last executing test programs:

4.215351637s ago: executing program 0 (id=3513):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$inet6(0xa, 0x3, 0x3)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005020000ff00000007"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50)

3.952840334s ago: executing program 2 (id=3515):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c00018008000100000001001400000011000100000000000000000a000a00"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000130a37ea5d1b5a9ead6b2e2c2eac7762881803000000000000000000050000000900020073797a310000000008000340"], 0x34}}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x63, 0x4)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0xfffffffd)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async)
recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$sock(r3, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe)

3.761480717s ago: executing program 1 (id=3518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r1, 0x7}, 0x14) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4804)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0)
getsockname$packet(r2, &(0x7f0000000040), &(0x7f0000000100)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000a4518895c3b2269e0000000003e4", @ANYRES32=r3, @ANYBLOB="000000000000020020001280080001007369740014000280080014000f00000008000100", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0)

3.519944363s ago: executing program 2 (id=3520):
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "a6b67e3ec7b6ac4f", "200133e47f6d51c5ff9bf5a951531e4e", "d82a06c7", "8ec7df75d027b61d"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b20053d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000004030000feffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0700000001000000", @ANYRES32, @ANYBLOB="7b1878f18d43594394d6024d03000000c84a2c6289273f1ed3ac", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r0 = socket$netlink(0x10, 0x3, 0x9) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "40e096d87b9227966557f03009b51190d182766f7313e84cb990e2f610570e5c3bd8cdc70b4fd5b25479b0869c964ea7c196e06cd728c033f0ece262ac06f5e35ac901f7ec11357f0c451ce9bbbf72361edcdc733d6b58ff5487fd08f81986db334013bbf192e800f0595b4c980a0181dc234e9c02674ca267784917a9e0", ["", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) (rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f00000003c0)="4db04112a5e334199ed7170a983c6965a7d9bf03ad980db5cf5f72754ff60caa0862805ff8fb44b71dbbae079480ef0e000d58e4ba1874a010a3dafc36bc2e5983a69fbce5cc374333507f3cd5763982b99031ba23f543729747e83961380b5db0b5d149010689ad15a5180f336a63a53fddec8f26ec4b6efef2de369ac70d67e28f4a41eeba9d1dc939d214e27d6465aac6c1bdb373d396111363a47ced8be1ecda96705200bd3301daf0de0a38f53fddf90f7ada7165b2286218525a4d4e1ae0ba7adb", &(0x7f00000004c0)=""/140, 0x4}, 0x20)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x25a5, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000680)={@mcast1, 0x45, r6})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0}) (async)
r9 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000006c0)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x20, {0x2, 0x4e24, @broadcast}, 'pimreg1\x00'}) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0x6}, 0xc)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800) (async)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x5d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xf, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x82}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0x5, 0x1d, &(0x7f0000000b40)=""/29, 0x41100, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x4, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={{0x14, 0x3ea}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "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"}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x2039f538b5afcd1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x6558}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88a8}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @tunnel={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_KEY={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_KEY={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x0, 0x4, 0x1, 0x0, 0x3}]}}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_HASH_TYPE={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x0, 0x3, 0x1, 0x0, 0x15}, @NFTA_HASH_TYPE, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x8000}]}}}]}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_BRIDGE]}]}, @NFT_MSG_NEWSET={0x0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DESC, @NFTA_SET_EXPRESSIONS={0x0, 0x12, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @immediate={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "57b948dfd0785fa50fa4fbdf9572d2c0396e029524dbb92eb3c9fc5385d5a8d871e91fd217a4afef6c8b6f4b342f9a6118143ef7c73a308c7997f6da6c7591728b69a2f7c49d5fd19cf7746c8a09e9d15ff1115e4c7b408f3c54717a460fbcd26f9537cde760e1247dfb5f8ed811844179ec02b1a847f6cba0ae28dc1c1c8894065a5f7e34700e6c9d8b0774991c1d2e483e805c6d76dd8464a2b9bff490f06738078fbf98d034297965db42ccfe7e5cc57b24cf7161b7"}]}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "fc2ff4851a17ab540099bb9a1ab83daeb23c52f6c449c6c58d"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x0, 0x1, "b8242fc4ec154a060ada43ac025bca48ef00e9861245fafa3c"}]}]}}}, {0x0, 0x1, 0x0, 0x1, @xfrm={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x17}]}}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0x17}]}}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP, @NFTA_BITWISE_DREG={0x0, 0x2, 0x1, 0x0, 0x11}, @NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "c62204dd9f96a97a78df8c09a273b4779fe39515dd66e355e42721bb163421ac2aa4d76d63d87fad6ec3ba6f9df8172816ebe2ddbde4b0a42eb70d089220044e5e5ee5056bd78851f308bdb7ebab490c0652ee4830e35331eb99f092689c22fa44fbed60a2f808b4f38cb25146af562c48d64ea00dc9e1c10c334d1e894a6af477a7f00fdca3596809bf3ade2365d2d0042a18f24d69873e91e69518d53c468d9a604d2b5bc84fb2471f2672002c7bb73b7b142805083f80bec5e716c25acf0b414a6252eb51820e"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "5fa610520ffe9d97c8805850352da03d3c45ee3d4024876b6ef7d473083ed4c36a590547efa2d4b30dd8ad47551ef1a76fbf11693b973e452d68dbc4"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "e2dce43f1b5f4cf12d77ec5ae766972d6673c2056688c0e96422122fd46aec7b9858fe68e2dc6a4a5a88e54d1423ebaa8150ecb28c642ed24a052a8f381dfdf339899333406e568e49f825cfb9a34c75a9a7fdfaf0f09fa104d260ede8b87e1d5867e289cfe67bd89d75fede845f3424a9221c4c3aac685396479596bd1a751efd28ac3341edb0dd08d526cc9fe05b4868e11f82c4854d6a2846a95b1bda821de510bdb984fd7eb82011c2d200719194da9221d4466459d15e14e09398fbaabd9c093845b1a563a9e9ad2c7375a8a7f105865dab25b77ee0"}, @NFTA_DATA_VALUE={0x0, 0x1, "906621167130088a58c2b7294728a1f339f5e092db5bdd57e5255a28b7ccfe71c5e4503c1f97eb38a80c0816bd2dd6b461dbf3de9f3d2ba7f72981cc4534067e53ba7a95d7c2ab2f43f1afab935fd5a726ef50117f80f9eeaa8aaa1b50ac7019018a412aca6492196ed046fe7dc973ce32da591ddf775a622a6dc26aa450749111b04e28546cbeaa603c991cfa76d9ca953c02080c1141dcef0ef9a1c35d3c6965a0fb32730f55f76354ffe0549ce9ab63a501515997cd3180187a2acf"}, @NFTA_DATA_VALUE={0x0, 0x1, "7096120e76d694197e72f1326a7a8fe6c6d1caedd11c07028a053a7af0806d3834fb2a9380437d3730e4e5beb0eef8262447ca2c47bd38e5303ac7d3c3d403b954"}]}]}}}, {0x0, 0x1, 0x0, 0x1, @dynset={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x0, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_FLAGS={0x0, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_DESC={0x0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xd}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffff7}]}]}]}, @NFTA_SET_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x101}]}, @NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "f6fb6b95203c0f59e6cb7236df2b25a1a574663719242f561f0a1d673f429300f96ea33375c170bd4113726a7f61cc74732d5cdbac01947279ce0fe99d96452430b20ed9b55eefda302d11d95f27b68e0d6d27011cb2232f0e9af2567b88a2ced0d5242ae3cb0a09c6380dfad2d9ea37704470f20c217608b4963f158169dd9835d165e78a5ff082b25511bb4c7619e25410abd6f2e35beb"}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "2d4dad7beae67401adcfd138a792a776f9a19178f608ec4a7bab4c311ad3257b72d155b293ca689f8d2d2c507adfedfd510df0ba010b72e3da8aa4a0feede70359d95f570d0a8ebe7f0673c5545d605654b073099a74506d8f90b491641f05db96c031b0e053bbe27ce53f"}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x0, 0x3, 'erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x13d9d834}, @NFTA_HOOK_HOOKNUM, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x2d8fa88e}, @NFTA_HOOK_DEV={0x0, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x55a691cd}, @NFTA_HOOK_HOOKNUM, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x1fc7e30d}, @NFTA_HOOK_DEV={0x0, 0x3, 'pim6reg\x00'}]}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "40f74004d85af7e8aafc2aa52297ec000967c11372497902063eea6786da6ad3d28c1902ed948bdd14493d9351432f48f16ae119a7719605f8acb6bcb48239a50226d7e86bc73c7851faf4f27a13bde972e04943b9e897a9e896a17aa61cf4403eb237553724451145bcd30250c71b21fbdd8e24c8e8"}]}], {0x14, 0x3f4, 0x1, 0x0, 0x0, {0x5}}}, 0xfffffffffffffeb7}, 0x1, 0x0, 0x0, 0x260000d0}, 0x4041) (rerun: 64)

3.457386896s ago: executing program 0 (id=3521):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
unshare(0x60600) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000009, @empty, 0x2}, 0x1c) (async)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88c0) (async)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x200248b4}, 0x2002889c) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x40000001}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
read(r9, &(0x7f00000001c0)=""/118, 0x76)

3.435836757s ago: executing program 4 (id=3522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r1)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r3 = socket$kcm(0x2, 0xa, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000002540)=""/4091, 0xffffffffffffff24, 0x202d9)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x3b, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x6558, 0x27, 0x0, @wg=@data={0x4, 0x4, 0x8, "4014a084de25e2df8e3a1680d5e974"}}}}}}}, 0x4d)

3.435097061s ago: executing program 1 (id=3523):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async, rerun: 32)
r2 = socket(0x28, 0x5, 0x0) (rerun: 32)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async)
listen(r2, 0x6d1)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async, rerun: 64)
close(r3) (async, rerun: 64)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f0000000340)=""/171, &(0x7f00000004c0)=0xab) (async)
recvmmsg(r4, &(0x7f000000a2c0)=[{{0x0, 0x0, 0x0}, 0x7adc7a60}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)}, 0x11bb}], 0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) (async)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async, rerun: 64)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) (async, rerun: 64)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0xff80)

3.001940441s ago: executing program 0 (id=3525):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x4000000000, {0x2, 0x0, 0x6}}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newchain={0x74, 0x64, 0x0, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x15, 0x10}, {0xf, 0xfff2}, {0x0, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0xa0, 0xd}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}, @TCA_CHAIN={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x22020600)
getsockopt$inet_udp_int(r5, 0x11, 0x64, 0x0, 0x0)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000140)=[{0x0, 0x1, {0x0, 0x3dfbb5cf02ba6bb8, 0x1}, {}, 0xfe, 0xfd}], 0x20)
sendmsg$nl_route_sched(r1, 0x0, 0x20000050)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000f80)=[{{&(0x7f0000001800)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x12001}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8d}, 0x1c, &(0x7f00000007c0)}}], 0x2, 0x4)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x20000400)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

2.852106505s ago: executing program 3 (id=3526):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0x1b, 0x0, &(0x7f0000000280))
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310a00000b13cb740d11b85793e4120000000000001800", @ANYRES32=r1, @ANYBLOB="04003080"], 0x20}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000000)

2.741448562s ago: executing program 3 (id=3527):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2, 0x0, 0xf401}, 0x5)

2.683399298s ago: executing program 4 (id=3528):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/686, @ANYBLOB, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffffaa}, 0x42)
tee(0xffffffffffffffff, r0, 0xee, 0x1)

2.536867027s ago: executing program 4 (id=3529):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
write(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x298, 0x2b, 0x2, 0x70bd2d, 0x25dfdbfd, {0x20}, [@generic="806ec9c887cbf0dafab5c46ea6da9ff69a7f95d0ae96d0de89e20b20eb0289610388deba474ee206759ba37fb1d7afb31b8b0c048d96f5b1b42a64b6f6bb114f5346dab5c7c5e21d95084a6adbb31bf5cd5137f206934105b4dc97bde30c7353e9b61a60775e6708724c", @generic="6af8cbaf42bdb241d660f62f501fa04715b03c49bb5cf63ec97438884cf1315270e3d3c2d77f24bafc3af3710ca90926883e3f12d808cb40cfaada80b9a56d7f046cd9d411afb9b3488ab87de85ab9ea9fd8033fdedb9204e1ba3610dc45bd0cac9550589033c03c171a1265a8536ac5e9ee74151e013584d595a12b0b7c615607f8af529a05ee63dd", @generic="888cd292ef6225919e89d2125acd754fe74a35b05eb04e83e38917e5f40f14d5808da28d98940b1a1795edab5ed82ff1d752d426a95ab0b420c16d65716e1c21dbafdffbf6a643a044841e4325bc019df5be5763c577a02da32a7d20007003c5c5c72af925af0ac46f966532706c0852209cbfa1fdcc0a975d14f7", @typed={0x23, 0x5b, 0x0, 0x0, @binary="1e7313b212235183d426302811b4ac4be611e2e26780cd5bfd0400f020d68d"}, @typed={0x9, 0x140, 0x0, 0x0, @str='!\\-.\x00'}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@mcast1}, @generic="64e343e2a7dcb0f128d81343116ef59bed0e203607a6700360a03bba8ae422f1114355fcf6424bbb780f01ebe167d00090c582e8d85eb641f91292761d697d8b1314fa77ad7d9e7516eba4d5f5ac20ed4e551902d905732db039a68d110efd09fba687562c46a3f48242b08bf998f514c62d37f815a0edf7f6f6c7c15c332552738406c9a086f11b7d35acd5a2b5aa8048f43830f80ef76bb14911db6bb889336d04981b49895a4045fc034ef6ea5d4188c12b5fd09375175c456640c11ce5e9159d9bd339fe1fb6a0ba4634885194df0870"]}, 0x298}, 0x1, 0x0, 0x0, 0x40}, 0x40c1)

2.324978008s ago: executing program 2 (id=3530):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc35e3cd506de017d}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x94, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x87}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8}, 0x20008000)
r2 = socket(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000201010400000000000000000200ffff240002800c0002800400010001000000140001"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d30"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}], 0x3, 0x40480c0)
close(0x3)

2.304418441s ago: executing program 1 (id=3531):
r0 = socket$kcm(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000140001000000000004000000e0000002000000000000000000000000ff02000000000000000000000000000000000000100000000a"], 0xb8}}, 0x987a3a9f323582c8)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000001a80)={&(0x7f00000019c0)=[{&(0x7f0000000000)="db6134ac69d6797be09d6a3441bb5d46e4075db83459376ccb21c60ece57c1fe82b6e6ca7c414fa197cab9bd581310e88ac383405edcd75a7fb458f00ed6a2859e1706b360f943402ba10548d00540d922ac51c20230b33dd6216b6aec69f6be7dac0a8863d7628791f2e03aeb475ff887f47c31faacb4f020464ceb7ecc4283b7fc9f9a390c8924f453923bf5aaecee53d97ede09478054d7ca67809361cbc008e35503a57446b8821dbdbbbfc1ee48adcd80c097", 0xb5}, {&(0x7f0000000580)="8bf996ce6101e4f835066651eeed7d52b162042657c8a5f36d04d853d696682f05e8fa6a1517e80c189ae1a55c8c33ee9798104a1ab96e87eb5c4ad88f7b0512e5977a2e548e94e87ef82318bdd5719fa941f9c5744a743edcdd388e7cb1d63c1c8b1a61a71fcc95c97626ba3bb2d63052c1d676ca1f11c45a1646f4c6ac9208beb21ae55b536242d448aed1d30002af2793d99141711016e6854d8a3eda1cd48fdd0378f1c42cb088a77b38483ae787c03faf60c08c", 0xb6}, {&(0x7f0000000640)="8fff2687d66e7890fbdf7992abf73f344bd736d970b1efb1f59ca880fe8e1e4470f5cb49d51714ae471d09c371fb2fc34e57575407bc1272992983fa4345fb81327d900315b8ad63b5b6b14f00d0f6a761b5b7d9837fd3f04bd0", 0x5a}, {&(0x7f00000006c0)="db5a12054d4a1873f667f3de8dc53f1422a193ac9d8b9fb732b0fd307e798eeae11855a4355dc7367a1c679ceec56f867f4f0dc8ae31289cf0ce3068c918da87ce95fa77fd1f58ea2c56f8bdfbdc78ce0d20498c3424c9a789bbbf92d387842dcd57b8ebf2a587c1c96c0d5056e8c643e6c81a9ceca1709a280f00f7cc572c0f67038df4f7d05679f54f4c56ee51d24226ec771b31b760b855fd70fa1145334e0a10b7e660af9180a7b2a8874d7db8828a4d91415a7b67d778064349b8378ca2", 0xc0}, {&(0x7f0000000780)="b88c36", 0x3}, {&(0x7f00000007c0)="30a40ae5aa7f22842c354a2355c48d1542b6b390ed0e044a1edb15111b8808449234dd0316edf102c3a78bbae167659d49a044efa2f9aff957eb2493b0648d749f193d374f857a439256b29f8756a297ebba8619836f2b02757a118aa6d21f0b097a65b012da59abe9fbaba7dad10deefc392457ae865ecf2d1c8e894627ba527bc7c6362a1abe80039c61c9ec0cd53ddeb8fde353a41ec17b2422df0bba31d78fa3b9fde99f6d3ae5f19a914f32bab060041d9a71a235cbd22564747c1d76ac0ea77a2520e6c1f8e6fbb1", 0xcb}, {&(0x7f00000008c0)="c8199f91451b639c478103cab0a9ae6936f572898b5cb965ffe4d486dea09b6268b0fa747ffd189dc946e564d7362028fae036b85d2e148befe468cab18960361560f2c47e9b261b8f396ab183d46230e161a51fba2b81b13ab4d3c5574d5a566f9005d2e33ec4a2b7cb5c52a7b242b7d5de2d457fbd814ef0ee2ea3c25a6c20157d2594b6e5b74e139888034b7de95d6db74632d78fddf46a5bc6c4d269dfae8f327ea3a3", 0xa5}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="a7988107aa4f2fbdfd06aa049e306d0fc872c930", 0x14}], 0x9, 0x3, 0x0, 0xa, 0x7, 0x2e7, 0x4})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'syztnl0\x00', &(0x7f0000001d00)={'syztnl0\x00', 0x0, 0x29, 0xec, 0x9, 0xffff230d, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0x23e, 0xa0000000}})
socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001ec0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50)
close(r4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000001f40)='./file0\x00', 0x0, 0x7ded8cb756b642e7, r1}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40040)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000280)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x5}, 0x3d)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)=ANY=[@ANYBLOB="19676100", @ANYRES16=r7, @ANYBLOB="00022cbd7000ffdbdf254a0000000f00a8007365636f6e646e616d650000080001007063690011000200303030303a30303a31302e3000000000"], 0x40}}, 0x810)
pipe(&(0x7f0000000080))
socket$nl_rdma(0x10, 0x3, 0x14)

