last executing test programs:

3.503506336s ago: executing program 4 (id=4260):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000005c0)={{&(0x7f0000000100)=[{0x16, 0x5, 0x6, {0x2bd2, 0x1}, 0xa78, 0x3, 0x5}, {0x2, 0x2, 0x4, {0x77e7, 0x6}, 0xc2, 0x80000000, 0x3}, {0xfffffffffffffff7, 0xff, 0x9, {0x9, 0x344b}, 0x7fffffffffffffff, 0x7, 0xd}, {0x8, 0x254, 0x4, {0x9, 0x3}, 0xfffffffffffffff7, 0x2, 0x6}, {0xd5e, 0xff, 0x800, {0x3, 0x6}, 0xffffffff, 0x2, 0x9}, {0x3bab, 0x4, 0x966b, {0x5, 0x4}, 0x1, 0x3, 0x7}, {0x2, 0x6, 0x6, {0x15}, 0x4, 0x3, 0x2}, {0x2, 0x7, 0x65c, {0x401, 0x3ff}, 0x400, 0x39, 0x2}, {0x0, 0x3320, 0x1, {0x8000000000000001, 0x1ff}, 0x80000001, 0xcd, 0x1da}], 0x9, 0x40, 0xa, 0x5}, {&(0x7f0000000340)=[{0x4, 0x100000001}, {0x9, 0x5}, {0x4fcc0613, 0x2}, {0x9}, {0x401, 0x2}, {0xffffffffffffffff, 0x80}, {0x58, 0x6}, {0x6, 0x100000000}, {0x1, 0x719}, {0x7, 0x5}], 0xa, 0x10, 0x8, 0x8}, {&(0x7f0000000400)=[0x5761dd48, 0x8, 0x7c, 0x7, 0x6], 0x5, 0x8, 0x1}, {&(0x7f0000000440)=[{0x2, 0x4, 0x100000001, 0x1000, 0x2}, {0x8, 0x9, 0x7fffffff, 0x9, 0xc1}, {0x10001, 0x0, 0x3a, 0xcc, 0x5}, {0x232f, 0x8, 0xb, 0x7, 0x3}, {0x2, 0x2, 0x2, 0x9, 0x1}, {0x5, 0x4, 0x6, 0x0, 0x5}, {0x3, 0x2, 0x0, 0xfffffffffffffff9, 0x580b}], 0x7, 0x28, 0x2, 0x9}, {&(0x7f0000000580)=[0x9, 0x8000000000000000, 0x2, 0x3, 0x8001], 0x5, 0x8, 0x8, 0x8}})
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000005c0)={{&(0x7f0000000100)=[{0x16, 0x5, 0x6, {0x2bd2, 0x1}, 0xa78, 0x3, 0x5}, {0x2, 0x2, 0x4, {0x77e7, 0x6}, 0xc2, 0x80000000, 0x3}, {0xfffffffffffffff7, 0xff, 0x9, {0x9, 0x344b}, 0x7fffffffffffffff, 0x7, 0xd}, {0x8, 0x254, 0x4, {0x9, 0x3}, 0xfffffffffffffff7, 0x2, 0x6}, {0xd5e, 0xff, 0x800, {0x3, 0x6}, 0xffffffff, 0x2, 0x9}, {0x3bab, 0x4, 0x966b, {0x5, 0x4}, 0x1, 0x3, 0x7}, {0x2, 0x6, 0x6, {0x15}, 0x4, 0x3, 0x2}, {0x2, 0x7, 0x65c, {0x401, 0x3ff}, 0x400, 0x39, 0x2}, {0x0, 0x3320, 0x1, {0x8000000000000001, 0x1ff}, 0x80000001, 0xcd, 0x1da}], 0x9, 0x40, 0xa, 0x5}, {&(0x7f0000000340)=[{0x4, 0x100000001}, {0x9, 0x5}, {0x4fcc0613, 0x2}, {0x9}, {0x401, 0x2}, {0xffffffffffffffff, 0x80}, {0x58, 0x6}, {0x6, 0x100000000}, {0x1, 0x719}, {0x7, 0x5}], 0xa, 0x10, 0x8, 0x8}, {&(0x7f0000000400)=[0x5761dd48, 0x8, 0x7c, 0x7, 0x6], 0x5, 0x8, 0x1}, {&(0x7f0000000440)=[{0x2, 0x4, 0x100000001, 0x1000, 0x2}, {0x8, 0x9, 0x7fffffff, 0x9, 0xc1}, {0x10001, 0x0, 0x3a, 0xcc, 0x5}, {0x232f, 0x8, 0xb, 0x7, 0x3}, {0x2, 0x2, 0x2, 0x9, 0x1}, {0x5, 0x4, 0x6, 0x0, 0x5}, {0x3, 0x2, 0x0, 0xfffffffffffffff9, 0x580b}], 0x7, 0x28, 0x2, 0x9}, {&(0x7f0000000580)=[0x9, 0x8000000000000000, 0x2, 0x3, 0x8001], 0x5, 0x8, 0x8, 0x8}}) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async)

3.256053293s ago: executing program 4 (id=4265):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x14, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010005000000ffdbdf25250000070e0001006e657464597673696d0000000f0002006e657464657673696d30000003a6688ba4260cf5e8a1d61ed359d3d58d9cb0191471b8147250e9df012d86be7d71d51b322aa3927b7ca71a0514081a8ffe82851ae1f741f4b55d650c7b3f3bb4af7ef3ad0fc8a3fa4cb2466f7b6e4f804c17a414ac8d6376aada00f818347df2fb1f2dcfbca317bab32642ae74345469b54b22649348762c0ff8c5f25b126cb2d02b4462710c550ad4c306bc"], 0x34}}, 0x24004814)

2.819515441s ago: executing program 3 (id=4273):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x842}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x2042, 0xfff7fffd, 0x2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r3, &(0x7f0000000140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000000)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r4, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="3edf2c109e97b4e7e288fba41afa6db1ecad490101f828c31a88514ee01ba388f269154ee2247e4f31b5da018d18b5532019210f09ca3e2307b80f7279f7058cf887c4817ef738642b6918fac2cebb463c3721cf8390009abf75fedd4c8d9c38667d4c67546dae0e87c8964650f159fa1099fab1cc58a59478615ebeef874d5a0c03636fe9e6659ab4a801616441e5466463bcb5aa31a01256c9801c7faef797c3e9a56c32b1779eaeca6518ad5623391a5eb7a89ec59300ea807e3dcc6c3c0a85f2ef81bdf0fea4", @ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="1548b7bedcd85eb4be2d43bb49df7a106b16cb5f15e9b6c1b50c351a5cceff001e16807b2b77e6146b9fae4a98efba589680c8b0aff70abf17734c2be65d407005e106573bc403b5b770fc70e7d828e1e5272b9886d146747ffc000007d25886658ac6eb1b99ce750201e8c07282e3e41e7035fb8bb5d3b8e1072107156574613bf7aaa4f2607ae30b1fd3def57bed7bbd7e80285fe92843bd7dbfd4e766286eec2d234b4daea4b962"], 0x1a0}}, 0x26000004)
ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='veth0_vlan\x00', 0x5, 0x4, 0x81})

2.696535613s ago: executing program 3 (id=4275):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000a80)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000180)=@ethtool_channels={0x2b}}) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0xfffffffffffffe8f, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff1, 0xffff}, {0x0, 0x1a}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000980)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40811}, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000280)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async)
r10 = socket(0x11, 0x3, 0x0)
setsockopt(r10, 0x107, 0xf, &(0x7f0000000300)="00008634", 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'geneve0\x00', <r11=>0x0})
sendmsg(r10, &(0x7f0000000400)={&(0x7f0000000440)=@ll={0x11, 0x3, r11, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f0000000540)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.472488575s ago: executing program 4 (id=4278):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x6, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000480)="ffffffff0b000211223344550806000108000604000242054305123400000000ff43058a9afe00000000", 0x2a, 0x24048010, &(0x7f00000004c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f00000007c0)={0x488, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2961664a}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x8, 0x3, 0x401}, {0x1ff, 0x3, 0x9, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r3}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbdc}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xacd, 0x8, 0x10, 0x5}, {0xe, 0x8f, 0x2, 0x800}, {0x7f, 0xe8, 0x3, 0x10001}, {0x100, 0x2, 0x5, 0xcf}, {0x7, 0xfc, 0x3, 0x7}, {0x9, 0xff, 0xf, 0x80}, {0x2, 0x0, 0x4, 0x968}, {0x4, 0x40, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000180)={'bond0\x00', 0x400})

2.371309414s ago: executing program 3 (id=4279):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x6, "b634b5239b5c1737550d11d629e219e56c5a6d6c97d5622c566605121d6a75"}}}, 0x24)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'syzkaller0\x00', @ifru_flags=0x400})
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x100)
r2 = socket$packet(0x11, 0x3, 0x300)
recvfrom$packet(r2, &(0x7f00000000c0)=""/254, 0xfe, 0x40000000, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000280), 0x4)
write(r1, &(0x7f00000002c0)="d68cd9ef0b67e0bb29ee910cd1c17d", 0xf)
r6 = accept4$tipc(r4, 0x0, &(0x7f0000000300), 0x80800)
setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85)
sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x288, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xdd}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xefa6bd5}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x32}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1b}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x24, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x597}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2b0}, 0x1, 0x0, 0x0, 0x804}, 0x8044)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x420, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000800)={0x8, 0x800b, 0x12c3b47c, 0xff, <r9=>0x0}, &(0x7f0000000840)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000880)={r9, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}}, &(0x7f0000000940)=0x84)
ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000980)={<r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r7)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r11, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000bc0)=@req={0x28, &(0x7f0000000b80)={'netpci0\x00', @ifru_names='erspan0\x00'}})
socket$nl_xfrm(0x10, 0x3, 0x6)
accept(r4, &(0x7f0000000c00)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000c80)=0x80)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x6c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xce6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x6c}}, 0x8000)
socketpair(0x23, 0x800, 0x2, &(0x7f0000000e00)={<r12=>0xffffffffffffffff})
ioctl$sock_netdev_private(r12, 0x89fa, &(0x7f0000000e40)="8e43f09e1a0e82172adb7ebda08153da262b7436aea71b33094a34a1abdc70d2e07980ae209c60a57f0ea0af1a9ae3dc4e4008646511124a5a805dd5af6370b028186ee5ad085e9c3612351dc983fcac34b305b7d0435e0cf080d3ba857b7d605b309378b2e7cd00c667")
sendmsg$nl_generic(r7, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x39, 0x400, 0x70bd28, 0x25dfdbff, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x801)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x22008000}, 0x20040040)

2.362487131s ago: executing program 0 (id=4280):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/145, 0x91}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/103, 0x67}], 0x3, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x2120)
ioctl$int_out(r0, 0x2, &(0x7f00000003c0))
write(r1, &(0x7f0000000400)="dba26fa990e09a08898a30242300ca99dc15383520988095aedb5ea5", 0x1c)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000480)={0x9, 0x28, [0x4b39, 0xffffffffffffffff, 0xc4, 0x40b0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r2, &(0x7f00000004c0)="99d1c0f4ed4c85936e2f8b3ea913bbbbfa03614e904448d8255ab0cfcae385c82af8dca488496118e6b652b664bb52c9954a874d2c06be42a78c0f9935c81823537ec502c7057e16f0229623a723c412f88a4084482317f5d2b5861ae6429188797c195bca7bc4860c8bafd74d5821303bbc51368e05ebbcc99f6f3fb50d2622246cc67314d75077ce290fa6b5172170da0953429d73993111f1a392bb82b36185f03912163970dbcc74e35a13b21f4e2b666e6283f43dd60705e19f822937c702e911b77d326868c64e4455f9b62136fb6d3d8dbc0fe71342"}, 0x20)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000600)={0x0, 0x4})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000640)='\x00', 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pI4   \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000740)="2a484dde1eeab5f0620655d1be1ff3d9da850154615b168527741c10f9b5682ef1e996e70a1da55eb252e8276dbbe7915e80b91e0e55d85715c9c7bdd3fd861e3f8e8bf379280afeba5687f69403fa208fb15be0a2381e1ba23e78ec767fc57dea2ec19555b58c3ec3afcaccb416e9460264c3a3b4db244238d70aba938801ae755bfe791b3f385f72c0f245b2a6b35b9b2270c1a2a4a90330"}, 0x20)
sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000840)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000880)="79af4edf592c73b160f09a161e7dfe69cb414301b9e09f4ee19a52bacd6059f56f7646a55fbda8bb27ca1a4bad5255385ee550cb910561edf25568c32d9780795684994e9f31d40f208a2c1c0abb551feaa8d22132aadefcb97d8f11c8f97c767ae4557a7064281f6b31590ea3160b0fa6e514941562486f712e", 0x7a}, {&(0x7f0000000900)="31fae8010483800540febb7b15861f3ffc03e3896bd61fef00827940febb792e4694310950bff523f000eb24ea114375530e42d0fb48f076c7d349deb6cd72f516652e8706df7f908ab1f0a9731ecbce48714083acac552c3a5dc67f9955288208e4996976b8abe6dba6b9e4b99a7cb8b64fa101a65f1d31a2782026beb39d90b5b1cf677050c686ca4554c7bbe9d27a41c4b3879fd272", 0x97}, {&(0x7f00000009c0)="8888b16868402d24b481edb11e0a0d223cc27acb64ac71f3157723d8cc9598cfbef497a6e7bf90ad69ea7d347b320068e5e1302b70c90e3603a28e4b9c37b1e8524289f3f26b4f114fd50bdecd8f70389b0ba091d2ff715586c3f680f897e737b85419b3c003f37a1b4b628819323707463d97cb23c435e50fd9bfc31a4c8bd658c3741f77da82d172808b0401683ddea163f5ee1d7f83175350fc29997a24", 0x9f}, {&(0x7f0000000a80)="3a6f38b7926307f7382a3ad90caedd6784147fc5de3dd3e96f983e0049a9c04681cb33949606443d09caece3b82ed6ee8a98107e0afe789d6396485d41bb48f103d43dbb30a3", 0x46}, {&(0x7f0000000b00)="234a4cf338cdd5b3fd774c5a8165e551b6532a496dfa30ebfd21aa85fc583c894e48cd4a99bbc7c010da283273d65b34494d407acec4e16c7efc99673008ec1bd861eaeb44c9eb859cacc0429ffc897546ac8bf7c13712ea0bfdf5c689afb3f06da4c8ab624942dca0117069b9dc90190c98ad2fbe19355d5b5e325866c4fc0a9be0b53fa25e836e646013582bd8019b2e1a1f9424fa9ca65af8ba44af3b93720e634b209bf6e3ef912a3330a2bc1b52ac37ab4639971ef206b616fcfa9237a57799fea344b092", 0xc7}, {&(0x7f0000000c00)="4fc3a10aed0ccd409c227c1f0c51e5acb1bf", 0x12}, {&(0x7f0000000c40)="6df09d7efe0525d6cda10b2f987a8faf1429baec65316ed5aa03c656133b08c85c59b9385d2cdf3302474a90c97374c16ab899111f3d1683a225f28db289096cc5d046dddc3a176e4eb6cc6a1cc58004e8de7b822b1019551de992e30cccdc4c13e02f28e634b37e7ce836b3e90932ae4b390a04630b6b889f232c627111076cd93bcc77d04c89f3fcbd853fba7a104f8662b8c46833ebfaab44e03f951e3aca423716a5d06c809401c208cf266edee8d5d7307885fe97f6295524f0c0c216563517611a8779062ac7162406f14851c9de0f46143373de80", 0xd8}, {&(0x7f0000000d40)="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", 0xfd}], 0x8, &(0x7f0000000ec0)}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000001000)={&(0x7f0000000f40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001040)={0x43, 0x1}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffffffff, '\x00', 0x0, r1, 0x5, 0x5, 0x4}, 0x50)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001900)={{<r6=>r5, &(0x7f0000001240)='))\'H%-\x00', 0x20c00, &(0x7f0000001280)={@align=0x2, {0x4781, 0x3, 0x7, 0x7fffffffffffffff}}, 0x401, &(0x7f00000012c0)={@_ha_fsid}, &(0x7f0000001300)=0x3}, 0x5, &(0x7f0000001840)=[{0x3, 0x0, &(0x7f0000001340)='!\xbb\x00', &(0x7f0000001380)="96346848f8169ffcabcc0da3c8cc7636d72136e39c4021531305d1a3cc119a289abc2ca885206d0394a5b9779bd54c71a24a04018856d08b0d29d3bbf89774b1bb54a26b6b359e7aa3e31edb96e26b2a276a7937", 0x54, 0x8}, {0x3, 0x5, &(0x7f0000001400)='%pI4   \x00', &(0x7f0000001440)="e264ef40ba6d7b125911de0564fd7b3e3f46785d39451167a3deef4ea62e4870a8836648bffafa91e0d196724c7620f8e5d246e7743c4c015e131a6745fe3b4cff47d09be98db39d8eebdf668479b008f3a42dad3cb9c7775708465ca0af451d5f6fef4c512d803e3e21daa2a617c540da1b3b8d4fd5f3a565210d82e76c12da53fedefee4417bac3325d3a316c00cde4c2867d98b606fce2937d81ddf72bb27f2b3d495f84255878b9994fe91822167c23224d3c3fa458982865decfaed8fcedd3d3958b23c6efaa2d01b2fe444d0317b84c9acef24da31bdb2c2283de857edf683f307c6e30e4081233ba8b29b19b93cdb", 0xf2, 0x18}, {0x2, 0x4, &(0x7f0000001540)=')\'#}&:,\\\x00', &(0x7f0000001580)="3dfebef28979fa3347aed470947ad9df7b0763d0eb40ca903e541ed0b7fd59fdf8f5e9fa723564b12036bec11bc97913374d0d6a387d275161f115dd04cee68bd36439e018e45f02ca0c8c8ad445d2550ba32a19b65b70d13b77ec05602e9c95fcf2bab4a6a031071cde39a32151e6f16a0c8b2e409da041d447efa9ecc705861028ce9aa3c68597f600c118dc18f933be1bd89bff52b5faed3d2144b995498608b2b4c9c30a3b6bebf9e85dec22d6143dc8910343eadb46e133e880ccc1629e9e94da680000fe27ec48bb1e7cd41cc036ef9a930371b01ce349f0b1df8abc509cd81b6b6a0c3fd533ee73b19a24c88fabf63492e54592d62d", 0xf9, 0x10}, {0x3, 0xd11, &(0x7f0000001680)='}\x00', &(0x7f00000016c0)="5d6d2d5d180fde903f9abbe452168501cb76b617f1ef84beb18789b147d512ba1540f5c294aca3d130ec1abb5b78278ec8d7b490", 0x34}, {0x3, 0x5, &(0x7f0000001700)='}/^-]:Q)/)\x00', &(0x7f0000001740)="f2a2901b36457fa15c9ee6393aa775bbf43a2f2db3ad74229ccff92a3ed60b546b3ddda03c5d62c8223659a2ae682ac98090f31cc7e0c75c7fd523a24340049eb7b0a08cf97ccfcafffc2a131bc77545bf960f6bb5d7fe41d89fafc6056e66c870ce275fc5669b9037fb0e730b8493d559f93bb57848823400f17f82c1acde65af96c25c91db6d9f2af3a5cde54fe6cf533f34a748b90f142ee917340f27c68ad10b956c1c627f814b643be759affa407c6dde3c4a8643dbb475202d609cfa047b463a5305f647bdea8d225bfaf46b025dabb1e92f90e781985eaedc0e935b76bd53d12c8883b26a9b794a24903e4aeb", 0xf0, 0x2a}]})
syz_genetlink_get_family_id$smc(&(0x7f0000001200), r6)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r1)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000001f80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001a00)={0x52c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x21c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "e6a5cfbecc7ec59d9e21b1f167369f490712e6006a565b5ec3c6475eb0d895a0112c4e08c52820dd43b48a6aba2a4ca684e58a54e678d7bc02177d86f931378a6fe9a01a82bc45eec78f753f306e5ee892d0aa9a21688fc985d177cc88ab0e7728c688f9f8de283bde539e0c9b2b81ecb36bf09851282dfc65cd970411f849cc060744517928c6b7916c857a3819908dd9b19534d83b15ffeea01c48a329b3748b344e76ae0b6e227729aefedef258eeab7849386d7241f5c4ab91e513b68307b98d42cf30b064732a2be81d543132657d4226e95167980ae47b0477e8fdc20e7c958364a8dc18bc6c324f2ffaee1fd544193cb74fc1455f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "48c21c7b7b15f08be8d9485fda03c3443ffac0972aa2dd1404fb4c152e1d04cf80609640"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "65ebe40d6993766f04767e70ad589e1981eda1283d723b29279941a77b3914b8c78c9f524b36d32e5266ba05d63f8e0b5e7126938d1a743f9995b058bd45c4cc154fad7fa6af14c10c642c4eca71af3066be1687d3a52832b69e07ae0a033456bb602b481e68765c2df1cadb21f524141c89337db25179fe5d40e4e3ca6deda3c38eeae537a2522e28e52774b7f884d17820b11273537e0c35d37d2236a7ac3015b80a794e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb6f6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd73}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7cd61779, @loopback, 0xbd4f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @private2, 0x806}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x26, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd985}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa0}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "75c7930e66fe223534e09dec80dd27e5005caf347f7464a83fb33d8dcd53dc720c827a1b60f39dcc423eec2531321f4d5bcd957ecf1e2517257fca901b68a41e40668db3b44b739758b28a74089b2b13da7f2111d4e5b5d43e1b4b44423e700e6049a17fd22e1c754f499688b1a6ce25a2f7b42f112890904829e29ac81c1df97633c36ef03488351894"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040)
write(r3, &(0x7f0000001fc0)="c1ff83b4509a8135a633fa6713f21ef26b6f489565315a0e11cc8fbdbf911498bb3301e5d04f5ff120f8222bb64200d7aed240de6bfd0d2b281f89b8882e088d5414e1733dce70e056b15c054f86d99a50d45efb278e57951b3258a60ff86516847ea73e334448d28492215cd3a0c597cf64e0af21b7b5a5f66f4deef37205292ed1b22a536f1eadd4f871e5fbb1a0af9bd794f30735f3093f9c49b0ab494503d8e27a57970ea7351d2edaf6440a479373226de85ed1d83adddc995f70f2cfaeb0fe8c7024d07e", 0xc7)
pipe(&(0x7f00000020c0))
ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000002100)={0x5b31f1d6a60ac8cd, 0x2, {0x8, @usage=0x5, 0x0, 0x9, 0x1, 0x9, 0x3ff, 0x666, 0x52, @struct={0x9, 0x2}, 0x8000, 0x69, [0x7, 0x3, 0x3, 0x5, 0x4, 0x8000]}, {0xfff, @struct={0x2, 0xe0000000}, <r8=>0x0, 0xd, 0x100, 0x5, 0x0, 0x6, 0x0, @struct={0x10000, 0x401}, 0x5, 0x5, [0x100, 0xbd16, 0x9, 0x6e7, 0x1000, 0x2]}, {0x6, @struct={0x2}, 0x0, 0x2, 0x1, 0x3, 0x81, 0xb21, 0x9, @usage=0x7a, 0xa17, 0x7f2693e3, [0x7, 0x4, 0x9, 0x4, 0x5, 0x3]}, {0x1, 0xffffffff}})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000002500)={r8, "75f7f1cf431a01b723409ea62ac996e8"})
r9 = socket$netlink(0x10, 0x3, 0x8)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000003540), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000003640)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x50, r10, 0x0, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x8000040)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000004740)={r4, &(0x7f0000003680)="ee099a63bc4d29bbdbf1d08ce4801ca8206c6e52abce249263c8ce66243774c62bfe41b6f0fdb2a4ecafd71b002d884ec3283f6783f61971c83754c2b6633f7b7a3870e5c94fb8ea5f58a8223bfe49b4033e0f218d52d6a3bac3bfb65d369527550ac1d088203816b6f549e073b61debfd2f763279465aae6c7d0cdaacc9cc39d5a306210f5803b4e63b22e68b81b5469c3f8f09c5584c9c658d164be4733602ee", &(0x7f0000003740)=""/4096}, 0x20)
write(r1, &(0x7f0000004780)="53743a7c56b3d200d83ad0330dcfc7ab42f21308c30cc1ef542c502df4315f0aa4964dae9cb6e809b151137a55e8bee548b26506ef17bbe5f5f5d644dc250edd6be4cf23260851d9cbfd33bad9d2d59bfbad86ae667b672506091f12ec639dddb06e71ef39803bffdf45914ddc0d4eeb8b04321874dca049a71776d7b685c4b12190754e8e582e9c390597c6f31016587ffd726537c540f7d1170fbed5f36f0c5e3eacf0ccdf51ddb84c14700424ca79b974a10a3a0214b49750f37b96d3a50dc65a023f0227", 0xc6)

