting to 1000
[  451.599245][T18430] virt_wifi0 speed is unknown, defaulting to 1000
[  451.762144][ T5636] Bluetooth: hci4: command tx timeout
[  451.886734][ T6204] IPVS: starting estimator thread 0...
[  451.906457][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3305'.
[  451.971208][T18506] IPVS: sh: FWM 3 0x00000003 - no destination available
[  451.991678][T18505] IPVS: using max 27 ests per chain, 64800 per kthread
[  452.403337][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.460760][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'.
[  453.443040][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.451341][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.852715][ T5636] Bluetooth: hci4: command tx timeout
[  453.880678][T18560] vlan3: entered allmulticast mode
[  453.920225][T18560] bond0: entered allmulticast mode
[  453.967236][T18560] bond_slave_0: entered allmulticast mode
[  454.006917][T18560] bond_slave_1: entered allmulticast mode
[  454.159349][T18430] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.185737][T18430] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.224166][T18430] bridge_slave_0: entered allmulticast mode
[  454.266145][T18430] bridge_slave_0: entered promiscuous mode
[  454.326641][T18430] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.335165][T18430] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.343242][T18430] bridge_slave_1: entered allmulticast mode
[  454.353701][T18430] bridge_slave_1: entered promiscuous mode
[  454.518374][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.564193][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.623994][T18588] netlink: 'syz.1.3325': attribute type 24 has an invalid length.
[  454.632916][T18430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.667681][T18430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.779011][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3325'.
[  454.782025][T18586] tipc: Resetting bearer <eth:syzkaller0>
[  454.874213][T18430] team0: Port device team_slave_0 added
[  454.923038][T18586] tipc: Resetting bearer <eth:syzkaller0>
[  454.976264][T18430] team0: Port device team_slave_1 added
[  455.090418][T18430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.117325][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.181822][T18430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.246659][T18430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.281657][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.343856][T18430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.505332][T18608] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3329'.
[  455.524784][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.526666][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3329'.
[  455.591718][T18430] hsr_slave_0: entered promiscuous mode
[  455.611095][T18430] hsr_slave_1: entered promiscuous mode
[  455.633005][T18430] debugfs: 'hsr0' already exists in 'hsr'
[  455.638854][T18430] Cannot create hsr debugfs directory
[  455.941574][ T5636] Bluetooth: hci4: command tx timeout
[  456.562169][ T7472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.719363][T18430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.732332][T18430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.938228][T18430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.949037][T18430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.074575][T18430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.106297][T18430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.118453][T18529] Set syz1 is full, maxelem 65536 reached
[  457.298199][T18430] netdevsim netdevsim0 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.308127][T18430] netdevsim netdevsim0 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.338037][T18620] vlan2: entered allmulticast mode
[  457.343666][T18620] veth1_virt_wifi: entered allmulticast mode
[  457.507641][T18590] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  457.514201][T18590] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  457.602349][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.610618][ T7490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.667037][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3334'.
[  457.683662][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3334'.