2.114309124s ago: executing program 3 (id=3532):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/233, 0xe9}, 0x4}], 0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x8, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x0, 0xffffffffffffffff}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x40)
write$bt_hci(r0, 0x0, 0x6)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100e95cf8b5180000000000000024000000210000003e000000000000000000000202000000000000000000000b000000000000000000000009020000000000"], 0x0, 0x3e}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
pwrite64(r6, &(0x7f0000000100)="e1e291253cc6cd53454aff09a7e0c3dba16d76f9071682c757819f8d97b7d339233e6ccb72294996e16f73c4845ee11a30669f9936e0b8a09e459b777fec7818ecbd50a59f255b1c581fd8b48fecc0d468d4fbc15f6c27c6db0f0bcda4ba1b7f311b8ef7b13d445f94e8e1be0122fe60179fda3c1ddd9428458c90474bdb49f4b274d1936ffd10a5d0b6478548d276c5b868d31b10fdefd39f4c0219", 0x9c, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
setsockopt$inet6_tcp_int(r8, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, 0x0)
getsockname$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x10)

1.812928277s ago: executing program 4 (id=3533):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20054000}, 0x440d0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'/12, @ANYRES32=0x0, @ANYBLOB="f8d72f"], 0x20)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000004000000001400000000000000290000000b00000000000004000000ff1300000000000000290000003e"], 0x48}}], 0x1, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x7, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query]}, &(0x7f0000000980)='syzkaller\x00', 0x80000000, 0x7c, &(0x7f00000009c0)=""/124, 0x41000, 0x22, '\x00', r4, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x4, 0xfffffff8, 0x8}, 0x10, 0x0, r5, 0x0, &(0x7f0000000ac0)=[r9], 0x0, 0x10, 0x5}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1, 0x8}, 0x1c)

1.772363653s ago: executing program 0 (id=3534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000090000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0xb, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x4551, 0xd6, &(0x7f0000000380)=""/214, 0x41100, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x5, 0x60}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x484, 0x3}, 0x10, 0x0, r3}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000090000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0xb, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x4551, 0xd6, &(0x7f0000000380)=""/214, 0x41100, 0x12, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x5, 0x60}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x7}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x484, 0x3}, 0x10, 0x0, r3}, 0x94) (async)

1.742822776s ago: executing program 1 (id=3535):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000640), 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1100, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414aa0c000280050001000000000024000280140001800800010000000000080002007f0090f40c0002800500010000000000080007400000000024000e800c00028005000100210000001400018008000100ac1414bb080002"], 0x88}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.695473151s ago: executing program 2 (id=3536):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x4840)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6f35}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x8814) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6f35}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x8814)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800210000000400380205000900010000000500"], 0x88}}, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf251e00000008000400ffffffff08000100", @ANYBLOB="1c"], 0x34}, 0x1, 0x0, 0x0, 0xcacbc4add21c9368}, 0x4040000)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed0000620300007e0000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
socket(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x202}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x44080)

1.534779862s ago: executing program 3 (id=3537):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10)
sendto$inet6(r0, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async)
sendto$inet6(r0, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9e, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9e, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x158, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x158, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x2, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000880) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x2, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000880)
recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x400000f3, 0x0)

1.04095755s ago: executing program 3 (id=3538):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x28008004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'})
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000034c0)="b3", 0x1}], 0x1}}], 0x1, 0x20000084)
r2 = socket$inet(0x2, 0x2, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x4bee, 0x100, 0x200, 0x40d, 0x9, 0x6, 0xb, 0xec6, r3}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x4000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00", 0x38)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket(0x1, 0x803, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1e, 0x6, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f00000006c0)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

918.428848ms ago: executing program 1 (id=3539):
r0 = socket$kcm(0x2, 0xa, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
syz_emit_ethernet(0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503ff0f00680000002f907800000000e00000012480810000010000b09a7f10000800000086dd080088be00000000100000ef4aab67000100000000000000080022eb00000001200000000200"], 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840", @ANYBLOB="f6385ad177"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x30004884)

902.077204ms ago: executing program 4 (id=3540):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f0f00000000000200a46c88bc", @generic="f4b0f176b7abb4f02446f4e9b4cc9e9104290eaf1455f7de9a0efedc7bac697e5987e585a68d72320927fb91d1097c992a45f6a498b6dccb1c27fcc7c011039978970aab3892d6021e149053425b631b3efa82557cf567f92b45b530f30db40044395bd66a6a5ab1e5e622e117b80ce763585dbf41355f9b5347bbd3d1de3fe0252887f13523da8d51ad7a964d2cdb5370bc62010b0a19e20d09f254c5897382efc42199b4357cf0f3ef5291f409005975b1140cc54255468245d25954b69ded"]}, 0xe0}], 0x1, 0x0, 0x0, 0xc800}, 0x8014)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x7ff, @loopback, 0x80}, @in6={0xa, 0x4e24, 0x8, @remote, 0x400}], 0x30)
r3 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={<r4=>0x0, 0x5, "44d120dea3"}, &(0x7f00000000c0)=0xd)
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYRES8=r2], 0x50)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r4, 0xca, "2e09f795dd67d230313e13229b43b5c4ab0795a9de0ca7a71ea4f0237d09c07659a75b0b7bbb4090059504dc4e09d47c773390d5c2248021bc363c20b706031805e3a63e28537e9dce3def7a42d0b84e902ec5ae7c4c49b6b259508ab8aa77d29bd0f967b3f57cd6fdfcd22c1a31990c00c5c8a5c56a18ddd3b4aa5b440fcb64352fd832892f247b7db8e48d66b8be0fffd0d3fdb48d64e6ef9b0687776d2daf7ab1d29b00ccafe90121ef156b9b3187292ac4065858674b59b0a2458f3c0b2af682b47c836c71eb4474"}, &(0x7f0000000200)=0xd2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000380)=0xe4, 0x4)

849.526358ms ago: executing program 0 (id=3541):
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x1000000000000008, 0x3, 0x7, 0x7, 0x7, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3, 0x60000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x4004000)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x1800}, 0xe000)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x81)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95)

793.389224ms ago: executing program 2 (id=3542):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044800}, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0xa, 0x3, 0x87)
r6 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@local, 0x40, r7})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001400b59527bd70f1abdc00fddbdf250a", @ANYRES32=r7, @ANYBLOB="080008000806000014000200fe8000000000000000000000000000aa"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000)
sendmmsg$inet(r2, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, r9}, 0x14)
write(r2, &(0x7f0000000280)="ffc620cd4155334fb1fcc28aad7e5accaddbab05d1aa2d1e35b90b8fd2ab0e9c36234d7aea670dad89c0a6b3b1c9d86cc37fcb0d6fffd1f4f4349c8b99b0cd0ae9dd87856498af183110a2524b35edacdc285a9a8b82ed4ae02d839888d4fe4c871dbd0727c7dc2866c6fbcbd8ffe580d94eb5af7d6e4aba889fbe18d3612f99542b32c0f5a83f756a7775170895d141b62ac720f92e8ec986117422cc5e2b14527f97d81056077295500347fe0e4b9abd929ce44ae80566254eb2942bd66ac94112baa523d698fe7d2e893b325f082ae3b1492a26323b4ee48288a41c8eebeb844d661ebf39f06ebecab4247d4ca45aaf4ddb6a68b88e4c66b9a8b407eb2362b8756599eb4a5dfe3f764ce2fd4c820c000fe39edb9f851471abdc846b159d8f5c0a8e01ea32ee40bc5904c9bb145bfb4f97402fe7799b52e7edc659c0b858e8f96f6320d0975a023c2351433a12515038d86956450fe7e7edf0cbfd7000788bf9369816491d75bbe70109770e80af6433290d76f44f2198ef40828fbe31ed28fd1e4eb5e55d8bd3c37e11134b7e09c7b9cd1284fc12caa7ed16750de41b5ba41788a61c04fb2137498bad7c123fc4cf7838c4f2455c10a8ca9b873881c5b1b3a839f5b5a4fd9fa68b699e6d2aa17078777feff3478420003f8d5cbd5719b0659671bf6fbc1a517bc0c8a8e7d6cd427163215069e4edc654fc7dc6bb6e968ce71741f149a106c631f6e4d7ca7f009473a69dd461b60a774efef1840ba9a034c4258adc2d4eec9e4b4ae932816589f30fd0d26361c00d60fd293dc425f19e978c73e61582c4974295e49ac7e358098695cb35f1146fc4fa0e5ca9a80a115f4b511759a5aaac795f99e4af7b797ccacc2567a43b69c1773cab74f290db231d1ce58781a3f7de01fcab5895f33359979eb0a7c92bbdb5b6517f085f09abc31988f2a44053771dab2bfcb89069c043d2c738cc7223319ef1460165cc243550108b4cec3640ebba2285766ec5675f3766468a025ee97323eeb72746498171ce593bc5a3a940e59b87f98a78b4a56453295b66905d91b99d4ae4d78c35eb744502e194f0fbfa61c0ec5f5ca4ffc4c4caba304979b4263c32a66ceb7fa97902a1e9cad6866142f7384e09f57d872db76bb1ca17766fb5035f893a82ced28e4f0f5174775d37f1239ab07c1fc8dd62427195f846d94e517e3b52e4a84f8c4fcece7b6b3f0a30cedc5ecdc23a85a98ca556936c4c61faf7804a318dd144c034e68e19592830f6a6269cafb7f90479bc4bf07f186b7dc8b08a707954e4981feeb4ecb17f971f0beafc550fb88da359a243be156ac0ca0e979986049319ed848dd9c0bb5ec06e64896c4f14ad2d026e4432b6ff75bf75f9ad343bdcba75b6f1552590248f44a85113ced0aec27aa5575ccdefd821f492b62e3df7662ee7a1edc28a80aecd73ef367a96b5bf822d633ab1fdb30ad15acdb5ed3fbed0942af72b37468a7b6ed9836f69cb39d24df7541d16a4a41262415676558a7b584f4882da4484d11b17618936de711eb105fb4a76b9641c51c2d898ada1d5116104799c8e99d1d8fd7c1088cb98f2840183db8d2657cecf63ef12dcdf9285e7d61cc02c0ab535458b5792d73d27456de87cd7bb77429a7081292afb93586634fcade036c99eadea870b8b52934a7422b30f387f600247bd73474bcd101f5ac04f1e15364b63b3a30967811a6fb84312e69d77c868fd09a38ce1c665aace4ae38bc02120934a674fd2e5fc4019f18b353787130aaa25afbd2fd5370dd40fc885222ecadaaf0320e678cac635e52d4be92363e6770aae065c48e69ae512671988fbc0e7f98770010e3e56bd910da0a761444603f05e8b6facd00671376ce28dbaf1fa9340d68fe5fedfd705eb965bf01175e3c8fd283f98ad2c82a7bf1bf07cbc0289923036eafe66fee6b2d3920e61c171bda9786053638b0947f5c4ae07cb99f1ed03840729f9b8993975731fd6cad3f0cb994859c221e70fa3ce018c4187cfa86b4ba949c652ebe4f88662ecb7f317b01b76be990b0f42e2cde4daa31185c7075c5ec5ce2fd1c228b2527b9ced7d2883", 0x5c6)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x81073fd8979a4f81}, 0xc, &(0x7f0000001940)={&(0x7f0000001a00)=ANY=[@ANYBLOB="4c100000fce580863a68326002e747cfcb8c02a167c7a50321136add0f0169162b10b5bb208b414cd9cc52591e350e54404cdef5d20047160ca2da8ecc102bf83cdf5b4f70373625033da272fae3f4e22b457cd2778b5fd1fc82e01e54222909d61f3608d93f5854d57ca376d0c2c78d4d5051dd487a6f33974518f61e1f00bc3a43e61aa700c6eb7b16f7bca6b5ffa3392c865dde7e69df6b86bdfe41bd04962da981d5ff71b64a3d", @ANYRES16=r11, @ANYBLOB="10002bbd7000ffdbdf2512000000080006000400000008000700020000000800080007000000080009000300000008000600c005000008000800080000000800060002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r10, &(0x7f0000001840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)=ANY=[@ANYBLOB="b5000040", @ANYRES16=r11, @ANYBLOB="00022cbd7000fedbdf2518000000050006000100000008000700090000000500060001000000100002800400050008000200ffffff7f0c0001800800030003000000540002800400010004000100080002007cf200003600040030af13eb3e3d201e722a37ad7d9a4703d6643997f27f3ea26252795829547c91397330c45fd9f53bdaba21f333ab78373a4400000800020008000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e02742e8680d0100f510772f086a", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)

310.74053ms ago: executing program 0 (id=3543):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x3, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1808d3f15ecbd11b7cdf87a436063c9f1a6e4f93f1e47f27279e197277d748a48b07180f76778985378177951073c8bcf32c9d5f2e510857de8133bc2057a62ded0b0230f53f94fb52aac49de79641c98761757cb71c06c3c1ca2479d3b8163555f8", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="050033000100000008003400feffffff"], 0x2c}}, 0x80)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
socket(0x1d, 0x80000, 0x6)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="45dc863b480197139fb99adeed81af961c5576aca1f306a4985ab0ccd40a1f65a2d03293a56eff8cb21bd3b2fc1dfbedf3bc62844d46eead33c1460b8f5e8e2e10f38bbc2069515114dc020be24ab7d838870793f6eb519be9922981371689788951528a6ed6bf8d00000000000000000e6ea93eb07a9f3c07c4743c1e33772ccf8057c550f518e6fe2f53a48bdba577f352d62be54ed554c5a0604f0dec009842248e3c59c8ac99b4db19dc5327ea690bd59c953b5c6e42400796182bea30d84b8c5010482b08817a8490a741db0ef20c3cfa14f0d5ff6cf127723a4146a012eaa7b4e1c8b962f406e754410c06887e1683e3b87e3576a5267d5223a8b72002ebfbafd3ff468c8707bccc7402525c07192429099d6a7db4bdced05a50a9820423d6e93871d3"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r6, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x3, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) (async)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="1808d3f15ecbd11b7cdf87a436063c9f1a6e4f93f1e47f27279e197277d748a48b07180f76778985378177951073c8bcf32c9d5f2e510857de8133bc2057a62ded0b0230f53f94fb52aac49de79641c98761757cb71c06c3c1ca2479d3b8163555f8", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="050033000100000008003400feffffff"], 0x2c}}, 0x80) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
socket(0x1d, 0x80000, 0x6) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendto(r6, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) (async)

298.40709ms ago: executing program 1 (id=3544):
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r0], 0xfdef)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000002000000000000005f4f"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000601030095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x14, &(0x7f0000000100)=""/144, 0x40f00}, 0x94)

215.690182ms ago: executing program 3 (id=3545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
socket$inet(0x2, 0x3, 0x2)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, 0xc)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x2) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, 0xc) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)