2.30498031s ago: executing program 4 (id=4281):
r0 = socket(0x2b, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x4}, 0x1, 0x0, 0x0, 0x810}, 0x48000)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x169, 0x4)
getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000100))
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x200000, @private2}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=';', 0x1}], 0x1, 0x0)
r5 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000240)=0xfffffffa, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000300)={0x1, 'vlan0\x00', {}, 0x2000})
splice(r3, 0x0, r5, 0x0, 0x8000, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)

2.197885111s ago: executing program 0 (id=4282):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff06, &(0x7f0000000140)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket(0x2a, 0x6, 0x64)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r4)
getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14)
sendmsg$inet(r3, &(0x7f0000000980)={&(0x7f00000009c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

2.191290372s ago: executing program 3 (id=4283):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="8b", 0x34000, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c)
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x1f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0)

2.059101353s ago: executing program 0 (id=4286):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x20c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x8b, 0x8, "f6d8b65a05bf779e06f56ab01e7bc81cd0cccda77163d8bb194e1aeff1fcf88e8cfd25f3d520acedcf7743d3777743810ddbf3d35dded09dae00b3701565c47fbedb62e56a94a09d9472d7a0d34c42b43c99d7e9c48e0db8b550b8f3eb0921d3a6df9f036ff9ea408027f8adb3e499a83f555c0705dfca8fb8c63e7233be05641a8be4dc6192a6"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb6, 0x8, "3681e54c5b82ae3fbb03f78fb0daba3586dd976ec9891c2bb6a153644ad851d569735ede34dcd252cbdca859bea38a6adfdf51dc6356bfa721729d4e9578cfee8e3e026974e2c7d58a6522d5a990ddcd0db642122630335d0ea1253c45e6c8526d6f615fe2199cfffe760736cb01b2a02c66037314ea473ad1636c51cc6773d2d6259501bb9e33ae52e14436e55e76f5197e1dbe9c140861077cbdf8e4188fcca6745236b61c4a0f62948bb8eadb312b5f2b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x6d, 0x8, "a825f0e1874772469f221d6514363c705d5cbe994fc22e6974b3b74320a266a58051d38931940dee89de8b9d90c24207ff5bbae9d00aa737de14d54e17a9712be97777f0c38a3fcdedef7a9d4b42f1cdcd7ba4a38cfc38b3bbb5853ae26a70153477eb9f269858b9d4"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x234}}, 0x24040884) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0)

1.871080391s ago: executing program 1 (id=4288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmmsg(r1, &(0x7f0000000300), 0x400000000000235, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001504000000002e"], 0x0, 0x37}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_newrule={0x1c, 0x20, 0x4, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x4, 0x67, 0x0, 0x0, 0x6, 0x18}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)

1.857803374s ago: executing program 1 (id=4289):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xa, 0x1234, 0x0, @loopback}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)

1.719237221s ago: executing program 1 (id=4291):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x81)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={<r2=>r0, &(0x7f0000000140)='TIPC\x00', 0x80000, &(0x7f0000000180)={@align=0x8, {0x5, 0x7, 0x12d, 0x3}}, 0xd5e5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'ip6gre0\x00', @local})
r3 = socket$unix(0x1, 0xd, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x4, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xb, 0x1, @udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x8080)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44010062}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x86}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb29}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]]}, 0x108}, 0x1, 0x0, 0x0, 0x20000084}, 0x4008850) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44010062}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x385}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x86}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb29}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]]}, 0x108}, 0x1, 0x0, 0x0, 0x20000084}, 0x4008850)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000840)={&(0x7f0000000600), 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1a8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) (async)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0)
sendto$inet(r2, &(0x7f0000000880)="811880080fb2b0", 0x7, 0x20044000, &(0x7f00000008c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
socket$kcm(0x29, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r0) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x6, 0x3, 0x6, 0x3, @mcast1, @mcast1, 0x740, 0xb82f13427b0d55e2, 0xb, 0x78d}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000a40)={'gre0\x00', <r6=>0x0, 0x1, 0x80, 0x7d, 0x5, {{0x8, 0x4, 0x0, 0x1a, 0x20, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x6, [{@remote, 0x200}]}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000bc0)={'wg0\x00', 0x4200})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc12f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x19}, 0x5) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc12f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x19}, 0x5)
r7 = openat$cgroup_ro(r2, &(0x7f0000000d40)='io.stat\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x2b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8080) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x2b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8080)
ioctl$XFS_IOC_SCRUB_METADATA(r7, 0xc040583c, &(0x7f0000000ec0)={0x1a, 0x81, 0xded1, 0x10000, 0xf9a2}) (async)
ioctl$XFS_IOC_SCRUB_METADATA(r7, 0xc040583c, &(0x7f0000000ec0)={0x1a, 0x81, 0xded1, 0x10000, 0xf9a2})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000013c0)={'ip6_vti0\x00', &(0x7f0000001340)={'ip6_vti0\x00', <r9=>r5, 0x4, 0x80, 0xe, 0x2, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x80, 0x0, 0x7}})
sendmmsg$inet(r0, &(0x7f0000001500)=[{{&(0x7f0000000f00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)="f9849622374b1f00af180dfbb1e800f2f12d9f7ce395176b92c1c99e25ea17824240610e675f4767d1015940800ee0d6cce32752198180d1ddbf21acc322f6b5acd0afdfacb124d3c3931d85f16e1ec7baacf1581452e91196cd7dff7cf49db2d9cab3344441fb13c567a650230d78a169b4ac812b98d487ceb059320ab102a7e03bcba79cc2c0d1d8e73d705fd95fab123d55ce46b0", 0x96}, {&(0x7f0000001000)="4195c535a0b5d13dcb40388ade6f34c21495f731c259194e4ca82f93b17c83ea0b7da0349aff90bbfd92c8fabb1c0909519dd1a7029ef9f6be60a59449ccb2abe7efa27ec19d7cf05301e6f50f1f557d49ff3f674da0d0465bca7e6420", 0x5d}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}}, {{&(0x7f0000001100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001140)="750b67e1349ccea02f70b4e04428c8e22b9a63e41c2a0c5850381d0b95076420050ff138529b6675c455d35f824daafdfea8dffc519164409463a0451c51c481506dc86de497727fb16fe43937bf289ab62a0ade9c4957264f035afefbbdbbdfc1ed80a19da00c49f23e844fea1f029cf5b1289e675a640614a658d8462dd0148cf27e28c47a407abf98b8d45a9f2b2495fc123846264e60c0d90f83845669679fa7de765603df03cc5fe792e72bd69be1397c38182214d743431f6a9bdda6549f46750b3f68a3715363a03809f1caf8596195511401477d170bda9464818c017d148ae6", 0xe4}, {&(0x7f0000001240)="c853417584710bf364b6d3d8c07ebf18d35f0954ee32afaf4a7e4eaf537ea8e3cdc9b077b2f8a2b44f634d83ed5686802bcdd3d060b28778ce062ec0f53b9d4bb79820695683fe91164a14a74807499c2ca55547e761f78ec8e51343d320e78ae8d7b79aec641d00dd8f4c1fb16ed6899f1f2e537951a251e963554ff5f61f8b97885e6bb946", 0x86}], 0x2, &(0x7f0000001400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0x10, "3bb801e74ff6b2f1789ea22d6e44"}]}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xf0}}], 0x2, 0x20000000)
sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044880}, 0x84)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r7)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r10, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000)
r11 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r11, &(0x7f00000017c0)="e6be5984939fedb09058475d5b361a95e9f205cea74eb249a3a8fdd557e046d2518edf07472d610c0982d6582dd7cd1bd438e7f89af694f0e5a44107b73f16dbcda9831ecbf745ff467cc118319051242149b8ac22984d704a65c46ce384dace67448ce134c01f19e78bab44bd740a6abb10fc39fcedff52c0cda972734209c5148e858d2a06d1e2439e0fad71bfad66e1355332429d8c5c9e2a8df2acee9e0e592b14afc9a2861ccf694273a26a33dbc5a9ae8827397b9ff7b0e02d1c13dbf8ebb1a42b3a6e319c2bca91ae6845c78fd47c0b49", 0xd4, 0x40000, &(0x7f00000018c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
sendto$inet(r11, &(0x7f00000017c0)="e6be5984939fedb09058475d5b361a95e9f205cea74eb249a3a8fdd557e046d2518edf07472d610c0982d6582dd7cd1bd438e7f89af694f0e5a44107b73f16dbcda9831ecbf745ff467cc118319051242149b8ac22984d704a65c46ce384dace67448ce134c01f19e78bab44bd740a6abb10fc39fcedff52c0cda972734209c5148e858d2a06d1e2439e0fad71bfad66e1355332429d8c5c9e2a8df2acee9e0e592b14afc9a2861ccf694273a26a33dbc5a9ae8827397b9ff7b0e02d1c13dbf8ebb1a42b3a6e319c2bca91ae6845c78fd47c0b49", 0xd4, 0x40000, &(0x7f00000018c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

1.694133706s ago: executing program 0 (id=4293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000800), 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={r1, &(0x7f0000000080)='\x00', 0x80001, &(0x7f0000000140)={@_ha_fsid={[0x80, 0x3]}, {0x3, 0x1, 0x5, 0x5}}, 0xffff1aba, &(0x7f0000000180), &(0x7f00000001c0)})
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'gre0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041890}, 0x48c4)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240), 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=@ipv4_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a00}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_IIF={0x8, 0x3, r6}]}, 0x3c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r11)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000fddbdf252800000008000300", @ANYRES32=r13], 0x54}}, 0x0)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

1.632116504s ago: executing program 1 (id=4294):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001500010000000000000000000f00000008000100010000000800030000000000"], 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000240)=@ethtool_cmd={0x3d, 0x6, 0xfffffffd, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x7ff, 0xfffb, 0x8, 0x5, 0x3, [0xe, 0xff]}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1304bd6e11000d0927bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010c020008001b00ff030000"], 0x28}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='\\', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff080009"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)="5c318abbf2f650a92636bce8fced2192cce5e18e09ad2de3e48870324a1714fc76d1f0271f7f8214266c3ab547a94864cc", &(0x7f00000011c0), 0x1003, r2}, 0x38)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000011c0)={r1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x1, 'pimreg\x00'})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000dc0)={r3, &(0x7f0000000e00), &(0x7f0000000e40)=""/73}, 0x70)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0xfff, 0x7, 0x48}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r4}, 0x0, 0x0}, 0x1c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x16, &(0x7f0000000f40)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000480)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0xffffffffffffffff)
r6 = getpid()
syz_open_procfs$namespace(r6, &(0x7f0000000600)='ns/mnt\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff0710670600000f000000170300000ee6ff80bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)

1.54397862s ago: executing program 1 (id=4295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff}, 0xc)
bind$netlink(r4, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc)
bind$netlink(r4, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff}, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x800, 0x0) (async)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500130a0007003500281014000000190005407f0a006d0004000000d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x4000) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="0700000000000d002cb97000000000ef0300cf0005b40e3e88f0f005c81b26c711efdb16de327c9d9c7c4e263274b647f048112b8d725054ae11ec8ccacf45821de98ee3aacab74dc92a79001b2aecab1b925e310daafeed90fd", @ANYRES32=r2, @ANYBLOB="12030000000800000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

1.524720784s ago: executing program 2 (id=4296):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000310009002abd7000000000000400000008001700", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.387411103s ago: executing program 2 (id=4297):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f7f0c39b037234633", 0x2e}, {&(0x7f0000000580)="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", 0xf29}, {&(0x7f00000014c0)="119812ec", 0x4}], 0x3}, 0x48800)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

1.319218423s ago: executing program 4 (id=4298):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00')
bind$x25(r0, &(0x7f0000000080), 0x12)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x17e2, 0x10, r2, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x50)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00') (async)
bind$x25(r0, &(0x7f0000000080), 0x12) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x17e2, 0x10, r2, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)

1.30407847s ago: executing program 2 (id=4299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a0001032dbd7000fcffffff0d"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x134}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x29, 0x43, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)

1.187591212s ago: executing program 3 (id=4300):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000540)=0x2, 0x4)
connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e)
close(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x51, r4, 0xaa0f4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
mmap(&(0x7f0000b6c000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x4e0d2000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000000000000a002c00797a3100000000c571048014000180090001f0737100000000040002800900020073797a32000000001400000011000100"/100], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_emit_ethernet(0x74, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300e000b2c3ae50ed824f4c5e000100000000fe9a90"], 0x0)
sendmmsg$sock(r7, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="895c7e", 0x3}, {&(0x7f00000004c0)="aba598888b96811df5ca10b866253697e8dcf1647fe0623512125e7b102d31e60bef0b4700", 0x25}], 0x2}}], 0x1, 0x0)
mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000605000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0)

1.091460389s ago: executing program 2 (id=4301):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18009f91a241a8f9a3dba029e48ec32e00000000000000000000000000007112"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.002529492s ago: executing program 2 (id=4302):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000ff7f01fc00000000010000000000000a8c"], 0xb4}}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000480)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000700)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="21e66c79000000001000004d0000000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x5f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', <r4=>0x0})
setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f00000008c0)={@remote, @rand_addr=0x64010101, 0xffffffffffffffff, "6ab75c1fb18b54400eb202b847f369f985fc48e122703e80d6e9ade292cf75ab", 0x4, 0x9, 0x161, 0x1}, 0x3c)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe005}, 0x20004090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

307.788549ms ago: executing program 0 (id=4303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x31, 0x9, 0x70bd29, 0x0, {0x4}, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30046051}, 0x4080040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0)

199.363559ms ago: executing program 4 (id=4304):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001840)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000001880), 0xffffffffffffff97, 0x10, &(0x7f00000018c0), 0xffffffffffffffc2}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00'}, 0x48)
r1 = socket(0x1e, 0x4, 0x0)
ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f00000000c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0xffff0000, 0x10, 0x0, &(0x7f00000006c0)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001900)={0x5, 0x2, 0xca, 0x1, 0x0, 0x49, 0x20, 0x1, 0xfb, 0x0, 0xb4, 0xf, 0x53, 0x1}, 0xe)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001940)={<r4=>0x0, 0x10, &(0x7f0000001980)=[@in={0x2, 0x0, @local}]}, &(0x7f00000019c0)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001a00)={r4, 0x7}, &(0x7f0000001a40)=0x8)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084)

