last executing test programs:

2m27.903103529s ago: executing program 4 (id=3335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x8, 0x4)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a00000000004c000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c0001f15f61796c6f616400140000001000010000000000000000000000000a"], 0x94}}, 0x0)

2m27.64360076s ago: executing program 4 (id=3338):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x49, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=@ipv6_getaddr={0x58, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x8, 0x8, 0xff, r4}, [@IFA_FLAGS={0x8, 0x8, 0x85}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_CACHEINFO={0x14, 0x6, {0xc3c7, 0xf, 0x0, 0x9}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x101}, @IFA_FLAGS={0x8, 0x8, 0x144}]}, 0x58}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a93500ecffffff00", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f55070090779674367b5387e212c7fb81e9091ebce89a00", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "00f54dffff00", 0x1, 0x6, 0x0, 0x0, 0x849}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0)

2m27.113360245s ago: executing program 4 (id=3342):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0xc8c1}, 0x10)
mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x60480)
connect$netlink(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1", 0x2}], 0x2}, 0x20008b88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

2m26.630028793s ago: executing program 4 (id=3347):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x4)
ppoll(&(0x7f0000000000)=[{r1, 0x2b2}, {r0, 0x2084}, {r1, 0x100}, {r0, 0x4461}], 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x3]}, 0x8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)

2m26.334909584s ago: executing program 4 (id=3350):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pim6reg1\x00', &(0x7f0000000180)=@ethtool_cmd={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x24, 0x0, 0x0, 0x0, 0x0, 0x40}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xae, &(0x7f0000000240)=ANY=[@ANYBLOB="05b1ff035660aaaaaaaaaabb86dd60120008007848fffe880000000000000000000000000001ff020000000000000000000000000001860090780000000000000000ff010000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42cad13515b37adac15084dbaf736b41e5af180300010000010000000000000000001801fe906d26efe3"], 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x4d1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4040045)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x1d)
close(r5)
sendto$inet(r5, &(0x7f0000000440)="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", 0x1000, 0x20044080, 0x0, 0x0)

2m25.693581198s ago: executing program 4 (id=3354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="0002eeff", 0x4}], 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r4}, 0x38)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

2m10.222057879s ago: executing program 32 (id=3354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="0002eeff", 0x4}], 0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x80, r4}, 0x38)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

12.783387938s ago: executing program 0 (id=4159):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x12, 0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000c000000000002000000008038110000", @ANYRES32, @ANYRES64=0x0], 0x0, 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = socket$kcm(0x2, 0x3, 0x2)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x200}, 0x1c)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @remote, 0x6}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
listen(r6, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
r12 = socket$netlink(0x10, 0x3, 0xa)
writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})

12.170789771s ago: executing program 1 (id=4166):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x70, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58844ca7784641cf2c6d7cfe6cbdf0357065ae44132403b1fd606412c3258e1bafaa4e97d65500797d"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x70}, 0x1, 0x0, 0x0, 0x4400c005}, 0x4000080)
write(r0, &(0x7f00000000c0)="9ff9df0f27a027241a219a524ce4832d7efa90a5d21f6a32a5779d9213fce77065599154e9df53ecfff1f8299d86a7b10f1f4bf28e5ba23e60c8183e411c5949f8911e55475e48cd8036e80231969ba2bf23f60b01e3baec786172be2cd7aad8c1fff5df9686ca691bad9882fdfb00"/122, 0x7a)

11.528667185s ago: executing program 0 (id=4167):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bond_slave_0\x00', 0x600})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

11.496372279s ago: executing program 5 (id=4169):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b0002a990000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49ddb000000c9218f47b3cf8743eb4d1e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860ee5d9ecf6003977b1e4dbb16345f8feb1a7a8e23043b8a465b1ed5bf8bc9133cad722bd34c07c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1a1bc6ebbb01807991b9850d5eb53770a20a26e51408558f7910d0b79271c479d6f68"], 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r3, 0x5)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321014000000000000000100001c"], 0x4a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async)
socket$inet(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b0002a990000119078ac141400ac1414aa00000000009c90780100000000000000f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49ddb000000c9218f47b3cf8743eb4d1e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860ee5d9ecf6003977b1e4dbb16345f8feb1a7a8e23043b8a465b1ed5bf8bc9133cad722bd34c07c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1a1bc6ebbb01807991b9850d5eb53770a20a26e51408558f7910d0b79271c479d6f68"], 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async)
listen(r3, 0x5) (async)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321014000000000000000100001c"], 0x4a) (async)

11.490076198s ago: executing program 1 (id=4170):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000200)={'geneve0\x00', 0x9})
sendmmsg$inet(r1, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="f3aa82759ac798172d9a0b81ce423913d33af2cd35426aa174efaca4cf53f8fcb932c4a14908e2ea9f6c57968e7dc31921e889e6d97b021089c4a5ad4e3e0f734183f5ebd3ae5dff9f5b463d0460061df1fafa468d9618c6e5c8ded39d075b2820f5e9e2517556b1f4d2b30fb490a8a5c251ee232e9475bdccbcb0bb94a5b319ad68bc08dfc75d1ca4fdd5502bec946bf635fcd5cc3c41e2456a46ed63fc987dda67d2a6a94827ab0b93eb3c06f29d7dc20707681d89d74c75445049f8b5c354307a5336d8b17548344043cfda08a00bd4385defa6434dc8735927678a51e10f6c23943c10d4106726ce56091c59d0df9ac5c2e5d97019f9190fe0b015c82733a6052847ec46069f9c6e526b4845237279fd4a5ffc1a8044d2a67233c37daad9b8f8564142c45694ea73ab5f2779faa2820cb6d8ce4d11ddf4df00872f7a46c3bf77645a8646a3f325afd1e91ae758a3fe43620e40", 0xfdef}], 0x1}}], 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="a42249a08d8a54f825cbc27e52c70a51b319ce8765ff0290927b51405bae09084507dd8534aebdd3989dc7e5959ee456544a2cb3d6c0b634433938de56", 0x3d}, {&(0x7f00000000c0)="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", 0xfd}], 0x2}, 0x480e6)

11.488862856s ago: executing program 2 (id=4171):
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

11.487912006s ago: executing program 3 (id=4172):
r0 = socket$inet_sctp(0x2, 0x3, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r1=>0x0, 0x3834, 0x5, 0x63cfdcba, 0x1, 0x4}, &(0x7f0000000040)=0x14)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e22, @multicast2}}, 0x6163, 0x1ff}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000140)={0x100, 0x3, 0x8f, 0x6, 0x6})
ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000180)={0xd292, 0x74cb7f223fce0a9d})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f00000001c0))
r4 = socket$netlink(0x10, 0x3, 0xe)
ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000200))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc011802}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000003c0))
write(r6, &(0x7f0000000400)="9a74e7f5def5f122975619ae3d96aaddd26ffdec79507a55acde66cd1bfefe81c2803e700a67cd2b7222890ede423945c9c16c850b0e4e698f39a1f63681673e398e0ebe09dcecac8e4a86284b40d9d92ebe112b3877b637597ef69200cb7846c52b5f7eec9d3071a7996331f1a36604da7b954182284b0a812b3d1b55856cb93e63ce853574e3027a9df34b44157c8a25c44fe91aa9712ceca76122036451d134a3dcf7ac145c44a1d8b6c4505f6dde6cbfa47ba41b60f87533b54435e976ce8141d26b76984b5b490f7a9f936840da364515db9e31449904daed86175bd4d63ab0c2a511da32e6f1f1d4bc6d98", 0xee)
sendmsg$nl_generic(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x13, 0x4, 0x70bd28, 0x25dfdbfc, {0x17}, [@nested={0x18, 0x67, 0x0, 0x1, [@generic="e98bd10389ff21a78de8d562bca4996b5e1431a5"]}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x125}, @typed={0xa, 0xe5, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80e1}, 0x800)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000640))
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DONE(r7, 0x29, 0xc9, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0xa300, 0x0)
write$ppp(r8, &(0x7f00000006c0)="bd7bafacec565982a927dfd2c4c5091c1082616cccb0fe3cd966fe823f9b19353224775bc2b91a33d452e2d6f35cf0c921fb516a0b6d41396685fc985473ef181e6804b8cf34caf2b774a1337a1cb61677278ef280310f1396ef8382", 0x5c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0)
ioctl$PPPIOCGDEBUG(r9, 0x80047441, &(0x7f0000000780))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'veth0_macvtap\x00', <r10=>0x0})
r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840)=0x10, 0x80000)
bind$tipc(r11, &(0x7f0000000880)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x3}}, 0x10)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000004)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f00000009c0)={<r12=>0x0, 0x1, 0x2})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000dc0)={0x4, 0x1, {0x3, @usage=0x1000, 0x0, 0x6, 0x8, 0x5, 0x6, 0x8, 0xc, @struct={0xf3, 0x9}, 0x2, 0x0, [0x3, 0x0, 0x0, 0x2, 0xa, 0x7fff]}, {0x7fffffff, @struct={0x2, 0x5}, 0x0, 0x4, 0x80000000, 0x47, 0x388, 0x0, 0x0, @usage=0x4aa, 0x401, 0x8, [0x4422, 0x9, 0x7f, 0x0, 0x80, 0xe0e]}, {0x6, @usage=0x582, r12, 0x7, 0x1, 0xc, 0x2b0000, 0x26a, 0x1a, @usage=0x100000001, 0x5, 0x1ff, [0x6, 0x8, 0x81, 0x3, 0xd, 0x7]}, {0xfffffffffffffff7, 0x6, 0x7}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0xfffff643, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', r10, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)

11.487506966s ago: executing program 1 (id=4173):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2000005d, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x200000, 0x10, &(0x7f00000003c0), 0x10}, 0x90)

11.413703416s ago: executing program 5 (id=4174):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0xfffffd32, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "5e06eb255bed1b67e2b8238b25dd3f1e083d052055175b1dfff4d8ac611c6a7bc04c3496e391ca29127bc89f15abc490c188a8e330087aef5d1132bac95e1d78783b6a8413cd42d71923787b5866f7e498e0e8832abc102c253951e97d5bee8bf0d1f50c992282d6f7dc9d2eb07d2ada99d68c68cdf19ad70c7ce67c0e2745157f"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x9f5}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x94) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0)

11.320035359s ago: executing program 1 (id=4175):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x22040028}, 0x24008054)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0)

11.221586742s ago: executing program 2 (id=4176):
r0 = socket$inet(0xa, 0x801, 0x0)
listen(r0, 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000000)="fbd4c48aa8edbdb7ce8b4c92142e53db7c21ae0d5d4ef4f0191cb95b8657ac45f11d1005468c02c5d53b63a521b918a0139fed2eb35184112eaee474fd12af47d976adb886ea437aba67464bb60ff3a7010392726e3a", 0x56)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@private2, @in=@initdev}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000001980)=0xe8)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x4, 0x4, 0x420, 0xffffffff, 0x190, 0x190, 0x190, 0xfeffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0x1, 0x5}}, @common=@srh1={{0x90}, {0xff, 0x9, 0x1, 0x48, 0x6, @loopback, @local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0x835a71402aa4f11a], [0xff, 0xffffff00, 0x3375609c8e6be76e, 0xff000000], 0xca0, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x9}}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'vxcan1\x00', {}, {0xff}, 0x2e, 0x28, 0x5, 0x52}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000019c0))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000140)="24000000010006", 0x7)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00), &(0x7f0000001a40)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r4, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/152, 0x98}, {&(0x7f00000005c0)=""/4082, 0xff2}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x100, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r5, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a")
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002ec0))
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8)
getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)

11.061559811s ago: executing program 5 (id=4177):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380)="b00495d46b5e6296afdb12de1437ff0d03533413c0e78abf2184406cdc8e18c1812c95101542eaa0917ab47012110640c781c0f8a0262b19d613b7c5f53a84fc2f2961322c7b425731afa7b4133cd18dc58cc9863a4f6794e49dbac929247549c279f6194a8163def617a9dae7ecea", 0x6f)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x5, 0x480, 0x10001, {}, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "d09a62af74fbbea1"}}, 0x48}}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r4)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002dbd7000fedbdf5efe0000520000000000000000000000000000002dffb1b687dd3200000000000000000000001b0000000000000000000d00"/68], 0x68}, 0x1, 0x0, 0x0, 0x8804}, 0x8000)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)
syz_emit_ethernet(0x6a2, &(0x7f0000001080)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x66c, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x81, 0x48, "42779886f597b2acc44d16bf662f91890fedcc5a4334147b4a8f90ae895e87564aab8cce766a934d7f06c3a4ad9c153db40f6c5c75d4c92dac0e90694df20debfef0f30a835a4a49"}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1ff}]}, @hopopts={0x11, 0xd, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x48, {0x3, 0x10, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0, 0x9d, 0x0, 0x7fff, 0x81, 0x3]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x75, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x7, 0x34e, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x10005, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x7, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0)

11.008529005s ago: executing program 3 (id=4178):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'bond0\x00', <r1=>0x0})
r2 = gettid()
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r2)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xde}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x14, 0x1f, 0x8, 0x70bd2b, 0x25dfdbfc, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004042)
getpeername$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x4048800)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=r2)

10.971018592s ago: executing program 1 (id=4179):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/316], &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xbf}, 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001b00000000000000000007020000000000008c3e30457e6a843b5a068a378c0bd5fa5276661736d969c13bc1f99b2a0fbee141"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x47, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)={@map=r1, r0, 0x2c}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x3, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x3}})
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000440)="0b0000000980ffff", 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0)
close(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000090294523c60000000f000004100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x15, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000200)=r9)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f00000004c0)='G', 0x1, 0x40, &(0x7f00000005c0)={0x11, 0x18, r12, 0x1, 0x6}, 0x14)
r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910900000007b0ae8ff0000000095e1ffffff000000bb1f35ae65"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r13, r4}, 0xc)

7.210092393s ago: executing program 5 (id=4180):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00"/12, @ANYRES32, @ANYBLOB="cc5a7cc8d16e856b26d7ea7f8c584c83cba1db64a4aa9d7444b80042563204c47fee635c1ebe99376fe3e2d96f162dc417881016a231394075c59278d9ecf1bb347d6f18a903baec60d9b370db17cef5198db9d72ece008c5f4cbcd94ac4e806d01ddb9f19d6eda48610341549eacdea5949d603afcc69809383904d9b3d647542565e7bb718127daf0346785d7aff040e39b6d1a0e631191bee7923f260f9131bb29cabc2cb777faaaa34c15813abc10ce09e39b98417c0fc6870db93a75f030faa13", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000008000000000085000000224000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90)

7.209357681s ago: executing program 0 (id=4181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0)

6.928546861s ago: executing program 2 (id=4182):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x36, 0x4)