[  457.699496][T18590] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  457.706530][T18590] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  457.720059][T18430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  457.738841][T18430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.748395][T18430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  457.774055][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.798740][T18430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  457.812337][T18627] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3334'.
[  457.816633][T18430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  457.844208][T18430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  457.863462][T18590] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  457.872925][T18430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  457.879740][T18590] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  457.894485][T18430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.914898][T18590] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  457.922310][T18590] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  457.957433][T18590] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  457.969770][T18590] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  458.001598][    C0] ------------[ cut here ]------------
[  458.007427][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci4
[  458.014228][    C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#0: syz.4.3335/18635
[  458.024105][    C0] Modules linked in:
[  458.028481][    C0] CPU: 0 UID: 0 PID: 18635 Comm: syz.4.3335 Not tainted syzkaller #0 PREEMPT(full) 
[  458.037905][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  458.048015][    C0] RIP: 0010:__queue_work+0xd66/0x10a0
[  458.053461][    C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 36 6b cd 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 14 ba a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[  458.073146][    C0] RSP: 0000:ffffc90000007bc8 EFLAGS: 00010046
[  458.079277][    C0] RAX: 1ffff11007aee14e RBX: dffffc0000000000 RCX: ffff8880577b5d00
[  458.087312][    C0] RDX: ffff88805576f970 RSI: ffffffff8ac1cf20 RDI: ffffffff905ab590
[  458.095328][    C0] RBP: 0000000000000100 R08: ffffffff90578af7 R09: 1ffffffff20af15e
[  458.103346][    C0] R10: dffffc0000000000 R11: ffffffff818d5180 R12: 0000000000000008
[  458.111403][    C0] R13: ffff88803d770a58 R14: ffffffff905ab590 R15: ffff88805576f970
[  458.119449][    C0] FS:  000055558d52e500(0000) GS:ffff888124f52000(0000) knlGS:0000000000000000
[  458.128420][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.135041][    C0] CR2: 000000110c230000 CR3: 000000008a8e2000 CR4: 00000000003526f0
[  458.143055][    C0] Call Trace:
[  458.146415][    C0]  <IRQ>
[  458.149300][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  458.154740][    C0]  call_timer_fn+0x192/0x5e0
[  458.159385][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  458.165252][    C0]  ? call_timer_fn+0xd4/0x5e0
[  458.169998][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  458.175177][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  458.180335][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  458.186188][    C0]  __run_timer_base+0x67e/0x8b0
[  458.191087][    C0]  ? ktime_get+0x45/0x220
[  458.195484][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  458.200915][    C0]  ? ktime_get+0x1f5/0x220
[  458.205392][    C0]  ? lapic_next_event+0x11/0x20
[  458.210320][    C0]  run_timer_softirq+0xb7/0x170
[  458.215233][    C0]  handle_softirqs+0x225/0x840
[  458.220054][    C0]  ? __irq_exit_rcu+0xca/0x220
[  458.224868][    C0]  __irq_exit_rcu+0xca/0x220
[  458.229492][    C0]  irq_exit_rcu+0x9/0x30
[  458.233773][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  458.239467][    C0]  </IRQ>
[  458.242474][    C0]  <TASK>
[  458.245442][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  458.251475][    C0] RIP: 0010:kasan_check_range+0x97/0x2c0
[  458.257195][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd
[  458.276897][    C0] RSP: 0000:ffffc900039df828 EFLAGS: 00000246
[  458.283020][    C0] RAX: 1ffffffff34ff401 RBX: ffffffffffffffff RCX: ffffffff823fbdfd
[  458.283295][T18430] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.291027][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ecb09e8
[  458.305672][    C0] RBP: 0000000000000001 R08: ffff88801ecb09eb R09: 1ffff11003d9613d
[  458.313696][    C0] R10: dffffc0000000000 R11: ffffed1003d9613d R12: 0000000000000001
[  458.321721][    C0] R13: ffffffff823fbcb7 R14: ffffed1003d9613e R15: 1ffff11003d9613d
[  458.329742][    C0]  ? page_table_check_set+0x127/0x530
[  458.335179][    C0]  ? page_table_check_set+0x26d/0x530
