last executing test programs:

11.138290631s ago: executing program 2 (id=3083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000280)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r2, 0x210, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x284868f8}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10b85689}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff9ed}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040005)

10.998721305s ago: executing program 2 (id=3086):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in=@broadcast, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd28, 0x3504, 0x2, 0x2, 0x1, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

10.808492914s ago: executing program 2 (id=3089):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x10, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000910) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @initdev}, <r3=>0x0}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r3, 0x7, 0x20, 0x8, 0x5, {{0x18, 0x4, 0x0, 0x31, 0x60, 0x67, 0x0, 0xe, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x4a, 0x3, [{0x5, 0xf, "1c0d195c797096954eba76fb94"}, {0x6, 0x4, "629a"}, {0x7, 0xf, "e4c49917c642003e4bf57ed45a"}, {0x0, 0x2}, {0x6, 0x7, "a5d6d7eed2"}, {0x0, 0x4, "dce6"}, {0x1, 0x7, "d198ec8029"}, {0xb, 0xe, "7ce7cea9f5ee91351c1380ed"}]}]}}}}})
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x800)
ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000300)={0x16, "11b5a47624a253249f62cf4b80bfc372ed38aba5a71bd065533c565a12a3c100b54e6e8c0305d4ca1f1ecd6cb526bf1e6aac2e043bb07f758cfa7379afbedeedb6685ffbc244d194b39ac1001ebcfa293876c697cb84e9170f5ad0a9ffd680a71694d74d1c24dedcc07a7298e058b371110e92042869143bbd08612d4357154d"}) (async)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg2\x00', 0x4)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400), 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}}, 0x10) (async)
ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000005c0)={'nr0\x00', 0xf, 0x7})
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file1\x00', 0x0, 0x4010, r4}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000740)={{r9}, {@void, @actul_num={@val=0x2d, 0x5, 0x4d}}}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004100)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "70c54d4811ac565563f5699b79d10ec4eae939f00623aaafacc0b5095b12ab16877ae15cf5613043573fe5e24e2debb68616d2851bd3aee6aaab884ccba80ef495728da73b6c97ba977b57c6e042"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0xa8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x6f, 0x8, "fe380a19459bd64e58236af3caeb75598a4befb9e0cbcc121a0e532011a901ee68ddcd9fbd3641a0524c8c958b206c4df1a2afb5d72db0a8cd1a0a9166f348ff47ef334752641bfd8d25c474eb82081d09beda9eebfb4245b5fbc3d3d08d2efff27c90cdb16dcb33d4fe34"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x357c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x640, 0x3, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "a2928109587dd96cef151922978f85193336c3ad1f010fe0190dc96925c8468ac9f1ad0043414d22a7734a1273bc38f9270f14920d757280719b1305b2d177f6e0af9031891acaf353fe0d71586814170c40f7772b38a7bf89a778ed6c9997c4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x57, 0x1, "cff2800b6ed6c0afe79844d6770fc46777521b4c97ebfd63e410fe423d561941425fbd13e4388023a3b0f37d06d678f21f82a32e48219229f255f6fadb4eb6b151a6a85442560f968c84c2b4863228ae54b73f"}]}, @NFTA_SET_ELEM_DATA={0x220, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x45, 0x1, "a1559e92a96e03a16f90722e5ca71746d04fa29a89741dd278b78850a49246360684dd0377e7a90be0a4867a4736d30b43bb5710833f7ff04473c3b09d76bba99b"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "cda498093491514209160e46b7fcefad564e34620fa6d7cafed1e18677755b23b68c37f195587cc12efda7f46357d2430493e90e0e6df2ab288f9fd6cc9e74f164900a7b98360389fda3"}, @NFTA_DATA_VALUE={0x50, 0x1, "04424c621cd185f799658be250b2ac6c5399cfc933d59458175d7f206207bed943418b1bb193a995f6273ce4d9e033a97e3509821d9e05b009e4434f79429c1d031fcc944a24e5a8a6261b9e"}, @NFTA_DATA_VALUE={0xc6, 0x1, "2b1475596536e03b9c3f0fbe7ac28ea7c3919b31f4aaa6641f553648e02fbba753de429abe4252425192897853a68576c1f91cc8199dad8a5bc8e180b63bc8ac974532c2bb6aa45f2da844c465396b9fa54d1696adc0a3e9e5941c8eba24897cb6521cde743d79f5a241066ab3768775c111cfed6ddb429c80ffb58177e7cc69f2873423a19c1309d2aeb184848d0b2cbb88aaf9b9187902552d33a0b62525acbabdc8e7498405762abaea539948fd3fc5aa504a7367297827d21a72f2ce9f4af3e2"}]}, @NFTA_SET_ELEM_KEY_END={0x178, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "1b421349b76177ac0c67dcc4f6727e5456c441a4702bafd6e6eb10697f4397f318e2ff59ac33101c0b8681d762d21c71e43e9648bee9411fc0f75cd76d44659522721959b798380eec6808eaf0f74ee6feb7ca8885c22756ec5181d64f9a10e16b679b955ec7551cb689cac711a73bf2a5926fe0727e581382c8d5e19fa48d5d30074417c23b08006485da156e499a62f7e2daa247bca708db1c4b002b656b3154aefe9989cad467c5e20b3cd9478a47b6ed6f1ecdf27373e72278708c43"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "f3ab4098a08a628a5bfe9a419ac5015b070a8bfa9d67ec9548f93ca28d7d7d38bedece0920491dd4ad03887fdd8b2e2a8730cf30f474a77a05df10de38da090fd0284d45c259e9ae4fb3dd1e5bfe758be6351eb88958a9ec7bf2e3369919ae31aad1c2bc6975268bf865906f38b926823f281ff1d1e8bb42e28d8d2d902649e8284df8b527293f43e539196bbc4d148e65af2fceb960"}]}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "f5c45e032a976301b9a9e4739ee084a968f332588c1ca13ee0a0211a252dc35cf19fa56c3d78b152af403ca03774459bedfc01dddb238816b908349dc6519b31cc2dae683a950b1020727e41510cf9aba13502521ba58812"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "7f14bba49c0d743e7025dcada718e7"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xee}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xcff}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2f20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "f228890d7c567c5a7d232f5178e2e78c4b22046a2cfd48d00a7d9c6a8fcd7261a2065934eca4bc7cabd1cb261eed1ce168d46ecad41bfc50b4d3cf64ffa9de6e1df52056a7fbac420fad45ed52b38f01e40a223d134307d3372ce08ea5f59ab997912f45eec83344b32c61d07b8f88dcec00865d3387bd5143f2aac73b4f228472ad5da46f4a7b56a970a9d65e625e64da761e5551d78e11d70bc79b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x61, 0x1, "703666da6c9e119988593905223f38b849946337bd6af2fd6a88d21de53dd9e22e61858cb981ec0341009446b84fa48aa3fa38e86c22838cd616584a6c067bc52f62fddd95bdbecf7fc888220cfc3510a59c7b031f89db977590da045f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xdc, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xcc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0x7d, 0x3, "163ce3635714fe1fa829572421c55dc21787a835d0fb699025ebca2a262a29596ba24eb5ea5a6758a9deb0574d53e66daca357d387a7e60ab34a34edcb7a2f40400dddef9b164c90f6087748c20d4c9b8b6e5fb0f1c513402da46f6e8c79b80e22f77311a4536acf2e9e0dbb086e17cc9260170314506ee47e"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x27b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x138, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "63e0134be163025073f566f417f32b401d161295e6eba7dfae69878645417225d36c3806b08fa169795c4b62cc1cc39b54261d998c32fdc822617e9be38f23b5ffbfe26da2dd597f24f238917d66aad0805f908e35359a00134986ee8a48dfb808d0627fcbcdd17302b844464cf35f93977fefd759fb"}, @NFTA_DATA_VALUE={0x2d, 0x1, "192c76f3d100c4b266cb98d98c87212b1be36d4a6e1fbf758a194cc5af0468e72d5d1c6c33db4a3bdb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf4, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x2330, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "911280995015e1bfc42f38fd4375eb5b72888aee8fb59f345d16f92c996731c4b7825356a863e337b35514e2a5863fd85d03dd4ab400f12ab5b32bda41761a67ec936fea328826bd2d3fba3f95d9969fb7c52cf5a45e6a1289a981bcf6b0057fe3afe9d68ba25eaffb914d3426d92798df636e3c1e5b5fddbc553553f26787c1ca0f805fe9e06b3f78bc7355deb0328f6d3d04778a37ff38267d18e5a0f5455f07de093b18710f298b41c1dff961341fb336f543262ec2bbee52fca3c972b725b74f1280a5e667a8752044dd946da17d0e0d8ebba53d9f99ae730cbfcc2b8693886fa910c3813dd3529541d30c3e4b1cb875748a5c6c1f299893849640dae33d26bd9d85401bae8860060a0b67c041d5819b83362b40230f6493f6b2ffef17dc944088dfecc69c5b5660c647ec56d16420d5315142e05199aab8e22e3df7606688043f36e29db9bed0373cdafd9b5d176fa00f056a3d962ff4134b6e7d2ed8b4698e6dd558cd901a663edf08da6f8625d0e8e35753cf3dc0989d19bd6269503fce4a6a05a6c2cad09670c43f3554a38b8f4cc8ac3a44428e361dfd26cee3dcc5be99c0016301dd19962d750908b23617ef5d45b96135ef39ccf0e73b76030c62f4ef41061c1660cf12893c93c80b70f9d4a3363aa79e1230bd3866751f4c80e32d802bd4ecb44af03ba04201407acb9805eafa93fdc2f19b27e7208448b66669c535ec9ee4302d140acf2a1a022ab6ef7bea3986c2e289910a13aef6ca4d61446e7b16328e7c3e6690a1aadef0039d147e94d3456b72f3a8db629dde3573515c74828bc0454575c4f92c4a50be3ef9e4db21c9c5de27e94bdd124d89209b9fef29ef39601b4cfd5b5f2d118fe4688a4b3df37dfd8af702ed31606b79700b333ea7243e8cba3707f115ad80bf43a141ae42ab941e0598ec7f83c14b05b550bc8f1eff37fa34610270cef15d92006582938beb8f655fce1366c218e96cba0e3119c7d933d15bbfe4ebca19250d159d9cebc6632b5f617bf41c2447dd2efa50cd3b0955021f1a13de8bed318d442551dcee2132f8b50cecec706e5385e2f785d9d3770f2512040cec7cdce8c619e57dd61aa0ba7912cda6ec1b660673f48cb9506d3f8e6bdf6c2a8afeb14ef042646bcb7052fd37bc6f2d15edd99d6177097697268427a496c7a845453d1d35a91d818f09d1e90de82d656f0d587dc28b2aa17b20a179a609e18cb04a52e71eb54a6270208aad2664a13e5b61ee56df107efb451f8bc6d36ac42652584ef7a858cf41705413d976816c0bd1b1a9f7dbbeb7a408cab282e277bbbe56bdb7c09c49a013672b302e04a138cb91f7841960dac1d81aec22f8c0e733f0e87aa5a120c3dc41330201ab3087a099807d89e3d7877666dd6a363068d1222c4c8b8de88713829ddb5c87d1013d645ca114a8ea575c2801179b88e2345bb6e905839ee35c8e942d9dc931bcc88648f446b86dc3233c1df1dfcb09e1c095292d75fea5a2993c00fdb2251075c8137d7e5b473618c30f8fe54ff9f17dd12370b91e518e1c9ea1f1d50f9c107ebaa159b8436c2c5ea17e6083ea553fbd88f1195b7a79dd8298c5b6e091f70bdbff69eb6a1dba5d01dee802aba6df9ca0e0b4e1dfa5eb039835cf131c10c3b35f0b3edcb7cf2ebbebd6ddcb219de4d69f9abbc6e1d0cadef4489afcb089e4eb7b48c09fa50a33cf0549bde44002911a698e1fed3526f12495a944424c2358dfa0f54bdf35de19db111a91cf107fdb264037ebbfa78a962a09a21b29b8142016cb4f6d690facd04cd8ee3c633e2dfa5cbecb369f66cc6f06057d58c2aa95a28617479329ca50c79b8750179cc64664a3658d23462ddf10d292d039dab9dda52e344122111d499a4682d1948ccd38bb7a1395e3265c0a4879c45de9616bd3702be933de0f5d2a8ca514fe9626cba886ab3691bfae45351f54f37787fb379d8a0fb8d055970577e0805076257e064ed08576ba6b937669cf094e434254ce1cf9ddd35d4fe2f6cd7f88640f3f45ab4394eb57f5d3e721fd0d4cf195f35e5b2a6ecee488c82035ef2848a17f733b77d12b5d9185294d50f05d1bedba931f55618d3f40cd2f5e4997144804a52740886baf1eb30aba71328e2c118369ead23f6493b49dc1a3f79059348e06c85abf3182c7a2f9420a2cc0cc6491e9228f50cb695d29605f0401315e518966e03f30dc97b89a47ff7b841244f669bc4b2c58cfc84810d3ec2dbdc7aa69f4aa1a479fb72413d69606634f5ea8d683cd965431672ac08d7c51f940c871b332d02185eb78075b525f45eac815e0c87002a293c3c494da4274bddab3f4fea3e3782f9579db02a76cd04ef9830d041c831a8c7722312c5e454e8938eaeebea0e7cc5ed327a3c70d76aff6ce0901485b9b2705011555475412a5f94f8c2a8d2a6bee6ff67748b06a2c56d5a2239aaeccabe0663554cd6edc065dfa71946b0b4e5efad6bd3fc635fd2e1ff5ae0f03349bad7dd3b944504b1e0e2af2e67141604918e760350b70243b334f588885c75b3728d6a0c40a49156d43eabae2b037f39c69daa606cf535d84c6b7804d3a272282e632ab238b543576589092deb0632b2007844d1b3cd7abef8947beabd5475dd57397c543ffb4d83bde25047072fc2ff5af710afa935e62867e59b2f0600d3877b8b029e330801a8e739af36eb518dc7c50c0193e590a29373fd09803079305d136b4b10a4e568030dcadf36017cca74a9f55ae18445beda772db31b094f436376444b6bf3ffb14f2f7aa8d062b338ded6f99bd2cccbedbf38aa465a795c14ae11de3756b2d15d3c023fcac6da89a7b2f1d2205e53ca29df452c1c88ee8fd3b149ca23c2a8b5bbf12d08b6fd8a5dc82bd00bdbc196487e4367604fdd9076f4ead3aaedbbf9036def21fbc1779bd74f0a3d8a749dc3bdc7473ffc9140732a1950f8a246dc55c30e09cc594e7de96d23c6a868c5aebabf703532a624a04103e8f3da3716f1f5aa16b608c4bebb53c2e7cebdb3bf18575827b7a34213031303e60c0ded1015ac5fdbb8be7de5db322be5ec1de99ef59c0c739b5d572157880fa0e46389ced710e2252390b2bfe55cbb2fcf97b50fb51c2736a57c7e21042bfc0a32a1735aadf806e1c7a23c3d4717806a7690886c9a138465667523c94551b0cfcfeef112d81f161981e68477e199c93652e5a4d78ee4630bc3f9072f52f7aacb6ff49a99928166800e342dcfab37da69d22e1fb7664ce536936c2c75978d9ee381ee506bed16eacdbf7dc705389049499ba9baaa4520841a10b49f55e3a146c419b843edd9ea9aab87bd0fa3aa8733eeff40960e2ac8b912e0ebbbb43f6e2cb6deae85a459e3bf716117e1c49bc457188a82504a67a907fdc9fafe5d3707d9766a4c27cfffcce8bf0be65ee04e16924dbca9b85d8d1ad23828143672c97db444144f389bc7badf53e91456851c6dbac1a16cb85b72a49ba12dc81cad7d49d288770914094fb059aae497ccc52823eefb5539c222f3d3de3f59bd4d5b3357eb07d6019316afa2253d4c90146aa496ef8884cbe0850878b1b98d7ee004b86aca1659be20c57c745c76198ec83d20dfc22f65655f7c2dd84041072be738c8ea8b4dd026797bab55fe24660e04fce85ac66dba7b7a2328a904aa0669c4218e94b4e76b79d1015d267db01c407f56306d5909b5ebd89231940479e0a3c998922a6ae528c97468b6e074ba4fe9a2a93e9d365886da7a574aa25202e8c167bf5502b941ec25600c437b16f71fb5bc75f90e56d3b3e4c0c583bd842feef877af63782fe3465ef084a35028ebf48162a46c36917afc8d04e746872b14968f4906c61046be9bd873aa512cbb41a9f276c801302191463ab83c6097d8115e26aacfd83c19fb094259d7cf53bf96edc793188d5f3dc725bfa098b2ac15b08aa3b17be2b437d3ec0e9ac7a5faade54a403ec561639a99be0ebdd5d193ab01e287bfdc691cd9f4c0e8cffd7434ca07e333693e505944f1de5883138f3fbb649989c75a5e991a964cbb9e52424ec286808ad1b5bb47cb07cd10415ff5b02231b9236fc24ddb28c8fe50856b23a82412ae1e7364d06c944d134870dab5ac1718166c6f3a36cd70c836e736677e35601170bfd6a05f9e5c54fb96dfa53cc79527abbf1ba0273fd2609bf7d29aa01e590becfeac223697572f23dc6d1b5d6c6309d7b035921288ed702972216ecb05f88c2c7843d4cb2d38d130fc22eb43591a854ca84faddfdab68bed6dfab7f94946d407bd16f8e66a89d694b19fd6f2a18bd7bb144a6c9641a352166e4b684382000ec4e128dde99d85d940a46a0d6c319bcbad66edac0f43fc11a2c2180d863b4e8f99af4cd80058183f3e830bc3c1526413b5208eac864b612b03717f22b5a46d07f4bdf47bf14e21af523d30a6caf3f84ff5609f9a10856e14c5fdd5bdd452263bc0716090a21ffa9e2e5ddcb34363e92b4e95474c5f5baa64738cb42c20b3c07d161b6947950d3b2b43b10a6f1072df767b44d155351485c7cecca82ccbaa87a1781b054c0d7039985c649a043ea48849bfa6973e5ca18c8fe89845240bd216b2f37a69643f48e1745a93c96c012d18d15d9437a8e7847f24f690f866666a403a3af91e38bc26be6a70ae337e658d7935dc8f5c7a61065dc025853643271b8d80591db8a69337ccafdf1b4591ef7e96a68e1de7fefe205c21b1b44ebb3a278335ce142eeeec30e5424c5b0e78956e5c9cb6447f25142a431181886adb1780e951db58491c0bc41286eaa41a21dedb64e7bbb639d73039221dadfd04d69168d942902436010dbb2f1c2373c3b7517f5408b3704dc9bd7c04cb86ee4b40e80d7bdc6ea7d3a795a45d88cd0690435bec186a06ed65c7e0af9387d6d2035cbdd2f95ff15cfa9cad001c52d8002caddcfdec30c4d7ed5317364937e8d1dfbdbc62b73658331b679ae0ee9fc85962fac022ea2d1f52b49031a001185b910b3791713e89812434974733e96acbd646252dfb91fbe946a935788e974a524348d39cce99563478b18311b825719c92a093af9a2555408ebfdb3f70a7e612007a00a7e80ac32ed1e2b31c26f18d1dd4af921444accfde1db20ec992ccc2a0471307c1ec425449cd3d559f9df0d7c3115f5d7ca358946625b4ef5daf1628f5261c6da3eeda29d8e4841374b60262b217fa71183d3476a98dd04544f9ccc1ee4b7159f29ffeedb800584e11c5ab334e82b21c935c21310ced4459e306cf50fa3c3945f7b8f40d17fb595706025ef5b51788ce40a622fec090f71b120b14d250adcdf0f00329acb225788f6311d46785b5852321959e05dbaf7f6ab34555621c8c8593ae8090003878aa49ad6cdb44c966002bba70e7b9de628969abdcfbb82763f311dfa59d0a06fe82a6b5b216e3befc5787782518590ccbb70e249e380e19e1b6ac65c64d18dfa9f2ef1410f4f289eb6c7b2db0c95857667aca479b4bf82e063b05fc648ee7c8fc566e35780d3d70e3c578854b221ee3a6479e6bed5e166d096486790