last executing test programs:

1m40.186435192s ago: executing program 4 (id=3244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a)
close(0x3)

1m40.008676139s ago: executing program 4 (id=3246):
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0x10, 0x2, 0x404)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r2, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)

1m38.801822694s ago: executing program 4 (id=3253):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

1m38.555935575s ago: executing program 4 (id=3256):
r0 = socket(0x28, 0x0, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0) (async)
listen(r0, 0x0)
socket(0x21, 0x6, 0x42) (async)
r1 = socket(0x21, 0x6, 0x42)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x28, &(0x7f0000000340)=ANY=[@ANYBLOB="ddf1704433c5b1ee0c41c601d2d163b8395715570303eee95cb293d536e8dc7947554c2e400cc35b152bcace7af65b0c4418421fdd6e9928f362dd61b0bf6c0f87"], 0x128}, 0x8000) (async)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x28, &(0x7f0000000340)=ANY=[@ANYBLOB="ddf1704433c5b1ee0c41c601d2d163b8395715570303eee95cb293d536e8dc7947554c2e400cc35b152bcace7af65b0c4418421fdd6e9928f362dd61b0bf6c0f87"], 0x128}, 0x8000)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x2d, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, 0x0, 0x2d, 0x0, @void}, 0x10)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r5, @ANYRES16=r3, @ANYBLOB="944c1be47985a68973c7f33a3b2298af92c24bf546c6edcb6343272683c0f62984cdc92ca3a2e6d023411edeb1529d4e7f43997e3cfb7dcee3bb", @ANYRES32], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES8=r5, @ANYRES16=r3, @ANYBLOB="944c1be47985a68973c7f33a3b2298af92c24bf546c6edcb6343272683c0f62984cdc92ca3a2e6d023411edeb1529d4e7f43997e3cfb7dcee3bb", @ANYRES32], 0x50)
socket(0xa, 0x3, 0xff)

1m38.005965512s ago: executing program 4 (id=3260):
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x701, 0x2070bd24, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x4000)
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6}, 0x94)
r2 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x1d, 0x3, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r6, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x4, 0x12, &(0x7f0000000580)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @exit, @tail_call, @jmp={0x5, 0x1, 0x1, 0x7, 0x3, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x0, 0xb, 0x9, 0x30, 0xfffffffffffffff0}], &(0x7f0000000640)='syzkaller\x00', 0x4c2, 0x2d, &(0x7f00000007c0)=""/45, 0x41100, 0x18, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x10, 0x656, 0x7}, 0x10, 0x0, r3, 0x5, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8], &(0x7f0000000b80)=[{0x2, 0x5, 0xf, 0x7}, {0x5, 0x3, 0xe, 0x5}, {0x4, 0x1}, {0x0, 0x2, 0x10, 0x4}, {0x2, 0x2, 0x7, 0xa}]}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={<r9=>r2, &(0x7f00000001c0)='GPL\x00', 0x4040, &(0x7f0000000200)={@_ha_fsid={[0x80000000, 0xe30]}, {0xcef6, 0xe7, 0x1, 0x495ceef}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x6})
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000300))
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x4, 0x4, 0x74, 0x20044, 0xffffffffffffffff, 0x8}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c773a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@cgroup=r10, r10, 0x24, 0x0, 0x0, @void, @value=r9}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="2f000000000004000034b77d721af0f9aca5040b29f348512946978851b9ff67dc16bd8d7ded158e5baa1bb783897dadc582b6b65761105b7b5d4a"], 0x20)

1m37.336624161s ago: executing program 4 (id=3266):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4000000000000001a0100"], 0x100}, 0x0)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x21)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="00000000080003"], 0x38}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x60, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e244d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5860ea01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1m21.92238168s ago: executing program 32 (id=3266):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e4000000000000001a0100"], 0x100}, 0x0)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000050000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000681ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000034000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x21)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="00000000080003"], 0x38}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x60, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e244d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5860ea01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

8.020769636s ago: executing program 2 (id=3805):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$tun(r2, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "0200be", 0x4c, 0x2f, 0xff, @local, @mcast2, {[@routing={0x1d, 0x0, 0x1, 0x7}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x82) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf25070000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x2000c02c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0)

2.56929669s ago: executing program 0 (id=3844):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x48) (async)
unshare(0x22020400) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000000b40)=0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007babf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000760800000000000085000000c6000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.493459151s ago: executing program 3 (id=3845):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0}) (rerun: 64)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x13, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @multicast}, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

2.406151796s ago: executing program 0 (id=3847):
r0 = socket(0x1e, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESDEC=r3], 0x20}}, 0x4000000)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="21bfa8b7", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf252100000005002000010000000c0005000201aaaaaaaaaaaa09001f00706879320000000009001f0070687933000000000500200000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000141}, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r6 = socket(0x23, 0x6, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xfffffffffffffff0, 0x0, &(0x7f00000004c0)="0800000000000000000cb3f7b99ded76a89172464f1928d5b1015ecb719d61279323a58dc90ac9dcb208ccde76646031ef6c59d0c748c89f8c878faf3808aebbec4284acc6b79bfe58464ad78b87c47f362397bb8e63fd2b18712f0d94dd0c9f4b00bc3dd4cb001c9b116c1ea8c01be5edd6761984abfda8c38f994e2ac23e5bfe467035f6769890fc41d08ca433735204dc6765ef9a530665c9580e132af6454faad021c2436047b78ecdde", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) (async)
write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) (async)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xdf300000, 0xfffffff8, 0xfff, 0x3ff, 0x4d, 0x800003, 0x2}, 0x1c) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.265327892s ago: executing program 0 (id=3848):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa1953d3", 0x4}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
recvmmsg(r2, &(0x7f0000006540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/19, 0x13}, 0x10}], 0x1, 0x10022, 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

2.213636958s ago: executing program 3 (id=3849):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)

2.206764414s ago: executing program 5 (id=3850):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000088000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="25d1c2bbefd45ecfe7e891304ed0", 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)

2.101436164s ago: executing program 5 (id=3851):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

2.100955025s ago: executing program 3 (id=3852):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14)
syz_emit_ethernet(0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbb3647c71e74c70011aa01cb06c30a6000d60c5ea81893000000"], 0x0)
socket$kcm(0x2, 0x3, 0x2)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000e9ff00000000"], 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702060008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xfef9c10f29fe32a0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x10)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000001001000001010000dc00000000000000418f4e0ce78c905ae5877d7827030a58746b0616e2a1d6fcb3c6b1df2b0a171ab6b4d67650fca6af2d8e5922c80dbf968655f20d5c8c6377a1d793f0077e7f7a30b6f2c17c45f987db0a8d70ef7af9506026b445298f2de85321a15b7d3c09f931a79eee3feabe632ab987865788b277dfd438df81d9848762fe195539a37f754cd348aa36f0ca87d8fe4b5a6808f1417b8707e1af49f539ab1991"], 0x18}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6)
sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdf250400000008000100", @ANYRES32=0x0, @ANYRESHEX=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x400c001)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb08e24000001c0068000000119078000000000000000000004e200008907828bc202cb5b4997b630be072426484903573daa81fd29c4680ac2fbba2f2463d569bffdfcdddf8df1ac2fe44a4289c659bc351d35faf83b71c129d4e98a3196abaafba82d4b1111bdb3cf2fb9e66ea9845865938b99394bc544400fb981bac58ffc1b359c4d17cadcb70c5371068"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000540)}, 0x3b61}, {{&(0x7f0000000380)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/118, 0x76}], 0x3, &(0x7f0000000700)=""/182, 0xb6}, 0x4}], 0x2, 0x0, 0x0)

2.043277388s ago: executing program 1 (id=3853):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000140), 0x4) (async)
setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000140), 0x4)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000340)={'team0\x00'}) (async)
ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000340)={'team0\x00'})
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000000180)={{0x6, @private=0xa010100, 0x4e22, 0x4, 'lblcr\x00', 0x1a, 0x100, 0x7c}, {@multicast2, 0x4e24, 0x2000, 0x7fff, 0x98, 0x8}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000000180)={{0x6, @private=0xa010100, 0x4e22, 0x4, 'lblcr\x00', 0x1a, 0x100, 0x7c}, {@multicast2, 0x4e24, 0x2000, 0x7fff, 0x98, 0x8}}, 0x44)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3"], 0x1d7)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.947932456s ago: executing program 1 (id=3854):
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x4, 0xfffffffe, 0xffffffc4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1002, 0x0, 0x2}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r2 = socket(0x8, 0x4, 0x3)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0x400261f2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0})