[  458.340628][    C0]  ? page_ext_lookup+0x127/0x180
[  458.345616][    C0]  ? page_table_check_set+0x127/0x530
[  458.351044][    C0]  page_table_check_set+0x26d/0x530
[  458.356301][    C0]  ? page_table_check_set+0x127/0x530
[  458.361734][    C0]  set_pte_range+0x7ef/0x840
[  458.366379][    C0]  filemap_map_pages+0xf35/0x2090
[  458.371475][    C0]  ? filemap_map_pages+0x1d8/0x2090
[  458.376731][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  458.381356][T18430] 8021q: adding VLAN 0 to HW filter on device team0
[  458.382243][    C0]  ? lruvec_stat_mod_folio+0x28b/0x3e0
[  458.382286][    C0]  ? do_pte_missing+0x140c/0x34b0
[  458.382315][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  458.382341][    C0]  ? do_pte_missing+0x140c/0x34b0
[  458.382370][    C0]  do_pte_missing+0x20ae/0x34b0
[  458.382405][    C0]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  458.382438][    C0]  ? __pmd_alloc+0x40a/0x5c0
[  458.382466][    C0]  handle_mm_fault+0x1b36/0x3080
[  458.382505][    C0]  ? handle_mm_fault+0xec/0x3080
[  458.435978][    C0]  ? __pfx_handle_mm_fault+0x10/0x10
[  458.441325][    C0]  ? lock_vma_under_rcu+0x45a/0x500
[  458.446630][    C0]  ? __pfx_do_futex+0x10/0x10
[  458.451402][    C0]  do_user_addr_fault+0xa4d/0x1340
[  458.455111][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.456577][    C0]  ? trace_page_fault_user+0x84/0x1e0
[  458.464073][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.469014][    C0]  exc_page_fault+0x6a/0xc0
[  458.480760][    C0]  asm_exc_page_fault+0x26/0x30
[  458.485660][    C0] RIP: 0033:0x7f7f2ac72750
[  458.490108][    C0] Code: 01 00 48 83 c0 01 48 39 f0 72 ef e9 89 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0d 31 f9 3a 00 31 c0 48 81 ce ff ff ff 3f <48> 3b 34 c1 74 14 48 83 c0 01 48 83 f8 04 0f 84 39 fe ff ff 48 3b
[  458.509775][    C0] RSP: 002b:00007ffefacd0340 EFLAGS: 00010286
[  458.515908][    C0] RAX: 0000000000000000 RBX: ffffffff81d88170 RCX: 000000110c230000
[  458.523930][    C0] RDX: 0000000000000170 RSI: ffffffffbfffffff RDI: 0000000000000000
[  458.531955][    C0] RBP: 0000000000000000 R08: 00007f7f2b010000 R09: 00007f7f2b012000
[  458.539978][    C0] R10: 0000000081d88174 R11: 0000000000000000 R12: 00007f7f2b026038
[  458.548004][    C0] R13: 0000000000000000 R14: ffffffff81d88170 R15: 00007f7f2bb55720
[  458.556027][    C0]  ? __x64_sys_bpf+0x20/0xd0
[  458.560725][    C0]  ? __x64_sys_bpf+0x20/0xd0
[  458.565390][    C0]  </TASK>
[  458.568447][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  458.575766][    C0] CPU: 0 UID: 0 PID: 18635 Comm: syz.4.3335 Not tainted syzkaller #0 PREEMPT(full) 
[  458.585268][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  458.595371][    C0] Call Trace:
[  458.598687][    C0]  <IRQ>
[  458.601563][    C0]  vpanic+0x56c/0xa60
[  458.605602][    C0]  ? __pfx__printk+0x10/0x10
[  458.610229][    C0]  ? __pfx_vpanic+0x10/0x10
[  458.614792][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  458.620166][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  458.625458][    C0]  panic+0xc5/0xd0
[  458.629244][    C0]  ? __pfx_panic+0x10/0x10
[  458.633735][    C0]  __warn+0x315/0x4c0
[  458.637768][    C0]  ? __queue_work+0xd4a/0x10a0
[  458.642588][    C0]  ? __queue_work+0xd4a/0x10a0
[  458.647401][    C0]  __report_bug+0x276/0x570
[  458.652127][    C0]  ? __queue_work+0xd4a/0x10a0
[  458.656951][    C0]  ? __pfx___report_bug+0x10/0x10
[  458.662045][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  458.667462][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  458.672535][    C0]  ? look_up_lock_class+0x57/0x110
[  458.677692][    C0]  ? register_lock_class+0x31/0x2e0
[  458.682959][    C0]  report_bug_entry+0x19a/0x290
[  458.687948][    C0]  ? __queue_work+0xd66/0x10a0
[  458.692757][    C0]  ? __queue_work+0xd6b/0x10a0
[  458.697562][    C0]  handle_bug+0xce/0x200
[  458.701847][    C0]  exc_invalid_op+0x1a/0x50
[  458.706384][    C0]  asm_exc_invalid_op+0x1a/0x20
[  458.711262][    C0] RIP: 0010:__queue_work+0xd66/0x10a0
[  458.716707][    C0] Code: 49 81 c7 70 01 00 00 4c 8d 35 36 6b cd 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 14 ba a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[  458.736348][    C0] RSP: 0000:ffffc90000007bc8 EFLAGS: 00010046
[  458.742446][    C0] RAX: 1ffff11007aee14e RBX: dffffc0000000000 RCX: ffff8880577b5d00
[  458.750442][    C0] RDX: ffff88805576f970 RSI: ffffffff8ac1cf20 RDI: ffffffff905ab590
[  458.758437][    C0] RBP: 0000000000000100 R08: ffffffff90578af7 R09: 1ffffffff20af15e
[  458.766435][    C0] R10: dffffc0000000000 R11: ffffffff818d5180 R12: 0000000000000008