a33a1b22ecc48171a4ef5343ac80bdc4a856847b0d37243c0d7c426f0d324989b62f29ad87ccc863a4c092cfcb416c84f3cb52237356c6854d72ccbb96dc99d7cae0c894609402df59daa05046e08115ca0afc341d2898028200ce2c9fe2a3729e8b3130691f4c64127485614551f70440bed1cffff260b77dd5b55d0f67d30ad61fcadaf47151f00ce2268accfd17fb6eaa6edae309af930e4b226ccb2bdfea3c0d906c8ff2669c83fd3c85401d00fbbe661e1e"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "752472e91569795395956816efab90d9d14209e6f743061fa0bc8cef060f5be4b6fe3d71db43a2a73ffa9455df5a8c682f779455b41005cd7366f430cfc503ff485f30aa386726f9cc50a693caa4e2b16da7ce61114224e2556ff442e82d0117201f6fb8679845765574f928ad214ed3b06576ba09230f34bd6fe83031583d77e57bf6f31c3fd754e10eba6bb2bde07ed99c951de6ee9e2093a1be"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "826a9d9bf9b035421929169fdd411318eaa80718654f1d3296898975a73b4cbb1667fb55ab1db998835470ffb92e69754755a8cfd208b076f402be525dde7916a79f2c693a0dd7ec41618bd15f5a98f09e92d7bc1860b1e9e986766c118e77103b0715bd8513f875f77ae224ea36df79e9f88dc6fba02da6db73f1e33411e1ccdb18a5c62397910bd3f751aa4f4bb8af54d8bfbe3cc8f5c082d144d56bb0cbe6c807dd015b879c12519872cba0df8b2588f99a3b2a18fe4b097c342fe964c713e3952bd982d4e5c8c53ce3a57c9a9282766a1d2e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b6abdbfd2013a9c200247fe4696fc1453fb22d1b665c2d376d53bd18b06775e67b4e332373fa98866dcccaa14144b13975484c0957ecd450973c7d9d22d4ce4b597fbf29a5268c700a4d6a5c545df16859886807f3ca90ccc40bbc7e2790b84e2f65700a1e76576edf75cce9041f2163dda25b0d718861ca0bf7941af814fad2cd1ac4c6f61bedda1718d9195c6f5008a4bb86af5e66b03860005dc4b7ee2cff3c655a09271259f0705b8e68942bdda22c36857d043461e550f7f6025d55b07cc01186702ec70fd1bf0374cce1dbc606b867f25a7d970dc01478777ffa8627bb11c6603548a2143389740c6d22e4424d8254cfa6f0b71af2f10f90811256a308df8be5772ee861d1f7855df8b18fd0b6e8841e42f251e26ec5ff6cde1414a7296c397f7dc1fa26d2191fc165e71278b80b5ea4a217b5e2c68884ede910faac497eeb9ec103809af69e6aede213dcdef15b8e3d2e12d558e5ad8232e652477a303fad6a76c25e7c4ead43e459144577a6ec50f912c80593de58ffa1469041604b874ef6c5e2f4f3fe6505a8ca5c113d1171ab5bd7dfe0c4f5f37c68f64cf3f8d97e4cf6d36a75ceac8d0b1d175c3a439dfff593c47f6f6701bf42633fde892e9bf58a14ff93acd38d4e8b05ceef9fb63b4d206b1e60cd5ae78dd86426b6cb613d72c9f6696bb99e227e998c6ff5f10009dffbfc40af319aa2f985143914fe583430b766b172cccfbfb814a7228ce64df4b32fd79d2682c0218f344d53b83461148c5435e928bb58bf6f218709f166ac1af40c180aa349f3c00d4438c0b0f08eade7f4c36bb6fb4b0ea00a59d2b1d63690effb8530437aebb7251f8727ffbabf949d368b5e42bb9858092c669c55148dbae26dc9d1d2f096eaa26b5b95c08a2bf3f51f736d0c618b01aa22a0e38a417ad593d4574db1b7448a3be3a2ca9f2a5d979130d501fe6c50ce435ed8bc543d5b5162e753e99dfb4192b74a8a45a7158972026fffb23bd7dd47768c2c675e00ed0c3d50978687f476df85e2a6fde2e971845611e6613a4ea771ff66f1c19506d406f8f87854d01cf2fe23db5d435e21f13d6e3a05235208220bfd88eda965f1a1856ab6356ae5d4b120b7af1604773c620d0639a005653653802404002f2e7f3a197c7eafb381357c6d38e6a1818f1821bee0554261acb87d7d3519b15ba5f23e1101b79bb323d0ed3c1e308b6b2955df161bd472b419a44be23d831838b7cf71a819bb797eaf24295e58760b7ab0fd3ef9f361eb8bcbf9c2af0964d042a73942365199c18b23ef271486970cb1dd368bf9c032955bcd4cade3f428c6b6a77d1cb825ce5fe7d65651fe5076442b03ce6d9bffcc5d16481a49efd69ba39e8a1fbb75c2fc82c8b7ceb5354718d2bda8be4b745a33157a7a7af3dce42dac030f20fbe32fb2e9c642fe449aee675d3db48ee05252eecce3ca9ec8800a40f3ba7ea1bef03202fe8493ba09e14e60c7cc33948c960f7fb5c817b962ffabbd7d05a42e77af2e715801d3bf1de158882ab6fa8fbcace372e81a6d1f58fa06c4569673902201badc95f193475a76034953c559fd276ec967680e80f290a651c553175276499245f2729837d9c6da168ad6d06d18e4fdfc4ea5a13908e4997fdf7ffce05d1732060c6c8ed5bfbad0f44224813336e62a2b140478866efec81edf6abd8814c77bf44662d9d5b803d2027c4fc5706612b9efb12da1a36eaf5b2bb6129a4091885008c99d3006de05eb5a31316328b612b195356a8e2943d05f58e8fb5dfe2393df48b181c731bf052ebf87f84b2d6cb78c1404b3e83293cd87f8c724b17a10df4239a6d869de0c317fca94869acf0713c16032b4395c7102806d7ac825cc20a0cae6a7063dbd8e98e8e252bb60ef15b3cec115d3924f7a311d484949c0bdce95b5a55bc7b8375f1e7bd66407b4b864cd913bbf00e8fab55258fef0f2b8b7fb839225fed24ee33112485667cacb54b4844fcbe6f8d7cf8a5aeade17ba0450a732617bab0126d7b5761c8020610f15011bf888486d1947523defe9a59dc9747147e7e1c6c8284874ab1cf9aa4b9312672be24f67fa7c7e209b40551ab40795e10f2b75682fddc5cccd07d23731c3977e8a7bb2f4546929c88d0e502b74d99c6aed634a57c18d7e515756f76499d9948a1c5411de0d4f13dea2f956863d9fc94a25dd5b73ec8a3e83921dfd3df3277fe8abdf0f97bc208428fb071b6d3211b98b7dd6bee2fb6c0811a74998403871e41894fafefc2180b8b06a7d158f55ca81eaf9e380aadb159193151f84a587fe4e9d21e8a4713f9156ffdf29bcc91e865576550093394493a30497a0b8c5bd264c44919311dbc6e9074531be05d46d6ef9cb64b3c123e7cb97ec6cb27309cdb4940d5315d364c66f4630af7ce1d6b6d59f3702d5d51e3a0060a1c940393d6bf6c79be0114f49d5481ad91bfce24cc29d0a5cf971d4c200325644fbb1cb2ceb22207adf0b791a0a69e5aa664ce752331120afb191881f822a28e399815174aca70f829419784fcf47fb7c197635612221ee5b05119b74b7e30817b1a575a64bae06db04148f88148ff9eedfbdd410d733b90838b4a8adc8c3ff891455384cd15ac8cb3c120c287124afd870ff31949d369578f8ddac7fc35340bdde2a040edb833739760de734920da95f1a0ee6a857010e2ee05b8e7cdb1d9d887faabd4263ee8d6938b6334873a005a584041b81eb8946ec0e783a18188477a02d1410c0345d84ad9a26c894b63646c809b4fcbdc98b8329c2f9719b1cfdce65ab85e1e98a6f396dc83e95d50634b6b3fac8302cf522f14b2d060f2197b87a2d217164ac1716528facc457cd9acfbdb02fdac885313cc952db5bb77b41e11e5bc7e66d496149133ca739daf538c97c65d38227ee3e2019576a75e0417718bca799132181f43589193d557896f03603a35707c02aade09015067a7cbf65da5cc6f6b1f405d36eb24384eba9fd16f28c8d986480ad256dc5b52f876acdb5ef76062e6863cb6d31c1b1cc0abcb9cfd731e2b735b042ada4cd5c16d280d4bed1913b7c184cd9d0d7eaba0eeff34b9d5f46998f9a17ef541d7a0a3ff6992eb47bb2acef1d4553f3cfa2dbe60c745c98d135e21d43a3668bb6477e901bd1a3aa48ca5ce78e5a83bb1828a512666bb02d73fdae8e674e006fe0e68f6d5c77d969aa384d54b28dee52426683de3fe1d60b9ffdacec2645d21b11e2b7426ee83e9831bb2962a2e3963ac5491d68aebf7dea8811cdd8a8bc241e018116117c5714f6996b46a50cbf93e506bbfa68b9bfb58a91f1d7a37b5fe31eff91828b121778c8467aff542234ac4cce5a6f21809486284b84c213dd042816f41e63d50c0a2b273ed6250ee9d92d5435f059cea8d63915b16c907d63c986ed5c8cc6c3677f739cd7eee3882cdcfbf0b37fd271a65a9563b7c070f95028230d89df236fb69cbb0e9ce85aeec8e7e84a1ce9b71d4c1f0a53645323ab21b1e28a88479bb8928b38afd98e140c22517ee9c3efbe8b784f63b053a7e56ace37b185ca460800a0e346cecafb7c594baab2eefc4a1e45a0a4ea7a6e4fbd516f347978982e75fb1957fa5a833f2bc0fde77a2fa0be7ddd0a029f75dffac5de5e5fad21bdef0c17da4adc7bb9edbd53b9914793586e4954a6525e49ac4d650ed638b5b6d751e90077db576d04bf1248082876fa718e3e47e2dfb24785f7a9d91da865e8162136cad8fcd66847a74ba8802765722a30c59daf0143f5a4a4a9a836d7184d6d8c5acfafe94e52d15805a39ee5bebb7676c91c3bfd70aaa07a45eb48578adc81c9864ced66c06fbf7eb622ee55fc92bfcd630e18b4b2ad9a2980bf6f750d560fd1193e8719d4fac96b818b0fed1f134b3914a5744c5a0fe1bb4549bd64ff22b72006900c4c0e35418f24fdb7a808886f8454f7f4eb81a614638b17713bfed069078a15dfce59662c1b3fda96c327491a7315817076f0cb8f665d6e63637330771f4f98aeadade73f3be25338e21bc54a620173828a774f79687b25a2b9012879e8dca6cc80bc0882f9a1189cc48af71d5a2f29e14de7f66bb0ab398eda4488dd28d0ac302077e403ae594cbdb3e22b323489e58a56e75e7a147ff465a44667f3404242f5c4f8dc61ea4ab668cabc1e0968f5148f6473df43a8fc80038203bd4df901dc34b4c5b7249fcf681ff4a45837f0ea06e1748f0bf481919426166cf1b023a26f1844dcf184bf3869989dc9424769a0c215c12e86665ae8e55495da7ca012fd7c24e8e932fec5437226b855b3a28991aceba1afc5f5b1887526dab5926793f40b94aff91e8e6f5253fe59861bba2124d635e922bdb94fc6618c794eaf90b52ca80da826c959a3727fc0e24c361f35aac7e7125d008f24a6b08be967e50c5263a256c859424bf5c1c7d054a8fe73982e7d4ab7fb2b583f4b114d153c232692564980dba86b369670a8200809e5475a05daafcf9656dec88cb8ab6ad59f1b3e4b642f66d2a04c37683986ad389ed63d95e895540da42ac7f920ee1d80936ff2686df0e7d2789f55f104a97a7c754c8b40e3bbe6fc4baece79ec1084ddba796ebbc202b7ddd6b3402a12bb8c89962176c152715b3981952d676f41b0ea37cfa1394fac631300de6bfd86ca135051f26a2e3879949289ac44b08cc9b095d67c28d67f13ab116f44acd476ca226d7460cba10cbf475d94480f2ec2c80bb095ecd35facf009e4eb283bdad54eac8d9ae9a55ba0f567b807859fed2fe3c005045725c6b713f5479f90b3225d589372d76a604a578dd86e6ea6d60c3202ce251205fdad0d4ca41d2846981ae2d5745e57963c13c6bf71a637d19305d40b9339800496f2b3885cb7d592c01cc59ac7301f021cb1cdeea6b64b09c75d0af387d6b186b2e36169515c909eccdf95e579159dee9f1b49bad7dd3d294a8e7fdeed02599d1c38710433ca00f9071a37a0f3af0fef03534519ea1657ea333590b601f37cd763b8b61669389b6bdfe3cf39fdcff39fc4b6c9b4204356a8daec0008ced09d4af34662ed3f4bb7297baccf806e08cdc7672fb7f3a2b706f1d540fa8d37141e98033bb9509b38e1538179c760924ef7ff8d96756d1e8f4a4511212f6b29282dace6217f89de99b6cdc91113e83873a78de8d2b259c3bb3d50182848380e25d96a5e6bde0787f6fdddf8290b8c88eadf332ad4e3f76e61d7780cf9a65b2324ef0dc2e5206fe53a00db4312c6b658ca58b6af5dd9c6e65d46fa3871a7ae02ac3c7265bf089648e80141cb8f2d5f9c864949b52f2e18657cb5cfe9dd2caa229c3c2f44e89c25624214d49af3af88e7d249b3a3f7e8409b8aa9c986c0c6a27692ca4e3a6782aceb8b628f536dbb3deea0c9b96c4c4d0a240e62626400d2edb9913fe60831a6b08698e2ac9ade957a85431d298bd70149e98bfa86a368bd535d29823b8329316fd0786b471be7fc8616cd35945955ac158a1dce0fbbf0ba784aca1d9938dd42d9801e6eb64398eb42bb7a1a97db1f9b141c6846fa7d55dbc37e0ff0cf6467e55e6b32ffe9258ff36ba58386a50c6b2b25651c3f0c0cbbf2163d1ed6b393d6c4ecdb5a8a1253e24852e8bd0e946863da8827edc09fc873f686bb5c217e7c6671cf0e85edfa1c95ca3b21da169dbcbd4de005b68ed84dfe91fc84ae8c46f7c27cd2368dc34eeacbb3a1097a3279420aa80dcb9a14a8d96eff43c168d7e0a6578044f7701c6ae54b5b8dd29594e7ff0856286236942aec5d604314a0277c9ccdb69f67b4ac2f42fae64b02577fde0251ec7e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "639e7cac9efd7a92a5994d106b164e2688adf38b2ab8473e6ae2500191621cd6c749a344a0ba1359"}, @NFTA_DATA_VALUE={0xde, 0x1, "60d491c2a74cd549cc4cd657fe1b5b88157223d52a1f1c2a7fc31b89e0c5bcc75e4770c086d41b8564351e64490843e37c26a09b33824d717a166af5b5e7edb922deba89b0db5c2ff963ea0a512fc0348b4bd6062265cdd861fa4575089ac4d5d702938701588a1ae664e1b61bdab9ea340d05cf479027d6c6f887f55e62798d48cc7558bba025570e1a1e863d7f1d66a23e6a54db8dfa5e3a0e08faa6089e9e1163775fb919bcfcc95de9dcaccae61b1c1d84960d6fa408e73f86c3c79f774fc1a2985b20eaa2a456c69284324a3d77bfbdb20bc2687c7f43ce"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x130, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x64, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6c7a}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xf8b}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x76c2c309}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xec, 0x1, "df9c3a8344d2e0cae894107b3bc86528c401753fdcbc2dbd7be5bd3b05df6be64ec2159be0ea5cfc0e3315a4a18ad41622c34d1154641f36ec5c241fc59d4ea4844aa3296d6dda49b6dcf894a5ba641e58d3eefe9ac9348127d4d9d963b1a38c83222c5cdeb32a8085b4d56b271541316acdbfa39d8b615f1ab2405036767080179dfc1e7061d795745f79d4fd5721617dd1c344bbe45a53db00015e26feca42d647f20d7f35921b1928e020449e3aeacaade4da77c1965becb87e2a167ec6b45f7bc9c1a6e7273e1ee866fba58d0dbfbc5812d02aaeafb3ff8997d7a60910172b48fdf60f5f2d05"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x3c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x34, 0x1, "8b39d45893f61e648bb358725cddc22797f1f4fa0b1b2a6fd6e9c26311ae353fa0dac8daf55b880f2fc0421aca2c7915"}, @NFTA_DATA_VALUE={0x2f, 0x1, "5cbae6fbd80ae602886c0b1892b639e755e525e847baae6ec262f5f9c02456ca1f86c0e539068eeb4f0df3"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x24c, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x238, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "0a77ecac2157d84b66adbc2c71bd2bd911b7d0a7e91fa5bad8b6886a328d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "7f3a0c2de7e26ed5829741a9d0404fc0c022b0802b4e3b5adac83128173906616f562f0eaf2f96ebd5178924f98dd17a231e9abac0431c1faafc0a80f3f17a8b4ac9a52bdaa742772200b875cd504b82a6f97c1236f689faca89d28fc59185af074d24438db67baae0aad655337099b11c514e2511"}]}, @NFTA_IMMEDIATE_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x65, 0x1, "c701bf2f30c79fd8f2247c242a334ba85779e0fb75d6c70dd7dfb20e62508237e844e53e161caf4cfccaab61adf7da1f7f6b62c8a83be99ee3614441c02a7676cfb1432369ad9196b622975814caa601914e77e39bc65907c7d32619853348be40"}, @NFTA_DATA_VALUE={0x17, 0x1, "b5c0e27eceb7a1a9bfb59aa8200d10e4bf3653"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x92, 0x1, "993a32f9d2e51001c2f58d893968f23475e18252a1b78a37e60485db33e8adab32cbdb6c00ff32312f2c91ac5389d0c3e603a7f9d0b81765bd97adba2dcac22d3ebe7a81c5cd8b24981c12fddc8456ff8c73309b823c533ce5b051ed2977a40259406efc8d656d44bc858a73107379f746aaad207325116f36af34001223c55c4cbac1d4d55e258554a11fced21a"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x79, 0x1, "a3445e3988ffaf5818460219ec70ce13228cdccd8c126a083734e932a3117c18899621915e6cb5e050fc2b410f6c0b41c88ed789d11e9822d4c5f33f1213ce31286e26fb37eb05cf1dcd55440ad82ad948f24a30ac05cf5a26a0e8564764ccce695d61be9da7077fb8c26cf55c058565fde9574e99"}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x82, 0x1, "b9e295966e9e3493bb54c0c6635958613d786fc26a23ac6af5f87914afeeed9ef211fbf77364ad74ea3e30b65d5af3db5d00d9cfcbf73657c9d2331f399a0e26b99450eaae340ecc04e49c9910565a652a946150ad73ed348d9fc2f1f748a24893af4015619523b0c002303b99f6fba8465aad9a4489f23e20f1f6c0fb9e"}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1a0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_USERDATA={0x5f, 0xc, "8d1f73ce674827c15cf297cab1d11ce8020a63248093eb89ebd91d3ffb44009fec746f041a94ac22f96267e6bdf778185901be825784dfb39de4ce794e8a2b2902a826d1d71cf6fa0c1fcdefa778a042293c28ba0d1f7b46c08c5e"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "47f496bddd6ff0c0be5d0f61c4038132a7a764bf97b09b7d701e2ec93982852d70ebc509711bb79dcf2e5826337d73298dbb405b3fa504683bf6e9f22916a9518c7fb8c95d54299f9b306b5fd80867babc9ea303b1e8fb713f12078114778f42099a939541788ab7dcfddc5d7c37ee4392753d030b5dbd43b594609dcf5185d1a543a86a40c73f12e329c0e23a8f943f59bc4f1891cecc9d1330926d0d0a34ff24d940cd22f70643d63f775216dfe361b1577d84f53666b26ce42d4b73908cd5b417c362ef5e9466d5"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x280000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x132}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3914}}, 0x2)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000041c0), r5)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x2c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x200000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb092}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000000) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000042c0)={'dvmrp0\x00', 0x1})
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x2c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000044c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)=@setneightbl={0x34, 0x43, 0x200, 0x70bd27, 0x25dfdbfb, {0xa}, [@NDTA_THRESH2={0x8}, @NDTA_THRESH1={0x8, 0x2, 0x4}, @NDTA_THRESH3={0x8, 0x4, 0xfffffff7}, @NDTA_NAME={0x6, 0x1, ':\x00'}]}, 0x34}}, 0x8c1)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r12, &(0x7f0000004600)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004540)={0x60, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x4c, 0x8, "3448789c90ec5157fdae141dab59d949d094ffbe211230cc124d7bb9cf4774b7321f09fa2084d02cd8d6237e27ec7c9a187f69ff4d46e0568b261f05ca2bbc4781e0dee9571352e1"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x20008800)
setsockopt$SO_BINDTODEVICE_wg(r12, 0x1, 0x19, &(0x7f0000004640)='wg2\x00', 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000004680), &(0x7f00000046c0)=0x30)

