last executing test programs:

2.115197214s ago: executing program 4 (id=4396):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x7)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$kcm(r9, &(0x7f00000021c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000100)="9f05a6d6014fe24acf5c25dc3a50e82195965f0e4d5d7e0ec4fd5289ace42d777c0c853b41", 0x25}, {&(0x7f0000000240)="90650b144e95d24f910cdb353e10594c505b06177ac98f99b6533e86354e232799ec2a4a73ae63292823c59a8d08f0d37af69877f298b4372ecb19d5a2c5eecaaa33a7fea24a8a481f4dfbe3dd0cfd579de629ca52ad860b12ebff9277ad8543b9b99d0e61a307858e4350b726d2cdaed503dc0e", 0x74}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000001dc0)="e868c549e34988654128bb302fa5d433466d578d9d5d8a28bda4e92dcd8a643c3199de4a53ea8db32545e3e8d374a259a3b2d28fb2aabab265b0a940d5f21ce4bf2f09fe389175e60d3ef9b023778f19ef3435246beb0d571b833f61214b441cee47178547e3a16eb02b922ca515239753515d81005a8d0fae0f2526f283821123848d982acf3d44e260118a8afc41ffeb222569a18bc0dc7b18e829cf15c09eef4753147c1b1c7c87c01c3adc2957e30a11f6565c15773f36f826ed825b584d38c21fc772947dbd412b9647", 0xcc}, {&(0x7f0000001ec0)="db4ee6a2f0566116108f645f9a1858f6d6bf1ec9d23881d7f8fc21b12ad284c9bfd273554688dfd0d891503c921eb610919214d9350908a54b92a9b9377f2345d59778b9129557830913914c29951d28b96a3a684591a6272a87c70267955c6188674b967bc61cc063bd2fe0f739f485574a1a5ac9d100a31bf1d52c28668d5e919db51bbe7e1cc102320e9eb7fe2a25e7d90c7cc4ea7e7f88bed51bc29e4580f21be293e17b47af39a25bb422962ad953ac1202295737779a3969f338cf4484af464d81fff5b17373eea7a79609e16b26d8256d0e57d2818fcc357c8503fdfddc087899534e74c86ad56383ce7804a74392c6238d", 0xf5}], 0x5, &(0x7f0000002040)=[{0xb8, 0x10f, 0x100, "402053b46bc57c83b14756f051e9113ea1bc36e0a7c2a1d5c51a12cb603adb49c0908e343b91315cdb9310cbf7975e092689d3ab1fc4fd48188bf0aeed946cc8449de274ec5b019c7fc585c44544cd79c04564bd995fd580ac7526abba2c1f4006b4946981099f3c3510c7c94d7e7a6b1fb77797421f0ef88c3b64f579f895502a0a4a127308619ca7bec75946f963feff080682022bee3ece5cd25e6c55319a1a22"}, {0xa0, 0x103, 0x7fffffff, "f92ce6cc08fad57f8544889639837d067ea1b5d411e9dd4be2a9c92bec2943de504cb9916a9880b1e758ca0e98fb5a5b0d49d9fa642a9d130b979ed1471aeb241ffee137efe37995689029e49c9bfb95f04723e80d84002862b0e08457893e665d77cc105e9897ccd7060dae8955dc740e7be02c7d135bc0abcaa4dadbb1baa78ef0c6dbad0bbbfcad6c38"}], 0x158}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2.091636336s ago: executing program 1 (id=4397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x4004014)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

1.912269415s ago: executing program 0 (id=4400):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_crypto(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x10, 0x1c4}]}, 0x10)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r3, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001a80)=""/4125, &(0x7f00000001c0)=0xfffffffffffffeba)
sendto$inet(r4, &(0x7f0000001100)="c5fcfc1da6b2f0ffc27f3c8bfaa20a2e96cfcb59d47b05f4afc4691aecaf70adc579cbb5ea1ec94cb33691cdbdc03cdf4f610608989df1bdbe59e7eae56ab939da82f4f2e662059dc64f5bdab382b26eb1480c51a6f18b3b00d89081a810c2661e05afd95a180d85005446207d38244e017eb37dff44b05531fdaea64a2d2a6ef31f9d9e222fde5e5f06fae7b89367030a440b80389bde1a9fe6e8081f3ecfc43bc2f160fc0d3cbfef3f19089e919e24e4977f37c1d0e21b5c520f2e948bced5e19879d5ba1fdecb2aa536418d8aee6a7390c996", 0xd4, 0x1800, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r8)
sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001080)={0x54, r9, 0xc0f, 0x70bd29, 0x7, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xe}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5c}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40)

1.600714334s ago: executing program 0 (id=4404):
r0 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xffffff01, @mcast2, 0x0, 0x4}, 0x20) (async, rerun: 32)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32)
writev(r3, &(0x7f0000000940)=[{&(0x7f0000000240)='g*', 0x2}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000088)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a010100000000000000000200f74cb69f466cfafffffffe0900057a47cf7a608280079652709543a5ddfbf045218dcfd086c6865cf36144f160c52b699b728336e35f1f2cbc75a5afb4a6621edbcb"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

1.442495357s ago: executing program 2 (id=4405):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000070000000a0000000300000004000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000540)={{r1}, "6bbc381e3c4bbd80b1d57a7890980a16e20bafead4b9432bc27176727ec6aceea6759fb229870d36ab4e0fa09322c3d3e758661187f4c6c1667dbe2723b8c9403b7a7ad458e0612022777c1282b7429b6ef13100b5fee2757fb7b9fc84a73e940b31a306eeefd6a525dffc9037940ecf25c88d755960490c385e5206b5850a573e68adee932b2e9fd487685552a7d7dbfb5251a06f2b0a54d59eaaf794a08b4027043ff4301906283df6ea81e1b5ea0a6e517b9a9805f2e5e817670b1b110de41e5e679109609c2abfa69775d799a2f1fd96623428f84985654ff7e9ed3965f8db78fb0e9e46d6c2f78e9d75b3bc6b4c04cae2c73f72d30dd00d727acab1d0a4239f31c7315ad217364254f2f6505ef3330532f8c7f124078d9b3927103d4841f8e43fc1883f704de01bcf9d4a7ab5059b24d1ab3f6e842770cf67c5be8c76f9de7dc8e13957ef0d46d0fee69ae3ea27974d646b6d615045f6f50546bf15ec77db78c9d4a05b4af3b60fa7c87b41186f76a761d84fa45820c2bc0023014d9c58372fad266c579bbc69d3c7bd8b676c445d53b6a81ecff31b5611df599ca0523a718ad1bc3b1868cdc76a04269118187b14f30844467ad50f982fd3f01929fc94e4f3de50fb0323af61f0e24f5b820a3527e7489d91af4f11b6eb09f3c67cdc8e340c9f1937b29a8e77d461debe60d122aa3bfa39000b6a51e56224b531414c1a9ecba5d50d05619c39a24018967c5fcb9de1a827d81856123e11b92c2dbf44cb54c6a9ad78cab69cde00eac4eba9cb8597d7750fb0b21dc3c29f9c5f6b1291f8f370c57c9d5e1a0b9ed601b916b6e77b506456449ecca4318aca53a096616456e3cf6ba0b72be2011a716e95dec92bce838b639d8de3860c642c82268f282fbee515598a5f5ddb036ed25c9445c42083b19d40341a3319023927faea7555a8a7bfd8280e887fef1692d2246110de3cc12ba38a87ba1d8de785806689cdd0ad24acb7f9f6331d1ffaef94bf0b8428f9215d726837b1450f5b0db3f697d466d9499dd4d6dbc9c04f24991e405b9b9d57d7e086ad0e444207702d22cbf67e4aa1f827ea2f2b530733a848d0e3066a1c4bba6c19653edbffea49b4a0ae5b29a3607e2a0573b288744215b8d68790c6cfb04162b7fad2a6c2501cebd5ead7fe51a1a6fd92e513568774145260144f1bd65e96c2d63704ef716cea181150cb6be75a0b1a822b879e71e4db73debd4af1f455975b15c83292db326f9d54987ed2260a24b3c24cecddfd31672833cacda0442dcbe2b6c199f9e4844bd3d6971b21bcbdff00797f798b09415fd3370e95ce5f7c3ff424449570d9c4e60b9819e376fd561839f5772be2051044f72d49e2cae63f23cb0d8f499b8c3ee2b6efb7c058208131500b98d48f4c01792fd57082ff40ab379c547df4abbddba5367977dcfbedd8c962b242e826ac0fcedb31495c0e97c5b5ec2f2e76a52816ccd71cc0fc3066b030ad4a6a6041feaf4b3996ef09de34d8886672a20562d886f800c1c94d0ca25ee54d01d132844051c8f04db3a837cf734be2f7cce61fc0d859777615459068f1fd6168ac4509500da58d5829e747cbb2f8edc3aa049ff58322ed2d0aea0935c0aa5e05c241fd49781170871984289eaca2fb28d2fc9efbc1f306c49335df313d213ca8335ff813ef2322d490aed108370e6357be1e46303bcb2a26d8a4f632b55f0f60c4fbc153dadf577a2df7ada2cbd9a39d93040f691275717a53d80afaa424392598efa7768fadb41384fd8578a432cf913fb208a84e3ba12abfe6d7a7e86a10c46305749bd36e785ada88bb38ae046cec39fd06b494954e41ba162cbbbb716de6266293c52206609727452529880ea216821ca6515abcff302ec46fb77d765d3c4e6cc5b1fc2017411c64eb647a3f6bfa0f16758cb17eeabc4332f2d9c89a3512221fed5268212a5a7c7f61dc225e17c7a68745f49ac2463bb4538aa84addfd60763278e10b3cf974bdd0baba76236259d768044d6564e65a5e18d5c945a934e13c2883121013531a13af0c3ec7fff774ac23d064fe073573a0fc952c1452918fde5c902a0bafa9e870c9994cca1174d89357d6f4c27834f0f9001eb8c67f9cef8a710240d13aa93b47f31d38c686dbfbbf91d32bc263844b2ea5ba4377a4ac4e0bcbbc49082273afbf8e4653e7dd8e545ad3de3981df06923e51851150e8f9e4181c0217f88cc2982485fc6cde877ffd2fc1eed2a7d9f618578066a65bd8193aeb1168a7ca8a926fb32d051aef1acbda31f929a05732998e1d1852c32ddcf1ade335c3845a8cb0331852c9b88eb4ca6488c847041f403deb57ace5120cd0a98228e786f440d459364592886331b04fa065d80bfeda0bfdc3c2ca73199fc424338b5ca9551556b19a0396e8491527a101c85be95c6c87896860a417fe3b2967a4bab674de0a8b605e5ae8c8482501163b937d52144df9dcb4d279ff5af62816361991a14f0533ff4e75219eca5ac2a86eec286cc334d7ff3c7126255a59022f0e5ab7a4c24ee43714fa00adf252dbfc6a6d51fcf81533484b54b6c0fbb3f73e534f1b26b919d95a3489ebf351ebf3868ce92786148c6a0615712f7fa19118ac17ecd6377e7f5bec7a15ddf80ad92a6a59edf3bab7e36bb452558ad5ed85ffde2ee0a594fc0fd08d7317d95001c79ac92babeae9581aa9ce6b4a450d8429fc9af0c61c8d6a0b7fd765307cd66d21afe62b9ece39e1b13f0487fab54a05da8fed9d0c2b8a071ff14c1928ae2eed580abf344a01e85ad40012f5ccf66fb0e44a39c420b6ae517d97e206e8c2803a5c52f00e2bffab0ea051c614b2e591122522628c6d0b5f5d50476e99858d34767d5881ee9f1dde06b3ec8e5e664beae3748fa4e497703b7dd688f213eb7e64ed5a5177dc312b1ca3ca8358d8118f2cc245e36adac7fd7c07a7be1bb915ed028b0d27cfd1ab2610e9314dc95334a8a4bad088e310feeb68574f35a64e098e6845286c136ba9c002f9e103a71b1fd02070af85797524aa3dc3d9561b74e09bdebdcb14543902bede16dc1562cbc59deba1eac17fe147ae02e2e4dc41f2f047b2ec0ba8f9cab1b4ee354301982fe5972331463ae9d13c0675036b44afb7b400d03920a6691e9736cce13ab8806a327a715cca49b8a3690d8542e684342b4896aefe65aeaec28d67bbcd92bb8339b3ced58d0b05d418f6b1f4ece2f9870ba63a49c2c275c3c864790a39694d0a3063f8a6d33aa18c0d4a4973f45d658691f54e94ff0b16906d3f80cca8055ff153b7037c9f16c2f53193a509272e2ae2b3c0d9d851c45b1efe581911ca018373ee331547f9b3245ee9624c75151d319c3f74d373ff7c78f7d0396bae9d2f4e7217742ee9c148577a6e234e8251de1918a11bcdc2724cabefe6c720a252f622a16f2aa19791b40967a3552978f7ef364aecb7b8eed695704e6808cdc38f4cebf2b32170e84304b8c0e5a1e8326d90307bae0cdea1fc5cb194d7c5f6be596f209604428aed5539fed449c32c33dbb2c72c9743827b39f79374648d5365a0ecb4ef7e70551bd8fa009e74de1ad1c64c6920b3b6893cf73df13072e62f93a62ce78182c1f0402351b013d0f3ef802a2bb66732de92e6fedefad5d60e33a347f46f5b528864ff784a44dbb123edd14a40e766d916383dd8f207d021313fb3aa78f53e959851ebfe7426e88c0ab87762116f1cf87b678bc4523512fe0741532801ab8f028a5fb7e88f215d8e4075e8852522625e95d91c4313bf33ac9940f14dd537f12931488f0755b785b7e44328491012dbb75c2d2ca4b884da12ca6513a945b9897e945c73bf5f79814c53712512c5f339fb4189b611b0182469a6a4e21471384b9a7e2d4f5081d526b98102b998af8b9476a02047b8698d38d708a2430ff11493f1342e2465fb7674bc128f36497c2da7e0c623412780f3cb4f29cd5015c7e599064bd9bb823127c36d795c33ffeadb9e3682912a60cabbceab06bfd0bbe2ab2099ad50efb048969d3fe494768acb299ba3e836636427f9076819debb6406c32119a7ecc648dec71fc6d3262b96a4ff01e5d0e214ae7438ef4d0514f2e0af1ba080f1223ac666de435d477a36b08e873d84511e5fc2fe208e9d0e0d1eeee5167519611279320609f0c651a2681f77b8eab102099a536374b5ded1f60d29cc84000ecca426e0c9176e3d5f407a30dae1f8fe52085bef385649bab7020e5461370aae2a2b4bfe682b8648b728f5c12d89d9676840a09bfb71bcedda2454b0ba51fabf1737b2fcc1d1318d00809932463b014baa2305b9d649df7d8ad51f83356fe0c950af6746df41d96d385c3be0464293a6e4ecd61734c6fe896438b5a31f80e0e1c070e6635f9e0592d7399b83830f42641c288ae643bdfa2a934a35623fbba70cf8030f5d65c56ee683eaa408cd2677d7a2e3e3033a0f3a06f666cc587d2582c2d51006655e8708e23c863f1d96164d7e13d72118c03bb55290eac22b20e9dac5e95097a907dad1b18be0575ed54bf08c529feb6b39d62a2105054de014b64d8302ed080e7a4b00bf9648581e99e97c7c7558697816db15757fb2697cdb6ae4825d09f0eb1196e48a30a0883377c395a087466f5fbe9cd71f88a876cbf91eb20bb0f748f6528129a131026d65c2960857ec43dc6a819ce4fcf2132adeeccfba96a71de36533579632eeafe8e4766e6a225307c0175f03aa7f111b70ac1991dd11d3343d57ec5a7f808b1dd0642eb4f78001082950f197760d341a498c9717017792408e855db8790dbaca94b28fe69b6e2f3a2a8f51301597b3d3006ced672dc2b15d66152afe7cb3622965b7341c5b04530071d0212d320fa20d4122c8b6b0facf028869af5d7b9ae706758d54bb8cc3fc4cb5bea30e42ea9046445d21f764987818e8c933599dfd47319bf1e0159c1d66179c7c46699805d488280839396a6d9eb01ecf5759395cf0b563f70418ef35a1bcccee0b9f33f3974e8e6d4aedddf7b300787569af6328c2f1c8ed83e4d0b4154a4bab6a0860fa983e2c3ae9c2a4d5fc1223a682efda433c6d4304c0e4cd0c9e030d1cbb7c124e35fc04491b811c944e9f062942e64c62a807dd9d35f3f9455274cf39c9a94859a4e0ce8bb629730eb8b304eb222325768ece4d8fc79962ac9b98fa65cf3c3503e2d94dc92170b0ec1d96810ad02b9e4df3efb446ae800d12ae87759adb2988e0ec18cc853814fd1c743a64d16f26bf0a483e90c5310b1bcc2359e9cc27aa880fe41c68b449fcc884c70baa1b8411f4c6d5344e128499ce077c5b1c23d96d5f9364148a191662d7722e6c7cfb044f4cd48c13a5bf1f87b87e45c0c8de0b0dacc947b2e083e0dfded8863966d3c9dd51bed3efac64b83b792f969e6cb24b94d1692e0fd1dda4d167d3a21d59c5f66bc7f643f15dc624663f1a2d658b3a82976459f6a5e91f6fa4672b168eee1eb2a00742efbd2f7c0db122a3dabdffc4c61a06d50a1ed2d6bce8fea93d9a6a22baf24a795c12469021be805f51951e85870620178ab8ad3a5f812f0ac97efd2dbc666f23b3cabec4378b9303f4deaee00e7babaf69639ccdd88c91e046ecdf61f55aa913febc7dfb392f95ff249e8a5669e534f32592ca28dc3383ad0db2df4784a0b743d978cef89be56af7bff29bfc4b99a8a899d6a03b79b25b8065e37146215621c2bdcaccbe3572672b72a03c9e28375eefe2cd356e76cf828781cd29783c87a793d0bc3f343f6ca2da253cf809e20bc7e104174dce5b1d"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000000000080009"], 0x24}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffe1ffbbbbbbbbbbbb080045000058000000001000907800000000e0000001248081000000001010000800000086dd080088be00000000100060000100000000000000080022ebfffffffc200000000200000000000000000000000800655800000000"], 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={<r4=>r0, 0xd5b, 0xc, 0x4178})
sendto$ax25(r4, &(0x7f0000000180)="e2b8894c3053c6947c72753ba174624a5c84cebc6d1e2c8ecd0dd79ab9aaceb4a51fb814da455320e2a2fa07f0c65add53b74601d1c1d2d2e3541625a80b3db34ef4cc483324ac3d4eb32989ad798e5bc2c1732192c13edf1e460718af84b9a4991d2641ef694bd2888e40fc6c27e9e79c984e1c4fbc86c40a07da7e4c70a9360dda8a4f04d3338edc65d671abc4e741a72d72936779919ba6e16a995122c4968baf3970893107f06ae6d0577c1ad7d29d165329d1672a25504e64a2410d6b7cf62e25e31815cab21d3a673a9eef7b63fcae242b181eb70d199e932a40ef3f853b07f0dd7ccc173660424eb546", 0xed, 0x4048000, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x1000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r5}, 0xc)