6.708305114s ago: executing program 0 (id=4183):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10)
close(0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3002}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000480)=[{0x7, 0x1, 0x9, 0x1ff}, {0x0, 0xc, 0xa, 0x3}]}, 0x56)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0x0, 0xb8, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xffffff00, 'syzkaller1\x00', 'veth0_to_batadv\x00', {}, {}, 0x84, 0x7, 0x3}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x1, 0x2, 0x0, 0x4], 0x6}, {0xffffffffffffffff, [0x0, 0x4, 0x2, 0x1, 0x14a408ecfbddbad, 0x2], 0x6}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x4, 0x4], 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x130, 0x130, 0x130, 0x1f0, 0x130, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x8, 0xff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback, 0x200}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)

6.368022715s ago: executing program 0 (id=4184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090)
socket$netlink(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x80000)

6.367417215s ago: executing program 3 (id=4185):
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
shutdown(r2, 0x1)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7be2c5fccbaeef90b7dfb5d9c6cff66ebb619ea2108832c1f953ba488f2df0f2c372be80004b4c03aec84b6123adb63e2810813dfc7d563242271281b4c78a9682e8b2280b479072e5221298317206e2a2f91fb2c429f8a70edf9a99152bfa8af3bf50b98c57f089a98e3665ed35cc8ad289329a7f2379bab64e2584755edaf39f15f7aec92a22c267000000000000b2c0de82cdf765f8115545ca3154aa9aafb13eca08b72e1fcd9f172bddda423a81e4a3fea0a91459c775d99b8595c312c215cab773c4c4925f40a12644c262", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x24}}, 0xc)

6.027931954s ago: executing program 5 (id=4186):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r2=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"48037a408217fca91d8cb496f50fa9cd", r1, r2, {0x6000000000000, 0x5}, {0xdb3d}, 0x5, [0x80000001, 0x1, 0xe07f, 0x5ec4, 0x5, 0x4, 0x80, 0x8, 0xae0c, 0xc2, 0x0, 0x76e9, 0x1, 0x7, 0x8f, 0x3]})
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x1, 0x70, 0x8, 0x8, 0x5, 0x6})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0xa01, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x2400c885)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)
sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r6, 0x600, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4044055)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f0000000840)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x8000, 0x8})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000880)={<r8=>r3, 0x8000, 0x100000001, 0x8})
write$cgroup_int(r8, &(0x7f00000008c0)=0x1, 0x12)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3)
sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb0, r9, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x60, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x48, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x27, 0x8, {0x10001, 0x1, "23d5f2289797d2b06298c33200dbf6df09fd2f1c03ed3f2eccb8e7"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7f}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2400}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x24, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xdb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080)
ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000000ac0)={{r3}, "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"})
sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60080}, 0x10)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000001bc0)=0x6)
r11 = openat$cgroup_procs(r8, &(0x7f0000001c00)='cgroup.procs\x00', 0x2, 0x0)
ioctl$XFS_IOC_DIOINFO(r11, 0x800c581e, &(0x7f0000001c40))
accept4$inet6(r8, &(0x7f0000001c80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001cc0)=0x1c, 0x800)
setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000001d80)={@vsock, {&(0x7f0000001d00)=""/52, 0x34}, &(0x7f0000001d40), 0x24}, 0xa0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x38, 0x1410, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$nl_route(r8, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)=@newlink={0xa0, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x429}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x61c63b94}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7f}, @IFLA_TXQLEN={0x8, 0xd, 0xea7a}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "51d7a33f764df5987ada0f2d7c0808bf61b07c2faa7638916e"}, @IFLA_MAP={0x24, 0xe, {0x5, 0xffffffffffffff9a, 0x0, 0x7f, 0x3, 0x81}}, @IFLA_IFALIASn={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4003}, 0x4000064)

5.724966245s ago: executing program 2 (id=4187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{<r4=>r3, &(0x7f00000001c0)='\xfa&\x00', 0x400000, &(0x7f0000000200)={@_ha_fsid={[0xffff297b, 0xf896]}, {0x7, 0x7, 0x5659, 0x6}}, 0xf2d, &(0x7f0000000240), &(0x7f00000002c0)=0x3}, {[0x7, 0x0, 0x802b, 0x1]}, 0x7, 0x65, &(0x7f0000000400)=""/101})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x51d, 0xa}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}}, 0x91)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000090)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})

1.184277612s ago: executing program 1 (id=4188):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) (async, rerun: 32)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async, rerun: 32)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)
recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x22704ec80684880b}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) (async, rerun: 32)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async, rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000e0000000100000008000100", @ANYRES32=r5, @ANYBLOB="08000200010000001400020000e9"], 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) (async)
r8 = accept$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000014c0)=0x14)
getsockname$packet(r8, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'})

1.109461979s ago: executing program 3 (id=4189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r2=>0x0})
r3 = gettid()
syz_open_procfs$namespace(r3, &(0x7f00000006c0)='ns/time_for_children\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xaf, "dbc2c39d4e65faff89214618fd8a50d0079cfd3e9a44d08c7f4ceeed0ce28eedfbd77555b937b8ae3b45507c1484e1000e39bfd828ef3fc5755f5ab867b6d3e29fad6ecfda9625352b4229918cc50980845031de0c55750489ec428f31414e092ae55fbade23346206973602fd086e3c0a38d28bb913e120ef8267b966197f56decdd911a9206b7a96d489aec14c27adb2a8ab383a9c3249fd9b2994bc281d4c71680099b09591959627f232ecb471"}, &(0x7f0000000240)=0xb7)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlinkprop={0x3c, 0x6c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x14414, 0x40208}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_WEIGHT={0x8, 0xf, 0xe5d5}, @IFLA_IFALIASn={0x4}, @IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x3c}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
socket$can_raw(0x1d, 0x3, 0x1)

1.039431454s ago: executing program 0 (id=4190):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1411, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080)
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2a, 0x35dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0xc00)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000001500010000000000000000000f00000008000100010000000800030000000000"], 0x24}}, 0x0)
close(r7)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x26, 0x5, @vifc_lcl_addr=@loopback, @empty}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r10, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xfffffffc}, [@migrate={0x50, 0x11, [{@in=@empty, @in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}}, 0x0)

800.969497ms ago: executing program 2 (id=4191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="001178584c"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94)

792.097896ms ago: executing program 5 (id=4192):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r2 = socket$kcm(0x2, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x400000, 0x200}, 0x48)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={<r8=>0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r8, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0xc8, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r11 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r12=>0x0})
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000006c0), &(0x7f0000000740)=0x80)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x32)

650.305458ms ago: executing program 3 (id=4193):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) (async)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000340), 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async, rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (rerun: 32)

261.559337ms ago: executing program 2 (id=4194):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) (async)
sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0xfdef}], 0x1}}], 0x1, 0x0) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010100}, 0x10)

0s ago: executing program 3 (id=4195):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x2000c004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r7, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@dev, @private, <r10=>0x0}, &(0x7f0000000180)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', <r12=>0x0, 0x2f, 0xfd, 0x1, 0xfffff95d, 0x5f, @mcast2, @private2, 0x700, 0x80, 0x10000, 0x4}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r15=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x94)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x270, r16, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc25, 0x9, 0x80, 0x3, 0x28, 0x5, 0xf168]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x0, 0x5, 0x1, 0x1, 0xc, 0x6c, 0x6c, 0x5, 0xc, 0x2, 0x4, 0x4, 0xb, 0xb, 0x9, 0xc, 0xc, 0x18]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x69, 0x18, 0x48, 0x18, 0x16, 0x12, 0x4, 0x9, 0x6c, 0x18, 0x12, 0x16, 0x3, 0x24, 0x72, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x60, 0x2, 0xb, 0x24, 0x1, 0x16, 0x30, 0x6c, 0x15, 0x60, 0x3, 0x60, 0x16, 0x95a614953d6ae29b, 0x4, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x4, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0xa}, {0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x7, 0x5}, {0x5}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x4}, {}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x4}, {0x6, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x6}, {}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x9, 0x6ac5f1496ad783f4, 0x1f, 0x9, 0x24, 0x9, 0x3, 0x6c, 0x30, 0x2, 0x24, 0x16, 0x60, 0x16]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x2}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x4}, {0x6}, {0x1, 0x3}, {0x2, 0x4}, {}, {}, {0x3, 0x8}, {0x5, 0x1}, {0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x8}, {0x4}, {}, {0x0, 0x6}, {0x7, 0x3}, {0x0, 0x2}, {0x5, 0x6}, {}, {0x4, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x6, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x7, 0x4}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x13c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x6}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x3, 0x1b, 0x6, 0x60, 0x1b, 0x36, 0x3, 0x9, 0xb, 0x24, 0x2, 0x12, 0x18, 0x1, 0xb, 0x12, 0x24, 0x9, 0x6, 0x72, 0x3, 0x0, 0x0, 0x12]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x4, 0x5}, {0x2, 0x7}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x4}, {0x1}, {0x6, 0xa}, {0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x1000, 0x8000, 0x5, 0x3ff, 0x80, 0x200]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x3, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x1}, {0x7, 0x8}, {0x7, 0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x3, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x6, 0x8}, {}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x8, 0x0, 0x7, 0x3, 0x9, 0x45d4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x1b, 0x18, 0x5, 0x5, 0x30, 0x18, 0x6, 0x36, 0x2, 0x4, 0x24, 0x2, 0x24, 0x36, 0x24, 0x5, 0x2, 0x60, 0x30, 0x6, 0x16, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0xd, 0x5, 0x7, 0x8, 0x1, 0x1, 0x20]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc5, 0x3, 0x81, 0x7, 0x4, 0x4, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x2, 0x18]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)

kernel console output (not intermixed with test programs):