10.556604099s ago: executing program 2 (id=3091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async, rerun: 64)
connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x11004e23, 0x4}}, 0x10) (async, rerun: 64)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={<r3=>r1, &(0x7f0000000100)='\x00', 0x800, &(0x7f0000000140)={@align=0x1, {0x40, 0x5, 0x2, 0xf}}, 0x684, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x9})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000380)=0x4) (async, rerun: 64)
r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64)
bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x6, r4, 0x10, r5}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
accept4(r2, 0x0, &(0x7f0000000580), 0x80000) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r8)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003980)={0x20, r9, 0x701, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800c094}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r9, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a0144000000000000fc1e0a0000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44)

10.293937545s ago: executing program 2 (id=3095):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000280)="4141900c74a8b64f87a4d02fe8edd360e9ecef7eceedcdc8d82000bf0d95a7e5c7c90105691a8603f620a1b7890211e7d0d1f3dd4cb79c42378bea98bd0ca95b9f4df49d2b053747680e3ce86b744d4fc0b5d642ab54b04c1d3f0cf2419f48b5eaf648474e1ec42683ad25505e154285448e3f20e3a16a6b02302db38fc8b0e8479e20ac6207a60e1ee5e2d019282f5738b8ccde532109a6c9a37cd756bfd131862cf3bb491c2d7ffd14a9121c6f878d9ae8ff8060fb2ddc0d0d52f8b9ec4556d2075f9ea318616433118aec64cc75b3db970b0078a28a05fbcf2cdf81bc702b9bf6bbe466f267207f5decf2fc0fbfb91002b3f07c", 0xf5)
bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60)
listen(r1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x6, 0x1, 0x6, 0x8}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0x0, 0x1}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082cbd7000ffdbdf25020090000008000c0001000000080009000200005100000000000000001420e7e41779965471c0fbb70add1ad3013b2c70784d8a9f"], 0x2c}}, 0x8880)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c00048028000180080001006f7366001c00028005000200020000000800034000000001080001"], 0x80}, 0x1, 0x0, 0x0, 0x24000850}, 0x24044010)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r13=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r13, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pread64(r5, 0x0, 0x0, 0x3)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=r4, @ANYBLOB="14fbffff0fff0001000000000006000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xffe, &(0x7f0000001e40)=""/4094, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

9.928949272s ago: executing program 2 (id=3098):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x1, 0x7, 0x2, {{0x13, 0x4, 0x2, 0x1b, 0x4c, 0x64, 0x72e, 0xf, 0x4, 0x0, @multicast1, @multicast2, {[@end, @ssrr={0x89, 0x17, 0x9a, [@dev={0xac, 0x14, 0x14, 0x11}, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0x38, [@dev={0xac, 0x14, 0x14, 0x1f}, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @remote]}]}}}}})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000d2ef"], 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

4.552470477s ago: executing program 4 (id=3151):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

4.410595781s ago: executing program 4 (id=3153):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x6, 'vlan0\x00'})
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x6, 0x4)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
recvfrom$inet6(r2, 0x0, 0x0, 0x101, 0x0, 0x0)
accept4$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c, 0x80800)
recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/4096, 0x1000}, 0x5}], 0x1, 0xfbf995e6166c7c05, 0x0)

3.433632812s ago: executing program 4 (id=3160):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0)
syz_emit_ethernet(0xfef3, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010020641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200", @ANYRES32], 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94)
socketpair(0x9, 0x80000, 0x7, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000180)=0x6, 0x4)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)=0x8, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0)

2.597542737s ago: executing program 0 (id=3165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$int_out(r0, 0x5460, &(0x7f00000000c0))
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1f, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
r6 = socket(0x80000000000000a, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x400}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108)
close(r6)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38)
sendmsg$inet(r6, &(0x7f0000000940)={&(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="7f579350561e104dbe53afc924313c7b986ec976a2", 0x15}, {&(0x7f0000000440)="f3f0a0a15482c1845e1bb0bb499846091ea96f780f6db374a71e17e04aa35b736f3e695608563a6e7b24c98964469271e1e7e26e176127109977ada2f06a1b785217ff92d6bc3d9a5c92373015b26ed82fdb2fb3fd8846c33a938801f0856821e5233e0f53cf9c0093d9ee3cb97920608e281f9bc67461ed069cd2584c1c034ce5b1", 0x82}, {&(0x7f0000000500)="4b2ce9240b17c4374e79ba963477e26cac7788258554", 0x16}, {&(0x7f0000000540)="58327e240ae971648f96d380c5e10ed4507cf7e580c4855f03ca56f341596c9ba3170b512153c745c3ec27bd5d52bb72f3", 0x31}, {&(0x7f0000000580)="f97c6cad0855865c6f2686e0bb97a9afb4e12f3cc3a5844b3cad3c87e450b0d27d75301fa40445803e7e566364fccb8e912fbc83d2cee281566f241cf13d0c190050b7215ed2c57b944f415e03c9823e81346045d77e56b0bd413298900f118ba2fa56b48bcd7a2a68dfd644585c924bda", 0x71}, {&(0x7f0000000600)="c139a594a37f5a0467f8e7114d4758ba93a662f13f4df4ee893a93570dfa389b52a5333f4459c4d95651ad12dd83f6c9", 0x30}, {&(0x7f0000000680)="cf33d6f7bc00db776e49d229e179c0fe13506c7b8489da44471cb9cf322d7867f0f3042b20e65755c3e8ad7b772fc061d0c897ea01271831a62bc864fc", 0x3d}, {&(0x7f00000006c0)}], 0x8, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x66, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x8001}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x221}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x18}}]}, @cipso={0x86, 0x1f, 0x1, [{0x2, 0x12, "0b250d7bbffde69216b04115ff9518ab"}, {0x6, 0x3, "86"}, {0x0, 0x2}, {0x7, 0x2}]}, @ssrr={0x89, 0xf, 0x20, [@remote, @empty, @broadcast]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0xb, "430659971c8a2ee1c2"}, {0x7, 0x7, "38acb541d7"}]}]}}}], 0xd0}, 0x44)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2502000080280001"], 0x3c}}, 0x40000000)

2.295239132s ago: executing program 0 (id=3168):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r3=>0x0)
write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32=r3], 0xe)
connect$nfc_llcp(r0, &(0x7f0000000200)={0x27, r3, 0x1, 0x7, 0x10, 0xd7, "b6de844579fbfecf39117849359a63b0fea0c875a4687c01602503b309bba0d7fdaa4fd72da58c3820c636e597feb35de41a875b5dcfa8b4b4ab7eb64c57ca", 0x10}, 0x60)

2.113915425s ago: executing program 1 (id=3169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
socket(0x2b, 0x80801, 0xfffffffd) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) (async)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000001429e82211cf886dd6a7abd8800006701fc0000000000000000001e0000000000ff0200000000f9ffffff0000000000019374f0cad0bb91a82ba5ed76f668ada77532781ac3cf0517007b50d00fe7d7bfa6e4bdbdca59cb41741a6e96cc8ad6bf4072929104005550058e76e300616a0e5c9bec54b689c1d1808da81bc0104d15747a697c692ae707f6dd4098ffd230f70fefb179699b8924ddfc500e7df6eba9369e0402586e35d6feb602a99c205fdc6842c2d9f18ae383416a0296b2ffb678f5b2c4d594f57d25467ebdd8"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x6, 0x4) (async)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x3, 0x8000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003800017e1800fcffffff0400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000340)={r4, &(0x7f0000000000)='\x00', 0x402, &(0x7f0000000080)={@align=0xc6, {0x2, 0xff, 0x9, 0xffffffffffffffff}}, 0xfffffffe, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000300)=0x4})

2.08841337s ago: executing program 3 (id=3170):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
accept$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, <r2=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4, 0x70bd3c, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "d6776a312b7affbb", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r7, 0x0, 0x20000000002)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0xa020480)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f00000003c0)={0x1, 'batadv0\x00', 0x2}, 0x18)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xa0}}, 0x94)

2.008581879s ago: executing program 4 (id=3171):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x4000000b, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c)

1.96816297s ago: executing program 0 (id=3172):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

1.866771445s ago: executing program 4 (id=3173):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}, 0x60}}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}, 0x60}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000000)={@loopback, @private=0xa010100, 0x1, "5198b3e28b02a06ffa63f5c696326a1b880c10ef884f8796e16cfcf8fc2f8987", 0xa, 0xc, 0xfffffff9, 0x8}, 0x3c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES8=r0, @ANYRES32=r0], 0x44}}, 0x800)

1.780491177s ago: executing program 0 (id=3174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendfile(r3, r4, 0x0, 0xffffffff000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x300, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xfff3, 0xfff3}, {0xa, 0x1ffe4}}}, 0x44}, 0x1, 0x0, 0x0, 0x404c040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRESDEC=r1, @ANYRESHEX=r8], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.733021515s ago: executing program 1 (id=3175):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000400007012bad700000000000047c00000400fc800c0003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000005c0)={'pim6reg\x00', {0x2, 0x0, @local}})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@private, @local, @broadcast}, &(0x7f0000000380)=0xc) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x20000000)
socket(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000100)="e9f584f2300b82e8ab4522c5a3bc374e", 0x10) (async)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async)
ioctl$sock_proto_private(r6, 0x89e2, &(0x7f0000000680)="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")
socket$nl_generic(0x10, 0x3, 0x10)

1.643119521s ago: executing program 4 (id=3176):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)="bf3e6b004d8fc449d07c5fc88d52890f510c52cf308e86a1270ee6efc78b54f9269977c037ccda64ef34a45043505c44df96372fb0e555115b7871a816165a4f5e22f0f73199875c96b5298a92ed9f926eca648e327e86e444e334c95408802c959d60", 0x63)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="020108dd012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
splice(r1, 0x0, r3, 0x0, 0x406f413, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0)
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048084)
sendmmsg(r7, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$sock(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)="dac5d661d71b", 0x6}], 0x1}, 0x4000000)

1.29268098s ago: executing program 3 (id=3177):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r0=>0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x6, 0x8001, 0x2, 0x1, 0x1, '\x00', r0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xf}, 0x50)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="0502c36e0840cc5bdc84d405539ae75c506d81d148f31c4852c707dfd9ae9ee33cc228fc1946699af3bcfd206e898719dab4465ccf6976fc69299a83dbcfdb5462f70fcc44cafbe50e29c7d5e83002268cb79b8e4be6fb0d16d523975049c8983f35c009ddec606f97e303c2df9339f6c9babb8fa0eae0a7d673e87f442a4e8f0a77bb49c0bbd63d74dbaa7b5d227a0430fd31c2b8e41cf02ab4a080fd0b0b67e4790b46724b4c2d2fa287fce1ef2631fd70a8130a8fe5ae", 0xb8}, {&(0x7f00000001c0)="8eaac5ed22e84f9bc8245d524d9f513dfc5b52cb13cfc252d17ca89c3a940d04cf2bb7a4d4df702a2121781ec093354097666530350f58f9fb5d94b83dabec80e3805191265ed64f4a8787fd54b701427e3ed6ec16f93b96bb68c87b05683b162bc2be5f9c3fbac7fd644c958e8ff028e9505b8d23fdf5650d33f1720d0ea5344cf7183c37e293702127c7e6f1e271dd658e3d98ebac22", 0x97}, {&(0x7f0000000280)="cb75c6fbeb2ba75648cd9e5834532fb6263698dc0ccaacc52f9d556029501a1d5ad9574ff5ed02e1a0811b0ed00c90f016528c34e68f4be7bfaa74b38066ac6e5b72f9a3dcb81cae682a8ed2d85883bc57944a", 0x53}, {&(0x7f0000000300)="4803ada19e571fb519fb4a761408bb34d2ddb844c3d8f90f9f9a9699a8fa1fcb69912abce40f5172952841948c170f68eafd014a1c9b72eb596ac0d6b304261ff960362ce1608882f6bdcfcb7df189f3929ad380bd5d47098e1a62eeac14e6314831f20bae4f4e27666c9c7a4bfa08900fbd239bd753baec80f948ff5e8cc895e3364a35a8390e31e33480768ba0546b06b67e791a275c5446f256c9211cafcc4e5355e398a2b074774cd349dbcca3c5d951b1f69dee6f9036b71f26514bcff17f423ea51d0bda069c23d36f8860e3eca35a6413da188826696187f5cd144d165c", 0xe1}, {&(0x7f0000000400)="5ccf552cdbf96613bcb5ce696a1ac3130c6cc24cab76694180226bb2a14db18fb7466d67a469b764ab207aea3191cc46e0d4182992055bb90ef80b7e146617af0d7e9489af897b3d6f1ce29e1093e0bac65bca9a3350ff7e0967c28bc50c77067b1acc35a33e87b00067a5a61c046b9e105b6ccff44209fdfa207986d582c0057e2e055a131e0011794fac74dc0e1f14f4feea164cc3bee9199d3804eb6288366b99a68b69299582946c9098c09bdb1f15196430535c534009", 0xb9}], 0x5, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}], 0x18}, 0xc17e61b1c7d8de80)
ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x5)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f0000000600)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000640)="3da1dae5d7d2d76ae9b861fe7889cd3cfee78711d07d96595bd394037248990d75c89f9cf0407654a2e058f52d9233f8a7b3afbf2f9a39a076ec303c6c4e1209ea1a4fe7ec9a9c1eca9f5041b8ea26b0612f22a60a243247ecdfb30903e60e5fb4e833bdde8a2579c6dc077256ab2d86cf3d556d47c276098ec3f822e620de3a2d3706d853734ff1fad2d1065349edaacaa60af6301085ca3eb91e05b5544c648dc684dd783da5f5aab7a80b991a150606ca03", 0xb3}, {&(0x7f0000000700)="803f8d584b0128052201edada5d1de84fff629004987ba8b8af8f7c7bd809d9b5bed2227d03293b47387a5eca411d07caf7214c957a85b40e6c53fab93cb9096586798799521096d1fdf274b141ba9c6052441fe90b158214531fe734a14f409b60ceb60440253e39083ba7802af6d24", 0x70}, {&(0x7f0000000780)="25f5b0b23f97ed625861414d64b8c327ecbc2598f36c84aa9e509d2fbfd1f0c09d3d7c0b5ece554790375ac2f236bff13928b125a48d801475093a2f308e94cee1acc7571a429ac86e4403120a661ee0d998bd40bf164849e34ac130946eed72d0441a8d98c22bebbcee4c45bb17b8a95f7df1803d7a7e771186df0e5aa28a25f8c716113368b37b3cd4037201ec2f70e827c5ee372ba9e6c0915fefe0a4d03e0c61b3c3b4ca2f78f328c09e13283e7d", 0xb0}], 0x3, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x94cd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbb, 0x1, 0x1, [{@broadcast, 0x2}, {@broadcast, 0x8}, {@multicast2, 0x2}]}, @ssrr={0x89, 0x1b, 0x4a, [@dev={0xac, 0x14, 0x14, 0x33}, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @empty, @loopback, @empty]}, @rr={0x7, 0x1b, 0x82, [@multicast2, @empty, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}]}}}], 0x120}, 0x2400880c)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000f80)={{<r5=>r4, &(0x7f0000000a00)='\x00', 0x40, &(0x7f0000000a40)={@align=0x5, {0x1, 0x1, 0x2}}, 0xf, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x5}, 0x4, &(0x7f0000000f00)=[{0x3, 0xd30, &(0x7f0000000b00)='!+\x00', &(0x7f0000000b40)="d4a2eef8667fcb7c33ed0522104fe054fa1a0c73356f8b09287137cd571526d744f87d16bccb88e20fbd2039851b31dcc16ad623bee878e50236e671747184bb387c0f462f0d2f94", 0x48, 0x8}, {0x2, 0x8, &(0x7f0000000bc0)='\x00', &(0x7f0000000c00)="117f392f5efdb957c75be80f80d2f18038eb688becf645330acce265a92a678cb0f930a270f70653991d66d68d36f1287efaceb39684eb2338117f41376919e4a64880bd558b85cb769b056a4cf4fe7b4f3a0f5e13985fa7dd8a10c5a95799fc4c86f5bb5e67b9bcf9625c4c96d2392d5af583171f180f37f5e93c7d9666cd1da2cb1b81acc6da69270251b7d3e8c191d56f7017a059e53fbb5b8be0b20dbef4b65b8ca3349b3d866407de32fd5e6c91535c03d751bce196cddab555cc11374ba6ae828e41619175998384bc4e9963cbfc5cc61e2b", 0xd5, 0x8}, {0x1, 0x0, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="a606257dd624476f03ab883957cdcea85affa83330b578ae315b4d6e80e28a928e7208a05b200a16424d0f0553e298fe814eaa10ab3241c66228ef2082f65fd24aa7d67cc3d5ca055fd5027b1d844f6b215738be61b1d875cd04452f08a5b18e76f60674eac239cc3bc7e10a07e01dbad419827da96260ddecdeaf69ab95dda0f9b459d4e3549221afd7bbd4e976b82cf1fd7ddab0e1fe1e2243ec0cb18dc4012a3e1b1f5322e7b9bbf5909fd8918bae4b7b3dd25537b0490df71ec39614f7961cfdb5945a", 0xc5, 0x8}, {0x1, 0x0, &(0x7f0000000e40)='![&+\x00', &(0x7f0000000e80)="35c8e928579fca47a94e445d915eaff7087c29513bd1e8fbf913286aceaeda9a5cac1ef8ea5efb120704d401bbad7d10f71484af93bba591bcf98a0bfbc95cca1ec6326503945909da8e36f1551ebbd3c64287f4ac9d85e6d79967f996b9bb1b48007e0e4614", 0x66}]})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xd0, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2400}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000001300)={<r7=>r2, &(0x7f0000001200)='\':$\x00', 0x402000, &(0x7f0000001240)={@_ha_fsid={[0x0, 0xbb2]}, {0x9000, 0xa, 0x1, 0x8}}, 0x2, &(0x7f0000001280)={@_ha_fsid}, &(0x7f00000012c0)=0x8})
setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001340)={r0, @local, @broadcast}, 0xc)
bind$inet(r5, &(0x7f0000001380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000013c0)={0x1, 0x5})
r8 = socket$netlink(0x10, 0x3, 0x12)
ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000001400)={0x9, 0x7, 0x0, 0xff8, 0x3, 0x20, 0x8})
getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000001440)={0x7, 0x7, 0x4}, &(0x7f0000001480)=0x28)
write$tun(r7, &(0x7f00000014c0)={@val={0x0, 0x88f5}, @val={0x3, 0x4, 0x1, 0x42db, 0x7, 0x280}, @arp=@generic={0x5, 0xf9, 0x6, 0xa, 0x3, @local, "8ad0db7a363be6106632", @broadcast, "30df35078f"}}, 0x31)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x24, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe1, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x6, 0xb, 0xa, 0x100, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfaf}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0x9, 0x4, 0x3, 0xffffffffffffffc0, 0xffffffffffffffff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4e49}}]}, &(0x7f0000001640)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[r7, r7, r1], &(0x7f0000001700)=[{0x2, 0x3, 0x6, 0x9}, {0x2, 0x2, 0xd, 0xa}, {0x1, 0x2, 0x4, 0xc}, {0x0, 0x2, 0x1, 0x1}, {0x3, 0x5, 0x2, 0x8}, {0x1, 0x1, 0xb, 0xeb58b9d915f3d80c}], 0x10, 0x9}, 0x94)
ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000001840)={r9, 0x7fffffff})
r10 = accept$nfc_llcp(r5, &(0x7f0000001880), &(0x7f0000001900)=0x60)
tee(r5, r10, 0x3, 0x6)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001940))
write$cgroup_subtree(r7, &(0x7f0000001980)={[{0x2d, 'hugetlb'}, {0x0, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}, {0x2d, 'io'}, {0x2b, 'blkio'}, {0x2b, 'perf_event'}, {0x2b, 'freezer'}, {0x2d, 'net_prio'}]}, 0x51)
socket(0x12, 0x3, 0x5)
shutdown(r10, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000001a00)={0x1, 0xffffffffffffffff, 0x9})
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a80), r8)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x70, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0)

855.827906ms ago: executing program 3 (id=3178):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/18, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)

737.558529ms ago: executing program 0 (id=3179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@can={{0x1}, 0x2, 0x0, 0x0, 0x0, "e33e75ff2316bce4"}, 0x10}, 0x2, 0x0, 0x0, 0x24008084}, 0x30048009)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaab331687b814586dd6062d308001806fffc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000000000f191bd8358e60149922ebc9986b9329900000000"], 0x0)

713.945485ms ago: executing program 3 (id=3180):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x343, 0x5}}], 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

618.720516ms ago: executing program 1 (id=3181):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='@A\t', @ANYRES32], 0xe)
connect$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x1, 0x7, 0x10, 0xd7, "b6de844579fbfecf39117849359a63b0fea0c875a4687c01602503b309bba0d7fdaa4fd72da58c3820c636e597feb35de41a875b5dcfa8b4b4ab7eb64c57ca", 0x10}, 0x60)

512.275234ms ago: executing program 3 (id=3182):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000002030600710a06069d856829c2", 0x16}], 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r4=>0x0}, &(0x7f0000000880)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r4, 0xfffffff9}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r7, &(0x7f00000002c0)=ANY=[], 0x33)
sendfile(r7, r6, 0x0, 0x10000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000440)={'wg0\x00', <r9=>0x0})
r10 = socket(0x10, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'ip_vti0\x00', <r12=>0x0, 0x8, 0x40, 0xe, 0x4, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@end, @generic={0x83, 0xd, "30717038f6a1620ae4af37"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan0\x00', <r13=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000740)={'team0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2cc, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa4}}, {0x8, 0x6, r13}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x1, 0x2, 0xfffff801}, {0xf001, 0x8, 0x70, 0x400}, {0x140, 0x0, 0x80, 0x2}, {0x1, 0x80, 0xfa, 0x401}, {0xf13, 0xc0, 0x0, 0x10001}, {0x4fc, 0xc, 0x45, 0x4}, {0x8, 0x6, 0x0, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000880)