1.441589016s ago: executing program 3 (id=4406):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8522}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048818}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000045)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private2, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f00000006c0)=0xe8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000001300000129bd7000ffdbdf25017006074e224e2404000000ffffffffff0f0000020000000700000021010000afab000001000080", @ANYRES32=0x0, @ANYBLOB="2a0000000300000003000c000897f7c12a058f66bb9b7a11ab41b694ac2847a2159e8a7f1879c50600000445617f782fd45879c91953a7688a8e745bba34bcda1acc9272f4f800352d845bf600000003adbe17d804441f960f16068fbcd6d7901d04b69119222244537a730018b1149daee8c2c89a86f7a721aaa751abf8e41ca7e4b6810e2747adfca31562803168f525523d71c27e775cf075a2a650e3433b9243"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)

1.440563945s ago: executing program 4 (id=4407):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000300)={<r1=>0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x210000, &(0x7f0000000240)={@align=0x8001, {0x6, 0x7, 0x3ff, 0x1}}, 0x7c4d, &(0x7f0000000280), &(0x7f00000002c0)=0x10001})
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x8015)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1dc, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6f8f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5451}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xee}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x2000c004)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000800)={0x80000005})
r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_O_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000980)={'pimreg0\x00', 0x2})
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}]}, 0xb4}, 0x1, 0x0, 0x0, 0x15}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x767}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x12)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r4)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80808c1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x28}}, 0x1)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ec0), r1)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x39}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x862a31954a05e074)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r8, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x19, 0x9, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), r1)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000015c0)=""/4096, &(0x7f00000025c0)=0x1000)

1.387462608s ago: executing program 1 (id=4408):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x3})
sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@get={0x108, 0x13, 0x400, 0x70bd27, 0x25dfdbff, {{'drbg_pr_sha256\x00'}, '\x00', '\x00', 0x2400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x81}, {0x8, 0x1, 0xffffffff}, {0x8}, {0x8, 0x1, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008050}, 0x4040000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x101, 0xb}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5898cbe0bdff7948}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000540)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000780)={{<r5=>r0, &(0x7f0000000580)='(#^#\x00', 0x10000, &(0x7f00000005c0)={@align=0xfffffffffffffff7, {0x8000, 0x6, 0x7, 0x3f6}}, 0xff, &(0x7f0000000600), &(0x7f0000000640)=0x319}, 0x1, &(0x7f0000000740)=[{0x3, 0x1, &(0x7f0000000680)='nl80211\x00', &(0x7f00000006c0)="f34a4b756b0a05b8ac08dcc7efd6e9b2d0258f81ae868f5ed3d0828403d66aeda62e74509d236a3dd0c0b6ac7108230525b9a654e8dae2ecffdff011a6a765c56d207327afbc35fbf76b6c8dc57ac7f36a3520a08c454bbbd36c6e9e37", 0x5d, 0x10}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x104100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@bridge_getvlan={0x40, 0x72, 0x20, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}}, 0x8030)
ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000000940)={0x2, 0x0, 0x2, 0x2, 0x7ff, 0x8})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r5}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x44)
pselect6(0x40, &(0x7f0000000b40)={0x1, 0x2, 0xf, 0xffffffffffffff46, 0x28222f36, 0x4, 0x4, 0x4}, &(0x7f0000000b80)={0x4, 0xf, 0x4, 0x9911, 0x5, 0xfffffffffffffff8, 0x30, 0xa85}, &(0x7f0000000bc0)={0x0, 0x32, 0xf, 0xe, 0x6, 0x8001, 0x0, 0x7fff}, &(0x7f0000000c00)={0x77359400}, &(0x7f0000000c80)={&(0x7f0000000c40)={[0x4]}, 0x8})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x94, r3, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x40081)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000e80)={&(0x7f0000000e40)=""/41, 0x0, 0x869347b4efdfb409, 0x2c, 0x6}, 0x20)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0xa48)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4008041)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r5)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001240)={<r12=>r5, &(0x7f0000001140)='NLBL_UNLBL\x00', 0x800, &(0x7f0000001180)={@_ha_fsid={[0x9]}, {0xb4, 0x5, 0x63}}, 0xc, &(0x7f00000011c0)={@_ha_fsid}, &(0x7f0000001200)})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000001280)=0x2, 0x4)

1.374624811s ago: executing program 0 (id=4409):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0xfff7, 0x2}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0xfff7, 0x2}, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

1.315346772s ago: executing program 2 (id=4410):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x4000014)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

1.21790105s ago: executing program 3 (id=4411):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.20285304s ago: executing program 4 (id=4412):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r0, 0x100000000)

1.154658209s ago: executing program 2 (id=4413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

1.082287154s ago: executing program 1 (id=4414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (fail_nth: 1)

1.064033741s ago: executing program 0 (id=4415):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x6}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

933.827111ms ago: executing program 2 (id=4416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x92}}, 0x0)

933.451766ms ago: executing program 3 (id=4417):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc)
socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc)
socket$netlink(0x10, 0x3, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

655.298535ms ago: executing program 0 (id=4418):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x54, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x40, 0x1, [@m_skbmod={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={<r1=>r0, &(0x7f0000000100)='skbmod\x00', 0x42, &(0x7f0000000140)={@align=0x5, {0xddcd, 0x9, 0x5}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000002c0)=0x8})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'macvlan0\x00', 0x1}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

654.035203ms ago: executing program 4 (id=4419):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000003c80)=""/4106, 0x100a}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3}, 0x1801}], 0x1, 0x10020, 0x0)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x80000000, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="1f49717aae46536ec821dcc0400609caa2d3bdcb2791df96f030292b548a118ce278339ec0", 0x25}], 0x1}}], 0x1, 0x8020)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[], 0xa)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="3d922ff13e7261898cadbdd585c81401bd40927cf0b0d6d4c6ba33910b5addf2cdd7bd6fb03312dbdd861c0229fb4540d8c1f6f7141e74c219d025ef61a2e19c22cd3f8ea08b28de8818b16d1131b69879d1f3047069c9de0c5273d6a26289f43e238e150768f175", 0x68}], 0x1, &(0x7f0000000480)=[{0x108, 0x1, 0x800, "5a67ac33cf86bb7146a1bf29ed8af649d8919ad846f29db7bcda1d839ec4e73477fb49b059eff5bfc851410dfd5835e1eb005997198e5ccfab5a1823a6d9b8cc1cd2ddd3a7219230eecea17e71b4211766ee89ca01ef9546f92e39c081711a8d5ac74edf8d1cc72639ba6b2bbea4547299d4872e4d82dbd9c0b90bcb617335f0e9a60d6677903cca3cdc3f55a5e4660cc3dc08151c3c9e19f2d20f481db3fe16e5da20610180517a34fcb1fd37ba2762a9ae32a0ff70ee76296c39852e12ab5aa00562c8bd19188e99463bd4554e07c721a2eaf79b14689564a221b2230706c803834d047d8871c98a28d5fbf577276f4859085c8389b3"}, {0x100, 0x111, 0x0, "86ddc93b07101d60c83e823496cd7710a857e7a02d06a10ea2aa7302cb09e815261c2626f6477dbb50a82c15cfa1b58af4813d36b55796c19793a61168ed8235a4593fecfc0eed6b43d28d5314a755614c9f2cfe4e8c33c7bda97547ff4dcf64f54192c8a2e3174e2feb72f655c6663c797aab65e87935620bc5281020d25368e9a361c941d9723f4eb10c5964499ddaa4d284cf315f8ca64c7c1967c9c56796c5c1f317708428f1d2670de6fabd3ea34c07a89b7b2e67cf74cba0dc80affa14ffd7bb5fe3313acdece9f631ac99e393e9a6622170526e079bca8a565c7450acd6be849ee306d0d3f6d213f19668"}, {0x98, 0x1, 0x1, "cbbb51eca54efb35028d9a67de67a62a90561b20e3d0331175a3dff3364d50f621be3697520a8f90e1ce4748430ea2c3dce238138ef4e7712dd78a3757acdff68c43ac9c7f997fc1dd6757e0993f4cd5e525a8ae7a5963aed263d5fdbbe79062d4510f23260c01bc0e7f6eb3babfd3d486e697ff3d482660fece8885665a9ff26cb28937dd8a3d"}, {0xb8, 0x0, 0x8, "19c2814601bd53c280bcf0251085cd577157e51230666fb7777aa661614e5b48cbeece88e12b552090c3e3acb77d572a92e87f01881806f12c94c462a267213a9f8a4531f248ce9b2d243d3abcf1f3d9b74a6a679d8289a14f1ef35d3b8e4a46f0706ebd69382db5ecdbc03cfcf8a2e23fefc6f0ad4e69751142a3dcc1d06e38c9f20b1307f7a968a38c0b565590136316842dcc3e7038743d60f80bc5e79731f614859e"}, {0x88, 0x113, 0x1, "45e58f06401957f76bbe325512a9213708cc883924c4eee1d9ca39ebe094f5f8e58154d56706ae47ea8b9b9edc0ed94759a15786a5f09e1ca914f5209cb95ccd767ef9e96309265d4c7d24f47ecde416ef9a99c858d8921531e3c46089f2f269d81a4a2a2a6fc83761ac016cb9fe137cc9a0e5"}, {0xa8, 0x101, 0xd, "280b04bd12ed1b57452096b25966c6c405ad429d883e4567c591809d927d3e980472e663b0aa17845b3172fdf76617adfc40a4e510afb30577275c251f4f52eae1dbc76057393424fffdefa8044c4465edca0aef26ea842f519b701eadbed14390453ad9a572bb0e1cf68123026f3c91227cfc594831c6afd259dfd75ed14b79cc8262bb4c71f9efc703f0ff774d6281ab6a17f980"}], 0x488}, 0x10)
sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="66d8", 0x2}], 0x1}, 0x20000014)
sendmsg$kcm(r3, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x20004000)

636.704927ms ago: executing program 3 (id=4420):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c0006400000000000000002080003400000000318000000120a"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

510.549553ms ago: executing program 4 (id=4421):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14d}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r6, &(0x7f0000001cc0)=[{{&(0x7f00000001c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="000000000000000000000000000036e4e8336203915534ee7c4253a63b6330900c342000b9eb986b061fccf30183abe49da7b8836d87caf2be2cb4469f4b16c16ab878406507f6fd26c7f8db817784804e239866823549084c665bc2c088018d3b6bc645fe61cb503c6899ff242f864447b7a9c59cecd0c09eb6e1c32b59c101440e35a6947b0d863ab43e9df4b8781b30d7776db2fd3ce82516d29046b2d9788b9deb028a5e89a6d4797acfabe6645f05000000", 0xb4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x583, 0x844)
syz_open_procfs$namespace(0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)