1.532520776s ago: executing program 1 (id=3855):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
syz_emit_ethernet(0xb2, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8967e4e40800406500a400640000cc1190780a010101ac141411441c79d1ac1e0101000000050a01010100000008e000000100000006441009a0000000020000003300007c2c4e214e200064907802000000010000000000000072e35240000000000000000000000000000000000000000000000000000000004b4450edff62170e8fff0ee8ffad4543128a133d1adfb082814331461c5100fffeffffffffffe90000000000523b21e2f7725b895b78acf2250ada611b73d664af689b724e91204100000000"], 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0xffffffffffffffff, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
sendmsg$can_j1939(r3, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x44015)
r7 = socket$inet(0x2, 0xa, 0x8)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x2799, @broadcast}, {0x2, 0x4e20, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x3000000000, 0x5})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056000000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b73430000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}}, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r13, @ANYBLOB="aecaea093ee0d1978bc85c7a2ab7df20eaba30c3ee1ea10fd1610057ba860e450e2270ac9206e3be8f64be0133e0193ef12d099d1a13ce100b750a749a5ef7e921bd4596f89953582ad8"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.514312997s ago: executing program 2 (id=3856):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (rerun: 32)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async, rerun: 32)
getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) (async, rerun: 32)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) (async)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000429bd70000e00000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x44810}, 0x800)
unshare(0x2a020400)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 64)
connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) (async)
sendmmsg$alg(r8, &(0x7f0000002ac0)=[{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="90f845d154d3936a1dc4af65d48a907fa18e11589cf60755dba8aa7158a6a75babb5b157f5aaf1d68cf122fea7527be69dd1262780db49dbc20de3638b392778257d58b08c6715edd2517d02b1d0c9e89a845d3e3af40e7d8b0e02eab64d6d3397690cb3b22be68c4c4a77a93e3a5a57130c52be49076cb202ec05634dd279cb6c5ff6db5c303e2710913f76fe6fae8c918c761032fcb3518443890d65f420fbcdd3dbc28f4c04956ed0f1ef8546ab8d554e2bbf4db98146cfb69efbba0e55e9c5da18d611c5cd60e8fd1e17b500c8ec914a9282362bda78960804e7e9f068bb708f46798b554fb10c2e7477e6538a20", 0xf0}, {&(0x7f00000004c0)="05f024af41487db7abbd0f3b170bbb3cfbaab55e97c302e5d1b1a07e2b5ff82a82457ca1fb92dd21cb94ee6b79c1ebcabde42ee8c3f1814e5f9c1f1608ebc22ae04ad9d53fdf2ff86b740d1f70c470c5a6c832bf7bc3a94c3d74d412a053800bc8ada334844cdf2c28b5a96c080fd2785273befe496aacbf61f316176af30a82fde4ce4fbffff34848b4488260631b51f3f15ac1cd7c9cc14daec9bd", 0x9c}, {&(0x7f00000009c0)="c5b3660a4cc79e3fcc52b2c54617605d2e30cabafa582339e0fcfae1b86ce87e59b8dbe5b0f451a73e06e03c60f992c438635fb92aaa925ed94724ff88b9e44ea637558744b149f23854bcfc34808adafa7e99bf9512df48a1d98da81e5c689d2e0f209b5c67e5eb4a30783cefaa80234aeb84447507ddddd69c175c335d6eb54326b9810b0b6d615858f337b6", 0x8d}, {&(0x7f0000000b00)="690c02a58bbbd0f49fbcdb5d211d0f79862c8f93c3b32d76132c56da9c658668184e738a4506d69d874ac766d6070594964f25a45be74fe2cf32f0b1c4a399", 0x3f}, {&(0x7f0000000b40)="9c410d5249fb4400b345290d96202a15487b14d9f2151e17089b72c31fa46277a8d5a5dcb021f1ef9a2f2e1f328943d2cf3a3684db5fff4c87d642e3514a3e511a7bf71f191c417d237baee09bbd9b6925d93886672623964968154fd5f532", 0x5f}], 0x5, &(0x7f0000000c40)=[@assoc={0x18, 0x117, 0x4, 0x599}], 0x18}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d00)="cc6c2d9698c1261a9dcaf518da2a036794ae5542886936c36a89c60c00eb2d7b4c101a56695506cdaea4ec30435fbe5b2430ca37d7dbcf7624c944f8ace297a4058b45bd7cd991aa6c45f938878b55eb87e1f4088b780e58bb2447f711c19f38dc1d22c3d5dc88ac4318", 0x6a}], 0x1, 0x0, 0x0, 0x48000}, {0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000dc0)="fb7ea7226d097223cc8d838d484459027de2c3418f4104833b1fe934b480d26edc239bc41b97db3e3c9f306ac7d9ee1fbfeaf960de0f43313e055b4174bb371fa35d864a85ac517d14840ca88c66fcba9ff390f7300b048eb6fa2d289d74209a7696635c13ebf54f0043fe4544f6268f83bdb313100f282423a233268817ad61d2085a57f316db338171ef861105c5c29bf79057d874dc2c9ae8ca57e570f0d771bc83de8d900db45c4d940edb1bfc0981e9233b31b6e775a53453366550e8861a8c6a8afb3ba30b19827276ddbb0cd71d5c0931104251cfaf1da396c3fd9033262948debee1dc30382ae740e0350a8d3baf22f28f5b5fcdeffd6a64ae6931cba0802edb6412adde462abb2cd166366f8b7ca1f20df24de82aa96b592960a08d60ec97066748c2108fa880428da7b8891c5c6305d01d3c67f90c94cf26a237103cce63808d6da206e56b7b6e6dcb96d48529c69f98f9369683eb2193f253ccd3c2a587264655b05f7606ddfd5a8d25e53d102eb4bbaf2d02a2493f4346f73c4f9d19dedd28598a3cfe15b8513e90b21f24f1adbccf9bec80103192e176ac34f4e2cd81d329a8af12b07548caa46d4633bac306c12fa80c04d37569d58cfe96aaea1ca7bfa4578f1ffb0d5b77ccafb9fdd6ef819d97dffd1508574bc3f31ef6a04b23418cb27a0fbefc45b665bdde9b5b283e0472e126758b857ab35077a39f935348af0d1f0aa870e74567c06b7b17d5b7d1c48e99bf37dda97e0197fc488a00b38429848ab1f7d82de72544ead4cde6869974225c53cfa4049734f950e563ddd1146d25a508fa5a89bde27058d3e650a2e92356920f4ce7d6c70c6969ecac91522d4c33a80b1c022306786ad84c564ab585e617684bd9eb7e5f3a927d2dfc0209d9d44a4c97ed69a2d2b4061d3416fc3a977abced6c8ac84259562c0c75b0567caa3c3368201800041cda1f487366d4e772c5b1de2d37660dde9de53ec507bdca1d2019ad24f70d48d2bbadccb38e1a689d30b7cecc7bb2c22e34e38e7a108b05314774b472137f86f8de5dc8b9e19197db7b19018ea7aaa6c79d9cd5aeb50c17ac1c9103efdbd1d91a898e6b73ad217d7783e1c307804da43b7ccd1053023162225bc0ca3dcb50601bf4df52081fa85cbcb539c7dc81a7f6d17ee9427b07f310ce773304388407cfebd7142f5a729e8cf306fd8004d6e958f32190d9899f86d0d1c488683fee921292f4decfa05c380ef41f5926f5f446ac8f60a2ca79d9b7364c8c4e5f2b5b6894ffa2c83936b7195e6cdea46889fee77636a2daa8544552cb9d17072a8f727034bec8c3f8a2493580424ad42c9fb69beb26b0cd73144628796f990c068f8dad6ceadbf87363aa45cef9d2dcc9da279957871601a509032b34477b5910580979c87a8072744199357db3ed1710a0f223b119d95409fdaec35f18afa4c2b0a1581fef9141091ce26fd01e6e4c3a10f4ae4742f0168d021e983e2436283852277c5affb2497cc951d821e3c0f29fc852d3a8abdfe8fd49a86bcc9d4968b3d79a7eedac363bc7ddd62f321441595979c40982823b4fb8ceeec6e73c0126072874bd2fbfb48d0cf15f575895605e48a01d98111429f0275aa00fbc3778aa0b1dce222ed2d34b76985f6050ab6fe8a22fcf60ffc9f9f2ad9d14882dcb9184ad62e388a458a6faae8ea4e73ceff3aa1776774838402731b0a4349c62cc76f2e048a2daa264908919ca5efcae60860258e07b0c0da77c59266f65b31ea2431e73b644c96c0b8e3336bb063dc3ae0468c59b214bd21ea78de8249815e0b9e6563828a1f7408b3921c770d1963625ca8ed2f917ae37bdd4cf0711daac8df0371c71311e3c8103f0bdc91b1c87356fdb04f5b405e9aa8ee340c38c55570969587565b247d8cb8609a8a2dedb404747b74af75b8141458a480cea7deaeddc4fa64548344b9d240c11a7c366f06b3d6b1ec42d887618f9ac8cc4e10e22c179b3552a9b13f17db305f47bf94702fccc727040868cc4c4f3acbb16c67d8b6f2ec8de742126379e4bd7de284d203ba17c34c81288834b3b7bc6e880844d1575b800775ce9060989db2c1ff7d10ddc429082269ce7d58f4f6a03075b02f38295493bafe62db4480f0caf6fb690dd89c320fd47aba7729dbaff0ee636887b0ed1dadbb62ef8380c550a9ae29f30325a18582a8e13f6efc48c1ef058ac360e994a05d031d01d60a6839812b64732b156a8a55fcc00f698cb75c4970496c6cc4750ceb1c8ec5dff2ecd642b0157825dc1d20af780681558d6f8f1a5da12a650a23b59f6eb79fb98b3a130d6cc5128ccecba0b4a9ce0563de393df14229ea9e1fe2e8f739357175404d118abf5088e32e643a53aa6f5f2ede6992893eef1c5a2b3ce9a16da2417200ab1702ae883f39dadbe83702237ede530ba21872696f73ce622dd7d5bd03bfc417bfb3053f471e3a46d0a185ebffd069e1a9e041c4651721c9979082d32bab6f7bd213e4e7df36153d240b9235116fd1448d905a21c53a565b68fb182f40e8bfa4213a60994c52c624bc0ce85cea47081449631cc934464cebde5cf1c6f5c99ca66f1af797277950a47ab8cd289b0986cb32a156cdcb79865754ae87e40b73b62378153ca3a52cd090affd21a8e887e4b01ec0cb8ea7c1a73a18cf14eb891b64f16842bc7a28377e6d9602384be721247ea5e04a6d36302787aab43660d1274796496d0d1ebbac669349d6b78890b1c3eae60fbecb995e389f0acfdaf0ca73ac6b220313c90d0a0e2fa165160d17f9861503cb936d200dd8b890d2ab56b6c398254c6332ee9fde7a7238efb418858b1153a2787f4340293a51e216043f9d2ee8352209280168e546ee90be948b3bf7f7aea6add5415fb7fd1819b1f2d44774e9c601fb72eef3d8f46e1eb58c40a785ac77608fb268de2dba21b4b382a6ed4aefa5c70b5299ea021a75f400c6c0444ebe93469f80a7c65f92b53825a73003