172.128219ms ago: executing program 1 (id=4305):
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb0018f389aaaaaaaaaabb0800450000740000000000019078ac1e0001ac1414aa03019078036100004610000000004000002f0009ac1414100000000044440001000086dd00000000ac1414bb00000000ac1414320000540f000000000000004fe0000002000000007f00000100000000ac1414aa00000004e000000100000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000540)='GPL\x00'}, 0x90)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'tunl0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000780)={0x11, 0xb, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000840)=@req3={0xffffffff, 0x0, 0x0, 0x7, 0x200, 0x959, 0x75}, 0x1c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
write(r0, &(0x7f0000000800)="01", 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000280)={0x1, 0x4, 0x1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000940)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000000980)='GPL\x00', 0x5, 0xfd90, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x22e, 0x10, &(0x7f0000000b00), 0x1dd}, 0x48)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000600)={0x8, &(0x7f00000005c0)=[{0x5, 0x8, 0x4, 0x5}, {0xe223, 0x5, 0x6, 0xa}, {0x8001, 0x2, 0xd7, 0x2}, {0x0, 0x0, 0x4, 0x2}, {0x3, 0x7, 0x5, 0x5}, {0x8, 0x7, 0x4, 0x4}, {0x37e, 0x4, 0xf8, 0x80000001}, {0x3, 0xfd, 0x4, 0x2}]})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000000000000011fda1d0744a687abb8a55e67db15d874edfa558bb6c8b4c4de5cebb6df9ebe20dac7b2bbdcdc03931933987c3353c7c88f01508b783e1f8b130346ce29e3dd909a416d61ee46348d40f4e2ed6d7c2ffa9aa1e38e0300e3eb4d493d2a7acfb71f7e1ddacbe2e1c1f4cc30a9d51f4886ea4e40068f98bff7e3b7deb3bea56fa8d709191168daec7582434c247fb9d66f928dc7d34"], &(0x7f0000000300)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000380)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
sendto$packet(r5, &(0x7f0000000000)="45000028000100004011000001010101e00000015a5fc109169149be1a1ee1e27b50021f1fe1e0913deeb96a8e19c0e05df24aaf7036891909275f2cdfe7c784e89db1dfb6e8fe9c1e486e1c9a6cc6ef6930463c43f6be2364fe3c649cf6eb50cd58281f6abb6a092d8d11775454548c8aa3a8e296a10498cb97653bb686ca9194112dfc667dae731060a7b23ba8e5324fa2f596a58aab5c326f30e2dc096ee6d2628883c4b55cd2e718a861a6c8e226b6015672ddad115eccd8b6fa18a1c799b4707d551bdd9ab4e7677e8cb67494001121608073cfb418142ebeaeb3a237c4d7264f11", 0xe4, 0x0, &(0x7f0000000340)={0x11, 0x2, 0x0, 0x0, 0x0, 0x0}, 0x14)

164.626723ms ago: executing program 3 (id=4306):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6e2bfdb9496a1ef4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x405808}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4441)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010)

91.54877ms ago: executing program 2 (id=4307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0e, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, r2, 0x0, 0x0, &(0x7f0000000380), 0x10, 0x1}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) (async, rerun: 32)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000080)) (async, rerun: 32)
r5 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) (async)
close(r5)

0s ago: executing program 0 (id=4308):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={<r3=>0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x3}]}, &(0x7f0000000340)=0x10) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xa4}, 0x1, 0xfffff000}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000640)={r3, @in={{0x2, 0x4e20, @empty}}}, 0xff6b) (async, rerun: 32)
r5 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012cbd7000fadbdf25037c00000400c2801c0001801800108014000d0000003b"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket(0x1, 0x803, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000025000000950000000000070018400095000000000000009500000000000000000094380a310b81b80c2e5dbb5aa94dcf6e73b9e55c647493da55567b8c2f94fef7883daba34311923a60ac06481676cd4e274b244b2449c7fb9431427f7ddfb65edab0e714c9ec8395e817e7a454186dde1059146ea1a8b5cdc672a6"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async)
ioctl$FITHAW(r6, 0xc0045878)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000880)={{<r13=>r9, &(0x7f0000000480)='team0\x00', 0x2a00, &(0x7f00000005c0)={@_ha_fsid={[0xbaa8, 0x1]}, {0x9, 0xdfb, 0x5, 0x3}}, 0x3, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x7}, {[0x1000, 0x2, 0x3, 0x80000001]}, 0x9, 0xc8, &(0x7f0000000780)=""/200}) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@loopback, @in6=@empty}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000c80)=0xe8) (async, rerun: 64)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='devices.list\x00', 0x26e1, 0x0) (rerun: 64)
close(r14) (async)
r15 = getpid()
sendmsg$unix(r14, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)='C', 0x1}], 0x1, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) (async)
sendmsg$nl_generic(r13, &(0x7f0000000e00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000e40)={0x1044, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x17}, [@nested={0x19, 0x119, 0x0, 0x1, [@generic="1db4a8f0b09be251cd", @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x9}]}, @generic="668659211a4b436809bd7b3e48e08e79869650d000d43677cd36d17ad88574fb230461b0f2432685476257177e51f90db2600d739bab3efb6cb57ff4c876a11cd0cb23ab33e58953c99fd667447c27f9dea9458406801392d3aa5c07680000f273cd736912c0b882fa86b9ae8435a57f9943bde2b3de06cc4db00cb24c9ffda7fc001587648d6c8327cef25e558643ed43166beb7ffc54ab05042e1ed0039454d602e20a638aa2a96cea85ad7579d5c4b814a618a80b9bd3f9d7017951b610e444ee2727b0114264f0c17addf4cc6d40b8c29681b24bf54ad18d66e6885de729cbb34d9eca46fe241941a8fd0145d0ffb4e2d13809ee2f86a31443131fb287692f43a15326e19b86b49fb205d14218ef50b535f55e6eafbdec21120e494da0fede92059b834391c7d2ee529cd73674004f249ea1736ac49c0f26e5a86e2269dc81442aa789d9d6b91f348226e9171facef5355e4368c887523a6c2c0d0fd59a7da33ac0968c16923814118abf9f244341c1a2078cab572b6caf28c5fc345b8a5e71222ffef7bdbc43e73d5afd33c76f96afb3acba81c1db698385554b9616b5014142074ffd748b8ef2cd1f143b535704fe01b90f1606b0a9936f9bcc2509c4c2049cc970b510ef7534438ead2c7ffac15317cf2e7a06b1fa9f99fc38f2c2bb3021a7214d564dce869de9394011aa5c8cd9e04805716eedddbc7a21452e805afd5debcf5583d1c79c80f42d941fd5e2da08d844b8926f4898b27c1d805ca5fae666f2ddedbc58f1c7c990505cc3c7835f49ccbb60a88962262bbfaee7382e8bae32b8fd3f81bad479b2414c019b9377ba25557625010404241854a89bba4508632487570307af592329fe50aa05e77df3e2b04addd9f39375952bbf0316eed67387dca13bcf13bb91922090ab0bc526b05f585beaa2e77477abd689e26745846c58da66db03270e6566fa099d1e05b4afa599826f5136a1b634c34396fa1a7a93ec3492d51aae2659152e47ef268d03590dd2b8076111d5ca860f6858acf6ffbad2ab9e07f542393ed9b57f54ad31a6fc96e06f2102a0fe2ec98fc6498956e7ccbafa9670bfabf5ac86075188d28acbec37cf66400f3111651ca89948f51e1a21cc8b5345ccb8be44b0505b5a5720b1871fdf0df2ad10f61aae27f8d62b46644e8423a95fd08acaf630ab8fc3343829c9db56498c128a2515cdf373372a02266bf44a97e43eb97f4e2f48a1bccd393a13c683dd3dedf38e1b345ad2e58415c557243c687f06f670b26acee9227a56e3d8cd71f3d7d818d4ae0feca782d1a98d3af2f9c0f9781e7967bfde451b54620479a1b72dcfa39a7938d183070972a88357ea76201e85e36eb5d7bf82d2cb3d6c4c35e3b14e3c461ad571eb2a8c3aa0db747b2dd1bfb51d65cd07e0fcac100c8d9f6e7f661fd9d0abccb43f01057b5232f83eae305ca59e2ff0fbd894019cd06bd5ce6409bc776055891c11d37692a74cc07901302b60eeb645a89b45b5b8efef6d498ba9dd5c7ea34ddebc994e2d0260e33e411c64407b9783f3d7781a8087c33e3ecc292abece68877051f0be439f3577b59aabcd6dda26a609fb87830d1cec3f4438f32a43875221ca3cc90e62c82fa106a4719986dfcb47ab94b7a6bd07651f13dfad0108692c9c6209a62150f6051681caa17592bc9296ef4bfe43165963b290692ec20d8c4281bc687a0f506cd53900f8ba257efcbda337223d1cf0f09c660825440a02196903d196c299b1a1b0f418e72f8051e7e7bd061286364151613accc70884972985019381c363e1a478d679d54a6936e84612c6bdcc1f1b2001e891c11d9193574454b43f7f9e1c1774480a5149145aadb96ab76400fa0395f05aa33108914d46b93c5510e3e2aca8aab218d793af1f85ad8d034e01367fc40f07c39d622f154e9a6103ca11017168448e38c54cd8c6b46afe9ec1ead3390f7b6d372beaaafe7f3f334e93448ca1273ea8baa77ebfe2f1cc02821597203f145f3f7014a72eaa8cfa697fa46ae2ed2155e932cd3f7d9bd36f5d37e1ccea597abfd07ccb56b3ffb7c2608a628328554cb557fd285d6d7b7cda61da6e2537389a709bccde369818fd07e1fe0a17b122b647b09260a44b0072cbc3c2cab93ce0958a7e661ccef7993695e799ad9567dfde9c54348db08093009144dfe8ad27c5f62e1a8d9794edf3b01117a5cdc74eb7ae87fc5ec1df9385020d2c1437024acb8853ba3bcb9f755a65833b45e1e03baaef0a6b7874f0cdbea303b12d51bd03ff2a4819317ef76d7fcb5251bc14538c98b2cc3da603fa17bd353f8649a7cbbdd1dd4e12e23271c4391c4d871062487d7a85dff47e77475b99b4c4e7de94490d7c808488245474cb3e964faabf2b63b4329ff78d709c78e79a3200ee30f7befb7ab06f84b56be7fe3bf45aefbf389010798ef2757b1898b49e266ddc5c11e59035317c0980e05290e4cd9ea4aea36c87ff683b87304e67cd77d434a386b5a0c4c887d56b903f71bcb43d0f2ddd68ec1a22e5bc0c49079251b42bcd752397f0bbb133812ccd535fbe1ce5924dbd49e80d849b3f2f1347bd13daa1535849e2dab83f5404902192dbd1acee05eeb2e6c0c3fc8c7c7c915b4bf16d3212895ddc18318d0c29d73280f987f743a4a742e0b5aea86800b1ee7bd83e45b5de191f88237ebcaa9b5dfeb3959d6f0199e3b5c935e7c5562558742b46cc71f28704eb116c5c036ad073357718849242f129f8b286f5b617429d6fb8039450dc1342f8c051d38831a7cb2ae2cb8e2624a314a851f93053bf3e985a0244aeb2a6e2e9b19a0bd92ff4fc399165b39733dd59bc6fa09e96b763da36b10fa03592b0d020ba45c39bac4e97bb9bd76d124a624db457f1989de61e711828dfbd0d80138a471faa534584e2c628d79fcb8219768c57e7a6b045f8769b8e551ab0db3ae7476cabd271209805370c0d49dfd600d293515251940d7e8714a700c5dddc4468b1c8b97c13b169770ae2895052e527f319bc36e343f80029605e54f3119c988898849fe0187ba4c6729e497369dbfe66cd83e6d6d6eb1d34a6ea1fce571a9f7c2dae2ac813f160290061140390a131f52ddcf6cb4d173b1dd658f82644c727a6041e7bb5c6762ffe20740c6725735fb33ddf574c5cfa86546f5dcf24fa78c365aafcbc740fdb0da1d210cacbc68dcb002df35c0a17765f0ff96aa0d8b15d4c08b52840b8ae1b273bfc0e9b35dadedbd25b8f4c1df9f63ba3dc185814cef7545b508eac16ed034e45a3368400dde901eb03497fbfbadcd477683141705469b87742e869dd36e57774801c7ea7bba5a8d98bf600185a7088d38c774a751757ba45861a0703266c8543e2b4e67282820953968f31a5864697258343ea1bb20700e5784d4427aef53b91462db1b4b13e723ad645de77fdad16e3e585d5f697448d51bf0766c18f064f21d4c87cfbaff3f8a55ae094fb9c008dec95a1cc60050dd3448e7bb90f0cda2354e518e9f1be3c1adc5d570f21546ede20a00effe4957b393ddc5d578acb09a511a26e1164b2598a6d5960b5e25bc52132fa464c1198487052150904c8661ae13f732ee1c96d53903d22bdead7be543269c95bc69eca3bbaef25445fadf18227d37f070b13a2e51bf77008d0a54730c28cedfd38c8bf808ff4d4c4e38b98eac1d0a0f997050788370233b2890863ee5951bb311c1eed4e5678fa463bc3b406cf209f285ea78761c9f809ee0baf910c8af66c0b84938002a593aab62984fb1b395d5e5ad3b5addb8d9d3d5fe4046da76bc71f9b48628fec25c99772185fa885b25defe2dfb5cc982710a311690acf0d8d53c8d59e4ac7f46cba6e145ca8bcf57788cf2f022f452cf0fd00b56efd071cf383b33a0c0b8e56b4a360ed4717ad093550bef98259b083d206b3b3242e65d84e4bfbc23c687f51c5a80b7438c9e3cbfe31940e59ecc2ca3dae2f0bd451df9138c7887b5526908509a45b9e63a14dde4262ddd5b2fc1219eef8ce8c90aca877d697314e2bf59c665ac6e42c7cd07044d2949db8c90f468a90bde820cefb01e7eacb4b51d258524390ec3a847b27138b2a45504666f6fdb920a208466435c9efba9b48f73d1d9edbbd1a76b5f4e8a2ef522e3ce01c628c81fda8ed1a65e451cf92919e9fcb281f5652d075a72d2ae9e51bfbd38e42f41828b5a1cfa79a72c021693ec52a57e71d76edbd3aba148f6744416018af4810dcd1480339afb9d2ff442afaccb94ab4265612793a54dd0df232ae49b164febd3a00818ae93f6534b4c3ed1ad694f029ae4dd5911e2874b334b4fa130478bddc5c77f72088a07fc4da61a883d3507e5eeaa61ecc29e80ad12bf2f61dd0726d1362ab6156fb5acfb8102bfef261cdca58674b47cb4616075bb64d9988f542a2ee5f16c3a427aa1ec8a5a187ccdae9da6147c6eca5b6fcf92515e3276dfa2d1b3fbbf280c3aa255c298b45e4e3a126d52122b8a845f657f455c7f1c32992440ad002bad33d13575b3c29756c302b65a8dbe31c76c26dc0a60ecf23a0438b3594d2b056688682feaf81194336c72cffad20426e91aff7fb7b4e898f52086713d1ef48d77ee79b4659b59be24abd7bad42d8237274e2b96334a4ee28a17955a07ef88fb3e35fc92e594aa55df9cdd4f9d77e995fda290cf18f0dca6711cd0da64accb1c55e88a2773343b0c218c2e892c385c0b9226544e5492cca41fa77b2d57fb37beb931f7188d501fe2f86b957ec7deb6a174ec23432726cc1457cbdfbf4277aec4942097e7a447d33f499954b21ab224024cedf185074029493d31bdb24c69d2b85650ba19b5ec8c64ebabfd94f53bbb4b596dc620dc6a9f7dda8c2c95412f73b11a166d286f49cdd9e88f467ce49a7465d71b7699037cb810c0a09f8e474ff6683ca6ef33cbba7f6a9feeb955d9de7164142a30afe25b31c3398971d93e6aae96310a9f66c31353e342a9aff943160bb05f1f59d803f0ca4ee10779d980fcf5a112b520d2f47967470ca400920d89e5ed28458f6f659432fc159cd4c27edefa75f0199d097745f3f23a5e6f7659d58439f729942c6f69a880232217230b3906718cc6c14feb84870e54cb7210d99a6099e54dd645e96d7449c69381e4699b7fbfba227f199773730ae604342ec1dc5c8c1da5031f33d89223e17ae0e090df7aa4755577f98254e643d27a67c5973a1334a418ef3bc7c8acbcc5c8b223652b657260c923721c5e6c5f6d01a9083bc7a3282dcf78ce9e2baea77278e471aaca8ce09f199617858dd6d08d8e4e3c345bcb64329816bec61d19b1e07e918b09d49d9a714ecc86727b108f12739bde2b5195381b906f1eab1f926f15dbcdf0a74341b8e33154ce8cc5872112e3bed4663f2dbd0e38922a32e06ca14b44575adf388e4b769075796777286669876ccf948305e490f09954be5fdde813c0cfac944d63fb2871ddfac8c828cd2bfbdceb508d702dbfb75cf49a3a671225ea2679ff62959fcee1e0bcda94c353e5a4e31f5c53317c614bf2980a731ae427b7df99da8df9b274a8cc76536ee4b4b010040d19eceb0dcbc9a3cc8b4ff905ea4ea8bfc0cff8cd669c317d8ce6aaa5275a467a021ccdd95e840d4a99e872c32a4cc1eb80e98c3749c5b61d15726af740c72bfe23ceccd9ce919f9d57afd714024a409ba5071421b5edb1cbab5281045cdd1387c6c420f708376ea8f011f8eb1c3f09dd0e9f02b04f88b9df6779f97bff5c58b28b1ba918d459ca584b44d548c2b17205235da76a64fe6c5de5b14b0b90059a30", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast1}]}, 0x1044}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)={'team0\x00', <r16=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5f891fe344d5535200b0440000001000010400"/30, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