921.185µs ago: executing program 4 (id=3546):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @rand_addr, <r1=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newtfilter={0x93c, 0x2c, 0x20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xc, 0x7}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x468, 0x2, [@TCA_FW_POLICE={0x45c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8f, 0x4, 0x24, 0x8, 0x4, 0x5, 0xa, 0x9, 0xfffff000, 0x5, 0x0, 0xd5, 0x9f, 0x800, 0xfffffffe, 0x1, 0x401, 0x4, 0x6, 0x0, 0x54, 0x100, 0x8, 0x4, 0x3, 0x3, 0x40, 0x6, 0xbe9, 0xfb0f, 0x6, 0xd, 0x2, 0x89f3, 0xa, 0x4, 0xb1, 0xffff0303, 0x6, 0xb, 0x1, 0xec3, 0x400, 0x5, 0x37, 0x8, 0x9, 0x0, 0xd, 0x6, 0x6, 0x0, 0x6, 0x1e3, 0x0, 0x8, 0x7f, 0x1, 0x940, 0x3, 0x6, 0x1, 0x800, 0xffffff98, 0x0, 0x101, 0x9, 0x80, 0x5, 0xb, 0x2, 0x0, 0x3, 0xfffffff8, 0x4, 0x9, 0x7, 0x80, 0x7ff, 0x2, 0x1, 0x6d73e17, 0x6, 0x1, 0xcb, 0x6, 0x2000000, 0x6, 0x4, 0x5, 0x7fffffff, 0xa, 0x4, 0x2, 0x0, 0x1, 0x80000000, 0x7f, 0x3, 0x0, 0x3, 0x0, 0x8, 0x7, 0xd9, 0xd, 0xfffffffe, 0x8, 0x6fa97fa8, 0x1, 0x2, 0x3, 0x1, 0x50c, 0x6, 0x8, 0xf47, 0x7f, 0x3bf3, 0x8, 0x7, 0x7, 0x0, 0x9, 0x2, 0x3, 0x401, 0x59bf536e, 0xfffff800, 0x3, 0x4, 0x95a, 0xa2ed, 0x7a, 0x6, 0x800000, 0x9, 0x0, 0x781867eb, 0xe7b, 0x118, 0x1, 0x7fffffff, 0x7, 0x7, 0x401, 0x6, 0x5, 0x7fff, 0x8, 0x8, 0x7, 0x8, 0x4, 0x1, 0x10, 0x6, 0x0, 0x2, 0x1, 0xfffffffc, 0x5, 0x8, 0x80000000, 0x6, 0x5, 0x5, 0x7, 0xb, 0x9, 0xfff, 0x8, 0xffff, 0x6cbf80, 0xf, 0x9, 0xa1d, 0x80000001, 0x243, 0x5, 0x2, 0x7, 0xc, 0x200, 0x5, 0x1, 0x8, 0x6, 0xb, 0x81, 0x6, 0x80, 0x3, 0x4, 0x1ff, 0xfffffff8, 0x0, 0x1, 0x8, 0x5, 0xeacf, 0x3, 0x7318, 0xfffffff9, 0xf, 0xd00b, 0x7, 0x1, 0x6c, 0x21a, 0x0, 0x6, 0x80000001, 0xab, 0x9, 0x5, 0x7, 0x3, 0x5, 0x6, 0x202d1, 0x7, 0xffffb62e, 0x3, 0x4, 0x7, 0x1, 0x5, 0x7949, 0x9, 0x8, 0x401, 0x4, 0x7f, 0xfff, 0x8, 0x80, 0x9, 0x3, 0x4, 0x7, 0xfffffff7, 0x5, 0x0, 0xfffffc00, 0x4, 0xfffffff9, 0x4, 0x9, 0x1, 0x6, 0x5, 0x5, 0x8, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x15f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x6, 0xfffff347, 0x3, {0x10, 0x1, 0x0, 0x3, 0x6, 0xb4de}, {0xc8, 0x0, 0x401, 0x3, 0x1ff}, 0x11, 0xf70a, 0x4}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xe}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x49c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x3f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13aa1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8e8f}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_POLICE={0x460, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78a0356b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x19bc, 0x0, 0x0, {0x5, 0x0, 0x81, 0xb, 0xff81, 0x31a}, {0xff, 0x1, 0x7ff, 0x8, 0x0, 0x80}, 0x2, 0x8, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xf57, 0x9, 0xb, 0x8, 0x81, 0x22, 0x8, 0xfff, 0x6, 0xfff, 0xd8e, 0x1, 0x8000, 0x1000, 0x1ff, 0x5, 0x100, 0x7, 0x4, 0x4, 0xff, 0x6, 0x80000001, 0x7fffffff, 0x0, 0x3, 0x8000, 0x4, 0x8, 0x2, 0x10, 0x46, 0xfffffff8, 0x9, 0x3, 0xbfa, 0x6, 0x3, 0x40, 0x3, 0x67c2, 0x9, 0x98, 0x10001, 0x1, 0xe3, 0x4, 0x8, 0x3ff, 0x8, 0x10000, 0x3, 0x9b40, 0x5, 0x8, 0x1, 0x800, 0x6, 0xbc41, 0x611c, 0xdc91, 0x9, 0x5, 0xca1, 0x9, 0x69a, 0x639ab695, 0x5, 0x0, 0x1000, 0xb, 0x3, 0x32f9154f, 0x7e, 0x5, 0x2, 0x9, 0x3d6, 0x7fffffff, 0x3, 0x9, 0xe7d6, 0x0, 0x1, 0x0, 0x1, 0x1ad53238, 0x2, 0xa5e, 0x6, 0x1000, 0x2, 0x3, 0xffff4d4c, 0x9, 0xd032, 0x7ff, 0xfe63, 0x0, 0xa, 0x9, 0x5, 0x9, 0x80000000, 0x7, 0x17, 0xffff, 0x3, 0x80, 0x9, 0x0, 0x6, 0x2, 0x3, 0x9, 0x274d, 0x9, 0x6509b591, 0x1000, 0x3ff, 0x5, 0x9, 0x8, 0x8, 0x8, 0x58041fe2, 0x4000000, 0x2, 0xa, 0x1, 0x80000000, 0x80000001, 0x2, 0x2, 0xffffff74, 0x8, 0x3dc, 0x1cd, 0x2, 0xd, 0x3, 0x2, 0x5171, 0x2a7, 0x3, 0x0, 0x4, 0x7fffffff, 0x2, 0x7, 0x4, 0xa479, 0x7, 0x4, 0x101, 0xf, 0xd85d, 0x10001, 0x5, 0x8, 0x9, 0x3, 0x80000001, 0xadb0, 0xdb, 0xfffffe01, 0xd3, 0x8, 0x10001, 0x8, 0x6c, 0x2, 0x100, 0x5, 0x4, 0x4, 0x3ff, 0x7f, 0xa14, 0x68, 0x1, 0x8, 0x2, 0x1ff, 0x77889f60, 0x4, 0x4, 0x7, 0x0, 0xb418, 0x6, 0x987, 0x0, 0x6, 0x7, 0x0, 0x5, 0x86, 0x9149, 0x3, 0x8, 0x2, 0x401, 0x0, 0x3, 0x2, 0x42, 0x17, 0x7, 0xffff7f3d, 0x2, 0x4, 0x8000, 0xff, 0xffff, 0xebc, 0xffff8000, 0xfffffffb, 0xc, 0x9, 0x10, 0x1, 0x0, 0x7, 0x3, 0x7, 0x6, 0x9, 0x9, 0x9, 0x7, 0x9, 0x7, 0x7, 0x9, 0x8001, 0x3ff, 0xa764, 0x6, 0xc, 0xffffffff, 0x8, 0x8, 0x78c9afd9, 0x4, 0xfffffff4, 0xfffffffc, 0x9, 0x101, 0x5, 0xd, 0x5, 0xca46, 0x5, 0x9]}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xa}}]}}]}, 0x93c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200000d, 0x12, r2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000340))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48)
socketpair(0x25, 0x6, 0x9, &(0x7f0000000040))
close(0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r7)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24c9f566ff7fffbda19f267ae035bb6339c8601a6690a8bd000000", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4040110)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x2, 0x70, 0x68, 0x0, 0x0, 0x11, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x14, 0x3b, 0x0, 0x2, [0x80000001, 0x200, 0x4, 0x4]}]}}, {0x4e23, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "b9aeeb0adc85837c41fcda8ae39a4b284ca14599cb22c548", "66c82308ab53ac4c1767b76603f1ea726fa4129ce50f4ea51342c152bea4bac8"}}}}}}, 0x0)

0s ago: executing program 2 (id=3547):
close(0xffffffffffffffff)
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xa95}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860)
socket(0x1d, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r5, 0xf5f)
accept(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[], 0xb8}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7200200000003900004e9f000300", @ANYRES32=r10, @ANYBLOB="24005a802000018014000300090279000700060003000400feff07000500040002000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