411.60305ms ago: executing program 1 (id=3183):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10)
write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8073f000001000000", 0x18) (async)
sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="840000002000011200000000fcdbdf25966e8df591a1e39d0ade0126c7aa6ddf9b5c00bd456c0200435beae85958000000000000006dcad7a36c17b3463d7e0f0d3702e4c2931d1c0d76392a1d0005809cce6e7a04953fc411ce7e3bd29523eaf39051a8482d87f2a25c1d8442b937cbdea5b735644ae27a6ce73ce652ac14cf22000000"], 0x84}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000000f00000000000000b7030000000000008500000005000000bf09000000000000650901000000000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000af0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) (async)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000007c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000011}], 0x1, 0x24000040) (async)
recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/102, 0x66}], 0x1}, 0xb}], 0x1, 0x2120, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={<r6=>r1, &(0x7f0000000080)='GPL\x00', 0x408140, &(0x7f0000000100)={@_ha_fsid={[0x8001, 0xe01]}, {0x8, 0x0, 0x9, 0x2}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'batadv_slave_0\x00', 0x400})

238.40387ms ago: executing program 0 (id=3184):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000100006912b6000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x50, r3, 0x1, 0x70bd23, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6ec}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048851}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0) (async)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) (async)
sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111d900000000009500000000000000990258a48c3c60f830fbb0d3d68c3e643f6e0425db7055c581abc79588e6688e20d5bf19eea4f237b4d4fc46f9f231a25df523621b5ef06793a03a59d902493da4cc9bffc8ce4f72dc343d23d1780919b94876a6"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

168.251886ms ago: executing program 1 (id=3185):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xcc}}, 0x24000840)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xa, 0xfff3}}}, 0x24}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000180))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@newnexthop={0x3c, 0x68, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x19}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @local}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x20004080) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@newnexthop={0x3c, 0x68, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x19}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @local}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x20004080)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24005000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24005000)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4000000)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010300000000000000000500000008000200cf"], 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010)
sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8)

79.17559ms ago: executing program 3 (id=3186):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x44004)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x240000f1)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
recvmmsg(r8, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
write$tun(r5, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r3, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x204, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r10, r2, 0x26, 0x0, 0x0, @void, @value=r4}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x20040054)

0s ago: executing program 1 (id=3187):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r1=>0x0, 0x7, 0x7, 0x9, 0x9, {{0xc, 0x4, 0x1, 0x25, 0x30, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0x41, 0x0, 0x9, [0x6, 0xffffffff, 0x9, 0x8, 0x3, 0xffffffff]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', r1, 0x10, 0x10, 0x4, 0x0, {{0x2b, 0x4, 0x3, 0x9, 0xac, 0x64, 0x7, 0x7, 0x2d, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}, {[@generic={0x82, 0x5, "18d7f1"}, @ssrr={0x89, 0xb, 0x64, [@remote, @private=0xa010101]}, @noop, @cipso={0x86, 0x50, 0x2, [{0x2, 0x6, "68bf5ce6"}, {0x6, 0x3, "fd"}, {0x0, 0x11, "d871c2aff80465419f21681480c00e"}, {0x5, 0x7, "83402c7000"}, {0x6, 0xb, "4c95a214f8c2a85b08"}, {0x7c680539d45503e7, 0xf, "362f35cb6239c6a379f690bda9"}, {0x5, 0xf, "478bc9a418d933081817bb9ef2"}]}, @ssrr={0x89, 0x17, 0x56, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0xd, [{@multicast2, 0x87c7}, {@loopback, 0x6}, {@broadcast, 0xfba}]}, @noop, @noop]}}}}})

kernel console output (not intermixed with test programs):