king state
[  334.844944][T16724] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.846926][T16724] bridge_slave_1: entered allmulticast mode
[  334.872289][T16724] bridge_slave_1: entered promiscuous mode
[  334.966842][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.985411][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.036409][T16724] team0: Port device team_slave_0 added
[  335.046087][T16724] team0: Port device team_slave_1 added
[  335.086319][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.086338][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.086362][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.115035][T16842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2871'.
[  335.125935][T16840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2870'.
[  335.157063][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.157079][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.157102][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.210993][T16847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2871'.
[  335.486389][T16724] hsr_slave_0: entered promiscuous mode
[  335.491769][T16724] hsr_slave_1: entered promiscuous mode
[  335.495933][T16724] debugfs: 'hsr0' already exists in 'hsr'
[  335.495964][T16724] Cannot create hsr debugfs directory
[  335.524851][T16855] syzkaller0: left promiscuous mode
[  335.524874][T16855] syzkaller0: left allmulticast mode
[  335.541932][T16855] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2872'.
[  335.687490][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  335.972502][T16724] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.972539][T16724] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  335.972564][T16724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.074903][T16871] tipc: New replicast peer: 172.20.20.187
[  336.101261][T16871] tipc: Enabled bearer <udp:syz0>, priority 10
[  336.131017][T16724] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.131052][T16724] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  336.131077][T16724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.275219][T16724] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.275255][T16724] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  336.275280][T16724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.368776][ T5647] Bluetooth: hci5: command tx timeout
[  336.436652][T16724] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  336.454677][T16724] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  336.454711][T16724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.639124][T16885] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2881'.
[  336.639151][T16885] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2881'.
[  337.405957][T16724] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  337.429517][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  337.434767][T16724] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  337.456913][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  337.479089][T16724] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  337.521913][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  337.538270][T16724] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  337.598107][T16724] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  337.727101][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'.
[  337.785158][T16940] ip_tables: iptables: counters copy to user failed while replacing table
[  338.137916][T16724] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.227652][T16724] 8021q: adding VLAN 0 to HW filter on device team0
[  338.261277][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.261397][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.296126][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.296236][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.416219][T16957] netlink: 'syz.4.2893': attribute type 1 has an invalid length.
[  338.489785][T16956] bond14: (slave geneve2): making interface the new active one
[  338.494890][T16956] bond14: (slave geneve2): Enslaving as an active interface with an up link
[  338.532658][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'.
[  338.550091][ T9937] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  338.550167][   T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  338.550270][   T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  338.601210][T10964] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  338.611526][T16961] netlink: 'syz.2.2894': attribute type 5 has an invalid length.
[  339.185138][T16986] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2896'.
[  339.186734][T16986] netlink: 'syz.1.2896': attribute type 3 has an invalid length.
[  339.288091][T16991] bond0: Master is either lo or non-ether device
[  339.573721][T17007] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.776692][T17007] bond17: option fail_over_mac: invalid value (16)
[  339.783331][T17007] bond17 (unregistering): Released all slaves
[  339.799501][T17014] sctp: [Deprecated]: syz.1.2901 (pid 17014) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.799501][T17014] Use struct sctp_sack_info instead
[  340.010305][T17020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2904'.
[  340.234704][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2900'.
[  340.247136][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.453566][T16724] veth0_vlan: entered promiscuous mode
[  340.498041][T17030] veth0_vlan: left promiscuous mode
[  340.505381][T16724] veth1_vlan: entered promiscuous mode
[  340.780668][T16724] veth0_macvtap: entered promiscuous mode
[  340.824673][T16724] veth1_macvtap: entered promiscuous mode
[  340.969706][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.017401][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.064384][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  341.071571][   T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.072162][   T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.120312][ T9937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.120357][ T9937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.394836][T10964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.394857][T10964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.491522][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2913'.
[  341.491560][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2913'.
[  341.679291][T17055] netlink: 'syz.2.2913': attribute type 1 has an invalid length.
[  341.815766][T10964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.815790][T10964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.492783][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2921'.
[  342.524520][T17084] netlink: 'syz.2.2921': attribute type 27 has an invalid length.
[  342.580273][T17090] netlink: 'syz.3.2842': attribute type 2 has an invalid length.
[  342.759524][T17071] netlink: 'syz.0.2918': attribute type 6 has an invalid length.
[  343.405278][ T4951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  343.413163][ T4951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  343.418039][ T4951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  343.437809][ T4951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  343.439923][ T4951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  344.326249][T17127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2929'.
[  344.365882][T17130] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2929'.
[  344.516908][T17133] netlink: 'syz.3.2931': attribute type 1 has an invalid length.
[  344.662440][T17142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.877855][T17157] sctp_getsockopt_maxburst: 23 callbacks suppressed
[  344.877876][T17157] sctp: [Deprecated]: syz.3.2936 (pid 17157) Use of int in max_burst socket option.
[  344.877876][T17157] Use struct sctp_assoc_value instead
[  345.246229][T17108] rxe_eth0 speed is unknown, defaulting to 1000
[  345.376163][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2940'.
[  345.376188][T17176] openvswitch: netlink: Invalid VLAN frame
[  345.550309][ T5647] Bluetooth: hci3: command tx timeout
[  345.733823][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2945'.
[  345.777594][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2945'.
[  345.892296][T17184] ipvlan3: entered allmulticast mode
[  345.892319][T17184] virt_wifi0: entered allmulticast mode
[  345.895731][T17184] batman_adv: batadv0: Adding interface: ipvlan3
[  345.895746][T17184] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.895775][T17184] batman_adv: batadv0: Interface activated: ipvlan3
[  345.972454][T17186] ipvlan4: entered allmulticast mode
[  345.974129][T17186] batman_adv: batadv0: Adding interface: ipvlan4
[  345.974144][T17186] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.974170][T17186] batman_adv: The newly added mac address (6e:5b:fd:50:5f:8e) already exists on: ipvlan3
[  345.974184][T17186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.974196][T17186] batman_adv: batadv0: Interface activated: ipvlan4
[  346.700448][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'.
[  346.869332][T17203] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2948'.
[  347.639058][ T5647] Bluetooth: hci3: command tx timeout
[  349.513599][T17195] syzkaller0: entered promiscuous mode
[  349.513708][T17195] syzkaller0: entered allmulticast mode
[  349.515215][T17108] wg0 speed is unknown, defaulting to 1000
[  349.711082][ T5647] Bluetooth: hci3: command tx timeout
[  350.140918][T17234] netlink: 'syz.4.2954': attribute type 11 has an invalid length.
[  350.233818][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'.
[  350.281522][T17247] netlink: 'syz.1.2958': attribute type 6 has an invalid length.
[  350.852494][   T30] audit: type=1800 audit(1794021748.295:3): pid=17265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2961" name="memory.events" dev="tmpfs" ino=54 res=0 errno=-22
[  350.902202][   T30] audit: type=1804 audit(1794021748.335:4): pid=17265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2961" name="/newroot/7/memory.events" dev="tmpfs" ino=54 res=1 errno=0
[  351.114021][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'.
[  351.267400][T17108] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.267609][T17108] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.267767][T17108] bridge_slave_0: entered allmulticast mode
[  351.302083][T17108] bridge_slave_0: entered promiscuous mode
[  351.323244][T17108] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.325689][T17108] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.327359][T17108] bridge_slave_1: entered allmulticast mode
[  351.337780][T17108] bridge_slave_1: entered promiscuous mode
[  351.580239][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.615859][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.765838][T17293] tunl0: entered promiscuous mode
[  351.798868][ T5647] Bluetooth: hci3: command tx timeout
[  351.897751][T17108] team0: Port device team_slave_0 added
[  351.916239][T17108] team0: Port device team_slave_1 added
[  352.072231][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.072250][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.072276][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.074548][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.074562][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.074601][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.805775][T17323] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  352.838287][T17108] hsr_slave_0: entered promiscuous mode
[  352.850321][T17108] hsr_slave_1: entered promiscuous mode
[  352.854373][T17108] debugfs: 'hsr0' already exists in 'hsr'
[  352.854392][T17108] Cannot create hsr debugfs directory
[  353.133994][T17335] xt_hashlimit: size too large, truncated to 1048576
[  353.264363][T17344] FAULT_INJECTION: forcing a failure.
[  353.264363][T17344] name failslab, interval 1, probability 0, space 0, times 0
[  353.264407][T17344] CPU: 1 UID: 0 PID: 17344 Comm: syz.3.2981 Not tainted syzkaller #0 PREEMPT(full) 
[  353.264430][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  353.264449][T17344] Call Trace:
[  353.264457][T17344]  <TASK>
[  353.264465][T17344]  dump_stack_lvl+0xe8/0x150
[  353.264498][T17344]  should_fail_ex+0x3eb/0x540
[  353.264527][T17344]  should_failslab+0xa8/0x100
[  353.264558][T17344]  __kmalloc_noprof+0xf9/0x710
[  353.264583][T17344]  ? tomoyo_encode+0x2ad/0x570
[  353.264602][T17344]  ? tomoyo_encode+0x2ad/0x570
[  353.264629][T17344]  tomoyo_encode+0x2ad/0x570
[  353.264655][T17344]  tomoyo_realpath_from_path+0x5fd/0x640
[  353.264684][T17338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2979'.
[  353.264684][T17344]  ? tomoyo_path_number_perm+0x219/0x5f0
[  353.264710][T17344]  tomoyo_path_number_perm+0x246/0x5f0
[  353.264739][T17344]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  353.264764][T17344]  ? __lock_acquire+0x747/0x2de0
[  353.264830][T17344]  ? __fget_files+0x2a/0x420
[  353.264857][T17344]  ? __fget_files+0x2a/0x420
[  353.264879][T17344]  ? __fget_files+0x2a/0x420
[  353.264906][T17344]  security_file_ioctl+0xc3/0x2a0
[  353.264931][T17344]  __se_sys_ioctl+0x47/0x170
[  353.264961][T17344]  do_syscall_64+0x166/0x520
[  353.264984][T17344]  ? trace_irq_disable+0x3b/0x140
[  353.265010][T17344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.265030][T17344]  ? clear_bhb_loop+0x70/0xc0
[  353.265053][T17344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.265077][T17344] RIP: 0033:0x7f4de3d9fb19
[  353.265096][T17344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.265113][T17344] RSP: 002b:00007f4de1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  353.265133][T17344] RAX: ffffffffffffffda RBX: 00007f4de4025fa0 RCX: 00007f4de3d9fb19
[  353.265147][T17344] RDX: 0000200000000680 RSI: 0000000000008b19 RDI: 0000000000000007
[  353.265158][T17344] RBP: 00007f4de1ff6090 R08: 0000000000000000 R09: 0000000000000000
[  353.265169][T17344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.265178][T17344] R13: 00007f4de4026038 R14: 00007f4de4025fa0 R15: 00007fff507fa7d8
[  353.265207][T17344]  </TASK>
[  353.265223][T17344] ERROR: Out of memory at tomoyo_realpath_from_path.
[  353.592858][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'.
[  354.398794][T17372] xt_IDLETIMER: label is empty or not nul-terminated
[  354.903987][T17108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  354.904022][T17108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.015860][T17365] syzkaller0: entered promiscuous mode
[  355.015885][T17365] syzkaller0: entered allmulticast mode
[  355.029834][T17381] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  355.193062][T17384] FAULT_INJECTION: forcing a failure.
[  355.193062][T17384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.193092][T17384] CPU: 1 UID: 0 PID: 17384 Comm: syz.1.2991 Not tainted syzkaller #0 PREEMPT(full) 
[  355.193113][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  355.193124][T17384] Call Trace:
[  355.193131][T17384]  <TASK>
[  355.193139][T17384]  dump_stack_lvl+0xe8/0x150
[  355.193174][T17384]  should_fail_ex+0x3eb/0x540
[  355.193203][T17384]  _copy_from_user+0x2d/0xb0
[  355.193235][T17384]  wext_handle_ioctl+0xc7/0x1d0
[  355.193268][T17384]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  355.193312][T17384]  sock_ioctl+0x159/0x7e0
[  355.193337][T17384]  ? __fget_files+0x2a/0x420
[  355.193360][T17384]  ? __pfx_sock_ioctl+0x10/0x10
[  355.193383][T17384]  ? __fget_files+0x2a/0x420
[  355.193407][T17384]  ? __fget_files+0x2a/0x420
[  355.193433][T17384]  ? bpf_lsm_file_ioctl+0x9/0x20
[  355.193460][T17384]  ? __pfx_sock_ioctl+0x10/0x10
[  355.193483][T17384]  __se_sys_ioctl+0xfc/0x170
[  355.193513][T17384]  do_syscall_64+0x166/0x520
[  355.193536][T17384]  ? trace_irq_disable+0x3b/0x140
[  355.193562][T17384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.193581][T17384]  ? clear_bhb_loop+0x70/0xc0
[  355.193604][T17384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.193623][T17384] RIP: 0033:0x7f4ca539fb19
[  355.193641][T17384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.193657][T17384] RSP: 002b:00007f4ca6230028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.193678][T17384] RAX: ffffffffffffffda RBX: 00007f4ca5625fa0 RCX: 00007f4ca539fb19
[  355.193691][T17384] RDX: 0000200000000680 RSI: 0000000000008b19 RDI: 0000000000000007
[  355.193704][T17384] RBP: 00007f4ca6230090 R08: 0000000000000000 R09: 0000000000000000
[  355.193715][T17384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.193726][T17384] R13: 00007f4ca5626038 R14: 00007f4ca5625fa0 R15: 00007fff31235148
[  355.193758][T17384]  </TASK>
[  355.349600][T17108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  355.349636][T17108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.505449][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2992'.
[  355.505867][T17387] ip6t_srh: unknown srh match flags  5F28
[  355.560909][T17108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  355.560946][T17108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.810359][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'.
[  355.957475][T17388] 8021q: adding VLAN 0 to HW filter on device bond15
[  355.976343][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2992'.
[  356.004452][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'.
[  356.007120][T17108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  356.007152][T17108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.421896][T17427] tipc: Can't bind to reserved service type 2
[  356.486818][T17108] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.516119][T17108] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.526683][T17108] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.540125][T17108] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.543726][T17108] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.548234][T17108] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.572954][T17108] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  356.589192][T17108] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.594559][T17430] FAULT_INJECTION: forcing a failure.
[  356.594559][T17430] name failslab, interval 1, probability 0, space 0, times 0
[  356.594588][T17430] CPU: 0 UID: 0 PID: 17430 Comm: syz.3.3003 Not tainted syzkaller #0 PREEMPT(full) 
[  356.594616][T17430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  356.594627][T17430] Call Trace:
[  356.594635][T17430]  <TASK>
[  356.594643][T17430]  dump_stack_lvl+0xe8/0x150
[  356.594679][T17430]  should_fail_ex+0x3eb/0x540
[  356.594708][T17430]  should_failslab+0xa8/0x100
[  356.594739][T17430]  __kmalloc_noprof+0xf9/0x710
[  356.594764][T17430]  ? ioctl_standard_iw_point+0x542/0xdc0
[  356.594783][T17430]  ? ioctl_standard_iw_point+0x542/0xdc0
[  356.594807][T17430]  ioctl_standard_iw_point+0x542/0xdc0
[  356.594838][T17430]  ? __pfx_cfg80211_wext_giwscan+0x10/0x10
[  356.594861][T17430]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  356.594886][T17430]  ? wext_ioctl_dispatch+0xa2/0x410
[  356.594911][T17430]  ? __pfx___mutex_lock+0x10/0x10
[  356.594946][T17430]  ioctl_standard_call+0xa6/0x160
[  356.594971][T17430]  ? __pfx_cfg80211_wext_giwscan+0x10/0x10
[  356.594989][T17430]  ? __pfx_ioctl_standard_call+0x10/0x10
[  356.595015][T17430]  ? __pfx_cfg80211_wext_giwscan+0x10/0x10
[  356.595034][T17430]  wext_ioctl_dispatch+0xee/0x410
[  356.595056][T17430]  ? __pfx_ioctl_standard_call+0x10/0x10
[  356.595083][T17430]  wext_handle_ioctl+0x110/0x1d0
[  356.595110][T17430]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  356.595150][T17430]  sock_ioctl+0x159/0x7e0
[  356.595179][T17430]  ? __fget_files+0x2a/0x420
[  356.595201][T17430]  ? __pfx_sock_ioctl+0x10/0x10
[  356.595224][T17430]  ? __fget_files+0x2a/0x420
[  356.595248][T17430]  ? __fget_files+0x2a/0x420
[  356.595273][T17430]  ? bpf_lsm_file_ioctl+0x9/0x20
[  356.595298][T17430]  ? __pfx_sock_ioctl+0x10/0x10
[  356.595320][T17430]  __se_sys_ioctl+0xfc/0x170
[  356.595348][T17430]  do_syscall_64+0x166/0x520
[  356.595370][T17430]  ? trace_irq_disable+0x3b/0x140
[  356.595394][T17430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.595412][T17430]  ? clear_bhb_loop+0x70/0xc0
[  356.595436][T17430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.595453][T17430] RIP: 0033:0x7f4de3d9fb19
[  356.595471][T17430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.595487][T17430] RSP: 002b:00007f4de1ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  356.595507][T17430] RAX: ffffffffffffffda RBX: 00007f4de4025fa0 RCX: 00007f4de3d9fb19
[  356.595520][T17430] RDX: 0000200000000680 RSI: 0000000000008b19 RDI: 0000000000000007
[  356.595532][T17430] RBP: 00007f4de1ff6090 R08: 0000000000000000 R09: 0000000000000000
[  356.595544][T17430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.595556][T17430] R13: 00007f4de4026038 R14: 00007f4de4025fa0 R15: 00007fff507fa7d8
[  356.595589][T17430]  </TASK>
[  356.699787][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'.
[  357.001337][T17434] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3004'.
[  357.074417][T17444] sctp: [Deprecated]: syz.0.3005 (pid 17444) Use of int in max_burst socket option deprecated.
[  357.074417][T17444] Use struct sctp_assoc_value instead
[  357.165272][T17451] sctp: [Deprecated]: syz.0.3005 (pid 17451) Use of int in max_burst socket option deprecated.
[  357.165272][T17451] Use struct sctp_assoc_value instead
[  357.273162][T17453] xt_esp: unknown flags DD
[  357.399949][T17459] netlink: 'syz.1.3007': attribute type 1 has an invalid length.
[  357.528351][T17459] 8021q: adding VLAN 0 to HW filter on device bond17
[  357.562904][T17108] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.646036][T17463] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  357.679168][T17470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.830652][T17108] 8021q: adding VLAN 0 to HW filter on device team0
[  357.894482][T17477] bond13: Unable to set peer notification delay as MII monitoring is disabled
[  357.909650][T17477] bond13 (unregistering): Released all slaves
[  358.094013][T17459] rxe_eth0 speed is unknown, defaulting to 1000
[  358.114650][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.114764][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.144272][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.144440][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.176665][T17487] FAULT_INJECTION: forcing a failure.
[  358.176665][T17487] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.176695][T17487] CPU: 1 UID: 0 PID: 17487 Comm: syz.4.3015 Not tainted syzkaller #0 PREEMPT(full) 
[  358.176717][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  358.176728][T17487] Call Trace:
[  358.176736][T17487]  <TASK>
[  358.176744][T17487]  dump_stack_lvl+0xe8/0x150
[  358.176784][T17487]  should_fail_ex+0x3eb/0x540
[  358.176814][T17487]  _copy_to_user+0x31/0xb0
[  358.176841][T17487]  simple_read_from_buffer+0xe1/0x170
[  358.176871][T17487]  proc_fail_nth_read+0x1bb/0x230
[  358.176895][T17487]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  358.176919][T17487]  ? rw_verify_area+0x24a/0x4c0
[  358.176947][T17487]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  358.176965][T17487]  vfs_read+0x213/0xa80
[  358.177005][T17487]  ? __pfx___mutex_lock+0x10/0x10
[  358.177032][T17487]  ? __pfx_vfs_read+0x10/0x10
[  358.177058][T17487]  ? __fget_files+0x2a/0x420
[  358.177081][T17487]  ? __fget_files+0x3a2/0x420
[  358.177102][T17487]  ? __fget_files+0x2a/0x420
[  358.177130][T17487]  ? fdget+0x1ac/0x250
[  358.177161][T17487]  ksys_read+0x150/0x270
[  358.177189][T17487]  ? __pfx_ksys_read+0x10/0x10
[  358.177227][T17487]  do_syscall_64+0x166/0x520
[  358.177251][T17487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.177271][T17487]  ? clear_bhb_loop+0x70/0xc0
[  358.177295][T17487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.177314][T17487] RIP: 0033:0x7fcc6ef6034e
[  358.177332][T17487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  358.177348][T17487] RSP: 002b:00007fcc6fe2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  358.177368][T17487] RAX: ffffffffffffffda RBX: 00007fcc6fe2d6c0 RCX: 00007fcc6ef6034e
[  358.177382][T17487] RDX: 000000000000000f RSI: 00007fcc6fe2d0a0 RDI: 0000000000000009
[  358.177394][T17487] RBP: 00007fcc6fe2d090 R08: 0000000000000000 R09: 0000000000000000
[  358.177406][T17487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  358.177417][T17487] R13: 00007fcc6f226038 R14: 00007fcc6f225fa0 R15: 00007ffe7477dbc8