439.624246ms ago: executing program 2 (id=4422):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x5bc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x560, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}]}}}, {0x410, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x404, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "c2d6ca04e18ad9f1aaa5e833c5f2031b1f1709492aebdbc83141c5f905e494c3ab791fde98db22e0e11928d1fb58b33bc7ac241b06e93fbb754306b8972d3c7d8f13f943536dc6560dc5dd7440edec7ecc170938a70a1fab88e9adea"}, @NFTA_DATA_VALUE={0xc2, 0x1, "0d9d6e54e4622f2d0f3a59feeed3c20cc907b6e89194a17e4577f713b5c5c38419936715f9452884a99ef6f8c80074a141ce993599bf9f6477f7233d606e8214859f209a5ba3247f1f815f4d56422ca5a944ff118564a85d91c45786bb5e5b9b9e75d152ea3188ccd190fcc44d8fccf7fdc907a7551636094e03cc8a0df0fc7a4d80a56f17fd8cdfcf713e6e5a4c18ac9e0475fdbb0001cb10b78d5bc6a01872374a9f3bfb4de3b2002ae81c5225c718e92447b6814f55d50ea0372c6826"}, @NFTA_DATA_VALUE={0x56, 0x1, "c6d0977f325bad5d94729e22459dc7a3acccd5bac04f3d6034d6ee26c18202825e725484828ab8741d756693d9ef0a5e4f2c7537f9313173f628689c4aaf39b845103af1c3773ff5c5623bc92bfd9542013e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "54b99a5a40e6a29b8681663aaeff201b734b572c02aaeab37222f0be3eb8074842dbce3b3e6273806cc2610f3dbc22985d9bc528bd8b82b765088dac7247368458a22daf11bc195899409ebdf9f31908765ee2e7065d7f5a412096e27717675d172b5716f4b2a9a7486fedcf32250d6144b7cb32e5ed564cb9947aefca5128d3419a69289c3fbb5fb0fe1420c9d9e313724b9875cc2b59f14826785b17227a3fd0e04c3097ba79e34ff9d25d6abf24348f153f72e6759a14807651ffeac95cd4b970db5a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_DATA={0x120, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "9817c66362f6ce342f28ffacb1a612d5e037d070bf6ac0e4f89ba69a5d35b1cf49b77d100ad7980c400c27d90760f98306e0af4bc8dd26de5b8987ad2ed1948cc78548d7f311ce9ebd419e2f825079d567d2f9815cd7b0698ccaed687273dbb5ede42354dffc5afebe7e783bd2feb01b52403118b28b5d6e4a4673496008bf821f5946072d123d7760b2ca25d75634a9b38bbecfbf6c66543e2cd97986003ecd6498f93655de71fa32a4cee1fea2eb8c5b91aec019dec761e517f684"}, @NFTA_DATA_VALUE={0x5b, 0x1, "9221f86f688683f99d18a2d0fec771d048d1745c25cd54e1ff8e67b75de4f4dd21bf27c5842c8285c81384175ff0477ecc3a5bdbd89bdf963311cb5435db6a4d0d7014ef89961573d5f0d1edb26f1f655562e903c8d4fd"}]}]}}}, {0x70, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x62c}, 0x1, 0x0, 0x0, 0x4000081}, 0x48000)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh]}}}}}}}, 0x0)

425.692958ms ago: executing program 1 (id=4423):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

398.379026ms ago: executing program 0 (id=4424):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000010140100000000000001000000000000000000000d914a5469d8ab4f96669b1b45821e984dc0f215e5"], 0x18}}, 0x0)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180)=0x6b, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_getlink={0x2c, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8334, 0x10014}, [@IFLA_EVENT={0x8, 0x2c, 0x2c}, @IFLA_IFALIASn={0x4}]}, 0x2c}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4)
listen(r4, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84)

271.299927ms ago: executing program 3 (id=4425):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040800)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000005540), r1)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000600))
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000005600)={0x0, 0x0, &(0x7f00000055c0)={&(0x7f0000005580)={0x1c, r2, 0xc03, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff020000000000000000010000000900ff00000000000000000040000000030a01020000000000000400010000000900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000002591339a7acaa946660000000a"], 0xb8}}, 0x0)

269.093661ms ago: executing program 2 (id=4426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

193.187225ms ago: executing program 1 (id=4427):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x30]}}, &(0x7f00000004c0)=""/152, 0x28, 0x98, 0x0, 0xee5}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="090000170522000002000000070000000ac00400", @ANYRES32=0x1, @ANYBLOB="02000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x2000010000})
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000000c0)={0x10, 0x9})
r4 = socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r8, 0x101, 0x6, &(0x7f0000000dc0), 0x4)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4)

83.83929ms ago: executing program 3 (id=4428):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r3, 0x2, 0x10}, &(0x7f0000000240)=0xc)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}}, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000280)={r2, 0x800}, &(0x7f0000000400)=0x8)
r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r10, 0x10c, 0x5, &(0x7f0000000000), 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x320ea}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x30}}, 0x0)

15.097591ms ago: executing program 4 (id=4429):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001880)=""/4098, &(0x7f0000000700)=0x1002)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080))
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001880)=""/4098, &(0x7f0000000700)=0x1002) (async)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)) (async)

0s ago: executing program 1 (id=4430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400097"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'gre0\x00', @local})
getsockname(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000280)=0x80)

kernel console output (not intermixed with test programs):