syz.2.1967'.
[  319.654835][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'.
[  319.654861][T14121] netlink: 'syz.2.1967': attribute type 6 has an invalid length.
[  319.654874][T14121] netlink: 'syz.2.1967': attribute type 5 has an invalid length.
[  319.730031][  T257] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  319.730162][  T257] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  319.730212][  T257] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  319.730247][  T257] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.292271][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'.
[  320.304787][T14147] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1974'.
[  320.305014][T14147] unsupported nlmsg_type 40
[  320.908613][T14164] netlink: 'syz.2.1982': attribute type 1 has an invalid length.
[  321.002118][T14167] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  321.002161][T14167] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  321.077946][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[  321.108423][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[  321.110034][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'.
[  321.196969][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'.
[  321.261801][T14182] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1989'.
[  321.264197][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1989'.
[  322.087327][T14224] syzkaller1: entered promiscuous mode
[  322.087368][T14224] syzkaller1: entered allmulticast mode
[  322.432604][T14229] netlink: 'syz.0.2001': attribute type 1 has an invalid length.
[  323.234713][T14263] veth5: entered allmulticast mode
[  323.471506][T14274] netlink: 'syz.3.2019': attribute type 1 has an invalid length.
[  323.502367][T14275] xt_TPROXY: Can be used only with -p tcp or -p udp
[  323.520512][T14274] 8021q: adding VLAN 0 to HW filter on device bond12
[  323.586691][T14287] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  324.141640][T14299] syzkaller1: entered promiscuous mode
[  324.148798][T14299] syzkaller1: entered allmulticast mode
[  324.185846][T14318] Bluetooth: hci0: unsupported parameter 5161
[  324.185892][T14318] Bluetooth: hci0: unsupported parameter 8192
[  324.185904][T14318] Bluetooth: hci0: unsupported parameter 5161
[  324.185915][T14318] Bluetooth: hci0: unsupported parameter 8192
[  324.249506][T14321] nbd: must specify at least one socket
[  324.278943][T14313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.432187][T14320] wg2 speed is unknown, defaulting to 1000
[  324.441975][T14320] lo speed is unknown, defaulting to 1000
[  324.458280][T14312] wg2 speed is unknown, defaulting to 1000
[  324.496655][T14312] lo speed is unknown, defaulting to 1000
[  324.708762][T14343] __nla_validate_parse: 13 callbacks suppressed
[  324.709036][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'.
[  324.728392][T14336] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  324.830496][T14350] net_ratelimit: 215 callbacks suppressed
[  324.836539][T14350] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  324.997408][T14336] 8021q: adding VLAN 0 to HW filter on device bond6
[  325.383549][T14373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.702920][T14384] macsec0: entered promiscuous mode
[  325.704939][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'.
[  325.726467][T14384] macsec0 (unregistering): left promiscuous mode
[  325.756810][T14388] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2046'.
[  325.844689][T14392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.865329][T14392] syzkaller0: entered promiscuous mode
[  325.871138][T14392] syzkaller0: entered allmulticast mode
[  325.899605][T14391] tipc: Resetting bearer <eth:syzkaller0>
[  325.986976][T14391] tipc: Disabling bearer <eth:syzkaller0>
[  326.059557][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'.
[  326.931494][T14429] nbd: nbd1 already in use
[  326.936608][T14429] block nbd1: NBD_DISCONNECT
[  326.936664][T14429] block nbd1: Send disconnect failed -32
[  326.936685][T14429] block nbd1: shutting down sockets
[  327.054665][T14430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  327.093862][T14431] netlink: 'syz.1.2056': attribute type 1 has an invalid length.
[  327.169204][T14431] 8021q: adding VLAN 0 to HW filter on device bond7
[  327.298875][T14437] bond7: (slave veth13): Enslaving as an active interface with a down link
[  327.575913][T14445] tipc: Invalid UDP bearer configuration
[  327.576012][T14445] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  327.592303][T14445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2060'.
[  328.345273][T14473] xt_hashlimit: max too large, truncated to 1048576
[  328.345521][T14473] xt_hashlimit: overflow, try lower: 137438953472/8
[  328.613113][T14481] netlink: 'syz.3.2070': attribute type 12 has an invalid length.
[  328.874375][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.146986][T14508] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004
[  329.473262][T14514] wg2 speed is unknown, defaulting to 1000
[  329.486829][T14514] lo speed is unknown, defaulting to 1000
[  330.725335][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'.
[  330.725388][T14552] netlink: 'syz.2.2087': attribute type 30 has an invalid length.
[  330.736713][T14552] vxlan1: entered promiscuous mode
[  330.736741][T14552] vxlan1: entered allmulticast mode
[  330.780332][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'.
[  330.780384][T14553] netlink: 'syz.2.2087': attribute type 30 has an invalid length.
[  330.950015][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'.
[  330.963172][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'.
[  331.067735][T14553] vxlan1: entered promiscuous mode
[  331.067773][T14553] vxlan1: entered allmulticast mode
[  331.524238][T14592] pimreg9: entered allmulticast mode
[  331.670489][T14603] syz.0.2098: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  331.670906][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.0.2098 Not tainted syzkaller #0 PREEMPT(full) 
[  331.670928][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  331.670948][T14603] Call Trace:
[  331.670955][T14603]  <TASK>
[  331.670964][T14603]  dump_stack_lvl+0xe8/0x150
[  331.671000][T14603]  warn_alloc+0x24d/0x270
[  331.671029][T14603]  ? kasan_save_track+0x4f/0x80
[  331.671048][T14603]  ? kasan_save_track+0x3e/0x80
[  331.671069][T14603]  ? __pfx_warn_alloc+0x10/0x10
[  331.671095][T14603]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  331.671114][T14603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.671150][T14603]  __vmalloc_node_range_noprof+0x127/0x1540
[  331.671200][T14603]  ? rcu_is_watching+0x16/0xb0
[  331.671225][T14603]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  331.671248][T14603]  ? __kmalloc_cache_noprof+0x321/0x600
[  331.671274][T14603]  ? __kmalloc_cache_noprof+0x14d/0x600
[  331.671301][T14603]  ? xskq_create+0x56/0x220
[  331.671328][T14603]  xskq_create+0x148/0x220
[  331.671351][T14603]  ? xsk_init_queue+0x8a/0xe0
[  331.671376][T14603]  xsk_init_queue+0x8a/0xe0
[  331.671401][T14603]  xsk_setsockopt+0x5e0/0x960
[  331.671425][T14603]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.671449][T14603]  ? __pfx_aa_sk_perm+0x10/0x10
[  331.671469][T14603]  ? aa_sock_opt_perm+0x142/0x1e0
[  331.671491][T14603]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  331.671515][T14603]  ? __pfx_xsk_setsockopt+0x10/0x10
[  331.671539][T14603]  do_sock_setsockopt+0x17c/0x1b0
[  331.671564][T14603]  __x64_sys_setsockopt+0x13d/0x1b0
[  331.671586][T14603]  do_syscall_64+0x166/0x520
[  331.671610][T14603]  ? trace_irq_disable+0x3b/0x140
[  331.671629][T14603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.671649][T14603]  ? clear_bhb_loop+0x70/0xc0
[  331.671671][T14603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.671690][T14603] RIP: 0033:0x7fe32cd9e159
[  331.671708][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.671724][T14603] RSP: 002b:00007fe32db83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  331.671752][T14603] RAX: ffffffffffffffda RBX: 00007fe32d025fa0 RCX: 00007fe32cd9e159
[  331.671767][T14603] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  331.671778][T14603] RBP: 00007fe32ce3503b R08: 0000000000000004 R09: 0000000000000000
[  331.671791][T14603] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.671803][T14603] R13: 00007fe32d026038 R14: 00007fe32d025fa0 R15: 00007ffe14145b28
[  331.671835][T14603]  </TASK>
[  331.675665][T14603] Mem-Info:
[  331.675687][T14603] active_anon:8965 inactive_anon:4 isolated_anon:0
[  331.675687][T14603]  active_file:0 inactive_file:43428 isolated_file:0
[  331.675687][T14603]  unevictable:0 dirty:272 writeback:0
[  331.675687][T14603]  slab_reclaimable:11463 slab_unreclaimable:132063
[  331.675687][T14603]  mapped:29576 shmem:525 pagetables:1228
[  331.675687][T14603]  sec_pagetables:0 bounce:0
[  331.675687][T14603]  kernel_misc_reclaimable:0
[  331.675687][T14603]  free:1279274 free_pcp:15428 free_cma:0
[  331.675763][T14603] Node 0 active_anon:35860kB inactive_anon:16kB active_file:0kB inactive_file:173508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118304kB dirty:1088kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14224kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  331.675819][T14603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  331.675873][T14603] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  331.675929][T14603] lowmem_reserve[]: 0 2487 2487 2487 2487
[  331.675963][T14603] Node 0 DMA32 free:1163332kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35860kB inactive_anon:16kB active_file:0kB inactive_file:173508kB unevictable:0kB writepending:1088kB zspages:0kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:60960kB local_pcp:31020kB free_cma:0kB
[  331.676018][T14603] lowmem_reserve[]: 0 0 0 0 0
[  331.676049][T14603] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  331.676115][T14603] lowmem_reserve[]: 0 0 0 0 0
[  331.676168][T14603] Node 1 Normal free:3938404kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB
[  331.676240][T14603] lowmem_reserve[]: 0 0 0 0 0
[  331.676272][T14603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  331.676382][T14603] Node 0 DMA32: 629*4kB (UME) 388*8kB (UME) 349*16kB (UME) 258*32kB (UME) 174*64kB (UME) 198*128kB (UME) 130*256kB (UME) 8*512kB (UME) 33*1024kB (UM) 16*2048kB (UM) 245*4096kB (UM) = 1163396kB
[  331.676550][T14603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  331.676641][T14603] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3938404kB
[  331.676821][T14603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  331.676837][T14603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  331.676858][T14603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  331.676874][T14603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  331.676888][T14603] 43949 total pagecache pages
[  331.676898][T14603] 0 pages in swap cache
[  331.676905][T14603] Free swap  = 124996kB
[  331.676912][T14603] Total swap = 124996kB
[  331.676919][T14603] 2097051 pages RAM
[  331.676926][T14603] 0 pages HighMem/MovableOnly
[  331.676932][T14603] 428759 pages reserved
[  331.676939][T14603] 0 pages cma reserved
[  331.756844][T14606] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2096'.
[  332.338938][T14620] nbd: couldn't find a device at index 0
[  332.527322][T14638] netlink: 'syz.3.2106': attribute type 1 has an invalid length.
[  332.547974][T14637] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  332.647253][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'.
[  332.647350][T14646] netlink: 'syz.2.2107': attribute type 2 has an invalid length.
[  332.647362][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2107'.
[  332.700365][T14648] nbd: must specify at least one socket
[  332.866389][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2108'.
[  332.866432][T14652] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2108'.
[  332.866497][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2108'.
[  333.071288][T14665] netlink: 'syz.2.2115': attribute type 5 has an invalid length.
[  333.461765][T14683] wg2 speed is unknown, defaulting to 1000
[  333.471042][T14683] lo speed is unknown, defaulting to 1000
[  334.147300][T14705] block nbd1: server does not support multiple connections per device.
[  334.158006][T14705] block nbd1: shutting down sockets
[  334.179989][T14708] ip6gre3: entered promiscuous mode
[  335.105651][T14752] xt_hashlimit: overflow, rate too high: 0
[  335.370706][T14770] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  335.378628][T14770] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  336.188069][T14815] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  336.202074][T14815] bond8 (unregistering): Released all slaves
[  336.296150][T14822] __nla_validate_parse: 6 callbacks suppressed
[  336.302834][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2158'.
[  336.513338][T14833] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  336.566372][T14836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2162'.
[  336.937564][T14857] netlink: 'syz.1.2168': attribute type 2 has an invalid length.
[  336.937601][T14857] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  336.937630][T14857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2168'.
[  337.124557][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'.
[  337.526140][T14898] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[  337.536747][T14898] sctp: [Deprecated]: syz.4.2177 (pid 14898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.536747][T14898] Use struct sctp_sack_info instead
[  337.869176][T14904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2179'.
[  337.896873][T14906] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  337.968781][T14911] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  338.327757][T14927] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2184'.
[  338.700156][T14943] netlink: 'syz.3.2189': attribute type 2 has an invalid length.
[  338.993427][T14952] netlink: 'syz.4.2190': attribute type 1 has an invalid length.
[  339.004435][T14952] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2190'.
[  339.033091][T14952] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2190'.
[  339.064451][T14958] netlink: 'syz.0.2192': attribute type 3 has an invalid length.
[  339.182036][T14964] openvswitch: netlink: Missing key (keys=40, expected=100)
[  339.430298][T14982] netlink: 'syz.3.2199': attribute type 8 has an invalid length.
[  339.448523][T14982] netlink: 'syz.3.2199': attribute type 8 has an invalid length.
[  339.527838][T14980] netlink: 'syz.1.2197': attribute type 5 has an invalid length.
[  339.641683][T14995] tipc: Enabled bearer <eth:wlan1>, priority 10
[  339.659143][T14993] ip_tables: iptables: counters copy to user failed while replacing table
[  340.163219][T15024] sctp: [Deprecated]: syz.1.2210 (pid 15024) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.163219][T15024] Use struct sctp_sack_info instead
[  340.271713][T15027] ipvlan0: entered promiscuous mode
[  340.281620][T15027] team0: Device ipvlan0 failed to register rx_handler
[  340.387820][T15031] netlink: 'syz.1.2213': attribute type 5 has an invalid length.
[  340.396368][T15035] syzkaller0: entered promiscuous mode
[  340.396388][T15035] syzkaller0: entered allmulticast mode
[  340.446990][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2214'.
[  340.774858][   T30] tipc: Node number set to 475170465
[  340.907936][T15054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2217'.
[  341.007895][T15062] geneve1: entered promiscuous mode
[  341.334633][T15082] __nla_validate_parse: 1 callbacks suppressed
[  341.334679][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  341.405176][T15086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2228'.
[  341.676597][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'.
[  341.742949][T15109] C: renamed from veth1_to_team (while UP)
[  341.767772][T15109] netlink: 'syz.1.2234': attribute type 1 has an invalid length.
[  341.767801][T15109] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2234'.
[  341.776769][T15109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.810793][T15114] syzkaller1: entered promiscuous mode
[  341.818575][T15114] syzkaller1: entered allmulticast mode
[  342.265257][T15132] syzkaller1: entered promiscuous mode
[  342.265287][T15132] syzkaller1: entered allmulticast mode
[  342.294726][T15135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2241'.
[  342.516763][T15144] netlink: 'syz.3.2242': attribute type 1 has an invalid length.
[  342.576419][T15147] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  342.846379][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2245'.
[  342.891448][T15155] geneve1: left promiscuous mode
[  342.891717][T15155] geneve2: left promiscuous mode
[  342.894015][T15155] gtp0: left promiscuous mode
[  342.894031][T15155] gtp0: left allmulticast mode
[  342.986161][T15160] syzkaller1: entered promiscuous mode
[  342.986219][T15160] syzkaller1: entered allmulticast mode
[  343.011694][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.011880][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012031][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012181][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012328][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012486][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012638][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012785][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.012931][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.013079][T15160] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  343.635202][T15177] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20001
[  343.814609][T15186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2256'.
[  344.152583][T15200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'.
[  344.197437][   T31] audit: type=1804 audit(1789020867.819:11): pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2259" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2306 res=1 errno=0
[  344.197517][   T31] audit: type=1800 audit(1789020867.819:12): pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2259" name="cgroup.controllers" dev="tmpfs" ino=2306 res=0 errno=0
[  344.355868][T15205] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2260'.
[  344.631373][T15215] syzkaller0: renamed from bond0
[  344.691499][T15215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2263'.
[  344.747086][ T5276] veth0_macvtap: left promiscuous mode
[  345.148148][T15231] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.171411][T15231] team0: Port device bond0 added
[  345.171596][T15238] �: renamed from sit0
[  347.984452][T15274] __nla_validate_parse: 1 callbacks suppressed
[  347.984502][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'.
[  348.335798][T15302] syzkaller0: entered promiscuous mode
[  348.337050][T15302] syzkaller0: entered allmulticast mode
[  348.819221][T15320] netlink: 564 bytes leftover after parsing attributes in process `syz.3.2283'.
[  348.905848][T15324] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2281'.
[  348.906807][T15331] netlink: 'syz.1.2281': attribute type 1 has an invalid length.
[  348.948329][T15335] lo: entered allmulticast mode
[  349.237296][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2287'.
[  349.343007][T15335] lo: left allmulticast mode
[  349.435289][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'.
[  349.446153][T15351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2287'.
[  349.672384][T15367] net_ratelimit: 44 callbacks suppressed
[  349.672431][T15367] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  349.691576][T15367] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2290'.
[  349.944569][T15378] netlink: 'syz.3.2295': attribute type 1 has an invalid length.
[  349.945067][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'.
[  349.945097][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'.
[  350.407039][T15393] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2298'.
[  350.432842][T15393] openvswitch: netlink: Message has 512 unknown bytes.
[  351.588223][T15454] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  351.595611][T15454] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  351.660288][T15456] macsec0: entered promiscuous mode
[  352.024680][T15484] netlink: 'syz.4.2318': attribute type 3 has an invalid length.
[  352.230650][T15503] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  352.569547][T15521] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  352.603655][T15523] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  353.021616][T15544] __nla_validate_parse: 10 callbacks suppressed
[  353.021660][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'.
[  353.078815][T15547] Bluetooth: MGMT ver 1.23
[  353.697470][T15557] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2331'.
[  353.728308][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.728346][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.960758][T15594] xt_hashlimit: size too large, truncated to 1048576
[  354.054994][T15597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2336'.
[  354.066948][T15592] ipip0: entered promiscuous mode
[  354.067000][T15592] ipip0: entered allmulticast mode
[  354.126997][T15597] 
@0�: renamed from bond_slave_1
[  354.352157][T15604] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  354.399107][T15604] 8021q: adding VLAN 0 to HW filter on device bond8
[  354.518965][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'.
[  354.555490][T15604] bond8: (slave veth15): Enslaving as an active interface with a down link
[  354.593411][T15611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.613050][T15611] bond8: (slave batadv0): making interface the new active one
[  354.617369][T15611] batadv0: entered promiscuous mode
[  354.622278][T15611] bond8: (slave batadv0): Enslaving as an active interface with an up link
[  354.676492][T15615] bond13: option arp_all_targets: invalid value (3)
[  354.684741][T15615] bond13 (unregistering): Released all slaves
[  354.707343][T15609] syzkaller0: entered promiscuous mode
[  354.707388][T15609] syzkaller0: entered allmulticast mode
[  354.744104][T15605] netlink: 'syz.2.2340': attribute type 10 has an invalid length.
[  354.812309][T15604] bond8 (unregistering): (slave veth15): Releasing active interface
[  354.852094][T15604] bond8 (unregistering): (slave batadv0): Releasing active interface
[  354.852145][T15604] batadv0: left promiscuous mode
[  354.877916][T15604] bond8 (unregistering): Released all slaves
[  355.208556][T15628] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  355.694084][ T8550] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  355.711174][T15648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  356.166430][T15675] netlink: 'syz.2.2360': attribute type 1 has an invalid length.
[  356.214699][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'.
[  356.252048][T15675] 8021q: adding VLAN 0 to HW filter on device bond6
[  356.286732][T15683] netlink: 'syz.3.2362': attribute type 62 has an invalid length.
[  356.601003][T15697] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2368'.
[  356.612693][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2369'.
[  356.657084][T15696] siw: device registration error -23
[  356.659940][ T8992] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  356.659983][ T8992] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  356.660013][ T8992] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  356.660042][ T8992] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.845617][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  357.032923][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'.
[  357.050251][T15724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.245625][T15731] pim6reg99999999: entered allmulticast mode
[  357.366251][T15742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2382'.
[  357.472356][T15748] netlink: 'syz.1.2385': attribute type 2 has an invalid length.
[  357.744849][T15757] 
: renamed from dummy0
[  357.909174][T15769] netlink: 'syz.3.2390': attribute type 16 has an invalid length.
[  358.214077][T15795] __nla_validate_parse: 2 callbacks suppressed
[  358.214125][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'.
[  358.358545][T15802] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2396'.
[  358.372237][T15802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.417769][T15807] openvswitch: netlink: Duplicate or invalid key (type 0).
[  358.823522][T15836] netlink: 'syz.1.2401': attribute type 1 has an invalid length.
[  359.186615][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2405'.
[  359.489153][T15873] netlink: 'syz.2.2410': attribute type 4 has an invalid length.
[  359.563623][T15876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2411'.
[  359.581986][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'.
[  359.655641][T15884] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2411'.
[  360.003075][T15879] bond13: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  360.013305][T15879] bond13 (unregistering): Released all slaves
[  360.032182][T15884] team0: Port device 
 removed
[  360.054946][T15893] bond7: option arp_interval: invalid value (18446744073709551615)
[  360.054977][T15893] bond7: option arp_interval: allowed values 0 - 2147483647
[  360.064695][T15893] bond7 (unregistering): Released all slaves
[  360.120246][ T8542] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.120338][ T8542] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.120368][ T8542] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.120406][ T8542] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  360.238472][T15900] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2416'.
[  360.927442][T15930] netlink: 'syz.3.2423': attribute type 4 has an invalid length.
[  360.927953][T15929] netlink: 'syz.3.2423': attribute type 4 has an invalid length.
[  360.949355][T15929] netlink: 'syz.3.2423': attribute type 4 has an invalid length.
[  362.463059][T15881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  362.685335][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2425'.
[  362.709942][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2425'.
[  362.723960][T15940] syzkaller1: entered promiscuous mode
[  362.729782][T15940] syzkaller1: entered allmulticast mode
[  362.750776][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.750967][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751128][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751315][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751484][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751650][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751805][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.751954][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.752114][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.752268][T15940] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  362.777755][T15941] syzkaller1: entered promiscuous mode
[  362.777777][T15941] syzkaller1: entered allmulticast mode
[  363.120218][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'.
[  363.393100][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2436'.
[  363.914145][T16070] syzkaller1: entered promiscuous mode
[  363.920000][T16070] syzkaller1: entered allmulticast mode
[  364.351623][T16104] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2445'.
[  364.555695][T16128] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2448'.
[  364.555739][T16128] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2448'.
[  365.012321][T16148] 8021q: adding VLAN 0 to HW filter on device team0
[  365.030117][T16157] netlink: 'syz.2.2455': attribute type 13 has an invalid length.
[  365.289134][T16166] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2459'.
[  365.631096][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'.
[  366.003113][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'.
[  368.630460][T16174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.640942][T16174] bond0 (unregistering): (slave 
c
@0�): Releasing backup interface
[  368.653973][T16174] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  368.663425][T16174] bond0 (unregistering): Released all slaves
[  368.684074][T16185] ip6erspan0: entered allmulticast mode
[  368.844107][T16196] nbd: couldn't find device at index 0
[  368.953485][T16205] netlink: 'syz.3.2467': attribute type 1 has an invalid length.
[  368.998680][T16210] net_ratelimit: 45 callbacks suppressed
[  369.005837][T16210] openvswitch: netlink: IP tunnel dst address not specified
[  369.018002][T16205] 8021q: adding VLAN 0 to HW filter on device bond13
[  369.093190][T16211] bond13: (slave veth11): Enslaving as an active interface with a down link
[  369.355763][T16228] netlink: 'syz.0.2477': attribute type 11 has an invalid length.
[  369.738788][T16255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2483'.
[  369.748341][T16256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2483'.
[  369.758021][T16255] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2483'.
[  370.040740][T16273] x_tables: ip_tables: icmp match: only valid for protocol 1
[  370.157679][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'.
[  370.161084][T16277] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  370.164102][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'.
[  370.908483][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  370.917918][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  370.949055][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  370.949121][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  370.975299][T16296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  371.289895][T16307] ipvlan3: entered promiscuous mode
[  371.290080][T16307] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  371.290097][T16307] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  371.290253][T16307] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  372.433801][T16234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.442878][T16247] netlink: 'syz.2.2481': attribute type 1 has an invalid length.
[  373.001001][T16356] hsr_slave_1 (unregistering): left promiscuous mode
[  373.394484][T16389] dummy0: left promiscuous mode
[  373.410479][T16389] bond2: left promiscuous mode
[  373.411076][T16389] hsr1: left promiscuous mode
[  373.412386][T16389] gretap1: left allmulticast mode
[  373.413876][T16389] ip6gre1: left promiscuous mode