df9a878629acbfdba405c8673929426b255f56245678952b6609fe4e5b60113c694d3559ccfabe81dd632cbcc1b0544a855436e07dcd7feb01cc2eca992f4a21e1996e0fd154cd885b9ab1dd977445da6ddea3efb9a6698b7011738e56658d58839eaa3da62536e1657b694e72d66c5647e33b857fb44e2e173db3bf102cb5c6a33399227090b5f9fed9896d4a90a0ba850cc6268e8d2d8cbfb163797225259dd5c832ee51d908267e9d74a58c85535e7b988ace50e8445b8412309ffe60d60d4ca31eb14536047b2a93d55f2be571b2aa808bee7464e252b23b2235e4629ff07b9d5c2a65bf097718649ad34aaf7287572c898608dfc7b10bdbb20686d3e26ba3ca90a72b876fedeb8cc6b0da6ab8afe5241817e04b71fa21ff7eb38f587a2b1ad9708084efc4f7f19ac5fb26a84a68447d86a876862f04dec94189be88b61de72bc351d814f4f93bb646d797c1ca43a8bccc1f56af20471eb2ef50658b7fb9809146b91c6d5b865c10c170b00f4e053d43ad6af924dcf8889f9438535e6f87bb494b7e31f9dc75ac74c3b5e76c03d6eb11e9896cddc6e62176743da3ab71c8022b463333ad48c9f352fb4a30fab5e761c0be32ad1d62666f1d9844808d4fd70ae6ba8de219f55e59b3c395a60b88df8361a6da54b2661253d334a7fa729c354adfccef116304b0dd347401fa0cf81b11cf3fc4a9b90f32b16a56b0d77a4ca16f9c4e82be0a38acf7fa7c60ab121fea5352614e8c7ce727daf3a678b3aeb23d89ab26138acf4f4aee801e343fcfffffc78249f042edcdf2b2234f798ddd958547ea3481fb0060311f44bd42407ecd04cc7a6262d28fdb448be0ee7c8ed7d5a9ee2032f5bc167ac45cd71a2889b7e6a508e6b5ad31b198b1904a5f1cd0c13ba742729d6a55a7b6aa6bb55c55e8a7a8e4ebf229b94bb1d4ee41cb4f5ce5218df5705921baee3a662270d3441bb1f985efa6a61b0fd99d28b8eb66d141afbe4349860bfe6467d3fed7d1c85c1b1afcd397ba366c3a3220480c8c0d62d3c25bc23c032c84276b0aac54ebdd407f489b3d113211065b7c4eefb46230bdf6272faadde344bd91ada1ef8dd0261fd3463ad8b849fa5aaf6af265cccf388a7ad1811f6c8d6213b68490e801bba042d25e25515cbe05999a886d12018610c60296cfb07b8d23bcafbf5c64e6674cf68a290054ecb1c1703d61c2b16c1cc15b342632da70cf6d219dfa426db6d142a1b8d74777bacdf63823412e009cc3db8a9970f3e3018e79773a9d06b99a5c564585c51b297024d91b13f084ac9563bd4f0adeaec58000bf4401ce30ab009488a2d72eaf7536a23c68785a0e8174e56033b99731a30670ed5f276d352384d9bcd79150fdc3708d3376e79934dc87677600bf697a749ed105b49e241ea5e4814fc35a4fc632bd5decb5f0f531e0cddb601af42aba634f4c884439f8b508e3175d7aeee0ed170c9ea1875aaf00084e9b686a90608601d39ef4783cc95040bf7082ce30766a50a2ce344c6868eaa34be4f0483d44fa6aac3c8af4ab0d8d2def460a12b01f9eeac24accf85668ce8f1650bdfdcdf465a1c478f0442e479a7fb96689320646361d3dc320abae0ad17a38ba87cb55679974f165e419c2e28078ff1cd20fca6970e3ba93c879ba286af96bbd9bdfc3536aa0616a596b161460c5cbda20ff8f79aba3920a73222681a98526f182f531bef4496366e532149ec4c2de5bff98bd618dd6bbed269a90e905f6b3cf28c9a8528ca505f32aadcc9f4fdf384cb3cbf967126f6080fabf005008fce7bfc0aca88bddcba3067fa7943b6b6461911f7bcceda09a09e557882dd7217df449e8af2aad34269d088d05ef2eadd7ea16e783859d341dcc1a0b3eba6d016cccccd356808c489663cf425bb763054f8f29256f90d8821bacbd32e660e9fd41802ff3f049efba6cde06f85e95f8484c5f4c60913408cd2dfbbed39fbf20ad574ee1e0f403876592aa9fd6e7203ef2e325e8fd5a297ab8e63306ff8e92300491ff1fd2e4a69a19ec60de407829169d4150a8a425f8d3b8475232da96ccd8d5ccd28d356525c2442c62ff2c011c78ef605679934bdc7926af17699f0873429f6186b9d69919a1448f653554612797a290431a14be9ec38bfcc9ef0e3e9e514be542e58bbeaa982ca2701fd4fc8d30fb09917062a7db5801046def7ee80192bcd049d1c4d912fe90b70af7448ef562faa647a12179f02860b4b3c07f749f13fb354f5017a6ed0001c2fec1cea962d912e5ee1c903da656cf05e450754340e953d31aff34299a4b4bc15825016cef15f2d058edaae2d126f6b70b7f9e42fd960096d7c7a700f1ca0aa0ccf03710691f616cd7c1b0117a7de80860dedc4f401ae23ec816312aaf13e56522cdfbaa8c1f5df3d7f92292f43584ec372dc696d0e795a3920ea6722a5e858cc0427708de67589f236bcf3bbb5bef81ff939ada1bede3281aee44f8a365fe2814fb7361fb03cb9e7e68b9a1028a850f232daf1e8982810e4deee9e801f963fd67134a1452ff1707cf73e51b38563bbeace3320b8e36b6220b14659456cf91646b43118386c6659b2c497a824a90d54c942181d567fb59be75707ad9dc8ccd76a7ee7e4c13eef33371f32c010e0f6f7253e970def96bc60aa5bec948c97412621c63f8197ebc4dc5643a6b01073ad545b6afbd3f340083f71a419cc580155d83cf98857d61ab7dfaadcf4b3c9e35e7c6bac82ef18d6a7c3e29bb2840adc3044bc7b32a83a2555a7167fd85c203213f821255a45c947960ee13dbf97c7", 0x1000}, {&(0x7f0000001dc0)="2f32f7c6c9f2923f4e0029fea7af77c714b93e236298bce9781146fd2b310fe8a11d67acb1", 0x25}], 0x2, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x24000801}, {0x0, 0x0, &(0x7f0000002040), 0x0, &(0x7f0000002080)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xb5, "e1ed4e48611ced096bdebed3c4c1315a819bb67620fd28b210394a052b076c67447ac125cc009586afd90aaf6092402a242c9dee55c94566527cadb8cafcbad2e5ae294a9376452f694068e640b68844eeff0fd2546580ed42570aa5ddb17c3a1c7ac4c5301807431b5b1c912418181c3ad54e6e1128381b800307cb586b4f44618b1dae3c49377438f85de1759ad4d66e04812fbdda000a9aff3cfba787047df26bda282a4fadd64143cfd4913b526e3956537104"}, @iv={0x50, 0x117, 0x2, 0x3c, "c2f0d60a6aa334f1a7fe42cc4982e570e663e5c6307926efef185be6bc71e094c431fdfcfcb80953dfb43b7862254b6b7a8d7be0c888328f6669f738"}], 0x168, 0x80}, {0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002200)="29a4ae2dafcfe3ef7e4f8f80e1bcbb3a5eeed4f2f668ea4784da14988a5c66b2ca300a332cd082cef2880d7dac960624d6faee97ba485b607685f62f815fe6fc8937ccb4a2060b88e0290b45272c5b349acb63cc2d1a45616e5255ad236afc6f5723faa125164436ca041063df513415ff041b072d4ec73124ec2061c13dc3a402930664d733e08fefece38a5dd51adc501850b4982079726f9dad94fa9d61877e0c045f5e58d302a03595fff9c518c01fc54cee71415594622ff0cd3568a399f7", 0xc1}, {&(0x7f0000002300)="4901e5e77f9c77ca69fe8ed2ad16331631bef47347bfe69ac1033fbd414bf0a33e21fd194c9170d85b02d2fcfd66f4254c02d6ced250d70d70360b9178fa37501b5dfeac75f00777ded92a5efba95e0768f4e6a859086adae531a7f88b4a77b929797a5c0c44bba130468488c3fa45683ed6cc2acfaece86b94e7795c5a4488483e78ba2a4c3e75d373f68b2d2cc5abbf1d937f8b5e14677d2394810168819ac2d49074fcc4c112871e49b56f1f2da70c1223ef747034e168ee6be9c597ac641d42de44de1fdf6d0c1537eedc92e30f4baa07947e26c999b545a90ecc1fe419b470e66a9dcaf0694d4b026a5", 0xec}, {&(0x7f0000002400)="d6b3c3d9c144f83f3bddaa4152dd9a8a121f8a4898afbd4c82f14d", 0x1b}, {&(0x7f0000002440)="ccc75afd7139016882a34223d44dd2333934e1537bf669ac401dc8105cd8152b46cc2060182108b44bcd6c80e30750ee68411d509bb0ad10161fac9eac897acbcf4ea854a62e3b6e66c612e1820e1b05faeb2b51ebd9578ebcee300a5f5896e8a4a65e759a5a0e203d42b89de94fd7687836bdca642137a45c29af4e428006fc2f9c81f7ff59b530c181137f2501925681fa0a8bd5c9b647456127338d73a7feea7a101517918c29e0e59c85d7976686fb26064144f0317f5581fbac950a949648118089308e5bd3d72d782fa84f072595e3d3", 0xd3}, {&(0x7f0000002540)="5a71eeb1c1c8af8e2ab825ca6fb58d6fd4fb315d29ffd1207ec9701f41ecf8faa3c6555b1f8c12c041", 0x29}, {&(0x7f0000002580)="b761e6bb6c85d01f0dc0b5f28354da319f8dde0129ed4b0d01183db19eeb83eecc02ccee66075ad5176571e4572130a52a79341ac23d494bc63198a426163b57b25ea52f12dc01e45414424580f3b7bc98aa3a8daed8e53130107054bc3238101ce9465e21177457af344a1c99e1d947e47f73b4a79f91169dba70e54d3e5c9d82c0a133f4887c6a9ae559d3f9013380b7def5abcfa538385feca983fc3bb48863fe", 0xa2}, {&(0x7f0000002640)="bfb21f4758db86fef276a3a4898f739ed1e58215e20a605b61cc6465dd0e6ebfdf4e", 0x22}, {&(0x7f0000002680)}, {&(0x7f00000026c0)="38decc956814d3331ebb3564b7985b22d47f51d5ac33bedf3bb76584fa10c0a4b3d1d2f8b9bddc3b210d59ce0e9b271271a4e0e1632bef41a7146cea054aae19bb1c3976e546339d6a7ca0e1613ea2bbb185ceec400726e39587e6615ba82a739c2d1e35da6875ca150eefaac88c1759d53d0659ee52f65fbb7d84297173eb81c1a04e763da63eded02883d5a19403184dba11ba09e33bf5307c2854055e4287f5661a6398e0af0b62343c670b0d5f48dfaef9a8fda17b68f26dfd9781c1c1d4b58079ed1e714e430ba72809476fd49f", 0xd0}], 0x9, &(0x7f0000002880)=[@iv={0x28, 0x117, 0x2, 0xd, "3119356c4a1ae1fbc588f627df"}, @op={0x18}], 0x40}, {0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000028c0)="a298d5193ee39d94db139d1ffe32e1c8d3978a2ec9ff46131c09fd2a7dc92b2600d460c394c1c903f49fceb489b92bb1a4cf89dcaa75e905249dde99126db8be8f2ee2e70f4b49061c06a9dfa5a601ae0d98ab2225535c6f962810197f10df4562cd9dc2a774a1077497f4d089b146", 0x6f}, {&(0x7f0000002940)="58cab2696197d14748af11ead3e298679cd4c34a3d71fb7237ee7be80ae0caf57ef352e8f5bcb5169c113c31b5417a6358af5cf913c3afef36448a941757f27e599f980b0c29403d7d4091b6fc2d0be4331d2f8646b765384ba2d9ef64817885d972dd1764b8b13e332f2f25e8d70f0d33d7934d832b44effc3c4b8cefc75684e8860fecbb09ff669c5b8a36b7f8c10744c920ad", 0x94}], 0x2, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4e}, @iv={0x40, 0x117, 0x2, 0x2c, "59808c3fb940906e3c2cffba5e0db567662d32884e2898a9b743e53774996caa3532d26b7683e91aeb9e1c8b"}], 0x70, 0x8000}], 0x6, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)