VLAN 0 to HW filter on device eth1
[  369.676160][T17290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.702612][ T5620] Bluetooth: hci5: command tx timeout
[  369.705183][T17290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.897052][T17487] netlink: 'syz.2.2958': attribute type 11 has an invalid length.
[  370.052577][T17290] team0: Port device team_slave_0 added
[  370.059703][T17290] team0: Port device team_slave_1 added
[  370.319072][T17290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.319090][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.319113][T17290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.686877][ T5620] Bluetooth: hci2: unexpected event for opcode 0x1003
[  370.687414][ T5620] Bluetooth: hci2: unexpected event for opcode 0x2060
[  370.763359][T17290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.763379][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.763407][T17290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.978956][   T39] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.207790][T17290] hsr_slave_0: entered promiscuous mode
[  371.208976][T17290] hsr_slave_1: entered promiscuous mode
[  371.211313][T17290] debugfs: 'hsr0' already exists in 'hsr'
[  371.211335][T17290] Cannot create hsr debugfs directory
[  371.211731][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'.
[  371.211977][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'.
[  371.298120][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'.
[  371.341622][T17550] syzkaller1: entered promiscuous mode
[  371.341649][T17550] syzkaller1: entered allmulticast mode
[  371.537801][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  371.776668][ T5620] Bluetooth: hci5: command tx timeout
[  371.984039][T17576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  372.307797][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.307861][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.333662][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.333687][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.462422][   T59] veth1_macvtap: left promiscuous mode
[  372.462651][   T59] veth0_macvtap: left promiscuous mode
[  372.462842][   T59] veth1_vlan: left promiscuous mode
[  372.462913][   T59] veth0_vlan: left promiscuous mode
[  373.242211][   T59] team0 (unregistering): Port device team_slave_1 removed
[  373.385220][   T59] smc: removing net device team0 with user defined pnetid SYZ2
[  373.420788][T17589] syz_tun: left allmulticast mode
[  373.420908][T17589] pimreg: left allmulticast mode
[  373.556991][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  373.788249][T17290] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.241460][T17290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.350919][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2990'.
[  374.423642][   T59] IPVS: stop unused estimator thread 0...
[  374.635052][T17290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.841754][T17290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.875282][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'.
[  374.875319][T17681] netlink: 'syz.4.2995': attribute type 10 has an invalid length.
[  374.875338][T17681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2995'.
[  374.928230][T17681] geneve2: entered promiscuous mode
[  374.928257][T17681] geneve2: entered allmulticast mode
[  375.360965][T17290] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  375.387531][T17290] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.389967][T17290] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  375.423373][T17290] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.436323][T17701] netlink: 'syz.4.2999': attribute type 16 has an invalid length.
[  375.436345][T17701] netlink: 'syz.4.2999': attribute type 17 has an invalid length.
[  375.461831][T17697] tipc: Resetting bearer <eth:syz_tun>
[  375.480870][T17697] tipc: Resetting bearer <eth:syz_tun>
[  375.527756][T17697] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.679788][T17714] netlink: 'syz.0.3003': attribute type 1 has an invalid length.
[  375.679814][T17714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3003'.
[  375.703909][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3001'.
[  375.709921][T17697] tipc: Resetting bearer <eth:syzkaller0>
[  375.710294][T17697] tipc: Resetting bearer <eth:syzkaller0>
[  375.750623][T17290] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  375.763423][T17290] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.764374][T17290] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  375.789312][T17290] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.840649][T17701] tipc: Resetting bearer <eth:syz_tun>
[  375.842072][T17719] netlink: 'syz.1.3002': attribute type 21 has an invalid length.
[  375.842097][T17719] IPv6: NLM_F_CREATE should be specified when creating new route
[  375.898482][T17701] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.898629][T17701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.962204][T17701] veth1_macvtap: entered promiscuous mode
[  375.982004][T17701] netdevsim netdevsim4 
: left promiscuous mode
[  376.009633][T17701] 8021q: adding VLAN 0 to HW filter on device bond1
[  376.032618][T17701] 8021q: adding VLAN 0 to HW filter on device bond2
[  376.060195][T17701] veth0_to_team: entered promiscuous mode
[  376.065065][T11970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  376.071846][T17701] 8021q: adding VLAN 0 to HW filter on device batadv2
[  376.085543][T17701] bridge0: port 3(batadv2) entered blocking state
[  376.085766][T17701] bridge0: port 3(batadv2) entered forwarding state
[  376.112184][T17701] bond5: left promiscuous mode
[  376.124534][T17701] veth7: left promiscuous mode
[  376.125469][T17701] ip6gre2: left allmulticast mode
[  376.157483][T17701] gtp0: left promiscuous mode
[  376.157505][T17701] gtp0: left allmulticast mode
[  376.158439][T17701] vlan2: left promiscuous mode
[  376.158458][T17701] bridge0: left promiscuous mode
[  376.158699][T17701] vlan2: left allmulticast mode
[  376.158715][T17701] bridge0: left allmulticast mode
[  376.221321][T17701] geneve2: left promiscuous mode
[  376.221347][T17701] geneve2: left allmulticast mode
[  376.313991][T11970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  376.373379][T17718] veth5: entered allmulticast mode
[  376.391851][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.391981][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.461575][ T5724] wg1 speed is unknown, defaulting to 1000
[  376.461690][T17735] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.481703][ T5724] syz2: Port: 1 Link ACTIVE
[  376.510234][ T5724] wg1 speed is unknown, defaulting to 1000
[  376.522656][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3004'.
[  376.536832][T11971] openvswitch: cpu_id mismatch with handler threads
[  376.573852][T17742] ip_tables: iptables: counters copy to user failed while replacing table
[  376.843345][   T59] openvswitch: cpu_id mismatch with handler threads
[  376.930241][T17290] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.988070][T11971] openvswitch: cpu_id mismatch with handler threads
[  377.015367][T17290] 8021q: adding VLAN 0 to HW filter on device team0
[  377.146678][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.146792][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.160336][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.160450][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.283613][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3013'.
[  377.599741][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3015'.
[  377.616464][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'.
[  377.617138][T17792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  377.619961][T17782] ip_tables: iptables: counters copy to user failed while replacing table
[  377.682948][T17792] tipc: Enabled bearer <udp:syz2>, priority 10
[  377.683755][T17782] syzkaller1: entered promiscuous mode
[  377.683775][T17782] syzkaller1: entered allmulticast mode
[  377.691780][T17792] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  377.886289][T17800] bridge0: port 1(veth0) entered blocking state
[  377.886497][T17800] bridge0: port 1(veth0) entered disabled state
[  377.886674][T17800] veth0: entered allmulticast mode
[  377.889534][T17800] veth0: entered promiscuous mode
[  377.918181][T17800] bridge0: port 1(veth0) entered blocking state
[  377.918396][T17800] bridge0: port 1(veth0) entered forwarding state
[  377.970695][T12186] openvswitch: cpu_id mismatch with handler threads
[  377.977238][T12186] openvswitch: cpu_id mismatch with handler threads
[  378.001549][T17805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3020'.
[  378.572848][T14984] openvswitch: cpu_id mismatch with handler threads
[  378.657620][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  378.700655][T17290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.889763][T17842] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  378.906712][T17290] veth0_vlan: entered promiscuous mode
[  378.958862][T17290] veth1_vlan: entered promiscuous mode
[  379.088763][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3029'.
[  379.106910][T17853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3030'.
[  379.106950][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  379.149492][T17290] veth0_macvtap: entered promiscuous mode
[  379.167357][T17290] veth1_macvtap: entered promiscuous mode
[  379.191317][T17290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.217776][T17290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.266091][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'.
[  379.314819][T12186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.314873][T12186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.314915][T12186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.314955][T12186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.727061][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.727086][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.969957][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.969982][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.037202][ T3377] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.037284][ T3377] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.074276][   T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.075546][T17888] TC_ACT_REPEAT abuse ?
[  380.079222][T17888] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.3036'.
[  380.527841][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.531508][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.536551][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.554835][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.557047][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.064037][T17928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.151657][T17934] syzkaller0: entered promiscuous mode
[  381.151685][T17934] syzkaller0: entered allmulticast mode
[  381.183415][T12186] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.183464][T12186] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.183502][T12186] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.183538][T12186] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  381.219825][    C0] batman_adv: batadv2: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  381.296905][ T5618] tipc: Resetting bearer <eth:syz_tun>
[  381.367172][ T5618] tipc: Disabling bearer <eth:syz_tun>
[  381.401791][T17939] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  381.453725][T17939] bond10: entered promiscuous mode
[  381.454193][T17939] 8021q: adding VLAN 0 to HW filter on device bond10
[  381.521402][T17939] 8021q: adding VLAN 0 to HW filter on device bond10
[  381.525334][T17939] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  381.525402][T17939] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  381.559964][T17939] bond10: (slave ip6gre2): making interface the new active one
[  381.559990][T17939] ip6gre2: entered promiscuous mode
[  381.561604][T17939] bond10: (slave ip6gre2): Enslaving as an active interface with an up link
[  381.708010][T17951] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  381.822592][T17961] __nla_validate_parse: 4 callbacks suppressed
[  381.822625][T17961] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3048'.
[  381.851139][ T1265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.851175][ T1265] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.877039][T17964] netlink: 'syz.3.3049': attribute type 24 has an invalid length.
[  381.932444][    C1] openvswitch: cpu_id mismatch with handler threads
[  382.020565][T17906] wg1 speed is unknown, defaulting to 1000
[  382.118259][ T1265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.118299][ T1265] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.177328][T17975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3050'.
[  382.266271][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.266297][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.310158][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3053'.
[  382.441151][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3055'.
[  382.518470][ T1265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.518510][ T1265] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.568042][T17988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3057'.
[  382.653005][ T5620] Bluetooth: hci4: command tx timeout
[  382.660074][T17991] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  382.710057][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3059'.
[  382.711235][T17993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3059'.
[  382.765725][ T1265] netdevsim netdevsim4 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.765762][ T1265] netdevsim netdevsim4 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.890671][T18000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.975847][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'.
[  383.102859][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'.
[  383.756246][T18044] netlink: 'syz.3.3070': attribute type 7 has an invalid length.
[  383.756271][T18044] netlink: 'syz.3.3070': attribute type 8 has an invalid length.
[  384.283729][T18034] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  384.732449][ T5620] Bluetooth: hci4: command tx timeout
[  385.982447][T18016] team0 (unregistering): Port device team_slave_0 removed
[  386.011805][T18016] team0 (unregistering): Port device team_slave_1 removed
[  386.157656][   T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.408476][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  386.427456][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.714533][T12183] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  386.715513][ T1107] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.756452][ T1265] batadv2: left allmulticast mode
[  386.756539][ T1265] batadv2: left promiscuous mode
[  386.756739][ T1265] bridge0: port 3(batadv2) entered disabled state
[  386.794699][ T1265] bridge_slave_1: left allmulticast mode
[  386.801269][ T1265] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.816022][ T5620] Bluetooth: hci4: command tx timeout
[  386.846773][ T1265] bridge_slave_0: left allmulticast mode
[  386.846803][ T1265] bridge_slave_0: left promiscuous mode
[  386.847080][ T1265] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.916274][T18067] netlink: 'syz.2.3074': attribute type 1 has an invalid length.
[  386.947698][T18072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.991787][ T1265] tipc: Resetting bearer <eth:syzkaller0>
[  387.180922][T18080] ip_tables: iptables: counters copy to user failed while replacing table
[  387.661142][ T1265] bond6 (unregistering): (slave gretap1): Releasing backup interface
[  387.728626][ T1265] tipc: Disabling bearer <eth:syzkaller0>
[  387.805250][ T1265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.808666][ T1265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.810346][ T1265] bond0 (unregistering): Released all slaves
[  387.834589][ T1265] bond1 (unregistering): Released all slaves
[  387.857793][ T1265] bond2 (unregistering): Released all slaves
[  387.878620][ T1265] bond3 (unregistering): (slave batadv1): Releasing active interface
[  387.880402][ T1265] bond3 (unregistering): Released all slaves
[  387.906622][ T1265] bond4 (unregistering): Released all slaves
[  387.923963][ T1265] bond5 (unregistering): Released all slaves
[  387.946096][ T1265] bond6 (unregistering): (slave bond7): Releasing backup interface
[  387.946790][ T1265] bond6 (unregistering): Released all slaves
[  387.977512][ T1265] bond7 (unregistering): Released all slaves
[  387.994792][ T1265] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  387.996530][ T1265] bond8 (unregistering): Released all slaves
[  388.022085][ T1265] bond9 (unregistering): Released all slaves
[  388.039480][ T1265] bond10 (unregistering): Released all slaves
[  388.058314][T18067] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  388.109184][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  388.159670][T14984] wg1 speed is unknown, defaulting to 1000
[  388.159697][T14984] syz2: Port: 1 Link DOWN
[  388.295502][T18098] nbd: must specify at least one socket
[  388.297785][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'.
[  388.366051][T14984] wg1 speed is unknown, defaulting to 1000
[  388.619393][ T1265] : left promiscuous mode
[  388.691180][T18110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'.
[  388.773093][T18116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'.
[  388.773311][ T1265] tipc: Disabling bearer <udp:syz0>
[  388.778115][ T1265] tipc: Left network mode
[  388.845026][T17906] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.846322][T17906] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.846499][T17906] bridge_slave_0: entered allmulticast mode
[  388.851094][T17906] bridge_slave_0: entered promiscuous mode
[  388.906629][ T5620] Bluetooth: hci4: command tx timeout
[  388.941224][T17906] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.942097][T17906] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.945134][T17906] bridge_slave_1: entered allmulticast mode
[  388.950420][T18123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'.
[  388.976837][T17906] bridge_slave_1: entered promiscuous mode
[  389.056639][ T5620] block nbd1: Receive control failed (result -32)
[  389.122004][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.240368][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.303784][T18130] bridge0: port 1(vlan6) entered blocking state
[  389.305524][T18130] bridge0: port 1(vlan6) entered disabled state
[  389.305684][T18130] vlan6: entered allmulticast mode
[  389.305701][T18130] geneve0: entered allmulticast mode
[  389.345903][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3084'.
[  389.400116][T17906] team0: Port device team_slave_0 added
[  389.409661][T17906] team0: Port device team_slave_1 added
[  389.537790][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.537808][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.537832][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.605030][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.605049][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.605079][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.895713][T17906] hsr_slave_0: entered promiscuous mode
[  389.898175][T17906] hsr_slave_1: entered promiscuous mode
[  389.900424][T17906] debugfs: 'hsr0' already exists in 'hsr'
[  389.900447][T17906] Cannot create hsr debugfs directory
[  390.258888][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  390.336187][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'.
[  390.348139][T18169] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  390.461042][T18170] bond12: entered promiscuous mode
[  390.461080][T18170] bond12: entered allmulticast mode
[  390.475241][T18170] 8021q: adding VLAN 0 to HW filter on device bond12
[  390.478193][T18172] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3096'.
[  390.478214][T18172] tipc: Invalid UDP bearer configuration