[  358.177451][T17487]  </TASK>
[  358.663744][T17493] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3018'.
[  358.917302][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'.
[  358.987855][T17491] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3017'.
[  359.114371][T17459] wg0 speed is unknown, defaulting to 1000
[  359.805078][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3023'.
[  360.328732][T17535] netlink: 'syz.3.3027': attribute type 1 has an invalid length.
[  360.484312][T17535] bond1: entered promiscuous mode
[  360.484851][T17535] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.556567][T17540] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.571955][T17540] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  360.571981][T17540] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  360.622683][T17540] bond1: (slave ip6gre1): making interface the new active one
[  360.622708][T17540] ip6gre1: entered promiscuous mode
[  360.644618][T17540] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  360.753995][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.030479][T17563] __nla_validate_parse: 1 callbacks suppressed
[  361.030499][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'.
[  361.146977][T17108] veth0_vlan: entered promiscuous mode
[  361.232566][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3032'.
[  361.450679][T17108] veth1_vlan: entered promiscuous mode
[  361.639844][T17108] veth0_macvtap: entered promiscuous mode
[  361.646331][T17108] veth1_macvtap: entered promiscuous mode
[  361.662021][T17584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3039'.
[  361.704493][T17108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.785055][T17108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.859768][  T997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.859838][  T997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.859870][  T997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.859902][  T997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.895436][T17590] x_tables: duplicate underflow at hook 3
[  361.971256][T17594] netlink: 'syz.3.3042': attribute type 21 has an invalid length.
[  361.971281][T17594] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3042'.
[  362.004196][T17594] netlink: 'syz.3.3042': attribute type 5 has an invalid length.
[  362.004220][T17594] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3042'.
[  362.126021][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.126042][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.224119][T10964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.224141][T10964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.230514][T17593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3040'.
[  362.356456][T17603] syzkaller0: entered promiscuous mode
[  362.356480][T17603] syzkaller0: entered allmulticast mode
[  362.610556][T17610] ip6t_rt: unknown flags 36
[  362.960392][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'.
[  362.960415][T17624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3049'.
[  363.062217][T17628] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3052'.
[  363.063279][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3050'.
[  363.092998][T17628] tap0: tun_chr_ioctl cmd 1074025676
[  363.093021][T17628] tap0: owner set to 0
[  363.310878][ T4951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.330748][ T4951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.335100][ T4951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.338428][ T4951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.354498][ T4951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.998288][T17655] veth0_virt_wifi: entered allmulticast mode
[  364.513846][T17629] rxe_eth0 speed is unknown, defaulting to 1000
[  364.927242][T17629] wg0 speed is unknown, defaulting to 1000
[  365.019526][T17684] netlink: 'syz.0.3066': attribute type 15 has an invalid length.
[  365.131741][T17687] syzkaller0: entered promiscuous mode
[  365.131765][T17687] syzkaller0: entered allmulticast mode
[  365.389975][ T4951] Bluetooth: hci4: command tx timeout
[  365.716794][T17703] syzkaller0: left promiscuous mode
[  365.716817][T17703] syzkaller0: left allmulticast mode
[  365.922409][T17710] veth0_to_bond: default FDB implementation only supports local addresses
[  365.947201][T17710] IPVS: set_ctl: invalid protocol: 22 100.1.1.1:20004
[  365.951873][T17710] netlink: 'syz.2.3074': attribute type 2 has an invalid length.
[  366.172067][T17629] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.172252][T17629] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.172391][T17629] bridge_slave_0: entered allmulticast mode
[  366.174015][T17629] bridge_slave_0: entered promiscuous mode
[  366.210185][T17629] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.210371][T17629] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.210523][T17629] bridge_slave_1: entered allmulticast mode
[  366.213981][T17629] bridge_slave_1: entered promiscuous mode
[  366.352703][T17629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.390817][T17629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.473209][T17629] team0: Port device team_slave_0 added
[  366.477790][T17629] team0: Port device team_slave_1 added
[  366.527582][T17629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.527600][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.527625][T17629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.576420][T17629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.576438][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.576465][T17629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.033460][T17629] hsr_slave_0: entered promiscuous mode
[  367.040531][T17629] hsr_slave_1: entered promiscuous mode
[  367.046192][T17629] debugfs: 'hsr0' already exists in 'hsr'
[  367.046211][T17629] Cannot create hsr debugfs directory
[  367.133985][T17742] __nla_validate_parse: 7 callbacks suppressed
[  367.134007][T17742] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3084'.
[  367.276552][T17741] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  367.322904][T17741] bond18 (unregistering): Released all slaves
[  367.399262][T17750] netlink: 632 bytes leftover after parsing attributes in process `syz.0.3087'.
[  367.469191][ T4951] Bluetooth: hci4: command tx timeout
[  367.857670][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3090'.
[  367.857718][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3090'.
[  368.117884][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3093'.
[  368.117917][T17770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3093'.
[  368.158119][T17629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.158159][T17629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.158181][T17629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  368.219469][T17773] 
: renamed from bond0 (while UP)
[  368.314819][T17770] gretap1: entered promiscuous mode
[  368.315013][T17770] gretap1: entered allmulticast mode
[  368.341936][T17778] tipc: Started in network mode
[  368.341985][T17778] tipc: Node identity feef200b615a, cluster identity 4711
[  368.342411][T17778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.437161][T17774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3096'.
[  368.449330][T17629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.449358][T17629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.449376][T17629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  368.585653][T17771] syzkaller0: entered promiscuous mode
[  368.585679][T17771] syzkaller0: entered allmulticast mode
[  368.586392][T17771] tipc: Resetting bearer <eth:syzkaller0>
[  368.706115][ T9937] tipc: Resetting bearer <eth:syzkaller0>
[  368.918032][T17769] tipc: Resetting bearer <eth:syzkaller0>
[  369.221944][T17801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3101'.
[  369.559119][ T4951] Bluetooth: hci4: command tx timeout
[  371.499428][T17769] tipc: Disabling bearer <eth:syzkaller0>
[  371.628611][ T4951] Bluetooth: hci4: command tx timeout
[  371.668444][T17629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.675369][T17629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.675403][T17629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  371.767525][ T5768] tipc: Node number set to 2679447563
[  372.023107][T17629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.023149][T17629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.023172][T17629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  372.098037][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3104'.
[  372.104395][T17812] unsupported nlmsg_type 40
[  372.271088][T17815] tipc: Enabling of bearer <if:i> rejected, media not registered
[  372.272637][T17815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3106'.
[  372.276787][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3106'.
[  372.319366][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.319564][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.319703][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.320820][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.320963][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.321110][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.321457][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.321590][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.321732][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  372.322157][T17815] Dead loop on virtual device lo (net 174), fix it urgently!
[  373.457353][T17629] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  373.500259][T17629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  373.505722][T17629] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  373.534973][T17629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  373.546220][T17629] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  373.565676][T17629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  373.566853][T17629] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  373.671268][T17629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  373.936142][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  373.936679][T17860] syzkaller1: entered promiscuous mode
[  373.936698][T17860] syzkaller1: entered allmulticast mode
[  374.087638][T17629] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.114059][T17866] ipt_rpfilter: unknown options
[  374.168175][T17629] 8021q: adding VLAN 0 to HW filter on device team0
[  374.221072][  T997] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.221183][  T997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.256745][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.256878][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.834040][T17872] tc_dump_action: action bad kind
[  375.108731][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'.
[  375.108764][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3127'.
[  375.159188][T17894] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3127'.
[  375.236050][T17902] netlink: 'syz.3.3129': attribute type 9 has an invalid length.
[  375.236071][T17902] netlink: 121772 bytes leftover after parsing attributes in process `syz.3.3129'.
[  375.546765][T17903] netlink: 'syz.3.3129': attribute type 1 has an invalid length.
[  375.546787][T17903] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3129'.
[  375.547647][T17908] netlink: 'syz.3.3129': attribute type 9 has an invalid length.
[  375.547666][T17908] netlink: 121772 bytes leftover after parsing attributes in process `syz.3.3129'.
[  375.779114][T17909] netlink: 'syz.3.3129': attribute type 1 has an invalid length.
[  375.779135][T17909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3129'.
[  375.993952][T17922] rxe_eth0 speed is unknown, defaulting to 1000
[  376.073037][T17931] Unknown options in mask 4
[  376.395161][T17629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.788201][T17924] rxe_eth0 speed is unknown, defaulting to 1000
[  376.796870][T17922] wg0 speed is unknown, defaulting to 1000
[  377.089379][T17957] netlink: 'syz.3.3139': attribute type 5 has an invalid length.
[  377.111720][T17957] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.444411][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'.
[  377.620644][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'.
[  377.672849][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3143'.
[  377.718233][T17967] 8021q: adding VLAN 0 to HW filter on device bond1
[  377.731755][T17976] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3142'.
[  377.885915][T17629] veth0_vlan: entered promiscuous mode
[  377.950349][T17629] veth1_vlan: entered promiscuous mode
[  378.083814][T17924] wg0 speed is unknown, defaulting to 1000
[  378.105941][T17629] veth0_macvtap: entered promiscuous mode
[  378.283945][T17629] veth1_macvtap: entered promiscuous mode
[  378.542324][T17996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3148'.
[  378.564806][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.895669][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.895944][T18003] bond0: Error: CAN devices cannot be enslaved
[  378.897663][T18007] batman_adv: batadv0: Adding interface: syzkaller0
[  378.897678][T18007] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1232) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.897707][T18007] batman_adv: batadv0: Interface activated: syzkaller0
[  379.061080][T18006] bond13: entered promiscuous mode
[  379.061151][T18006] bond13: entered allmulticast mode
[  379.062407][T18006] 8021q: adding VLAN 0 to HW filter on device bond13
[  379.181047][T18014] bond14: entered promiscuous mode
[  379.181102][T18014] bond14: entered allmulticast mode
[  379.181489][T18014] 8021q: adding VLAN 0 to HW filter on device bond14
[  379.196494][T10950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.196702][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.196774][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.196843][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.643629][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'.
[  380.013622][  T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.013643][  T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.255743][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.255764][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.427067][T18047] xt_recent: Unsupported userspace flags (000000b1)
[  381.537459][ T5647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.559634][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.561315][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.568015][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.571541][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.901402][T18096] pimreg: entered allmulticast mode
[  382.067183][T18100] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3177'.
[  382.178069][T18094] syzkaller1: entered promiscuous mode
[  382.178093][T18094] syzkaller1: entered allmulticast mode
[  382.226855][T18120] netlink: 'syz.1.3179': attribute type 28 has an invalid length.
[  382.226879][T18120] netlink: 'syz.1.3179': attribute type 3 has an invalid length.
[  382.226890][T18120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3179'.
[  382.825091][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.825216][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.984323][T18149] netlink: 368 bytes leftover after parsing attributes in process `syz.4.3183'.
[  383.027511][T18132] syzkaller1: entered promiscuous mode
[  383.027710][T18132] syzkaller1: entered allmulticast mode
[  383.386121][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.386156][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.581529][T18089] rxe_eth0 speed is unknown, defaulting to 1000
[  383.631177][ T5647] Bluetooth: hci2: command tx timeout
[  383.632270][T18177] xt_TCPMSS: Only works on TCP SYN packets
[  383.745913][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.745966][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.135209][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  384.135245][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.388225][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3190'.
[  384.670348][T18177] rxe_eth0 speed is unknown, defaulting to 1000
[  384.673545][T18089] wg0 speed is unknown, defaulting to 1000
[  384.773104][ T9937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.859685][  T150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.978837][ T9937] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.100792][T18195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3193'.
[  385.186795][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'.
[  385.453908][   T13] gretap0: left allmulticast mode
[  385.453955][   T13] gretap0: left promiscuous mode
[  385.455834][   T13] bridge0: port 3(gretap0) entered disabled state
[  385.567265][   T13] bridge_slave_1: left promiscuous mode
[  385.567518][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.597759][   T13] bridge_slave_0: left allmulticast mode
[  385.597786][   T13] bridge_slave_0: left promiscuous mode
[  385.597998][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.708924][ T5647] Bluetooth: hci2: command tx timeout
[  385.763281][   T13] dvmrp3: left allmulticast mode
[  385.804391][   T13] batman_adv: batadv0: Interface deactivated: syzkaller0
[  385.862038][T18217] net_ratelimit: 42 callbacks suppressed
[  385.862061][T18217] openvswitch: netlink: Flow actions attr not present in new flow.
[  386.696357][   T13] batman_adv: batadv0: Removing interface: syzkaller0
[  386.772732][   T13] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  386.772809][   T13] bridge1 (unregistering): left promiscuous mode
[  386.863727][   T13] team0: Port device bridge5 removed
[  386.930187][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.934794][   T13] bond_slave_0: left allmulticast mode
[  386.962218][   T13] bond0 (unregistering): (slave ): Releasing backup interface
[  386.962671][   T13] : left allmulticast mode
[  386.966965][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[  386.967541][   T13] team0: left allmulticast mode
[  386.967557][   T13] team_slave_0: left allmulticast mode
[  386.967573][   T13] team_slave_1: left allmulticast mode
[  387.020379][   T13] bond0 (unregistering): Released all slaves
[  387.044397][   T13] bond1 (unregistering): Released all slaves
[  387.066568][   T13] bond2 (unregistering): Released all slaves
[  387.105835][   T13] bond3 (unregistering): Released all slaves
[  387.137168][   T13] bond4 (unregistering): Released all slaves
[  387.161896][   T13] bond5 (unregistering): Released all slaves
[  387.190187][   T13] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  387.192005][   T13] bond6 (unregistering): Released all slaves
[  387.246393][   T13] bond7 (unregistering): Released all slaves
[  387.272318][   T13] bond8 (unregistering): Released all slaves
[  387.295464][   T13] bond9 (unregistering): Released all slaves
[  387.325914][   T13] bond10 (unregistering): Released all slaves
[  387.355795][   T13] bond11 (unregistering): Released all slaves
[  387.379636][   T13] bond12 (unregistering): Released all slaves
[  387.411294][   T13] bond13 (unregistering): Released all slaves
[  387.436286][   T13] bond14 (unregistering): Released all slaves
[  387.481091][  T150] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  387.481610][T18177] wg0 speed is unknown, defaulting to 1000
[  387.537471][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1
[  387.584898][ T3218] wg0 speed is unknown, defaulting to 1000
[  387.585998][ T3218] syz0: Port: 1 Link DOWN
[  387.794430][ T5647] Bluetooth: hci2: command tx timeout
[  387.936505][T18240] netlink: 'syz.1.3201': attribute type 10 has an invalid length.
[  388.031422][T18240] macvlan1: entered promiscuous mode
[  388.031449][T18240] macvlan1: entered allmulticast mode
[  388.254402][T18240] veth1_vlan: entered allmulticast mode
[  388.344769][T18240] veth1_vlan: left allmulticast mode
[  388.508767][   T13] tipc: Disabling bearer <udp:syz0>
[  388.509427][   T13] tipc: Left network mode
[  388.722631][T10963] IPVS: starting estimator thread 0...
[  388.812484][T18258] IPVS: using max 30 ests per chain, 72000 per kthread
[  389.543410][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2
[  389.595803][T18278] bond0: entered promiscuous mode
[  389.604436][T18278] bond_slave_0: entered promiscuous mode
[  389.604684][T18278] bond_slave_1: entered promiscuous mode
[  389.608315][T18278] batadv0: entered promiscuous mode
[  389.648643][T18278] 8021q: adding VLAN 0 to HW filter on device hsr1
[  389.687402][T18278] bond0: left promiscuous mode
[  389.687426][T18278] bond_slave_0: left promiscuous mode
[  389.688336][T18278] bond_slave_1: left promiscuous mode
[  389.801549][T18278] batadv0: left promiscuous mode
[  389.869055][ T5647] Bluetooth: hci2: command tx timeout
[  390.091538][T18089] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.092246][T18089] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.092596][T18089] bridge_slave_0: entered allmulticast mode
[  390.099719][T18089] bridge_slave_0: entered promiscuous mode
[  390.128157][T18089] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.128511][T18089] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.128806][T18089] bridge_slave_1: entered allmulticast mode
[  390.141698][T18089] bridge_slave_1: entered promiscuous mode
[  390.346033][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'.
[  390.470478][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3216'.
[  390.509258][T18089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.532008][T18089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.785083][T18089] team0: Port device team_slave_0 added
[  390.807199][T18313] netlink: 'syz.1.3219': attribute type 1 has an invalid length.
[  390.939918][T18089] team0: Port device team_slave_1 added
[  391.171062][T18089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.171081][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.171108][T18089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.176795][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'.
[  391.277957][T18089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.277975][T18089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.278001][T18089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.873178][T18089] hsr_slave_0: entered promiscuous mode
[  391.875941][T18089] hsr_slave_1: entered promiscuous mode
[  391.902936][T18089] debugfs: 'hsr0' already exists in 'hsr'
[  391.902958][T18089] Cannot create hsr debugfs directory
[  392.155706][T18345] netlink: 'syz.1.3226': attribute type 1 has an invalid length.
[  392.187216][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3
[  392.203539][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'.
[  392.203563][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'.
[  392.225359][T18351] ipt_ECN: cannot use operation on non-tcp rule
[  392.245476][T18354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3229'.
[  392.266445][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.266472][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.306028][   T13] batman_adv: batadv0: Interface deactivated: ipvlan3
[  392.306053][   T13] batman_adv: batadv0: Removing interface: ipvlan3
[  392.326013][   T13] batman_adv: batadv0: Interface deactivated: ipvlan4
[  392.326036][   T13] batman_adv: batadv0: Removing interface: ipvlan4
[  392.385377][T18356] xt_hashlimit: size too large, truncated to 1048576
[  392.476897][   T13] veth0_macvtap: left promiscuous mode
[  392.477070][   T13] veth1_vlan: left promiscuous mode
[  392.477112][   T13] veth0_vlan: left promiscuous mode
[  393.272984][   T13] team0 (unregistering): Port device team_slave_1 removed
[  393.293949][   T13] team0 (unregistering): Port device team_slave_0 removed
[  393.442879][ T9937] smbdirect: ib_dev[syz0] removed
[  393.715986][T18345] bond0: option mode: invalid value (10)
[  393.733765][T18345] bond0 (unregistering): Released all slaves
[  393.842078][T18360] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.925571][T18360] bridge_slave_0 (unregistering): left allmulticast mode
[  393.925920][T18360] bridge_slave_0 (unregistering): left promiscuous mode
[  393.926331][T18360] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.001857][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'.
[  394.664672][   T13] IPVS: stop unused estimator thread 0...
[  394.685479][T18385] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3239'.