1.446425536s ago: executing program 5 (id=3857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf9}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f)
recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendmsg$nl_route(r4, 0x0, 0x44004)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRESHEX=r3, @ANYRES32=<r7=>r6], 0x1c}}, 0x4008054)
write$nci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r4, &(0x7f0000000300)=ANY=[], 0x14)
write$nci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8], 0x14)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES16=r7, @ANYRES16=r10, @ANYBLOB="010426bd7000f8da0600000000000000010035a9af55cacd66160f1461ec3ab0bd7684ba7249dbdbcfe42550b05e2303153c7cd4f9eac6df236b6b0d5f28325a02e562063d5619d1858187cbf525724ec0f6cc3d4dc4a9be53dc3fdd5a11fc262c40b6795eeb432dc058820eaa834adff08c297a663350314821759ad116209a54cd078d38aaf645714fefa2616bbefa88d89ca86e531d163ec8a281684944dd9538825cf024a069d90b9de2184a0c7452ffd4483c0d5a4277d587f1c97accdf5efd875fd0c935d50f06c6a143fd9be0687cbab63fb1dc0b5bb261f5a2cf494074eea0cdb71f9dfd4758cfb1f48c78921035", @ANYRES32=r11], 0x1c}}, 0x4008054)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=<r13=>0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r13, @ANYBLOB="aacd7719d96751578386af24131daa036410bbc04f8fef7b958419c04d8145742c81223c7a6867f85e5f0847629759c2cee12f987077ef688ffb9481aced6d4d50cdb1"], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042abd7000fbdbdf250200000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="790c5e1672c5dbe95cc39d80ae04a290915eef44337359b875df69741ecd40c8b40680425085831118499d8095d3fa6d8e3ebe4b5f9271faec0148869de3fc4827f2513d189055a5aff7a66bdd2b88f10afe8522d0773c77f28f21aca4b7f9da50486be713e73cdbdc947434e87d7241e3efd3442c7eba1549f35c07e70850"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={r3})