6] bond9 (unregistering): Released all slaves
[  382.406244][  T126] bond10 (unregistering): Released all slaves
[  382.431383][  T126] bond11 (unregistering): Released all slaves
[  382.451350][  T126] bond12 (unregistering): Released all slaves
[  382.468226][  T126] bond13 (unregistering): Released all slaves
[  382.867711][  T126] : left promiscuous mode
[  382.878737][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3008'.
[  382.964687][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3008'.
[  383.002867][ T5848] Bluetooth: hci5: command tx timeout
[  383.185100][T17184] netlink: 'syz.3.3011': attribute type 1 has an invalid length.
[  383.214332][T17184] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3011'.
[  383.244255][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'.
[  383.337662][   T48] tipc: Subscription rejected, illegal request
[  383.580199][  T126] tipc: Left network mode
[  383.736917][T17199] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3013'.
[  383.785082][T17040] chnl_net:caif_netlink_parms(): no params data found
[  383.822830][T17206] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3015'.
[  384.124162][   T30] audit: type=1804 audit(1777163996.691:6): pid=17215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3018" name="/newroot/607/cgroup.controllers" dev="tmpfs" ino=3100 res=1 errno=0
[  384.155059][T17214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  384.199713][   T30] audit: type=1800 audit(1777163996.701:7): pid=17215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3018" name="cgroup.controllers" dev="tmpfs" ino=3100 res=0 errno=0
[  384.344343][T17219] vlan5: entered allmulticast mode
[  384.358613][T17219] bond0: entered allmulticast mode
[  384.532045][T17227] netlink: 'syz.2.3020': attribute type 1 has an invalid length.
[  384.621455][T17234] bridge: RTM_NEWNEIGH with invalid state 0x10
[  384.639154][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[  384.833121][T17040] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.842236][T17040] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.851868][T17040] bridge_slave_0: entered allmulticast mode
[  384.860405][T17040] bridge_slave_0: entered promiscuous mode
[  384.878953][T17040] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.888303][T17040] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.895881][T17040] bridge_slave_1: entered allmulticast mode
[  384.904041][T17040] bridge_slave_1: entered promiscuous mode
[  385.083696][ T5848] Bluetooth: hci5: command tx timeout
[  385.198481][T17040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.265190][T17040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.751181][T17040] team0: Port device team_slave_0 added
[  385.789659][T17040] team0: Port device team_slave_1 added
[  385.938849][T17298] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  386.061559][T17040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.092172][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.183921][T17040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.227644][T17298] syzkaller1: entered promiscuous mode
[  386.246994][T17298] syzkaller1: entered allmulticast mode
[  386.265843][T17040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.287481][T17040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.387159][T17040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.619462][T17322] __nla_validate_parse: 1 callbacks suppressed
[  386.619482][T17322] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3038'.
[  386.689137][T17040] hsr_slave_0: entered promiscuous mode
[  386.717678][T17040] hsr_slave_1: entered promiscuous mode
[  386.736841][T17040] debugfs: 'hsr0' already exists in 'hsr'
[  386.757811][T17040] Cannot create hsr debugfs directory
[  386.788647][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2
[  386.798137][T17334] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3040'.
[  386.815680][T17264] C speed is unknown, defaulting to 1000
[  386.845855][T17334] netlink: 'syz.4.3040': attribute type 9 has an invalid length.
[  386.911244][T17336] netlink: 'syz.0.3041': attribute type 1 has an invalid length.
[  386.932666][T17336] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3041'.
[  386.952977][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'.
[  387.163269][ T5848] Bluetooth: hci5: command tx timeout
[  387.279755][T17350] IPv6: Can't replace route, no match found
[  387.299622][T17350] IPv6: Can't replace route, no match found
[  387.324456][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'.
[  388.008853][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3049'.
[  388.723613][  T126] hsr_slave_0: left promiscuous mode
[  388.746536][  T126] hsr_slave_1: left promiscuous mode
[  389.414078][  T126] team0 (unregistering): Port device team_slave_1 removed
[  389.437329][  T126] team0 (unregistering): Port device team_slave_0 removed
[  389.591441][T17404] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.600156][T17407] netlink: 'syz.4.3055': attribute type 1 has an invalid length.
[  390.069571][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'.
[  390.096266][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'.
[  390.142744][T17425] batadv_slave_0: Caught tx_queue_len zero misconfig
[  390.227566][ T5160] Bluetooth: hci5: command 0x0405 tx timeout
[  390.368724][T17425] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3060'.
[  390.926159][  T126] IPVS: stop unused estimator thread 0...
[  390.986983][T17040] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  391.034736][T17040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  391.059925][T17423] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3059'.
[  391.074935][T17040] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  391.100451][T17040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  391.141006][T17040] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  391.205262][T17040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  391.306734][T17040] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  391.354282][T17040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  391.439276][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.480535][T17465] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.583214][T17471] ip6tnl0: entered promiscuous mode
[  391.608926][T17438] C speed is unknown, defaulting to 1000
[  391.828858][T17040] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.857456][T17479] __nla_validate_parse: 1 callbacks suppressed
[  391.857475][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3068'.
[  391.910723][T17040] 8021q: adding VLAN 0 to HW filter on device team0
[  391.958435][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.965814][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.005293][  T126] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.012635][  T126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.164214][T17492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3070'.
[  392.958493][T17040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.112052][T17522] netlink: 'syz.4.3076': attribute type 33 has an invalid length.
[  393.224364][T17040] veth0_vlan: entered promiscuous mode
[  393.287955][T17040] veth1_vlan: entered promiscuous mode
[  393.456140][T17040] veth0_macvtap: entered promiscuous mode
[  393.509100][T17040] veth1_macvtap: entered promiscuous mode
[  393.611426][T17040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.670620][T17040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.737287][ T8365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.770420][ T8365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.822119][ T8365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.859654][ T8365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.358119][T17569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  394.402499][ T8365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.445916][ T8365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.501304][T17570] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3088'.
[  394.570962][T17570] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3088'.
[  394.656064][ T8910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.677984][ T8910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.796734][T17581] netlink: 'syz.2.3093': attribute type 1 has an invalid length.
[  395.066417][T17584] bond11: entered promiscuous mode
[  395.115234][T17584] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  395.178429][T17584] bond11: left promiscuous mode
[  395.296396][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'.
[  395.313887][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'.
[  395.351279][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'.
[  395.639673][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'.
[  395.735593][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  395.749932][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  395.759932][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  395.776153][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  395.786083][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  396.225132][T17628] Unsupported ieee802154 address type: 0
[  396.400608][T17628] xt_CT: No such helper "syz1"
[  396.734029][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'.
[  396.759062][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  396.771881][   T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.818296][T17616] C speed is unknown, defaulting to 1000
[  397.026355][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.050816][T17658] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3113'.
[  397.064430][   T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.077510][T17658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'.
[  397.312714][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.360042][   T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.627479][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  397.672254][   T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.741030][T17683] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3119'.
[  397.745803][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'.
[  397.760260][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3119'.
[  397.883490][ T5160] Bluetooth: hci1: command tx timeout
[  398.170894][T17616] chnl_net:caif_netlink_parms(): no params data found
[  398.261343][T17707] netlink: 'syz.2.3124': attribute type 8 has an invalid length.
[  398.271642][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'.
[  398.595269][T17715] netlink: 'syz.4.3125': attribute type 3 has an invalid length.
[  398.839367][T17739] ipt_ECN: cannot use operation on non-tcp rule
[  398.918773][   T48] batadv1: left allmulticast mode
[  398.935844][   T48] batadv1: left promiscuous mode
[  398.941655][   T48] bridge0: port 1(batadv1) entered disabled state
[  399.003935][T17749] netlink: 'syz.2.3133': attribute type 23 has an invalid length.
[  399.020097][   T48] dvmrp0: left allmulticast mode
[  399.091518][T17752] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3127'.
[  399.359083][   T48] gretap0 (unregistering): left promiscuous mode
[  399.367912][T17757] netlink: 'syz.4.3134': attribute type 1 has an invalid length.
[  399.389839][   T48] batman_adv: batadv0: Removing interface: gretap1
[  399.422776][   T48] bond0 (unregistering): (slave geneve3): Releasing active interface
[  399.757772][   T48] bond1 (unregistering): Released all slaves
[  399.777065][   T48] bond2 (unregistering): Released all slaves
[  399.804000][   T48] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  399.814843][   T48] bond3 (unregistering): Released all slaves
[  399.831725][   T48] bond4 (unregistering): Released all slaves
[  399.849834][   T48] bond0 (unregistering): Released all slaves
[  399.880498][T17616] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.888360][T17616] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.896220][T17616] bridge_slave_0: entered allmulticast mode
[  399.904773][T17616] bridge_slave_0: entered promiscuous mode
[  399.973062][ T5160] Bluetooth: hci1: command tx timeout
[  400.010931][T17752] bond1 (unregistering): Released all slaves
[  400.043795][T17757] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  400.077269][T17616] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.100891][T17616] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.109269][T17616] bridge_slave_1: entered allmulticast mode
[  400.117703][T17616] bridge_slave_1: entered promiscuous mode
[  400.225150][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'.
[  400.237324][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'.
[  400.249853][T17764] veth7: entered promiscuous mode
[  400.255931][T17764] veth7: entered allmulticast mode
[  400.266158][   T48] : left promiscuous mode
[  400.361608][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'.
[  400.401061][T17616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.424277][   T48] tipc: Disabling bearer <eth:macvlan1>
[  400.447307][   T48] tipc: Disabling bearer <eth:syzkaller0>
[  400.471923][   T48] tipc: Left network mode
[  400.480488][T17774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  400.545547][T17616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.592243][T17766] syzkaller0: entered promiscuous mode
[  400.628315][T17766] syzkaller0: entered allmulticast mode
[  400.875466][T17616] team0: Port device team_slave_0 added
[  400.897141][T17616] team0: Port device team_slave_1 added
[  400.969513][T17800] netlink: 'syz.2.3141': attribute type 64 has an invalid length.
[  401.027569][T17803] x_tables: duplicate underflow at hook 2
[  401.044833][T17803] netlink: 'syz.0.3142': attribute type 39 has an invalid length.
[  401.191247][T17616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.235916][T17616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.264546][T17616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.315884][T17616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.329794][T17616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.414396][T17616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.698570][T17616] hsr_slave_0: entered promiscuous mode
[  401.731607][T17616] hsr_slave_1: entered promiscuous mode
[  401.743702][T17616] debugfs: 'hsr0' already exists in 'hsr'
[  401.754099][T17616] Cannot create hsr debugfs directory
[  401.796626][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[  402.039418][T17841] netlink: 'syz.1.3153': attribute type 1 has an invalid length.
[  402.047441][ T5160] Bluetooth: hci1: command tx timeout
[  402.063862][T17839] __nla_validate_parse: 4 callbacks suppressed
[  402.063881][T17839] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3154'.
[  402.111980][T17846] sctp: [Deprecated]: syz.0.3155 (pid 17846) Use of int in maxseg socket option.
[  402.111980][T17846] Use struct sctp_assoc_value instead
[  402.129482][T17840] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3152'.
[  402.397653][T17857] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3156'.
[  402.864778][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3163'.
[  402.887798][T17880] tipc: Invalid UDP bearer configuration
[  402.887853][T17880] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  403.026264][T17876] netlink: 'syz.0.3162': attribute type 39 has an invalid length.
[  403.124249][T17876] bridge0: port 1(syz_tun) entered disabled state
[  403.173848][T17895] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  403.189336][T17876] syz_tun (unregistering): left allmulticast mode
[  403.215320][T17876] syz_tun (unregistering): left promiscuous mode
[  403.233302][T17876] bridge0: port 1(syz_tun) entered disabled state
[  403.239552][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'.
[  403.240289][T17895] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3165'.
[  403.266221][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3165'.
[  403.290795][T17904] xt_l2tp: missing protocol rule (udp|l2tpip)
[  403.298135][T17901] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  403.312441][T17901] netlink: 'syz.2.3167': attribute type 1 has an invalid length.
[  403.774433][T17921] openvswitch: netlink: IP tunnel dst address not specified
[  404.084073][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'.
[  404.133233][ T5160] Bluetooth: hci1: command tx timeout
[  404.654770][T17960] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148
[  405.065723][T17938] nbd0: detected capacity change from 0 to 63
[  405.123705][T17943] block nbd0: NBD_DISCONNECT
[  405.135865][ T5160] block nbd0: Receive control failed (result -104)
[  405.136691][T17943] block nbd0: Send disconnect failed -32
[  405.195268][ T5160] block nbd0: Disconnected due to user request.
[  405.208147][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.217600][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  405.227627][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.236811][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  405.247506][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.256741][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  405.264663][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.273777][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  405.290489][T17063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.341003][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.353992][T17063] Buffer I/O error on dev nbd0, logical block 0, async page read
[  405.373655][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.408519][T17063] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.449336][   T48] veth1_macvtap: left promiscuous mode
[  405.457070][T17063] Buffer I/O error on dev nbd0, logical block 1, async page read
[  405.474351][   T48] veth0_macvtap: left promiscuous mode
[  405.482270][T17063] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.500252][   T48] veth1_vlan: left promiscuous mode
[  405.509095][T17063] Buffer I/O error on dev nbd0, logical block 2, async page read
[  405.519989][   T48] veth0_vlan: left promiscuous mode
[  405.548872][T17063] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.575609][T17063] Buffer I/O error on dev nbd0, logical block 3, async page read
[  405.609012][T17063] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.657472][T17063] Buffer I/O error on dev nbd0, logical block 0, async page read
[  405.689807][T17063] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  405.712112][T17063] Buffer I/O error on dev nbd0, logical block 1, async page read
[  405.736169][T17063] ldm_validate_partition_table(): Disk read failed.
[  405.775986][T17063] Dev nbd0: unable to read RDB block 0
[  405.811809][T17063]  nbd0: unable to read partition table
[  405.859615][T17063] ldm_validate_partition_table(): Disk read failed.
[  405.880206][T17063] Dev nbd0: unable to read RDB block 0
[  405.902043][T17063]  nbd0: unable to read partition table
[  406.758482][T17616] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  406.791937][T17616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  406.810656][T17616] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  406.840906][T17616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  406.877040][T17616] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  406.913882][T18019] netlink: 'syz.2.3188': attribute type 1 has an invalid length.
[  406.927124][T17616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  406.950880][T17616] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  406.984786][T17616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  407.216814][   T48] IPVS: stop unused estimator thread 0...
[  407.276705][T17616] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.326167][T17616] 8021q: adding VLAN 0 to HW filter on device team0
[  407.347649][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.354925][ T8915] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.387880][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.395174][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.752192][T18055] netlink: 'syz.1.3194': attribute type 1 has an invalid length.
[  407.989878][T17616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.010863][T18060] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  408.040362][T18069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3197'.
[  408.118633][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'.
[  408.212305][T18077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  408.236452][T18075] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[  408.277506][T18071] 8021q: adding VLAN 0 to HW filter on device bond13
[  408.348050][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'.
[  408.393226][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'.
[  408.416179][T17616] veth0_vlan: entered promiscuous mode
[  408.435980][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  408.470701][T18086] hsr_slave_0: left promiscuous mode
[  408.478431][T18086] hsr_slave_1: left promiscuous mode
[  408.592494][T18084] bridge10: port 1(vlan1) entered blocking state
[  408.613200][T18084] bridge10: port 1(vlan1) entered disabled state
[  408.621380][T18084] vlan1: entered allmulticast mode
[  408.631718][T18084] bridge10: entered allmulticast mode
[  408.646287][T18084] vlan1: left allmulticast mode
[  408.657159][T18084] bridge10: left allmulticast mode
[  408.724064][T17616] veth1_vlan: entered promiscuous mode
[  408.869466][T17616] veth0_macvtap: entered promiscuous mode
[  408.900276][T17616] veth1_macvtap: entered promiscuous mode
[  408.955582][T17616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.999010][T17616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.040490][ T8915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.079655][ T8915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.111097][ T8915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.154136][ T8915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.364872][T18129] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3213'.
[  409.392435][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.416917][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.469913][  T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.491392][  T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.761467][T18141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3218'.
[  410.132144][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  410.145962][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  410.154215][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  410.175514][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  410.186363][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  410.311309][T18158] Bluetooth: MGMT ver 1.23
[  410.708130][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3223'.
[  411.205883][T18180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3226'.