91': attribute type 1 has an invalid length.
[  454.216299][T16971] gretap1: entered allmulticast mode
[  454.729955][T16986] tipc: Resetting bearer <eth:syzkaller0>
[  455.094429][T17012] syzkaller1: entered promiscuous mode
[  455.100400][T17012] syzkaller1: entered allmulticast mode
[  455.452950][T17031] Cannot find del_set index 0 as target
[  455.712776][T10169] udevd[10169]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory
[  455.876551][T10056] udevd[10056]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory
[  455.992228][T10118] udevd[10118]: inotify_add_watch(7, /dev/nbd7, 10) failed: No such file or directory
[  456.027842][T10169] udevd[10169]: inotify_add_watch(7, /dev/nbd10, 10) failed: No such file or directory
[  456.059687][T10056] udevd[10056]: inotify_add_watch(7, /dev/nbd11, 10) failed: No such file or directory
[  456.060282][T10118] udevd[10118]: inotify_add_watch(7, /dev/nbd12, 10) failed: No such file or directory
[  456.082783][T10169] udevd[10169]: inotify_add_watch(7, /dev/nbd14, 10) failed: No such file or directory
[  456.110285][T10167] udevd[10167]: inotify_add_watch(7, /dev/nbd13, 10) failed: No such file or directory
[  456.202339][T10055] udevd[10055]: inotify_add_watch(7, /dev/nbd15, 10) failed: No such file or directory
[  456.558646][T10118] udevd[10118]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory
[  456.798683][T17066] net_ratelimit: 25 callbacks suppressed
[  456.800562][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.800871][T17066] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  456.818078][T17066] netlink: 'syz.2.2610': attribute type 1 has an invalid length.
[  456.915816][T17066] 8021q: adding VLAN 0 to HW filter on device bond9
[  456.950000][T17066] bond9: entered promiscuous mode
[  456.950043][T17066] bond9: entered allmulticast mode
[  457.148801][T17092] netlink: 'syz.2.2619': attribute type 83 has an invalid length.
[  457.657371][T17117] sch_fq: defrate 0 ignored.
[  458.167401][T17148] veth1_to_bond: entered allmulticast mode
[  458.182932][T17148] veth1_to_bond: entered promiscuous mode
[  458.186653][T17148] __nla_validate_parse: 4 callbacks suppressed
[  458.186672][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'.
[  458.205710][T17148] veth1_to_bond (unregistering): left promiscuous mode
[  458.205770][T17148] veth1_to_bond (unregistering): left allmulticast mode
[  458.250486][T17148] bond0: (slave bond_slave_1): Releasing backup interface
[  458.263403][T17148] bond_slave_1 (unregistering): left promiscuous mode
[  458.441425][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2637'.
[  458.448428][T17148] netlink: 'syz.1.2634': attribute type 15 has an invalid length.
[  458.448450][T17148] netlink: 'syz.1.2634': attribute type 7 has an invalid length.
[  458.448462][T17148] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2634'.
[  458.558502][T17161] ipvlan0: entered promiscuous mode
[  458.568949][T17161] ipvlan0: left promiscuous mode
[  458.689689][T17172] xt_ipcomp: unknown flags 1D
[  458.840432][T17180] netlink: 'syz.2.2647': attribute type 6 has an invalid length.
[  458.875094][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'.
[  459.161780][T17193] openvswitch: netlink: Message has 8 unknown bytes.
[  459.480747][T17206] pim6reg1: entered promiscuous mode
[  459.480792][T17206] pim6reg1: entered allmulticast mode
[  459.710055][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'.
[  460.109242][T17237] ip_tables: iptables: counters copy to user failed while replacing table
[  460.122757][T17237] ip_tables: iptables: counters copy to user failed while replacing table
[  460.123126][T17237] ip_tables: iptables: counters copy to user failed while replacing table
[  460.158611][T17237] ip_tables: iptables: counters copy to user failed while replacing table
[  460.262066][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2663'.
[  460.264190][T17254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2663'.
[  460.290088][T17251] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2663'.
[  460.290141][T17251] netlink: 239 bytes leftover after parsing attributes in process `syz.3.2663'.
[  460.340675][T17255] netlink: zone id is out of range
[  460.340713][T17255] netlink: zone id is out of range
[  460.340735][T17255] netlink: zone id is out of range
[  460.340742][T17255] netlink: zone id is out of range
[  460.426909][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'.
[  461.892847][T17336] netlink: 'syz.4.2684': attribute type 2 has an invalid length.
[  461.892885][T17336] netlink: 'syz.4.2684': attribute type 2 has an invalid length.
[  462.002346][T17349] net_ratelimit: 10 callbacks suppressed
[  462.008530][T17349] openvswitch: netlink: Duplicate or invalid key (type 0).
[  462.330585][T17356] ip6gre0: Caught tx_queue_len zero misconfig
[  462.466023][T17357] openvswitch: netlink: Flow key attr not present in new flow.
[  462.994613][T17383] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.199849][T17406] __nla_validate_parse: 12 callbacks suppressed
[  463.199895][T17406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'.
[  463.267574][T17406] batadv0 (unregistering): left allmulticast mode
[  463.267624][T17406] batadv0 (unregistering): left promiscuous mode
[  463.267711][T17406] bridge0: port 1(batadv0) entered disabled state
[  463.275398][T17407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2703'.
[  463.340529][T17400] netlink: 'syz.4.2700': attribute type 1 has an invalid length.
[  463.665198][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[  463.682245][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2708'.
[  463.697623][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'.
[  463.750365][T17440] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2712'.
[  463.769718][T17440] team0: Port device wg1 added
[  463.810592][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'.
[  463.810638][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'.
[  463.876712][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'.
[  464.545246][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'.
[  464.884980][T17496] bond0 (unregistering): Released all slaves
[  465.067330][T17506] netlink: 'syz.3.2732': attribute type 1 has an invalid length.
[  465.160356][T17506] bond6: entered promiscuous mode
[  465.202341][T17506] 8021q: adding VLAN 0 to HW filter on device bond6
[  465.253160][T17506] bond6: (slave bridge5): making interface the new active one
[  465.253203][T17506] bridge5: entered promiscuous mode
[  465.260967][T17506] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  465.442518][T17519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.454799][T17519] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20002
[  465.464329][T17519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.650814][T17536] netlink: 'syz.4.2741': attribute type 1 has an invalid length.
[  465.711680][T17536] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.758562][T17538] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  465.758869][T17539] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  465.997250][T17556] hsr0: entered promiscuous mode
[  466.020862][T17557] hsr_slave_0: left promiscuous mode
[  466.029356][T17557] hsr_slave_1: left promiscuous mode
[  466.051893][T17557] hsr0 (unregistering): left promiscuous mode
[  466.511842][T17582] netlink: 'syz.3.2750': attribute type 1 has an invalid length.
[  466.589413][T17595] xt_hashlimit: size too large, truncated to 1048576
[  467.416491][T17640] netlink: 'syz.1.2767': attribute type 4 has an invalid length.
[  467.416547][T17640] .`: renamed from bond0
[  467.597254][T17643] netlink: 'syz.2.2768': attribute type 1 has an invalid length.
[  467.612256][T17649] 8021q: adding VLAN 0 to HW filter on device bond7
[  467.686248][T17650] 8021q: adding VLAN 0 to HW filter on device bond7
[  467.686614][T17650] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  467.696039][T17650] bond7: (slave wireguard1): Error -95 calling set_mac_address
[  468.171788][T17683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  468.227954][T17693] __nla_validate_parse: 83 callbacks suppressed
[  468.228005][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'.
[  468.339415][T17696] netlink: 'syz.1.2781': attribute type 16 has an invalid length.
[  468.339460][T17696] netlink: 'syz.1.2781': attribute type 3 has an invalid length.
[  468.342235][T17696] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2781'.
[  468.398843][T17700] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2782'.
[  468.398998][T17700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2782'.
[  468.548541][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'.
[  468.652934][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'.
[  468.722643][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'.
[  468.791456][T17713] ip_tables: iptables: counters copy to user failed while replacing table
[  468.864248][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'.
[  468.876438][T17714] ip_tables: iptables: counters copy to user failed while replacing table
[  469.500412][T17757] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  469.582881][T17757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.635336][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2799'.
[  470.215904][T17795] syzkaller0: entered promiscuous mode
[  470.215952][T17795] syzkaller0: entered allmulticast mode
[  470.219523][T17795] simple: /dev/video#_74
[  470.219540][T17795] simple: /dev/video#_148
[  470.219550][T17795] simple: /dev/video#_222
[  470.219558][T17795] simple: /dev/video#_296
[  470.219567][T17795] simple: /dev/video#_370
[  470.219575][T17795] simple: /dev/video#_444
[  470.219584][T17795] simple: /dev/video#_518
[  470.219593][T17795] simple: /dev/video#_592
[  470.219602][T17795] simple: /dev/video#_666
[  470.219610][T17795] simple: /dev/video#_740
[  470.219618][T17795] simple: /dev/video#_814
[  470.219626][T17795] simple: /dev/video#_888
[  470.219635][T17795] simple: /dev/video#_962
[  470.219643][T17795] simple: /dev/video#_1036
[  470.219652][T17795] simple: /dev/video#_1110
[  470.219661][T17795] simple: /dev/video#_1184
[  470.219669][T17795] simple: /dev/video#_1258
[  470.219677][T17795] simple: /dev/video#_1332
[  470.219685][T17795] simple: /dev/video#_1406
[  470.219694][T17795] simple: /dev/video#_1480
[  470.219702][T17795] simple: /dev/video#_1554
[  470.219711][T17795] simple: /dev/video#_1628
[  470.219720][T17795] simple: /dev/video#_1702
[  470.219728][T17795] simple: /dev/video#_1776
[  470.219737][T17795] simple: /dev/video#_1850
[  470.219745][T17795] simple: /dev/video#_1924
[  470.219754][T17795] simple: /dev/video#_1998
[  470.219762][T17795] simple: /dev/video#_2072
[  470.219771][T17795] simple: /dev/video#_2146
[  470.219779][T17795] simple: /dev/video#_2220
[  470.219787][T17795] simple: /dev/video#_2294
[  470.219795][T17795] simple: /dev/video#_2368
[  470.219805][T17795] TC_ACT_REPEAT abuse ?
[  470.461178][T17796] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2807'.
[  470.620097][ T5712] tipc: Node number set to 3577226939
[  471.425224][T17857] netlink: 'syz.2.2824': attribute type 1 has an invalid length.
[  471.470606][T17857] erspan1: entered allmulticast mode
[  472.560887][T17912] netlink: 'syz.2.2842': attribute type 9 has an invalid length.
[  472.560930][T17912] netlink: 'syz.2.2842': attribute type 7 has an invalid length.
[  472.561255][T17912] netlink: 'syz.2.2842': attribute type 8 has an invalid length.
[  472.657978][T17918] syzkaller0: entered promiscuous mode
[  472.658030][T17918] syzkaller0: entered allmulticast mode
[  472.665087][T17918] simple: /dev/video#_74
[  472.665104][T17918] simple: /dev/video#_148
[  472.665113][T17918] simple: /dev/video#_222
[  472.665122][T17918] simple: /dev/video#_296
[  472.665130][T17918] simple: /dev/video#_370
[  472.665139][T17918] simple: /dev/video#_444
[  472.665148][T17918] simple: /dev/video#_518
[  472.665156][T17918] simple: /dev/video#_592
[  472.665164][T17918] simple: /dev/video#_666
[  472.665172][T17918] simple: /dev/video#_740
[  472.665181][T17918] simple: /dev/video#_814
[  472.665190][T17918] simple: /dev/video#_888
[  472.665199][T17918] simple: /dev/video#_962
[  472.665207][T17918] simple: /dev/video#_1036
[  472.665216][T17918] simple: /dev/video#_1110
[  472.665225][T17918] simple: /dev/video#_1184
[  472.665233][T17918] simple: /dev/video#_1258
[  472.665241][T17918] simple: /dev/video#_1332
[  472.665250][T17918] simple: /dev/video#_1406
[  472.665259][T17918] simple: /dev/video#_1480
[  472.665267][T17918] simple: /dev/video#_1554
[  472.665276][T17918] simple: /dev/video#_1628
[  472.665284][T17918] simple: /dev/video#_1702
[  472.665293][T17918] simple: /dev/video#_1776
[  472.665301][T17918] simple: /dev/video#_1850
[  472.665310][T17918] simple: /dev/video#_1924
[  472.665318][T17918] simple: /dev/video#_1998
[  472.665327][T17918] simple: /dev/video#_2072
[  472.665335][T17918] simple: /dev/video#_2146
[  472.665343][T17918] simple: /dev/video#_2220
[  472.665352][T17918] simple: /dev/video#_2294
[  472.665377][T17918] simple: /dev/video#_2368
[  472.665387][T17918] TC_ACT_REPEAT abuse ?
[  472.822628][T17923] tipc: New replicast peer: 255.255.255.255
[  472.829150][T17923] tipc: Enabled bearer <udp:syz2>, priority 10
[  473.166136][T17932] bridge6: port 1(erspan0) entered disabled state
[  473.644626][T17948] IPVS: set_ctl: invalid protocol: 40 172.30.0.1:20000
[  474.000985][T17964] netlink: 'syz.2.2857': attribute type 4 has an invalid length.
[  474.052785][T17965] netlink: 'syz.2.2857': attribute type 4 has an invalid length.
[  474.136898][T17929] batman_adv: batadv0: Interface deactivated: gretap2
[  474.240689][T11505] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.240724][T11505] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.240784][T11505] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.240803][T11505] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.240833][T11505] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.240854][T11505] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.241146][T17953] syzkaller1: entered promiscuous mode
[  474.241161][T17953] syzkaller1: entered allmulticast mode
[  474.284124][ T1155] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.284156][ T1155] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.450410][T17979] __nla_validate_parse: 9 callbacks suppressed
[  474.457059][T17979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2858'.
[  474.572277][T17977] syzkaller0: entered promiscuous mode
[  474.580558][T17977] syzkaller0: entered allmulticast mode
[  474.683584][T17984] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  475.036097][T17997] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20002
[  475.060502][T18003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2866'.
[  475.153140][T17999] netlink: 'syz.1.2866': attribute type 1 has an invalid length.
[  475.153182][T17999] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2866'.
[  475.714642][T18030] syzkaller0: entered promiscuous mode
[  475.721479][T18030] syzkaller0: entered allmulticast mode
[  476.359904][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  476.371226][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  476.380092][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  476.389714][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  476.399995][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  476.452034][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  476.452368][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  476.452652][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  476.453599][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  476.454945][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  476.747417][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2874'.
[  476.897359][T18056] netlink: 'syz.0.2879': attribute type 12 has an invalid length.
[  476.909811][T18056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2879'.
[  476.909856][T18056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'.
[  477.140887][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'.
[  477.266936][T11505] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.412107][T18070] vlan4: entered promiscuous mode
[  477.412159][T18070] gretap0: entered promiscuous mode
[  477.476129][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2885'.
[  477.580901][T18077] tap0: tun_chr_ioctl cmd 1074025677
[  477.581041][T18077] tap0: linktype set to 778
[  477.748584][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'.
[  477.878195][T18089] syzkaller1: entered allmulticast mode
[  477.962661][T18081] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  478.070030][T18108] tipc: Enabled bearer <eth:vxcan1>, priority 0
[  478.082064][T18111] tipc: Enabling of bearer <ib:veth1_to_team> rejected, failed to enable media
[  478.085238][T18108] netlink: 'syz.2.2889': attribute type 10 has an invalid length.
[  478.107131][T18108] 
: (slave bond_slave_0): Releasing backup interface
[  478.117021][T18108] bond_slave_0: left promiscuous mode
[  478.117239][T18108] bond_slave_0: left allmulticast mode
[  478.127636][T18108] team0: Port device bond_slave_0 added
[  478.153327][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'.
[  478.277493][T18116] netlink: 'syz.2.2892': attribute type 13 has an invalid length.
[  478.336283][T18119] openvswitch: netlink: Flow key attr not present in new flow.
[  478.507311][T18129] netlink: zone id is out of range
[  478.507347][T18129] netlink: zone id is out of range
[  478.507370][T18129] netlink: zone id is out of range
[  478.507376][T18129] netlink: zone id is out of range
[  478.507381][T18129] netlink: zone id is out of range
[  478.507386][T18129] netlink: zone id is out of range
[  478.507395][T18129] netlink: zone id is out of range
[  478.507401][T18129] netlink: zone id is out of range
[  478.507406][T18129] netlink: zone id is out of range
[  478.535348][ T5628] Bluetooth: hci5: command tx timeout
[  478.566278][ T1155] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  478.647125][T11505] dvmrp6: left allmulticast mode
[  479.134490][T11505] batman_adv: batadv0: Removing interface: gretap2
[  479.412556][T11505] bond6 (unregistering): (slave bridge5): Releasing backup interface
[  479.412656][T11505] bridge5 (unregistering): left promiscuous mode
[  479.467608][T11505] bond0 (unregistering): Released all slaves
[  479.474205][T11505] bond1 (unregistering): Released all slaves
[  479.488077][T11505] bond2 (unregistering): Released all slaves
[  479.501592][T11505] bond3 (unregistering): Released all slaves
[  479.522310][T11505] bond4 (unregistering): Released all slaves
[  479.536812][T18155] netlink: 'syz.0.2899': attribute type 1 has an invalid length.
[  479.546036][T11505] bond5 (unregistering): (slave veth5): Releasing active interface
[  479.560884][T11505] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  479.570668][T11505] bond5 (unregistering): Released all slaves
[  479.581072][T11505] bond6 (unregistering): Released all slaves
[  479.713215][T18164] __nla_validate_parse: 2 callbacks suppressed
[  479.719691][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'.
[  479.753007][T18155] 8021q: adding VLAN 0 to HW filter on device bond13
[  479.900250][T11505] tipc: Left network mode
[  480.052031][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'.
[  480.183996][T11500] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  480.189038][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.189679][   T12] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  480.387834][T11505] IPVS: stopping backup sync thread 11616 ...
[  480.396666][T18184] netlink: 'syz.1.2904': attribute type 3 has an invalid length.
[  480.500396][T18195] netlink: 'syz.1.2904': attribute type 3 has an invalid length.
[  480.614937][ T5628] Bluetooth: hci5: command tx timeout
[  481.195360][T18224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2906'.
[  482.703891][ T5628] Bluetooth: hci5: command tx timeout
[  483.117824][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  483.313595][T18045] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.313801][T18045] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.313925][T18045] bridge_slave_0: entered allmulticast mode
[  483.315581][T18045] bridge_slave_0: entered promiscuous mode
[  483.318476][T18045] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.318626][T18045] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.318736][T18045] bridge_slave_1: entered allmulticast mode
[  483.320321][T18045] bridge_slave_1: entered promiscuous mode
[  483.344944][T18237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2910'.
[  483.348334][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'.
[  483.353238][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'.
[  483.353257][T18237] net_ratelimit: 2538 callbacks suppressed
[  483.353267][T18237] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  483.359458][T18045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.368393][T18045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.481544][T18045] team0: Port device team_slave_0 added
[  483.506413][T18045] team0: Port device team_slave_1 added
[  483.677440][   T31] audit: type=1800 audit(1789108857.892:6): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2913" name=680B20 dev="tmpfs" ino=2850 res=0 errno=0
[  483.678153][T18045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.678166][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.678188][T18045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.684514][T18045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.684543][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  483.684565][T18045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.736454][T18243] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  484.031691][T18045] hsr_slave_0: entered promiscuous mode
[  484.032644][T18045] hsr_slave_1: entered promiscuous mode
[  484.295083][T18270] tipc: Resetting bearer <eth:syzkaller0>
[  484.516451][T18292] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  484.516504][T18292] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  484.516912][T18292] tipc: Resetting bearer <eth:syzkaller0>
[  484.778657][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  484.785716][ T5628] Bluetooth: hci5: command tx timeout
[  484.825512][T18317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2925'.
[  485.200928][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'.
[  485.972813][T18045] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.554572][T18380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2937'.
[  486.989497][T11505] team0 (unregistering): Port device wg1 removed
[  487.050885][T18045] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.071073][T18391] bridge0: port 4(veth1_to_bridge) entered blocking state
[  487.071411][T18391] bridge0: port 4(veth1_to_bridge) entered disabled state
[  487.071622][T18391] veth1_to_bridge: entered allmulticast mode
[  487.076957][T18391] veth1_to_bridge: entered promiscuous mode
[  487.411049][T18416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'.
[  487.486227][T18045] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.502501][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'.
[  487.657239][T18430] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2946'.
[  487.721922][T18045] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.786810][T18437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2947'.
[  487.880345][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2948'.
[  487.880380][T18435] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2948'.
[  488.870365][T18463] syzkaller0: entered promiscuous mode
[  488.876582][T18463] syzkaller0: entered allmulticast mode
[  489.231589][T18491] netlink: 'syz.1.2953': attribute type 5 has an invalid length.
[  489.255126][T18490] syzkaller0: left promiscuous mode
[  489.260451][T18490] syzkaller0: left allmulticast mode
[  489.274119][   T42] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.274178][   T42] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  489.274212][   T42] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  489.274254][   T42] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  489.536760][T11505] IPVS: stop unused estimator thread 0...
[  489.537407][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2956'.