[  373.413893][T16389] ip6gre1: left allmulticast mode
[  373.414157][T16389] veth3: left allmulticast mode
[  373.421738][T16389] ip6gre3: left promiscuous mode
[  373.421986][T16389] macsec0: left promiscuous mode
[  373.596957][T16392] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  373.906385][T16410] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  373.945220][T16410] 8021q: adding VLAN 0 to HW filter on device bond9
[  374.890796][T16462] __nla_validate_parse: 52 callbacks suppressed
[  374.890858][T16462] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2536'.
[  375.057324][T16473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'.
[  375.086844][T16479] wg0: Caught tx_queue_len zero misconfig
[  375.087291][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2538'.
[  375.163623][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2538'.
[  375.336634][T16491] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  375.473735][T16500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2547'.
[  375.486218][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2545'.
[  375.521948][T16500] hsr_slave_1 (unregistering): left promiscuous mode
[  375.532959][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'.
[  375.538011][T16506] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  375.632557][T16506] xt_CT: No such helper "netbios-ns"
[  375.695880][T16503] 8021q: adding VLAN 0 to HW filter on device team0
[  375.703470][T16503] tipc: Resetting bearer <eth:team0>
[  375.713627][T16503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.763564][T16503] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.768811][T16503] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.781927][T16503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  375.786252][T16503] veth1_macvtap: left promiscuous mode
[  375.787360][T16503] veth0_macvtap: entered promiscuous mode
[  375.788807][T16503] geneve0: left promiscuous mode
[  375.813038][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.816157][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.819171][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.824167][T16503] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.841880][T16503] geneve0: entered promiscuous mode
[  375.884474][T16503] 8021q: adding VLAN 0 to HW filter on device bond1
[  375.896249][T16503] 8021q: adding VLAN 0 to HW filter on device bond2
[  375.905027][T16503] 8021q: adding VLAN 0 to HW filter on device bond3
[  375.921048][T16503] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  375.938032][T16503] 8021q: adding VLAN 0 to HW filter on device bond4
[  375.985215][T16503] 8021q: adding VLAN 0 to HW filter on device bond5
[  375.997465][T16503] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  376.032428][T16513] ipvlan1: entered allmulticast mode
[  376.037931][T16513] macvlan1: entered allmulticast mode
[  376.044542][T16513] veth1_vlan: entered allmulticast mode
[  376.053509][T16513] batman_adv: batadv0: Adding interface: ipvlan1
[  376.060390][T16513] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.087866][T16513] batman_adv: batadv0: Interface activated: ipvlan1
[  376.243003][T16522] netlink: 'syz.3.2551': attribute type 1 has an invalid length.
[  376.276739][T16516] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2549'.
[  376.401364][  T257] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.401415][  T257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.401615][  T257] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.401642][  T257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.401843][  T257] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.401870][  T257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.402657][  T257] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.402692][  T257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.468199][T16531] macvtap1: entered allmulticast mode
[  376.551580][T16522] macvtap2: entered allmulticast mode
[  376.628129][T16531] bond14: (slave bridge3): making interface the new active one
[  376.636504][T16531] bond14: (slave bridge3): Enslaving as an active interface with an up link
[  376.763665][T16561] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  376.984897][T16568] netlink: 'syz.2.2558': attribute type 32 has an invalid length.
[  376.999103][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'.
[  377.097852][T16571] bond7: option lacp_rate: invalid value (192)
[  377.099255][T16569] netlink: 'syz.3.2559': attribute type 2 has an invalid length.
[  377.099276][T16569] netlink: 'syz.3.2559': attribute type 2 has an invalid length.
[  377.116753][T16571] bond7 (unregistering): Released all slaves
[  377.248834][T16583] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  377.251220][T16583] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2562'.
[  377.257736][T16583] netlink: 'syz.3.2562': attribute type 2 has an invalid length.
[  377.615274][T16594] netlink: 'syz.2.2566': attribute type 1 has an invalid length.
[  377.615324][T16594] netlink: 'syz.2.2566': attribute type 2 has an invalid length.
[  377.761037][T16610] ��: renamed from lo (while UP)
[  377.785789][T16610] netlink: 'syz.0.2572': attribute type 11 has an invalid length.
[  378.274429][T16631] : entered allmulticast mode
[  378.310494][T16631] dvmrp8: entered allmulticast mode
[  380.926980][T16629] : left allmulticast mode
[  381.170924][T16670] netlink: 'syz.2.2587': attribute type 4 has an invalid length.
[  381.697043][T16707] __nla_validate_parse: 11 callbacks suppressed
[  381.697097][T16707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2595'.
[  381.738663][T16710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2596'.
[  381.835702][T16712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'.
[  382.161624][T16738] netlink: 'syz.4.2601': attribute type 10 has an invalid length.
[  382.161665][T16738] team0: left promiscuous mode
[  382.161699][T16738] bridge1: left promiscuous mode
[  382.179712][T16738] 8021q: adding VLAN 0 to HW filter on device team0
[  382.188225][T16738] team0: entered promiscuous mode
[  382.188281][T16738] bridge1: entered promiscuous mode
[  382.193437][T16738] bond0: (slave team0): Enslaving as an active interface with an up link
[  382.296648][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2603'.
[  382.363516][T16743] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.383727][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2604'.
[  382.399551][T16749] bond0: option ad_select: unable to set because the bond device is up
[  382.606054][T16761] netlink: 'syz.2.2605': attribute type 1 has an invalid length.
[  383.017453][T16747] veth17: entered promiscuous mode
[  383.017493][T16747] veth17: entered allmulticast mode
[  383.037217][T16747] bridge4: port 1(veth17) entered blocking state
[  383.037631][T16747] bridge4: port 1(veth17) entered disabled state
[  383.057803][T16747] bridge4: port 1(veth17) entered blocking state
[  383.057926][T16747] bridge4: port 1(veth17) entered forwarding state
[  383.084480][T16752] veth19: entered promiscuous mode
[  383.084510][T16752] veth19: entered allmulticast mode
[  383.087201][T16752] bridge4: port 2(veth19) entered blocking state
[  383.087318][T16752] bridge4: port 2(veth19) entered disabled state
[  383.090219][T16752] bridge4: port 2(veth19) entered blocking state
[  383.090338][T16752] bridge4: port 2(veth19) entered forwarding state
[  383.091528][T16750] syzkaller1: entered promiscuous mode
[  383.091545][T16750] syzkaller1: entered allmulticast mode
[  383.092713][T16757] netlink: 'syz.3.2607': attribute type 34 has an invalid length.
[  383.146825][   T12] bridge4: port 1(veth17) entered disabled state
[  383.164730][   T12] bridge4: port 2(veth19) entered disabled state
[  383.357502][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'.
[  383.488524][T16781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.544145][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.631874][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2614'.
[  384.072244][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'.
[  384.088704][T16813] netlink: 'syz.4.2618': attribute type 1 has an invalid length.
[  384.272994][T16813] bond8: (slave veth5): Enslaving as an active interface with a down link
[  384.298617][T16818] bond8: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  384.379113][T16827] ipvlan2: entered promiscuous mode
[  384.379294][T16827] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  384.379313][T16827] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  384.402295][T16827] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  384.569905][T16838] netlink: 'syz.1.2624': attribute type 15 has an invalid length.
[  384.578031][T16838] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2624'.
[  384.592416][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'.
[  384.698310][T16834] can: request_module (can-proto-4) failed.
[  387.455390][T16830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.682365][T16886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.979739][T16910] netlink: 'syz.0.2637': attribute type 1 has an invalid length.
[  388.262328][T16915] ovs-s!: entered promiscuous mode
[  388.780693][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'.
[  388.795605][T16950] netlink: 'syz.0.2648': attribute type 1 has an invalid length.
[  388.991097][T16970] syzkaller0: entered promiscuous mode
[  388.991149][T16970] syzkaller0: entered allmulticast mode
[  389.005669][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'.
[  389.046307][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'.
[  391.990701][T16981] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  391.995580][T16988] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  392.184122][T16999] x_tables: duplicate underflow at hook 1
[  392.190309][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  392.193655][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[  392.539484][T17025] FAULT_INJECTION: forcing a failure.
[  392.539484][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.539550][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.4.2667 Not tainted syzkaller #0 PREEMPT(full) 
[  392.539572][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  392.539588][T17025] Call Trace:
[  392.539599][T17025]  <TASK>
[  392.539607][T17025]  dump_stack_lvl+0xe8/0x150
[  392.539638][T17025]  should_fail_ex+0x410/0x560
[  392.539669][T17025]  _copy_to_user+0x31/0xb0
[  392.539690][T17025]  simple_read_from_buffer+0xe1/0x170
[  392.539719][T17025]  proc_fail_nth_read+0x1bb/0x230
[  392.539745][T17025]  ? common_file_perm+0x20e/0x2b0
[  392.539766][T17025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  392.539792][T17025]  ? rw_verify_area+0x24a/0x4c0
[  392.539817][T17025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  392.539842][T17025]  vfs_read+0x213/0xa80
[  392.539873][T17025]  ? __pfx___mutex_lock+0x10/0x10
[  392.539899][T17025]  ? __pfx_vfs_read+0x10/0x10
[  392.539926][T17025]  ? __fget_files+0x2a/0x420
[  392.539953][T17025]  ? __fget_files+0x3a2/0x420
[  392.539975][T17025]  ? __fget_files+0x2a/0x420
[  392.540007][T17025]  ksys_read+0x150/0x270
[  392.540035][T17025]  ? __pfx_ksys_read+0x10/0x10
[  392.540072][T17025]  do_syscall_64+0x166/0x520
[  392.540098][T17025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.540126][T17025]  ? clear_bhb_loop+0x70/0xc0
[  392.540149][T17025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.540167][T17025] RIP: 0033:0x7fc3e335e98e
[  392.540185][T17025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  392.540201][T17025] RSP: 002b:00007fc3e430dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  392.540221][T17025] RAX: ffffffffffffffda RBX: 00007fc3e430e6c0 RCX: 00007fc3e335e98e
[  392.540235][T17025] RDX: 000000000000000f RSI: 00007fc3e430e0a0 RDI: 0000000000000005
[  392.540246][T17025] RBP: 00007fc3e430e090 R08: 0000000000000000 R09: 0000000000000000
[  392.540258][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.540269][T17025] R13: 00007fc3e3626038 R14: 00007fc3e3625fa0 R15: 00007ffcb4cf52e8
[  392.540301][T17025]  </TASK>
[  393.027652][T17043] netlink: 'syz.4.2670': attribute type 21 has an invalid length.
[  393.027700][T17043] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2670'.
[  393.027768][T17043] netlink: 'syz.4.2670': attribute type 4 has an invalid length.
[  393.027780][T17043] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2670'.
[  393.080215][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'.
[  393.080261][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'.
[  393.211544][T17048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.277120][T17048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.339863][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  393.863728][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.864389][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.864906][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.867908][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.868481][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.868996][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.872230][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.877021][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.877763][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  393.878297][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'.
[  394.065202][T17081] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) !
[  394.129865][T17081] bond8: option ad_select: invalid value (34)
[  394.137061][T17081] bond8 (unregistering): Released all slaves
[  394.167852][T17082] bond8: option ad_select: invalid value (34)
[  394.176951][T17082] bond8 (unregistering): Released all slaves
[  394.327405][T17088] syzkaller1: entered promiscuous mode
[  394.327435][T17088] syzkaller1: entered allmulticast mode
[  394.608646][T17110] netlink: 'syz.1.2688': attribute type 6 has an invalid length.
[  394.664811][T17113] sctp: [Deprecated]: syz.1.2689 (pid 17113) Use of int in max_burst socket option.
[  394.664811][T17113] Use struct sctp_assoc_value instead
[  394.665451][T17115] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  394.688260][T17114] sctp: [Deprecated]: syz.1.2689 (pid 17114) Use of int in max_burst socket option.
[  394.688260][T17114] Use struct sctp_assoc_value instead
[  395.497407][T17146] lo: entered promiscuous mode
[  395.589106][T17146] tunl0: entered promiscuous mode
[  395.589386][T17146] gretap0: entered promiscuous mode
[  395.589511][T17146] erspan0: entered promiscuous mode
[  395.591311][T17146] ip_vti0: entered promiscuous mode
[  395.591478][T17146] ip6_vti0: entered promiscuous mode
[  395.591593][T17146] sit0: entered promiscuous mode
[  395.591702][T17146] ip6tnl0: entered promiscuous mode
[  395.591805][T17146] ip6gre0: entered promiscuous mode
[  395.592527][T17146] ip6gretap0: entered promiscuous mode
[  395.592636][T17146] bridge0: entered promiscuous mode
[  395.592826][T17146] team0: entered promiscuous mode
[  395.592840][T17146] team_slave_0: entered promiscuous mode
[  395.592995][T17146] team_slave_1: entered promiscuous mode
[  395.593142][T17146] macvlan0: entered promiscuous mode
[  395.593154][T17146] bond11: entered promiscuous mode
[  395.597182][T17146] dummy0: entered promiscuous mode
[  395.597339][T17146] nlmon0: entered promiscuous mode
[  395.597479][T17146] vxcan0: entered promiscuous mode
[  395.597615][T17146] �: entered promiscuous mode
[  395.597748][T17146] veth0: entered promiscuous mode
[  395.597898][T17146] veth1: entered promiscuous mode
[  395.598031][T17146] wg0: entered promiscuous mode
[  395.598192][T17146] wg1: entered promiscuous mode
[  395.598322][T17146] wg2: entered promiscuous mode
[  395.598448][T17146] veth0_to_bridge: entered promiscuous mode
[  395.604067][T17146] veth1_to_bridge: entered promiscuous mode
[  395.604311][T17146] veth0_to_bond: entered promiscuous mode
[  395.604447][T17146] bond_slave_0: entered promiscuous mode
[  395.604586][T17146] veth1_to_bond: entered promiscuous mode
[  395.604719][T17146] 
@0�: entered promiscuous mode
[  395.604848][T17146] veth0_to_team: entered promiscuous mode
[  395.606429][T17146] veth1_to_team: entered promiscuous mode
[  395.606698][T17146] veth0_to_batadv: entered promiscuous mode
[  395.606832][T17146] batadv_slave_0: entered promiscuous mode
[  395.606962][T17146] veth1_to_batadv: entered promiscuous mode
[  395.607094][T17146] batadv_slave_1: entered promiscuous mode
[  395.607947][T17146] xfrm0: entered promiscuous mode
[  395.608090][T17146] veth0_to_hsr: entered promiscuous mode
[  395.608411][T17146] veth1_to_hsr: entered promiscuous mode
[  395.608669][T17146] hsr0: entered promiscuous mode
[  395.609042][T17146] macvtap0: entered promiscuous mode
[  395.609177][T17146] macsec0: entered promiscuous mode
[  395.609280][T17146] geneve0: entered promiscuous mode
[  395.609484][T17146] geneve1: entered promiscuous mode
[  395.610133][T17146] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  395.610259][T17146] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  395.610369][T17146] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  395.611343][T17146] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  395.612256][T17146] bond1: entered promiscuous mode
[  395.612384][T17146] xfrm1: entered promiscuous mode
[  395.612525][T17146] geneve2: entered promiscuous mode
[  395.613098][T17146] veth2: entered promiscuous mode
[  395.613238][T17146] veth3: entered promiscuous mode
[  395.613371][T17146] erspan1: entered promiscuous mode
[  395.613484][T17146] gtp0: entered promiscuous mode
[  395.613617][T17146] gtp1: entered promiscuous mode
[  395.614046][T17146] macsec1: entered promiscuous mode
[  395.614215][T17146] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode
[  395.614350][T17146] bridge1: entered promiscuous mode
[  395.614474][T17146] geneve3: entered promiscuous mode
[  395.614790][T17146] veth4: entered promiscuous mode
[  395.615165][T17146] veth6: entered promiscuous mode
[  395.615753][T17146] bond3: entered promiscuous mode
[  395.615933][T17146] bond4: entered promiscuous mode
[  395.615946][T17146] macvlan1: entered promiscuous mode
[  395.619175][T17146] syztnl1: entered promiscuous mode
[  395.619395][T17146] ip6erspan0: entered promiscuous mode
[  395.619515][T17146] mac80211_hwsim hwsim20 wlan3: entered promiscuous mode
[  395.621051][T17146] bond7: entered promiscuous mode
[  395.621174][T17146] gretap1: entered promiscuous mode
[  395.621496][T17146] bond8: entered promiscuous mode
[  395.621609][T17146] vxlan4: entered promiscuous mode
[  395.621719][T17146] mac80211_hwsim hwsim22 wlan4: entered promiscuous mode
[  395.621852][T17146] mac80211_hwsim hwsim27 wlan5: entered promiscuous mode
[  395.621982][T17146] bond9: entered promiscuous mode
[  395.622090][T17146] veth8: entered promiscuous mode
[  395.622218][T17146] veth9: entered promiscuous mode
[  395.624634][T17146] ip6gretap1: entered promiscuous mode
[  395.646127][T17146] ip6tnl1: entered promiscuous mode
[  395.681968][T17146] bond10: entered promiscuous mode
[  395.712492][T17146] bond11: left allmulticast mode
[  395.733606][T17146] pim6reg: entered promiscuous mode
[  395.767259][T17146] vrf0: entered promiscuous mode
[  395.779584][T17146] bond12: entered promiscuous mode
[  395.781626][T17146] dvmrp1: entered promiscuous mode
[  395.781771][T17146] ip6erspan1: entered promiscuous mode
[  395.783297][T17146] vxlan5: entered promiscuous mode
[  395.803836][T17146] bond13: entered promiscuous mode
[  395.807968][T17146] veth10: entered promiscuous mode
[  395.812845][T17146] veth11: entered promiscuous mode
[  395.816239][T17146] bond14: entered promiscuous mode
[  395.816260][T17146] bridge3: entered promiscuous mode
[  395.817841][T17146] macvtap1: entered promiscuous mode
[  395.817999][T17146] macvtap2: entered promiscuous mode
[  395.827327][T17146] dvmrp8: entered promiscuous mode
[  396.179897][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.181673][ T8541] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.181709][ T8541] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.183400][T17157] openvswitch: netlink: Multiple metadata blocks provided
[  396.191286][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.324825][T17166] netlink: 'syz.2.2706': attribute type 2 has an invalid length.
[  396.503088][T17176] netlink: 'syz.3.2708': attribute type 9 has an invalid length.
[  396.776384][T17188] bond15: option all_slaves_active: invalid value (255)
[  396.787843][T17188] bond15 (unregistering): Released all slaves
[  397.157999][T17197] pim6reg1: entered promiscuous mode
[  397.158027][T17197] pim6reg1: entered allmulticast mode
[  397.331810][   T31] audit: type=1804 audit(1789020920.959:13): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2716" name="/newroot/504/cgroup.controllers" dev="tmpfs" ino=2603 res=1 errno=0
[  397.332042][   T31] audit: type=1800 audit(1789020920.959:14): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2716" name="cgroup.controllers" dev="tmpfs" ino=2603 res=0 errno=0
[  397.418923][T17208] netlink: 'syz.4.2716': attribute type 16 has an invalid length.
[  397.418976][T17208] netlink: 'syz.4.2716': attribute type 17 has an invalid length.
[  397.419108][T17208] lo: left promiscuous mode
[  397.433714][T17208] tunl0: left promiscuous mode
[  397.445767][T17208] gre0: left promiscuous mode
[  397.463831][T17208] gretap0: left promiscuous mode
[  397.466532][T17208] erspan0: left promiscuous mode
[  397.468672][T17208] ip_vti0: left promiscuous mode
[  397.476865][T17208] ip6_vti0: left promiscuous mode
[  397.483091][T17208] sit0: left promiscuous mode
[  397.483370][T17210] netlink: 'syz.1.2717': attribute type 15 has an invalid length.
[  397.498199][T17208] ip6tnl0: left promiscuous mode
[  397.501221][T17208] ip6gre0: left promiscuous mode
[  397.503328][T17208] ip6gretap0: left promiscuous mode
[  397.508835][T17208] bridge0: left promiscuous mode
[  397.510822][T17208] bridge0: entered promiscuous mode
[  397.512433][T17208] bond0: left promiscuous mode
[  397.512614][T17208] team0: left promiscuous mode
[  397.512629][T17208] bridge1: left promiscuous mode
[  397.516445][T17208] nlmon0: left promiscuous mode
[  397.517984][T17208] batadv0: left promiscuous mode
[  397.521696][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.523415][T17208] vxcan0: left promiscuous mode
[  397.524650][T17208] vxcan1: left promiscuous mode
[  397.525873][T17208] veth0: left promiscuous mode
[  397.528017][T17208] veth1: left promiscuous mode
[  397.686431][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.686585][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.686726][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.686872][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.687029][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.687172][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.687315][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.687457][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.687599][T17213] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  397.695445][T17208] wg0: left promiscuous mode
[  397.782960][T17208] wg1: left promiscuous mode
[  397.812586][T17208] wg2: left promiscuous mode
[  397.820954][T17208] veth0_to_bridge: left promiscuous mode
[  397.829688][T17208] bridge_slave_0: left promiscuous mode
[  397.836162][T17208] veth1_to_bridge: left promiscuous mode
[  397.844952][T17208] bridge_slave_1: left promiscuous mode
[  397.853504][T17208] veth0_to_bond: left promiscuous mode
[  397.864350][T17208] bond_slave_0: left promiscuous mode
[  397.865135][T17208] veth1_to_bond: left promiscuous mode
[  397.877203][T17208] bond_slave_1: left promiscuous mode
[  397.881543][T17208] veth1_to_team: left promiscuous mode
[  397.886994][T17208] team_slave_1: left promiscuous mode
[  397.892748][T17208] veth0_to_batadv: left promiscuous mode
[  397.897055][T17208] batadv_slave_0: left promiscuous mode
[  397.903068][T17208] veth1_to_batadv: left promiscuous mode
[  397.904402][T17208] batadv_slave_1: left promiscuous mode
[  397.908429][T17208] xfrm0: left promiscuous mode
[  397.918410][T17208] veth0_to_hsr: left promiscuous mode
[  397.927466][T17208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  397.960194][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  397.963140][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  397.966406][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  397.969211][T17208] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  397.976297][T17208] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  398.017196][ T5347] lo speed is unknown, defaulting to 1000
[  398.017252][ T5347] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  398.019543][T17220] netlink: 'syz.3.2720': attribute type 8 has an invalid length.
[  398.022743][   T30] bridge0: port 1(vlan0) entered blocking state
[  398.022903][   T30] bridge0: port 1(vlan0) entered forwarding state
[  398.030537][  T142] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.030569][  T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.030603][  T142] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.030625][  T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.030655][  T142] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.030677][  T142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.030707][  T142] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.030729][  T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.176477][T17215] wg2 speed is unknown, defaulting to 1000
[  398.187658][T17215] lo speed is unknown, defaulting to 1000
[  399.307473][T17273] __nla_validate_parse: 9 callbacks suppressed
[  399.307507][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'.
[  399.331590][T17275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'.
[  399.533676][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'.
[  399.547024][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'.
[  399.575940][T17290] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  399.776552][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'.
[  402.479390][   T12] net_ratelimit: 58 callbacks suppressed
[  402.479447][   T12] Dead loop on virtual device lo (net 39), fix it urgently!
[  402.502987][   T12] Dead loop on virtual device lo (net 39), fix it urgently!
[  402.518432][T17296] gretap0: left allmulticast mode
[  402.533305][T17296] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2735'.
[  402.533345][T17296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  402.611865][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.623494][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.699402][   T12] Dead loop on virtual device lo (net 39), fix it urgently!
[  402.716058][T17307] netlink: 'syz.2.2737': attribute type 1 has an invalid length.
[  402.723012][   T12] Dead loop on virtual device lo (net 39), fix it urgently!
[  402.756682][T17307] bond7: entered promiscuous mode
[  402.778124][T17307] 8021q: adding VLAN 0 to HW filter on device bond7
[  402.812810][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.956962][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'.
[  403.048169][T17307] veth9: entered allmulticast mode
[  403.064137][T17307] bond7: (slave veth9): making interface the new active one
[  403.064184][T17307] veth9: entered promiscuous mode
[  403.079564][T17307] bond7: (slave veth9): Enslaving as an active interface with an up link
[  403.091123][T17332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'.
[  403.092081][ T5739] Dead loop on virtual device lo (net 39), fix it urgently!
[  403.093839][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'.
[  403.102961][ T5777] Dead loop on virtual device lo (net 39), fix it urgently!
[  403.114358][T17331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'.
[  403.755601][T17357] pim6reg: left allmulticast mode
[  403.816296][T17357] xt_esp: unknown flags DD
[  403.823599][T17357] syzkaller0: entered promiscuous mode
[  403.823655][T17357] syzkaller0: entered allmulticast mode
[  404.091870][T17368] bond10 (unregistering): Released all slaves
[  404.578232][T17397] __nla_validate_parse: 1 callbacks suppressed
[  404.578297][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2759'.
[  404.581221][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2759'.
[  404.832546][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'.
[  404.853754][T17408] netlink: 'syz.4.2761': attribute type 39 has an invalid length.
[  404.945671][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'.
[  405.202300][T17425] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2766'.
[  405.274849][T17427] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2766'.
[  405.287325][T17425] wg2 speed is unknown, defaulting to 1000
[  405.288874][T17425] lo speed is unknown, defaulting to 1000
[  405.394286][T17433] netlink: 'syz.0.2768': attribute type 7 has an invalid length.
[  405.408441][T17428] wg2 speed is unknown, defaulting to 1000
[  405.423069][T17433] netlink: 'syz.0.2768': attribute type 7 has an invalid length.
[  405.432566][T17428] lo speed is unknown, defaulting to 1000
[  405.483362][ T8542] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.483463][ T8542] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.483587][ T8542] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.483620][ T8542] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.055534][T17460] netlink: 'syz.1.2775': attribute type 12 has an invalid length.
[  406.059776][T17460] netlink: 'syz.1.2775': attribute type 29 has an invalid length.
[  406.059796][T17460] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2775'.
[  406.059813][T17460] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2775'.
[  406.327611][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'.
[  406.327638][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'.
[  406.352045][  T142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.352091][  T142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.352121][  T142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.173828][T17464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  409.174379][T17469] netlink: 'syz.4.2778': attribute type 2 has an invalid length.
[  409.380077][T17506] xt_ecn: cannot match TCP bits for non-tcp packets
[  409.506772][T17508] wg2 speed is unknown, defaulting to 1000
[  409.533636][T17508] lo speed is unknown, defaulting to 1000
[  409.798228][ T5732] team_slave_0: entered promiscuous mode
[  409.798281][ T5732] team_slave_1: entered promiscuous mode
[  409.799458][ T5732] syz_tun: entered promiscuous mode
[  409.817473][T17530] bridge0: left promiscuous mode