[  411.243129][T18180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3226'.
[  411.785998][T18158] vlan0: left allmulticast mode
[  411.791990][T18158] veth0_vlan: left allmulticast mode
[  411.798202][T18158] vlan0: left promiscuous mode
[  411.954529][T18152] C speed is unknown, defaulting to 1000
[  411.963559][T18179] vcan0: entered allmulticast mode
[  411.993565][ T8903] netdevsim netdevsim0 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.030336][ T8903] netdevsim netdevsim0 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.062663][ T8903] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.081408][ T8903] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.100637][ T8903] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.109917][ T8903] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.127083][ T8903] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.136845][ T8903] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  412.284476][ T5160] Bluetooth: hci0: command tx timeout
[  412.458046][T18199] xt_hashlimit: max too large, truncated to 1048576
[  412.811468][T18222] sctp: [Deprecated]: syz.1.3235 (pid 18222) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.811468][T18222] Use struct sctp_sack_info instead
[  413.180380][T18235] syzkaller0: entered promiscuous mode
[  413.212253][T18235] syzkaller0: entered allmulticast mode
[  413.309087][T18242] __nla_validate_parse: 4 callbacks suppressed
[  413.309108][T18242] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3240'.
[  413.590570][T18152] chnl_net:caif_netlink_parms(): no params data found
[  413.648100][T18258] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3244'.
[  413.691357][T18258] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3244'.
[  413.802925][T18266] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3247'.
[  413.858085][T18152] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.865645][T18152] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.873276][T18152] bridge_slave_0: entered allmulticast mode
[  413.882371][T18152] bridge_slave_0: entered promiscuous mode
[  413.900093][T18152] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.907827][T18152] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.916027][T18152] bridge_slave_1: entered allmulticast mode
[  413.924906][T18152] bridge_slave_1: entered promiscuous mode
[  413.979427][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.994999][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.157298][T18275] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3248'.
[  414.212884][T18277] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3248'.
[  414.251162][T18152] team0: Port device team_slave_0 added
[  414.288279][T18152] team0: Port device team_slave_1 added
[  414.363057][ T5160] Bluetooth: hci0: command tx timeout
[  414.410190][T18281] tls_set_device_offload: netdev not found
[  414.417337][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3249'.
[  414.508749][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.529012][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'.
[  414.531112][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.569147][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.580052][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'.
[  414.580075][T18285] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3250'.
[  414.602337][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.613830][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.640921][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.661602][T18283] macvlan2: entered promiscuous mode
[  414.667732][T18283] macvlan2: entered allmulticast mode
[  414.766235][T18152] hsr_slave_0: entered promiscuous mode
[  414.786222][T18152] hsr_slave_1: entered promiscuous mode
[  414.817439][T18152] debugfs: 'hsr0' already exists in 'hsr'
[  414.830861][T18152] Cannot create hsr debugfs directory
[  414.881988][T18294] netlink: 'syz.2.3252': attribute type 10 has an invalid length.
[  414.959224][T18294] 
: (slave wlan1): Enslaving as an active interface with an up link
[  415.002021][T18291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.022958][T18300] xt_TCPMSS: Only works on TCP SYN packets
[  415.069067][T18304] netlink: 'syz.1.3255': attribute type 11 has an invalid length.
[  415.135354][T18300] bond0: ARP target 8.4.0.0 is already present
[  415.166732][T18300] bond0: option arp_ip_target: invalid value (1032)
[  415.439022][T18318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.528355][T18320] netlink: 'syz.3.3261': attribute type 1 has an invalid length.
[  415.554979][T18320] openvswitch: netlink: Flow key attr not present in new flow.
[  415.685066][T18152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  415.728049][T18152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.866793][T18323] bond1: entered allmulticast mode
[  415.896061][T18326] bridge2: entered promiscuous mode
[  415.901463][T18326] bridge2: entered allmulticast mode
[  415.923193][T18326] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  415.988213][T18343] netlink: 'syz.2.3268': attribute type 14 has an invalid length.
[  416.001249][T18343] netlink: 'syz.2.3268': attribute type 13 has an invalid length.
[  416.021364][T18152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.060256][T18152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.160484][T18341] syzkaller0: entered promiscuous mode
[  416.166665][T18341] syzkaller0: entered allmulticast mode
[  416.442740][ T5160] Bluetooth: hci0: command tx timeout
[  417.008056][  T126] wlan1: Trigger new scan to find an IBSS to join
[  418.357920][T18152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.368721][T18152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.401698][T18341] netlink: 'syz.3.3265': attribute type 1 has an invalid length.
[  418.520989][T18355] netlink: 'syz.0.3271': attribute type 16 has an invalid length.
[  418.529472][ T5160] Bluetooth: hci0: command tx timeout
[  418.549341][T18355] netlink: 'syz.0.3271': attribute type 17 has an invalid length.
[  418.554748][T18362] Unsupported ieee802154 address type: 0
[  418.601840][T18152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.657069][T18152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.728006][T18355] 8021q: adding VLAN 0 to HW filter on device .`
[  418.736808][T18355] 8021q: adding VLAN 0 to HW filter on device team0
[  418.755351][T18373] netlink: 'syz.1.3276': attribute type 51 has an invalid length.
[  418.771672][T18355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  418.896229][T18373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.913066][T18373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.930892][T18373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.951041][T18373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.094579][T18381] __nla_validate_parse: 15 callbacks suppressed
[  419.094599][T18381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3278'.
[  419.138732][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3279'.
[  419.439973][T18152] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  419.473575][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.492042][T18152] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  419.541494][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.567830][T18152] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  419.620448][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.645410][T18152] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  419.679961][T18152] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.966883][T18421] ip6t_rpfilter: unknown options
[  420.023065][T18152] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.046462][ T8365] wlan1: Trigger new scan to find an IBSS to join
[  420.117233][T18152] 8021q: adding VLAN 0 to HW filter on device team0
[  420.147693][T18381] C speed is unknown, defaulting to 1000
[  420.177019][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.184326][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.235916][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.243162][ T8365] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.495439][T18441] netlink: 'syz.1.3290': attribute type 1 has an invalid length.
[  420.525052][T18441] netlink: 'syz.1.3290': attribute type 1 has an invalid length.
[  420.543628][T18441] netlink: 'syz.1.3290': attribute type 1 has an invalid length.
[  420.553491][T18441] netlink: 'syz.1.3290': attribute type 2 has an invalid length.
[  420.571394][T18441] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3290'.
[  420.612217][T18444] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  420.620669][T18444] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  421.051072][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'.
[  421.065687][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3296'.
[  421.066954][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.230493][T18454] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  421.260357][T18454] bond4 (unregistering): Released all slaves
[  421.540510][T18473] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  421.937389][T18152] veth0_vlan: entered promiscuous mode
[  421.999862][T18152] veth1_vlan: entered promiscuous mode
[  422.111329][T18487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3304'.
[  422.167375][T18152] veth0_macvtap: entered promiscuous mode
[  422.199268][T18152] veth1_macvtap: entered promiscuous mode
[  422.279151][T18152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.326029][T18152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.370790][T18497] netlink: 'syz.0.3307': attribute type 23 has an invalid length.
[  422.396719][ T8365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.418366][ T8365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.445426][T18496] netlink: 'syz.2.3308': attribute type 2 has an invalid length.
[  422.467548][T18498] netlink: 'syz.2.3308': attribute type 2 has an invalid length.
[  422.480946][ T8365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.489537][T18496] netlink: 'syz.2.3308': attribute type 2 has an invalid length.
[  422.520928][ T8365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.859562][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.888903][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.936325][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[  422.983970][T18521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3315'.
[  423.004241][ T8365] wlan1: Trigger new scan to find an IBSS to join
[  423.017048][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[  423.049705][T18522] netlink: 'syz.0.3315': attribute type 1 has an invalid length.
[  423.068003][T18522] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3315'.
[  423.086146][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  423.101439][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  423.110498][  T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.130960][  T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.141284][ T8365] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  423.177873][ T8365] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  423.231550][ T8365] netdevsim netdevsim0 
: set [1, 0] type 2 family 0 port 20002 - 0
[  423.276160][ T8365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0
[  423.336214][ T8365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0
[  423.374173][ T8906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0
[  423.399199][T18536] netlink: 'syz.3.3319': attribute type 29 has an invalid length.
[  423.425417][T18538] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  423.723883][T18556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.757436][T18556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.909795][ T8906] wlan1: Creating new IBSS network, BSSID 4e:df:11:b7:d4:03
[  424.109892][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  424.128025][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  424.131745][T18561] vlan4: entered allmulticast mode
[  424.143953][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  424.169867][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  424.180363][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  424.184985][T18561] bridge9: entered allmulticast mode
[  424.400134][T18574] : entered promiscuous mode
[  424.620009][T18584] xt_time: invalid argument - start or stop time greater than 23:59:59
[  424.759812][T18588] syzkaller0: entered promiscuous mode
[  424.800024][T18588] syzkaller0: entered allmulticast mode
[  424.835894][T18567] C speed is unknown, defaulting to 1000
[  424.892094][T18592] __nla_validate_parse: 8 callbacks suppressed
[  424.892114][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'.
[  424.935897][T18592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3335'.
[  424.951502][T18598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3337'.
[  425.021872][T18596] bond12: entered promiscuous mode
[  425.029259][T18596] 8021q: adding VLAN 0 to HW filter on device bond12
[  425.070571][T18592] geneve2: entered promiscuous mode
[  425.102773][T18592] geneve2: entered allmulticast mode
[  425.177209][  T126] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  425.203701][  T126] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  425.230164][  T126] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  425.272891][  T126] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  426.209368][ T5848] Bluetooth: hci4: command tx timeout
[  426.293965][T18657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3348'.
[  426.379449][T18649] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3348'.
[  428.283586][ T5848] Bluetooth: hci4: command tx timeout
[  428.437175][T18666] validate_nla: 5 callbacks suppressed
[  428.437195][T18666] netlink: 'syz.3.3351': attribute type 1 has an invalid length.
[  428.481063][T18661] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3350'.
[  428.543307][T18671] netlink: 'syz.4.3352': attribute type 1 has an invalid length.
[  428.576516][T18671] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3352'.
[  428.614744][T18567] chnl_net:caif_netlink_parms(): no params data found
[  428.725032][T18661] nbd2: detected capacity change from 0 to 127
[  428.849189][T18679] syzkaller0: entered promiscuous mode
[  428.855797][T18679] syzkaller0: entered allmulticast mode
[  429.043914][ T5848] block nbd2: Receive control failed (result -104)
[  429.054214][T18567] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.064481][T18567] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.073954][T18567] bridge_slave_0: entered allmulticast mode
[  429.082232][T18567] bridge_slave_0: entered promiscuous mode
[  429.096075][T18567] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.103616][T18567] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.112399][T18567] bridge_slave_1: entered allmulticast mode
[  429.122267][T18567] bridge_slave_1: entered promiscuous mode
[  429.180668][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'.
[  429.233642][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'.
[  429.260130][T18689] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.262881][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'.
[  429.301075][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.318611][T18689] netlink: 'syz.4.3356': attribute type 10 has an invalid length.
[  429.355096][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.448291][T18694] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.482289][T18694] bond1: (slave bond0): making interface the new active one
[  429.497009][T18694] bond1: (slave bond0): Enslaving as an active interface with an up link
[  429.541280][T18689] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.549110][T18689] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.586696][T18689] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.594030][T18689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.601768][T18689] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.609048][T18689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.634713][T18689] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  429.692131][T18692] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.701755][T18692] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.744458][T18697] syzkaller1: entered promiscuous mode
[  429.750525][T18697] syzkaller1: entered allmulticast mode
[  429.790509][T18567] team0: Port device team_slave_0 added
[  429.813207][T18567] team0: Port device team_slave_1 added
[  429.917672][T18714] openvswitch: netlink: Key 12 has unexpected len 28 expected 2
[  430.014870][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.035099][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.096210][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.130859][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.149289][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.208475][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.365558][ T5848] Bluetooth: hci4: command tx timeout
[  430.406972][T18567] hsr_slave_0: entered promiscuous mode
[  430.416667][T18567] hsr_slave_1: entered promiscuous mode
[  430.423810][T18567] debugfs: 'hsr0' already exists in 'hsr'
[  430.429873][T18567] Cannot create hsr debugfs directory
[  430.527191][T18734] __nla_validate_parse: 1 callbacks suppressed
[  430.527212][T18734] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3367'.
[  430.614234][T18737] netlink: 'syz.2.3368': attribute type 4 has an invalid length.
[  430.766789][T18740] netlink: 'syz.2.3369': attribute type 29 has an invalid length.
[  430.830880][T18740] netlink: 'syz.2.3369': attribute type 29 has an invalid length.
[  431.017995][T18567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  431.055531][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'.
[  431.132648][T18758] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3373'.
[  431.158185][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'.
[  431.286405][T18768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.310316][T18567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  431.311091][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'.
[  431.397787][T18774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.474725][T18776] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3379'.
[  431.536904][T18567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  431.707794][T18567] netdevsim netdevsim0 
 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  431.933114][T18799] bond2: entered promiscuous mode
[  432.016949][T18810] netlink: 'syz.3.3389': attribute type 1 has an invalid length.
[  432.289590][T18819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3392'.
[  432.317968][T18567] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  432.327108][T18819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3392'.
[  432.361168][T18567] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.395565][T18567] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  432.445410][ T5848] Bluetooth: hci4: command tx timeout
[  432.471604][T18567] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  432.516198][T18567] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  432.591878][T18567] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  432.626454][T18567] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  432.665053][T18567] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.837470][T18567] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.900020][T18567] 8021q: adding VLAN 0 to HW filter on device team0
[  432.931450][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.938846][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.008070][T18852] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3396'.
[  433.025893][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.033174][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.550093][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'.
[  433.798062][T18880] bond13: entered promiscuous mode
[  433.818055][T18567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.938821][T18567] veth0_vlan: entered promiscuous mode
[  433.994071][T18567] veth1_vlan: entered promiscuous mode
[  434.079646][T18900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.121281][T18567] veth0_macvtap: entered promiscuous mode
[  434.167151][   T48] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  434.259995][T18911] xt_TCPMSS: Only works on TCP SYN packets
[  434.269077][T18567] veth1_macvtap: entered promiscuous mode
[  434.461722][T18567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.621089][T18567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.731064][   T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.765387][   T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.798816][   T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.827828][   T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.024455][T18895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  437.211496][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.245972][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.322093][ T8915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.346087][ T8915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.523311][T18967] __nla_validate_parse: 3 callbacks suppressed
[  437.523333][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3425'.
[  437.539504][T18970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3426'.
[  437.659302][T18975] bond2: entered promiscuous mode
[  437.679675][T18975] bond2: entered allmulticast mode
[  437.769699][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  437.786800][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  437.797769][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  437.807204][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  437.816668][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  437.919917][T18982] syzkaller0: entered promiscuous mode
[  437.953879][T18982] syzkaller0: entered allmulticast mode
[  437.966249][T18987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3430'.
[  438.255892][T18999] Cannot find set identified by id 0 to match
[  438.304717][T19000] Cannot find set identified by id 0 to match
[  438.382279][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'.
[  438.496175][T19004] ip6erspan0: entered promiscuous mode
[  438.761886][T19018] erspan0: entered promiscuous mode
[  438.917032][T19028] netlink: 'syz.3.3441': attribute type 8 has an invalid length.
[  438.952129][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'.
[  439.000473][T18979] C speed is unknown, defaulting to 1000
[  439.014904][T19032] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3438'.
[  439.174574][T19026] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  439.424013][T19042] x_tables: unsorted entry at hook 3
[  439.485719][T18979] chnl_net:caif_netlink_parms(): no params data found