1.261492565s ago: executing program 2 (id=3858):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x158, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in6=@private1, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x3, 0x76a, 0x80000000000010, 0x3, 0x0, 0x9}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "ee975d40df06c77860e09d464fffd622034fe232f7d36eb86a083e"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e00)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11e, 0x11e, 0x5, [@fwd={0xd}, @var={0xd, 0x0, 0x0, 0xe, 0x2, 0x2}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @struct={0x5, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x10, 0x2, 0x2ef}, {0x3, 0x0, 0x9}, {0x7, 0x4, 0x9}, {0x10, 0x2, 0x9}]}, @struct={0xa, 0x5, 0x0, 0x4, 0x0, 0x95, [{0x3, 0x1, 0x5}, {0x2, 0x0, 0x6}, {0xb, 0x1, 0xfffffffc}, {0x4, 0x5, 0x3}, {0x4, 0x3, 0x5}]}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x8, 0x4}], 'T)'}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xa, 0x4}, {0x4, 0x3}, {}, {0x2, 0x5}]}, @func={0x1, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x61, 0x6f]}}, &(0x7f0000000e00)=""/4096, 0x13d, 0x1000, 0x1, 0x4}, 0x28) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', <r2=>0x0, 0x7, 0x8000, 0x8, 0x5, {{0x1f, 0x4, 0x1, 0x3e, 0x7c, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0xc, 0x9e, 0x0, 0x4, [0x2, 0x3ff]}, @lsrr={0x83, 0x1f, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @multicast1, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010100]}, @generic={0x94, 0x4, "080f"}, @rr={0x7, 0x13, 0x57, [@multicast2, @local, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x1, [{@broadcast, 0x529}, {@empty, 0x2}]}, @rr={0x7, 0xb, 0xe2, [@rand_addr=0x64010100, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x9, 0x0, 0xfffffffb, 0x4c14, 0xffffffffffffffff, 0x8, '\x00', r2, r1, 0x0, 0x0, 0x2}, 0x19)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
syz_emit_ethernet(0xbe, &(0x7f0000000680)={@remote, @remote, @void, {@ipv4={0x800, @igmp={{0x13, 0x4, 0x1, 0x17, 0xb0, 0x67, 0x0, 0x3, 0x2, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x31, 0x1, 0x9, [{@loopback, 0x1}, {@remote, 0xdf}]}, @rr={0x7, 0xb, 0xff, [@dev={0xac, 0x14, 0x14, 0x13}, @empty]}, @timestamp={0x44, 0x18, 0xb6, 0x0, 0x5, [0xd, 0x8, 0x28, 0xe, 0x1]}]}}, {0x17, 0x4b, 0x0, @empty, "d31f0945388d3f68d00ef22bb6525deb7f62a7ba711ad480f95d32d9ea890a4a3c6dda61296f7ad3228521fb7e86598f0c246d30b23c348181c6e8a2f09351eb5d94c4b775078bd81526ce3ddb76ddfc09f3340d4fdd8c8977d5f383"}}}}}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f)