[  409.817510][T17530] bridge0: entered allmulticast mode
[  409.830827][T17530] bridge_slave_1: left allmulticast mode
[  409.831971][T17530] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.916263][T17526] __nla_validate_parse: 2 callbacks suppressed
[  409.917656][T17530] bridge_slave_0: left allmulticast mode
[  409.921154][T17530] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.928750][T17526] netlink: 20904 bytes leftover after parsing attributes in process `syz.2.2794'.
[  409.958875][T17536] nbd: couldn't find a device at index 0
[  410.280069][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2800'.
[  410.388332][ T5732] team_slave_0: left promiscuous mode
[  410.388376][ T5732] team_slave_1: left promiscuous mode
[  410.388408][ T5732] syz_tun: left promiscuous mode
[  410.524674][T17561] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  410.651560][T17573] syzkaller1: tun_chr_ioctl cmd 1074025677
[  410.657705][T17573] syzkaller1: linktype set to 769
[  410.758271][T17580] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  410.903706][T17594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2811'.
[  411.157278][T17600] macvlan0: left allmulticast mode
[  411.163478][T17600] netlink: 'syz.3.2814': attribute type 2 has an invalid length.
[  411.354693][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  411.366751][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  411.367586][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  411.368486][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  411.370144][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  411.417720][T17609] bridge0: entered allmulticast mode
[  411.711151][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'.
[  411.724887][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'.
[  411.982216][    C1] net_ratelimit: 116 callbacks suppressed
[  411.982288][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  411.996162][T17621] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  412.403047][T17603] wg2 speed is unknown, defaulting to 1000
[  412.404692][T17603] lo speed is unknown, defaulting to 1000
[  412.461998][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.614714][T17603] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.614885][T17603] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.615261][T17603] bridge_slave_0: entered allmulticast mode
[  412.616928][T17603] bridge_slave_0: entered promiscuous mode
[  412.624909][T17603] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.625008][T17603] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.625151][T17603] bridge_slave_1: entered allmulticast mode
[  412.626956][T17603] bridge_slave_1: entered promiscuous mode
[  412.662499][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.666151][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.703998][T17603] team0: Port device team_slave_0 added
[  412.706883][T17603] team0: Port device team_slave_1 added
[  412.729142][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.729185][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.729208][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.732140][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.732155][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.732178][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.782362][T17603] hsr_slave_0: entered promiscuous mode
[  412.783548][T17603] hsr_slave_1: entered promiscuous mode
[  412.784408][T17603] debugfs: 'hsr0' already exists in 'hsr'
[  412.784426][T17603] Cannot create hsr debugfs directory
[  413.079305][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.100254][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.100561][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  413.257955][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.258021][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.258043][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  413.384291][T17603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.384353][T17603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.384376][T17603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  413.440478][ T5618] Bluetooth: hci5: command tx timeout
[  414.958021][T17628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  414.973952][T17603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  415.024481][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  415.036497][T17603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  415.047778][    C1] Dead loop on virtual device lo (net 39), fix it urgently!
[  415.048689][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.056154][    C0] Dead loop on virtual device lo (net 39), fix it urgently!
[  415.089497][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  415.093471][T17603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  415.160592][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  415.167457][T17603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  415.185472][T17603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  415.469520][T17603] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.522731][ T5618] Bluetooth: hci5: command tx timeout
[  415.556370][T17603] 8021q: adding VLAN 0 to HW filter on device team0
[  415.584713][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.584809][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.606914][T17720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2835'.
[  415.611485][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.611601][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.772973][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'.
[  415.796767][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'.
[  415.934177][T17723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2836'.
[  416.103976][T17740] team0: entered allmulticast mode
[  416.104034][T17740] team_slave_0: entered allmulticast mode
[  416.104067][T17740] team_slave_1: entered allmulticast mode
[  416.104089][T17740] macvlan0: entered allmulticast mode
[  416.108342][T17740] 8021q: adding VLAN 0 to HW filter on device team0
[  416.189896][T17740] �: renamed from bond_slave_0
[  416.396747][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.504390][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2836'.
[  416.504469][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2836'.
[  416.544090][T17603] veth0_vlan: entered promiscuous mode
[  416.551947][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'.
[  416.563377][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'.
[  416.575643][T17603] veth1_vlan: entered promiscuous mode
[  416.731268][T17603] veth0_macvtap: entered promiscuous mode
[  416.754188][T17603] veth1_macvtap: entered promiscuous mode
[  416.813708][T17759] pim6reg: entered allmulticast mode
[  416.841786][T17759] erspan0: mtu less than device minimum
[  416.845258][T17759] pim6reg: left allmulticast mode
[  416.901004][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  416.968857][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.100836][T17774] syzkaller1: entered promiscuous mode
[  417.100874][T17774] syzkaller1: entered allmulticast mode
[  417.140368][ T8542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.140518][ T8542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.151194][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.189817][ T8990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.211763][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'.
[  417.391724][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'.
[  417.474702][T17785] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  417.474753][T17785] batman_adv: batadv0: Removing interface: ip6gretap2
[  417.554719][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.554767][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.606803][ T5618] Bluetooth: hci5: command tx timeout
[  417.662787][ T8542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.662825][ T8542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.665814][T17789] veth0: entered promiscuous mode
[  417.709045][T17776] : entered allmulticast mode
[  417.723063][T17775] : left allmulticast mode
[  417.818345][T17792] netlink: 'syz.4.2855': attribute type 10 has an invalid length.
[  417.828121][T17792] openvswitch: netlink: Flow key attr not present in new flow.
[  417.944915][T17788] veth0: left promiscuous mode
[  418.100954][T17804] nbd: socks must be embedded in a SOCK_ITEM attr
[  418.101048][T17804] block nbd6: shutting down sockets
[  418.220070][T17808] netlink: 'syz.4.2859': attribute type 16 has an invalid length.
[  418.421662][ T4931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  418.430743][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  418.438025][ T4931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  418.451897][ T4931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  418.452520][ T4931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  418.473322][T17818] nbd: socks must be embedded in a SOCK_ITEM attr
[  418.492363][T17818] team_slave_1: entered promiscuous mode
[  418.492402][T17818] team_slave_1: entered allmulticast mode
[  418.768306][T17835] nbd: must specify a size in bytes for the device
[  419.022588][T17852] openvswitch: netlink: Flow key attr not present in new flow.
[  419.135563][ T5611] syz_tun (unregistering): left allmulticast mode
[  419.503302][ T8542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.680141][ T4931] Bluetooth: hci5: command tx timeout
[  419.695147][T17867] 8021q: adding VLAN 0 to HW filter on device bond15
[  419.785634][ T8542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  419.927065][T17878] nbd: nbd3 already in use
[  419.934226][T17878] block nbd3: NBD_DISCONNECT
[  419.934271][T17878] block nbd3: Send disconnect failed -32
[  419.934305][T17878] block nbd3: Send disconnect failed -32
[  419.934325][T17878] block nbd3: shutting down sockets
[  419.998709][T17813] wg2 speed is unknown, defaulting to 1000
[  420.008452][T17813] lo speed is unknown, defaulting to 1000
[  420.101241][ T8542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.118143][T17880] netlink: 'syz.3.2875': attribute type 1 has an invalid length.
[  420.372966][T17880] 8021q: adding VLAN 0 to HW filter on device bond16
[  420.480006][ T4931] Bluetooth: hci2: command tx timeout
[  420.488887][ T8542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.623110][T17876] wg2 speed is unknown, defaulting to 1000
[  420.655998][T17876] lo speed is unknown, defaulting to 1000
[  420.935811][T17904] openvswitch: netlink: Duplicate or invalid key (type 0).
[  420.935872][T17904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.961579][T17904] __nla_validate_parse: 73 callbacks suppressed
[  420.961840][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2880'.
[  420.961869][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2880'.
[  421.232161][T17900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2878'.
[  421.736515][ T8542] pimreg: left allmulticast mode
[  421.980975][T17933] netlink: 'syz.2.2884': attribute type 12 has an invalid length.
[  421.981015][T17933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2884'.
[  422.362335][ T8542] bond4 (unregistering): (slave geneve3): Releasing active interface
[  422.449474][ T8542] bond1 (unregistering): Released all slaves
[  422.481122][ T8542] tipc: Disabling bearer <eth:syzkaller0>
[  422.487468][ T8542] syzkaller0 (unregistering): Released all slaves
[  422.498361][ T8542] bond2 (unregistering): Released all slaves
[  422.509174][ T8542] bond3 (unregistering): Released all slaves
[  422.521325][ T8542] bond4 (unregistering): Released all slaves
[  422.536077][ T8542] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  422.549396][ T8542] bond5 (unregistering): Released all slaves
[  422.560014][ T4931] Bluetooth: hci2: command tx timeout
[  422.564170][ T8542] bond6 (unregistering): Released all slaves
[  422.576531][ T8542] team0: Port device bond0 removed
[  422.577781][ T8542] bond0 (unregistering): Released all slaves
[  422.591561][ T8542] bond7 (unregistering): Released all slaves
[  422.607742][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  422.787472][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'.
[  423.074129][ T8542] tipc: Disabling bearer <eth:wlan1>
[  423.088679][ T8542] tipc: Left network mode
[  423.094802][T17813] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.094959][T17813] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.095165][T17813] bridge_slave_0: entered allmulticast mode
[  423.121749][T17813] bridge_slave_0: entered promiscuous mode
[  423.195218][ T8542] IPVS: stopping backup sync thread 5928 ...
[  423.397564][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'.
[  423.457973][T17813] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.458126][T17813] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.458336][T17813] bridge_slave_1: entered allmulticast mode
[  423.482361][T17813] bridge_slave_1: entered promiscuous mode
[  423.570478][T17964] vlan2: entered allmulticast mode
[  423.570754][T17964] bridge0: port 3(vlan2) entered blocking state
[  423.570851][T17964] bridge0: port 3(vlan2) entered disabled state
[  423.572874][T17964] vlan2: entered promiscuous mode
[  423.689549][T17977] netlink: 'syz.4.2892': attribute type 1 has an invalid length.
[  423.741968][T17813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.028227][T17813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.279590][T17997] nbd: nbd4 already in use
[  424.308197][T17997] block nbd4: NBD_DISCONNECT
[  424.308242][T17997] block nbd4: Send disconnect failed -32
[  424.308260][T17997] block nbd4: Send disconnect failed -32
[  424.308273][T17997] block nbd4: shutting down sockets
[  424.320553][T17813] team0: Port device team_slave_0 added
[  424.323379][T17813] team0: Port device team_slave_1 added
[  424.568565][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[  424.580938][T17813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.580976][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.580999][T17813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.642978][ T4931] Bluetooth: hci2: command tx timeout
[  424.695434][T17813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.695463][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.695486][T17813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.873868][T18013] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2897'.
[  424.940968][T17813] hsr_slave_0: entered promiscuous mode
[  424.947864][T17813] hsr_slave_1: entered promiscuous mode
[  424.954332][T17813] debugfs: 'hsr0' already exists in 'hsr'
[  424.959964][T17813] Cannot create hsr debugfs directory
[  425.103200][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'.
[  425.114143][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'.
[  425.123616][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'.
[  425.402462][ T8542] hsr_slave_0: left promiscuous mode
[  425.806666][ T8542] team0 (unregistering): Port device team_slave_1 removed
[  425.845497][ T8542] team0 (unregistering): Port device team_slave_0 removed
[  426.156225][ T8541] smbdirect: ib_dev[syz2] removed
[  426.354147][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3
[  426.522293][T18074] __nla_validate_parse: 4 callbacks suppressed
[  426.522338][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'.
[  426.720150][ T4931] Bluetooth: hci2: command tx timeout
[  426.854539][ T8542] IPVS: stop unused estimator thread 0...
[  427.052038][T18089] netlink: 'syz.3.2909': attribute type 10 has an invalid length.
[  427.257604][T18096] netlink: 'syz.1.2910': attribute type 5 has an invalid length.
[  427.516231][T18101] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  427.517074][T18107] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  427.555913][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'.
[  428.157025][T18135] syzkaller1: entered allmulticast mode
[  428.292161][T18143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.299850][T18143] syzkaller0: entered promiscuous mode
[  428.319567][T18143] syzkaller0: entered allmulticast mode
[  428.421211][T18143] tipc: Resetting bearer <eth:syzkaller0>
[  428.552524][T18155] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20002
[  428.602722][T18143] tipc: Resetting bearer <eth:syzkaller0>
[  428.656388][T18143] tipc: Disabling bearer <eth:syzkaller0>
[  428.934157][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2921'.
[  429.005199][T18165] syzkaller1: entered promiscuous mode
[  429.005262][T18165] syzkaller1: entered allmulticast mode
[  429.065851][T17813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  429.116412][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  429.126396][T17813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  429.158624][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  429.166967][T17813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  429.189450][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  429.194768][T17813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  429.221037][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  429.693502][T18211] netlink: 'syz.2.2929': attribute type 11 has an invalid length.
[  429.944709][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  429.955181][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  429.970036][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  429.970273][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  429.970475][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  429.970691][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  430.007282][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  430.203444][T18219] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.204054][T18219] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.395675][T18219] team_slave_1: left promiscuous mode
[  430.395729][T18219] team_slave_1: left allmulticast mode
[  430.413840][T18219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.438857][T18219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.613171][ T8541] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.616574][ T8539] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.616798][ T8539] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.761506][ T8541] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  430.944625][T17813] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.039369][T17813] 8021q: adding VLAN 0 to HW filter on device team0
[  431.057505][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.057631][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.086287][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.086397][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.473479][T18274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.645077][T18288] netlink: 'syz.3.2939': attribute type 83 has an invalid length.
[  431.736214][T18284] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  431.792328][T18289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.012747][ T5732] Dead loop on virtual device lo (net 39), fix it urgently!
[  432.240876][ T5732] Dead loop on virtual device lo (net 39), fix it urgently!
[  432.279071][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.320403][    C0] Dead loop on virtual device lo (net 39), fix it urgently!
[  432.320403][    C1] Dead loop on virtual device lo (net 39), fix it urgently!
[  432.321540][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.451996][T17813] veth0_vlan: entered promiscuous mode
[  432.509740][T17813] veth1_vlan: entered promiscuous mode
[  432.594254][T18338] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  432.604721][T18338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.648552][T18338] syzkaller0: entered promiscuous mode
[  432.655354][T18338] syzkaller0: entered allmulticast mode
[  432.709037][T17813] veth0_macvtap: entered promiscuous mode
[  432.715566][T18335] __nla_validate_parse: 60 callbacks suppressed
[  432.715618][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.715754][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.715878][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716010][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716132][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716267][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716390][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716528][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716663][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.716790][T18335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2945'.
[  432.737882][T17813] veth1_macvtap: entered promiscuous mode
[  432.800928][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.838527][T17813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.249913][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.259605][T18364] SET target dimension over the limit!
[  433.292617][ T8541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.293659][  T257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.293696][  T257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.555683][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.555718][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.704123][  T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.712789][  T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.111582][T18394] syzkaller0: entered promiscuous mode
[  434.111627][T18394] syzkaller0: entered allmulticast mode
[  434.127720][T18394] tipc: Started in network mode
[  434.127768][T18394] tipc: Node identity da0dd31d2049, cluster identity 4711
[  434.127897][T18394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.156924][T18394] tipc: Resetting bearer <eth:syzkaller0>
[  434.238536][T18392] tipc: Resetting bearer <eth:syzkaller0>
[  434.265536][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  434.278199][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  434.290196][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  434.306220][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  434.314872][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  434.528900][T18392] tipc: Disabling bearer <eth:syzkaller0>
[  434.618344][ T8539] IPVS: starting estimator thread 0...
[  434.643306][T18408] ipip0: entered promiscuous mode
[  434.661187][T18408] ipip0: entered allmulticast mode
[  434.720255][T18414] IPVS: using max 30 ests per chain, 72000 per kthread
[  434.881915][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.915429][T18426] netlink: 'syz.0.2960': attribute type 6 has an invalid length.
[  434.915470][T18426] netlink: 'syz.0.2960': attribute type 5 has an invalid length.
[  435.072241][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  435.072313][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  435.072359][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  435.072393][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  435.669494][T18402] lo speed is unknown, defaulting to 1000
[  435.771757][T18475] netlink: 'syz.0.2969': attribute type 1 has an invalid length.
[  435.813912][T18475] vlan2: entered promiscuous mode
[  435.819252][T18475] dummy0: entered promiscuous mode
[  435.829016][T18475] vlan2: entered allmulticast mode
[  435.834685][T18475] dummy0: entered allmulticast mode
[  435.868113][T18470] tipc: Started in network mode
[  435.868148][T18470] tipc: Node identity ac141441, cluster identity 4711
[  435.869254][T18470] tipc: Enabled bearer <udp:syz2>, priority 10
[  436.400499][ T4931] Bluetooth: hci1: command tx timeout
[  436.682966][T18402] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.683169][T18402] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.683322][T18402] bridge_slave_0: entered allmulticast mode
[  436.685162][T18402] bridge_slave_0: entered promiscuous mode
[  436.690013][T18402] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.690820][T18402] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.690957][T18402] bridge_slave_1: entered allmulticast mode
[  436.736472][T18402] bridge_slave_1: entered promiscuous mode
[  436.891289][T18402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.905005][T18402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.958943][T18530] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  437.028428][ T5732] tipc: Node number set to 2886997057
[  437.051603][T18402] team0: Port device team_slave_0 added
[  437.066547][T18402] team0: Port device team_slave_1 added
[  437.245755][T18539] netlink: 'syz.0.2978': attribute type 6 has an invalid length.
[  437.255838][T18402] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.255856][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.255879][T18402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.267201][T18402] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.267218][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.267243][T18402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.368992][T18550] netlink: 'syz.4.2981': attribute type 5 has an invalid length.
[  437.593886][T18402] hsr_slave_0: entered promiscuous mode
[  437.597209][T18402] hsr_slave_1: entered promiscuous mode
[  437.599465][T18402] debugfs: 'hsr0' already exists in 'hsr'
[  437.599487][T18402] Cannot create hsr debugfs directory
[  438.387794][T18593] netlink: 'syz.4.2991': attribute type 15 has an invalid length.
[  438.387835][T18593] netlink: 'syz.4.2991': attribute type 7 has an invalid length.
[  438.387863][T18593] __nla_validate_parse: 136 callbacks suppressed
[  438.387878][T18593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2991'.
[  438.417412][T18592] syzkaller1: entered allmulticast mode
[  438.491497][ T4931] Bluetooth: hci1: command tx timeout
[  439.068825][T18622] netlink: 'syz.0.2994': attribute type 5 has an invalid length.
[  439.068863][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2994'.
[  439.217429][T18627] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  439.716562][T18402] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  439.727786][T18402] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  439.729084][T18402] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  439.747357][T18402] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  439.750224][T18402] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  439.768001][T18402] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  439.773460][T18402] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  439.794875][T18402] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  439.824939][T18650] xfrm0: Caught tx_queue_len zero misconfig
[  439.927319][T18402] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.955191][T18402] 8021q: adding VLAN 0 to HW filter on device team0
[  439.973817][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.973924][ T8542] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.994661][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.994838][ T8542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.254034][T18672] netlink: 'syz.1.3012': attribute type 1 has an invalid length.
[  440.254075][T18672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3012'.
[  440.336439][T18672] netlink: 'syz.1.3012': attribute type 2 has an invalid length.
[  440.361033][T18672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3012'.
[  440.374308][T18676] netlink: 'syz.1.3012': attribute type 1 has an invalid length.
[  440.374346][T18676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3012'.
[  440.393305][T18685] ip_tables: iptables: counters copy to user failed while replacing table
[  440.425083][T18685] netlink: 'syz.2.3013': attribute type 3 has an invalid length.
[  440.451164][T18687] netlink: 'syz.1.3012': attribute type 2 has an invalid length.
[  440.467141][T18687] netlink: Conntrack attr has 8 unknown bytes
[  440.467191][T18687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.479885][T18688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3012'.
[  440.560654][ T4931] Bluetooth: hci1: command tx timeout
[  440.694998][T18703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3017'.
[  440.705092][T18703] openvswitch: netlink: Duplicate key (type 0).
[  440.817458][T18402] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.859754][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'.
[  440.869233][T18713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'.
[  440.906309][T18713] veth7: entered allmulticast mode
[  440.964871][T18402] veth0_vlan: entered promiscuous mode
[  440.982909][T18402] veth1_vlan: entered promiscuous mode
[  441.026710][T18718] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  441.095419][T18402] veth0_macvtap: entered promiscuous mode
[  441.118252][T18402] veth1_macvtap: entered promiscuous mode
[  441.146651][    C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.167345][    C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.172369][    C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.174618][    C0] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  441.242828][T18402] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.267172][T18402] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.331269][T18727] netlink: 'syz.0.3023': attribute type 11 has an invalid length.
[  441.339365][T18727] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3023'.
[  441.411692][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.411773][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.411804][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.411831][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.752431][ T8541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.752467][ T8541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.919174][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.919216][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.282530][T18757] lo speed is unknown, defaulting to 1000
[  442.572434][T18763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.614902][T18763] syzkaller0: entered promiscuous mode
[  442.614962][T18763] syzkaller0: entered allmulticast mode
[  442.616067][T18763] tipc: Resetting bearer <eth:syzkaller0>
[  442.640168][ T4931] Bluetooth: hci1: command tx timeout
[  444.672383][T18762] tipc: Resetting bearer <eth:syzkaller0>
[  444.907212][T18793] __nla_validate_parse: 3 callbacks suppressed
[  444.907265][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'.
[  447.463942][T18762] tipc: Disabling bearer <eth:syzkaller0>
[  447.540591][T18805] macvlan2: entered promiscuous mode
[  447.540617][T18805] macvlan2: entered allmulticast mode