[  439.586575][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'.
[  439.601061][T19047] veth1_macvtap: left promiscuous mode
[  439.657100][T18979] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.664560][T18979] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.671905][T18979] bridge_slave_0: entered allmulticast mode
[  439.680622][T18979] bridge_slave_0: entered promiscuous mode
[  439.698438][T18979] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.714716][T18979] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.737998][T18979] bridge_slave_1: entered allmulticast mode
[  439.755611][T18979] bridge_slave_1: entered promiscuous mode
[  439.821435][T19052] netem: change failed
[  439.836609][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.870504][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.885636][ T5857] Bluetooth: hci2: command tx timeout
[  439.960261][T18979] team0: Port device team_slave_0 added
[  439.977391][T18979] team0: Port device team_slave_1 added
[  439.983289][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3447'.
[  440.045856][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.053371][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.081580][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.081950][T19060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3448'.
[  440.171299][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.190011][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.230309][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.246385][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  440.255461][ T1314] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  440.270622][T19064] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  440.424505][T18979] hsr_slave_0: entered promiscuous mode
[  440.457578][T18979] hsr_slave_1: entered promiscuous mode
[  440.488794][T18979] debugfs: 'hsr0' already exists in 'hsr'
[  440.504163][T18979] Cannot create hsr debugfs directory
[  440.509907][T19072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3451'.
[  440.837148][T18979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.849857][T18979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.863829][T18979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  440.969457][T18979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.982447][T18979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.993603][T18979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  441.079279][T18979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.089893][T18979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.102287][T18979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  441.178801][T18979] batman_adv: batadv0: Removing interface: netdevsim0
[  441.189865][T18979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.200388][T18979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.212165][T18979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  441.946653][T19090] netlink: 'syz.1.3457': attribute type 21 has an invalid length.
[  441.962710][ T5857] Bluetooth: hci2: command tx timeout
[  443.385655][T19068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  443.438029][T18979] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  443.494533][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  443.527389][T18979] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  443.598498][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  443.624512][T18979] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  443.647731][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  443.656969][   T30] audit: type=1800 audit(1777164056.221:8): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3461" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=368 res=0 errno=0
[  443.664981][T18979] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  443.707264][T18979] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  443.765593][T19097] __nla_validate_parse: 2 callbacks suppressed
[  443.765615][T19097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3459'.
[  443.905951][T19116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3465'.
[  444.043549][ T5857] Bluetooth: hci2: command tx timeout
[  444.149677][T18979] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.238497][T18979] 8021q: adding VLAN 0 to HW filter on device team0
[  444.312324][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.319640][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.421284][ T8906] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.428567][ T8906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.654110][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3472'.
[  444.672997][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'.
[  444.687819][T19148] netlink: 'syz.4.3476': attribute type 5 has an invalid length.
[  444.697058][T19148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3476'.
[  444.767990][T19151] netlink: 'syz.0.3475': attribute type 6 has an invalid length.
[  444.856147][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'.
[  445.221942][T19171] wireguard: wg0: Could not create IPv4 socket
[  445.271637][T19173] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3482'.
[  445.363264][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.555980][T18979] veth0_vlan: entered promiscuous mode
[  445.582380][T19187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3486'.
[  445.614496][T18979] veth1_vlan: entered promiscuous mode
[  445.805848][T18979] veth0_macvtap: entered promiscuous mode
[  445.848196][T18979] veth1_macvtap: entered promiscuous mode
[  446.028806][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.049209][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  446.081914][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.108435][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[  446.123327][ T5857] Bluetooth: hci2: command tx timeout
[  446.128280][T19212] netlink: 'syz.1.3494': attribute type 5 has an invalid length.
[  446.151517][ T8903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.190356][ T8903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.224835][ T8903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.310314][ T8903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.420530][T19230] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  446.673999][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.711472][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.713281][T19243] netlink: 'syz.0.3503': attribute type 30 has an invalid length.
[  446.901951][T19243] bond1: option arp_missed_max: invalid value (0)
[  446.930954][T19243] bond1: option arp_missed_max: allowed values 1 - 255
[  446.968714][T19243] bond1 (unregistering): Released all slaves
[  447.041779][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.063784][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.438694][T19266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.496035][T19266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.630566][T19275] netlink: 'syz.0.3513': attribute type 4 has an invalid length.
[  447.920415][T19254] C speed is unknown, defaulting to 1000
[  447.931363][T19284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.946440][T19279] netlink: 'syz.0.3515': attribute type 13 has an invalid length.
[  447.967911][T19279] veth0_macvtap: left promiscuous mode
[  447.987086][T19279] macvtap0: entered allmulticast mode
[  448.013136][T19279] macvtap0: refused to change device tx_queue_len
[  448.041598][T19284] netlink: 'syz.3.3517': attribute type 2 has an invalid length.
[  448.668927][T19306] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  448.697693][T19306] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  448.727472][T19306] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  449.000768][T19319] __nla_validate_parse: 10 callbacks suppressed
[  449.000817][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3529'.
[  449.128568][T19321] IPv6: NLM_F_CREATE should be specified when creating new route
[  449.240078][T19319] bond3: Removing last ns target with arp_interval on
[  449.445376][T19339] sctp: [Deprecated]: syz.2.3534 (pid 19339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.445376][T19339] Use struct sctp_sack_info instead
[  449.719092][T19351] netlink: 'syz.2.3537': attribute type 1 has an invalid length.
[  449.760774][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'.
[  449.792223][T19355] syz.3.3538: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  449.882019][T19355] CPU: 0 UID: 0 PID: 19355 Comm: syz.3.3538 Not tainted syzkaller #0 PREEMPT(full) 
[  449.882058][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  449.882084][T19355] Call Trace:
[  449.882094][T19355]  <TASK>
[  449.882104][T19355]  dump_stack_lvl+0xe8/0x150
[  449.882148][T19355]  warn_alloc+0x249/0x340
[  449.882179][T19355]  ? stack_trace_save+0xa9/0x100
[  449.882217][T19355]  ? __pfx_warn_alloc+0x10/0x10
[  449.882254][T19355]  ? kasan_save_track+0x4f/0x80
[  449.882280][T19355]  ? kasan_save_track+0x3e/0x80
[  449.882302][T19355]  ? __kasan_kmalloc+0x93/0xb0
[  449.882327][T19355]  ? __kmalloc_cache_noprof+0x31c/0x660
[  449.882353][T19355]  ? xskq_create+0x56/0x170
[  449.882380][T19355]  ? xsk_setsockopt+0x54c/0x990
[  449.882402][T19355]  ? do_sock_setsockopt+0x17c/0x1b0
[  449.882423][T19355]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  449.882446][T19355]  ? do_syscall_64+0x15f/0xf80
[  449.882486][T19355]  __vmalloc_node_range_noprof+0x132/0x1750
[  449.882549][T19355]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  449.882585][T19355]  ? __kasan_kmalloc+0x93/0xb0
[  449.882618][T19355]  vmalloc_user_noprof+0xad/0xe0
[  449.882645][T19355]  ? xskq_create+0xbf/0x170
[  449.882673][T19355]  xskq_create+0xbf/0x170
[  449.882703][T19355]  xsk_init_queue+0x8a/0xe0
[  449.882730][T19355]  xsk_setsockopt+0x54c/0x990
[  449.882757][T19355]  ? __pfx_xsk_setsockopt+0x10/0x10
[  449.882784][T19355]  ? __pfx_aa_sk_perm+0x10/0x10
[  449.882823][T19355]  ? aa_sock_opt_perm+0xff/0x1a0
[  449.882851][T19355]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  449.882876][T19355]  ? __pfx_xsk_setsockopt+0x10/0x10
[  449.882902][T19355]  do_sock_setsockopt+0x17c/0x1b0
[  449.882933][T19355]  __x64_sys_setsockopt+0x13d/0x1b0
[  449.882959][T19355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.882983][T19355]  do_syscall_64+0x15f/0xf80
[  449.883012][T19355]  ? trace_irq_disable+0x3b/0x140
[  449.883049][T19355]  ? clear_bhb_loop+0x40/0x90
[  449.883080][T19355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.883103][T19355] RIP: 0033:0x7f3a3139cdd9
[  449.883123][T19355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.883142][T19355] RSP: 002b:00007f3a321fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  449.883165][T19355] RAX: ffffffffffffffda RBX: 00007f3a31615fa0 RCX: 00007f3a3139cdd9
[  449.883182][T19355] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  449.883196][T19355] RBP: 00007f3a31432d69 R08: 0000000000000004 R09: 0000000000000000
[  449.883210][T19355] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.883224][T19355] R13: 00007f3a31616038 R14: 00007f3a31615fa0 R15: 00007ffc3f794808
[  449.883260][T19355]  </TASK>
[  450.251712][T19355] Mem-Info:
[  450.260572][T19355] active_anon:6358 inactive_anon:0 isolated_anon:0
[  450.260572][T19355]  active_file:2507 inactive_file:40419 isolated_file:0
[  450.260572][T19355]  unevictable:768 dirty:53 writeback:0
[  450.260572][T19355]  slab_reclaimable:12036 slab_unreclaimable:122158
[  450.260572][T19355]  mapped:29472 shmem:1374 pagetables:1701
[  450.260572][T19355]  sec_pagetables:0 bounce:0
[  450.260572][T19355]  kernel_misc_reclaimable:0
[  450.260572][T19355]  free:1293914 free_pcp:15908 free_cma:0
[  450.320963][T19355] Node 0 active_anon:25432kB inactive_anon:0kB active_file:10028kB inactive_file:161476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:81024kB dirty:208kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15448kB pagetables:6656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  450.357655][T19355] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36864kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  450.391678][T19355] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  450.422236][T19355] lowmem_reserve[]: 0 2491 2491 2491 2491
[  450.430889][T19355] Node 0 DMA32 free:1349084kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25332kB inactive_anon:0kB active_file:10028kB inactive_file:161476kB unevictable:1536kB writepending:208kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:37624kB local_pcp:20912kB free_cma:0kB
[  450.554019][T19355] lowmem_reserve[]: 0 0 0 0 0
[  450.561930][T19355] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  450.626556][T19355] lowmem_reserve[]: 0 0 0 0 0
[  450.644890][T19355] Node 1 Normal free:3815316kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26472kB local_pcp:0kB free_cma:0kB
[  450.765917][T19355] lowmem_reserve[]: 0 0 0 0 0
[  450.804218][T19355] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB
[  450.867036][T19355] Node 0 DMA32: 8167*4kB (UME) 5215*8kB (UME) 2632*16kB (UM) 48*32kB (UME) 1151*64kB (UM) 1256*128kB (UE) 880*256kB (UME) 468*512kB (UM) 204*1024kB (UE) 158*2048kB (UM) 0*4096kB = 1349844kB
[  450.906018][T19355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  450.918268][T19355] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 929*4096kB (M) = 3815368kB
[  450.981791][T19355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  451.025626][T19355] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  451.070684][T19355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  451.101820][T19355] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  451.123235][T19355] 44296 total pagecache pages
[  451.134535][T19355] 0 pages in swap cache
[  451.151422][T19355] Free swap  = 124996kB
[  451.178661][T19355] Total swap = 124996kB
[  451.199098][T19355] 2097051 pages RAM
[  451.214162][T19355] 0 pages HighMem/MovableOnly
[  451.231918][T19355] 427573 pages reserved
[  451.249492][T19355] 0 pages cma reserved
[  451.696059][T19414] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3549'.
[  451.773925][T19414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  451.822263][T19414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.871476][T19414] bond0 (unregistering): Released all slaves
[  451.983603][T19431] syzkaller0: entered promiscuous mode
[  451.995263][T19431] syzkaller0: entered allmulticast mode
[  452.019071][T19372] C speed is unknown, defaulting to 1000
[  452.124486][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'.
[  452.253838][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'.
[  452.500119][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'.
[  452.547294][T19451] sch_tbf: burst 0 is lower than device bond_slave_1 mtu (1514) !
[  452.777398][T19464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3561'.
[  452.809749][T19463] bond3: option arp_all_targets: invalid value (18446744073709551613)
[  452.820667][T19463] bond3 (unregistering): Released all slaves
[  453.239035][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3566'.
[  453.272088][T19482] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3568'.
[  453.809716][T19504] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3573'.
[  454.064930][T16079] IPVS: starting estimator thread 0...
[  454.172657][T19517] IPVS: using max 37 ests per chain, 88800 per kthread
[  454.303478][T19521] xt_l2tp: wrong L2TP version: 0
[  454.327012][T19524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'.
[  454.771121][T19542] ieee802154 phy0 wpan0: encryption failed: -22
[  454.804554][T19544] netlink: 'syz.0.3586': attribute type 29 has an invalid length.
[  454.827844][T19544] netlink: 'syz.0.3586': attribute type 29 has an invalid length.
[  454.874441][T19544] netlink: 'syz.0.3586': attribute type 29 has an invalid length.
[  454.995654][T19555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'.
[  455.139537][T19561] tipc: Started in network mode
[  455.159956][T19561] tipc: Node identity ca151f32a03a, cluster identity 4711
[  455.189251][T19561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.267743][T19561] netlink: 'syz.3.3589': attribute type 1 has an invalid length.
[  455.298859][T19561] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3589'.
[  455.331545][T19561] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3589'.
[  455.343701][T19561] netlink: 'syz.3.3589': attribute type 1 has an invalid length.
[  455.351724][T19561] netlink: 'syz.3.3589': attribute type 8 has an invalid length.
[  455.361177][T19561] netlink: 582 bytes leftover after parsing attributes in process `syz.3.3589'.
[  455.433168][T19554] syzkaller0: entered promiscuous mode
[  455.438831][T19554] syzkaller0: entered allmulticast mode
[  455.447479][T19554] tipc: Resetting bearer <eth:syzkaller0>
[  455.461009][T19569] batadv_slave_0: entered promiscuous mode
[  455.502826][T19552] tipc: Resetting bearer <eth:syzkaller0>
[  455.512101][T19574] netlink: 'syz.2.3595': attribute type 3 has an invalid length.
[  455.532852][T19574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3595'.
[  458.664100][T19552] tipc: Disabling bearer <eth:syzkaller0>
[  458.706810][T18182] tipc: Node number set to 1781473074
[  458.758331][T19592] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  458.784656][ T5175] block nbd2: Possible stuck request ffff888026c40000: control (read@0,1024B). Runtime 30 seconds
[  458.799968][ T5175] block nbd2: Possible stuck request ffff888026c401c0: control (read@1024,1024B). Runtime 30 seconds
[  458.814955][ T5175] block nbd2: Possible stuck request ffff888026c40380: control (read@2048,1024B). Runtime 30 seconds
[  458.826173][ T5175] block nbd2: Possible stuck request ffff888026c40540: control (read@3072,1024B). Runtime 30 seconds
[  458.991407][T19599] xt_ipcomp: unknown flags 1D
[  459.159828][T19614] Cannot find add_set index 0 as target
[  459.169515][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'.
[  459.180415][T19614] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3604'.
[  459.189737][T19614] netlink: 'syz.4.3604': attribute type 5 has an invalid length.
[  459.205610][T19608] x_tables: duplicate underflow at hook 2
[  459.231599][T19617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.373999][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3608'.
[  459.455039][T19629] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  459.495146][T19630] netlink: 'syz.1.3612': attribute type 1 has an invalid length.
[  459.559814][T19635] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3613'.
[  459.579774][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3613'.
[  460.364611][T19665] syzkaller0: entered promiscuous mode
[  460.370286][T19665] syzkaller0: entered allmulticast mode
[  462.363713][T19622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  462.402887][T19652] netlink: 'syz.3.3615': attribute type 1 has an invalid length.
[  462.443958][T19652] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.3615'.
[  462.630980][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'.
[  463.800495][T19695] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  464.043615][T19727] netlink: 'syz.3.3627': attribute type 9 has an invalid length.
[  464.300558][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'.
[  464.337837][T19735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3631'.
[  465.001642][T19783] netlink: 'syz.0.3646': attribute type 1 has an invalid length.
[  465.140835][T19787] netlink: 'syz.2.3647': attribute type 1 has an invalid length.
[  465.182664][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3647'.
[  465.199410][T19790] tipc: Enabled bearer <eth:vcan0>, priority 10
[  465.534101][T19763] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  465.589236][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3656'.
[  465.614416][T19814] netlink: 'syz.3.3656': attribute type 58 has an invalid length.
[  465.635961][T19813] netlink: 'syz.3.3656': attribute type 58 has an invalid length.
[  465.658819][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3656'.
[  465.688710][T19813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3656'.
[  465.782172][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'.
[  465.828720][T19822] netlink: 'syz.4.3662': attribute type 18 has an invalid length.
[  465.847888][T19822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3662'.
[  466.307398][T19844] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3666'.
[  466.576854][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'.
[  466.775487][ T5857] Bluetooth: hci2: command 0x0401 tx timeout
[  467.140682][T19874] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3672'.
[  467.305025][T19885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3673'.
[  467.440060][T19890] netlink: 'syz.0.3676': attribute type 1 has an invalid length.
[  467.451247][T19887] nbd: device at index 64 is going down
[  467.748501][T19899] netlink: 'syz.3.3679': attribute type 2 has an invalid length.
[  467.844563][T17062] udevd[17062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  467.867421][T17062] udevd[17062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  468.682001][T19955] bond5 (unregistering): Released all slaves
[  469.758188][T20013] netlink: 'syz.0.3708': attribute type 1 has an invalid length.
[  469.896477][T20018] netlink: 'syz.3.3709': attribute type 11 has an invalid length.
[  469.929765][T20016] netlink: 'syz.0.3708': attribute type 7 has an invalid length.
[  470.057605][T20020] bond0: (slave ip6gretap1): making interface the new active one
[  470.068881][T20020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  470.085699][T20020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  470.094182][T20020] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  470.272337][T20033] batadv_slave_0: left promiscuous mode
[  470.398859][T20033] bridge2: left promiscuous mode
[  471.079294][ T8915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.247966][T20080] __nla_validate_parse: 11 callbacks suppressed
[  471.247988][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'.
[  471.266088][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'.
[  471.302626][T20080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3726'.
[  471.351912][T20083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'.
[  471.458984][T20087] netlink: 'syz.0.3729': attribute type 1 has an invalid length.
[  471.536540][T20090] syzkaller0: entered promiscuous mode
[  471.562933][T20090] syzkaller0: entered allmulticast mode
[  472.175814][T20116] netlink: 'syz.3.3738': attribute type 33 has an invalid length.
[  472.281715][T20116] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  472.310863][T20116] bond5 (unregistering): Released all slaves
[  472.340665][T20125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3741'.
[  472.366316][T20115] syzkaller0: entered promiscuous mode
[  472.383367][T20115] syzkaller0: entered allmulticast mode