[  390.478256][T18172] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  390.762030][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3101'.
[  390.962924][T18187] netlink: Failed to add %pB     helper -22
[  390.962984][T18187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.259808][T18196] bond1: option all_slaves_active: invalid value (179)
[  391.277513][T18196] bond1 (unregistering): Released all slaves
[  391.351749][ T1265] hsr_slave_0: left promiscuous mode
[  391.378082][ T1265] hsr_slave_1: left promiscuous mode
[  391.379197][ T1265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.379221][ T1265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.435097][ T1265] veth0_to_team: left promiscuous mode
[  391.435226][ T1265] veth1_macvtap: left promiscuous mode
[  391.435257][ T1265] veth0_macvtap: left promiscuous mode
[  391.435471][ T1265] veth1_vlan: left promiscuous mode
[  391.435544][ T1265] veth0_vlan: left promiscuous mode
[  392.260846][T18089] smc: removing ib device syz2
[  392.344805][T18089] smbdirect: ib_dev[syz2] removed
[  392.610464][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  392.817532][T17906] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.979512][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3107'.
[  393.081072][T18249] block nbd0: reconnected socket
[  393.081498][ T5620] block nbd0: Receive control failed (result -107)
[  393.395551][T17906] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.450335][T18266] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3113'.
[  393.718284][T17906] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.132125][T17906] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.352001][T18307] netlink: 'syz.2.3123': attribute type 1 has an invalid length.
[  394.556719][T18323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'.
[  394.573502][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'.
[  394.681520][T18307] 8021q: adding VLAN 0 to HW filter on device bond11
[  394.698818][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'.
[  395.070278][T18329] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  395.443211][T18344] vcan0: tx address claim with dlc 0
[  395.737645][T18356] Bluetooth: hci0: unsupported parameter 5134
[  395.737672][T18356] Bluetooth: hci0: unsupported parameter 8192
[  395.737695][T18356] Bluetooth: hci0: unsupported parameter 5134
[  395.737709][T18356] Bluetooth: hci0: unsupported parameter 8192
[  396.090379][T17906] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  396.113418][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  396.117965][T17906] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  396.152479][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.154631][T17906] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  396.178543][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.185918][T17906] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  396.207374][T17906] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.347535][T17906] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.351292][ T1265] IPVS: stop unused estimator thread 0...
[  396.382093][T17906] 8021q: adding VLAN 0 to HW filter on device team0
[  396.397657][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.397772][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.445654][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.445769][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.798478][T18399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3141'.
[  396.911882][T18403] x_tables: unsorted underflow at hook 4
[  396.997134][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3143'.
[  397.186945][T18421] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3148'.
[  397.451065][T18430] netlink: 'syz.3.3150': attribute type 1 has an invalid length.
[  397.512876][T18430] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.583315][T18438] bond1: (slave veth3): Enslaving as an active interface with a down link
[  398.032952][T18457] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3154'.
[  398.133659][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.312127][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3158'.
[  398.827167][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3162'.
[  398.827199][T18495] block nbd2: Unsupported socket: should be TCP or UNIX.
[  398.933081][T18498] netlink: 'syz.2.3165': attribute type 1 has an invalid length.
[  399.007272][T18498] bond13: entered promiscuous mode
[  399.007894][T18498] 8021q: adding VLAN 0 to HW filter on device bond13
[  399.261402][T17906] veth0_vlan: entered promiscuous mode
[  399.305607][T17906] veth1_vlan: entered promiscuous mode
[  399.358005][T17906] veth0_macvtap: entered promiscuous mode
[  399.390796][T17906] veth1_macvtap: entered promiscuous mode
[  399.424253][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.429027][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.515136][T18089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.515333][T18089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.515374][T18089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.515410][T18089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.668710][ T3377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.668734][ T3377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.735440][T12182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.735464][T12182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  399.862334][T18540] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  400.437723][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  400.451437][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  400.460946][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  400.485599][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  400.497908][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  400.759750][T18579] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.982012][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  401.321847][T18594] netlink: 'syz.3.3181': attribute type 10 has an invalid length.
[  401.380203][T18594] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  401.642069][T18618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.919328][T18632] netlink: 'syz.2.3193': attribute type 1 has an invalid length.
[  402.168618][T18643] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  402.336551][  T138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  402.573688][ T5632] Bluetooth: hci1: command tx timeout
[  402.646872][T18672] netlink: zone id is out of range
[  402.646890][T18672] netlink: zone id is out of range
[  402.646899][T18672] netlink: zone id is out of range
[  402.646907][T18672] netlink: zone id is out of range
[  402.646916][T18672] netlink: get zone limit has 4 unknown bytes
[  402.669267][T18675] block nbd0: reconnected socket
[  402.672004][ T5632] block nbd0: Receive control failed (result -32)
[  402.780190][T18680] netlink: 'syz.0.3204': attribute type 2 has an invalid length.
[  402.836759][T18568] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.838503][T18568] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.838666][T18568] bridge_slave_0: entered allmulticast mode
[  402.841628][T18568] bridge_slave_0: entered promiscuous mode
[  402.874378][T18568] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.874566][T18568] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.874754][T18568] bridge_slave_1: entered allmulticast mode
[  402.876759][T18568] bridge_slave_1: entered promiscuous mode
[  402.957601][T18683] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  402.959093][T18568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.992734][T18568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.116813][T18568] team0: Port device team_slave_0 added
[  403.139182][T18568] team0: Port device team_slave_1 added
[  403.185235][T18568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.185255][T18568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.185284][T18568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.190106][T18568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.190125][T18568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.190153][T18568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.320421][T18691] netlink: 'syz.3.3209': attribute type 23 has an invalid length.
[  403.387419][T18693] erspan0: entered allmulticast mode
[  403.414593][T18568] hsr_slave_0: entered promiscuous mode
[  403.415681][T18568] hsr_slave_1: entered promiscuous mode
[  403.416472][T18568] debugfs: 'hsr0' already exists in 'hsr'
[  403.416493][T18568] Cannot create hsr debugfs directory
[  403.960272][T18568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.233635][T18568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.655284][ T5620] Bluetooth: hci1: command tx timeout
[  406.490988][T18733] gre1: entered promiscuous mode
[  406.491015][T18733] gre1: entered allmulticast mode
[  406.561541][T18568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.587551][T18738] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3222'.
[  406.732837][ T5620] Bluetooth: hci1: command 0x040f tx timeout
[  406.748189][T18568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.818686][T18755] erspan0: entered promiscuous mode
[  406.818711][T18755] erspan0: entered allmulticast mode
[  407.481296][T18568] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  407.503559][T18568] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  407.504590][T18568] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  407.521933][T18568] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  407.550777][T18568] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  407.567275][T18568] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  407.581688][T18568] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  407.586744][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[  407.614717][T18568] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  407.635098][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'.
[  407.641897][T18779] netlink: 'syz.2.3233': attribute type 1 has an invalid length.
[  407.691430][T18779] 8021q: adding VLAN 0 to HW filter on device bond14
[  407.747418][T18779] bond14: (slave geneve3): making interface the new active one
[  407.749963][T18779] bond14: (slave geneve3): Enslaving as an active interface with an up link
[  407.752171][T18788] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3234'.
[  407.752193][T18788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3234'.
[  407.937076][T18568] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.989805][T18568] 8021q: adding VLAN 0 to HW filter on device team0
[  407.991744][T18798] syzkaller1: entered promiscuous mode
[  407.991768][T18798] syzkaller1: entered allmulticast mode
[  408.027776][T18089] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.027890][T18089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  408.064286][T12182] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.064405][T12182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.338962][T18809] netlink: 'syz.3.3239': attribute type 1 has an invalid length.
[  408.430190][T18809] 8021q: adding VLAN 0 to HW filter on device bond2
[  408.564288][T18809] macvlan2: entered promiscuous mode
[  408.564313][T18809] macvlan2: entered allmulticast mode
[  408.564855][T18809] bond2: entered allmulticast mode
[  408.564919][T18809] bond2: entered promiscuous mode
[  408.597749][T18809] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  408.615101][T18809] team0: Port device macvlan2 added
[  408.684760][T18816] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  408.686491][T18822] xt_CT: No such helper "netbios-ns"
[  408.813149][ T5632] Bluetooth: hci1: command 0x040f tx timeout
[  409.009969][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'.
[  409.169677][T18568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.173048][T18848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3249'.
[  409.188195][T18848] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  409.201565][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3249'.
[  409.233139][T18856] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  409.304698][T18852] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  409.306560][T18852] bond1 (unregistering): Released all slaves
[  409.384766][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.483098][T18568] veth0_vlan: entered promiscuous mode
[  409.502265][T18568] veth1_vlan: entered promiscuous mode
[  409.568251][T18568] veth0_macvtap: entered promiscuous mode
[  409.628443][T18568] veth1_macvtap: entered promiscuous mode
[  409.689133][T18568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.730510][T18568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.862956][  T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.864546][T12184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.864619][T12184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.864657][T12184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.978839][ T3377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.978869][ T3377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.100268][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.100293][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.719698][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  410.734671][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  410.744126][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  410.748765][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  410.749493][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  410.893867][ T5632] Bluetooth: hci1: command 0x040f tx timeout
[  410.944581][T18913] netlink: 'syz.1.3262': attribute type 1 has an invalid length.
[  410.944606][T18913] netlink: 'syz.1.3262': attribute type 7 has an invalid length.
[  410.944620][T18913] netlink: 'syz.1.3262': attribute type 8 has an invalid length.
[  410.944634][T18913] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3262'.
[  410.944652][T18913] NCSI netlink: No device for ifindex 65584
[  411.275758][T18925] netlink: 4080 bytes leftover after parsing attributes in process `syz.1.3265'.
[  411.360721][T18929] netlink: 'syz.3.3266': attribute type 7 has an invalid length.
[  411.756307][T18946] __nla_validate_parse: 1 callbacks suppressed
[  411.756330][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.756350][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.757704][T18946] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.757727][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.761853][T18946] netlink: 'syz.1.3268': attribute type 20 has an invalid length.
[  411.761876][T18946] IPv6: NLM_F_CREATE should be specified when creating new route
[  411.827081][T18946] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.828109][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.828129][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'.
[  411.919967][T18949] netlink: 'syz.4.3270': attribute type 11 has an invalid length.
[  411.919993][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'.
[  411.948948][T18949] netlink: 'syz.4.3270': attribute type 11 has an invalid length.
[  411.948975][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'.
[  411.951898][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'.
[  411.990555][T18949] 8021q: adding VLAN 0 to HW filter on device macsec1
[  411.990939][ T5744] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  412.005325][  T138] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  412.005450][  T138] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  412.005546][  T138] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  412.005666][  T138] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  412.617507][T18978] netlink: 'syz.4.3281': attribute type 1 has an invalid length.
[  412.824751][ T5632] Bluetooth: hci0: command tx timeout
[  413.310268][T18910] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.310422][T18910] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.310554][T18910] bridge_slave_0: entered allmulticast mode
[  413.318903][T18910] bridge_slave_0: entered promiscuous mode
[  413.328044][T18910] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.328231][T18910] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.328388][T18910] bridge_slave_1: entered allmulticast mode
[  413.334737][T18910] bridge_slave_1: entered promiscuous mode
[  413.408238][T18910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.426491][T18910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.582207][T18910] team0: Port device team_slave_0 added
[  413.600559][T18910] team0: Port device team_slave_1 added
[  413.738748][T18910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.738769][T18910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.738798][T18910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.751514][T18910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.751565][T18910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  413.751641][T18910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  413.981448][T19021] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  414.024712][T19021] Bluetooth: MGMT ver 1.23
[  414.122491][T19021] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  414.168048][T18910] hsr_slave_0: entered promiscuous mode
[  414.183502][T18910] hsr_slave_1: entered promiscuous mode
[  414.184322][T18910] debugfs: 'hsr0' already exists in 'hsr'
[  414.184344][T18910] Cannot create hsr debugfs directory
[  414.517806][T19035] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  414.519345][T19038] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  414.830516][T19051] netlink: 'syz.4.3295': attribute type 10 has an invalid length.
[  414.892851][ T5632] Bluetooth: hci0: command tx timeout
[  414.980352][T19056] bridge10: the hash_elasticity option has been deprecated and is always 16
[  415.014030][T19062] netlink: 'syz.3.3296': attribute type 10 has an invalid length.
[  415.015743][T19051] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  415.165570][T19062] geneve2: entered promiscuous mode
[  415.165595][T19062] geneve2: entered allmulticast mode
[  415.264777][T19069] xt_hashlimit: size too large, truncated to 1048576
[  415.317662][T18910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  415.317704][T18910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  415.317735][T18910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  415.447543][T19071] xt_hashlimit: size too large, truncated to 1048576
[  415.586192][T19070] team0 (unregistering): Port device team_slave_0 removed
[  415.621984][T19070] team0 (unregistering): Port device team_slave_1 removed
[  415.758785][T18910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  415.758872][T18910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  415.758943][T18910] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  415.940575][T18910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  415.940643][T18910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  415.940686][T18910] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  416.307084][T19095] netlink: 'syz.1.3304': attribute type 1 has an invalid length.
[  416.790142][T19112] netlink: 'syz.0.3309': attribute type 11 has an invalid length.
[  416.906788][T19115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  416.973744][ T5632] Bluetooth: hci0: command tx timeout
[  417.058421][T19125] __nla_validate_parse: 13 callbacks suppressed
[  417.058442][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'.
[  417.312555][T19130] veth0_to_bond: left allmulticast mode
[  417.313344][T18910] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  417.319098][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  417.377554][T18910] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  417.395878][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  417.398494][T19133] netlink: 'syz.4.3315': attribute type 1 has an invalid length.
[  417.398518][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'.
[  417.398745][T18910] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  417.442188][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  417.444257][T18910] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  417.447817][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'.