1.257517404s ago: executing program 0 (id=3859):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79", 0x7e)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000040)={@val={0x20, 0x88be}, @void, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x36)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@allocspi={0x11c, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e24, 0x1000, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2b}, @in6=@private0, {0x5, 0x2, 0x80000001, 0x6, 0x8, 0xe2, 0x5, 0x3}, {0x382, 0x6, 0x10, 0x6}, {0x2b, 0x2, 0xffffff80}, 0x70bd2b, 0x34ff, 0x2, 0x1, 0x6, 0x80}, 0x8001, 0xa}, [@lifetime_val={0x24, 0x9, {0x10000, 0x3, 0x2, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={&(0x7f0000000600)="52dde5be5b91679dced254450467cd3fc7cc6d94d01f53958a8b7e8dfddb192f6da004a067eff2a933bb6f9300d0f6f403cea6086c233594c743", &(0x7f0000000680)=""/203, &(0x7f0000000780)="1c2adadea6ef8f9841ed6a057fc7a41d3b16078915892535ebc8a25f59270ea228d9", &(0x7f0000000800), 0x8000}, 0x38)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="01002fbd7040fbdbdf250f000000", @ANYRES32=0x0, @ANYBLOB="05802f200010000000000000"], 0x2c}}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x4040)

1.129200918s ago: executing program 1 (id=3860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async)
clock_gettime(0xffffffea, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x288, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_TX_RATES={0x260, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfd}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x4}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x3}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x5, 0x2}, {0x2, 0x9}, {0x4}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x9}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x1, 0xa}, {0x3, 0x1}, {}, {0x6, 0x5}, {0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x1f}, {0x5, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x6, 0x3}, {0x0, 0x2}, {0x7}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x7, 0x7}, {0x6, 0x2}, {0x3, 0xa}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14b, 0x1, 0x4, 0x11, 0x401, 0x5, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x1000, 0x1, 0x5, 0x8, 0x9, 0x8, 0x2ad1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xcb, 0x7e7e, 0x9, 0x4, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x4, 0x1, 0x0, 0x6, 0x8, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x24, 0x6, 0x5a, 0x5, 0x3d, 0x12, 0x20, 0x9, 0x0, 0x30, 0x30, 0x3, 0x16, 0x24, 0x24, 0x3, 0x60, 0x30, 0x48, 0xb, 0x9, 0x3, 0x4, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x9, 0x2, 0x7, 0x9, 0xa0]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0x101, 0xfac, 0x3, 0x94c, 0x22d, 0x2d]}}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4004, 0x3, 0x6, 0x3, 0x2, 0x9, 0x8, 0x4]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4}, {0x6}, {0x7, 0x9}, {0x7, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x7}, {0x1, 0x7}, {0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x6}, {0x0, 0x4}, {0x2}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x2, 0x6}, {0x6}, {0x5, 0xa}, {0x6, 0x5}, {0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x3}, {0x7}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x6}, {0x0, 0x8}, {0x2, 0x2}, {0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x9, 0x16, 0x18, 0x3, 0x1, 0xb, 0x6, 0x5, 0x1, 0x2, 0x48, 0x2, 0x3, 0xc, 0x12, 0x60, 0x48, 0x5, 0x60, 0x18, 0x9, 0x4, 0x1b, 0x6, 0x5, 0x12, 0x36, 0x3, 0x2, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x3, 0xd, 0x6, 0x7, 0xf494, 0x9]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x9}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x8}, {0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x9}, {}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x2}, {0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x1}, {0x2, 0x3}, {0x3, 0xa}, {0x7, 0x6}, {0x1}, {0x3, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0x10, 0x5, 0xf5, 0x2, 0x0, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x15, 0xffd3, 0x1000, 0x742a, 0x8000, 0x29]}}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc00c094}, 0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
setsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000500), 0x4) (async)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async)
write(r6, &(0x7f0000000300)="14e88dbc5d8332d8513b081794a9119f94a12b6eb1c1a5b26d7bdc95db400f7520b0341550cf84f284162c779b310abe76f5f914a77b88f34e127503b934ecd8c924a31f8a7553a122d7bf31dc8497c24e9fba4ee7a0f0b7eae02a319ac67c1667ef3a4583e321c3c8bab136d05070f5187a0a6470933536c5f4201546f253ac51378984a826b6710fe8", 0x8a)
listen(r6, 0x97) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@gettaction={0x6c, 0x32, 0x200, 0x70bd29, 0x25dfdbff}, 0x6c}, 0x1, 0x0, 0x0, 0x4008890}, 0x20000040)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xd0}, 0x8)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4)

1.128223341s ago: executing program 3 (id=3861):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00000000711089000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94)

969.996238ms ago: executing program 2 (id=3862):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000000180))
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1)
close(r2)

888.379887ms ago: executing program 3 (id=3863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008200140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c'], 0xa) (async)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c'], 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000003000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15442, 0x10028}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x1491a}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x810)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={<r6=>0x0, @in6={{0xa, 0x4e23, 0x0, @private1, 0x3}}, 0x1, 0x7, 0x3ff, 0x1, 0xf2, 0x0, 0x30}, &(0x7f0000000180)=0x9c)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x4, 0xfbff}, 0x8) (async)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x4, 0xfbff}, 0x8)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

790.827373ms ago: executing program 5 (id=3864):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000440)=0x2, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10)

716.137305ms ago: executing program 1 (id=3865):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
unshare(0x20000600) (async)
unshare(0x20000600)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x4}, 0x20) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x4}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000580)="09000000ffffffffb79e08da88a8a5a186dd3c478c3219597180bccdae287bc836add38e11c50a98", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000580)="09000000ffffffffb79e08da88a8a5a186dd3c478c3219597180bccdae287bc836add38e11c50a98", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
unshare(0x2a060400)
close(0x3) (async)
close(0x3)
r8 = socket$inet6(0xa, 0x2, 0x0)
close(0x3) (async)
close(0x3)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000fd7a00"/15], 0x18}, 0x800) (async)
sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000fd7a00"/15], 0x18}, 0x800)

645.3009ms ago: executing program 2 (id=3866):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff8, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
pipe(&(0x7f0000000000))

623.229497ms ago: executing program 0 (id=3867):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4)

529.699375ms ago: executing program 2 (id=3868):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="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", 0x231}], 0x3}}], 0x1, 0x8810)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="f58441bdd90f7de91557d436dd7d97a05d9a3895654c7e37d2d1f5293f2b06b6a5d44f1a0931d5f57331d9cc911439d23f552968f309c46525b38ddd5f0f4d5750bd4c581d1af7f9f627fecda4c7292d54ef5edfae3ee964ab789fdaf0e7f804703afd2c3ff12d4305a5cd30c8b8c21c631e0a425de01c86e4b7c880001d54d89f3cbeb0ded2d0cc5b805ee140c53e612d4b77574948d1ec4cac57edac60f613b322661062ec619abdf3", 0xaa}], 0x2}}], 0x1, 0x20000044)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r4, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r7=>0x0, 0x4, 0x4, 0xff, 0x5, 0x0, @local, @private2, 0x40, 0x10, 0xca, 0x1}})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6, 0xfff3}, {}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000880)={0x4a4, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/-\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_WOL_SOPASS={0x85, 0x3, "35bf19cb7ee8c59dd5c5405736972a55fa6215c7709dc5a8537acc7d0f2e454d1cab9b756068abe45560be37e367f556e4c7753401bdce19321b235fb19f49e1754c151722961cf11f6d165914c79aa5fa326c2547bf5b8e69cdfcc04240b43634d33ab3373eff16edb29978773125e6fcc916ca14904e2cc94eb97079f01d83e5"}, @ETHTOOL_A_WOL_MODES={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x32, 0x5, "86fbd122991e65354bfae733bb124a3d723023a9ed284f007ddc8f55239493751551c297e0dddf1bf0abdb8bd97d"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\']-,\\[($.+[+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}($\x00'}]}]}]}, @ETHTOOL_A_WOL_MODES={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10ec5f75}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.)\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'skcipher\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'ecb(serpent)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "64bd8be46928a32562524d726ff6"}]}, @ETHTOOL_A_WOL_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58)