[  472.750356][T20147] macvtap1: entered allmulticast mode
[  472.758817][T20147] veth0_macvtap: entered allmulticast mode
[  472.829843][T20144] syzkaller0: entered promiscuous mode
[  472.868857][T20144] syzkaller0: entered allmulticast mode
[  473.653814][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'.
[  473.675418][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'.
[  473.700007][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'.
[  473.726714][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'.
[  473.756593][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3763'.
[  474.210101][T20208] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  474.268927][T20208] bond1 (unregistering): Released all slaves
[  474.491010][T20233] openvswitch: netlink: IP tunnel dst address not specified
[  474.884977][T20252] xt_CT: You must specify a L4 protocol and not use inversions on it
[  475.349335][T20256] geneve1: entered promiscuous mode
[  475.815548][T20305] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  475.984810][T20305] bond3: option all_slaves_active: invalid value (95)
[  476.038944][T20305] bond3 (unregistering): Released all slaves
[  476.263917][T20321] x_tables: duplicate underflow at hook 2
[  476.284591][T20321] __nla_validate_parse: 67 callbacks suppressed
[  476.284613][T20321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3796'.
[  476.409810][T20271] C speed is unknown, defaulting to 1000
[  476.736290][T20338] netlink: 'syz.3.3797': attribute type 12 has an invalid length.
[  476.775188][T20338] netlink: 'syz.3.3797': attribute type 29 has an invalid length.
[  476.793637][T20338] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3797'.
[  476.805741][T20341] netlink: 'syz.4.3800': attribute type 1 has an invalid length.
[  476.818292][T20338] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3797'.
[  476.975891][T20341] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  477.294362][T20363] "syz.1.3801" (20363) uses obsolete ecb(arc4) skcipher
[  477.401930][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'.
[  477.715711][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'.
[  477.751680][T20379] block nbd4: Unsupported socket: should be TCP or UNIX.
[  478.575368][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3813'.
[  479.010676][T20434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3819'.
[  479.216592][T20441] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  479.325891][T20452] ipvlan2: entered promiscuous mode
[  479.788358][T20474] netlink: 'syz.2.3830': attribute type 1 has an invalid length.
[  479.978290][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3830'.
[  480.060172][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'.
[  480.128141][T20490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3830'.
[  480.178242][T20477] 8021q: adding VLAN 0 to HW filter on device bond2
[  480.249344][T20477] bond1: (slave bond2): making interface the new active one
[  480.264650][T20498] openvswitch: netlink: IP tunnel dst address not specified
[  480.287048][T20477] bond1: (slave bond2): Enslaving as an active interface with an up link
[  480.359095][T20481] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  480.387816][T20474] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.421329][T20492] netlink: 'syz.1.3832': attribute type 1 has an invalid length.
[  480.435635][T20500] netlink: 'syz.3.3834': attribute type 25 has an invalid length.
[  480.621447][T20507] netlink: 'syz.1.3836': attribute type 1 has an invalid length.
[  480.967712][T20525] tipc: Started in network mode
[  480.986563][T20525] tipc: Node identity ac14140f, cluster identity 4711
[  481.014541][T20525] tipc: New replicast peer: 255.255.255.255
[  481.044047][T20525] tipc: Enabled bearer <udp:syz2>, priority 10
[  481.199492][T20536] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.206888][T20536] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.214625][T20536] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.221874][T20536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.309589][T20536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.338567][T20548] siw: device registration error -23
[  481.749356][T20541] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.756911][T20541] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.839809][T20541] veth0_macvtap: left allmulticast mode
[  482.867676][T20551] tunl0: entered promiscuous mode
[  482.877776][T20551] netlink: 'syz.4.3850': attribute type 1 has an invalid length.
[  482.886767][T20551] __nla_validate_parse: 1 callbacks suppressed
[  482.886787][T20551] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3850'.
[  483.009667][T15517] tipc: Node number set to 2886997007
[  483.048551][  T153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.068828][T20563] bridge_slave_0: left allmulticast mode
[  483.095030][T20563] bridge_slave_0: left promiscuous mode
[  483.120231][T20563] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.158493][T20563] bridge_slave_1: left allmulticast mode
[  483.170882][T20563] bridge_slave_1: left promiscuous mode
[  483.177736][T20563] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.205571][T20563] bond0: (slave bond_slave_0): Releasing backup interface
[  483.230573][T20563] bond0: (slave bond_slave_1): Releasing backup interface
[  483.244594][T20563] team0: Port device team_slave_0 removed
[  483.253313][T20563] team0: Port device team_slave_1 removed
[  483.264777][T20563] bond1: (slave bridge2): Releasing backup interface
[  483.296271][T20566] team0: Mode changed to "loadbalance"
[  483.302050][  T137] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.315765][T20570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.325834][  T137] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.326375][  T137] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.007122][T20595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.072121][T20595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.467694][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'.
[  484.501972][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'.
[  484.535829][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'.
[  484.922095][T20615] bond5: entered promiscuous mode
[  484.930022][T20622] netlink: 'syz.3.3870': attribute type 10 has an invalid length.
[  484.940250][T20615] 8021q: adding VLAN 0 to HW filter on device bond5
[  485.051475][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'.
[  485.060929][T20626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3873'.
[  485.081499][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'.
[  485.094244][  T153] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  485.096161][T20626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3873'.
[  485.124070][  T153] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  485.152949][  T153] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  485.205362][  T153] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  485.436037][T20632] tipc: Enabled bearer <udp:syz0>, priority 10
[  485.469275][T20634] netlink: 'syz.1.3875': attribute type 10 has an invalid length.
[  485.478028][T20634] syz_tun: entered promiscuous mode
[  485.505765][T20634] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  485.532147][T20635] netlink: 'syz.1.3875': attribute type 10 has an invalid length.
[  485.542135][T20635] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.555134][T20635] team0: Port device bond0 added
[  485.568583][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'.
[  485.620115][T20638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3876'.
[  485.656395][T20638] gretap0: entered promiscuous mode
[  485.893727][T20644] syzkaller1: entered promiscuous mode
[  485.899550][T20644] syzkaller1: entered allmulticast mode
[  486.701136][T20658] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode
[  486.714117][T20658] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  486.913647][T20648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  487.159047][  T153] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.176842][  T153] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.195059][  T153] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.205059][  T153] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.960461][T20689] __nla_validate_parse: 1 callbacks suppressed
[  487.960535][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'.
[  488.882912][ T5175] block nbd2: Possible stuck request ffff888026c40000: control (read@0,1024B). Runtime 60 seconds
[  488.894177][ T5175] block nbd2: Possible stuck request ffff888026c401c0: control (read@1024,1024B). Runtime 60 seconds
[  488.905370][ T5175] block nbd2: Possible stuck request ffff888026c40380: control (read@2048,1024B). Runtime 60 seconds
[  488.916702][ T5175] block nbd2: Possible stuck request ffff888026c40540: control (read@3072,1024B). Runtime 60 seconds
[  489.399234][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'.
[  489.543673][T20728] syzkaller1: entered promiscuous mode
[  489.577789][T20728] syzkaller1: entered allmulticast mode
[  489.999893][T20735] ipvlan2: entered promiscuous mode
[  490.246928][T20754] syzkaller1: entered promiscuous mode
[  490.253790][T20754] syzkaller1: entered allmulticast mode
[  490.274052][T20757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3907'.
[  490.283831][T20754] x_tables: unsorted underflow at hook 4
[  490.443889][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'.
[  490.569929][T20762] IPVS: length: 11 != 8
[  490.579519][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3908'.
[  491.171752][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'.
[  491.192211][T20782] NFSD: Failed to start, no listeners configured.
[  491.363375][T20791] netlink: 'syz.1.3914': attribute type 1 has an invalid length.
[  491.372313][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'.
[  491.391712][T20791] netlink: 'syz.1.3914': attribute type 1 has an invalid length.
[  491.743968][T20801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3916'.
[  491.840393][T20592] Set syz1 is full, maxelem 65536 reached
[  491.961784][T20809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3918'.
[  492.061185][T20813] ip6t_srh: unknown srh match flags  4000
[  492.187193][T20575] Set syz1 is full, maxelem 65536 reached
[  492.326936][T20819] netlink: 'syz.0.3922': attribute type 29 has an invalid length.
[  492.356734][T20819] netlink: 'syz.0.3922': attribute type 29 has an invalid length.
[  492.385027][T20819] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3922'.
[  492.536021][T20830] netlink: 'syz.1.3926': attribute type 7 has an invalid length.
[  492.641900][T20834] block nbd2: NBD_DISCONNECT
[  492.674165][T20834] block nbd2: Send disconnect failed -32
[  492.690254][T20834] block nbd2: shutting down sockets
[  492.714027][    C1] blk_print_req_error: 138 callbacks suppressed
[  492.714049][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.729710][    C1] buffer_io_error: 138 callbacks suppressed
[  492.729730][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  492.744281][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.753452][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  492.761407][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.770588][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  492.778480][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.787709][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  492.808871][T17063] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.822346][T20839] syzkaller0: entered promiscuous mode
[  492.835894][T17063] Buffer I/O error on dev nbd2, logical block 0, async page read
[  492.854700][T20839] syzkaller0: entered allmulticast mode
[  492.860835][T17063] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.874876][T17063] Buffer I/O error on dev nbd2, logical block 1, async page read
[  492.895925][T17063] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.929980][T17063] Buffer I/O error on dev nbd2, logical block 2, async page read
[  492.977385][T17063] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  492.999225][T17063] Buffer I/O error on dev nbd2, logical block 3, async page read
[  493.042967][T17063] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.068903][T17063] Buffer I/O error on dev nbd2, logical block 0, async page read
[  493.098710][T17063] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.130972][T17063] Buffer I/O error on dev nbd2, logical block 1, async page read
[  493.173219][T17063] ldm_validate_partition_table(): Disk read failed.
[  493.203855][T17063] Dev nbd2: unable to read RDB block 0
[  493.235307][T17063]  nbd2: unable to read partition table
[  493.241436][T20848] __nla_validate_parse: 5 callbacks suppressed
[  493.241458][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'.
[  493.309662][T17063] ldm_validate_partition_table(): Disk read failed.
[  493.337149][T20855] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3937'.
[  493.347128][T20853] ip6erspan0: entered promiscuous mode
[  493.357495][T17063] Dev nbd2: unable to read RDB block 0
[  493.379147][T17063]  nbd2: unable to read partition table
[  493.416936][T20857] netlink: 'syz.1.3938': attribute type 3 has an invalid length.
[  493.428832][T20855] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  493.712648][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'.
[  493.732887][T20866] tipc: Resetting bearer <eth:vcan0>
[  493.780080][T20866] tipc: Disabling bearer <eth:vcan0>
[  493.860681][T20874] netlink: 'syz.2.3948': attribute type 18 has an invalid length.
[  493.945871][  T153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.979258][  T153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.003816][  T153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  494.034571][T20874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'.
[  494.403491][T20892] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  494.416324][T20892] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  494.443902][T20900] bridge_slave_0: left allmulticast mode
[  494.449837][T20900] bridge_slave_0: left promiscuous mode
[  494.460241][T20900] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.532331][T20900] bridge_slave_1: left allmulticast mode
[  494.575006][T20900] bridge_slave_1: left promiscuous mode
[  494.591381][T20900] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.616455][T20900] bond0: (slave bond_slave_0): Releasing backup interface
[  494.627110][T20900] bond0: (slave bond_slave_1): Releasing backup interface
[  494.660495][T20900] team0: Port device team_slave_0 removed
[  494.692776][T20900] team0: Port device team_slave_1 removed
[  494.711105][T20900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.719577][T20900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.730129][T20900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.738127][T20900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.748121][T20900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  494.787343][T20901] team0: Mode changed to "loadbalance"
[  494.976837][T20920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3961'.
[  494.991875][T20916] syzkaller0: entered promiscuous mode
[  495.008234][T20916] syzkaller0: entered allmulticast mode
[  495.644951][T20963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  495.666740][T20964] team0: Unable to change to the same mode the team is in
[  495.941983][T20974] veth0: entered promiscuous mode
[  496.152166][T20982] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3975'.
[  496.239418][T20988] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3977'.
[  496.262390][T20983] veth0: left promiscuous mode
[  496.275610][T20988] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3977'.
[  496.290739][T20988] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3977'.
[  496.301703][T20988] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3977'.
[  497.301913][T21027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  497.354150][T21027] team0: Unable to change to the same mode the team is in
[  498.337587][T21077] bridge_slave_0: left allmulticast mode
[  498.354478][T21077] bridge_slave_0: left promiscuous mode
[  498.375010][T21077] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.408057][T21077] bridge_slave_1: left allmulticast mode
[  498.415344][T21077] bridge_slave_1: left promiscuous mode
[  498.421262][T21077] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.440933][T21077] bond0: (slave bond_slave_0): Releasing backup interface
[  498.471003][T21077] bond0: (slave bond_slave_1): Releasing backup interface
[  498.508436][T21077] team0: Port device team_slave_0 removed
[  498.543689][T21077] team0: Port device team_slave_1 removed
[  498.561140][T21077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.577654][T21077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.594112][T21077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  498.666560][T21090] xfrm1: entered allmulticast mode
[  499.005229][T21103] __nla_validate_parse: 31 callbacks suppressed
[  499.005269][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'.
[  499.133354][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'.
[  499.272079][T21123] H: renamed from dummy0 (while UP)
[  499.279452][T21120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.395164][T21120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.506430][T21130] syzkaller0: entered promiscuous mode
[  499.519189][T21130] syzkaller0: entered allmulticast mode
[  499.757317][T21146] netdevsim netdevsim2 
: renamed from netdevsim0 (while UP)
[  499.803032][T21146] rdma_rxe: rxe_newlink: failed to add lo
[  500.400205][T21187] bond0: (slave syz_tun): Releasing backup interface
[  500.489254][T21187] team0: Port device bond0 removed
[  500.539011][T21196] wg1: entered promiscuous mode
[  500.555326][T21196] wg1: entered allmulticast mode
[  500.587642][T21200] netlink: 'syz.3.4040': attribute type 1 has an invalid length.
[  500.608294][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'.
[  501.312226][T21245] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4051'.
[  501.385939][T21206] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  501.489669][T21251] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  501.654156][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  501.663238][ T1314] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  501.723921][T21259] macvlan0: entered promiscuous mode
[  501.848010][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'.
[  502.175719][T21282] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  502.426799][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'.
[  502.763650][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout
[  502.845945][T21311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'.
[  502.941580][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'.
[  503.030514][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'.
[  503.105456][T21321] netlink: 'syz.3.4074': attribute type 1 has an invalid length.
[  503.116128][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'.
[  503.394016][T21302] wg1: left promiscuous mode
[  503.398816][T21302] wg1: left allmulticast mode
[  503.924136][T21302] ip6erspan0: left promiscuous mode
[  503.958819][T21308] veth3: entered promiscuous mode
[  503.965965][T21308] veth3: entered allmulticast mode
[  503.980643][ T8906] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.034257][ T8906] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.054716][ T8906] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.081762][ T8906] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.121075][ T8906] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.154455][ T8906] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.442399][T21336] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  504.530844][T21348] __nla_validate_parse: 2 callbacks suppressed
[  504.530866][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'.
[  504.552964][T21351] netlink: 'syz.0.4081': attribute type 1 has an invalid length.
[  504.589236][T21351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4081'.
[  504.703352][T21361] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4084'.
[  504.946733][T21367] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.4087'.
[  504.997944][T21369] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.4089'.
[  505.133514][T21373] netlink: 'syz.0.4091': attribute type 2 has an invalid length.
[  505.161817][T21373] netlink: 'syz.0.4091': attribute type 1 has an invalid length.
[  505.333725][T21387] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4096'.
[  505.725518][T21402] team0: Unable to change to the same mode the team is in
[  505.884387][T21422] netlink: 'syz.3.4105': attribute type 21 has an invalid length.
[  506.032702][T21429] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  506.116262][T21436] Cannot find add_set index 2 as target
[  506.210507][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4110'.
[  506.224374][T21441] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4111'.
[  506.241303][T21444] IPv6: NLM_F_CREATE should be specified when creating new route
[  506.247716][T21438] vcan0 (unregistering): left allmulticast mode
[  506.397398][T21453] team0: Mode changed to "loadbalance"
[  506.525101][T21457] netlink: 'syz.1.4116': attribute type 2 has an invalid length.
[  506.858783][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4123'.
[  506.926802][T21479] macvlan3: entered allmulticast mode
[  506.953049][T21479] hsr0: entered allmulticast mode
[  506.966249][T21479] hsr_slave_0: entered allmulticast mode
[  506.981028][T21479] hsr_slave_1: entered allmulticast mode
[  507.165984][T21492] xt_hashlimit: size too large, truncated to 1048576
[  507.259875][T21497] netlink: 'syz.0.4131': attribute type 16 has an invalid length.
[  507.293316][T21497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4131'.
[  507.497645][T21508] xt_hashlimit: size too large, truncated to 1048576
[  507.516273][T21509] xt_hashlimit: size too large, truncated to 1048576
[  507.531355][T21511] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  508.370593][T21556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  508.570585][T21557] xt_CT: No such helper "syz1"
[  508.842880][ T5848] Bluetooth: hci5: command 0x0405 tx timeout
[  508.898242][T21534] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  508.916515][T21534] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  509.186349][T21576] netlink: 'syz.0.4158': attribute type 1 has an invalid length.
[  509.200777][T21576] netlink: 'syz.0.4158': attribute type 1 has an invalid length.
[  509.260234][T21584] nbd: couldn't find a device at index 0
[  509.278709][T21582] team0 (unregistering): Failed to send options change via netlink (err -105)
[  509.451956][T21590] bridge_slave_0: left allmulticast mode