[  417.499374][T18910] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  417.691725][T19148] xt_hashlimit: invalid interval
[  417.767449][T19150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'.
[  418.010367][T18910] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.059192][T18910] 8021q: adding VLAN 0 to HW filter on device team0
[  418.089904][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.090015][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.130908][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.131029][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.436956][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3325'.
[  418.754522][T19184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3332'.
[  418.965355][T19196] tipc: Started in network mode
[  418.965451][T19196] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  418.965818][T19196] tipc: Enabled bearer <eth:team0>, priority 0
[  418.969861][T19193] netlink: 'syz.1.3333': attribute type 10 has an invalid length.
[  419.052932][ T5632] Bluetooth: hci0: command tx timeout
[  419.363706][T19206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  419.606926][T19219] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3338'.
[  420.071587][T19231] block nbd4: not configured, cannot reconfigure
[  420.092801][    T9] tipc: Node number set to 11578026
[  420.391272][T18910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.509386][T19241] tipc: Started in network mode
[  420.509424][T19241] tipc: Node identity , cluster identity 4711
[  420.509442][T19241] tipc: Failed to set node id, please configure manually
[  420.509489][T19241] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  420.625357][T18910] veth0_vlan: entered promiscuous mode
[  420.665784][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'.
[  420.665816][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'.
[  420.669747][T18910] veth1_vlan: entered promiscuous mode
[  420.700107][T19249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3349'.
[  420.807806][T18910] veth0_macvtap: entered promiscuous mode
[  420.841253][T18910] veth1_macvtap: entered promiscuous mode
[  420.853867][T19254] batadv_slave_0: entered promiscuous mode
[  420.860314][T19254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.907285][T19254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.010531][T18910] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.072040][T18910] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.102613][ T3377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.102914][ T3377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.124842][T12184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.166060][T19265] syzkaller1: entered promiscuous mode
[  421.166085][T19265] syzkaller1: entered allmulticast mode
[  421.379025][T19267] netlink: 'syz.0.3353': attribute type 15 has an invalid length.
[  421.493503][T19267] netlink: 'syz.0.3353': attribute type 15 has an invalid length.
[  421.622521][ T3377] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  421.622579][ T3377] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  421.622621][ T3377] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  421.622661][ T3377] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  421.721794][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.721817][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.762577][T12182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.948808][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.948833][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.888629][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.891380][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.895447][ T3377] wlan1: Trigger new scan to find an IBSS to join
[  422.912024][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.935481][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.936774][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  423.115886][T19323] netlink: 'syz.2.3364': attribute type 1 has an invalid length.
[  423.115944][T19323] __nla_validate_parse: 3 callbacks suppressed
[  423.115979][T19323] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3364'.
[  423.829331][ T5626] bond0: (slave syz_tun): Releasing backup interface
[  423.844607][ T5626] syz_tun (unregistering): left allmulticast mode
[  424.294908][  T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.294949][  T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  424.294979][  T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.295016][  T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  424.517860][T19347] nft_compat: unsupported protocol 0
[  424.587498][T19348] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[  424.648230][  T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  424.648269][  T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  424.648299][  T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.648327][  T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  424.825065][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'.
[  424.825854][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3374'.
[  425.037834][  T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.037877][  T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  425.037908][  T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.037937][  T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  425.065676][ T5632] Bluetooth: hci2: command tx timeout
[  425.291980][  T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  425.292022][  T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  425.292051][  T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.292080][  T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  425.704100][T19371] netlink: 'syz.3.3378': attribute type 20 has an invalid length.
[  425.704164][T19371] IPv6: NLM_F_CREATE should be specified when creating new route
[  425.841238][T19376] No such timeout policy "s"
[  425.841258][T19376] netlink: Failed to associated timeout policy 's'
[  425.916385][T19379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3380'.
[  425.953588][   T59] wlan1: Trigger new scan to find an IBSS to join
[  426.314308][   T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.499063][   T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.641739][  T138] vlan6: left allmulticast mode
[  426.652165][  T138] geneve0: left allmulticast mode
[  426.655685][  T138] bridge0: port 1(vlan6) entered disabled state
[  426.797272][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'.
[  427.044088][  T138] pim6reg: left allmulticast mode
[  427.045921][  T138] dvmrp1: left allmulticast mode
[  427.100743][  T138] tipc: Resetting bearer <eth:syzkaller0>
[  427.136306][ T5632] Bluetooth: hci2: command tx timeout
[  428.205855][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'.
[  428.545045][  T138] bond9 (unregistering): (slave geneve4): Releasing active interface
[  428.599676][  T138] bond2 (unregistering): (slave geneve2): Releasing active interface
[  428.620931][T19419] sctp: [Deprecated]: syz.3.3388 (pid 19419) Use of int in maxseg socket option.
[  428.620931][T19419] Use struct sctp_assoc_value instead
[  428.825384][  T138] tipc: Disabling bearer <eth:syzkaller0>
[  428.972748][T12182] wlan1: Trigger new scan to find an IBSS to join
[  429.021829][  T138] bond8 (unregistering): (slave bridge6): Releasing backup interface
[  429.021901][  T138] bridge6 (unregistering): left promiscuous mode
[  429.021962][  T138] bridge6 (unregistering): left allmulticast mode
[  429.220371][ T5632] Bluetooth: hci2: command tx timeout
[  429.278797][  T138] bond0 (unregistering): (slave bond10): Releasing backup interface
[  429.280705][  T138] bond10 (unregistering): left allmulticast mode
[  429.281566][  T138] bond0 (unregistering): Released all slaves
[  429.311307][  T138] bond1 (unregistering): Released all slaves
[  429.401356][  T138] bond2 (unregistering): Released all slaves
[  429.477741][  T138] bond3 (unregistering): Released all slaves
[  429.557896][  T138] bond4 (unregistering): Released all slaves
[  429.640053][  T138] bond5 (unregistering): Released all slaves
[  429.701199][  T138] bond6 (unregistering): left allmulticast mode
[  429.701292][  T138] bond6 (unregistering): left promiscuous mode
[  429.740299][  T138] team0: Port device macvlan4 removed
[  429.766017][  T138] bond6 (unregistering): Released all slaves
[  429.838630][  T138] bond7 (unregistering): Released all slaves
[  429.941075][T12184] wlan1: Creating new IBSS network, BSSID fa:f1:9e:5a:6a:fe
[  429.969544][  T138] bond8 (unregistering): Released all slaves
[  430.055331][  T138] bond9 (unregistering): Released all slaves
[  430.113363][  T138] bond10 (unregistering): Released all slaves
[  430.196498][  T138] bond11 (unregistering): (slave veth13): Releasing active interface
[  430.201578][  T138] bond11 (unregistering): Released all slaves
[  430.255807][  T138] bond12 (unregistering): Released all slaves
[  430.442986][ T7458] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.443382][ T7458] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  431.144093][  T138] : left promiscuous mode
[  431.314869][ T5632] Bluetooth: hci2: command tx timeout
[  431.320345][T19318] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.320462][T19318] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.320642][T19318] bridge_slave_0: entered allmulticast mode
[  431.358239][T19318] bridge_slave_0: entered promiscuous mode
[  431.376989][  T138] tipc: Disabling bearer <udp:syz0>
[  431.377117][  T138] tipc: Disabling bearer <udp:syz2>
[  431.377244][  T138] tipc: Left network mode
[  431.402414][T19318] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.402608][T19318] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.402778][T19318] bridge_slave_1: entered allmulticast mode
[  431.408764][T19318] bridge_slave_1: entered promiscuous mode
[  431.483237][T19318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.487508][T19318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.545013][T19318] team0: Port device team_slave_0 added
[  431.548694][T19318] team0: Port device team_slave_1 added
[  431.632893][T19318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.632912][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.632940][T19318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.634903][T19318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.634918][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.634946][T19318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.691687][T19318] hsr_slave_0: entered promiscuous mode
[  432.713220][T19318] hsr_slave_1: entered promiscuous mode
[  432.714175][T19318] debugfs: 'hsr0' already exists in 'hsr'
[  432.736560][T19318] Cannot create hsr debugfs directory
[  433.288608][T19488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3400'.
[  433.332559][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  433.641618][  T138] batman_adv: batadv0: Removing interface: macvtap1
[  433.751323][T19491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3400'.
[  433.751356][T19491] nbd: nbd64 already in use
[  434.358756][T12184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  434.440282][T19464] udevd[19464]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  434.621765][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'.
[  434.621791][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3404'.
[  434.653981][  T138] team0: Port device wlan0 removed
[  434.675067][T19518] netlink: 'syz.1.3404': attribute type 4 has an invalid length.
[  434.675091][T19518] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3404'.
[  435.144318][T19517] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.165194][T19517] bond1: (slave bond0): making interface the new active one
[  435.225526][T19517] bond1: (slave bond0): Enslaving as an active interface with an up link
[  435.327306][T19518] .`: renamed from bond0 (while UP)
[  435.492036][T19531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'.
[  435.495898][T19531] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  435.772011][  T138] hsr_slave_0: left promiscuous mode
[  435.964100][  T138] veth1_vlan: left allmulticast mode
[  435.971861][  T138] veth0_macvtap: left promiscuous mode
[  435.972098][  T138] veth1_vlan: left promiscuous mode
[  435.983085][  T138] veth0_vlan: left promiscuous mode
[  437.211643][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  437.223678][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  437.231987][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  437.234581][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  437.236287][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  437.775082][T19318] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.879709][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  438.032706][T19318] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.450824][T19318] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.508995][T19585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3414'.
[  438.546239][  T138] IPVS: stop unused estimator thread 0...
[  438.758054][T19318] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.805784][T19612] openvswitch: netlink: Invalid VLAN frame
[  439.296710][  T138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.303679][ T5632] Bluetooth: hci3: command tx timeout
[  439.319906][  T138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.483108][T19638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3422'.
[  439.658396][  T138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.658450][  T138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.759996][T19651] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  439.912062][  T138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.912103][  T138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.101834][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  440.124450][T19659] tunl0: entered promiscuous mode
[  440.128496][T19659] netlink: 'syz.2.3427': attribute type 3 has an invalid length.
[  440.128517][T19659] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3427'.
[  440.324941][T19669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3428'.
[  440.359051][  T138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.359089][  T138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.397593][T19318] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  440.426855][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.615057][T19318] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  440.639287][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.641971][T19318] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  440.682883][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  440.863294][T19318] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  440.868799][T19318] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  441.120506][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'.
[  441.260629][T19718] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3434'.
[  441.260660][T19718] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3434'.
[  441.266198][ T1265] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.377040][ T5632] Bluetooth: hci3: command tx timeout
[  441.420969][T19730] netlink: 'syz.3.3432': attribute type 83 has an invalid length.
[  441.430648][ T1265] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.660115][  T138] bridge_slave_1: left allmulticast mode
[  441.660160][  T138] bridge_slave_1: left promiscuous mode
[  441.660382][  T138] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.678169][T19741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3434'.
[  441.695032][  T138] bridge_slave_0: left allmulticast mode
[  441.695061][  T138] bridge_slave_0: left promiscuous mode
[  441.695278][  T138] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.935637][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.212506][T19764] netlink: 'syz.3.3437': attribute type 1 has an invalid length.
[  442.272688][T19766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3437'.
[  442.276275][  T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.279296][  T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.290132][  T138] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  442.331306][  T138] bond0 (unregistering): Released all slaves
[  442.347656][T19566] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.347733][T19566] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.347845][T19566] bridge_slave_0: entered allmulticast mode
[  442.349179][T19566] bridge_slave_0: entered promiscuous mode
[  442.482338][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'.
[  442.482385][T19752] netlink: 'syz.2.3436': attribute type 3 has an invalid length.
[  442.482522][ T1265] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.526774][ T7458] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  442.633752][T19764] 8021q: adding VLAN 0 to HW filter on device bond3
[  442.685351][T19566] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.685561][T19566] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.685770][T19566] bridge_slave_1: entered allmulticast mode
[  442.691275][T19566] bridge_slave_1: entered promiscuous mode
[  442.811232][T19566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  442.874544][T19566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  442.966695][  T138] hsr_slave_0: left promiscuous mode
[  442.970133][  T138] hsr_slave_1: left promiscuous mode
[  442.971462][  T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.971484][  T138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.020340][  T138] veth1_macvtap: left promiscuous mode
[  443.029349][  T138] veth0_macvtap: left promiscuous mode
[  443.029472][  T138] veth1_vlan: left promiscuous mode
[  443.029544][  T138] veth0_vlan: left promiscuous mode
[  443.210892][T19783] netlink: 'syz.2.3440': attribute type 3 has an invalid length.
[  443.452992][ T5632] Bluetooth: hci3: command tx timeout
[  443.646444][  T138] team0 (unregistering): Port device team_slave_1 removed
[  443.695216][  T138] team0 (unregistering): Port device team_slave_0 removed
[  444.029744][T19778] __nla_validate_parse: 2 callbacks suppressed
[  444.029767][T19778] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3439'.
[  444.172722][T19566] team0: Port device team_slave_0 added
[  444.199823][T19566] team0: Port device team_slave_1 added
[  444.249864][T19566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.249882][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.249906][T19566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.310580][T19566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.310597][T19566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.310623][T19566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.334020][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'.
[  444.594660][T19566] hsr_slave_0: entered promiscuous mode
[  444.596189][T19566] hsr_slave_1: entered promiscuous mode
[  444.751989][T19318] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.995423][T19318] 8021q: adding VLAN 0 to HW filter on device team0
[  445.046052][T19817] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3444'.
[  445.070058][ T3377] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.070193][ T3377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.183264][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.183377][ T8065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.333799][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3445'.
[  445.532608][ T5632] Bluetooth: hci3: command tx timeout
[  445.798999][T19566] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  445.844938][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  445.850568][T19566] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  445.894841][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  445.906603][T19566] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  445.964814][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  445.980181][T19566] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  445.998275][T19837] netlink: 'syz.1.3447': attribute type 2 has an invalid length.