[  458.774426][    C0] R13: ffff88803d770a58 R14: ffffffff905ab590 R15: ffff88805576f970
[  458.782434][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  458.788377][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  458.793709][    C0]  ? __queue_work+0xd25/0x10a0
[  458.798560][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  458.803988][    C0]  call_timer_fn+0x192/0x5e0
[  458.808631][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  458.814473][    C0]  ? call_timer_fn+0xd4/0x5e0
[  458.819213][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  458.824373][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  458.829513][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  458.835356][    C0]  __run_timer_base+0x67e/0x8b0
[  458.840242][    C0]  ? ktime_get+0x45/0x220
[  458.844637][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  458.850041][    C0]  ? ktime_get+0x1f5/0x220
[  458.854513][    C0]  ? lapic_next_event+0x11/0x20
[  458.859400][    C0]  run_timer_softirq+0xb7/0x170
[  458.864284][    C0]  handle_softirqs+0x225/0x840
[  458.869078][    C0]  ? __irq_exit_rcu+0xca/0x220
[  458.873867][    C0]  __irq_exit_rcu+0xca/0x220
[  458.878478][    C0]  irq_exit_rcu+0x9/0x30
[  458.882741][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  458.888411][    C0]  </IRQ>
[  458.891356][    C0]  <TASK>
[  458.894309][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  458.900309][    C0] RIP: 0010:kasan_check_range+0x97/0x2c0
[  458.905967][    C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd
[  458.925621][    C0] RSP: 0000:ffffc900039df828 EFLAGS: 00000246
[  458.931744][    C0] RAX: 1ffffffff34ff401 RBX: ffffffffffffffff RCX: ffffffff823fbdfd
[  458.939762][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ecb09e8
[  458.947789][    C0] RBP: 0000000000000001 R08: ffff88801ecb09eb R09: 1ffff11003d9613d
[  458.955874][    C0] R10: dffffc0000000000 R11: ffffed1003d9613d R12: 0000000000000001
[  458.963965][    C0] R13: ffffffff823fbcb7 R14: ffffed1003d9613e R15: 1ffff11003d9613d
[  458.971991][    C0]  ? page_table_check_set+0x127/0x530
[  458.977435][    C0]  ? page_table_check_set+0x26d/0x530
[  458.982865][    C0]  ? page_ext_lookup+0x127/0x180
[  458.987843][    C0]  ? page_table_check_set+0x127/0x530
[  458.993251][    C0]  page_table_check_set+0x26d/0x530
[  458.998504][    C0]  ? page_table_check_set+0x127/0x530
[  459.003912][    C0]  set_pte_range+0x7ef/0x840
[  459.008543][    C0]  filemap_map_pages+0xf35/0x2090
[  459.013614][    C0]  ? filemap_map_pages+0x1d8/0x2090
[  459.018869][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  459.024354][    C0]  ? lruvec_stat_mod_folio+0x28b/0x3e0
[  459.029844][    C0]  ? do_pte_missing+0x140c/0x34b0
[  459.034909][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  459.040422][    C0]  ? do_pte_missing+0x140c/0x34b0
[  459.045488][    C0]  do_pte_missing+0x20ae/0x34b0
[  459.050399][    C0]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  459.056732][    C0]  ? __pmd_alloc+0x40a/0x5c0
[  459.061374][    C0]  handle_mm_fault+0x1b36/0x3080
[  459.066375][    C0]  ? handle_mm_fault+0xec/0x3080
[  459.071366][    C0]  ? __pfx_handle_mm_fault+0x10/0x10
[  459.076683][    C0]  ? lock_vma_under_rcu+0x45a/0x500
[  459.081919][    C0]  ? __pfx_do_futex+0x10/0x10
[  459.086652][    C0]  do_user_addr_fault+0xa4d/0x1340
[  459.091835][    C0]  ? trace_page_fault_user+0x84/0x1e0
[  459.097252][    C0]  exc_page_fault+0x6a/0xc0
[  459.101794][    C0]  asm_exc_page_fault+0x26/0x30
[  459.106668][    C0] RIP: 0033:0x7f7f2ac72750
[  459.111110][    C0] Code: 01 00 48 83 c0 01 48 39 f0 72 ef e9 89 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0d 31 f9 3a 00 31 c0 48 81 ce ff ff ff 3f <48> 3b 34 c1 74 14 48 83 c0 01 48 83 f8 04 0f 84 39 fe ff ff 48 3b
[  459.130764][    C0] RSP: 002b:00007ffefacd0340 EFLAGS: 00010286
[  459.136869][    C0] RAX: 0000000000000000 RBX: ffffffff81d88170 RCX: 000000110c230000
[  459.144862][    C0] RDX: 0000000000000170 RSI: ffffffffbfffffff RDI: 0000000000000000
[  459.152858][    C0] RBP: 0000000000000000 R08: 00007f7f2b010000 R09: 00007f7f2b012000
[  459.160850][    C0] R10: 0000000081d88174 R11: 0000000000000000 R12: 00007f7f2b026038
[  459.168840][    C0] R13: 0000000000000000 R14: ffffffff81d88170 R15: 00007f7f2bb55720
[  459.176833][    C0]  ? __x64_sys_bpf+0x20/0xd0
[  459.181457][    C0]  ? __x64_sys_bpf+0x20/0xd0
[  459.186086][    C0]  </TASK>
[  459.189728][    C0] Kernel Offset: disabled
[  459.194075][    C0] Rebooting in 86400 seconds..