[  509.460822][T21590] bridge_slave_0: left promiscuous mode
[  509.468429][T21590] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.489743][T21590] bridge_slave_1: left allmulticast mode
[  509.503714][T21590] bridge_slave_1: left promiscuous mode
[  509.517382][T21590] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.575878][T21590] team0: Port device team_slave_0 removed
[  509.626197][T21590] team0: Port device team_slave_1 removed
[  509.655778][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.668506][T21590] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.682202][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.694376][T21590] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.718906][T21590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  509.861266][T21612] __nla_validate_parse: 3 callbacks suppressed
[  509.861288][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'.
[  509.913394][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'.
[  509.957175][T21617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'.
[  510.002367][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'.
[  510.166848][T21624] IPVS: length: 162 != 24
[  510.404589][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'.
[  510.577220][T21651] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4181'.
[  510.696148][T21651] veth3: entered allmulticast mode
[  510.736242][T21660] syzkaller0: entered promiscuous mode
[  510.741963][T21660] syzkaller0: entered allmulticast mode
[  510.753786][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.762510][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.769392][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.776379][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.783231][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.790091][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.796976][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.803841][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.810646][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.817527][T21660] tc action pedit offset must be on 32 bit boundaries
[  510.824425][T21660] TC_ACT_REPEAT abuse ?
[  510.974518][T21668] macvlan0: entered promiscuous mode
[  511.076912][T21675] netlink: 'syz.4.4190': attribute type 2 has an invalid length.
[  511.096702][T21675] netlink: 'syz.4.4190': attribute type 11 has an invalid length.
[  511.114449][T21675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4190'.
[  511.210264][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'.
[  511.255575][T21683] syz_tun: entered allmulticast mode
[  511.284482][T21683] syz_tun: left allmulticast mode
[  511.301277][T21683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.789282][T21713] bond0: (slave bridge0): Releasing backup interface
[  511.807961][T21713] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.815438][T21713] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.854994][T21713] bond1: (slave bond0): Releasing active interface
[  511.897088][T21713] bridge_slave_0: left allmulticast mode
[  511.905350][T21713] bridge_slave_0: left promiscuous mode
[  511.911762][T21713] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.941022][T21713] bridge_slave_1: left allmulticast mode
[  511.947018][T21713] bridge_slave_1: left promiscuous mode
[  511.955006][T21713] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.977645][T21713] bond0: (slave bond_slave_0): Releasing backup interface
[  512.004253][T21713] bond0: (slave bond_slave_1): Releasing backup interface
[  512.033429][T21713] team0: Port device team_slave_0 removed
[  512.059100][T21713] team0: Port device team_slave_1 removed
[  512.084183][T21713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.092044][T21713] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.103119][T21713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.110794][T21713] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.123704][T21713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  512.465990][T21743] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4210'.
[  512.495861][T21745] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4211'.
[  513.405518][T21794] netlink: 'syz.4.4228': attribute type 1 has an invalid length.
[  513.444267][T21794] bond3: entered promiscuous mode
[  513.449868][T21794] 8021q: adding VLAN 0 to HW filter on device bond3
[  513.921192][T21823] netlink: 'syz.3.4234': attribute type 15 has an invalid length.
[  514.216317][T21842] xt_policy: too many policy elements
[  514.824829][T21852] bond3: Invalid ad_actor_system MAC address.
[  514.831093][T21852] bond3: option ad_actor_system: invalid value (1)
[  514.843499][T21852] bond3 (unregistering): Released all slaves
[  514.976893][T21864] syzkaller1: entered promiscuous mode
[  514.982737][T21864] syzkaller1: entered allmulticast mode
[  515.194014][T21872] netlink: 'syz.2.4250': attribute type 64 has an invalid length.
[  515.202058][T21872] __nla_validate_parse: 6 callbacks suppressed
[  515.202078][T21872] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4250'.
[  515.225190][T21867] tipc: Started in network mode
[  515.233279][T21867] tipc: Node identity 2ac4a437d667, cluster identity 4711
[  515.251621][T21867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.266824][T21871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  515.321694][T21869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  515.370274][T21869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  515.444093][T21882] rdma_rxe: rxe_newlink: failed to add vxcan1
[  515.496363][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'.
[  515.530556][T21871] syzkaller0: entered promiscuous mode
[  515.537504][T21871] syzkaller0: entered allmulticast mode
[  515.546339][T21871] tipc: Resetting bearer <eth:syzkaller0>
[  515.553323][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4254'.
[  515.553790][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4254'.
[  515.734045][ T1166] tipc: Resetting bearer <eth:syzkaller0>
[  515.741633][T21866] tipc: Resetting bearer <eth:syzkaller0>
[  515.990060][T21905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4257'.
[  516.023754][T21907] netlink: 'syz.4.4258': attribute type 3 has an invalid length.
[  516.031831][T21907] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4258'.
[  516.526282][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4261'.
[  518.366210][T21866] tipc: Disabling bearer <eth:syzkaller0>
[  518.406669][T16078] tipc: Node number set to 4238582839
[  518.556645][T21926] syzkaller1: entered promiscuous mode
[  518.566124][T21926] syzkaller1: entered allmulticast mode
[  518.584594][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'.
[  518.617383][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4263'.
[  518.691596][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'.
[  518.722328][T21930] bridge_slave_1: default FDB implementation only supports local addresses
[  518.912959][T21943] sctp: [Deprecated]: syz.3.4268 (pid 21943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.912959][T21943] Use struct sctp_sack_info instead
[  518.987787][T21943] sctp: [Deprecated]: syz.3.4268 (pid 21943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.987787][T21943] Use struct sctp_sack_info instead
[  519.033119][T21943] sctp: [Deprecated]: syz.3.4268 (pid 21943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.033119][T21943] Use struct sctp_sack_info instead
[  519.083046][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  519.098978][T21943] sctp: [Deprecated]: syz.3.4268 (pid 21943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  519.098978][T21943] Use struct sctp_sack_info instead
[  519.443968][T21974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.475740][T21974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.784143][T21991] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  519.801483][T21991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  519.816513][T21991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  519.886811][T21990] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  519.900739][T21993] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  519.914118][T21990] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  519.927254][T21993] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  519.944703][T21990] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  519.946749][T21993] gretap1: entered promiscuous mode
[  519.979511][T21993] gretap1: entered allmulticast mode
[  520.034516][T22007] syzkaller0: entered promiscuous mode
[  520.040381][T22007] syzkaller0: entered allmulticast mode
[  520.227429][T22012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  520.338657][T15518] IPVS: starting estimator thread 0...
[  520.374770][T22017] bond6: option fail_over_mac: invalid value (16)
[  520.384196][T22017] bond6 (unregistering): Released all slaves
[  520.447081][T22025] IPVS: using max 34 ests per chain, 81600 per kthread
[  520.505983][T22024] syzkaller0: entered promiscuous mode
[  520.529171][T22024] syzkaller0: entered allmulticast mode
[  520.749402][T22044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  520.827859][T22044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  521.139549][T22065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.551477][T22080] netlink: 'syz.0.4309': attribute type 142 has an invalid length.
[  521.695418][T22094] x_tables: duplicate underflow at hook 2
[  521.942897][T22106] x_tables: duplicate underflow at hook 1
[  522.229297][T22112] netlink: 'syz.4.4317': attribute type 10 has an invalid length.
[  524.557731][T22090] __nla_validate_parse: 6 callbacks suppressed
[  524.557751][T22090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'.
[  524.726574][T22112] bond0: (slave wlan1): Opening slave failed
[  524.737638][T22117] netlink: 'syz.1.4318': attribute type 1 has an invalid length.
[  524.756501][T22115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  524.778486][T22117] netlink: 'syz.1.4318': attribute type 1 has an invalid length.
[  524.788437][T22117] netlink: 'syz.1.4318': attribute type 1 has an invalid length.
[  524.820006][T22117] netlink: 'syz.1.4318': attribute type 1 has an invalid length.
[  524.879832][T22124] netlink: 'syz.3.4320': attribute type 1 has an invalid length.
[  525.038027][T22124] 8021q: adding VLAN 0 to HW filter on device bond6
[  525.088252][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.116302][T22136] veth1_to_bond: entered allmulticast mode
[  525.128080][T22136] veth1_to_bond: left allmulticast mode
[  525.179524][T22133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  525.281598][T22141] IPv6: sit1: Disabled Multicast RS
[  525.320974][T22141] team0: entered allmulticast mode
[  525.394770][T22149] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.4328'.
[  525.601278][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4329'.
[  525.723595][T22167] netlink: 'syz.1.4332': attribute type 16 has an invalid length.
[  525.741998][T22167] netlink: 'syz.1.4332': attribute type 3 has an invalid length.
[  525.752991][T22167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4332'.
[  525.967340][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4334'.
[  526.060488][T22185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.335718][T22196] syzkaller0: entered promiscuous mode
[  526.356685][T22196] syzkaller0: entered allmulticast mode
[  526.389614][T22196] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4343'.
[  526.580071][T22219] netlink: 'syz.3.4346': attribute type 1 has an invalid length.
[  526.810291][T22231] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4351'.
[  526.972397][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4353'.
[  527.041364][T22245] openvswitch: netlink: Unknown nsh attribute 0
[  527.215894][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4359'.
[  527.371263][T22254] x_tables: duplicate entry at hook 1
[  527.489140][T22268] bridge_slave_0: default FDB implementation only supports local addresses
[  527.797777][T22240] bridge0: port 1(veth0_to_bridge) entered blocking state
[  527.825219][T22240] bridge0: port 1(veth0_to_bridge) entered disabled state
[  527.833616][T22240] veth0_to_bridge: entered allmulticast mode
[  527.841824][T22240] veth0_to_bridge: entered promiscuous mode
[  528.252327][T22301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4370'.
[  528.333972][T22301] tipc: Started in network mode
[  528.347894][T22301] tipc: Node identity 465c3078e4a6, cluster identity 4711
[  528.358499][T22301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.474123][T22301] syzkaller0: entered promiscuous mode
[  528.480703][T22301] syzkaller0: entered allmulticast mode
[  528.487369][T22301] tipc: Resetting bearer <eth:syzkaller0>
[  528.846697][   T14] tipc: Resetting bearer <eth:syzkaller0>
[  528.928960][T22332] netlink: 'syz.3.4383': attribute type 1 has an invalid length.
[  529.027740][T22332] 8021q: adding VLAN 0 to HW filter on device bond7
[  529.056375][T22300] tipc: Resetting bearer <eth:syzkaller0>
[  532.265327][T22300] tipc: Disabling bearer <eth:syzkaller0>
[  532.288850][T22356] syzkaller0: entered promiscuous mode
[  532.294573][T22356] syzkaller0: entered allmulticast mode
[  532.303207][T16073] tipc: Node number set to 2734305400
[  532.525653][T22371] tipc: New replicast peer: 255.255.255.255
[  532.563779][T22371] tipc: Enabled bearer <udp:syz2>, priority 10
[  532.681152][T22374] __nla_validate_parse: 5 callbacks suppressed
[  532.681174][T22374] netlink: 81 bytes leftover after parsing attributes in process `syz.4.4396'.
[  532.771006][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'.
[  533.174255][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4404'.
[  533.361471][T22406] netlink: 'syz.3.4406': attribute type 2 has an invalid length.
[  533.740695][T22435] FAULT_INJECTION: forcing a failure.
[  533.740695][T22435] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  533.788656][T22435] CPU: 1 UID: 0 PID: 22435 Comm: syz.1.4414 Not tainted syzkaller #0 PREEMPT(full) 
[  533.788685][T22435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  533.788698][T22435] Call Trace:
[  533.788707][T22435]  <TASK>
[  533.788715][T22435]  dump_stack_lvl+0xe8/0x150
[  533.788754][T22435]  should_fail_ex+0x412/0x560
[  533.788796][T22435]  _copy_from_user+0x2d/0xb0
[  533.788823][T22435]  ___sys_sendmsg+0x1c6/0x360
[  533.788846][T22435]  ? __lock_acquire+0x6b5/0x2cf0
[  533.788888][T22435]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.788951][T22435]  ? __fget_files+0x2a/0x420
[  533.788973][T22435]  ? __fget_files+0x3a0/0x420
[  533.789006][T22435]  __x64_sys_sendmsg+0x1bd/0x2a0
[  533.789034][T22435]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  533.789067][T22435]  ? __pfx_ksys_write+0x10/0x10
[  533.789104][T22435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.789128][T22435]  do_syscall_64+0x15f/0xf80
[  533.789158][T22435]  ? trace_irq_disable+0x3b/0x140
[  533.789186][T22435]  ? clear_bhb_loop+0x40/0x90
[  533.789211][T22435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.789232][T22435] RIP: 0033:0x7fb590f9cdd9
[  533.789252][T22435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.789269][T22435] RSP: 002b:00007fb591e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.789292][T22435] RAX: ffffffffffffffda RBX: 00007fb591216090 RCX: 00007fb590f9cdd9
[  533.789307][T22435] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000003
[  533.789330][T22435] RBP: 00007fb591e06090 R08: 0000000000000000 R09: 0000000000000000
[  533.789342][T22435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.789354][T22435] R13: 00007fb591216128 R14: 00007fb591216090 R15: 00007ffcc52f5c98
[  533.789386][T22435]  </TASK>
[  534.078797][T22441] : entered promiscuous mode
[  534.117192][T22442] netlink: 'syz.2.4416': attribute type 2 has an invalid length.
[  534.155308][T22445] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4418'.
[  534.405081][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'.
[  534.443035][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[  534.580812][T22463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.738836][T22471] 
[  534.741245][T22471] ======================================================
[  534.748315][T22471] WARNING: possible circular locking dependency detected
[  534.755393][T22471] syzkaller #0 Not tainted
[  534.759843][T22471] ------------------------------------------------------
[  534.766991][T22471] syz.1.4430/22471 is trying to acquire lock:
[  534.773107][T22471] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  534.782308][T22471] 
[  534.782308][T22471] but task is already holding lock:
[  534.789718][T22471] ffff8880acdd7b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  534.799008][T22471] 
[  534.799008][T22471] which lock already depends on the new lock.
[  534.799008][T22471] 
[  534.809632][T22471] 
[  534.809632][T22471] the existing dependency chain (in reverse order) is:
[  534.818863][T22471] 
[  534.818863][T22471] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  534.826921][T22471]        _raw_spin_lock_bh+0x36/0x50
[  534.832438][T22471]        nr_rt_device_down+0x153/0x860
[  534.837943][T22471]        nr_device_event+0x137/0x150
[  534.843291][T22471]        notifier_call_chain+0x1ad/0x3d0
[  534.848980][T22471]        __dev_notify_flags+0x16d/0x310
[  534.854587][T22471]        netif_change_flags+0xe8/0x1a0
[  534.860097][T22471]        dev_change_flags+0x130/0x270
[  534.865519][T22471]        dev_ioctl+0x7b4/0x1150
[  534.870541][T22471]        sock_do_ioctl+0x23e/0x320
[  534.875710][T22471]        sock_ioctl+0x5c6/0x7f0
[  534.880620][T22471]        __se_sys_ioctl+0xfc/0x170
[  534.885790][T22471]        do_syscall_64+0x15f/0xf80
[  534.890957][T22471]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.897405][T22471] 
[  534.897405][T22471] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  534.905301][T22471]        _raw_spin_lock_bh+0x36/0x50
[  534.910844][T22471]        nr_rt_device_down+0xbe/0x860
[  534.916249][T22471]        nr_device_event+0x137/0x150
[  534.921558][T22471]        notifier_call_chain+0x1ad/0x3d0
[  534.927227][T22471]        __dev_notify_flags+0x16d/0x310
[  534.932837][T22471]        netif_change_flags+0xe8/0x1a0
[  534.938347][T22471]        dev_change_flags+0x130/0x270
[  534.943783][T22471]        dev_ioctl+0x7b4/0x1150
[  534.948670][T22471]        sock_do_ioctl+0x23e/0x320
[  534.953808][T22471]        sock_ioctl+0x5c6/0x7f0
[  534.958689][T22471]        __se_sys_ioctl+0xfc/0x170
[  534.963828][T22471]        do_syscall_64+0x15f/0xf80
[  534.968961][T22471]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.975403][T22471] 
[  534.975403][T22471] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  534.983606][T22471]        __lock_acquire+0x15a5/0x2cf0
[  534.989050][T22471]        lock_acquire+0x106/0x350
[  534.994128][T22471]        _raw_spin_lock_bh+0x36/0x50
[  534.999433][T22471]        nr_rt_ioctl+0x40c/0xf90
[  535.004399][T22471]        sock_do_ioctl+0x101/0x320
[  535.009564][T22471]        sock_ioctl+0x5c6/0x7f0
[  535.014523][T22471]        __se_sys_ioctl+0xfc/0x170
[  535.019713][T22471]        do_syscall_64+0x15f/0xf80
[  535.024891][T22471]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.031325][T22471] 
[  535.031325][T22471] other info that might help us debug this:
[  535.031325][T22471] 
[  535.041577][T22471] Chain exists of:
[  535.041577][T22471]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  535.041577][T22471] 
[  535.055444][T22471]  Possible unsafe locking scenario:
[  535.055444][T22471] 
[  535.063032][T22471]        CPU0                    CPU1
[  535.068509][T22471]        ----                    ----
[  535.073898][T22471]   lock(&nr_node->node_lock);
[  535.078789][T22471]                                lock(nr_node_list_lock);
[  535.085930][T22471]                                lock(&nr_node->node_lock);
[  535.093238][T22471]   lock(nr_neigh_list_lock);
[  535.097947][T22471] 
[  535.097947][T22471]  *** DEADLOCK ***
[  535.097947][T22471] 
[  535.106368][T22471] 2 locks held by syz.1.4430/22471:
[  535.111601][T22471]  #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  535.121125][T22471]  #1: ffff8880acdd7b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  535.130825][T22471] 
[  535.130825][T22471] stack backtrace:
[  535.136738][T22471] CPU: 0 UID: 0 PID: 22471 Comm: syz.1.4430 Not tainted syzkaller #0 PREEMPT(full) 
[  535.136760][T22471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  535.136770][T22471] Call Trace:
[  535.136778][T22471]  <TASK>
[  535.136786][T22471]  dump_stack_lvl+0xe8/0x150
[  535.136817][T22471]  print_circular_bug+0x2e1/0x300
[  535.136840][T22471]  check_noncircular+0x12e/0x150
[  535.136862][T22471]  __lock_acquire+0x15a5/0x2cf0
[  535.136899][T22471]  ? nr_rt_ioctl+0x40c/0xf90
[  535.136915][T22471]  lock_acquire+0x106/0x350
[  535.136940][T22471]  ? nr_rt_ioctl+0x40c/0xf90
[  535.136957][T22471]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  535.136985][T22471]  ? nr_rt_ioctl+0x40c/0xf90
[  535.137000][T22471]  _raw_spin_lock_bh+0x36/0x50
[  535.137025][T22471]  ? nr_rt_ioctl+0x40c/0xf90
[  535.137040][T22471]  nr_rt_ioctl+0x40c/0xf90
[  535.137061][T22471]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  535.137081][T22471]  ? apparmor_capable+0x126/0x170
[  535.137107][T22471]  ? capable+0x88/0xe0
[  535.137133][T22471]  ? nr_ioctl+0x1b1/0x3b0
[  535.137159][T22471]  sock_do_ioctl+0x101/0x320
[  535.137183][T22471]  ? __pfx_sock_do_ioctl+0x10/0x10
[  535.137204][T22471]  ? do_futex+0x333/0x420
[  535.137227][T22471]  sock_ioctl+0x5c6/0x7f0
[  535.137250][T22471]  ? __pfx_sock_ioctl+0x10/0x10
[  535.137272][T22471]  ? __fget_files+0x2a/0x420
[  535.137289][T22471]  ? __fget_files+0x3a0/0x420
[  535.137305][T22471]  ? __fget_files+0x2a/0x420
[  535.137323][T22471]  ? bpf_lsm_file_ioctl+0x9/0x20
[  535.137346][T22471]  ? __pfx_sock_ioctl+0x10/0x10
[  535.137367][T22471]  __se_sys_ioctl+0xfc/0x170
[  535.137389][T22471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.137407][T22471]  do_syscall_64+0x15f/0xf80
[  535.137431][T22471]  ? trace_irq_disable+0x3b/0x140
[  535.137453][T22471]  ? clear_bhb_loop+0x40/0x90
[  535.137472][T22471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.137490][T22471] RIP: 0033:0x7fb590f9cdd9
[  535.137506][T22471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.137521][T22471] RSP: 002b:00007fb591e27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  535.137539][T22471] RAX: ffffffffffffffda RBX: 00007fb591215fa0 RCX: 00007fb590f9cdd9
[  535.137552][T22471] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005
[  535.137562][T22471] RBP: 00007fb591032d69 R08: 0000000000000000 R09: 0000000000000000
[  535.137573][T22471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.137584][T22471] R13: 00007fb591216038 R14: 00007fb591215fa0 R15: 00007ffcc52f5c98
[  535.137604][T22471]  </TASK>
[  535.400325][T22476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1