[  394.693267][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3239'.
[  394.705154][T18385] IPVS: lc: FWM 3 0x00000003 - no destination available
[  394.761560][T18384] netlink: set zone limit has 4 unknown bytes
[  394.765808][T18089] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.801489][T18392] netlink: set zone limit has 4 unknown bytes
[  394.972932][T18397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3240'.
[  395.183768][T18403] netlink: 'syz.1.3242': attribute type 10 has an invalid length.
[  395.323883][T18089] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.579306][T18089] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.621083][T18424] netlink: 'syz.4.3248': attribute type 1 has an invalid length.
[  395.652747][T18425] ip_tables: iptables: counters copy to user failed while replacing table
[  395.669403][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  395.683521][T18424] __nla_validate_parse: 1 callbacks suppressed
[  395.683542][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'.
[  395.764674][T18089] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.884516][T18422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3247'.
[  396.088266][T18089] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  396.117249][T18089] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  396.128195][T18089] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  396.148122][T18089] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.156383][T18089] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  396.176433][T18089] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.244178][T18089] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  396.267483][T18089] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.459880][T18468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'.
[  396.460972][T18472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3254'.
[  396.481369][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'.
[  396.564743][T18477] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  396.792162][T18089] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.864160][T18089] 8021q: adding VLAN 0 to HW filter on device team0
[  396.895039][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.895141][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.949074][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.949173][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.080093][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3267'.
[  398.356819][T18089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.543574][T18089] veth0_vlan: entered promiscuous mode
[  398.582034][T18089] veth1_vlan: entered promiscuous mode
[  398.693553][T18089] veth0_macvtap: entered promiscuous mode
[  398.705811][T18089] veth1_macvtap: entered promiscuous mode
[  398.745240][T18089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.778273][T18089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.939201][T10950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.939246][T10950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.939278][T10950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.939310][T10950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.877338][T18554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.971819][T18669] netlink: zone id is out of range
[  400.971852][T18669] netlink: zone id is out of range
[  400.971860][T18669] netlink: zone id is out of range
[  400.971867][T18669] netlink: zone id is out of range
[  400.971874][T18669] netlink: zone id is out of range
[  401.052683][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.052705][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.090030][T18678] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3278'.
[  401.189693][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  401.190687][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  401.190727][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  401.190758][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  401.220621][T18672] netlink: 'syz.2.3277': attribute type 10 has an invalid length.
[  401.244975][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.244997][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.291084][T18689] ip_tables: iptables: counters copy to user failed while replacing table
[  401.419937][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'.
[  401.420155][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'.
[  402.006602][ T4951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  402.015946][ T4951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  402.018440][ T4951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  402.037736][ T4951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  402.038405][ T4951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  402.333816][T18743] Bluetooth: MGMT ver 1.23
[  402.450070][T18737] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3287'.
[  402.570614][T18757] netlink: 'syz.2.3293': attribute type 3 has an invalid length.
[  402.628082][T18758] bond1: entered promiscuous mode
[  402.634666][T18758] bond1: entered allmulticast mode
[  402.635110][T18758] 8021q: adding VLAN 0 to HW filter on device bond1
[  402.794411][T18767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3295'.
[  402.891564][T18727] rxe_eth0 speed is unknown, defaulting to 1000
[  403.025477][T18776] sctp: [Deprecated]: syz.4.3298 (pid 18776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.025477][T18776] Use struct sctp_sack_info instead
[  403.231259][T18786] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3300'.
[  403.231281][T18786] tipc: Invalid UDP bearer configuration
[  403.231320][T18786] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  403.405632][T18798] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3304'.
[  403.914123][T18818] xt_limit: Overflow, try lower: 536871034/0
[  403.940737][T18727] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.940903][T18727] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.941057][T18727] bridge_slave_0: entered allmulticast mode
[  403.945424][T18727] bridge_slave_0: entered promiscuous mode
[  403.983889][T18727] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.984001][T18727] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.984161][T18727] bridge_slave_1: entered allmulticast mode
[  403.986635][T18727] bridge_slave_1: entered promiscuous mode
[  403.995219][T18820] netlink: 'syz.4.3308': attribute type 1 has an invalid length.
[  403.995239][T18820] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.3308'.
[  404.056063][T18826] sctp: [Deprecated]: syz.0.3309 (pid 18826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.056063][T18826] Use struct sctp_sack_info instead
[  404.100067][T18727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.103142][T18727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.118791][ T4951] Bluetooth: hci0: command tx timeout
[  404.240338][T18727] team0: Port device team_slave_0 added
[  404.265558][T18727] team0: Port device team_slave_1 added
[  404.364988][T18842] syzkaller0: entered promiscuous mode
[  404.365012][T18842] syzkaller0: entered allmulticast mode
[  404.370166][T18727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.370183][T18727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.370215][T18727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.378196][T18727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.378242][T18727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.378268][T18727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.476830][T18842] netlink: 34388 bytes leftover after parsing attributes in process `syz.2.3311'.
[  404.505149][T18842] netlink: 3588 bytes leftover after parsing attributes in process `syz.2.3311'.
[  404.521632][T18832] netlink: 'syz.2.3311': attribute type 11 has an invalid length.
[  404.624643][T18853] netlink: 'syz.0.3318': attribute type 1 has an invalid length.
[  404.635698][T18727] hsr_slave_0: entered promiscuous mode
[  404.639946][T18727] hsr_slave_1: entered promiscuous mode
[  404.642685][T18727] debugfs: 'hsr0' already exists in 'hsr'
[  404.642701][T18727] Cannot create hsr debugfs directory
[  404.717568][T18853] netlink: 'syz.0.3318': attribute type 75 has an invalid length.
[  405.165660][T18727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.165683][T18727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.165696][T18727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0
[  405.165709][T18727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.290261][T18727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.290284][T18727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.290298][T18727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0
[  405.290311][T18727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.363974][T18891] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.364648][T18891] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.453876][T18891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.457282][T18891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.601295][T18727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.601329][T18727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.601353][T18727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0
[  405.601377][T18727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.701407][T10950] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.701990][T10950] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.702113][T10950] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.702146][T10950] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.770750][T18727] batman_adv: batadv0: Removing interface: macsec1
[  405.798168][T18727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.798202][T18727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.798226][T18727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0
[  405.798250][T18727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.012751][T18912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.162708][T10963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.162731][T10963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.188932][ T4951] Bluetooth: hci0: command tx timeout
[  406.223458][T18727] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  406.238173][T18727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  406.246212][T18727] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  406.261387][T18727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  406.262328][T18727] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  406.293219][T18727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  406.294879][T18727] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  406.321776][T18727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  406.323091][T18924] netlink: 'syz.2.3339': attribute type 1 has an invalid length.
[  406.323109][T18924] __nla_validate_parse: 6 callbacks suppressed
[  406.323119][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3339'.
[  406.523387][T18727] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.550168][T18727] 8021q: adding VLAN 0 to HW filter on device team0
[  406.557324][T10950] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.557430][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.594714][  T997] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.594827][  T997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.695532][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3345'.
[  407.066267][T18962] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  407.066291][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'.
[  407.363535][T18978] nbd: must specify a device to reconfigure
[  407.559618][T18727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.576847][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  407.752986][T18727] veth0_vlan: entered promiscuous mode
[  407.785817][T18727] veth1_vlan: entered promiscuous mode
[  407.882925][T18727] veth0_macvtap: entered promiscuous mode
[  407.902109][T18727] veth1_macvtap: entered promiscuous mode
[  407.903826][T19000] netlink: 'syz.0.3360': attribute type 58 has an invalid length.
[  407.903847][T19000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3360'.
[  408.019781][T18727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.059777][T18727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.083340][T10950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.083535][T10950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.083586][T10950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.083616][T10950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.269834][ T4951] Bluetooth: hci0: command tx timeout
[  408.306219][T19005] netlink: 'syz.0.3361': attribute type 83 has an invalid length.
[  408.307959][T10950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.307978][T10950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.318887][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3361'.
[  408.318909][T19005] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3361'.
[  408.433922][T10950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.433945][T10950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.796827][T19036] netlink: 'syz.3.3367': attribute type 1 has an invalid length.
[  408.805908][T19024] 8021q: adding VLAN 0 to HW filter on device bond2
[  408.806621][T19024] bridge0: port 3(bond2) entered blocking state
[  408.806900][T19024] bridge0: port 3(bond2) entered disabled state
[  408.807033][T19024] bond2: entered allmulticast mode
[  408.809883][T19024] bond2: entered promiscuous mode
[  408.810610][T19024] bridge0: port 3(bond2) entered blocking state
[  408.810885][T19024] bridge0: port 3(bond2) entered forwarding state
[  408.886818][T19024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3367'.
[  408.920116][T19036] bond3: option mode: invalid value (9)
[  408.926519][T19036] bond3 (unregistering): Released all slaves
[  409.081083][T19042] netlink: 'syz.4.3370': attribute type 1 has an invalid length.
[  409.293600][T19042] bond2: option mode: invalid value (34)
[  409.346624][T19042] bond2 (unregistering): Released all slaves
[  409.382268][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382268][T19071] Use struct sctp_assoc_value instead
[  409.382301][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382301][T19071] Use struct sctp_assoc_value instead
[  409.382327][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382327][T19071] Use struct sctp_assoc_value instead
[  409.382346][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382346][T19071] Use struct sctp_assoc_value instead
[  409.382366][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382366][T19071] Use struct sctp_assoc_value instead
[  409.382386][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382386][T19071] Use struct sctp_assoc_value instead
[  409.382406][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382406][T19071] Use struct sctp_assoc_value instead
[  409.382427][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382427][T19071] Use struct sctp_assoc_value instead
[  409.382447][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382447][T19071] Use struct sctp_assoc_value instead
[  409.382468][T19071] sctp: [Deprecated]: syz.3.3374 (pid 19071) Use of int in max_burst socket option.
[  409.382468][T19071] Use struct sctp_assoc_value instead
[  409.518805][T19042] netlink: 'syz.4.3370': attribute type 1 has an invalid length.
[  409.653116][T19072] veth0: entered promiscuous mode
[  409.659576][T19076] veth0: left promiscuous mode
[  409.703079][T19042] bond2: option mode: invalid value (34)
[  409.705172][T19042] bond2 (unregistering): Released all slaves
[  409.758025][T10950] bridge0: port 3(bond2) entered disabled state
[  410.350398][ T4951] Bluetooth: hci0: command tx timeout
[  410.375055][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'.
[  410.375078][T19121] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.3389'.
[  410.454002][T19135] pim6reg: entered allmulticast mode
[  410.540388][T19137] syzkaller1: entered promiscuous mode
[  410.540409][T19137] syzkaller1: entered allmulticast mode
[  410.816430][T19157] SET target dimension over the limit!
[  410.833031][T19158] netlink: 'syz.2.3399': attribute type 12 has an invalid length.
[  411.566492][T19204] __nla_validate_parse: 3 callbacks suppressed
[  411.566513][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3412'.
[  411.670013][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'.
[  411.673119][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'.
[  411.864268][T19215] 8021q: adding VLAN 0 to HW filter on device team0
[  411.915942][T19215] bond1: left promiscuous mode
[  411.915966][T19215] ip6gre1: left promiscuous mode
[  411.946267][T10950] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.946377][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.975904][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  412.129872][T19233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3420'.
[  412.129912][T19233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3420'.
[  412.224859][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'.
[  412.311754][T19246] sctp: [Deprecated]: syz.3.3421 (pid 19246) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.311754][T19246] Use struct sctp_sack_info instead
[  412.479641][T19251] netlink: 'syz.0.3424': attribute type 8 has an invalid length.
[  412.778932][T19269] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  412.827450][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3431'.
[  412.841370][T19273] batman_adv: batadv0: Adding interface: syzkaller0
[  412.841387][T19273] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.841411][T19273] batman_adv: batadv0: Interface activated: syzkaller0
[  412.841815][T19278] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  413.726863][T19280] batman_adv: batadv0: Interface deactivated: syzkaller0
[  413.826514][T19280] batman_adv: batadv0: Removing interface: syzkaller0
[  414.322295][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'.
[  414.361493][T19332] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3443'.
[  414.503871][T19343] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  414.724091][T19357] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3451'.
[  414.992613][T19374] netlink: 'syz.0.3458': attribute type 1 has an invalid length.
[  415.036504][T19376] x_tables: duplicate underflow at hook 2
[  415.102580][T19374] bond1: entered promiscuous mode
[  415.104187][T19374] 8021q: adding VLAN 0 to HW filter on device bond1
[  415.308712][ T4951] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[  415.309329][ T5647] Bluetooth: hci0: command 0x0c3a tx timeout
[  416.028816][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  418.022923][T19402] bridge_slave_1: left allmulticast mode
[  418.022977][T19402] bridge_slave_1: left promiscuous mode
[  418.024430][T19402] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.059143][T19402] bridge_slave_0: left allmulticast mode
[  418.059170][T19402] bridge_slave_0: left promiscuous mode
[  418.059392][T19402] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.123379][T19409] lo speed is unknown, defaulting to 1000
[  418.123450][T19409] lo speed is unknown, defaulting to 1000
[  418.124754][T19409] lo speed is unknown, defaulting to 1000
[  418.127214][T19409] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  418.129305][T19409] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  418.129344][T19409] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  418.133560][T19407] __nla_validate_parse: 1 callbacks suppressed
[  418.133578][T19407] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3468'.
[  418.210732][T19409] lo speed is unknown, defaulting to 1000
[  418.215453][T19409] lo speed is unknown, defaulting to 1000
[  418.227160][T19409] lo speed is unknown, defaulting to 1000
[  418.234037][T19409] lo speed is unknown, defaulting to 1000
[  418.245095][T19409] lo speed is unknown, defaulting to 1000
[  418.256142][T19409] lo speed is unknown, defaulting to 1000
[  418.262998][T19409] lo speed is unknown, defaulting to 1000
[  418.268168][T19409] lo speed is unknown, defaulting to 1000
[  418.274117][T19409] lo speed is unknown, defaulting to 1000
[  418.391910][T19417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3471'.
[  418.724107][T19422] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.742505][T19422] 8021q: adding VLAN 0 to HW filter on device team0
[  418.777117][T19422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.880496][T19451] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3481'.
[  418.938086][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3482'.
[  418.956149][T19422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.967886][T19422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.985709][T19422] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  419.041053][T19448] wg1 speed is unknown, defaulting to 1000
[  419.087725][T19448] wg1 speed is unknown, defaulting to 1000
[  419.094946][T19448] wg1 speed is unknown, defaulting to 1000
[  419.402427][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'.
[  419.511066][T19448] infiniband syz0: set active
[  419.511136][T19448] infiniband syz0: added wg1
[  419.512382][T19004] wg1 speed is unknown, defaulting to 1000
[  419.540375][T19448] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  419.540411][T19448] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  419.540449][T19448] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  419.549442][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.549461][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.619811][T19448] RDS/IB: syz0: added
[  419.619864][T19448] smc: adding ib device syz0 with port count 1
[  419.619883][T19448] smc:    ib device syz0 port 1 has no pnetid
[  419.619962][T19004] wg1 speed is unknown, defaulting to 1000
[  419.621084][T19448] wg1 speed is unknown, defaulting to 1000
[  419.953249][T19448] wg1 speed is unknown, defaulting to 1000
[  420.068632][ T4951] Bluetooth: hci4: unexpected cc 0x2040 length: 2 > 1
[  420.168157][T19508] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  420.224126][T19448] wg1 speed is unknown, defaulting to 1000
[  420.363065][T19510] netlink: 'syz.2.3497': attribute type 1 has an invalid length.
[  420.533552][T19448] wg1 speed is unknown, defaulting to 1000
[  420.654581][T19510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3497'.
[  421.143321][T19535] netlink: 'syz.4.3502': attribute type 10 has an invalid length.
[  421.269121][T19540] netlink: 'syz.2.3503': attribute type 4 has an invalid length.
[  421.315518][T19448] wg1 speed is unknown, defaulting to 1000
[  421.811646][T19448] wg1 speed is unknown, defaulting to 1000
[  422.080585][T19574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3512'.
[  422.080868][T19575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3512'.
[  422.158877][T19448] wg1 speed is unknown, defaulting to 1000
[  422.511495][T19448] wg1 speed is unknown, defaulting to 1000
[  422.549869][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'.
[  422.753714][T19605] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3520'.
[  422.860339][T19448] wg1 speed is unknown, defaulting to 1000
[  423.117059][T19615] syzkaller0: entered promiscuous mode
[  423.117083][T19615] syzkaller0: entered allmulticast mode
[  423.534685][T19630] 8021q: adding VLAN 0 to HW filter on device bond3
[  423.537289][T19630] bond0: (slave bond3): Enslaving as an active interface with an up link
[  423.595767][T19630] 8021q: adding VLAN 0 to HW filter on device bond4
[  423.606636][T19630] bond0: (slave bond4): Enslaving as an active interface with an up link
[  423.655125][T19630] 8021q: adding VLAN 0 to HW filter on device bond5
[  423.657566][T19630] bond0: (slave bond5): Enslaving as an active interface with an up link
[  423.724857][T19630] 8021q: adding VLAN 0 to HW filter on device bond6
[  423.729151][T19630] bond0: (slave bond6): Enslaving as an active interface with an up link
[  423.790185][T19643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3528'.
[  423.791167][T19630] 8021q: adding VLAN 0 to HW filter on device bond7
[  423.793345][T19630] bond0: (slave bond7): Enslaving as an active interface with an up link
[  423.815407][T19630] 8021q: adding VLAN 0 to HW filter on device bond8