[  446.014739][T19566] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  446.055328][T19832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.365736][T19566] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.541051][T19861] netlink: 'syz.1.3450': attribute type 1 has an invalid length.
[  446.555528][T19566] 8021q: adding VLAN 0 to HW filter on device team0
[  446.628166][T19861] bond0: entered promiscuous mode
[  446.628557][T19861] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.638494][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.638779][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.703040][T19861] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.703462][T19861] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  446.703481][T19861] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  446.760840][T19869] netlink: 'syz.2.3451': attribute type 49 has an invalid length.
[  446.802117][T19861] bond0: (slave wireguard0): making interface the new active one
[  446.802143][T19861] wireguard0: entered promiscuous mode
[  446.837745][T19861] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  446.875712][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.875887][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.213682][T19880] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  447.213707][T19880] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3453'.
[  447.213724][T19880] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  447.213738][T19880] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.3453'.
[  447.276093][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3452'.
[  447.324025][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3452'.
[  447.606431][T19318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.791972][T19318] veth0_vlan: entered promiscuous mode
[  447.821682][T19318] veth1_vlan: entered promiscuous mode
[  447.894601][T19318] veth0_macvtap: entered promiscuous mode
[  447.900302][T19318] veth1_macvtap: entered promiscuous mode
[  448.057204][T19318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  448.127949][T19318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.222482][ T1265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.222792][ T1265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.493255][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.494468][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.618766][T12182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.618789][T12182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.667488][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.667512][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.129613][T19944] pimreg: entered allmulticast mode
[  449.263525][T19948] nbd: must specify a size in bytes for the device
[  449.325836][T19566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.684124][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'.
[  449.709150][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'.
[  449.946343][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  450.771920][T19566] veth0_vlan: entered promiscuous mode
[  450.799866][T19566] veth1_vlan: entered promiscuous mode
[  450.965787][T19566] veth0_macvtap: entered promiscuous mode
[  451.005261][T19566] veth1_macvtap: entered promiscuous mode
[  451.064411][T19566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.102089][T19566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.157569][ T7458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.157966][ T7458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.158173][ T7458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.158212][ T7458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.419461][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.419484][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.641662][T20033] netlink: 'syz.1.3478': attribute type 1 has an invalid length.
[  451.705853][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.705878][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.988555][T20039] pim6reg: entered allmulticast mode
[  452.306323][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'.
[  452.306354][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'.
[  452.698992][T20068] syzkaller1: entered promiscuous mode
[  452.699018][T20068] syzkaller1: entered allmulticast mode
[  452.860538][T20075] netlink: 'syz.3.3486': attribute type 39 has an invalid length.
[  452.906395][T20080] netlink: 'syz.1.3487': attribute type 64 has an invalid length.
[  452.906422][T20080] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3487'.
[  453.051764][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3488'.
[  453.549564][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3490'.
[  453.613550][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'.
[  453.701868][T20102] vlan0: entered promiscuous mode
[  453.831198][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3492'.
[  455.427934][T20176] Bluetooth: MGMT ver 1.23
[  455.427976][T20176] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  455.475061][T20176] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  455.475093][T20176] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  455.500818][T20180] __nla_validate_parse: 4 callbacks suppressed
[  455.500839][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'.
[  455.799925][T20194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3517'.
[  455.914602][T20196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3516'.
[  456.424778][T20226] netlink: 'syz.1.3524': attribute type 11 has an invalid length.
[  457.145467][T20254] netlink: 'syz.2.3530': attribute type 83 has an invalid length.
[  457.559183][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3533'.
[  457.804395][T20276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3535'.
[  457.927040][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'.
[  458.184863][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'.
[  458.217988][T20283] hsr0: entered allmulticast mode
[  458.218015][T20283] hsr_slave_0: entered allmulticast mode
[  458.218034][T20283] hsr_slave_1: entered allmulticast mode
[  458.295407][T20285] ipvlan2: entered allmulticast mode
[  458.295431][T20285] syz_tun: entered allmulticast mode
[  458.580424][T20307] netlink: 'syz.2.3543': attribute type 1 has an invalid length.
[  459.060764][T20323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3545'.
[  459.811461][T20356] can: request_module (can-proto-0) failed.
[  460.161370][T20387] bond4: entered promiscuous mode
[  460.161438][T20387] bond4: entered allmulticast mode
[  460.161931][T20387] 8021q: adding VLAN 0 to HW filter on device bond4
[  460.286514][T20386] bond5: entered promiscuous mode
[  460.286543][T20386] bond5: entered allmulticast mode
[  460.288352][T20386] 8021q: adding VLAN 0 to HW filter on device bond5
[  460.655658][T20407] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3561'.
[  460.801056][T20412] ip_tables: iptables: counters copy to user failed while replacing table
[  461.077261][T20422] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component
[  461.093813][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3566'.
[  461.095784][T20427] netlink: 'syz.2.3566': attribute type 58 has an invalid length.
[  461.095837][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'.
[  461.284644][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1
[  461.433609][T20445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.441212][T20448] netlink: 'syz.1.3571': attribute type 5 has an invalid length.
[  461.515368][T20453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.834620][T20465] 8021q: adding VLAN 0 to HW filter on device .`
[  462.004082][T20465] 8021q: adding VLAN 0 to HW filter on device bond1
[  462.035910][T20470] netlink: 'syz.5.3575': attribute type 2 has an invalid length.
[  462.063862][ T1265] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.063914][ T1265] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  462.063951][ T1265] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  462.063987][ T1265] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  462.436720][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  462.481805][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3582'.
[  462.507099][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'.
[  462.507190][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'.
[  462.629088][T20500] xt_TCPMSS: Only works on TCP SYN packets
[  462.960314][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3588'.
[  463.089445][T20527] netlink: 'syz.0.3589': attribute type 2 has an invalid length.
[  463.221607][T20531] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3591'.
[  463.284818][T20537] netlink: 'syz.0.3592': attribute type 13 has an invalid length.
[  463.345700][T20539] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  463.975344][T20570] bond2: Unable to set up delay as MII monitoring is disabled
[  463.985238][T20570] bond2 (unregistering): Released all slaves
[  464.111384][T20574] bond2: Unable to set up delay as MII monitoring is disabled
[  464.116949][T20574] bond2 (unregistering): Released all slaves
[  464.166299][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  464.207291][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'.
[  464.207321][T20588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'.
[  464.433942][T20594] bridge1: entered allmulticast mode
[  464.802872][T20613] xt_CT: No such helper "pptp"
[  464.836176][T20619] netlink: 'syz.2.3612': attribute type 1 has an invalid length.
[  465.268470][T20625] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.269059][T20625] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.525810][T20652] xt_hashlimit: size too large, truncated to 1048576
[  465.603454][   T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  465.740428][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4
[  465.770759][T20661] __nla_validate_parse: 7 callbacks suppressed
[  465.770780][T20661] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3621'.
[  465.932617][ T5620] Bluetooth: hci3: command 0x0405 tx timeout
[  466.029642][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3622'.
[  466.337418][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  466.545153][T20688] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[  466.681029][T20690] netlink: 'syz.2.3627': attribute type 1 has an invalid length.
[  466.788951][T20693] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  467.137909][T20716] netlink: 'syz.5.3634': attribute type 2 has an invalid length.
[  467.137932][T20716] netlink: 'syz.5.3634': attribute type 8 has an invalid length.
[  467.137947][T20716] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3634'.
[  467.191689][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3635'.
[  467.191716][T20714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3635'.
[  467.672816][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3640'.
[  467.697824][T20743] 8021q: adding VLAN 0 to HW filter on device bond2
[  467.715369][T20743] macvlan3: entered promiscuous mode
[  467.715385][T20743] macvlan3: entered allmulticast mode
[  467.716720][T20743] bond2: entered promiscuous mode
[  467.717354][T20743] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  467.721595][T20743] bond2: left promiscuous mode
[  467.783196][T20751] macvlan3: entered promiscuous mode
[  467.783221][T20751] macvlan3: entered allmulticast mode
[  467.784043][T20751] bond2: entered promiscuous mode
[  467.784928][T20751] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  467.788471][T20751] bond2: left promiscuous mode
[  470.119710][T20713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  470.370815][T20764] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  470.401937][T20768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3646'.
[  470.412167][T20764] bond3 (unregistering): Released all slaves
[  470.877882][T20794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'.
[  470.878163][T20793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'.
[  470.910836][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'.
[  470.910865][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'.
[  470.911566][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3651'.
[  471.027407][T20798] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3650'.
[  471.059965][T20798] netlink: 'syz.0.3650': attribute type 10 has an invalid length.
[  471.081169][T20798] team0: Device vxcan1 is of different type
[  471.179501][T20812] lo: entered allmulticast mode
[  471.179810][T20812] veth1_to_bond: entered promiscuous mode
[  471.200513][T20811] veth1_to_bond: left promiscuous mode
[  471.200736][T20811] lo: left allmulticast mode
[  471.469093][T20830] netlink: 'syz.1.3660': attribute type 5 has an invalid length.
[  471.471137][T20821] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  471.826560][T20847] ovs-dp0: entered promiscuous mode
[  472.136659][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3669'.
[  472.198193][T20860] bond0: (slave bond_slave_0): Releasing backup interface
[  472.307462][T20860] bond_slave_0: entered promiscuous mode
[  472.307488][T20860] bond_slave_0: entered allmulticast mode
[  472.371397][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'.
[  472.597322][T20872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3671'.
[  473.086408][T20890] ip_tables: iptables: counters copy to user failed while replacing table
[  473.504854][T20898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3677'.
[  474.288952][T20924] netlink: 'syz.3.3683': attribute type 1 has an invalid length.
[  474.721454][T20928] bond6: (slave bridge2): making interface the new active one
[  474.730021][T20928] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  475.330649][T20938] bond1: option arp_all_targets: invalid value (18446744073709551613)
[  475.345289][T20938] bond1 (unregistering): Released all slaves
[  475.380663][T20950] veth1_vlan: left promiscuous mode
[  475.398306][T20950] netlink: 'syz.0.3685': attribute type 1 has an invalid length.
[  475.398330][T20950] netlink: 'syz.0.3685': attribute type 2 has an invalid length.
[  475.908373][T20985] openvswitch: netlink: EtherType 548 is less than min 600
[  476.243224][T20995] tipc: Failed to remove unknown binding: 66,0,0/0:3373586088/3373586090
[  476.243290][T20995] tipc: Failed to remove unknown binding: 66,0,0/0:3373586088/3373586089
[  476.245524][T20995] tipc: Failed to remove unknown binding: 66,0,0/0:3373586088/3373586090
[  476.245555][T20995] tipc: Failed to remove unknown binding: 66,0,0/0:3373586088/3373586089
[  476.472164][T21000] __nla_validate_parse: 7 callbacks suppressed
[  476.472296][T21000] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3696'.
[  476.637615][T21013] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  476.639588][T21013] openvswitch: netlink: IPv4 tunnel dst address is zero
[  476.640836][T21013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.765710][T21016] IPv6: NLM_F_CREATE should be specified when creating new route
[  476.765813][T21016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3700'.
[  476.880366][T21007] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.041924][T21023] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  477.116160][T21030] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3705'.
[  477.627555][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'.
[  477.847892][T21052] bridge_slave_0: left allmulticast mode
[  477.848295][T21052] bridge_slave_0: left promiscuous mode
[  477.849345][T21052] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.898845][ T7458] IPVS: starting estimator thread 0...
[  477.936414][T21052] bridge_slave_1: left allmulticast mode
[  477.936798][T21052] bridge_slave_1: left promiscuous mode
[  477.941145][T21052] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.003305][T21063] IPVS: using max 24 ests per chain, 57600 per kthread
[  478.244023][T21052] bond0: (slave veth0_to_bond): Releasing backup interface
[  478.318572][T21052] bond0: (slave bond_slave_0): Releasing backup interface
[  478.371425][T21052] bond0: (slave bond_slave_1): Releasing backup interface
[  478.480289][T21052] team0: Port device team_slave_0 removed
[  478.581991][T21052] team0: Port device team_slave_1 removed
[  478.583357][T21052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  478.583380][T21052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.616731][T21052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.616756][T21052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.649549][T21052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  478.900839][T21057] team0: Device xfrm0 is of different type
[  478.988735][T21060] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  479.191524][T18087] tipc: Resetting bearer <eth:team0>
[  479.468473][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3715'.
[  479.577634][T21091] nbd: must specify at least one socket
[  479.607486][T21092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3715'.
[  479.769192][T21091] bond0: entered promiscuous mode
[  479.769219][T21091] bond_slave_0: entered promiscuous mode
[  479.769465][T21091] bond_slave_1: entered promiscuous mode
[  479.980105][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3718'.
[  480.061915][T21117] xt_IDLETIMER: timeout value is too big
[  480.134784][T21117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3719'.
[  480.189672][T21117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3719'.
[  480.350539][T21125] netlink: 'syz.5.3721': attribute type 1 has an invalid length.
[  480.578990][T21142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3721'.
[  480.729508][T21125] bond1: (slave veth0_to_bond): making interface the new active one
[  480.745889][T21125] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  480.840287][T21136] bridge_slave_0: left allmulticast mode
[  480.840316][T21136] bridge_slave_0: left promiscuous mode
[  480.840629][T21136] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.918022][T21136] bridge_slave_1: left allmulticast mode
[  480.920153][T21136] bridge_slave_1: left promiscuous mode
[  480.921154][T21136] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.997831][T21136] bond0: (slave bond_slave_0): Releasing backup interface
[  481.163068][T21136] bond0: (slave bond_slave_1): Releasing backup interface
[  481.185688][T21136] team0: Port device team_slave_0 removed
[  481.204483][T21136] team0: Port device team_slave_1 removed
[  481.205630][T21136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.205653][T21136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.207553][T21136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.207575][T21136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.210005][T21136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  481.291829][T21142] 8021q: adding VLAN 0 to HW filter on device bond1
[  481.336732][T21152] netlink: 'syz.2.3725': attribute type 2 has an invalid length.
[  481.920401][T21170] netlink: 5316 bytes leftover after parsing attributes in process `syz.5.3728'.
[  482.237307][T21177] syzkaller0: entered promiscuous mode
[  482.237507][T21177] syzkaller0: entered allmulticast mode
[  482.305734][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3731'.
[  482.466253][   T59] IPVS: starting estimator thread 0...
[  482.552389][T21193] IPVS: using max 27 ests per chain, 64800 per kthread
[  482.715573][T21189] syzkaller0: entered promiscuous mode
[  482.715599][T21189] syzkaller0: entered allmulticast mode
[  483.184836][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'.
[  483.414849][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'.
[  483.765642][T21242] ip_tables: iptables: counters copy to user failed while replacing table
[  483.770768][T21242] netlink: 'syz.5.3745': attribute type 4 has an invalid length.
[  483.825334][T21242] netlink: 'syz.5.3745': attribute type 1 has an invalid length.
[  484.063675][T21242] 8021q: adding VLAN 0 to HW filter on device bond2