[  489.537438][T18510] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  489.732458][T18045] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  489.745751][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  489.829207][T18045] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  489.850365][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  489.851285][T18045] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  489.873438][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  489.906866][T18045] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  489.966671][T18045] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  490.046601][T18532] netlink: 'syz.2.2960': attribute type 11 has an invalid length.
[  490.093057][T18532] tipc: Resetting bearer <eth:syzkaller0>
[  490.229636][T18544] __nla_validate_parse: 3 callbacks suppressed
[  490.229685][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'.
[  490.556701][T18556] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  490.621466][T18045] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.648505][T18045] 8021q: adding VLAN 0 to HW filter on device team0
[  490.678773][T11500] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.678875][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.694342][T11500] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.694459][T11500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.709985][T18566] team0: No ports can be present during mode change
[  491.229054][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  491.382163][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'.
[  491.388733][T18593] netlink: 'syz.4.2971': attribute type 3 has an invalid length.
[  491.607855][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2975'.
[  491.761900][   T31] audit: type=1804 audit(1789108865.982:7): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2977" name="/newroot/602/cgroup.controllers" dev="tmpfs" ino=3105 res=1 errno=0
[  491.763116][   T31] audit: type=1800 audit(1789108865.982:8): pid=18621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2977" name="cgroup.controllers" dev="tmpfs" ino=3105 res=0 errno=0
[  491.781575][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'.
[  491.781601][T18626] IPVS: Unknown mcast interface: bond0
[  491.792499][T18621] ip6t_hbh: Not strict - not implemented
[  491.797516][T18621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2977'.
[  492.035085][T18045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.038873][T18636] x_tables: duplicate underflow at hook 1
[  492.162317][T18637] bridge: RTM_NEWNEIGH with invalid ether address
[  492.171391][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'.
[  492.278295][T18045] veth0_vlan: entered promiscuous mode
[  492.329297][T18045] veth1_vlan: entered promiscuous mode
[  492.491933][T18045] veth0_macvtap: entered promiscuous mode
[  492.513967][T18045] veth1_macvtap: entered promiscuous mode
[  492.612184][T18045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  492.676166][T18045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  492.771663][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.772206][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.772239][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.772269][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.044797][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.053828][ T1155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.053873][ T1155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.053905][ T1155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  493.106956][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.106998][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.158547][T18681] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2985'.
[  493.375057][T14378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.375101][T14378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.571456][T18703] netlink: 'syz.4.2989': attribute type 1 has an invalid length.
[  493.571494][T18703] netlink: 'syz.4.2989': attribute type 4 has an invalid length.
[  493.571522][T18703] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2989'.
[  493.578496][T18703] netlink: 'syz.4.2989': attribute type 1 has an invalid length.
[  493.578515][T18703] netlink: 'syz.4.2989': attribute type 4 has an invalid length.
[  493.578527][T18703] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2989'.
[  494.089403][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  494.097500][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  494.105152][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  494.119498][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  494.132662][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  494.533337][T18739] geneve1: Caught tx_queue_len zero misconfig
[  494.975972][T18763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.489420][T18789] __nla_validate_parse: 4 callbacks suppressed
[  495.489466][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  495.513337][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'.
[  495.997735][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'.
[  496.215065][ T5628] Bluetooth: hci1: command tx timeout
[  496.500269][T18728] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.502642][T18728] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.502901][T18728] bridge_slave_0: entered allmulticast mode
[  496.507104][T18728] bridge_slave_0: entered promiscuous mode
[  496.513458][T18728] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.517247][T18728] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.517386][T18728] bridge_slave_1: entered allmulticast mode
[  496.525206][T18728] bridge_slave_1: entered promiscuous mode
[  496.613479][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'.
[  496.629251][T18728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.644249][T18728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.702102][T18728] team0: Port device team_slave_0 added
[  496.728968][T18728] team0: Port device team_slave_1 added
[  496.918973][T18728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.927676][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  496.927736][T18728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.959004][T18859] netlink: 'syz.1.3011': attribute type 1 has an invalid length.
[  497.051694][T18867] netlink: 'syz.3.3013': attribute type 1 has an invalid length.
[  497.055292][T18859] bond0: entered promiscuous mode
[  497.055329][T18859] bond0: entered allmulticast mode
[  497.055714][T18859] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.061111][T18728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.061125][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.061145][T18728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.095375][T18865] erspan1: entered allmulticast mode
[  497.134242][T18867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3013'.
[  497.134293][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'.
[  497.152513][T18865] bond0: (slave erspan1): making interface the new active one
[  497.152544][T18865] erspan1: entered promiscuous mode
[  497.160120][T18865] bond0: (slave erspan1): Enslaving as an active interface with an up link
[  497.373754][T18863] syzkaller0: entered promiscuous mode
[  497.375511][T18881] Cannot find del_set index 4 as target
[  497.388693][T18863] syzkaller0: entered allmulticast mode
[  497.646122][T18728] hsr_slave_0: entered promiscuous mode
[  497.648991][T18728] hsr_slave_1: entered promiscuous mode
[  497.651056][T18728] debugfs: 'hsr0' already exists in 'hsr'
[  497.651076][T18728] Cannot create hsr debugfs directory
[  498.004449][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'.
[  498.004487][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'.
[  498.004527][T18904] netlink: 'syz.1.3021': attribute type 11 has an invalid length.
[  498.127471][T18904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3021'.
[  498.162415][T18907] netlink: 'syz.3.3022': attribute type 1 has an invalid length.
[  498.295104][ T5628] Bluetooth: hci1: command tx timeout
[  498.549726][T18922] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3027'.
[  498.568110][T18919] syzkaller0: entered promiscuous mode
[  498.584595][T18919] syzkaller0: entered allmulticast mode
[  498.659526][T18919] simple: /dev/video#_74
[  498.659566][T18919] simple: /dev/video#_148
[  498.659593][T18919] simple: /dev/video#_222
[  498.659602][T18919] simple: /dev/video#_296
[  498.659610][T18919] simple: /dev/video#_370
[  498.659617][T18919] simple: /dev/video#_444
[  498.659626][T18919] simple: /dev/video#_518
[  498.659632][T18919] simple: /dev/video#_592
[  498.659641][T18919] simple: /dev/video#_666
[  498.659649][T18919] simple: /dev/video#_740
[  498.659658][T18919] simple: /dev/video#_814
[  498.659666][T18919] simple: /dev/video#_888
[  498.659675][T18919] simple: /dev/video#_962
[  498.659684][T18919] simple: /dev/video#_1036
[  498.659693][T18919] simple: /dev/video#_1110
[  498.659702][T18919] simple: /dev/video#_1184
[  498.659711][T18919] simple: /dev/video#_1258
[  498.659719][T18919] simple: /dev/video#_1332
[  498.659727][T18919] simple: /dev/video#_1406
[  498.659736][T18919] simple: /dev/video#_1480
[  498.659743][T18919] simple: /dev/video#_1554
[  498.659752][T18919] simple: /dev/video#_1628
[  498.659760][T18919] simple: /dev/video#_1702
[  498.659768][T18919] simple: /dev/video#_1776
[  498.659776][T18919] simple: /dev/video#_1850
[  498.659785][T18919] simple: /dev/video#_1924
[  498.659793][T18919] simple: /dev/video#_1998
[  498.659801][T18919] simple: /dev/video#_2072
[  498.660465][T18919] simple: /dev/video#_2146
[  498.660480][T18919] simple: /dev/video#_2220
[  498.660489][T18919] simple: /dev/video#_2294
[  498.660497][T18919] simple: /dev/video#_2368
[  498.660508][T18919] TC_ACT_REPEAT abuse ?
[  499.313549][T18728] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  499.327583][T18728] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  499.337070][T18728] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  499.349633][T18728] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.357830][T18728] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  499.370990][T18728] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  499.382685][T18728] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  499.407211][T18728] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  499.571058][T18971] syzkaller1: entered promiscuous mode
[  499.571108][T18971] syzkaller1: entered allmulticast mode
[  499.637550][T18728] 8021q: adding VLAN 0 to HW filter on device bond0
[  499.670204][T18728] 8021q: adding VLAN 0 to HW filter on device team0
[  499.727990][T11500] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.728082][T11500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  499.743017][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.743118][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.060494][T18987] netlink: 'syz.2.3037': attribute type 7 has an invalid length.
[  500.060534][T18987] netlink: 'syz.2.3037': attribute type 3 has an invalid length.
[  500.253168][T18999] syz.4.3040: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  500.266154][T18999] CPU: 0 UID: 0 PID: 18999 Comm: syz.4.3040 Not tainted syzkaller #0 PREEMPT(full) 
[  500.266183][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  500.266195][T18999] Call Trace:
[  500.266202][T18999]  <TASK>
[  500.266211][T18999]  dump_stack_lvl+0xe8/0x150
[  500.266246][T18999]  warn_alloc+0x24d/0x270
[  500.266275][T18999]  ? kasan_save_track+0x4f/0x80
[  500.266291][T18999]  ? kasan_save_track+0x3e/0x80
[  500.266312][T18999]  ? __pfx_warn_alloc+0x10/0x10
[  500.266337][T18999]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  500.266356][T18999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.266393][T18999]  __vmalloc_node_range_noprof+0x127/0x1540
[  500.266444][T18999]  ? rcu_is_watching+0x16/0xb0
[  500.266471][T18999]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  500.266497][T18999]  ? __kmalloc_cache_noprof+0x321/0x600
[  500.266526][T18999]  ? __kmalloc_cache_noprof+0x14d/0x600
[  500.266553][T18999]  ? xskq_create+0x56/0x220
[  500.266581][T18999]  xskq_create+0x148/0x220
[  500.266605][T18999]  ? xsk_init_queue+0x8a/0xe0
[  500.266630][T18999]  xsk_init_queue+0x8a/0xe0
[  500.266656][T18999]  xsk_setsockopt+0x52a/0x960
[  500.266680][T18999]  ? __pfx_xsk_setsockopt+0x10/0x10
[  500.266702][T18999]  ? __pfx_aa_sk_perm+0x10/0x10
[  500.266731][T18999]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  500.266753][T18999]  ? __pfx_xsk_setsockopt+0x10/0x10
[  500.266776][T18999]  do_sock_setsockopt+0x17c/0x1b0
[  500.266799][T18999]  __x64_sys_setsockopt+0x13d/0x1b0
[  500.266823][T18999]  do_syscall_64+0x166/0x520
[  500.266849][T18999]  ? trace_irq_disable+0x3b/0x140
[  500.266866][T18999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.266884][T18999]  ? clear_bhb_loop+0x70/0xc0
[  500.266907][T18999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.266925][T18999] RIP: 0033:0x7f660d99e159
[  500.266950][T18999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.266966][T18999] RSP: 002b:00007f660e85b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  500.266985][T18999] RAX: ffffffffffffffda RBX: 00007f660dc25fa0 RCX: 00007f660d99e159
[  500.266999][T18999] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  500.267011][T18999] RBP: 00007f660da3503b R08: 0000000000000004 R09: 0000000000000000
[  500.267024][T18999] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.267035][T18999] R13: 00007f660dc26038 R14: 00007f660dc25fa0 R15: 00007ffce2855b08
[  500.267067][T18999]  </TASK>
[  500.267100][T18999] Mem-Info:
[  500.267109][T18999] active_anon:7735 inactive_anon:0 isolated_anon:0
[  500.267109][T18999]  active_file:4 inactive_file:43406 isolated_file:0
[  500.267109][T18999]  unevictable:0 dirty:184 writeback:0
[  500.267109][T18999]  slab_reclaimable:11415 slab_unreclaimable:112897
[  500.267109][T18999]  mapped:30446 shmem:1260 pagetables:1406
[  500.267109][T18999]  sec_pagetables:0 bounce:0
[  500.267109][T18999]  kernel_misc_reclaimable:0
[  500.267109][T18999]  free:1272108 free_pcp:9923 free_cma:0
[  500.267160][T18999] Node 0 active_anon:30940kB inactive_anon:0kB active_file:16kB inactive_file:173416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121784kB dirty:736kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15784kB pagetables:5496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  500.267214][T18999] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  500.267267][T18999] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.267321][T18999] lowmem_reserve[]: 0 2487 2487 2487 2487
[  500.267354][T18999] Node 0 DMA32 free:1134444kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30940kB inactive_anon:0kB active_file:16kB inactive_file:173416kB unevictable:0kB writepending:736kB zspages:0kB present:3129332kB managed:2546696kB mlocked:0kB bounce:0kB free_pcp:39692kB local_pcp:18900kB free_cma:0kB
[  500.267408][T18999] lowmem_reserve[]: 0 0 0 0 0
[  500.267439][T18999] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.267516][T18999] lowmem_reserve[]: 0 0 0 0 0
[  500.267549][T18999] Node 1 Normal free:3938628kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.267603][T18999] lowmem_reserve[]: 0 0 0 0 0
[  500.267636][T18999] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  500.267746][T18999] Node 0 DMA32: 1583*4kB (UME) 540*8kB (UME) 643*16kB (UME) 862*32kB (UME) 279*64kB (UME) 97*128kB (UME) 28*256kB (UM) 10*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 251*4096kB (UME) = 1134540kB
[  500.267893][T18999] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  500.267989][T18999] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 7*16kB (UM) 7*32kB (UM) 9*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938628kB
[  500.268128][T18999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.268145][T18999] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  500.268164][T18999] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  500.268179][T18999] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  500.268193][T18999] 44666 total pagecache pages
[  500.268204][T18999] 0 pages in swap cache
[  500.268211][T18999] Free swap  = 124996kB
[  500.268218][T18999] Total swap = 124996kB
[  500.268225][T18999] 2097051 pages RAM
[  500.268232][T18999] 0 pages HighMem/MovableOnly
[  500.268239][T18999] 428761 pages reserved
[  500.268245][T18999] 0 pages cma reserved
[  500.374999][ T5628] Bluetooth: hci1: command tx timeout
[  500.489953][T18999] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  500.948661][T18728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.206189][T18728] veth0_vlan: entered promiscuous mode
[  501.246470][T18728] veth1_vlan: entered promiscuous mode
[  501.411648][T18728] veth0_macvtap: entered promiscuous mode
[  501.430847][T18728] veth1_macvtap: entered promiscuous mode
[  501.531911][T18728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.557374][T18728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.594572][T11505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.594640][T11505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.594670][T11505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.594695][T11505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.736350][T19039] xt_hashlimit: max too large, truncated to 1048576
[  501.743059][T19039] xt_hashlimit: overflow, try lower: 137438953472/8
[  501.788714][T19042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.205302][T19058] netlink: 'syz.3.3046': attribute type 4 has an invalid length.
[  502.454727][ T5628] Bluetooth: hci1: command tx timeout
[  502.579419][T19071] __nla_validate_parse: 10 callbacks suppressed
[  502.590218][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'.
[  502.618792][T19071] hsr_slave_1 (unregistering): left promiscuous mode
[  503.194348][T19096] sctp: [Deprecated]: syz.3.3052 (pid 19096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  503.194348][T19096] Use struct sctp_sack_info instead
[  503.204752][T19096] sctp: [Deprecated]: syz.3.3052 (pid 19096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  503.204752][T19096] Use struct sctp_sack_info instead
[  504.507246][T19034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  504.637435][T14381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.637476][T14381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  504.700855][T14381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  504.700899][T14381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.079102][T19124] bridge_slave_0: left allmulticast mode
[  505.091229][T19124] bridge_slave_0: left promiscuous mode
[  505.099411][T19124] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.137601][T19124] bridge_slave_1: left allmulticast mode
[  505.145090][T19124] bridge_slave_1: left promiscuous mode
[  505.145387][T19124] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.182068][T19124] bond0: (slave bond_slave_0): Releasing backup interface
[  505.182360][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'.
[  505.209893][T19124] bond0: (slave bond_slave_1): Releasing backup interface
[  505.257459][T19124] team0: Port device team_slave_0 removed
[  505.292003][T19124] team0: Port device team_slave_1 removed
[  505.298196][T19124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.298233][T19124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  505.307902][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'.
[  505.330096][T19124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.330141][T19124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.363423][T19141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  505.371772][T19124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  505.396535][T19141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  505.404429][T19141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  505.412209][T19141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  505.421435][T19141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  505.560254][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3059'.
[  505.812601][T19150] bridge1: entered promiscuous mode
[  505.812644][T19150] bridge1: entered allmulticast mode
[  505.818529][T19150] team0: Port device bridge1 added
[  505.888516][T19150] netlink: 'syz.3.3063': attribute type 2 has an invalid length.
[  505.944397][T19151] bridge0: port 3(team0) entered blocking state
[  505.944495][T19151] bridge0: port 3(team0) entered disabled state
[  505.944664][T19151] team0: entered allmulticast mode
[  505.944682][T19151] team_slave_0: entered allmulticast mode
[  505.944700][T19151] team_slave_1: entered allmulticast mode
[  505.988598][T19151] team0: entered promiscuous mode
[  505.994496][T19151] team_slave_0: entered promiscuous mode
[  506.000460][T19151] team_slave_1: entered promiscuous mode
[  506.009630][T19151] bridge0: port 3(team0) entered blocking state
[  506.009813][T19151] bridge0: port 3(team0) entered forwarding state
[  506.400743][T19178] netlink: 'syz.4.3068': attribute type 2 has an invalid length.
[  506.400784][T19178] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3068'.
[  506.434092][T19180] bridge2: entered allmulticast mode
[  506.569297][T19178] : entered promiscuous mode
[  506.705494][T19177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3066'.
[  506.705528][T19177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3066'.
[  506.705976][T19177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3066'.
[  506.947252][T19196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'.
[  507.006959][T19196] IPVS: stopping master sync thread 16444 ...
[  507.122063][T19202] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3074'.
[  507.168251][T19202] xt_CT: You must specify a L4 protocol and not use inversions on it
[  507.276276][T19140] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.276558][T19140] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.276692][T19140] bridge_slave_0: entered allmulticast mode
[  507.281171][T19140] bridge_slave_0: entered promiscuous mode
[  507.287687][T19140] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.288036][T19140] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.288165][T19140] bridge_slave_1: entered allmulticast mode
[  507.290090][T19140] bridge_slave_1: entered promiscuous mode
[  507.448559][T19140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.457081][T19140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  507.495580][T19141] Bluetooth: hci3: command tx timeout
[  507.505375][T19140] team0: Port device team_slave_0 added
[  507.566841][T19140] team0: Port device team_slave_1 added
[  507.673113][T19140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.673153][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.673176][T19140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.681891][T19140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  507.681908][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  507.681928][T19140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  507.831183][T19140] hsr_slave_0: entered promiscuous mode
[  507.837126][T19222] netlink: 'syz.2.3080': attribute type 1 has an invalid length.
[  507.839033][T19140] hsr_slave_1: entered promiscuous mode
[  507.853585][T19140] debugfs: 'hsr0' already exists in 'hsr'
[  507.860228][T19140] Cannot create hsr debugfs directory
[  508.205131][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'.
[  508.348551][T19140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  508.498348][T19140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  508.601123][T19140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  508.715286][T19140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  508.925042][T19259] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3091'.
[  509.019763][T19140] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  509.047777][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.057723][T19140] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  509.078538][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.089058][T19140] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  509.105928][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.118593][T19140] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  509.132721][T19268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3094'.
[  509.145855][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  509.179771][T19273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'.
[  509.207192][T19273] xt_recent: hitcount (268435462) is larger than allowed maximum (65535)
[  509.303184][T19140] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.327147][T19140] 8021q: adding VLAN 0 to HW filter on device team0