[  447.540927][T18805] bridge0: port 3(macvlan2) entered blocking state
[  447.541023][T18805] bridge0: port 3(macvlan2) entered disabled state
[  447.632815][T18778] lo speed is unknown, defaulting to 1000
[  447.780206][T18808] validate_nla: 1 callbacks suppressed
[  447.780254][T18808] netlink: 'syz.1.3039': attribute type 83 has an invalid length.
[  448.016079][T18820] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3044'.
[  448.025704][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.
[  448.173028][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'.
[  448.416439][   T31] audit: type=1804 audit(1789020972.039:15): pid=18842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3049" name="/newroot/5/cgroup.controllers" dev="tmpfs" ino=45 res=1 errno=0
[  448.418342][   T31] audit: type=1800 audit(1789020972.039:16): pid=18842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3049" name="cgroup.controllers" dev="tmpfs" ino=45 res=0 errno=0
[  448.464964][T18840] netlink: 'syz.2.3047': attribute type 1 has an invalid length.
[  448.518357][T18850] netlink: 'syz.3.3052': attribute type 39 has an invalid length.
[  448.534479][T18840] 8021q: adding VLAN 0 to HW filter on device bond8
[  448.682356][T18840] bond8: (slave geneve2): making interface the new active one
[  448.697604][T18840] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  449.140948][T18872] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3055'.
[  449.140993][T18872] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3055'.
[  449.479096][T18891] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  449.481134][T18889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3058'.
[  449.700023][T18899] netlink: 'syz.3.3061': attribute type 1 has an invalid length.
[  450.155356][T18914] net_ratelimit: 264 callbacks suppressed
[  450.155428][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.155586][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.155729][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.155877][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156022][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156165][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156351][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156505][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156650][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.156793][T18914] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  450.316372][T18916] veth1_to_bond: entered allmulticast mode
[  450.317154][T18916] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3065'.
[  450.317197][T18916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3065'.
[  450.326178][T18916] veth1_to_bond: entered promiscuous mode
[  450.346514][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'.
[  450.612867][T18916] veth1_to_bond (unregistering): left allmulticast mode
[  450.612941][T18916] veth1_to_bond (unregistering): left promiscuous mode
[  450.668431][T18916] bond0: (slave bond_slave_1): Releasing backup interface
[  450.758164][T18926] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3067'.
[  450.943211][T18933] xt_TPROXY: Can be used only with -p tcp or -p udp
[  450.943990][T18929] bond1: Removing last ns target with arp_interval on
[  450.964945][T18928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3071'.
[  451.076820][T18937] wg2 speed is unknown, defaulting to 1000
[  451.076903][T18937] wg2 speed is unknown, defaulting to 1000
[  451.102635][T18937] wg2 speed is unknown, defaulting to 1000
[  451.114862][T18937] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  451.114906][T18937] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  451.114941][T18937] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  451.193555][T18937] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  451.284356][T18937] wg2 speed is unknown, defaulting to 1000
[  451.290822][T18937] wg2 speed is unknown, defaulting to 1000
[  451.300920][T18937] wg2 speed is unknown, defaulting to 1000
[  451.305915][T18937] wg2 speed is unknown, defaulting to 1000
[  451.315628][T18937] wg2 speed is unknown, defaulting to 1000
[  451.326887][T18937] wg2 speed is unknown, defaulting to 1000
[  451.347174][T18937] wg2 speed is unknown, defaulting to 1000
[  451.654116][T18958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3079'.
[  452.107227][T18982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3085'.
[  452.220312][T18960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.231871][T18960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.374169][T18960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.374207][T18960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.496011][T19006] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3090'.
[  452.554909][T19006] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3090'.
[  452.554950][T19006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3090'.
[  452.617484][T18960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.628733][T18960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.789162][T18960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  452.789225][T18960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.944699][T19027] bond0: entered promiscuous mode
[  452.944743][T19027] bond0: entered allmulticast mode
[  452.969805][T19030] bridge0: port 3(bond0) entered blocking state
[  452.969896][T19030] bridge0: port 3(bond0) entered disabled state
[  452.970055][T19030] bond0: entered allmulticast mode
[  452.970071][T19030] bond_slave_0: entered allmulticast mode
[  452.983788][T19030] bond0: entered promiscuous mode
[  452.983810][T19030] bond_slave_0: entered promiscuous mode
[  452.995125][T19030] bridge0: port 3(bond0) entered blocking state
[  452.995272][T19030] bridge0: port 3(bond0) entered forwarding state
[  453.079510][T19030] hsr_slave_1 (unregistering): left promiscuous mode
[  453.094193][ T8994] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  453.094256][ T8994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.181476][T19033] netlink: 'syz.1.3097': attribute type 4 has an invalid length.
[  453.223497][T19033] netlink: 'syz.1.3097': attribute type 4 has an invalid length.
[  453.260480][ T8994] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  453.260527][ T8994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.260588][ T8994] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  453.260615][ T8994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.319838][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  453.319892][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.825705][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  453.843487][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  453.851534][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  453.866674][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  453.874785][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  454.070274][T19068] netlink: 'syz.3.3107': attribute type 26 has an invalid length.
[  454.265033][ T5624] team0: Port device syz_tun removed
[  454.431464][T19082] 8021q: VLANs not supported on xfrm0
[  454.629920][T19085] ovs-s!!: entered promiscuous mode
[  454.678271][T19088] debugfs: '.�P��'�G!DE�S�' already exists in 'ieee80211'
[  454.757023][  T257] IPVS: starting estimator thread 0...
[  454.853620][T19095] IPVS: using max 27 ests per chain, 64800 per kthread
[  454.933584][T19058] lo speed is unknown, defaulting to 1000
[  454.941179][T19058] wg2 speed is unknown, defaulting to 1000
[  455.328505][T19125] netlink: 'syz.4.3120': attribute type 1 has an invalid length.
[  455.360385][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  455.411283][T19125] bond9: entered promiscuous mode
[  455.417784][T19125] 8021q: adding VLAN 0 to HW filter on device bond9
[  455.477054][T19136] net_ratelimit: 44 callbacks suppressed
[  455.486228][T19136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.920134][ T4931] Bluetooth: hci3: command tx timeout
[  456.066457][T19058] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.073405][T19058] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.073577][T19058] bridge_slave_0: entered allmulticast mode
[  456.075753][T19058] bridge_slave_0: entered promiscuous mode
[  456.083704][T19058] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.086473][T19058] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.086635][T19058] bridge_slave_1: entered allmulticast mode
[  456.092912][T19058] bridge_slave_1: entered promiscuous mode
[  456.094592][T19171] __nla_validate_parse: 12 callbacks suppressed
[  456.094607][T19171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3128'.
[  456.174062][T19058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.191471][T19058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.237989][T19058] team0: Port device team_slave_0 added
[  456.245197][T19176] tipc: New replicast peer: 255.255.255.255
[  456.245902][T19176] tipc: Enabled bearer <udp:syz2>, priority 10
[  456.255990][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3129'.
[  456.269167][T19058] team0: Port device team_slave_1 added
[  456.284259][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'.
[  456.298868][T19178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3130'.
[  456.326328][T19058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.334884][T19058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.334938][T19058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.375058][T19058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.382157][T19058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.408784][T19058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.480326][T19058] hsr_slave_0: entered promiscuous mode
[  456.481228][T19058] hsr_slave_1: entered promiscuous mode
[  456.493593][T19058] debugfs: 'hsr0' already exists in 'hsr'
[  456.499436][T19058] Cannot create hsr debugfs directory
[  456.614613][T19198] x_tables: duplicate underflow at hook 2
[  457.308728][   T10] tipc: Node number set to 4198814493
[  457.413962][T19209] openvswitch: ovs-s!: Dropping previously announced user features
[  457.677677][T19058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.677740][T19058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.744351][T19227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3141'.
[  457.749110][T19224] netlink: 'syz.0.3137': attribute type 4 has an invalid length.
[  457.861049][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3143'.
[  457.999240][T19058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.999313][T19058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.022237][ T4931] Bluetooth: hci3: command tx timeout
[  458.042339][T19244] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3145'.
[  458.167002][T19058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.167070][T19058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.234132][T19249] netlink: 'syz.0.3148': attribute type 4 has an invalid length.
[  458.929482][T19261] netlink: 'syz.0.3148': attribute type 4 has an invalid length.
[  458.967738][T19279] xt_hashlimit: overflow, rate too high: 0
[  459.218318][T19058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  459.218374][T19058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.272748][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3155'.
[  459.321850][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'.
[  459.326287][T19270] openvswitch: netlink: Flow key attr not present in new flow.
[  459.657541][T19296] FAULT_INJECTION: forcing a failure.
[  459.657541][T19296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.687803][T19296] CPU: 1 UID: 0 PID: 19296 Comm: syz.3.3159 Not tainted syzkaller #0 PREEMPT(full) 
[  459.687832][T19296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.687844][T19296] Call Trace:
[  459.687852][T19296]  <TASK>
[  459.687860][T19296]  dump_stack_lvl+0xe8/0x150
[  459.687893][T19296]  should_fail_ex+0x410/0x560
[  459.687926][T19296]  _copy_to_user+0x31/0xb0
[  459.687948][T19296]  simple_read_from_buffer+0xe1/0x170
[  459.687977][T19296]  proc_fail_nth_read+0x1bb/0x230
[  459.688002][T19296]  ? common_file_perm+0x20e/0x2b0
[  459.688024][T19296]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.688054][T19296]  ? rw_verify_area+0x24a/0x4c0
[  459.688081][T19296]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  459.688106][T19296]  vfs_read+0x213/0xa80
[  459.688135][T19296]  ? __pfx___mutex_lock+0x10/0x10
[  459.688163][T19296]  ? __pfx_vfs_read+0x10/0x10
[  459.688189][T19296]  ? __fget_files+0x2a/0x420
[  459.688217][T19296]  ? __fget_files+0x3a2/0x420
[  459.688238][T19296]  ? __fget_files+0x2a/0x420
[  459.688270][T19296]  ksys_read+0x150/0x270
[  459.688297][T19296]  ? __pfx_ksys_read+0x10/0x10
[  459.688334][T19296]  do_syscall_64+0x166/0x520
[  459.688359][T19296]  ? trace_irq_disable+0x3b/0x140
[  459.688377][T19296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.688396][T19296]  ? clear_bhb_loop+0x70/0xc0
[  459.688419][T19296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.688437][T19296] RIP: 0033:0x7fec1995e98e
[  459.688456][T19296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  459.688472][T19296] RSP: 002b:00007fec1a925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  459.688493][T19296] RAX: ffffffffffffffda RBX: 00007fec1a9266c0 RCX: 00007fec1995e98e
[  459.688506][T19296] RDX: 000000000000000f RSI: 00007fec1a9260a0 RDI: 0000000000000004
[  459.688518][T19296] RBP: 00007fec1a926090 R08: 0000000000000000 R09: 0000000000000000
[  459.688529][T19296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.688540][T19296] R13: 00007fec19c26038 R14: 00007fec19c25fa0 R15: 00007ffefbe546f8
[  459.688571][T19296]  </TASK>
[  459.952364][T19301] bridge0: port 4(vlan3) entered blocking state
[  459.958951][T19301] bridge0: port 4(vlan3) entered disabled state
[  459.959133][T19301] vlan3: entered allmulticast mode
[  459.959148][T19301] geneve0: entered allmulticast mode
[  459.978193][T19301] vlan3: entered promiscuous mode
[  459.983495][T19301] geneve0: entered promiscuous mode
[  460.080440][ T4931] Bluetooth: hci3: command tx timeout
[  460.556620][T19058] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  460.601700][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  460.604059][T19058] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  460.633692][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  460.634029][T19323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3165'.
[  460.638835][T19058] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  460.683760][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  460.684706][T19058] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  460.727199][T19058] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  461.144612][T19346] __nla_validate_parse: 1 callbacks suppressed
[  461.154430][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'.
[  461.190571][T19058] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.251910][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3170'.
[  461.251977][T19353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.253002][T19058] 8021q: adding VLAN 0 to HW filter on device team0
[  461.260496][T19351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3173'.
[  461.277448][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.277547][ T8539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.307578][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.307698][ T8539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.315560][T19354] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 2, id = 0
[  462.160888][ T4931] Bluetooth: hci3: command tx timeout
[  462.302823][T19386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3178'.
[  462.591342][T19058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.773561][T19407] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3182'.
[  462.782082][T19058] veth0_vlan: entered promiscuous mode
[  462.811020][T19058] veth1_vlan: entered promiscuous mode
[  462.939095][T19412] xt_policy: output policy not valid in PREROUTING and INPUT
[  462.957034][T19058] veth0_macvtap: entered promiscuous mode
[  462.981417][T19058] veth1_macvtap: entered promiscuous mode
[  463.020878][T19058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.032732][T19058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.072005][  T257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.072066][  T257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.072114][  T257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.072148][  T257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.107732][T19411] nbd0: detected capacity change from 0 to 63
[  463.108062][T19410] nbd: nbd0 already in use
[  463.108233][T19416] nbd: must specify an index to disconnect
[  463.130943][ T1987] 
[  463.133300][ T1987] ======================================================
[  463.140318][ T1987] WARNING: possible circular locking dependency detected
[  463.147355][ T1987] syzkaller #0 Not tainted
[  463.151804][ T1987] ------------------------------------------------------
[  463.158807][ T1987] kworker/1:1H/1987 is trying to acquire lock:
[  463.164973][ T1987] ffff888044e42868 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0
[  463.173931][ T1987] 
[  463.173931][ T1987] but task is already holding lock:
[  463.181276][ T1987] ffff888048d70178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  463.189713][ T1987] 
[  463.189713][ T1987] which lock already depends on the new lock.
[  463.189713][ T1987] 
[  463.200118][ T1987] 
[  463.200118][ T1987] the existing dependency chain (in reverse order) is:
[  463.209130][ T1987] 
[  463.209130][ T1987] -> #7 (&cmd->lock){+.+.}-{4:4}:
[  463.216359][ T1987]        __mutex_lock+0x19d/0x1550
[  463.221471][ T1987]        nbd_queue_rq+0xc1/0xff0
[  463.226427][ T1987]        blk_mq_dispatch_rq_list+0x499/0x1990
[  463.232484][ T1987]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  463.239321][ T1987]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  463.245822][ T1987]        blk_mq_run_work_fn+0x16c/0x300
[  463.251367][ T1987]        process_scheduled_works+0xc3d/0x1630
[  463.257430][ T1987]        worker_thread+0xa47/0xfb0
[  463.262531][ T1987]        kthread+0x38b/0x480
[  463.267109][ T1987]        ret_from_fork+0x514/0xb70
[  463.272203][ T1987]        ret_from_fork_asm+0x1a/0x30
[  463.277476][ T1987] 
[  463.277476][ T1987] -> #6 (set->srcu){.+.+}-{0:0}:
[  463.284584][ T1987]        __synchronize_srcu+0xc9/0x2f0
[  463.290032][ T1987]        elevator_switch+0x1e8/0x7b0
[  463.295312][ T1987]        elevator_change+0x2fa/0x480
[  463.300590][ T1987]        elevator_set_default+0x375/0x440
[  463.306304][ T1987]        blk_register_queue+0x3f3/0x4e0
[  463.311839][ T1987]        __add_disk+0x6cb/0xe30
[  463.316674][ T1987]        add_disk_fwnode+0x100/0x3a0
[  463.321942][ T1987]        nbd_dev_add+0x733/0xb60
[  463.326955][ T1987]        nbd_init+0x168/0x1f0
[  463.331623][ T1987]        do_one_initcall+0x250/0x870
[  463.336928][ T1987]        do_initcall_level+0x10a/0x1a0
[  463.342391][ T1987]        do_initcalls+0x59/0xa0
[  463.347270][ T1987]        kernel_init_freeable+0x29d/0x3e0
[  463.352993][ T1987]        kernel_init+0x22/0x1d0
[  463.357841][ T1987]        ret_from_fork+0x514/0xb70
[  463.362940][ T1987]        ret_from_fork_asm+0x1a/0x30
[  463.368231][ T1987] 
[  463.368231][ T1987] -> #5 (&q->elevator_lock){+.+.}-{4:4}:
[  463.376068][ T1987]        __mutex_lock+0x19d/0x1550
[  463.381192][ T1987]        elevator_change+0x1af/0x480
[  463.386490][ T1987]        elevator_set_none+0xb5/0x140
[  463.391854][ T1987]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  463.398193][ T1987]        nbd_start_device+0x189/0xb30
[  463.403560][ T1987]        nbd_genl_connect+0x167d/0x1cd0
[  463.409099][ T1987]        genl_family_rcv_msg_doit+0x233/0x340
[  463.415164][ T1987]        genl_rcv_msg+0x614/0x7a0
[  463.420182][ T1987]        netlink_rcv_skb+0x226/0x4a0
[  463.425455][ T1987]        genl_rcv+0x28/0x40
[  463.429950][ T1987]        netlink_unicast+0x7bd/0x940
[  463.435217][ T1987]        netlink_sendmsg+0x813/0xb40
[  463.440495][ T1987]        sock_sendmsg_nosec+0x13a/0x180
[  463.446035][ T1987]        ____sys_sendmsg+0x54e/0x850
[  463.451308][ T1987]        ___sys_sendmsg+0x2a5/0x360
[  463.456489][ T1987]        __x64_sys_sendmsg+0x1b1/0x290
[  463.461945][ T1987]        do_syscall_64+0x166/0x520
[  463.467070][ T1987]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.473490][ T1987] 
[  463.473490][ T1987] -> #4 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  463.482091][ T1987]        blk_alloc_queue+0x544/0x690
[  463.487376][ T1987]        __blk_mq_alloc_disk+0x194/0x390
[  463.493002][ T1987]        nbd_dev_add+0x494/0xb60
[  463.497939][ T1987]        nbd_init+0x168/0x1f0
[  463.502614][ T1987]        do_one_initcall+0x250/0x870
[  463.507897][ T1987]        do_initcall_level+0x10a/0x1a0
[  463.513358][ T1987]        do_initcalls+0x59/0xa0
[  463.518216][ T1987]        kernel_init_freeable+0x29d/0x3e0
[  463.523947][ T1987]        kernel_init+0x22/0x1d0
[  463.528792][ T1987]        ret_from_fork+0x514/0xb70
[  463.533891][ T1987]        ret_from_fork_asm+0x1a/0x30
[  463.539169][ T1987] 
[  463.539169][ T1987] -> #3 (fs_reclaim){+.+.}-{0:0}:
[  463.546369][ T1987]        fs_reclaim_acquire+0x71/0x100
[  463.551830][ T1987]        kmem_cache_alloc_noprof+0x5f/0x600
[  463.557720][ T1987]        mas_alloc_nodes+0x291/0x350
[  463.562994][ T1987]        mas_preallocate+0x42a/0x840
[  463.568270][ T1987]        vma_link+0x123/0x460
[  463.572934][ T1987]        insert_vm_struct+0x352/0x520
[  463.578300][ T1987]        create_init_stack_vma+0x61c/0xa10
[  463.584097][ T1987]        alloc_bprm+0x50c/0x640
[  463.588942][ T1987]        kernel_execve+0x85/0x9c0
[  463.593982][ T1987]        try_to_run_init_process+0x13/0x60
[  463.599781][ T1987]        kernel_init+0xb2/0x1d0
[  463.604621][ T1987]        ret_from_fork+0x514/0xb70
[  463.609723][ T1987]        ret_from_fork_asm+0x1a/0x30
[  463.615008][ T1987] 
[  463.615008][ T1987] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  463.622553][ T1987]        __might_fault+0xcb/0x130
[  463.627571][ T1987]        _copy_from_user+0x28/0xb0
[  463.632673][ T1987]        ip_mcast_join_leave+0x139/0x260
[  463.638300][ T1987]        do_ip_setsockopt+0x1c48/0x2e30
[  463.643839][ T1987]        ip_setsockopt+0x66/0x110
[  463.648858][ T1987]        do_sock_setsockopt+0x17c/0x1b0
[  463.654387][ T1987]        __x64_sys_setsockopt+0x13d/0x1b0
[  463.660094][ T1987]        do_syscall_64+0x166/0x520
[  463.665223][ T1987]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.671626][ T1987] 
[  463.671626][ T1987] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[  463.679692][ T1987]        lock_sock_nested+0x41/0x100
[  463.684966][ T1987]        inet_shutdown+0x6a/0x390
[  463.689980][ T1987]        nbd_mark_nsock_dead+0x2cb/0x550
[  463.695622][ T1987]        sock_shutdown+0x15e/0x260
[  463.700738][ T1987]        nbd_clear_sock+0x24/0x170
[  463.705848][ T1987]        nbd_config_put+0x477/0x7e0
[  463.711041][ T1987]        nbd_genl_connect+0x19b8/0x1cd0
[  463.716589][ T1987]        genl_family_rcv_msg_doit+0x233/0x340
[  463.722650][ T1987]        genl_rcv_msg+0x614/0x7a0
[  463.727675][ T1987]        netlink_rcv_skb+0x226/0x4a0
[  463.732949][ T1987]        genl_rcv+0x28/0x40
[  463.737440][ T1987]        netlink_unicast+0x7bd/0x940
[  463.742712][ T1987]        netlink_sendmsg+0x813/0xb40
[  463.747985][ T1987]        sock_sendmsg_nosec+0x13a/0x180
[  463.753525][ T1987]        ____sys_sendmsg+0x54e/0x850
[  463.758799][ T1987]        ___sys_sendmsg+0x2a5/0x360
[  463.763987][ T1987]        __x64_sys_sendmsg+0x1b1/0x290
[  463.769431][ T1987]        do_syscall_64+0x166/0x520
[  463.774540][ T1987]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.780943][ T1987] 
[  463.780943][ T1987] -> #0 (&nsock->tx_lock){+.+.}-{4:4}:
[  463.788574][ T1987]        __lock_acquire+0x15ff/0x2e50
[  463.793935][ T1987]        lock_acquire+0x115/0x350
[  463.798947][ T1987]        __mutex_lock+0x19d/0x1550
[  463.804051][ T1987]        nbd_queue_rq+0x373/0xff0
[  463.809067][ T1987]        blk_mq_dispatch_rq_list+0x499/0x1990
[  463.815126][ T1987]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  463.821964][ T1987]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  463.828454][ T1987]        blk_mq_run_work_fn+0x16c/0x300
[  463.833998][ T1987]        process_scheduled_works+0xc3d/0x1630
[  463.840053][ T1987]        worker_thread+0xa47/0xfb0
[  463.845160][ T1987]        kthread+0x38b/0x480
[  463.849743][ T1987]        ret_from_fork+0x514/0xb70
[  463.854841][ T1987]        ret_from_fork_asm+0x1a/0x30
[  463.860122][ T1987] 
[  463.860122][ T1987] other info that might help us debug this:
[  463.860122][ T1987] 
[  463.870335][ T1987] Chain exists of:
[  463.870335][ T1987]   &nsock->tx_lock --> set->srcu --> &cmd->lock
[  463.870335][ T1987] 
[  463.882403][ T1987]  Possible unsafe locking scenario:
[  463.882403][ T1987] 
[  463.889841][ T1987]        CPU0                    CPU1
[  463.895196][ T1987]        ----                    ----
[  463.900549][ T1987]   lock(&cmd->lock);
[  463.904520][ T1987]                                lock(set->srcu);
[  463.910922][ T1987]                                lock(&cmd->lock);
[  463.917415][ T1987]   lock(&nsock->tx_lock);
[  463.921827][ T1987] 
[  463.921827][ T1987]  *** DEADLOCK ***
[  463.921827][ T1987] 
[  463.929956][ T1987] locks held by kworker/1:1H/1987: 4, last CPU#1:
[  463.936353][ T1987]  #0: ffff888020eb3140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  463.947401][ T1987]  #1: ffffc90006c27c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  463.960274][ T1987]  #2: ffff88802268cb98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300
[  463.969662][ T1987]  #3: ffff888048d70178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0
[  463.978530][ T1987] 
[  463.978530][ T1987] stack backtrace:
[  463.984407][ T1987] CPU: 1 UID: 0 PID: 1987 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) 
[  463.993860][ T1987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.003906][ T1987] Workqueue: kblockd blk_mq_run_work_fn
[  464.009466][ T1987] Call Trace:
[  464.012736][ T1987]  <TASK>
[  464.015661][ T1987]  dump_stack_lvl+0xe8/0x150
[  464.020254][ T1987]  print_circular_bug+0x2e2/0x300
[  464.025275][ T1987]  check_noncircular+0x12f/0x150
[  464.030206][ T1987]  __lock_acquire+0x15ff/0x2e50
[  464.035077][ T1987]  ? irqentry_exit+0x218/0x910
[  464.039836][ T1987]  ? __pfx___schedule+0x10/0x10
[  464.044685][ T1987]  ? irqentry_exit+0x218/0x910
[  464.049448][ T1987]  lock_acquire+0x115/0x350
[  464.053946][ T1987]  ? nbd_queue_rq+0x373/0xff0
[  464.058647][ T1987]  __mutex_lock+0x19d/0x1550
[  464.063232][ T1987]  ? nbd_queue_rq+0x373/0xff0
[  464.067905][ T1987]  ? ret_from_fork_asm+0x1a/0x30
[  464.072836][ T1987]  ? unwind_next_frame+0x8f/0x2550
[  464.077940][ T1987]  ? nbd_queue_rq+0x373/0xff0
[  464.082639][ T1987]  ? __pfx___mutex_lock+0x10/0x10
[  464.087681][ T1987]  ? ret_from_fork_asm+0x1a/0x30
[  464.092618][ T1987]  ? stack_trace_save+0xa9/0x100
[  464.097553][ T1987]  ? __pfx_stack_trace_save+0x10/0x10
[  464.102926][ T1987]  nbd_queue_rq+0x373/0xff0
[  464.107431][ T1987]  ? __lock_acquire+0x14b9/0x2e50
[  464.112444][ T1987]  ? __pfx_nbd_queue_rq+0x10/0x10
[  464.117466][ T1987]  blk_mq_dispatch_rq_list+0x499/0x1990
[  464.123038][ T1987]  ? sbitmap_get+0x229/0x390
[  464.127620][ T1987]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  464.133597][ T1987]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  464.139399][ T1987]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  464.145726][ T1987]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  464.152475][ T1987]  ? lock_acquire+0x115/0x350
[  464.157144][ T1987]  ? process_scheduled_works+0x97a/0x1630
[  464.162860][ T1987]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  464.168829][ T1987]  ? blk_mq_run_work_fn+0x144/0x300
[  464.174019][ T1987]  blk_mq_run_work_fn+0x16c/0x300
[  464.179042][ T1987]  ? process_scheduled_works+0x97a/0x1630
[  464.184751][ T1987]  process_scheduled_works+0xc3d/0x1630
[  464.190299][ T1987]  ? __pfx_process_scheduled_works+0x10/0x10
[  464.196273][ T1987]  ? assign_work+0x3cf/0x5d0
[  464.200854][ T1987]  worker_thread+0xa47/0xfb0
[  464.205440][ T1987]  ? __kthread_parkme+0x71/0x1f0
[  464.210396][ T1987]  kthread+0x38b/0x480
[  464.214458][ T1987]  ? __pfx_worker_thread+0x10/0x10
[  464.219557][ T1987]  ? __pfx_kthread+0x10/0x10
[  464.224136][ T1987]  ret_from_fork+0x514/0xb70
[  464.228716][ T1987]  ? __pfx_ret_from_fork+0x10/0x10
[  464.233819][ T1987]  ? __switch_to+0xc89/0x1420
[  464.238495][ T1987]  ? __pfx_kthread+0x10/0x10
[  464.243080][ T1987]  ret_from_fork_asm+0x1a/0x30
[  464.247850][ T1987]  </TASK>
[  464.257883][T19410] netlink: 'syz.0.3184': attribute type 1 has an invalid length.
[  464.291429][T19410] 8021q: adding VLAN 0 to HW filter on device bond1
[  464.305323][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'.
[  464.305355][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3184'.
[  464.330456][ T4931] block nbd0: Receive control failed (result -104)
[  464.337653][T19426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3186'.
[  464.351662][T19058] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  464.373063][ T8994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.373093][ T8994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.392294][T19058] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht'
[  464.426504][T19426] bridge0: port 3(bond0) entered disabled state
[  464.426626][T19426] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.427010][T19426] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.476310][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.482052][T19426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.553420][ T8542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.561416][ T8994] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.561455][ T8994] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.561803][ T8994] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.561835][ T8994] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  464.561844][ T8542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.960160][    C1] Dead loop on virtual device lo (net 39), fix it urgently!
[  465.600589][    C1] bridge0: received packet on vlan0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  466.250622][    C0] Dead loop on virtual device lo (net 39), fix it urgently!