[  423.817583][T19630] bond0: (slave bond8): Enslaving as an active interface with an up link
[  423.892684][T19630] 8021q: adding VLAN 0 to HW filter on device bond9
[  423.896290][T19630] bond0: (slave bond9): Enslaving as an active interface with an up link
[  423.984311][T19630] 8021q: adding VLAN 0 to HW filter on device bond10
[  423.986715][T19630] bond0: (slave bond10): Enslaving as an active interface with an up link
[  424.152050][T19659] bond1 (unregistering): Released all slaves
[  424.188922][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  424.262898][T19630] 8021q: adding VLAN 0 to HW filter on device bond11
[  424.267526][T19630] bond0: (slave bond11): Enslaving as an active interface with an up link
[  424.330771][T19630] 8021q: adding VLAN 0 to HW filter on device bond12
[  424.333061][T19630] bond0: (slave bond12): Enslaving as an active interface with an up link
[  424.364799][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3532'.
[  424.447729][T19680] ip6t_rt: too many addresses specified
[  424.625927][T19690] netlink: 'syz.2.3536': attribute type 3 has an invalid length.
[  424.710110][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3540'.
[  424.731255][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3540'.
[  424.890295][T19701] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.890791][T19701] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.890921][T19701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.982649][T19718] openvswitch: netlink: Duplicate or invalid key (type 0).
[  424.982684][T19718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.010376][T19716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.038564][T19710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  425.041648][T19004] lo speed is unknown, defaulting to 1000
[  425.121008][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3547'.
[  425.137830][T19733] ip_tables: iptables: counters copy to user failed while replacing table
[  425.609527][T19744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3551'.
[  425.658015][T19750] netlink: 'syz.3.3553': attribute type 10 has an invalid length.
[  425.676509][T19750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.681258][T19750] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  425.732132][T19754] netdevsim netdevsim1 
: renamed from netdevsim0 (while UP)
[  426.061396][T19761] netlink: 'syz.1.3557': attribute type 2 has an invalid length.
[  426.061419][T19761] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3557'.
[  426.173249][T19768] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  426.193854][T19770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3560'.
[  426.536860][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3566'.
[  426.762896][T19805] netlink: 'syz.4.3570': attribute type 1 has an invalid length.
[  426.782696][T19804] syzkaller1: entered promiscuous mode
[  426.782720][T19804] syzkaller1: entered allmulticast mode
[  427.182872][T19831] veth1_macvtap: left promiscuous mode
[  427.182901][T19831] macsec0: entered allmulticast mode
[  427.301254][  T997] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  427.301538][T19846] veth1_macvtap: entered promiscuous mode
[  427.301550][T19846] veth1_macvtap: entered allmulticast mode
[  427.301735][T19846] macsec0: left allmulticast mode
[  427.301748][T19846] veth1_macvtap: left allmulticast mode
[  427.308049][T19847] sctp: [Deprecated]: syz.0.3582 (pid 19847) Use of int in maxseg socket option.
[  427.308049][T19847] Use struct sctp_assoc_value instead
[  429.316527][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'.
[  430.162370][T19831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  430.192880][T19859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3586'.
[  430.522240][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3599'.
[  430.522424][T19902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3599'.
[  430.564038][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'.
[  430.572698][T19906] netlink: 'syz.0.3600': attribute type 1 has an invalid length.
[  430.625014][T19906] 8021q: adding VLAN 0 to HW filter on device bond2
[  430.742578][T19906] bond2: (slave veth3): Enslaving as an active interface with a down link
[  430.787453][T19906] syzkaller0: entered promiscuous mode
[  430.787474][T19906] syzkaller0: entered allmulticast mode
[  430.825771][T19906] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode
[  430.839902][T19906] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  430.989975][T19920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.025297][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  431.034986][T19923] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000
[  431.055536][T19921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.055597][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  431.057482][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  431.061677][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  431.061917][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'.
[  431.134261][T19923] gretap0: entered promiscuous mode
[  431.152948][T19923] gretap0: left promiscuous mode
[  431.272825][T19934] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.588655][ T5647] Bluetooth: hci0: command 0x0c3a tx timeout
[  432.589226][ T4951] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  432.611309][T20022] netlink: 'syz.3.3629': attribute type 3 has an invalid length.
[  432.905331][T20043] 8021q: VLANs not supported on lo
[  433.077559][T20048] netlink: 'syz.1.3640': attribute type 1 has an invalid length.
[  433.134099][T20048] 8021q: adding VLAN 0 to HW filter on device bond1
[  433.235464][T20059] syzkaller0: entered promiscuous mode
[  433.235485][T20059] syzkaller0: entered allmulticast mode
[  433.235721][T20062] IPv6: addrconf: prefix option has invalid lifetime
[  433.235733][T20062] IPv6: addrconf: prefix option has invalid lifetime
[  433.662186][T20076] syzkaller1: entered promiscuous mode
[  433.662208][T20076] syzkaller1: entered allmulticast mode
[  433.697208][T20076] syzkaller1: left promiscuous mode
[  433.697230][T20076] syzkaller1: left allmulticast mode
[  434.086016][ T4951] Bluetooth: hci4: unexpected event 0x13 length: 321 > 255
[  434.407980][T20102] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  434.440577][T20101] __nla_validate_parse: 17 callbacks suppressed
[  434.440600][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3656'.
[  434.570824][T20112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3660'.
[  434.787392][T20130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3666'.
[  434.908221][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'.
[  434.933464][T20135] bond2: entered promiscuous mode
[  434.933528][T20135] bond2: entered allmulticast mode
[  434.934018][T20135] 8021q: adding VLAN 0 to HW filter on device bond2
[  434.935114][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'.
[  434.935130][T20134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3669'.
[  435.196888][T20149] ip_tables: iptables: counters copy to user failed while replacing table
[  435.506957][T20168] netlink: 'syz.1.3679': attribute type 21 has an invalid length.
[  435.506984][T20168] IPv6: NLM_F_CREATE should be specified when creating new route
[  435.531138][T20168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'.
[  435.640686][T20172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3681'.
[  435.641363][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3681'.
[  435.642066][T20173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3682'.
[  435.944889][T20204] netlink: 'syz.0.3686': attribute type 2 has an invalid length.
[  435.995613][T20204] netlink: 'syz.0.3686': attribute type 2 has an invalid length.
[  436.297155][T20218] netlink: 'syz.2.3689': attribute type 3 has an invalid length.
[  436.337008][T20223] sctp: [Deprecated]: syz.1.3691 (pid 20223) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.337008][T20223] Use struct sctp_sack_info instead
[  436.433950][T20216] udevd[20216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.461744][T20216] udevd[20216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  436.704540][T20245] 8021q: VLANs not supported on pim6reg
[  436.992761][ T4951] Bluetooth: hci5: command tx timeout
[  437.385871][T20287] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  437.550567][T20291] bridge3: the hash_elasticity option has been deprecated and is always 16
[  438.461992][  T997] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.469158][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.469650][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.469686][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.816426][T20352] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  439.013438][T20365] netlink: 'syz.2.3726': attribute type 49 has an invalid length.
[  439.273515][T20380] netlink: 'syz.0.3732': attribute type 1 has an invalid length.
[  439.294432][T20382] Bluetooth: hci0: unsupported parameter 5135
[  439.294455][T20382] Bluetooth: hci0: unsupported parameter 8192
[  439.294467][T20382] Bluetooth: hci0: unsupported parameter 5135
[  439.294478][T20382] Bluetooth: hci0: unsupported parameter 8192
[  439.359841][T20391] bond3: (slave erspan1): making interface the new active one
[  439.361282][T20391] bond3: (slave erspan1): Enslaving as an active interface with an up link
[  439.470211][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.493233][T20398] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available
[  439.623426][T20405] xt_l2tp: v2 sid > 0xffff: 4294967294
[  439.813861][T20413] lo: entered allmulticast mode
[  439.860705][T20412] lo: left allmulticast mode
[  439.891531][T20428] __nla_validate_parse: 13 callbacks suppressed
[  439.891550][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'.
[  440.191436][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  440.275335][T20446] netlink: 'syz.2.3749': attribute type 2 has an invalid length.
[  440.306016][T20446] !: entered promiscuous mode
[  440.475851][T20463] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3754'.
[  440.671769][T20476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3756'.
[  440.889658][T20489] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3761'.
[  440.889685][T20489] netlink: 316 bytes leftover after parsing attributes in process `syz.3.3761'.
[  441.117349][T20499] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3763'.
[  441.187240][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'.
[  441.263735][T20514] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3765'.
[  441.263759][T20514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3765'.
[  441.263776][T20514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3765'.
[  441.651569][T20539] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  441.690080][T20539] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  442.558523][T20585] 8021q: adding VLAN 0 to HW filter on device bond4
[  442.988758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.632600][T20654] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  443.807779][T20674] netlink: 'syz.2.3796': attribute type 4 has an invalid length.
[  444.381255][T20712] syzkaller0: entered promiscuous mode
[  444.381287][T20712] syzkaller0: entered allmulticast mode
[  444.475174][T20712] 0: reclassify loop, rule prio 0, protocol 03
[  445.868275][T20752] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  445.915561][T20752] x_tables: duplicate underflow at hook 1
[  446.132657][T20774] TC_ACT_REPEAT abuse ?
[  446.171163][T20762] syzkaller0: entered promiscuous mode
[  446.171188][T20762] syzkaller0: entered allmulticast mode
[  446.174008][T20770] __nla_validate_parse: 74 callbacks suppressed
[  446.174027][T20770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3819'.
[  446.225144][T20781] syzkaller0: entered promiscuous mode
[  446.225166][T20781] syzkaller0: entered allmulticast mode
[  450.446029][T20807] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  450.750792][T20911] blkio.reset_stats is deprecated
[  451.078400][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'.
[  451.104849][T20931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'.
[  451.119094][T20931] netlink: 'syz.4.3839': attribute type 1 has an invalid length.
[  451.119118][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'.
[  451.119130][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'.
[  451.122385][T20931] xt_l2tp: v2 doesn't support IP mode
[  451.130068][T20934] netlink: 'syz.2.3840': attribute type 7 has an invalid length.
[  451.171945][T20931] pim6reg: entered allmulticast mode
[  451.239754][T20937] netlink: 'syz.2.3840': attribute type 7 has an invalid length.
[  451.450479][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'.
[  451.756820][T20974] netlink: 'syz.1.3851': attribute type 4 has an invalid length.
[  451.909379][T20980] netlink: 'syz.3.3853': attribute type 83 has an invalid length.
[  452.015461][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'.
[  452.381419][T21007] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3860'.
[  452.861076][ T5647] Bluetooth: hci2: Malformed Event: 0x2f
[  452.896510][ T5647] Bluetooth: hci2: Malformed Event: 0x2f
[  452.974530][T21059] netlink: 'syz.2.3876': attribute type 7 has an invalid length.
[  452.974552][T21059] netlink: 'syz.2.3876': attribute type 5 has an invalid length.
[  452.974564][T21059] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3876'.
[  453.011852][T21061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3875'.
[  453.032626][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'.
[  453.032656][T21061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3875'.
[  453.043235][T21061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3875'.
[  453.207466][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'.
[  453.207502][T21067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3878'.
[  453.261739][T21067] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  453.285266][T21067] bond3 (unregistering): Released all slaves
[  453.457691][T21084] gretap1: entered promiscuous mode
[  453.457715][T21084] gretap1: entered allmulticast mode
[  453.676885][T21105] ip_tables: iptables: counters copy to user failed while replacing table
[  453.810260][T21116] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  454.086055][T21138] netlink: 'syz.4.3900': attribute type 61 has an invalid length.
[  454.216673][T21144] sctp: [Deprecated]: syz.3.3902 (pid 21144) Use of int in maxseg socket option.
[  454.216673][T21144] Use struct sctp_assoc_value instead
[  454.248092][T21147] geneve2: entered promiscuous mode
[  454.261788][T21147] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  454.269351][   T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 46531 - 0
[  454.270163][   T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 46531 - 0
[  454.270238][   T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 46531 - 0
[  454.424599][T21151] tipc: Started in network mode
[  454.424629][T21151] tipc: Node identity e0000001, cluster identity 4711
[  454.424695][T21151] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  454.433032][T21151] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check.
[  454.435811][T21153] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check.
[  454.666328][ T5296] veth1_vlan: left promiscuous mode
[  454.784465][T21174] netlink: 'syz.4.3907': attribute type 1 has an invalid length.
[  454.979873][T21174] 8021q: adding VLAN 0 to HW filter on device bond3
[  455.131353][T21180] bond3: (slave veth15): Enslaving as an active interface with a down link
[  455.589147][T21231] syzkaller0: entered promiscuous mode
[  455.589170][T21231] syzkaller0: entered allmulticast mode
[  455.857581][T21241] ip_tables: iptables: counters copy to user failed while replacing table
[  456.115751][T21257] openvswitch: netlink: Missing key (keys=40, expected=100)
[  456.454698][T21281] sctp: [Deprecated]: syz.3.3931 (pid 21281) Use of struct sctp_assoc_value in delayed_ack socket option.
[  456.454698][T21281] Use struct sctp_sack_info instead
[  456.679687][T21295] __nla_validate_parse: 18 callbacks suppressed
[  456.679709][T21295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3935'.
[  457.386681][T21324] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3941'.
[  457.450652][T21326] syzkaller1: entered promiscuous mode
[  457.450674][T21326] syzkaller1: entered allmulticast mode
[  457.899412][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3946'.
[  457.899435][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3946'.
[  458.065558][T21352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3950'.
[  458.107982][T21354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3950'.
[  458.234534][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3954'.
[  458.329930][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'.
[  458.372907][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3955'.
[  458.397247][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3955'.
[  458.616197][T21390] netlink: 'syz.2.3961': attribute type 11 has an invalid length.
[  458.725937][T21395] netlink: 'syz.0.3964': attribute type 1 has an invalid length.
[  458.725960][T21395] netlink: 'syz.0.3964': attribute type 2 has an invalid length.
[  458.853493][T21403] bridge_slave_1: left allmulticast mode
[  458.853517][T21403] bridge_slave_1: left promiscuous mode
[  458.853733][T21403] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.891679][T21403] bond0: (slave bond_slave_0): Releasing backup interface
[  458.911941][T21403] bond0: (slave bond_slave_1): Releasing backup interface
[  458.985666][T21403] team0: Port device team_slave_0 removed
[  459.024577][T21403] team0: Port device team_slave_1 removed
[  459.049356][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.049380][T21403] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.085888][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.085910][T21403] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.105803][T21403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  459.136225][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.136574][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.136936][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.137283][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.144948][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.145301][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.145678][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.146019][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.150614][T21429] netlink: Unknown conntrack attr (type=28, max=9)
[  459.756778][T21470] netlink: 'syz.4.3983': attribute type 4 has an invalid length.
[  459.776790][T21470] netlink: 'syz.4.3983': attribute type 4 has an invalid length.
[  459.865123][T21473] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  459.867844][T21473] bond4 (unregistering): Released all slaves
[  460.353538][  T150] IPVS: starting estimator thread 0...
[  460.438611][T21518] IPVS: using max 39 ests per chain, 93600 per kthread
[  460.713530][T21533] bond3: option packets_per_slave: invalid value (18446744073709551615)
[  460.713557][T21533] bond3: option packets_per_slave: allowed values 0 - 65535
[  460.717767][T21533] bond3 (unregistering): Released all slaves
[  460.879108][T21540] netlink: 'syz.4.4001': attribute type 1 has an invalid length.
[  460.955643][T21540] bond4 (unregistering): Released all slaves
[  461.086292][T21554] veth0_to_hsr: entered allmulticast mode
[  461.312947][T21565] netlink: 'syz.4.4009': attribute type 1 has an invalid length.
[  461.372636][T21545] veth0_to_hsr: left allmulticast mode
[  462.104069][T21607] ip6t_srh: unknown srh invflags 4000
[  462.182811][T21612] netlink: 'syz.0.4023': attribute type 25 has an invalid length.
[  462.305677][T21620] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  462.307086][T21620] __nla_validate_parse: 9 callbacks suppressed
[  462.307111][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4027'.
[  462.364062][T21623] netlink: 'syz.3.4028': attribute type 30 has an invalid length.
[  462.406974][T21623] bond13: option arp_missed_max: invalid value (0)
[  462.406998][T21623] bond13: option arp_missed_max: allowed values 1 - 255
[  462.417015][T21623] bond13 (unregistering): Released all slaves
[  462.454116][T21627] netlink: 'syz.3.4028': attribute type 11 has an invalid length.
[  462.454137][T21627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4028'.
[  462.517082][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4029'.
[  462.517400][T21637] netlink: 'syz.3.4028': attribute type 30 has an invalid length.
[  462.547896][T21639] netlink: 'syz.3.4028': attribute type 11 has an invalid length.
[  462.547917][T21639] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4028'.
[  462.604685][T21637] bond13: option arp_missed_max: invalid value (0)
[  462.604702][T21637] bond13: option arp_missed_max: allowed values 1 - 255
[  462.607643][T21637] bond13 (unregistering): Released all slaves
[  462.655788][T21646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4031'.
[  462.750120][ T5647] Bluetooth: hci5: command 0x0406 tx timeout
[  462.978159][T21665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4036'.
[  463.056030][T21669] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4037'.
[  463.077379][T21659] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4036'.
[  463.138421][T21681] set match dimension is over the limit!
[  463.271811][T21688] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20004
[  463.393298][T21701] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4045'.
[  463.462172][T21701] vlan2: entered allmulticast mode
[  463.462197][T21701] gretap0: entered allmulticast mode
[  463.564802][T21711] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4048'.
[  463.735711][T21719] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  464.058443][   T13] nci: nci_rsp_packet: unknown rsp opcode 0xe04
[  464.628493][T21762] sctp: [Deprecated]: syz.3.4067 (pid 21762) Use of struct sctp_assoc_value in delayed_ack socket option.
[  464.628493][T21762] Use struct sctp_sack_info instead
[  466.816186][T21726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  467.210824][T21792] validate_nla: 4 callbacks suppressed
[  467.210847][T21792] netlink: 'syz.3.4076': attribute type 1 has an invalid length.
[  467.292745][T21792] 8021q: adding VLAN 0 to HW filter on device bond13
[  467.330029][T21799] __nla_validate_parse: 5 callbacks suppressed
[  467.330049][T21799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4078'.
[  467.330103][T21799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4078'.
[  467.537092][T21808] netlink: 'syz.3.4081': attribute type 1 has an invalid length.
[  467.589691][T21815] netlink: 'syz.0.4084': attribute type 3 has an invalid length.
[  467.621221][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'.
[  467.868684][ T4951] Bluetooth: hci3: command 0x0406 tx timeout
[  468.023935][T21836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4089'.
[  468.180421][T21841] xt_nfacct: accounting object `syz0' does not exist
[  468.207036][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'.
[  468.207064][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'.
[  468.209867][T21841] net_ratelimit: 62 callbacks suppressed
[  468.209886][T21841] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  468.579698][ T5633] Bluetooth: hci2: Malformed Event: 0x2f
[  468.583290][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'.
[  468.625481][T21872] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 1, id = 0
[  468.952873][T21864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4095'.
[  469.244538][T21902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4101'.
[  469.353992][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4101'.
[  469.779401][T21931] netlink: 'syz.0.4106': attribute type 1 has an invalid length.
[  469.864166][T21939] netlink: 'syz.4.4110': attribute type 1 has an invalid length.
[  469.901303][T21931] 8021q: adding VLAN 0 to HW filter on device bond5
[  469.985304][T21932] bond5: (slave geneve3): making interface the new active one
[  469.998304][T21932] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  470.166927][T21952] veth0: entered promiscuous mode
[  470.167073][T21952] veth0: left promiscuous mode
[  471.449269][T22036] ip_tables: iptables: counters copy to user failed while replacing table
[  471.653090][T22051] netlink: 'syz.0.4134': attribute type 15 has an invalid length.