[  509.352475][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.352610][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.368791][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.368887][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.550526][T19287] Bluetooth: MGMT ver 1.23
[  509.550596][T19287] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  509.573959][T19141] Bluetooth: hci3: command tx timeout
[  509.671490][T19290] netlink: 'syz.0.3098': attribute type 21 has an invalid length.
[  509.671592][T19290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3098'.
[  509.822504][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'.
[  510.227333][T19140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.378975][T19140] veth0_vlan: entered promiscuous mode
[  510.392734][T19140] veth1_vlan: entered promiscuous mode
[  510.527445][T19140] veth0_macvtap: entered promiscuous mode
[  510.555697][T19140] veth1_macvtap: entered promiscuous mode
[  510.587295][T19140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.612110][T19140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.654182][T11500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.654247][T11500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.674219][   T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.675152][   T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.829394][T19319] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3106'.
[  510.920572][  T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.920615][  T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.960875][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3105'.
[  511.012950][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  511.012976][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  511.197210][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'.
[  511.240492][T19334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'.
[  511.655455][T19141] Bluetooth: hci3: command tx timeout
[  511.686863][T19349] lo speed is unknown, defaulting to 1000
[  511.686997][T19349] lo speed is unknown, defaulting to 1000
[  511.691775][T19349] lo speed is unknown, defaulting to 1000
[  511.701956][T19349] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  511.701991][T19349] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  511.702026][T19349] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  511.776310][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  511.782631][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  511.784192][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  511.788305][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  511.790548][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  511.860121][T19349] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  512.089062][T14176] lo speed is unknown, defaulting to 1000
[  512.093538][T19349] lo speed is unknown, defaulting to 1000
[  512.298571][T19349] lo speed is unknown, defaulting to 1000
[  512.397882][T19376] netlink: 'syz.3.3114': attribute type 1 has an invalid length.
[  512.455184][T19349] lo speed is unknown, defaulting to 1000
[  512.582997][T19376] 8021q: adding VLAN 0 to HW filter on device bond1
[  512.618186][T19349] lo speed is unknown, defaulting to 1000
[  512.624338][T19349] lo speed is unknown, defaulting to 1000
[  512.629273][T19349] lo speed is unknown, defaulting to 1000
[  512.635331][T19349] lo speed is unknown, defaulting to 1000
[  512.778728][T19393] vxcan0: tx drop: invalid sa for name 0x0000000000000003
[  512.960455][T19396] syzkaller1: entered promiscuous mode
[  512.960499][T19396] syzkaller1: entered allmulticast mode
[  513.077142][T19402] bond1: entered promiscuous mode
[  513.127597][T19353] lo speed is unknown, defaulting to 1000
[  513.537518][T19353] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.545021][T19353] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.545440][T19353] bridge_slave_0: entered allmulticast mode
[  513.561214][T19353] bridge_slave_0: entered promiscuous mode
[  513.570551][T19353] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.580403][T19353] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.580576][T19353] bridge_slave_1: entered allmulticast mode
[  513.595745][T19353] bridge_slave_1: entered promiscuous mode
[  513.662071][T19353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.663017][T19417] __nla_validate_parse: 67 callbacks suppressed
[  513.663034][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3122'.
[  513.686783][T19353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.736187][ T5628] Bluetooth: hci3: command tx timeout
[  513.797714][T19420] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3124'.
[  513.860266][T19353] team0: Port device team_slave_0 added
[  513.878372][T19353] team0: Port device team_slave_1 added
[  513.895291][ T5628] Bluetooth: hci0: command tx timeout
[  514.028045][T19444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3127'.
[  514.028087][T19444] netlink: 'syz.2.3127': attribute type 1 has an invalid length.
[  514.028119][T19444] netlink: 'syz.2.3127': attribute type 2 has an invalid length.
[  514.028168][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'.
[  514.052818][T19353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.052834][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.052857][T19353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.130667][T19353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.130707][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.130730][T19353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.503871][T19444] can: request_module (can-proto-0) failed.
[  514.741855][T19353] hsr_slave_0: entered promiscuous mode
[  514.757504][T19353] hsr_slave_1: entered promiscuous mode
[  514.766011][T19353] debugfs: 'hsr0' already exists in 'hsr'
[  514.766050][T19353] Cannot create hsr debugfs directory
[  514.849475][T19464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3130'.
[  514.849514][T19464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3130'.
[  514.849545][T19464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3130'.
[  515.129659][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'.
[  515.129699][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'.
[  515.129746][T19487] netlink: 'syz.0.3133': attribute type 14 has an invalid length.
[  515.341199][T19353] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  515.397896][T19493] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3134'.
[  515.398053][T19493] netlink: 'syz.1.3134': attribute type 9 has an invalid length.
[  515.398070][T19493] netlink: 'syz.1.3134': attribute type 1 has an invalid length.
[  515.589513][T19502] gtp1: entered promiscuous mode
[  515.589550][T19502] gtp1: entered allmulticast mode
[  515.670768][T19353] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  515.713086][T19514] netlink: 'syz.1.3138': attribute type 21 has an invalid length.
[  515.786372][T19353] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  515.814906][ T5628] Bluetooth: hci3: command tx timeout
[  515.863203][T19526] netlink: 'syz.0.3139': attribute type 10 has an invalid length.
[  515.877353][T19526] geneve2: entered promiscuous mode
[  515.882737][T19526] geneve2: entered allmulticast mode
[  515.973960][ T5628] Bluetooth: hci0: command tx timeout
[  515.975401][T19353] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.034996][T19533] netlink: 'syz.0.3141': attribute type 1 has an invalid length.
[  516.113510][T19537] netlink: 'syz.0.3143': attribute type 2 has an invalid length.
[  516.287487][T19545] netlink: 'syz.1.3142': attribute type 11 has an invalid length.
[  516.326393][T19540] netlink: 'syz.1.3142': attribute type 5 has an invalid length.
[  516.780314][T19574] sctp: [Deprecated]: syz.3.3148 (pid 19574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  516.780314][T19574] Use struct sctp_sack_info instead
[  516.886312][T19560] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  516.968888][T19560] bond1 (unregistering): Released all slaves
[  517.112964][T19568] team_slave_1: Caught tx_queue_len zero misconfig
[  517.183494][T19577] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  517.198448][T19577] bond1 (unregistering): Released all slaves
[  517.247630][T19353] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  517.293076][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  517.299513][T19353] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  517.317528][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  517.356529][T19353] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  517.380856][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  517.478012][T19353] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  517.532343][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  517.643238][T19615] x_tables: duplicate underflow at hook 4
[  517.645217][T19600] syzkaller1: entered promiscuous mode
[  517.645950][T19600] syzkaller1: entered allmulticast mode
[  517.928174][T19353] 8021q: adding VLAN 0 to HW filter on device bond0
[  517.971781][T19353] 8021q: adding VLAN 0 to HW filter on device team0
[  518.001099][T19629] openvswitch: netlink: Tunnel attr 259 out of range max 16
[  518.001504][T19634] openvswitch: netlink: Tunnel attr 259 out of range max 16
[  518.026523][T14378] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.026651][T14378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.054326][ T5628] Bluetooth: hci0: command tx timeout
[  518.152241][T14381] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.152350][T14381] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.213241][T19639] openvswitch: ovs-system: Dropping previously announced user features
[  518.530225][T19648] x_tables: duplicate underflow at hook 1
[  518.615771][T19655] wg0: Caught tx_queue_len zero misconfig
[  518.625205][  T101] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  518.625370][  T101] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  518.626057][  T101] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  518.626097][  T101] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  519.172922][T19691] __nla_validate_parse: 9 callbacks suppressed
[  519.182028][T19691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3173'.
[  519.420455][T19353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.947713][T19732] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3183'.
[  520.013542][T19353] veth0_vlan: entered promiscuous mode
[  520.031142][T19353] veth1_vlan: entered promiscuous mode
[  520.069847][T19353] veth0_macvtap: entered promiscuous mode
[  520.082372][T19353] veth1_macvtap: entered promiscuous mode
[  520.108417][T19353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.126763][T19353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.134762][ T5628] Bluetooth: hci0: command tx timeout
[  520.159587][T19736] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3185'.
[  520.169214][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.169260][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.169301][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.169331][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.365621][T19743] Bluetooth: MGMT ver 1.23
[  520.396647][T19740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3186'.
[  520.423577][T11505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.423678][T11505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.578055][T19754] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  520.678367][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.678424][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.143864][T19141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  521.158720][T19141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  521.166691][T19141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  521.176977][T19141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  521.185168][T19141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  521.768267][T19770] lo speed is unknown, defaulting to 1000
[  522.201592][T19802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3200'.
[  522.225675][T19795] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  522.571572][T19809] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  522.868385][T19838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3203'.
[  522.927953][T19770] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.928373][T19770] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.928538][T19770] bridge_slave_0: entered allmulticast mode
[  522.932658][T19770] bridge_slave_0: entered promiscuous mode
[  522.938500][T19770] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.939608][T19770] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.939730][T19770] bridge_slave_1: entered allmulticast mode
[  522.941667][T19770] bridge_slave_1: entered promiscuous mode
[  522.984046][T19770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.997115][T19770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.077985][T19770] team0: Port device team_slave_0 added
[  523.081274][T19770] team0: Port device team_slave_1 added
[  523.126579][T19770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.126612][T19770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.126664][T19770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.128787][T19770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.128799][T19770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.128821][T19770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.194466][T19770] hsr_slave_0: entered promiscuous mode
[  523.198051][T19770] hsr_slave_1: entered promiscuous mode
[  523.198936][T19770] debugfs: 'hsr0' already exists in 'hsr'
[  523.198955][T19770] Cannot create hsr debugfs directory
[  523.254635][T19141] Bluetooth: hci2: command tx timeout
[  525.334340][T19141] Bluetooth: hci2: command tx timeout
[  525.762618][T19830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  525.771656][T19831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3203'.
[  525.786679][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'.
[  525.816677][T19770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  525.849236][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  525.865469][T19770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  525.897330][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  525.901710][T19770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  525.940022][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  525.979188][T19861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3209'.
[  525.981657][T19770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  526.014831][T19770] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  526.118072][T19863] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  526.127322][T19869] xt_MASQUERADE: bad MAP_IPS.
[  526.163263][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'.
[  526.197177][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'.
[  526.505678][T19892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3215'.
[  526.593295][T19898] netlink: 'syz.4.3216': attribute type 3 has an invalid length.
[  526.632649][T19898] netlink: 'syz.4.3216': attribute type 3 has an invalid length.
[  526.651241][T19898] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  526.651295][T19898] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  526.711887][T19900] xt_hashlimit: size too large, truncated to 1048576
[  526.811374][T19770] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.891475][T19770] 8021q: adding VLAN 0 to HW filter on device team0
[  526.918784][T19906] bridge3: entered allmulticast mode
[  526.933537][T14381] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.933699][T14381] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.956727][  T101] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.956856][  T101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.038355][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'.
[  527.415437][T19141] Bluetooth: hci2: command tx timeout
[  527.778814][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3229'.
[  527.796875][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3228'.
[  527.840136][T19956] netlink: 'syz.0.3230': attribute type 29 has an invalid length.
[  528.120813][T19977] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.3233'.
[  528.596907][T19770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.739670][T20001] netlink: 'syz.1.3235': attribute type 1 has an invalid length.
[  528.739720][T20001] netlink: 'syz.1.3235': attribute type 2 has an invalid length.
[  528.801218][T19770] veth0_vlan: entered promiscuous mode
[  528.869324][T19770] veth1_vlan: entered promiscuous mode
[  529.001230][T19770] veth0_macvtap: entered promiscuous mode
[  529.037391][T19770] veth1_macvtap: entered promiscuous mode
[  529.150865][T19770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.208097][T19770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.231177][T14378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.232045][T14378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.232082][T14378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.232124][T14378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.434391][T20026] tap0: tun_chr_ioctl cmd 1078483067
[  529.463234][T20026] xt_connbytes: Forcing CT accounting to be enabled
[  529.495879][T19141] Bluetooth: hci2: command tx timeout
[  529.527411][T20026] tap0: tun_chr_ioctl cmd 2147767520
[  529.620547][T20037] netlink: 'syz.4.3242': attribute type 16 has an invalid length.
[  529.620589][T20037] netlink: 'syz.4.3242': attribute type 17 has an invalid length.
[  529.640270][T20037] lo: entered promiscuous mode
[  529.640316][T20037] lo: entered allmulticast mode
[  529.641572][T20037] tunl0: entered promiscuous mode
[  529.641590][T20037] tunl0: entered allmulticast mode
[  529.649225][T20037] gre0: entered promiscuous mode
[  529.649244][T20037] gre0: entered allmulticast mode
[  529.649992][T20037] gretap0: entered promiscuous mode
[  529.650005][T20037] gretap0: entered allmulticast mode
[  529.663183][T20037] erspan0: entered promiscuous mode
[  529.663203][T20037] erspan0: entered allmulticast mode
[  529.671093][T20037] ip_vti0: entered promiscuous mode
[  529.671112][T20037] ip_vti0: entered allmulticast mode
[  529.679172][T20037] ip6_vti0: entered promiscuous mode
[  529.679192][T20037] ip6_vti0: entered allmulticast mode
[  529.680000][T20037] sit0: entered promiscuous mode
[  529.680015][T20037] sit0: entered allmulticast mode
[  529.683219][T20037] ip6tnl0: entered promiscuous mode
[  529.683236][T20037] ip6tnl0: entered allmulticast mode
[  529.699020][T20037] ip6gre0: entered promiscuous mode
[  529.699040][T20037] ip6gre0: entered allmulticast mode
[  529.700970][T20037] syz_tun: entered promiscuous mode
[  529.700986][T20037] syz_tun: entered allmulticast mode
[  529.702768][T20037] ip6gretap0: entered promiscuous mode
[  529.702786][T20037] ip6gretap0: entered allmulticast mode
[  529.707933][T20041] netlink: 'syz.1.3244': attribute type 1 has an invalid length.
[  529.709132][T20037] bridge0: entered promiscuous mode
[  529.709186][T20037] bridge0: entered allmulticast mode
[  529.712372][T20037] vcan0: entered promiscuous mode
[  529.712388][T20037] vcan0: entered allmulticast mode
[  529.713369][T20037] bond0: entered promiscuous mode
[  529.713384][T20037] bond_slave_0: entered promiscuous mode
[  529.713543][T20037] bond_slave_1: entered promiscuous mode
[  529.713941][T20037] bond0: entered allmulticast mode
[  529.713955][T20037] bond_slave_0: entered allmulticast mode
[  529.713969][T20037] bond_slave_1: entered allmulticast mode
[  529.716931][T20037] team0: entered promiscuous mode
[  529.716948][T20037] team_slave_0: entered promiscuous mode
[  529.717162][T20037] team_slave_1: entered promiscuous mode
[  529.717312][T20037] team0: entered allmulticast mode
[  529.717324][T20037] team_slave_0: entered allmulticast mode
[  529.717337][T20037] team_slave_1: entered allmulticast mode
[  529.720368][T20037] dummy0: entered promiscuous mode
[  529.720386][T20037] dummy0: entered allmulticast mode
[  529.723139][T20037] nlmon0: entered promiscuous mode
[  529.723156][T20037] nlmon0: entered allmulticast mode
[  529.728155][T20037] batadv0: entered promiscuous mode
[  529.728171][T20037] batadv0: entered allmulticast mode
[  529.731787][T20037] vxcan0: entered promiscuous mode
[  529.731804][T20037] vxcan0: entered allmulticast mode
[  529.732374][T20037] vxcan1: entered promiscuous mode
[  529.732388][T20037] vxcan1: entered allmulticast mode
[  529.740511][T20037] veth0: entered promiscuous mode
[  529.740530][T20037] veth0: entered allmulticast mode
[  529.742134][T20037] veth1: entered promiscuous mode
[  529.742150][T20037] veth1: entered allmulticast mode
[  529.748441][T20037] wg0: entered promiscuous mode
[  529.748459][T20037] wg0: entered allmulticast mode
[  529.755405][T20037] wg1: entered promiscuous mode
[  529.755423][T20037] wg1: entered allmulticast mode
[  529.757949][T20037] wg2: entered promiscuous mode
[  529.757967][T20037] wg2: entered allmulticast mode
[  529.759698][T20037] veth0_to_bridge: entered promiscuous mode
[  529.759715][T20037] veth0_to_bridge: entered allmulticast mode
[  529.765057][T20037] veth1_to_bridge: entered promiscuous mode
[  529.765082][T20037] veth1_to_bridge: entered allmulticast mode
[  529.783524][T20037] veth0_to_bond: entered promiscuous mode
[  529.783547][T20037] veth0_to_bond: entered allmulticast mode
[  529.797245][T20037] veth1_to_bond: entered promiscuous mode
[  529.797266][T20037] veth1_to_bond: entered allmulticast mode
[  529.805378][T20037] veth0_to_team: entered promiscuous mode
[  529.805398][T20037] veth0_to_team: entered allmulticast mode
[  529.817105][T20037] veth1_to_team: entered promiscuous mode
[  529.817124][T20037] veth1_to_team: entered allmulticast mode
[  529.822115][T20037] veth0_to_batadv: entered promiscuous mode
[  529.822134][T20037] veth0_to_batadv: entered allmulticast mode
[  529.828977][T20037] batadv_slave_0: entered promiscuous mode
[  529.828997][T20037] batadv_slave_0: entered allmulticast mode
[  529.836070][T20037] veth1_to_batadv: entered promiscuous mode
[  529.836089][T20037] veth1_to_batadv: entered allmulticast mode
[  529.840780][T20037] batadv_slave_1: entered promiscuous mode
[  529.840800][T20037] batadv_slave_1: entered allmulticast mode
[  529.858560][T20037] xfrm0: entered promiscuous mode
[  529.858580][T20037] xfrm0: entered allmulticast mode
[  529.862241][T20037] veth0_to_hsr: entered promiscuous mode
[  529.862259][T20037] veth0_to_hsr: entered allmulticast mode
[  529.874303][T20037] hsr_slave_0: entered allmulticast mode
[  529.879767][T20037] veth1_to_hsr: entered promiscuous mode
[  529.879786][T20037] veth1_to_hsr: entered allmulticast mode
[  529.885579][T20037] hsr_slave_1: entered allmulticast mode
[  529.909832][T20037] hsr0: entered promiscuous mode
[  529.909854][T20037] hsr0: entered allmulticast mode
[  529.913094][T20037] veth1_virt_wifi: entered promiscuous mode
[  529.913111][T20037] veth1_virt_wifi: entered allmulticast mode
[  529.919842][T20037] veth0_virt_wifi: entered promiscuous mode
[  529.919859][T20037] veth0_virt_wifi: entered allmulticast mode
[  529.927101][T20037] virt_wifi0: entered promiscuous mode
[  529.927120][T20037] virt_wifi0: entered allmulticast mode
[  529.932135][T20037] veth1_vlan: entered allmulticast mode
[  529.935038][T20037] veth0_vlan: entered allmulticast mode
[  529.938768][T20037] vlan0: entered promiscuous mode
[  529.939717][T20037] vlan0: entered allmulticast mode
[  529.941922][T20037] vlan1: entered promiscuous mode
[  529.942087][T20037] vlan1: entered allmulticast mode
[  529.947825][T20037] macvlan0: entered promiscuous mode
[  529.947983][T20037] macvlan0: entered allmulticast mode
[  529.949867][T20037] macvlan1: entered promiscuous mode
[  529.950023][T20037] macvlan1: entered allmulticast mode
[  529.963008][T20037] ipvlan0: entered promiscuous mode
[  529.963027][T20037] ipvlan0: entered allmulticast mode
[  529.969598][T20037] ipvlan1: entered promiscuous mode
[  529.969628][T20037] ipvlan1: entered allmulticast mode
[  529.982468][T20037] veth1_macvtap: entered allmulticast mode
[  529.991431][T20037] veth0_macvtap: entered allmulticast mode
[  529.998968][T20037] macvtap0: entered promiscuous mode
[  529.999190][T20037] macvtap0: entered allmulticast mode
[  530.003094][T20037] macsec0: entered promiscuous mode
[  530.003252][T20037] macsec0: entered allmulticast mode
[  530.010076][T20037] geneve0: entered promiscuous mode
[  530.010096][T20037] geneve0: entered allmulticast mode
[  530.013317][T20037] geneve1: entered promiscuous mode
[  530.013334][T20037] geneve1: entered allmulticast mode