429.020104ms ago: executing program 0 (id=3869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000fc0)="7f", 0x1}], 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r3}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc)
r5 = accept(r2, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x6)
setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20)
recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}}, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140e, 0x800, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004005)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0xdad1124f55525050}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x1411, 0x803, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400a004}, 0x4040004)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r8}, 0x18)
r11 = socket(0x1e, 0x805, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r11)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

428.32962ms ago: executing program 5 (id=3870):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) (async)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000340)="98c1c6e5afda0000000034eb1bff1171293ee6280000000000000000000000bc64d8b230e2e314b2e4fa99c322daaccd29a5ab071e15859c2cf8d0fb7e8690372ce17513562c67bdc65354b3de2e0c903f02636116018682735f73bf6eca060048d4e33eb92b7f01643546ac4b7b", 0x6e}], 0x1}}], 0x1, 0x4840)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000040000701fefffffffcdbdf25037c00000ce84780070003"], 0x20}}, 0xc000)

427.781945ms ago: executing program 3 (id=3871):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="dc010000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000080000004f070000e4000600ff020000000000000000000000000001fc0200000000000000000000000000004e2400054e2281750200804016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d25b00ffffe000000100000000000000000000000045000000000000000100000000000000090000000000000009000000000000000800000000000000080000000000000000f8ffffffffffff060000000000000009000000000000000c00000000000000060000000000000000000000000000000800000003000000030000002abd700003350000020004060b33386a00000000"], 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
unshare(0x26020480)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r2 = socket(0x80000000000000a, 0x5, 0xfffffffd)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000008cba45000900041a0000fddbdf250200"], 0x14}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000600)={{}, 0x8, &(0x7f0000000580)=[0x8, 0x2, 0xc, 0x2, 0x4, 0x7, 0x4, 0x7f], 0xffffffffffff0aa6, 0x6, 0x1}) (async)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000600)={{}, 0x8, &(0x7f0000000580)=[0x8, 0x2, 0xc, 0x2, 0x4, 0x7, 0x4, 0x7f], 0xffffffffffff0aa6, 0x6, 0x1})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000300)={'veth0_to_team\x00', @multicast})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0x0, 0x26, 0x0, 0x10, 0xfff}, 0x28)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) (async)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) (async)
sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
setsockopt$sock_attach_bpf(r7, 0x6, 0x3, &(0x7f00000000c0), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r9 = socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x30, r9, 0x2ed18000)

324.05925ms ago: executing program 5 (id=3872):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x5, 0x41, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010f050000000000000000000000b9a4e1b8a0792b45cfacc092fae7a06ea1826aa87a61cab3df56e493c5619ea7e96694284e85607991db9cf46b17cdc8f89cc4bc7f73299e6d", @ANYRES32=0x0, @ANYBLOB="03050000000000001c0012800900010069706970000000000c00028008000300ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc442, 0x0)
write$tun(r11, &(0x7f00000004c0)={@void, @val={0x7, 0x3, 0x0, 0x1, 0xfff7, 0xfff8}, @ipv4=@icmp={{0x17, 0x4, 0x1, 0x3a, 0x64, 0x64, 0x0, 0x4, 0x1, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x1, 0x0, 0xa, [0x5, 0x8000000, 0x2, 0xe, 0x9]}, @noop, @rr={0x7, 0x17, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback, @multicast1, @loopback]}, @ssrr={0x89, 0x13, 0xbd, [@broadcast, @multicast2, @rand_addr=0x64010102, @multicast2]}]}}, @address_reply={0x12, 0x0, 0x0, 0x3}}}, 0x6e)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000280)={r10, r10, 0x6, 0x2, &(0x7f0000000000)="c611", 0x9, 0x5, 0xb57, 0x40, 0x43, 0x0, 0x7, 'syz0\x00'})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=3873):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{<r0=>0xffffffffffffffff, &(0x7f0000000000)=':\xfb\x00', 0x400, &(0x7f0000000040)={@_ha_fsid={[0x26d5a97a, 0x8]}, {0xc301, 0x5, 0x7f, 0x3}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xb5200000}, {[0x101, 0x4f6a, 0x4f, 0x8]}, 0x5, 0x11, &(0x7f0000000100)=""/17})
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
r1 = socket$inet6(0xa, 0x6, 0x140)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x234, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x5c, 0x2a, [@tim={0x5, 0x1b, {0xd, 0xfd, 0x14, "925517d9f32440f77ab48f51e9307d41b2ba096b3c4b1ca2"}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xc8, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xde, 0x9, 0x7}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xea, @device_a, 0x8, @value=@device_b, 0x9, 0x1, @broadcast, 0x9}}]}, @NL80211_ATTR_IE={0x6d, 0x2a, [@preq={0x82, 0x3b, {{0x1, 0x0, 0x1}, 0x80, 0x3, 0x3, @device_a, 0xb, @void, 0xc, 0x4, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0x5}}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x0, 0x0, {0xdcb, 0x80, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3}, 0x1, 0xc525, 0x3b}}, @chsw_timing={0x68, 0x4, {0xd8, 0x2}}, @supported_rates={0x1, 0x3, [{0x1}, {0x6}, {0x30, 0x1}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xc6}, @NL80211_ATTR_IE={0x131, 0x2a, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x4, 0xd, 0x1, 0x4f4}}, @ssid={0x0, 0x13, @random="f14398c656707e48754caace42be19c053ac20"}, @tim={0x5, 0xec, {0xfc, 0x4f, 0xe0, "b3acbfc0abb4919e7ad616a61471f8fefbd5ed2d9d18f2c90c553698e27c170654c3461ab5665cd445e9471b77fd5eaf482417da76930af4489c73cfa82e5ce1c5b7755b87dd61c0651f731b90eb54274cb713f903f368d4c3a80d5ea277a5c29547ff06701799829c66043bc9a0e7067484de7ab3a6187220cc543eb2bd66eafa48e517ebac94fa228bf624a4720487193e11e2398889e37f70c99db2e1872a7659b3b39db0d5e7451951162e35279054367c209eafaacccb34a64003219788c88a7f44f1bc1b06182a33695a8bd04f16ec88e654b174743030d464fa5ff4bdd51b48e2f25f246b1d"}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x3, 0x5, @device_a, 0x0, 0x1, 0xe32f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000491}, 0x1)
r5 = socket$inet(0x2, 0x5, 0x6)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000700)={@remote, @multicast1, 0x1, 0x3, [@remote, @empty, @rand_addr=0x64010101]}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x1b, 0x5, 0x400, 0x268, 0x0, 0xffffffff, 0xa8, 0xa8, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, &(0x7f0000000740), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @multicast2, @local, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x10, 0x401, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x400, 0x904}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @private=0xa010100, @private=0xa010101, @gre_key, @gre_key=0xddf5}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}, @common=@addrtype={{0x30}, {0x28, 0x80, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @remote, @empty, @icmp_id=0x68, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000c40)=0x4, 0x4)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x68}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000d80)={0x0, 0x2, [0xfffffffffffffe00, 0x2, 0x5, 0x7, 0x602, 0xffffffffffffd5c1]})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000dc0)={0x8, 0x0, 0x7, 0x4, <r7=>0x0}, &(0x7f0000000e00)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000e40)={<r8=>r7, 0x800}, &(0x7f0000000e80)=0x8)
setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000ec0)={0x32, @multicast2, 0x4e24, 0x1, 'wlc\x00', 0x24, 0x2, 0x33}, 0x2c)
getsockname$packet(r0, &(0x7f0000000f00), &(0x7f0000000f40)=0x14)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000f80)=[@in6={0xa, 0x4e22, 0x4f, @mcast1, 0x3}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e21, 0x7fff, @private1, 0x200}, @in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff80}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x5, @private2}, @in={0x2, 0x4e21, @remote}], 0xc0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001040)={0xf20, 0x1, 0x1, 0x100, 0x5, 0x9, 0x0, 0x1, <r9=>r8}, &(0x7f0000001080)=0x20)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000010c0)={r9, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f}}}, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000001180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000011c0)={'ip6gre0\x00', 0x400})
sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000014)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
getsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000001540), 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001580)={'dvmrp1\x00'})

kernel console output (not intermixed with test programs):