[  471.675693][T22051] netlink: 'syz.0.4134': attribute type 15 has an invalid length.
[  471.677651][T22042] syzkaller0: entered promiscuous mode
[  471.677670][T22042] syzkaller0: entered allmulticast mode
[  471.688690][   T13] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  471.688731][   T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  471.688762][   T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  471.698675][   T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  471.915337][T22066] netlink: 'syz.2.4139': attribute type 11 has an invalid length.
[  471.970827][T22071] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[  471.977081][T22071] bond0: (slave bond_slave_1): Releasing backup interface
[  472.398118][T22097] erspan0: mtu less than device minimum
[  472.580050][T22105] __nla_validate_parse: 10 callbacks suppressed
[  472.580072][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'.
[  472.696904][T22113] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  472.829143][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  473.106964][T22147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.277779][T22158] netlink: 'syz.1.4163': attribute type 1 has an invalid length.
[  473.303270][T22163] netlink: 'syz.1.4163': attribute type 1 has an invalid length.
[  473.617571][T22176] netlink: 'syz.0.4167': attribute type 1 has an invalid length.
[  473.617596][T22176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4167'.
[  473.764266][T22180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4169'.
[  473.764292][T22180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4169'.
[  473.981692][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4174'.
[  473.983383][T22191] veth0_to_bond: entered allmulticast mode
[  474.004534][T22189] netlink: 'syz.3.4172': attribute type 1 has an invalid length.
[  474.277540][T22204] Bluetooth: hci0: invalid len left 17, exp >= 23
[  474.324801][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4180'.
[  474.423211][T22209] netlink: 'syz.3.4182': attribute type 1 has an invalid length.
[  474.537272][T22217] netlink: 3584 bytes leftover after parsing attributes in process `syz.2.4184'.
[  474.538375][T22218] netlink: 3604 bytes leftover after parsing attributes in process `syz.2.4184'.
[  474.540933][T22217] netlink: 3604 bytes leftover after parsing attributes in process `syz.2.4184'.
[  475.051134][T22242] 8021q: adding VLAN 0 to HW filter on device bond3
[  475.051776][T22242] bridge0: port 3(bond3) entered blocking state
[  475.051872][T22242] bridge0: port 3(bond3) entered disabled state
[  475.051979][T22242] bond3: entered allmulticast mode
[  475.061509][T22242] bond3: entered promiscuous mode
[  475.062616][T22242] bridge0: port 3(bond3) entered blocking state
[  475.062724][T22242] bridge0: port 3(bond3) entered forwarding state
[  475.196505][T22247] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4192'.
[  475.366361][T22236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.366398][T22236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.439046][T10964] bridge0: port 3(bond3) entered disabled state
[  475.475081][T22265] bridge_slave_0: left allmulticast mode
[  475.475108][T22265] bridge_slave_0: left promiscuous mode
[  475.477362][T22265] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.507389][T22265] bridge_slave_1: left allmulticast mode
[  475.507416][T22265] bridge_slave_1: left promiscuous mode
[  475.507621][T22265] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.536960][T22265] bond0: (slave bond_slave_0): Releasing backup interface
[  475.561800][T22265] team0: Port device team_slave_0 removed
[  475.567439][T22265] team0: Port device team_slave_1 removed
[  475.568324][T22265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.568346][T22265] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.571485][T22265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.571507][T22265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.578245][T22265] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  475.773186][T22236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.773220][T22236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.923727][T22236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.923768][T22236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.010061][T22236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.010096][T22236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.109218][  T150] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  476.109258][  T150] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.164148][  T997] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  476.164180][  T997] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.171226][  T997] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  476.171256][  T997] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.219880][  T997] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  476.219909][  T997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.354687][  T997] IPVS: starting estimator thread 0...
[  476.409619][T22313] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  476.439515][T22311] IPVS: using max 29 ests per chain, 69600 per kthread
[  476.642303][T22342] netlink: 'syz.1.4212': attribute type 12 has an invalid length.
[  476.665339][T22342] bond4: option primary_reselect: invalid value (255)
[  476.666627][T22342] bond4 (unregistering): Released all slaves
[  476.844424][T22349] netlink: 'syz.1.4214': attribute type 1 has an invalid length.
[  476.886672][T22349] 8021q: adding VLAN 0 to HW filter on device bond4
[  477.146357][T22372] netlink: 'syz.3.4221': attribute type 5 has an invalid length.
[  477.297971][T22381] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  477.615797][T22395] __nla_validate_parse: 8 callbacks suppressed
[  477.615817][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'.
[  477.994646][T22422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4240'.
[  478.036575][T22422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4240'.
[  478.180422][T22432] ip6t_srh: unknown srh match flags  5F28
[  478.197573][T22433] ip6t_srh: unknown srh match flags  5F28
[  478.213887][T22430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4242'.
[  478.313280][T22441] xt_l2tp: invalid flags combination: 0
[  478.453721][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'.
[  478.530224][T22460] netlink: 'syz.1.4253': attribute type 1 has an invalid length.
[  478.715080][T22460] 8021q: adding VLAN 0 to HW filter on device bond5
[  478.833443][T22482] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  479.238273][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4259'.
[  479.245747][T22503] netlink: 'syz.2.4259': attribute type 26 has an invalid length.
[  479.351656][T22508] netlink: set zone limit has 4 unknown bytes
[  479.653300][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4266'.
[  479.783570][T22529] netlink: 'syz.3.4268': attribute type 4 has an invalid length.
[  479.895462][T22538] Unsupported ieee802154 address type: 0
[  479.966462][T22538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4270'.
[  480.160777][T22545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4275'.
[  480.186193][T22544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4275'.
[  480.257404][T22557] ip_tables: iptables: counters copy to user failed while replacing table
[  480.257605][T22553] netlink: 'syz.0.4276': attribute type 2 has an invalid length.
[  480.368040][T22554] ip_tables: iptables: counters copy to user failed while replacing table
[  480.583409][T22571] netlink: 'syz.0.4282': attribute type 1 has an invalid length.
[  480.633587][T22571] 8021q: adding VLAN 0 to HW filter on device bond6
[  480.668111][T22571] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  480.918236][T22590] bond7: option min_links: invalid value (18446744073709551614)
[  480.918261][T22590] bond7: option min_links: allowed values 0 - 2147483647
[  480.940718][T22590] bond7 (unregistering): Released all slaves
[  480.960934][T22600] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  480.963287][T22600] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  481.027508][T22605] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  481.157920][T22611] gretap0: entered promiscuous mode
[  481.257324][T22615] netlink: 'syz.1.4295': attribute type 1 has an invalid length.
[  481.270943][  T150] dvmrp0: left allmulticast mode
[  481.317668][T22622] netlink: 'syz.1.4295': attribute type 7 has an invalid length.
[  481.317695][T22622] netlink: 'syz.1.4295': attribute type 5 has an invalid length.
[  481.971026][  T150] 0猉功D龌 (unregistering): left promiscuous mode
[  481.974435][  T150] bond16 (unregistering): (slave macvlan2): Releasing backup interface
[  482.035116][  T150] bond7 (unregistering): (slave gretap1): Releasing backup interface
[  482.066770][  T150] bond6 (unregistering): (slave geneve2): Releasing active interface
[  482.152082][  T150] bond0 (unregistering): Released all slaves
[  482.162775][  T150] bond1 (unregistering): Released all slaves
[  482.174316][  T150] bond2 (unregistering): Released all slaves
[  482.184588][  T150] bond3 (unregistering): Released all slaves
[  482.196938][  T150] bond4 (unregistering): Released all slaves
[  482.222809][  T150] bond5 (unregistering): Released all slaves
[  482.242973][  T150] bond6 (unregistering): Released all slaves
[  482.254893][  T150] bond7 (unregistering): Released all slaves
[  482.265520][  T150] bond8 (unregistering): Released all slaves
[  482.276329][  T150] bond9 (unregistering): Released all slaves
[  482.295370][  T150] bond10 (unregistering): Released all slaves
[  482.315906][  T150] bond11 (unregistering): Released all slaves
[  482.326724][  T150] bond12 (unregistering): Released all slaves
[  482.337760][  T150] bond13 (unregistering): Released all slaves
[  482.353545][  T150] bond14 (unregistering): Released all slaves
[  482.368858][  T150] bond15 (unregistering): Released all slaves
[  482.377226][  T150] bond16 (unregistering): Released all slaves
[  482.405785][  T150] bond17 (unregistering): Released all slaves
[  482.418289][T22615] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  482.424497][T22616] 0{X功: renamed from gretap0
[  482.426386][T22616] 0{X功: left promiscuous mode
[  482.426406][T22616] 0{X功: entered allmulticast mode
[  482.428378][T22616] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  482.632686][T22665] netlink: 'syz.0.4303': attribute type 12 has an invalid length.
[  482.794296][T22670] nbd5: detected capacity change from 0 to 274877906944
[  482.814729][ T1992] 
[  482.817102][ T1992] ======================================================
[  482.824155][ T1992] WARNING: possible circular locking dependency detected
[  482.831183][ T1992] syzkaller #0 Not tainted
[  482.835645][ T1992] ------------------------------------------------------
[  482.842675][ T1992] kworker/0:1H/1992 is trying to acquire lock:
[  482.848875][ T1992] ffff888072695468 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0
[  482.857882][ T1992] 
[  482.857882][ T1992] but task is already holding lock:
[  482.865256][ T1992] ffff888027fa7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  482.873706][ T1992] 
[  482.873706][ T1992] which lock already depends on the new lock.
[  482.873706][ T1992] 
[  482.884101][ T1992] 
[  482.884101][ T1992] the existing dependency chain (in reverse order) is:
[  482.893103][ T1992] 
[  482.893103][ T1992] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  482.900316][ T1992]        __mutex_lock+0x197/0x15a0
[  482.905466][ T1992]        nbd_queue_rq+0xc1/0xff0
[  482.910436][ T1992]        blk_mq_dispatch_rq_list+0x499/0x1990
[  482.916518][ T1992]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  482.923377][ T1992]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  482.929880][ T1992]        blk_mq_run_work_fn+0x167/0x2f0
[  482.935435][ T1992]        process_scheduled_works+0xc3d/0x1630
[  482.941517][ T1992]        worker_thread+0xa47/0xfb0
[  482.946635][ T1992]        kthread+0x38b/0x480
[  482.951215][ T1992]        ret_from_fork+0x514/0xb70
[  482.956320][ T1992]        ret_from_fork_asm+0x1a/0x30
[  482.961597][ T1992] 
[  482.961597][ T1992] -> #5 (set->srcu){.+.+}-{0:0}:
[  482.968721][ T1992]        __synchronize_srcu+0xca/0x2f0
[  482.974176][ T1992]        elevator_switch+0x1e8/0x7b0
[  482.979455][ T1992]        elevator_change+0x2fa/0x480
[  482.984742][ T1992]        elevator_set_default+0x375/0x440
[  482.990458][ T1992]        blk_register_queue+0x404/0x4f0
[  482.995992][ T1992]        __add_disk+0x6b8/0xdb0
[  483.000839][ T1992]        add_disk_fwnode+0x100/0x3a0
[  483.006117][ T1992]        nbd_dev_add+0x733/0xb60
[  483.011043][ T1992]        nbd_init+0x168/0x1f0
[  483.015724][ T1992]        do_one_initcall+0x250/0x870
[  483.021012][ T1992]        do_initcall_level+0x10a/0x1a0
[  483.026473][ T1992]        do_initcalls+0x59/0xa0
[  483.031318][ T1992]        kernel_init_freeable+0x29d/0x3e0
[  483.037033][ T1992]        kernel_init+0x22/0x1d0
[  483.041872][ T1992]        ret_from_fork+0x514/0xb70
[  483.046971][ T1992]        ret_from_fork_asm+0x1a/0x30
[  483.052243][ T1992] 
[  483.052243][ T1992] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  483.060049][ T1992]        __mutex_lock+0x197/0x15a0
[  483.065155][ T1992]        elevator_change+0x1af/0x480
[  483.070437][ T1992]        elevator_set_none+0xb5/0x140
[  483.075809][ T1992]        blk_mq_update_nr_hw_queues+0x60b/0x1b70
[  483.082126][ T1992]        nbd_start_device+0x189/0xb30
[  483.087491][ T1992]        nbd_genl_connect+0x167d/0x1cd0
[  483.093021][ T1992]        genl_family_rcv_msg_doit+0x233/0x340
[  483.099078][ T1992]        genl_rcv_msg+0x614/0x7a0
[  483.104094][ T1992]        netlink_rcv_skb+0x226/0x4a0
[  483.109373][ T1992]        genl_rcv+0x28/0x40
[  483.113863][ T1992]        netlink_unicast+0x8ef/0xa80
[  483.119140][ T1992]        netlink_sendmsg+0x7f0/0xb20
[  483.124418][ T1992]        sock_sendmsg_nosec+0x14e/0x190
[  483.129956][ T1992]        ____sys_sendmsg+0x54e/0x850
[  483.135232][ T1992]        ___sys_sendmsg+0x2a5/0x360
[  483.140419][ T1992]        __x64_sys_sendmsg+0x1b1/0x290
[  483.145867][ T1992]        do_syscall_64+0x166/0x520
[  483.150970][ T1992]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.157372][ T1992] 
[  483.157372][ T1992] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  483.165970][ T1992]        blk_alloc_queue+0x544/0x690
[  483.171256][ T1992]        __blk_mq_alloc_disk+0x194/0x390
[  483.176881][ T1992]        nbd_dev_add+0x494/0xb60
[  483.181807][ T1992]        nbd_init+0x168/0x1f0
[  483.186479][ T1992]        do_one_initcall+0x250/0x870
[  483.191746][ T1992]        do_initcall_level+0x10a/0x1a0
[  483.197192][ T1992]        do_initcalls+0x59/0xa0
[  483.202028][ T1992]        kernel_init_freeable+0x29d/0x3e0
[  483.207734][ T1992]        kernel_init+0x22/0x1d0
[  483.212570][ T1992]        ret_from_fork+0x514/0xb70
[  483.217669][ T1992]        ret_from_fork_asm+0x1a/0x30
[  483.222947][ T1992] 
[  483.222947][ T1992] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  483.230152][ T1992]        fs_reclaim_acquire+0x71/0x100
[  483.235608][ T1992]        __kmalloc_cache_noprof+0x61/0x600
[  483.241415][ T1992]        ref_tracker_alloc+0x221/0x530
[  483.246867][ T1992]        netdev_get_by_index+0x79/0xb0
[  483.252320][ T1992]        ipv6_sock_ac_join+0x201/0x820
[  483.257767][ T1992]        do_ipv6_setsockopt+0x1f56/0x2960
[  483.263475][ T1992]        ipv6_setsockopt+0x59/0x170
[  483.268665][ T1992]        do_sock_setsockopt+0x17c/0x1b0
[  483.274202][ T1992]        __x64_sys_setsockopt+0x13d/0x1b0
[  483.279911][ T1992]        do_syscall_64+0x166/0x520
[  483.285015][ T1992]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.291420][ T1992] 
[  483.291420][ T1992] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  483.299488][ T1992]        lock_sock_nested+0x41/0x100
[  483.304783][ T1992]        inet_shutdown+0x6a/0x390
[  483.309815][ T1992]        nbd_mark_nsock_dead+0x2cb/0x550
[  483.315450][ T1992]        recv_work+0x1d14/0x1e30
[  483.320381][ T1992]        process_scheduled_works+0xc3d/0x1630
[  483.326454][ T1992]        worker_thread+0xa47/0xfb0
[  483.331563][ T1992]        kthread+0x38b/0x480
[  483.336139][ T1992]        ret_from_fork+0x514/0xb70
[  483.341239][ T1992]        ret_from_fork_asm+0x1a/0x30
[  483.346511][ T1992] 
[  483.346511][ T1992] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  483.354146][ T1992]        __lock_acquire+0x164c/0x2de0
[  483.359516][ T1992]        lock_acquire+0x115/0x350
[  483.364527][ T1992]        __mutex_lock+0x197/0x15a0
[  483.369633][ T1992]        nbd_queue_rq+0x373/0xff0
[  483.374649][ T1992]        blk_mq_dispatch_rq_list+0x499/0x1990
[  483.380711][ T1992]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  483.387545][ T1992]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  483.394039][ T1992]        blk_mq_run_work_fn+0x167/0x2f0
[  483.399600][ T1992]        process_scheduled_works+0xc3d/0x1630
[  483.405664][ T1992]        worker_thread+0xa47/0xfb0
[  483.410769][ T1992]        kthread+0x38b/0x480
[  483.415346][ T1992]        ret_from_fork+0x514/0xb70
[  483.420444][ T1992]        ret_from_fork_asm+0x1a/0x30
[  483.425718][ T1992] 
[  483.425718][ T1992] other info that might help us debug this:
[  483.425718][ T1992] 
[  483.435928][ T1992] Chain exists of:
[  483.435928][ T1992]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  483.435928][ T1992] 
[  483.447994][ T1992]  Possible unsafe locking scenario:
[  483.447994][ T1992] 
[  483.455434][ T1992]        CPU0                    CPU1
[  483.460792][ T1992]        ----                    ----
[  483.466143][ T1992]   lock(&cmd->lock);
[  483.470117][ T1992]                                lock(set->srcu);
[  483.476532][ T1992]                                lock(&cmd->lock);
[  483.483032][ T1992]   lock(&nsock->tx_lock);
[  483.487438][ T1992] 
[  483.487438][ T1992]  *** DEADLOCK ***
[  483.487438][ T1992] 
[  483.495569][ T1992] locks held by kworker/0:1H/1992: 4, last CPU#0:
[  483.501975][ T1992]  #0: ffff888021adf948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  483.513039][ T1992]  #1: ffffc9000627fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  483.525923][ T1992]  #2: ffff888027d51b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0
[  483.535322][ T1992]  #3: ffff888027fa7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  483.544185][ T1992] 
[  483.544185][ T1992] stack backtrace:
[  483.550062][ T1992] CPU: 0 UID: 0 PID: 1992 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) 
[  483.559513][ T1992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  483.569556][ T1992] Workqueue: kblockd blk_mq_run_work_fn
[  483.575099][ T1992] Call Trace:
[  483.578363][ T1992]  <TASK>
[  483.581281][ T1992]  dump_stack_lvl+0xe8/0x150
[  483.585870][ T1992]  print_circular_bug+0x2e2/0x300
[  483.590891][ T1992]  check_noncircular+0x12f/0x150
[  483.595825][ T1992]  __lock_acquire+0x164c/0x2de0
[  483.600670][ T1992]  ? irqentry_exit+0x2a0/0x9b0
[  483.605425][ T1992]  ? __pfx___schedule+0x10/0x10
[  483.610264][ T1992]  ? irqentry_exit+0x2a0/0x9b0
[  483.615026][ T1992]  lock_acquire+0x115/0x350
[  483.619520][ T1992]  ? nbd_queue_rq+0x373/0xff0
[  483.624190][ T1992]  __mutex_lock+0x197/0x15a0
[  483.628773][ T1992]  ? nbd_queue_rq+0x373/0xff0
[  483.633436][ T1992]  ? ret_from_fork_asm+0x1a/0x30
[  483.638363][ T1992]  ? unwind_next_frame+0x8f/0x2550
[  483.643471][ T1992]  ? nbd_queue_rq+0x373/0xff0
[  483.648138][ T1992]  ? __pfx___mutex_lock+0x10/0x10
[  483.653160][ T1992]  ? ret_from_fork_asm+0x1a/0x30
[  483.658099][ T1992]  ? stack_trace_save+0xa9/0x100
[  483.663037][ T1992]  ? __pfx_stack_trace_save+0x10/0x10
[  483.668412][ T1992]  nbd_queue_rq+0x373/0xff0
[  483.672916][ T1992]  ? __lock_acquire+0x1511/0x2de0
[  483.677938][ T1992]  ? __pfx_nbd_queue_rq+0x10/0x10
[  483.682960][ T1992]  blk_mq_dispatch_rq_list+0x499/0x1990
[  483.688510][ T1992]  ? sbitmap_get+0x229/0x390
[  483.693093][ T1992]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  483.699065][ T1992]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  483.704867][ T1992]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  483.711189][ T1992]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  483.717943][ T1992]  ? lock_acquire+0x115/0x350
[  483.722613][ T1992]  ? process_scheduled_works+0x97a/0x1630
[  483.728332][ T1992]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  483.734309][ T1992]  ? blk_mq_run_work_fn+0x13f/0x2f0
[  483.739497][ T1992]  blk_mq_run_work_fn+0x167/0x2f0
[  483.744517][ T1992]  ? process_scheduled_works+0x97a/0x1630
[  483.750233][ T1992]  process_scheduled_works+0xc3d/0x1630
[  483.755782][ T1992]  ? __pfx_process_scheduled_works+0x10/0x10
[  483.761758][ T1992]  ? assign_work+0x3cf/0x5d0
[  483.766341][ T1992]  worker_thread+0xa47/0xfb0
[  483.770926][ T1992]  ? __kthread_parkme+0x71/0x1f0
[  483.775853][ T1992]  kthread+0x38b/0x480
[  483.779910][ T1992]  ? __pfx_worker_thread+0x10/0x10
[  483.785019][ T1992]  ? __pfx_kthread+0x10/0x10
[  483.789599][ T1992]  ret_from_fork+0x514/0xb70
[  483.794182][ T1992]  ? __pfx_ret_from_fork+0x10/0x10
[  483.799284][ T1992]  ? __switch_to+0xc78/0x1410
[  483.803955][ T1992]  ? __pfx_kthread+0x10/0x10
[  483.808536][ T1992]  ret_from_fork_asm+0x1a/0x30
[  483.813293][ T1992]  </TASK>
[  483.816432][ T5633] block nbd5: Receive control failed (result -32)
[  483.829366][  T150] !;: left promiscuous mode
[  483.839919][ T1992] block nbd5: Dead connection, failed to find a fallback
[  483.839940][ T1992] block nbd5: shutting down sockets
[  483.839954][ T1992] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.839979][ T1992] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.895364][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.895395][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.906819][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.906853][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.924086][  T150] tipc: Disabling bearer <udp:syz2>
[  483.924162][  T150] tipc: Left network mode
[  483.969075][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969108][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969216][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969238][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969321][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969343][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969422][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969441][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969507][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969529][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969565][T22645] ldm_validate_partition_table(): Disk read failed.
[  483.969621][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969642][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969705][ T2018] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  483.969726][ T2018] Buffer I/O error on dev nbd5, logical block 0, async page read
[  483.969855][T22645] Dev nbd5: unable to read RDB block 0
[  483.970219][T22645]  nbd5: unable to read partition table
[  483.999215][T22645] ldm_validate_partition_table(): Disk read failed.
[  483.999474][T22645] Dev nbd5: unable to read RDB block 0
[  483.999792][T22645]  nbd5: unable to read partition table
[  484.159434][T22688] openvswitch: netlink: IP tunnel TTL not specified.
[  484.160275][T22688] __nla_validate_parse: 5 callbacks suppressed
[  484.160291][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.162666][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.162798][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.162930][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.163063][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.163206][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.163333][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.164448][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.164643][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.164773][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4308'.
[  484.604736][  T150] hsr_slave_0: left promiscuous mode
[  484.605173][  T150] hsr_slave_1: left promiscuous mode
[  484.606891][  T150] veth1_vlan: left promiscuous mode
[  484.606916][  T150] veth0_vlan: left promiscuous mode
[  485.157022][  T150] IPVS: stop unused estimator thread 0...
[  488.348753][ T5633] Bluetooth: hci4: command 0x0406 tx timeout