[  530.018905][T20037] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  530.018931][T20037] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  530.022882][T20037] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  530.022903][T20037] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  530.039317][T20037] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  530.039342][T20037] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  530.047422][T20037] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  530.047446][T20037] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  530.053180][T20037] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode
[  530.053205][T20037] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode
[  530.061647][T20037] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode
[  530.061670][T20037] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode
[  530.071124][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.071142][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.338439][T20051] bridge1: entered promiscuous mode
[  530.416003][T20051] bond1: (slave bridge1): making interface the new active one
[  530.433008][T20051] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  530.743448][T11494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.743488][T11494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.744928][T11494] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  530.769634][T14378] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  530.780433][T14380] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  530.786137][ T4053] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  530.803216][T20080] syzkaller0: entered promiscuous mode
[  530.803257][T20080] syzkaller0: entered allmulticast mode
[  530.837361][T20080] tc action pedit 'at' offset 5 out of bounds
[  530.840912][T20071] syzkaller0: entered promiscuous mode
[  530.840931][T20071] syzkaller0: entered allmulticast mode
[  531.007606][T20090] xt_CT: No such helper "snmp_trap"
[  531.061840][T20094] __nla_validate_parse: 4 callbacks suppressed
[  531.069777][T20094] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3194'.
[  531.069815][T20094] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  531.150454][T20095] lo speed is unknown, defaulting to 1000
[  531.456503][T20110] batadv_slave_1: entered promiscuous mode
[  531.475498][T20113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'.
[  531.485304][T20110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3257'.
[  531.549378][T20109] batadv_slave_1: left promiscuous mode
[  531.626096][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3258'.
[  531.626147][T20116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3258'.
[  531.626179][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3258'.
[  531.737127][T20127] openvswitch: netlink: Message has 8 unknown bytes.
[  531.740353][T20126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3260'.
[  531.760463][T20127] TC_ACT_REPEAT abuse ?
[  531.767114][T20130] openvswitch: netlink: Message has 8 unknown bytes.
[  531.771085][T20127] TC_ACT_REPEAT abuse ?
[  531.829040][T20134] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3260'.
[  532.150489][T20147] tap0: tun_chr_ioctl cmd 1074025677
[  532.160351][T20147] tap0: linktype set to 774
[  532.512448][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'.
[  532.517432][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'.
[  532.750397][T20163] syzkaller0: Caught tx_queue_len zero misconfig
[  532.750677][T20163] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  532.760539][T20164] syzkaller0: entered promiscuous mode
[  532.760559][T20164] syzkaller0: entered allmulticast mode
[  532.788766][T20162] sctp: [Deprecated]: syz.3.3270 (pid 20162) Use of int in max_burst socket option deprecated.
[  532.788766][T20162] Use struct sctp_assoc_value instead
[  533.059472][T20175] vlan2: entered allmulticast mode
[  533.059518][T20175] team0: entered allmulticast mode
[  533.061020][T20175] team_slave_0: entered allmulticast mode
[  533.061041][T20175] team_slave_1: entered allmulticast mode
[  533.465059][T20198] batman_adv: batadv0: Adding interface: macvtap1
[  533.465096][T20198] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.465136][T20198] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  533.565188][T11494] IPVS: starting estimator thread 0...
[  533.654078][T20210] IPVS: using max 33 ests per chain, 79200 per kthread
[  533.690892][T20198] batman_adv: batadv0: Removing interface: macvtap1
[  533.753402][T20218] openvswitch: netlink: IP tunnel dst address not specified
[  533.761660][T20218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.021342][T20225] ip_tables: iptables: counters copy to user failed while replacing table
[  534.103832][T20231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.104046][T14340] lo speed is unknown, defaulting to 1000
[  534.104079][T14340] syz0: Port: 1 Link DOWN
[  534.133904][T20234] warn_alloc: 1 callbacks suppressed
[  534.133953][T20234] syz.1.3290: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  534.134028][T20234] CPU: 1 UID: 0 PID: 20234 Comm: syz.1.3290 Not tainted syzkaller #0 PREEMPT(full) 
[  534.134047][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  534.134059][T20234] Call Trace:
[  534.134067][T20234]  <TASK>
[  534.134074][T20234]  dump_stack_lvl+0xe8/0x150
[  534.134105][T20234]  warn_alloc+0x24d/0x270
[  534.134133][T20234]  ? kasan_save_track+0x4f/0x80
[  534.134148][T20234]  ? kasan_save_track+0x3e/0x80
[  534.134168][T20234]  ? __pfx_warn_alloc+0x10/0x10
[  534.134192][T20234]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  534.134214][T20234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.134264][T20234]  __vmalloc_node_range_noprof+0x127/0x1540
[  534.134315][T20234]  ? rcu_is_watching+0x16/0xb0
[  534.134342][T20234]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  534.134368][T20234]  ? __kmalloc_cache_noprof+0x321/0x600
[  534.134397][T20234]  ? __kmalloc_cache_noprof+0x14d/0x600
[  534.134424][T20234]  ? xskq_create+0x56/0x220
[  534.134452][T20234]  xskq_create+0x148/0x220
[  534.134477][T20234]  ? xsk_init_queue+0x8a/0xe0
[  534.134504][T20234]  xsk_init_queue+0x8a/0xe0
[  534.134531][T20234]  xsk_setsockopt+0x52a/0x960
[  534.134557][T20234]  ? __pfx_xsk_setsockopt+0x10/0x10
[  534.134580][T20234]  ? __pfx_aa_sk_perm+0x10/0x10
[  534.134609][T20234]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  534.134632][T20234]  ? __pfx_xsk_setsockopt+0x10/0x10
[  534.134656][T20234]  do_sock_setsockopt+0x17c/0x1b0
[  534.134680][T20234]  __x64_sys_setsockopt+0x13d/0x1b0
[  534.134706][T20234]  do_syscall_64+0x166/0x520
[  534.134741][T20234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.134761][T20234]  ? clear_bhb_loop+0x70/0xc0
[  534.134785][T20234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.134805][T20234] RIP: 0033:0x7f0977d9e159
[  534.134824][T20234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.134840][T20234] RSP: 002b:00007f0978baf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  534.134859][T20234] RAX: ffffffffffffffda RBX: 00007f0978025fa0 RCX: 00007f0977d9e159
[  534.134873][T20234] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  534.134884][T20234] RBP: 00007f0977e3503b R08: 0000000000000004 R09: 0000000000000000
[  534.134899][T20234] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.134911][T20234] R13: 00007f0978026038 R14: 00007f0978025fa0 R15: 00007ffdda669bc8
[  534.134942][T20234]  </TASK>
[  534.134966][T20234] Mem-Info:
[  534.134979][T20234] active_anon:6986 inactive_anon:0 isolated_anon:0
[  534.134979][T20234]  active_file:4 inactive_file:43425 isolated_file:0
[  534.134979][T20234]  unevictable:0 dirty:133 writeback:0
[  534.134979][T20234]  slab_reclaimable:11825 slab_unreclaimable:122882
[  534.134979][T20234]  mapped:29680 shmem:520 pagetables:1420
[  534.134979][T20234]  sec_pagetables:0 bounce:0
[  534.134979][T20234]  kernel_misc_reclaimable:0
[  534.134979][T20234]  free:1257988 free_pcp:13628 free_cma:0
[  534.135032][T20234] Node 0 active_anon:27944kB inactive_anon:0kB active_file:16kB inactive_file:173492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118720kB dirty:528kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16772kB pagetables:5552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  534.135086][T20234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  534.135136][T20234] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  534.135197][T20234] lowmem_reserve[]: 0 2487 2487 2487 2487
[  534.135250][T20234] Node 0 DMA32 free:1078188kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27944kB inactive_anon:0kB active_file:16kB inactive_file:173492kB unevictable:0kB writepending:528kB zspages:0kB present:3129332kB managed:2546696kB mlocked:0kB bounce:0kB free_pcp:54352kB local_pcp:28840kB free_cma:0kB
[  534.135312][T20234] lowmem_reserve[]: 0 0 0 0 0
[  534.261615][T20234] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  534.261676][T20234] lowmem_reserve[]: 0 0 0 0 0
[  534.261711][T20234] Node 1 Normal free:3938404kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB
[  534.261776][T20234] lowmem_reserve[]: 0 0 0 0 0
[  534.261809][T20234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  534.269211][T20234] Node 0 DMA32: 641*4kB (UME) 377*8kB (UME) 252*16kB (UME) 105*32kB (UME) 224*64kB (UME) 68*128kB (UME) 11*256kB (UE) 2*512kB (ME) 4*1024kB (ME) 3*2048kB (ME) 251*4096kB (UM) = 1078188kB
[  534.269374][T20234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  534.269468][T20234] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 7*16kB (UM) 2*32kB (UM) 8*64kB (UM) 3*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938404kB
[  534.269609][T20234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  534.269625][T20234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  534.269640][T20234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  534.269655][T20234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  534.269669][T20234] 43945 total pagecache pages
[  534.269677][T20234] 0 pages in swap cache
[  534.269684][T20234] Free swap  = 124996kB
[  534.269691][T20234] Total swap = 124996kB
[  534.269699][T20234] 2097051 pages RAM
[  534.269705][T20234] 0 pages HighMem/MovableOnly
[  534.269712][T20234] 428761 pages reserved
[  534.269718][T20234] 0 pages cma reserved
[  534.885531][T20265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  534.916735][T20234] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  535.258727][T20284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  535.258765][T20284] IPv6: NLM_F_CREATE should be set when creating new route
[  535.259484][T20284] IPv6: NLM_F_CREATE should be set when creating new route
[  535.431408][T20293] netlink: 'syz.2.3306': attribute type 1 has an invalid length.
[  535.557274][T20296] dvmrp0: entered allmulticast mode
[  535.694244][T20309] x_tables: duplicate underflow at hook 2
[  535.712436][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712480][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712509][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712518][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712526][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712534][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712543][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712551][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712561][T20305] tc action pedit 'at' offset 5 out of bounds
[  535.712582][T20305] 0: reclassify loop, rule prio 0, protocol 800
[  535.785170][T20296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  535.785825][T20296] dvmrp0: left allmulticast mode
[  535.811622][T20312] syzkaller0: entered promiscuous mode
[  535.811667][T20312] syzkaller0: entered allmulticast mode
[  536.186604][T20329] __nla_validate_parse: 11 callbacks suppressed
[  536.186657][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'.
[  536.255001][T20335] nbd4: detected capacity change from 0 to 127
[  536.308015][T20335] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3317'.
[  536.308140][T20335] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3317'.
[  536.311247][T20335] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  536.315491][T19141] block nbd4: Receive control failed (result -104)
[  536.325091][T20326] netlink: 'syz.1.3314': attribute type 8 has an invalid length.
[  536.656874][T20341] netlink: 'syz.4.3319': attribute type 2 has an invalid length.
[  536.656914][T20341] netlink: 'syz.4.3319': attribute type 2 has an invalid length.
[  536.979267][T20363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3326'.
[  537.450508][T20384] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[  537.472492][T20383] ip6gre1: entered promiscuous mode
[  537.479356][T20383] ip6gre1: entered allmulticast mode
[  537.682189][T20395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3337'.
[  537.712120][T20392] ipvlan2: entered allmulticast mode
[  537.712170][T20392] dummy0: entered allmulticast mode
[  537.736607][T20397] lo speed is unknown, defaulting to 1000
[  537.736690][T20397] lo speed is unknown, defaulting to 1000
[  537.778975][T20405] siw: device registration error -23
[  537.795039][T20397] lo speed is unknown, defaulting to 1000
[  537.802074][T20397] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  537.807937][T20397] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  537.807987][T20397] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  537.845267][T20397] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  537.891767][T20410] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.3338'.
[  537.891827][T20410] netlink: 'syz.3.3338': attribute type 2 has an invalid length.
[  537.928487][T20397] lo speed is unknown, defaulting to 1000
[  537.942765][T20397] lo speed is unknown, defaulting to 1000
[  537.954391][T20397] lo speed is unknown, defaulting to 1000
[  537.965675][T20397] lo speed is unknown, defaulting to 1000
[  537.980170][T20397] lo speed is unknown, defaulting to 1000
[  537.989913][T20397] lo speed is unknown, defaulting to 1000
[  538.000883][T20397] lo speed is unknown, defaulting to 1000
[  538.010737][T20397] lo speed is unknown, defaulting to 1000
[  538.024752][T20397] lo speed is unknown, defaulting to 1000
[  538.047507][T20416] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  538.118284][T20420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3342'.
[  538.127985][T20420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3342'.
[  538.224979][T20422] netlink: 'syz.1.3345': attribute type 34 has an invalid length.
[  538.257508][   T31] audit: type=1800 audit(1789108912.482:9): pid=20424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3344" name=B702 dev="tmpfs" ino=440 res=0 errno=0
[  538.397946][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'.
[  538.488403][T20440] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  538.628514][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'.
[  538.649544][T20443] 8021q: adding VLAN 0 to HW filter on device bond1
[  538.674144][T14340] lo speed is unknown, defaulting to 1000
[  538.674196][T14340] syz0: Port: 1 Link ACTIVE
[  538.720492][T20452] macsec1: entered promiscuous mode
[  538.817048][T20453] macsec1: entered promiscuous mode
[  538.944720][T11494] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  538.944787][T11494] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  538.944815][T11494] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  538.944841][T11494] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  539.422724][T20479] ipvlan2: entered promiscuous mode
[  539.427709][T20479] bridge0: port 3(ipvlan2) entered blocking state
[  539.427984][T20479] bridge0: port 3(ipvlan2) entered disabled state
[  539.428109][T20479] ipvlan2: entered allmulticast mode
[  539.435773][T20479] ipvlan2: left allmulticast mode
[  539.582014][ T2034] block nbd4: Connection timed out, retrying (0/1 alive)
[  539.584879][ T2034] block nbd4: Connection timed out, retrying (0/1 alive)
[  539.584928][ T2034] block nbd4: Connection timed out, retrying (0/1 alive)
[  539.584966][ T2034] block nbd4: Connection timed out, retrying (0/1 alive)
[  539.585605][ T2034] block nbd4: Dead connection, failed to find a fallback
[  539.585622][ T2034] block nbd4: shutting down sockets
[  539.585712][ T2034] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  539.585798][ T2034] Buffer I/O error on dev nbd4, logical block 3, async page read
[  539.587695][ T2034] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  539.587721][ T2034] Buffer I/O error on dev nbd4, logical block 2, async page read
[  539.587742][ T2034] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  539.587762][ T2034] Buffer I/O error on dev nbd4, logical block 1, async page read
[  539.587780][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  539.587799][ T2034] Buffer I/O error on dev nbd4, logical block 0, async page read
[  539.595705][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.595733][ T2034] Buffer I/O error on dev nbd4, logical block 0, async page read
[  539.595881][ T2034] Buffer I/O error on dev nbd4, logical block 1, async page read
[  539.595895][ T2034] Buffer I/O error on dev nbd4, logical block 2, async page read
[  539.595909][ T2034] Buffer I/O error on dev nbd4, logical block 3, async page read
[  539.601709][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.601736][ T2034] Buffer I/O error on dev nbd4, logical block 0, async page read
[  539.601751][ T2034] Buffer I/O error on dev nbd4, logical block 1, async page read
[  539.605639][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.605808][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.605983][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.609054][ T2034] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  539.609956][T10169] ldm_validate_partition_table(): Disk read failed.
[  539.611067][T10169] Dev nbd4: unable to read RDB block 0
[  539.614834][T10169]  nbd4: unable to read partition table
[  539.644900][T10169] ldm_validate_partition_table(): Disk read failed.
[  539.646480][T10169] Dev nbd4: unable to read RDB block 0
[  539.652395][T10169]  nbd4: unable to read partition table
[  539.849191][T20494] netlink: 'syz.4.3364': attribute type 58 has an invalid length.
[  540.058947][T20503] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  540.088443][T20502] netlink: 'syz.0.3369': attribute type 10 has an invalid length.
[  540.121293][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  540.134031][T20502] team0: Port device netdevsim1 added
[  540.182759][T20511] netlink: ct family unspecified
[  540.189916][T20511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.190421][T20502] netlink: 'syz.0.3369': attribute type 10 has an invalid length.
[  540.258959][T20512] netlink: 'syz.0.3369': attribute type 2 has an invalid length.
[  540.278450][T20502] team0: Port device netdevsim1 removed
[  540.288779][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  540.308189][T20502] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  540.541321][T20529] ip_tables: iptables: counters copy to user failed while replacing table
[  540.650235][T20531] netlink: 'syz.4.3375': attribute type 1 has an invalid length.
[  540.895717][T19141] Bluetooth: hci5: connection err: -111
[  540.978680][T20551] bond1: left promiscuous mode
[  540.981459][T20551] geneve2: left promiscuous mode
[  540.990803][T20551] ip6gre1: left promiscuous mode
[  541.231346][T20562] netlink: 'syz.3.3382': attribute type 15 has an invalid length.
[  541.231394][T20562] __nla_validate_parse: 1 callbacks suppressed
[  541.231426][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'.
[  541.271181][T20562] netlink: 'syz.3.3382': attribute type 15 has an invalid length.
[  541.278048][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3382'.
[  541.304185][T11494] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  541.304246][T11494] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  541.304291][T11494] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  541.304325][T11494] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  541.532736][T20565] syzkaller0: left promiscuous mode
[  541.532774][T20565] syzkaller0: left allmulticast mode
[  541.570451][T20569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3386'.
[  541.686385][T20568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3385'.
[  541.724085][T20568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'.
[  542.427626][T20598] tc_dump_action: action bad kind
[  542.487487][T20606] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3393'.
[  542.665255][T20608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.719158][T20608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.758327][T20610] ip6tnl0: entered promiscuous mode
[  542.766648][T20610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3397'.
[  542.775441][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'.
[  543.013487][T20623] netlink: 'syz.1.3402': attribute type 32 has an invalid length.
[  543.013532][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'.
[  543.066914][T20623] bond3: Setting coupled_control to off (0)
[  543.105311][T20626] lo speed is unknown, defaulting to 1000
[  543.107000][T20626] lo speed is unknown, defaulting to 1000
[  543.405393][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3406'.
[  543.598222][T20672] x_tables: duplicate underflow at hook 2
[  543.609227][T20669] pimreg: entered allmulticast mode
[  543.786991][T20676] syzkaller0: entered promiscuous mode
[  543.787042][T20676] syzkaller0: entered allmulticast mode
[  544.541101][T20700] block nbd5: server does not support multiple connections per device.
[  544.553514][T20700] block nbd5: shutting down sockets
[  544.587371][T20705] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  544.627819][T14378] bond0: (slave netdevsim1): link status definitely down, disabling slave
[  544.653161][T14378] bond0: now running without any active interface!
[  544.704530][T20705] netlink: 'syz.0.3422': attribute type 96 has an invalid length.
[  545.116329][T20729] sctp: [Deprecated]: syz.4.3430 (pid 20729) Use of int in maxseg socket option.
[  545.116329][T20729] Use struct sctp_assoc_value instead
[  545.269406][T20734] ipvlan2: entered promiscuous mode
[  545.284354][T20734] bridge0: port 3(ipvlan2) entered blocking state
[  545.284498][T20734] bridge0: port 3(ipvlan2) entered disabled state
[  545.284653][T20734] ipvlan2: entered allmulticast mode
[  545.284672][T20734] bridge0: entered allmulticast mode
[  545.312995][T20734] ipvlan2: left allmulticast mode
[  545.319292][T20734] bridge0: left allmulticast mode
[  545.386595][T20741] syzkaller0: entered promiscuous mode
[  545.392598][T20741] syzkaller0: entered allmulticast mode
[  545.454572][T20741] tipc: Started in network mode
[  545.454613][T20741] tipc: Node identity , cluster identity 4711
[  545.454642][T20741] tipc: Failed to obtain node identity
[  545.454671][T20741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  545.517458][T20747] netlink: 'syz.3.3437': attribute type 1 has an invalid length.
[  545.531354][T20747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.631362][T14345] lo speed is unknown, defaulting to 1000
[  546.893729][T20804] __nla_validate_parse: 5 callbacks suppressed
[  546.901913][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3454'.
[  547.116761][T20809] syzkaller0: entered promiscuous mode
[  547.116809][T20809] syzkaller0: entered allmulticast mode
[  547.280013][T20815] syzkaller1: entered promiscuous mode
[  547.286130][T20815] syzkaller1: entered allmulticast mode
[  547.385444][T20826] ip6erspan0: entered allmulticast mode
[  547.429386][T20828] x_tables: duplicate underflow at hook 3
[  547.566302][T20833] netlink: 'syz.2.3463': attribute type 16 has an invalid length.
[  547.567149][T20833] netlink: 'syz.2.3463': attribute type 17 has an invalid length.
[  547.567193][T20833] lo: entered promiscuous mode
[  547.567211][T20833] lo: entered allmulticast mode
[  547.569104][T20833] tunl0: entered promiscuous mode
[  547.569122][T20833] tunl0: entered allmulticast mode
[  547.571596][T20833] gre0: entered promiscuous mode
[  547.571613][T20833] gre0: entered allmulticast mode
[  547.572566][T20833] gretap0: entered promiscuous mode
[  547.572582][T20833] gretap0: entered allmulticast mode
[  547.574644][T20833] erspan0: entered promiscuous mode
[  547.574661][T20833] erspan0: entered allmulticast mode
[  547.576648][T20833] ip_vti0: entered promiscuous mode
[  547.576666][T20833] ip_vti0: entered allmulticast mode
[  547.577732][T20833] ip6_vti0: entered promiscuous mode
[  547.577748][T20833] ip6_vti0: entered allmulticast mode
[  547.579948][T20833] sit0: entered promiscuous mode
[  547.579966][T20833] sit0: entered allmulticast mode