[  484.098483][T21251] bond1: (slave veth0_to_bond): Releasing active interface
[  484.119397][T21251] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  484.794556][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3753'.
[  485.295234][T21303] sctp: [Deprecated]: syz.2.3757 (pid 21303) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.295234][T21303] Use struct sctp_sack_info instead
[  485.501337][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'.
[  487.226382][T21285] veth0_to_bond: entered allmulticast mode
[  487.369530][T21315] netlink: 'syz.3.3758': attribute type 17 has an invalid length.
[  487.369555][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'.
[  487.369583][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3758'.
[  487.588296][T21321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3761'.
[  487.588335][T21321] block nbd2: Unsupported socket: should be TCP or UNIX.
[  487.741276][T21315] gretap0: entered promiscuous mode
[  487.761128][T21315] gretap0: left promiscuous mode
[  488.214787][T21343] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  488.252675][ T5632] Bluetooth: hci5: command 0x0406 tx timeout
[  488.665935][T21351] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode
[  488.715112][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3767'.
[  488.943271][T21368] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3771'.
[  489.081139][T21376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3774'.
[  489.161360][T21377] bridge0: port 1(syz_tun) entered blocking state
[  489.161550][T21377] bridge0: port 1(syz_tun) entered disabled state
[  489.161735][T21377] syz_tun: entered allmulticast mode
[  489.185423][T21377] syz_tun: entered promiscuous mode
[  489.191805][T21377] bridge0: port 1(syz_tun) entered blocking state
[  489.191917][T21377] bridge0: port 1(syz_tun) entered forwarding state
[  489.472593][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'.
[  489.721355][T21398] netlink: 'syz.2.3781': attribute type 21 has an invalid length.
[  489.721380][T21398] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3781'.
[  489.743269][T21398] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  489.979411][T21410] openvswitch: netlink: IP tunnel dst address not specified
[  490.671260][T21431] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  490.683173][T21431] bond1 (unregistering): Released all slaves
[  491.061081][T21448] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3790'.
[  491.481100][T21461] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  491.514241][T21459] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  491.514296][T21459] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  491.514324][T21459] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  492.602678][T21491] netlink: 'syz.3.3798': attribute type 4 has an invalid length.
[  492.602704][T21491] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3798'.
[  492.987808][T21499] bridge: RTM_NEWNEIGH with invalid state 0x20
[  493.097051][T21502] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  493.266169][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3804'.
[  493.331036][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'.
[  493.387339][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'.
[  493.388322][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3807'.
[  493.694325][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3810'.
[  493.812485][T18087] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.812567][T18087] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  493.812607][T18087] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  495.035192][T21573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3820'.
[  495.246967][T21587] Cannot find set identified by id 4 to match
[  495.538880][T21573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3820'.
[  495.685477][T21573] netlink: 'syz.0.3820': attribute type 1 has an invalid length.
[  496.006432][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'.
[  496.662327][ T5632] Bluetooth: hci3: command 0x0405 tx timeout
[  498.344540][ T1265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  499.095578][T21585] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  499.123352][T21590] bridge3: entered promiscuous mode
[  499.755472][T21639] gretap1: entered promiscuous mode
[  499.837878][T21623] netlink: 'syz.3.3824': attribute type 23 has an invalid length.
[  500.140073][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'.
[  500.140103][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'.
[  500.140125][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'.
[  500.161321][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'.
[  500.161350][T21654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'.
[  500.161372][T21654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3830'.
[  501.549956][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  503.699471][T21651] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  504.453979][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3842'.
[  504.499550][T21711] ipvlan2: entered allmulticast mode
[  504.499574][T21711] syz_tun: entered allmulticast mode
[  504.592868][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3842'.
[  504.683833][T21716] ipvlan2: entered allmulticast mode
[  504.734244][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.734447][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.807396][T21725] ip_vti0: entered promiscuous mode
[  504.860057][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  504.949819][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  505.215966][T14970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.449135][T21759] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  505.759100][T21762] __nla_validate_parse: 1 callbacks suppressed
[  505.759119][T21762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3855'.
[  505.772686][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.949486][T21771] netlink: 'syz.5.3857': attribute type 30 has an invalid length.
[  506.018882][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.844080][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.900322][T21804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3869'.
[  506.980076][T21807] netlink: 'syz.1.3870': attribute type 1 has an invalid length.
[  506.980102][T21807] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3870'.
[  506.980121][T21807] netlink: 'syz.1.3870': attribute type 1 has an invalid length.
[  507.100218][T21811] netlink: 75 bytes leftover after parsing attributes in process `syz.1.3870'.
[  507.264791][T21817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'.
[  507.593077][T21826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3875'.
[  507.853210][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.900510][T21828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.903484][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3876'.
[  507.903752][T21828] netlink: 'syz.5.3876': attribute type 1 has an invalid length.
[  507.936071][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.944147][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3876'.
[  508.353823][T21841] netlink: 'syz.5.3879': attribute type 1 has an invalid length.
[  508.353867][T21841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.455377][T21847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3881'.
[  508.455458][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3881'.
[  508.517368][T21847] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  508.563654][T21847] gretap0: entered promiscuous mode
[  509.163029][T21872] syzkaller0: entered promiscuous mode
[  509.163227][T21872] syzkaller0: entered allmulticast mode
[  509.921484][T14970] net_ratelimit: 1 callbacks suppressed
[  509.921507][T14970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.937665][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.103678][T21898] Bluetooth: hci0: unsupported parameter 5135
[  510.103716][T21898] Bluetooth: hci0: unsupported parameter 8192
[  510.103732][T21898] Bluetooth: hci0: unsupported parameter 5135
[  510.103746][T21898] Bluetooth: hci0: unsupported parameter 8192
[  510.195634][T21896] batman_adv: batadv0: Adding interface: macvtap1
[  510.195748][T21896] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.195778][T21896] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  510.196881][T21901] netlink: 'syz.2.3889': attribute type 2 has an invalid length.
[  510.303329][T21901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.502380][T21908] nbd2: detected capacity change from 0 to 274877906944
[  510.520845][T21904] tap0: tun_chr_ioctl cmd 1074025676
[  510.520871][T21904] tap0: owner set to 0
[  510.791069][T21911] __nla_validate_parse: 6 callbacks suppressed
[  510.791098][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3891'.
[  510.973179][T14970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.973880][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.150321][ T5620] block nbd2: Receive control failed (result -104)
[  511.807760][T14984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.014651][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.059098][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3904'.
[  512.366860][T21955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.465786][T21955] batman_adv: batadv0: Removing interface: batadv_slave_1
[  513.053414][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.162984][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'.
[  513.477490][T21976] syzkaller0: entered promiscuous mode
[  513.478504][T21976] syzkaller0: entered allmulticast mode
[  513.695291][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.833675][T22009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  513.934982][T22009] netlink: 312 bytes leftover after parsing attributes in process `syz.5.3916'.
[  515.138460][ T5753] net_ratelimit: 1 callbacks suppressed
[  515.138495][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.181621][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.741137][T14970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.222623][T11970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.406969][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.407272][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.407470][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.407643][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.407956][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.408138][T22024] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  517.563980][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3918'.
[  518.550382][T22068] veth1_to_bond: entered allmulticast mode
[  518.551576][T22067] veth1_to_bond: left allmulticast mode
[  519.486646][T22098] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3942'.
[  520.324449][T22125] xt_policy: neither incoming nor outgoing policy selected
[  520.381672][T22127] xt_policy: neither incoming nor outgoing policy selected
[  520.413213][T22124] netlink: 'syz.0.3949': attribute type 4 has an invalid length.
[  520.446583][T22124] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3949'.
[  520.624558][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3951'.
[  520.630063][T22143] net_ratelimit: 21 callbacks suppressed
[  520.630085][T22143] openvswitch: netlink: IP tunnel dst address not specified
[  521.188194][T22157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3956'.
[  521.275586][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3956'.
[  521.278818][T22158] netlink: 'syz.0.3956': attribute type 30 has an invalid length.
[  521.278839][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'.
[  521.439583][T22159] xt_hashlimit: size too large, truncated to 1048576
[  521.450758][T22166] xt_hashlimit: size too large, truncated to 1048576
[  521.542021][T22156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3956'.
[  521.542051][T22156] nbd: nbd64 already in use
[  521.867776][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3959'.
[  521.975190][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3959'.
[  522.200144][T21980] udevd[21980]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  522.597176][T22201] netlink: 'syz.1.3963': attribute type 2 has an invalid length.
[  522.780821][T22207] rdma_op ffff888065947a38 conn xmit_rdma 0000000000000000
[  523.113125][T22209] netlink: 'syz.1.3965': attribute type 32 has an invalid length.
[  523.674096][T22236] ip6gre1: entered promiscuous mode
[  523.846514][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3976'.
[  524.180850][T22253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3977'.
[  524.215345][T22252] batman_adv: batadv0: Adding interface: veth0
[  524.215365][T22252] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.215395][T22252] batman_adv: batadv0: Interface activated: veth0
[  524.283981][T22253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.284008][T22253] batman_adv: batadv0: Removing interface: batadv_slave_0
[  524.335922][T22253] batman_adv: batadv0: Interface deactivated: veth0
[  524.336139][T22253] batman_adv: batadv0: Removing interface: veth0
[  524.433265][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'.
[  524.611971][T22271] netlink: 'syz.2.3982': attribute type 10 has an invalid length.
[  524.678735][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  524.678827][T22273] bridge_slave_1: left allmulticast mode
[  524.678850][T22273] bridge_slave_1: left promiscuous mode
[  524.681756][T22273] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.772420][T22273] bridge_slave_0: left allmulticast mode
[  524.772452][T22273] bridge_slave_0: left promiscuous mode
[  524.772702][T22273] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.254266][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3986'.
[  525.648750][T22295] netlink: 'syz.2.3991': attribute type 1 has an invalid length.
[  525.802655][T22303] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  525.803086][T22303] gretap1: entered promiscuous mode
[  525.803103][T22303] gretap1: entered allmulticast mode
[  526.118979][T22316] dvmrp0: entered allmulticast mode
[  526.139558][T22318] xt_REDIRECT: bad rangesize 26624.
[  526.274289][T22327] openvswitch: netlink: Tunnel attr 512 out of range max 16
[  526.376977][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'.
[  526.443658][T22328] syzkaller0: entered promiscuous mode
[  526.443686][T22328] syzkaller0: entered allmulticast mode
[  530.338316][T12183] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  530.746407][T22359] tipc: Started in network mode
[  530.746428][T22359] tipc: Node identity _, cluster identity 4711
[  530.746484][T22359] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  530.791940][T22361] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  530.824521][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4010'.
[  530.929929][T22364] gtp2: entered promiscuous mode
[  530.930149][T22364] gtp2: entered allmulticast mode
[  531.388723][T22378] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4013'.
[  531.426370][T22378] syzkaller0: entered promiscuous mode
[  531.426396][T22378] syzkaller0: entered allmulticast mode
[  531.445725][T22378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.563618][T22378] tipc: Resetting bearer <eth:syzkaller0>
[  531.587494][T22371] ip_tables: iptables: counters copy to user failed while replacing table
[  531.590731][ T5620] Bluetooth: hci3: link tx timeout
[  531.590753][ T5620] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  531.660484][T22377] tipc: Resetting bearer <eth:syzkaller0>
[  531.711424][T22377] tipc: Disabling bearer <eth:syzkaller0>
[  532.065868][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'.
[  532.066234][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4017'.
[  532.366296][T22402] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes.
[  532.419376][T22406] netlink: 'syz.0.4022': attribute type 12 has an invalid length.
[  532.908981][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  532.909198][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  532.909406][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  532.954031][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  532.954278][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  532.954481][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4024'.
[  533.031004][T22424] netlink: 'syz.1.4026': attribute type 5 has an invalid length.
[  533.693952][ T5620] Bluetooth: hci3: command 0x0405 tx timeout
[  534.137211][T22464] netlink: 'syz.3.4038': attribute type 1 has an invalid length.
[  534.337683][ T5620] Bluetooth: hci1: command 0x040f tx timeout
[  534.399730][T22473] netlink: 'syz.5.4039': attribute type 4 has an invalid length.
[  534.470835][T22464] bond7: entered promiscuous mode
[  534.471269][T22464] 8021q: adding VLAN 0 to HW filter on device bond7
[  534.968262][T22494] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  536.060140][T22522] syzkaller0: entered promiscuous mode
[  536.060170][T22522] syzkaller0: entered allmulticast mode
[  536.521347][T22547] __nla_validate_parse: 69 callbacks suppressed
[  536.521370][T22547] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4057'.
[  536.580113][T22553] ip_tables: iptables: counters copy to user failed while replacing table
[  536.671659][T22551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  536.713696][T22551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4058'.
[  536.831759][T22550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.331124][T22577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'.
[  540.520205][T22577] team0: Port device team_slave_0 removed
[  540.560260][T22585] wg1 speed is unknown, defaulting to 1000
[  540.700980][T22585] wg1 speed is unknown, defaulting to 1000
[  540.927963][T22585] wg1 speed is unknown, defaulting to 1000
[  541.315337][ T1695] block nbd2: Possible stuck request ffff8880274e5080: control (read@0,4096B). Runtime 30 seconds
[  542.450985][T22585] infiniband syz2: set active
[  542.451009][T22585] infiniband syz2: added wg1
[  542.454235][T14984] wg1 speed is unknown, defaulting to 1000
[  542.480916][T22585] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  542.491879][T22585] infiniband syz2: Couldn't open port 1
[  542.516016][T22585] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  542.516370][T22585] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  542.516434][T22585] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  542.621712][T22585] RDS/IB: syz2: added
[  542.621773][T22585] smc: adding ib device syz2 with port count 1
[  542.621794][T22585] smc:    ib device syz2 port 1 has no pnetid
[  542.621904][ T5753] wg1 speed is unknown, defaulting to 1000
[  542.651035][T22585] wg1 speed is unknown, defaulting to 1000
[  542.705579][T22644] netlink: 'syz.3.4082': attribute type 1 has an invalid length.
[  542.705604][T22644] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.4082'.
[  542.870385][T22645] netlink: 'syz.2.4080': attribute type 2 has an invalid length.
[  543.090428][T22655] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  543.090578][T18089] IPVS: starting estimator thread 0...
[  543.172290][T22659] IPVS: using max 24 ests per chain, 57600 per kthread
[  543.361912][T22665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4087'.
[  543.857511][T22585] wg1 speed is unknown, defaulting to 1000
[  544.253583][T22694] veth0_to_hsr: entered promiscuous mode
[  544.253608][T22694] veth0_to_hsr: entered allmulticast mode
[  544.506287][T12183] IPVS: starting estimator thread 0...
[  544.593590][T22708] IPVS: using max 26 ests per chain, 62400 per kthread
[  544.719836][T22585] wg1 speed is unknown, defaulting to 1000
[  544.749062][T22714] veth0: mtu less than device minimum
[  545.640069][T22585] wg1 speed is unknown, defaulting to 1000
[  545.837631][T22749] netlink: 'syz.0.4106': attribute type 11 has an invalid length.
[  545.837657][T22749] netlink: 'syz.0.4106': attribute type 11 has an invalid length.
[  545.837672][T22749] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4106'.
[  545.927958][T22745] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4105'.