[  547.580807][T20833] ip6tnl0: entered promiscuous mode
[  547.580821][T20833] ip6tnl0: entered allmulticast mode
[  547.581767][T20833] ip6gre0: entered promiscuous mode
[  547.581783][T20833] ip6gre0: entered allmulticast mode
[  547.582559][T20833] syz_tun: entered promiscuous mode
[  547.582574][T20833] syz_tun: entered allmulticast mode
[  547.584246][T20833] ip6gretap0: entered promiscuous mode
[  547.584261][T20833] ip6gretap0: entered allmulticast mode
[  547.587102][T20833] bridge0: entered promiscuous mode
[  547.587149][T20833] bridge0: entered allmulticast mode
[  547.588465][T20833] vcan0: entered promiscuous mode
[  547.588481][T20833] vcan0: entered allmulticast mode
[  547.589461][T20833] bond0: entered promiscuous mode
[  547.589478][T20833] bond_slave_0: entered promiscuous mode
[  547.589705][T20833] bond_slave_1: entered promiscuous mode
[  547.589864][T20833] bond0: entered allmulticast mode
[  547.589877][T20833] bond_slave_0: entered allmulticast mode
[  547.589890][T20833] bond_slave_1: entered allmulticast mode
[  547.591316][T20833] team0: entered promiscuous mode
[  547.591340][T20833] team_slave_0: entered promiscuous mode
[  547.591639][T20833] team_slave_1: entered promiscuous mode
[  547.591790][T20833] team0: entered allmulticast mode
[  547.591803][T20833] team_slave_0: entered allmulticast mode
[  547.591816][T20833] team_slave_1: entered allmulticast mode
[  547.593339][T20833] dummy0: entered promiscuous mode
[  547.593356][T20833] dummy0: entered allmulticast mode
[  547.596005][T20833] nlmon0: entered promiscuous mode
[  547.596455][T20833] nlmon0: entered allmulticast mode
[  547.597426][T20833] batadv0: entered promiscuous mode
[  547.597441][T20833] batadv0: entered allmulticast mode
[  547.599381][T20833] vxcan0: entered promiscuous mode
[  547.599396][T20833] vxcan0: entered allmulticast mode
[  547.600070][T20833] vxcan1: entered promiscuous mode
[  547.600085][T20833] vxcan1: entered allmulticast mode
[  547.600727][T20833] veth0: entered promiscuous mode
[  547.600741][T20833] veth0: entered allmulticast mode
[  547.601966][T20833] veth1: entered promiscuous mode
[  547.601981][T20833] veth1: entered allmulticast mode
[  547.603075][T20833] wg0: entered promiscuous mode
[  547.603089][T20833] wg0: entered allmulticast mode
[  547.608108][T20833] wg1: entered promiscuous mode
[  547.608123][T20833] wg1: entered allmulticast mode
[  547.612428][T20833] wg2: entered promiscuous mode
[  547.612446][T20833] wg2: entered allmulticast mode
[  547.614037][T20833] veth0_to_bridge: entered promiscuous mode
[  547.614053][T20833] veth0_to_bridge: entered allmulticast mode
[  547.628354][T20833] veth1_to_bridge: entered promiscuous mode
[  547.628376][T20833] veth1_to_bridge: entered allmulticast mode
[  547.638716][T20833] veth0_to_bond: entered promiscuous mode
[  547.638738][T20833] veth0_to_bond: entered allmulticast mode
[  547.645867][T20833] veth1_to_bond: entered promiscuous mode
[  547.646619][T20833] veth1_to_bond: entered allmulticast mode
[  547.649040][T20833] veth0_to_team: entered promiscuous mode
[  547.649058][T20833] veth0_to_team: entered allmulticast mode
[  547.652943][T20833] veth1_to_team: entered promiscuous mode
[  547.652960][T20833] veth1_to_team: entered allmulticast mode
[  547.659621][T20833] veth0_to_batadv: entered promiscuous mode
[  547.659640][T20833] veth0_to_batadv: entered allmulticast mode
[  547.662134][T20833] batadv_slave_0: entered promiscuous mode
[  547.662213][T20833] batadv_slave_0: entered allmulticast mode
[  547.665561][T20833] veth1_to_batadv: entered promiscuous mode
[  547.665577][T20833] veth1_to_batadv: entered allmulticast mode
[  547.668124][T20833] batadv_slave_1: entered promiscuous mode
[  547.668141][T20833] batadv_slave_1: entered allmulticast mode
[  547.670972][T20833] xfrm0: entered promiscuous mode
[  547.670989][T20833] xfrm0: entered allmulticast mode
[  547.673021][T20833] veth0_to_hsr: entered promiscuous mode
[  547.673035][T20833] veth0_to_hsr: entered allmulticast mode
[  547.678310][T20833] hsr_slave_0: entered allmulticast mode
[  547.681495][T20833] veth1_to_hsr: entered promiscuous mode
[  547.681514][T20833] veth1_to_hsr: entered allmulticast mode
[  547.684464][T20833] hsr_slave_1: entered allmulticast mode
[  547.689204][T20833] hsr0: entered promiscuous mode
[  547.689225][T20833] hsr0: entered allmulticast mode
[  547.695929][T20833] veth1_virt_wifi: entered promiscuous mode
[  547.695949][T20833] veth1_virt_wifi: entered allmulticast mode
[  547.700432][T20833] veth0_virt_wifi: entered promiscuous mode
[  547.700450][T20833] veth0_virt_wifi: entered allmulticast mode
[  547.701933][T20833] virt_wifi0: entered promiscuous mode
[  547.701949][T20833] virt_wifi0: entered allmulticast mode
[  547.705714][T20833] veth1_vlan: entered allmulticast mode
[  547.706896][T20833] veth0_vlan: entered allmulticast mode
[  547.708318][T20833] vlan0: entered promiscuous mode
[  547.708471][T20833] vlan0: entered allmulticast mode
[  547.709640][T20833] vlan1: entered promiscuous mode
[  547.709791][T20833] vlan1: entered allmulticast mode
[  547.711028][T20833] macvlan0: entered promiscuous mode
[  547.711182][T20833] macvlan0: entered allmulticast mode
[  547.712278][T20833] macvlan1: entered promiscuous mode
[  547.712434][T20833] macvlan1: entered allmulticast mode
[  547.717654][T20833] ipvlan0: entered promiscuous mode
[  547.717672][T20833] ipvlan0: entered allmulticast mode
[  547.729328][T20833] ipvlan1: entered promiscuous mode
[  547.729348][T20833] ipvlan1: entered allmulticast mode
[  547.742444][T20833] veth1_macvtap: entered allmulticast mode
[  547.749469][T20833] veth0_macvtap: entered allmulticast mode
[  547.756220][T20833] macvtap0: entered promiscuous mode
[  547.756383][T20833] macvtap0: entered allmulticast mode
[  547.762304][T20833] macsec0: entered promiscuous mode
[  547.762473][T20833] macsec0: entered allmulticast mode
[  547.771160][T20833] geneve0: entered promiscuous mode
[  547.773345][T20833] geneve0: entered allmulticast mode
[  547.781711][T20833] geneve1: entered promiscuous mode
[  547.781730][T20833] geneve1: entered allmulticast mode
[  547.786747][T20833] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  547.786770][T20833] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  547.790401][T20833] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  547.790450][T20833] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  547.798410][T20833] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  547.798433][T20833] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  547.805266][T20833] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  547.805288][T20833] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  547.810885][T20833] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode
[  547.810907][T20833] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[  547.816837][T20833] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode
[  547.816905][T20833] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  547.822615][T20833] ip6tnl1: entered promiscuous mode
[  547.822776][T20833] ip6tnl1: entered allmulticast mode
[  547.830935][T20834] netlink: Failed to add  helper -22
[  547.830981][T20834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.832294][T20833] mac80211_hwsim hwsim48 wlan2: entered promiscuous mode
[  547.832366][T20833] mac80211_hwsim hwsim48 wlan2: entered allmulticast mode
[  547.835611][T20833] syztnl2: entered promiscuous mode
[  547.835628][T20833] syztnl2: entered allmulticast mode
[  547.837325][T20833] ipvlan2: entered promiscuous mode
[  547.837342][T20833] ipvlan2: entered allmulticast mode
[  547.897783][T14374] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  547.906618][T20838] syzkaller0: entered promiscuous mode
[  547.906639][T20838] syzkaller0: entered allmulticast mode
[  548.656659][T20864] netlink: 'syz.4.3469': attribute type 1 has an invalid length.
[  548.762939][T20864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3469'.
[  551.553415][T20857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  551.813971][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  551.856112][T20918] netlink: 'syz.4.3484': attribute type 1 has an invalid length.
[  551.883041][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3483'.
[  552.010267][T20918] 8021q: adding VLAN 0 to HW filter on device bond3
[  552.089650][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3485'.
[  552.089690][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3485'.
[  552.119474][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'.
[  552.164579][T20922] team0: left promiscuous mode
[  552.166167][T20922] team0: left allmulticast mode
[  552.199510][T20922] 8021q: adding VLAN 0 to HW filter on device team0
[  552.218157][T20922] bond3: (slave team0): Enslaving as a backup interface with an up link
[  553.056278][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3490'.
[  553.116208][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3488'.
[  553.514535][T20972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3492'.
[  553.526840][T20972] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3492'.
[  553.536591][T20972] tipc: Invalid UDP bearer configuration
[  553.536708][T20972] tipc: Enabling of bearer <udp:sy{�> rejected, failed to enable media
[  553.582890][T20972] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  553.807540][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[  553.947060][T20993] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  553.959137][T20993] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  554.091779][T20995] geneve0: entered promiscuous mode
[  554.612998][T21013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'.
[  554.613048][T21013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'.
[  554.736270][T21010] tipc: Started in network mode
[  554.736470][T21010] tipc: Node identity eadcb5e46002, cluster identity 4711
[  554.736787][T21010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.799032][T21013] debugfs: 'hsr1' already exists in 'hsr'
[  554.805457][T21013] Cannot create hsr debugfs directory
[  554.813498][T21013] 8021q: adding VLAN 0 to HW filter on device hsr1
[  554.981475][T20999] tipc: Disabling bearer <eth:syzkaller0>
[  555.729709][T21033] pim6reg: entered allmulticast mode
[  555.740219][T21041] pim6reg: left allmulticast mode
[  555.780621][T21050] netlink: 'syz.3.3510': attribute type 83 has an invalid length.
[  556.007395][T21052] syzkaller0: entered promiscuous mode
[  556.007729][T21052] syzkaller0: entered allmulticast mode
[  556.135456][T21056] netlink: 'syz.0.3513': attribute type 1 has an invalid length.
[  556.529307][T21056] 8021q: adding VLAN 0 to HW filter on device bond3
[  556.971157][   T31] audit: type=1107 audit(1789108931.192:10): pid=21082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@���{�'�eW�0	��тvos�L����W\;���OղTy����N����l�(�3���b���Z�
��5E黿r6��s=kX�T�����3@���'
[  557.178652][T21103] netlink: 'syz.3.3524': attribute type 2 has an invalid length.
[  557.274663][T21103] __nla_validate_parse: 2 callbacks suppressed
[  557.274713][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'.
[  557.274736][T21103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3524'.
[  557.274755][T21103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3524'.
[  557.581383][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'.
[  557.581589][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3525'.
[  558.017904][T21120] syzkaller0: entered promiscuous mode
[  558.017943][T21120] syzkaller0: entered allmulticast mode
[  558.186728][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'.
[  558.186770][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3530'.
[  558.218196][T21126] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3531'.
[  558.286044][T21127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3530'.
[  558.689321][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'.
[  558.700115][T21136] netlink: 'syz.2.3536': attribute type 10 has an invalid length.
[  558.751566][T21136] geneve2: entered promiscuous mode
[  558.763027][T21136] geneve2: entered allmulticast mode
[  558.772972][T21138] syzkaller0: entered promiscuous mode
[  558.778903][T21138] syzkaller0: entered allmulticast mode
[  558.798889][T21136] netlink: 'syz.2.3536': attribute type 1 has an invalid length.
[  559.653895][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  559.975523][T21168] team0 (unregistering): Port device team_slave_0 removed
[  560.087600][T21168] team0 (unregistering): Port device team_slave_1 removed
[  560.388203][T21196] 
[  560.390592][T21196] ======================================================
[  560.397619][T21196] WARNING: possible circular locking dependency detected
[  560.404659][T21196] syzkaller #0 Not tainted
[  560.409077][T21196] ------------------------------------------------------
[  560.416099][T21196] syz.2.3547/21196 is trying to acquire lock:
[  560.422172][T21196] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  560.432732][T21196] 
[  560.432732][T21196] but task is already holding lock:
[  560.440095][T21196] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  560.450209][T21196] 
[  560.450209][T21196] which lock already depends on the new lock.
[  560.450209][T21196] 
[  560.460653][T21196] 
[  560.460653][T21196] the existing dependency chain (in reverse order) is:
[  560.469675][T21196] 
[  560.469675][T21196] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  560.477425][T21196]        cpus_read_lock+0x42/0x160
[  560.482554][T21196]        static_key_slow_inc+0x12/0x30
[  560.488021][T21196]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  560.494271][T21196]        nbd_genl_foreach_sock+0x265/0x450
[  560.500092][T21196]        nbd_genl_reconfigure+0xbbb/0x1040
[  560.505913][T21196]        genl_family_rcv_msg_doit+0x233/0x340
[  560.511993][T21196]        genl_rcv_msg+0x614/0x7a0
[  560.517030][T21196]        netlink_rcv_skb+0x226/0x4a0
[  560.522324][T21196]        genl_rcv+0x28/0x40
[  560.526841][T21196]        netlink_unicast+0x7bd/0x940
[  560.532133][T21196]        netlink_sendmsg+0x813/0xb40
[  560.537430][T21196]        sock_sendmsg_nosec+0x13a/0x180
[  560.542985][T21196]        ____sys_sendmsg+0x54e/0x850
[  560.548272][T21196]        ___sys_sendmsg+0x2a5/0x360
[  560.553480][T21196]        __x64_sys_sendmsg+0x1b1/0x290
[  560.558943][T21196]        do_syscall_64+0x166/0x520
[  560.564067][T21196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.570486][T21196] 
[  560.570486][T21196] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  560.578141][T21196]        __mutex_lock+0x19d/0x1550
[  560.583274][T21196]        nbd_queue_rq+0x373/0xff0
[  560.588310][T21196]        blk_mq_dispatch_rq_list+0x499/0x1990
[  560.594388][T21196]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  560.601250][T21196]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  560.607760][T21196]        blk_mq_run_work_fn+0x16c/0x300
[  560.613318][T21196]        process_scheduled_works+0xc3d/0x1630
[  560.619391][T21196]        worker_thread+0xa47/0xfb0
[  560.624512][T21196]        kthread+0x38b/0x480
[  560.629103][T21196]        ret_from_fork+0x514/0xb70
[  560.634213][T21196]        ret_from_fork_asm+0x1a/0x30
[  560.639514][T21196] 
[  560.639514][T21196] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  560.646736][T21196]        __mutex_lock+0x19d/0x1550
[  560.651863][T21196]        nbd_queue_rq+0xc1/0xff0
[  560.656813][T21196]        blk_mq_dispatch_rq_list+0x499/0x1990
[  560.662892][T21196]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  560.669746][T21196]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  560.676251][T21196]        blk_mq_run_work_fn+0x16c/0x300
[  560.681812][T21196]        process_scheduled_works+0xc3d/0x1630
[  560.687886][T21196]        worker_thread+0xa47/0xfb0
[  560.693009][T21196]        kthread+0x38b/0x480
[  560.697610][T21196]        ret_from_fork+0x514/0xb70
[  560.702736][T21196]        ret_from_fork_asm+0x1a/0x30
[  560.708049][T21196] 
[  560.708049][T21196] -> #4 (set->srcu){.+.+}-{0:0}:
[  560.715186][T21196]        __synchronize_srcu+0xc9/0x2f0
[  560.720658][T21196]        elevator_switch+0x1e8/0x7b0
[  560.725966][T21196]        elevator_change+0x2fa/0x480
[  560.731270][T21196]        elevator_set_default+0x375/0x440
[  560.737019][T21196]        blk_register_queue+0x3f3/0x4e0
[  560.742571][T21196]        __add_disk+0x6cb/0xe30
[  560.747430][T21196]        add_disk_fwnode+0x100/0x3a0
[  560.752727][T21196]        nbd_dev_add+0x733/0xb60
[  560.757676][T21196]        nbd_init+0x168/0x1f0
[  560.762365][T21196]        do_one_initcall+0x250/0x870
[  560.767661][T21196]        do_initcall_level+0x10a/0x1a0
[  560.773127][T21196]        do_initcalls+0x59/0xa0
[  560.777982][T21196]        kernel_init_freeable+0x29d/0x3e0
[  560.783709][T21196]        kernel_init+0x22/0x1d0
[  560.788560][T21196]        ret_from_fork+0x514/0xb70
[  560.793667][T21196]        ret_from_fork_asm+0x1a/0x30
[  560.798962][T21196] 
[  560.798962][T21196] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  560.806789][T21196]        __mutex_lock+0x19d/0x1550
[  560.811912][T21196]        elevator_change+0x1af/0x480
[  560.817209][T21196]        elevator_set_none+0xb5/0x140
[  560.822594][T21196]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  560.828929][T21196]        nbd_start_device+0x189/0xb30
[  560.834318][T21196]        nbd_genl_connect+0x167d/0x1cd0
[  560.839871][T21196]        genl_family_rcv_msg_doit+0x233/0x340
[  560.845946][T21196]        genl_rcv_msg+0x614/0x7a0
[  560.850980][T21196]        netlink_rcv_skb+0x226/0x4a0
[  560.856265][T21196]        genl_rcv+0x28/0x40
[  560.860777][T21196]        netlink_unicast+0x7bd/0x940
[  560.866064][T21196]        netlink_sendmsg+0x813/0xb40
[  560.871357][T21196]        sock_sendmsg_nosec+0x13a/0x180
[  560.876915][T21196]        ____sys_sendmsg+0x54e/0x850
[  560.882205][T21196]        ___sys_sendmsg+0x2a5/0x360
[  560.887406][T21196]        __x64_sys_sendmsg+0x1b1/0x290
[  560.892876][T21196]        do_syscall_64+0x166/0x520
[  560.898009][T21196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.904434][T21196] 
[  560.904434][T21196] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  560.913054][T21196]        blk_alloc_queue+0x544/0x690
[  560.918359][T21196]        __blk_mq_alloc_disk+0x194/0x390
[  560.923999][T21196]        nbd_dev_add+0x494/0xb60
[  560.928952][T21196]        nbd_init+0x168/0x1f0
[  560.933640][T21196]        do_one_initcall+0x250/0x870
[  560.938943][T21196]        do_initcall_level+0x10a/0x1a0
[  560.944411][T21196]        do_initcalls+0x59/0xa0
[  560.949266][T21196]        kernel_init_freeable+0x29d/0x3e0
[  560.954996][T21196]        kernel_init+0x22/0x1d0
[  560.959846][T21196]        ret_from_fork+0x514/0xb70
[  560.964957][T21196]        ret_from_fork_asm+0x1a/0x30
[  560.970249][T21196] 
[  560.970249][T21196] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  560.977465][T21196]        fs_reclaim_acquire+0x71/0x100
[  560.982936][T21196]        kmem_cache_alloc_noprof+0x5f/0x600
[  560.988841][T21196]        __kernfs_iattrs+0xdd/0x380
[  560.994046][T21196]        kernfs_iop_setattr+0xe6/0x3f0
[  560.999506][T21196]        notify_change+0xbba/0xea0
[  561.004611][T21196]        do_truncate+0x1c2/0x250
[  561.009551][T21196]        path_openat+0x15b5/0x1d60
[  561.014667][T21196]        do_file_open+0x23e/0x4a0
[  561.019695][T21196]        do_sys_openat2+0x115/0x200
[  561.024892][T21196]        __x64_sys_openat+0x138/0x170
[  561.030261][T21196]        do_syscall_64+0x166/0x520
[  561.035382][T21196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.041794][T21196] 
[  561.041794][T21196] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  561.050311][T21196]        __lock_acquire+0x15ff/0x2e50
[  561.055684][T21196]        lock_acquire+0x115/0x350
[  561.060705][T21196]        down_read+0x4a/0x330
[  561.065378][T21196]        kernfs_iop_permission+0x7f/0x430
[  561.071104][T21196]        inode_permission+0x3de/0x5f0
[  561.076473][T21196]        cgroup_attach_permissions+0x28e/0x9f0
[  561.082625][T21196]        __cgroup_procs_write+0x24b/0x320
[  561.088340][T21196]        cgroup_threads_write+0x24/0x50
[  561.093900][T21196]        cgroup_file_write+0x331/0x8f0
[  561.099370][T21196]        kernfs_fop_write_iter+0x3a4/0x540
[  561.105179][T21196]        vfs_write+0x612/0xba0
[  561.109946][T21196]        ksys_write+0x150/0x270
[  561.114800][T21196]        do_syscall_64+0x166/0x520
[  561.119920][T21196]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.126331][T21196] 
[  561.126331][T21196] other info that might help us debug this:
[  561.126331][T21196] 
[  561.136549][T21196] Chain exists of:
[  561.136549][T21196]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  561.136549][T21196] 
[  561.150553][T21196]  Possible unsafe locking scenario:
[  561.150553][T21196] 
[  561.158010][T21196]        CPU0                    CPU1
[  561.163374][T21196]        ----                    ----
[  561.168730][T21196]   rlock(cpu_hotplug_lock);
[  561.173323][T21196]                                lock(&nsock->tx_lock);
[  561.180259][T21196]                                lock(cpu_hotplug_lock);
[  561.187283][T21196]   rlock(&root->kernfs_iattr_rwsem);
[  561.192656][T21196] 
[  561.192656][T21196]  *** DEADLOCK ***
[  561.192656][T21196] 
[  561.200797][T21196] locks held by syz.2.3547/21196: 5, last CPU#0:
[  561.207132][T21196]  #0: ffff88807be5f0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  561.216222][T21196]  #1: ffff888076830460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  561.225133][T21196]  #2: ffff888056963480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  561.234911][T21196]  #3: ffffffff8ed9c560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  561.244681][T21196]  #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  561.255224][T21196] 
[  561.255224][T21196] stack backtrace:
[  561.261110][T21196] CPU: 0 UID: 0 PID: 21196 Comm: syz.2.3547 Not tainted syzkaller #0 PREEMPT(full) 
[  561.270484][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  561.280542][T21196] Call Trace:
[  561.283823][T21196]  <TASK>
[  561.286753][T21196]  dump_stack_lvl+0xe8/0x150
[  561.291355][T21196]  print_circular_bug+0x2e2/0x300
[  561.296394][T21196]  check_noncircular+0x12f/0x150
[  561.301346][T21196]  __lock_acquire+0x15ff/0x2e50
[  561.306210][T21196]  ? __lock_acquire+0x6df/0x2e50
[  561.311154][T21196]  lock_acquire+0x115/0x350
[  561.315663][T21196]  ? kernfs_iop_permission+0x7f/0x430
[  561.321052][T21196]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  561.326870][T21196]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  561.332683][T21196]  down_read+0x4a/0x330
[  561.336840][T21196]  ? kernfs_iop_permission+0x7f/0x430
[  561.342221][T21196]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  561.348038][T21196]  kernfs_iop_permission+0x7f/0x430
[  561.353255][T21196]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  561.359073][T21196]  inode_permission+0x3de/0x5f0
[  561.363934][T21196]  cgroup_attach_permissions+0x28e/0x9f0
[  561.369573][T21196]  __cgroup_procs_write+0x24b/0x320
[  561.374774][T21196]  cgroup_threads_write+0x24/0x50
[  561.379813][T21196]  ? __pfx_cgroup_threads_write+0x10/0x10
[  561.385539][T21196]  cgroup_file_write+0x331/0x8f0
[  561.390485][T21196]  ? __pfx_cgroup_file_write+0x10/0x10
[  561.395953][T21196]  ? __kmalloc_noprof+0x38c/0x720
[  561.401007][T21196]  ? __pfx_cgroup_file_write+0x10/0x10
[  561.406473][T21196]  kernfs_fop_write_iter+0x3a4/0x540
[  561.411763][T21196]  vfs_write+0x612/0xba0
[  561.416016][T21196]  ? __pfx_vfs_write+0x10/0x10
[  561.420794][T21196]  ? __fget_files+0x2a/0x420
[  561.425397][T21196]  ksys_write+0x150/0x270
[  561.429734][T21196]  ? __pfx_ksys_write+0x10/0x10
[  561.434595][T21196]  do_syscall_64+0x166/0x520
[  561.439201][T21196]  ? trace_irq_disable+0x3b/0x140
[  561.444229][T21196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.450301][T21196]  ? clear_bhb_loop+0x70/0xc0
[  561.454987][T21196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.460887][T21196] RIP: 0033:0x7fcefd19e159
[  561.465305][T21196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  561.484914][T21196] RSP: 002b:00007fcefe060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  561.493337][T21196] RAX: ffffffffffffffda RBX: 00007fcefd425fa0 RCX: 00007fcefd19e159
[  561.501316][T21196] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005
[  561.509296][T21196] RBP: 00007fcefd23503b R08: 0000000000000000 R09: 0000000000000000
[  561.517270][T21196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.525244][T21196] R13: 00007fcefd426038 R14: 00007fcefd425fa0 R15: 00007ffd5479d0e8
[  561.533232][T21196]  </TASK>