[  545.927989][T22745] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4105'.
[  545.980156][T22757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4109'.
[  546.321487][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'.
[  546.395498][T22763] netlink: 'syz.0.4112': attribute type 1 has an invalid length.
[  546.395522][T22763] netlink: 'syz.0.4112': attribute type 2 has an invalid length.
[  546.855065][T22779] ip_tables: iptables: counters copy to user failed while replacing table
[  546.954546][T22585] wg1 speed is unknown, defaulting to 1000
[  547.723348][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4122'.
[  547.729183][T22585] wg1 speed is unknown, defaulting to 1000
[  547.776865][T22798] ip_tables: iptables: counters copy to user failed while replacing table
[  548.165295][T22801] x_tables: duplicate underflow at hook 1
[  548.373656][T22803] syzkaller0: entered promiscuous mode
[  548.373871][T22803] syzkaller0: entered allmulticast mode
[  548.429514][T22812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4125'.
[  548.641773][T22585] wg1 speed is unknown, defaulting to 1000
[  548.649940][T22819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4127'.
[  548.729410][T22818] syzkaller0: entered promiscuous mode
[  548.729620][T22818] syzkaller0: entered allmulticast mode
[  548.781908][T22812] netlink: 'syz.2.4125': attribute type 5 has an invalid length.
[  548.916970][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4127'.
[  548.916997][T22826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4127'.
[  549.048235][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4129'.
[  549.227998][T22829] siw: device registration error -23
[  549.460140][T22836] netlink: 'syz.2.4131': attribute type 1 has an invalid length.
[  549.696695][ T5632] Bluetooth: hci2: command 0x0406 tx timeout
[  552.416313][T22837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  552.667231][T22887] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  552.743849][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.783497][T22887] bond4: entered promiscuous mode
[  552.785043][T22887] 8021q: adding VLAN 0 to HW filter on device bond4
[  552.816722][T22894] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4149'.
[  552.880922][T22891] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  553.064791][T22887] 8021q: adding VLAN 0 to HW filter on device bond4
[  553.067202][T22887] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  553.067228][T22887] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  553.129180][T22887] bond4: (slave wireguard1): making interface the new active one
[  553.129208][T22887] wireguard1: entered promiscuous mode
[  553.146845][T22887] bond4: (slave wireguard1): Enslaving as an active interface with an up link
[  553.175112][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'.
[  553.193287][T22902] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4152'.
[  553.497131][ T5620] block nbd3: Receive control failed (result -32)
[  554.448179][T22926] gre1: entered promiscuous mode
[  554.472550][T22931] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  554.478744][T22928] syzkaller1: entered promiscuous mode
[  554.478771][T22928] syzkaller1: entered allmulticast mode
[  554.651342][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4163'.
[  554.682485][T22941] tipc: Started in network mode
[  554.682548][T22941] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  554.692282][T22941] tipc: Enabled bearer <udp:syz0>, priority 10
[  554.854927][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  554.855242][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  554.856066][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  554.858625][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  554.858892][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  554.859205][T22946] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4164'.
[  555.018750][T22955] netlink: 'syz.5.4168': attribute type 4 has an invalid length.
[  555.041776][T22955] geneve3: entered promiscuous mode
[  555.053131][T18088] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 36184 - 0
[  555.056659][T22955] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  555.056781][ T2315] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 36184 - 0
[  555.059288][ T2315] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 36184 - 0
[  555.668089][T22976] netlink: 'syz.5.4174': attribute type 2 has an invalid length.
[  555.731071][T22966] syzkaller0: entered promiscuous mode
[  555.731099][T22966] syzkaller0: entered allmulticast mode
[  555.858114][T22981] ip6t_ah: unknown flags 5
[  555.878730][ T5753] tipc: Node number set to 4269801488
[  560.238409][T23000] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.238845][T23000] bond0: (slave gtp1): The slave device specified does not support setting the MAC address
[  560.263340][T23000] bond0: (slave gtp1): Error -95 calling set_mac_address
[  560.761773][T23005] syzkaller0: entered promiscuous mode
[  560.761870][T23005] syzkaller0: entered allmulticast mode
[  561.014131][T23029] __nla_validate_parse: 31 callbacks suppressed
[  561.014189][T23029] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4184'.
[  562.353194][ T8049] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  563.005228][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  566.287596][T23053] netlink: 'syz.1.4188': attribute type 2 has an invalid length.
[  566.559528][T23059] syzkaller1: entered promiscuous mode
[  566.559590][T23059] syzkaller1: entered allmulticast mode
[  566.597025][T23064] netlink: Setting conntrack mark requires 'commit' flag.
[  566.597060][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.600226][T23064] netlink: Setting conntrack mark requires 'commit' flag.
[  566.600262][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.608544][T23064] netlink: Setting conntrack mark requires 'commit' flag.
[  566.608618][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.621083][T23064] netlink: Setting conntrack mark requires 'commit' flag.
[  566.621115][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.639654][T23064] netlink: Setting conntrack mark requires 'commit' flag.
[  566.669717][T23064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.029787][T23060] 
[  567.032183][T23060] ======================================================
[  567.039227][T23060] WARNING: possible circular locking dependency detected
[  567.046287][T23060] syzkaller #0 Not tainted
[  567.050726][T23060] ------------------------------------------------------
[  567.057769][T23060] syz.0.4190/23060 is trying to acquire lock:
[  567.063865][T23060] ffff888026272178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  567.073351][T23060] 
[  567.073351][T23060] but task is already holding lock:
[  567.080745][T23060] ffff888026271c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480
[  567.090990][T23060] 
[  567.090990][T23060] which lock already depends on the new lock.
[  567.090990][T23060] 
[  567.101421][T23060] 
[  567.101421][T23060] the existing dependency chain (in reverse order) is:
[  567.110468][T23060] 
[  567.110468][T23060] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  567.119100][T23060]        blk_alloc_queue+0x544/0x690
[  567.124427][T23060]        __blk_mq_alloc_disk+0x194/0x390
[  567.130111][T23060]        nbd_dev_add+0x494/0xb60
[  567.135106][T23060]        nbd_init+0x168/0x1f0
[  567.139839][T23060]        do_one_initcall+0x250/0x870
[  567.145162][T23060]        do_initcall_level+0x10a/0x1a0
[  567.150681][T23060]        do_initcalls+0x59/0xa0
[  567.155580][T23060]        kernel_init_freeable+0x29d/0x3e0
[  567.161337][T23060]        kernel_init+0x22/0x1d0
[  567.166221][T23060]        ret_from_fork+0x514/0xb70
[  567.171360][T23060]        ret_from_fork_asm+0x1a/0x30
[  567.176695][T23060] 
[  567.176695][T23060] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  567.183953][T23060]        fs_reclaim_acquire+0x71/0x100
[  567.189460][T23060]        __kmalloc_cache_node_noprof+0x66/0x620
[  567.195731][T23060]        create_worker+0x112/0x7c0
[  567.200883][T23060]        workqueue_prepare_cpu+0xe4/0x170
[  567.206637][T23060]        cpuhp_invoke_callback+0x434/0x810
[  567.212478][T23060]        _cpu_up+0x2ce/0x5b0
[  567.217105][T23060]        cpu_up+0x1d2/0x220
[  567.221649][T23060]        cpuhp_bringup_mask+0xb2/0x1a0
[  567.227147][T23060]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  567.233551][T23060]        bringup_nonboot_cpus+0x17/0x30
[  567.239138][T23060]        smp_init+0x32/0x110
[  567.243860][T23060]        kernel_init_freeable+0x27f/0x3e0
[  567.249608][T23060]        kernel_init+0x22/0x1d0
[  567.254485][T23060]        ret_from_fork+0x514/0xb70
[  567.259631][T23060]        ret_from_fork_asm+0x1a/0x30
[  567.264968][T23060] 
[  567.264968][T23060] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  567.272744][T23060]        cpus_read_lock+0x42/0x160
[  567.277923][T23060]        static_key_slow_inc+0x12/0x30
[  567.283416][T23060]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  567.289699][T23060]        nbd_genl_foreach_sock+0x265/0x450
[  567.295534][T23060]        nbd_genl_reconfigure+0xbbb/0x1040
[  567.301368][T23060]        genl_family_rcv_msg_doit+0x233/0x340
[  567.307483][T23060]        genl_rcv_msg+0x614/0x7a0
[  567.312549][T23060]        netlink_rcv_skb+0x226/0x4a0
[  567.317915][T23060]        genl_rcv+0x28/0x40
[  567.322485][T23060]        netlink_unicast+0x7bd/0x940
[  567.327811][T23060]        netlink_sendmsg+0x813/0xb40
[  567.333127][T23060]        sock_sendmsg_nosec+0x13a/0x180
[  567.338716][T23060]        ____sys_sendmsg+0x54e/0x850
[  567.344046][T23060]        ___sys_sendmsg+0x2a5/0x360
[  567.349284][T23060]        __x64_sys_sendmsg+0x1b1/0x290
[  567.355035][T23060]        do_syscall_64+0x166/0x520
[  567.360204][T23060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.366646][T23060] 
[  567.366646][T23060] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  567.374337][T23060]        __mutex_lock+0x19d/0x1550
[  567.379493][T23060]        nbd_queue_rq+0x373/0xff0
[  567.384551][T23060]        blk_mq_dispatch_rq_list+0x499/0x1990
[  567.390652][T23060]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  567.397552][T23060]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  567.404097][T23060]        blk_mq_run_work_fn+0x16c/0x300
[  567.409687][T23060]        process_scheduled_works+0xc3d/0x1630
[  567.415800][T23060]        worker_thread+0xa47/0xfb0
[  567.420981][T23060]        kthread+0x38b/0x480
[  567.425607][T23060]        ret_from_fork+0x514/0xb70
[  567.430740][T23060]        ret_from_fork_asm+0x1a/0x30
[  567.436067][T23060] 
[  567.436067][T23060] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  567.443321][T23060]        __mutex_lock+0x19d/0x1550
[  567.448476][T23060]        nbd_queue_rq+0xc1/0xff0
[  567.453453][T23060]        blk_mq_dispatch_rq_list+0x499/0x1990
[  567.459561][T23060]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  567.466459][T23060]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  567.472999][T23060]        blk_mq_run_work_fn+0x16c/0x300
[  567.478589][T23060]        process_scheduled_works+0xc3d/0x1630
[  567.484714][T23060]        worker_thread+0xa47/0xfb0
[  567.489869][T23060]        kthread+0x38b/0x480
[  567.494485][T23060]        ret_from_fork+0x514/0xb70
[  567.499629][T23060]        ret_from_fork_asm+0x1a/0x30
[  567.504958][T23060] 
[  567.504958][T23060] -> #1 (set->srcu){.+.+}-{0:0}:
[  567.512124][T23060]        __synchronize_srcu+0xc9/0x2f0
[  567.517621][T23060]        elevator_switch+0x1e8/0x7b0
[  567.522935][T23060]        elevator_change+0x2fa/0x480
[  567.528253][T23060]        elevator_set_default+0x375/0x440
[  567.534007][T23060]        blk_register_queue+0x3f3/0x4e0
[  567.539626][T23060]        __add_disk+0x6b8/0xdb0
[  567.544518][T23060]        add_disk_fwnode+0x100/0x3a0
[  567.549845][T23060]        nbd_dev_add+0x733/0xb60
[  567.554817][T23060]        nbd_init+0x168/0x1f0
[  567.559575][T23060]        do_one_initcall+0x250/0x870
[  567.564932][T23060]        do_initcall_level+0x10a/0x1a0
[  567.570431][T23060]        do_initcalls+0x59/0xa0
[  567.575321][T23060]        kernel_init_freeable+0x29d/0x3e0
[  567.581078][T23060]        kernel_init+0x22/0x1d0
[  567.585957][T23060]        ret_from_fork+0x514/0xb70
[  567.591099][T23060]        ret_from_fork_asm+0x1a/0x30
[  567.596434][T23060] 
[  567.596434][T23060] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  567.604297][T23060]        __lock_acquire+0x164c/0x2de0
[  567.609694][T23060]        lock_acquire+0x115/0x350
[  567.614784][T23060]        __mutex_lock+0x19d/0x1550
[  567.620022][T23060]        elevator_change+0x1af/0x480
[  567.625334][T23060]        elevator_set_none+0xb5/0x140
[  567.630727][T23060]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  567.637098][T23060]        nbd_start_device+0x189/0xb30
[  567.642498][T23060]        nbd_genl_connect+0x167d/0x1cd0
[  567.648077][T23060]        genl_family_rcv_msg_doit+0x233/0x340
[  567.654189][T23060]        genl_rcv_msg+0x614/0x7a0
[  567.659265][T23060]        netlink_rcv_skb+0x226/0x4a0
[  567.664598][T23060]        genl_rcv+0x28/0x40
[  567.669140][T23060]        netlink_unicast+0x7bd/0x940
[  567.674463][T23060]        netlink_sendmsg+0x813/0xb40
[  567.679788][T23060]        sock_sendmsg_nosec+0x13a/0x180
[  567.685369][T23060]        ____sys_sendmsg+0x54e/0x850
[  567.690691][T23060]        ___sys_sendmsg+0x2a5/0x360
[  567.695933][T23060]        __x64_sys_sendmsg+0x1b1/0x290
[  567.701436][T23060]        do_syscall_64+0x166/0x520
[  567.706584][T23060]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.713025][T23060] 
[  567.713025][T23060] other info that might help us debug this:
[  567.713025][T23060] 
[  567.723278][T23060] Chain exists of:
[  567.723278][T23060]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53
[  567.723278][T23060] 
[  567.737062][T23060]  Possible unsafe locking scenario:
[  567.737062][T23060] 
[  567.744536][T23060]        CPU0                    CPU1
[  567.749928][T23060]        ----                    ----
[  567.755319][T23060]   lock(&q->q_usage_counter(io)#53);
[  567.760734][T23060]                                lock(fs_reclaim);
[  567.767276][T23060]                                lock(&q->q_usage_counter(io)#53);
[  567.775210][T23060]   lock(&q->elevator_lock);
[  567.779866][T23060] 
[  567.779866][T23060]  *** DEADLOCK ***
[  567.779866][T23060] 
[  567.788120][T23060] locks held by syz.0.4190/23060: 6, last CPU#0:
[  567.794478][T23060]  #0: ffffffff902c5c88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  567.802733][T23060]  #1: ffffffff902c5ac0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  567.811765][T23060]  #2: ffff8880274b19c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  567.823234][T23060]  #3: ffff8880274b18d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  567.834261][T23060]  #4: ffff888026271c50 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480
[  567.844965][T23060]  #5: ffff888026271c88 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  567.855923][T23060] 
[  567.855923][T23060] stack backtrace:
[  567.861856][T23060] CPU: 0 UID: 0 PID: 23060 Comm: syz.0.4190 Not tainted syzkaller #0 PREEMPT(full) 
[  567.871259][T23060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  567.881454][T23060] Call Trace:
[  567.884786][T23060]  <TASK>
[  567.887745][T23060]  dump_stack_lvl+0xe8/0x150
[  567.892414][T23060]  print_circular_bug+0x2e2/0x300
[  567.897485][T23060]  check_noncircular+0x12f/0x150
[  567.902470][T23060]  __lock_acquire+0x164c/0x2de0
[  567.907369][T23060]  lock_acquire+0x115/0x350
[  567.911909][T23060]  ? elevator_change+0x1af/0x480
[  567.916897][T23060]  __mutex_lock+0x19d/0x1550
[  567.921542][T23060]  ? elevator_change+0x1af/0x480
[  567.926525][T23060]  ? rcu_is_watching+0x16/0xb0
[  567.931334][T23060]  ? elevator_change+0x1af/0x480
[  567.936330][T23060]  ? __pfx___mutex_lock+0x10/0x10
[  567.941401][T23060]  ? enable_work+0x17f/0x230
[  567.946045][T23060]  ? lockdep_hardirqs_on+0x7b/0x110
[  567.951286][T23060]  ? __cancel_work_sync+0xf8/0x110
[  567.956448][T23060]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  567.961949][T23060]  elevator_change+0x1af/0x480
[  567.966783][T23060]  elevator_set_none+0xb5/0x140
[  567.971674][T23060]  ? __pfx_elevator_set_none+0x10/0x10
[  567.977167][T23060]  ? xa_load+0x1db/0x210
[  567.981453][T23060]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  567.987291][T23060]  ? kernfs_add_one+0xfc/0x6f0
[  567.992095][T23060]  ? nbd_start_device+0x17d/0xb30
[  567.997154][T23060]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  568.003445][T23060]  ? sysfs_add_file_mode_ns+0x258/0x300
[  568.009042][T23060]  nbd_start_device+0x189/0xb30
[  568.013934][T23060]  ? device_create_file+0xf4/0x1b0
[  568.019085][T23060]  nbd_genl_connect+0x167d/0x1cd0
[  568.024147][T23060]  ? __pfx_nbd_genl_connect+0x10/0x10
[  568.029558][T23060]  ? rcu_is_watching+0x16/0xb0
[  568.034384][T23060]  ? __nla_parse+0x40/0x60
[  568.038849][T23060]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  568.045233][T23060]  genl_family_rcv_msg_doit+0x233/0x340
[  568.050825][T23060]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  568.056948][T23060]  ? __lock_acquire+0x747/0x2de0
[  568.061928][T23060]  genl_rcv_msg+0x614/0x7a0
[  568.066472][T23060]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.071539][T23060]  ? __pfx_nbd_genl_connect+0x10/0x10
[  568.076959][T23060]  netlink_rcv_skb+0x226/0x4a0
[  568.081771][T23060]  ? __pfx_genl_rcv_msg+0x10/0x10
[  568.086844][T23060]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  568.092174][T23060]  ? down_read+0x2be/0x330
[  568.096640][T23060]  genl_rcv+0x28/0x40
[  568.100655][T23060]  netlink_unicast+0x7bd/0x940
[  568.105500][T23060]  netlink_sendmsg+0x813/0xb40
[  568.110302][T23060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.115632][T23060]  ? apparmor_socket_sendmsg+0x98/0x360
[  568.121213][T23060]  ? __pfx_netlink_sendmsg+0x10/0x10
[  568.126526][T23060]  sock_sendmsg_nosec+0x13a/0x180
[  568.131852][T23060]  ____sys_sendmsg+0x54e/0x850
[  568.136658][T23060]  ? __pfx_____sys_sendmsg+0x10/0x10
[  568.141992][T23060]  ? import_iovec+0x73/0xa0
[  568.146542][T23060]  ___sys_sendmsg+0x2a5/0x360
[  568.151266][T23060]  ? __lock_acquire+0x747/0x2de0
[  568.156269][T23060]  ? __pfx____sys_sendmsg+0x10/0x10
[  568.161508][T23060]  ? futex_wake+0x51b/0x5f0
[  568.166071][T23060]  ? __fget_files+0x2a/0x420
[  568.170706][T23060]  ? __fget_files+0x3a2/0x420
[  568.175429][T23060]  __x64_sys_sendmsg+0x1b1/0x290
[  568.180405][T23060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  568.185915][T23060]  do_syscall_64+0x166/0x520
[  568.190557][T23060]  ? trace_irq_disable+0x3b/0x140
[  568.195647][T23060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.201747][T23060]  ? clear_bhb_loop+0x70/0xc0
[  568.206553][T23060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.212479][T23060] RIP: 0033:0x7f3ca9f9e159
[  568.216930][T23060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.236576][T23060] RSP: 002b:00007f3caae7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  568.245028][T23060] RAX: ffffffffffffffda RBX: 00007f3caa225fa0 RCX: 00007f3ca9f9e159
[  568.253032][T23060] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000b
[  568.261038][T23060] RBP: 00007f3caa03506b R08: 0000000000000000 R09: 0000000000000000
[  568.269048][T23060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  568.277053][T23060] R13: 00007f3caa226038 R14: 00007f3caa225fa0 R15: 00007ffec4a8c278
[  568.285067][T23060]  </TASK>
[  568.485984][T23074] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4195'.
[  568.486042][T23074] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4195'.
[  568.642804][ T5620] block nbd4: Receive control failed (result -32)
[  568.643264][ T5620] block nbd4: Receive control failed (result -32)
[  568.665301][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'.
[  571.691025][ T4985] udevd[4985]: worker [21909] /devices/virtual/block/nbd2 is taking a long time
[  571.932882][ T1695] block nbd2: Possible stuck request ffff8880274e5080: control (read@0,4096B). Runtime 60 seconds