: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  506.499552][T17556] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  506.516806][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'.
[  506.601505][T17556] RDS/IB: syz0: added
[  506.608840][T17556] smc: adding ib device syz0 with port count 1
[  506.615140][T17556] smc:    ib device syz0 port 1 has no pnetid
[  506.622912][T14991] xfrm0 speed is unknown, defaulting to 1000
[  506.633833][T17556] xfrm0 speed is unknown, defaulting to 1000
[  506.828280][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  507.174204][T17556] xfrm0 speed is unknown, defaulting to 1000
[  507.504270][T17595] macvlan1: entered promiscuous mode
[  507.510968][T17595] macvlan1: entered allmulticast mode
[  507.542632][T17595] veth1_vlan: entered allmulticast mode
[  507.740626][T17556] xfrm0 speed is unknown, defaulting to 1000
[  507.844594][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'.
[  508.110510][T17622] netlink: 'syz.4.2892': attribute type 1 has an invalid length.
[  508.143667][T17623] netlink: 'syz.4.2892': attribute type 1 has an invalid length.
[  508.581957][T17556] xfrm0 speed is unknown, defaulting to 1000
[  508.981448][T17655] syzkaller0: entered promiscuous mode
[  509.005325][T17655] syzkaller0: entered allmulticast mode
[  511.560133][T17556] xfrm0 speed is unknown, defaulting to 1000
[  511.827251][T17685] syzkaller0: entered promiscuous mode
[  511.843185][T17685] syzkaller0: entered allmulticast mode
[  511.956206][T17687] syzkaller0: entered promiscuous mode
[  511.963353][T17687] syzkaller0: entered allmulticast mode
[  512.211072][T17706] netlink: 'syz.1.2908': attribute type 62 has an invalid length.
[  512.226553][T17556] xfrm0 speed is unknown, defaulting to 1000
[  512.500523][T17716] lo speed is unknown, defaulting to 1000
[  512.619874][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[  512.634585][T17724] netlink: 356 bytes leftover after parsing attributes in process `syz.1.2912'.
[  512.734480][T17724] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.742647][T17724] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.977670][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  513.002604][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  513.084151][T17724] veth1_vlan: left allmulticast mode
[  513.191715][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'.
[  513.235780][T17716] lo speed is unknown, defaulting to 1000
[  513.261591][ T7071] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.286480][ T7071] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.331495][T17716] xfrm0 speed is unknown, defaulting to 1000
[  513.331535][ T7071] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.383009][ T7071] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  513.416279][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'.
[  514.122015][T17784] netlink: 'syz.1.2927': attribute type 27 has an invalid length.
[  514.154959][T17781] veth1_to_hsr: left allmulticast mode
[  514.171022][T17781] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2925'.
[  514.199800][T17781] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  514.244017][T17793] netlink: 'syz.4.2929': attribute type 27 has an invalid length.
[  514.245925][T17784] macvlan1: left promiscuous mode
[  514.257173][T17784] macvlan1: left allmulticast mode
[  514.332785][T17787] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.341646][T17787] 8021q: adding VLAN 0 to HW filter on device team0
[  514.356881][T17787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.410998][T17787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.420644][T17787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.434001][T17787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  514.448584][T17787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  514.463426][T17787] veth1_vlan: left promiscuous mode
[  514.470019][T17787] veth0_vlan: left promiscuous mode
[  514.476288][T17787] veth0_vlan: entered promiscuous mode
[  514.483854][T17787] veth1_vlan: entered promiscuous mode
[  514.493308][T17787] veth1_macvtap: left promiscuous mode
[  514.499974][T17787] veth0_macvtap: left promiscuous mode
[  514.506272][T17787] veth0_macvtap: entered promiscuous mode
[  514.513010][T17787] veth1_macvtap: entered promiscuous mode
[  514.523676][T17787] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  514.532173][T17787] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  514.540197][T17787] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  514.548358][T17787] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  514.856873][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'.
[  515.002268][T17793] erspan1: left allmulticast mode
[  515.007406][T17793] ip6tnl1: left allmulticast mode
[  515.021907][T17793] ip6tnl4: left allmulticast mode
[  515.027334][T17793] geneve2: left promiscuous mode
[  515.032406][T17793] geneve2: left allmulticast mode
[  515.044043][T17793] ip6gre2: left promiscuous mode
[  515.053161][T17793] ip6gre2: left allmulticast mode
[  515.061326][T17793] xfrm1: left allmulticast mode
[  515.084419][T12378] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.091787][T12378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.103334][T12378] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.110548][T12378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.141103][ T7071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.152289][ T7071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.203975][ T7071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.243508][ T7071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.294566][ T7071] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.330571][ T7071] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.386684][ T7071] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.418913][ T7071] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  515.639130][T17824] ip6t_srh: unknown srh match flags  4000
[  515.962144][T17830] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2938'.
[  515.985586][T17832] netlink: 'syz.0.2940': attribute type 29 has an invalid length.
[  516.016416][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'.
[  516.192778][T17839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  516.221853][T17849] netlink: 'syz.1.2942': attribute type 4 has an invalid length.
[  516.433317][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'.
[  517.047342][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'.
[  517.176882][T17879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.207379][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2949'.
[  517.322351][T17883] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  517.349765][T17883] bond1 (unregistering): Released all slaves
[  518.193169][T17919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2960'.
[  518.603132][T17938] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2966'.
[  518.944804][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  518.958859][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  518.968956][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  518.984999][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  518.993837][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  519.688778][ T5621] bond1: (slave syz_tun): Removing an active aggregator
[  519.697641][ T5621] bond1: (slave syz_tun): Releasing backup interface
[  519.815024][T17976] netlink: 'syz.3.2974': attribute type 1 has an invalid length.
[  519.941522][T17948] lo speed is unknown, defaulting to 1000
[  520.050263][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'.
[  520.101147][T17981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2975'.
[  520.302022][T17994] sctp: [Deprecated]: syz.4.2978 (pid 17994) Use of struct sctp_assoc_value in delayed_ack socket option.
[  520.302022][T17994] Use struct sctp_sack_info instead
[  520.457895][T17948] lo speed is unknown, defaulting to 1000
[  520.478902][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'.
[  520.495910][T17948] xfrm0 speed is unknown, defaulting to 1000
[  521.166035][T18033] openvswitch: netlink: IP tunnel dst address not specified
[  521.652447][   T30] audit: type=1800 audit(1784202288.443:13): pid=18029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2986" name="memory.events" dev="tmpfs" ino=2887 res=0 errno=0
[  521.773513][T18057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  521.879487][T18061] syzkaller0: MTU too low for tipc bearer
[  521.885284][T18061] tipc: Disabling bearer <eth:syzkaller0>
[  521.964729][T17948] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.972579][T17948] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.980092][T17948] bridge_slave_0: entered allmulticast mode
[  521.994798][T17948] bridge_slave_0: entered promiscuous mode
[  522.004680][T17948] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.012155][T17948] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.019633][T17948] bridge_slave_1: entered allmulticast mode
[  522.028123][T17948] bridge_slave_1: entered promiscuous mode
[  522.081806][T17948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.095196][T17948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.184413][T17948] team0: Port device team_slave_0 added
[  522.192172][T18074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2998'.
[  522.194278][T17948] team0: Port device team_slave_1 added
[  522.202570][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'.
[  522.227195][T18074] ip6tnl1: entered allmulticast mode
[  522.234253][ T6669] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  522.286754][T17948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.293763][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.319673][T17948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.403204][T17948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.410641][T17948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.466394][T17948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.521150][T18088] netlink: 'syz.2.3003': attribute type 5 has an invalid length.
[  522.539309][T17948] hsr_slave_0: entered promiscuous mode
[  522.570402][T17948] hsr_slave_1: entered promiscuous mode
[  522.576867][T17948] debugfs: 'hsr0' already exists in 'hsr'
[  522.582633][T17948] Cannot create hsr debugfs directory
[  522.782523][T18098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'.
[  522.791862][T18098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'.
[  522.800840][T18098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'.
[  522.810537][T18098] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'.
[  522.878973][T18103] netlink: 'syz.3.3007': attribute type 13 has an invalid length.
[  522.886858][T18103] netlink: 'syz.3.3007': attribute type 17 has an invalid length.
[  524.439358][T18103] bond0: left promiscuous mode
[  524.445371][T18103] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.459430][T18103] 8021q: adding VLAN 0 to HW filter on device team0
[  524.542295][T18103] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  524.701843][ T7071] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.720462][ T7071] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.728878][ T7071] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  524.737399][ T7071] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.745769][ T7071] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.792251][ T7071] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  524.850384][ T7071] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.853651][T18138] __nla_validate_parse: 108 callbacks suppressed
[  524.853668][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3016'.
[  524.859493][ T7071] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.898159][ T7071] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  524.906691][ T7071] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  524.916216][ T7071] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.973816][ T7071] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  525.116782][T18142] syzkaller0: entered promiscuous mode
[  525.122384][T18142] syzkaller0: entered allmulticast mode
[  526.031950][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  527.987135][T17948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.099212][   T91] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.189709][T17948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.460625][T18189] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3028'.
[  528.464895][T17948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.508926][T18193] netlink: 'syz.1.3030': attribute type 1 has an invalid length.
[  528.516710][T18193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3030'.
[  528.525783][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'.
[  528.648694][T17948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.816690][T18204] netlink: 'syz.4.3033': attribute type 1 has an invalid length.
[  528.953310][T18206] can: request_module (can-proto-0) failed.
[  528.955217][T12378] bridge0: port 1(bond5) entered disabled state
[  529.265775][   T36] smc: removing ib device syz0
[  529.371032][   T36] smbdirect: ib_dev[syz0] removed
[  529.482023][T12378] batman_adv: batadv0: Removing interface: gretap2
[  529.716865][T12378] bond11 (unregistering): (slave geneve5): Releasing active interface
[  529.858669][T12378] bond2 (unregistering): (slave geneve2): Releasing active interface
[  529.958705][T12378] team0: Port device bridge0 removed
[  530.048766][T12378] bond6 (unregistering): (slave bridge3): Releasing backup interface
[  530.159958][T12378] bond1 (unregistering): Released all slaves
[  530.211170][T12378] bond2 (unregistering): Released all slaves
[  530.246344][T12378] bond3 (unregistering): Released all slaves
[  530.269223][T12378] bond4 (unregistering): Released all slaves
[  530.308625][T12378] bond5 (unregistering): Released all slaves
[  530.410885][T12378] bond6 (unregistering): Released all slaves
[  530.459050][T12378] bond7 (unregistering): Released all slaves
[  530.501199][T12378] bond8 (unregistering): (slave veth3): Releasing active interface
[  530.535288][T12378] bond8 (unregistering): Released all slaves
[  530.602195][T12378] bond0 (unregistering): Released all slaves
[  530.659622][T12378] bond9 (unregistering): Released all slaves
[  530.719202][T12378] bond10 (unregistering): Released all slaves
[  530.757536][T12378] bond11 (unregistering): Released all slaves
[  530.872842][T18222] bridge0: port 1(bond0) entered blocking state
[  530.891946][T18222] bridge0: port 1(bond0) entered disabled state
[  530.904424][T18222] bond0: entered allmulticast mode
[  530.953718][T18222] bond0: entered promiscuous mode
[  531.635112][T18231] netlink: 'syz.3.3042': attribute type 7 has an invalid length.
[  532.061424][T17948] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  532.086622][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  532.095539][T17948] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  532.115089][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  532.123812][T17948] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  532.188490][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.222034][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  532.230073][T17948] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  532.251600][T17948] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.328301][T18262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'.
[  532.411176][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'.
[  532.442083][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'.
[  532.658689][T18286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3060'.
[  532.669748][T17948] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.722323][T17948] 8021q: adding VLAN 0 to HW filter on device team0
[  533.017397][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.024609][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.040259][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.047451][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.152720][T12378] tipc: Disabling bearer <eth:macvlan1>
[  533.161276][T12378] tipc: Left network mode
[  533.209326][T18304] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.217033][T18304] 8021q: adding VLAN 0 to HW filter on device team0
[  533.253455][T18302] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3063'.
[  533.253859][T18304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.420295][T18304] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  533.594642][T18313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3067'.
[  533.771291][T18322] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3069'.
[  534.249728][T18337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3072'.
[  534.261247][T18339] netlink: 'syz.2.3073': attribute type 1 has an invalid length.
[  534.269704][T18339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3073'.
[  534.348194][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  534.356493][T17948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.511425][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3074'.
[  534.555450][T18350] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  534.608348][T17948] veth0_vlan: entered promiscuous mode
[  534.694734][T17948] veth1_vlan: entered promiscuous mode
[  534.837059][T18360] syzkaller1: entered promiscuous mode
[  534.856457][T18360] syzkaller1: entered allmulticast mode
[  535.030565][T17948] veth0_macvtap: entered promiscuous mode
[  535.062732][T17948] veth1_macvtap: entered promiscuous mode
[  535.563277][T12378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.169010][T12378] team0 (unregistering): Port device team_slave_1 removed
[  536.230152][T12378] team0 (unregistering): Port device team_slave_0 removed
[  536.468239][   T48] smc: removing ib device syz1
[  536.490573][T18397] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  536.506551][   T36] smbdirect: ib_dev[syz2] removed
[  536.514016][T18399] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  536.518545][   T48] smbdirect: ib_dev[syz1] removed
[  536.639956][T17948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.712930][T17948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.824352][ T6669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.834950][ T6669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.857242][ T6669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.861458][T18420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.866070][ T6669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.929288][T18418] ip6tnl0: Caught tx_queue_len zero misconfig
[  537.184338][T18428] openvswitch: netlink: Actions may not be safe on all matching packets
[  537.310860][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.336569][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.966206][ T7071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.974095][ T7071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.084349][T18452] __nla_validate_parse: 5 callbacks suppressed
[  538.084368][T18452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3096'.
[  538.743275][T18468] netlink: 'syz.2.3099': attribute type 49 has an invalid length.
[  539.149441][T18476] syzkaller1: entered promiscuous mode
[  539.154984][T18476] syzkaller1: entered allmulticast mode
[  539.699873][T18486] netlink: 'syz.1.3105': attribute type 2 has an invalid length.
[  539.748195][T18486] netlink: 'syz.1.3105': attribute type 10 has an invalid length.
[  539.779941][T18486] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.787595][T18486] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.854118][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  539.880357][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  539.915112][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  539.930702][T18486] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.938062][T18486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.945702][T18486] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.952974][T18486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.982803][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  539.997391][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  540.088868][T18503] netlink: 'syz.3.3106': attribute type 11 has an invalid length.
[  540.293638][T18486] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  540.753140][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.798413][T18553] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3113'.
[  541.807507][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3113'.
[  542.116443][ T5636] Bluetooth: hci0: command tx timeout
[  542.134424][T18563] netlink: 'syz.3.3115': attribute type 1 has an invalid length.
[  542.142224][T18563] netlink: 'syz.3.3115': attribute type 2 has an invalid length.
[  542.209438][T18566] x_tables: duplicate underflow at hook 2
[  542.648512][T18554] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  542.728717][T18554] syzkaller0: entered promiscuous mode
[  542.738174][T18554] syzkaller0: entered allmulticast mode
[  542.816937][T18546] syzkaller0: entered promiscuous mode
[  542.825066][T18546] syzkaller0: entered allmulticast mode
[  542.891558][T12378] IPVS: stop unused estimator thread 0...
[  543.198903][T18604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3119'.
[  544.188389][ T5636] Bluetooth: hci0: command tx timeout
[  546.268269][ T5636] Bluetooth: hci0: command tx timeout
[  546.317423][T18488] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.325639][T18488] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.342796][T18488] bridge_slave_0: entered allmulticast mode
[  546.350379][T18488] bridge_slave_0: entered promiscuous mode
[  546.358847][T18488] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.366091][T18488] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.373312][T18488] bridge_slave_1: entered allmulticast mode
[  546.381735][T18488] bridge_slave_1: entered promiscuous mode
[  546.426057][T18488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.439305][T18488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.580259][T18488] team0: Port device team_slave_0 added
[  546.586111][T18642] syzkaller1: entered promiscuous mode
[  546.592194][T18642] syzkaller1: entered allmulticast mode
[  546.601694][T18488] team0: Port device team_slave_1 added
[  546.629356][T18488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.636469][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.662360][T18488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.704218][T18488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.711642][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.738597][T18488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.808407][T18488] hsr_slave_0: entered promiscuous mode
[  546.815008][T18488] hsr_slave_1: entered promiscuous mode
[  546.821318][T18488] debugfs: 'hsr0' already exists in 'hsr'
[  546.827060][T18488] Cannot create hsr debugfs directory
[  546.832657][T18646] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3127'.
[  547.421747][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'.
[  547.529901][T18677] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  547.549197][T18677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3132'.
[  548.011936][T12378] bond0: left allmulticast mode
[  548.022538][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'.
[  548.024207][T12378] bond0: left promiscuous mode
[  548.037148][T12378] bridge0: port 1(bond0) entered disabled state
[  548.354022][ T5636] Bluetooth: hci0: command tx timeout
[  548.520809][T12378] bond13 (unregistering): (slave bridge4): Releasing active interface
[  548.547741][T12378] bond0 (unregistering): Released all slaves
[  548.562023][T12378] bond1 (unregistering): Released all slaves
[  548.583332][T12378] bond2 (unregistering): Released all slaves
[  548.606615][T12378] bond3 (unregistering): Released all slaves
[  548.642916][T12378] bond4 (unregistering): Released all slaves
[  548.667576][T12378] bond5 (unregistering): Released all slaves
[  548.689001][T12378] bond6 (unregistering): Released all slaves
[  548.720932][T12378] bond7 (unregistering): Released all slaves
[  548.746891][T12378] bond8 (unregistering): Released all slaves
[  548.767832][T12378] bond9 (unregistering): Released all slaves
[  548.797307][T12378] bond10 (unregistering): Released all slaves
[  548.819969][T12378] bond11 (unregistering): Released all slaves
[  548.845095][T12378] bond12 (unregistering): Released all slaves
[  548.871640][T12378] bond13 (unregistering): Released all slaves
[  548.886676][T12378] bond14 (unregistering): Released all slaves
[  548.951014][T18704] netlink: 'syz.1.3139': attribute type 13 has an invalid length.
[  549.006331][T18704] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.013626][T18704] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.063447][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.076815][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.537701][T12378] tipc: Left network mode
[  549.537767][T12377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.569935][T12377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.582519][T12377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.591863][T12377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  549.629940][T18704] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  549.640844][T18704] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  550.491373][T18679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  550.507513][T18488] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  550.556662][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  550.586410][T18488] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  550.658555][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  550.710230][T18488] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  550.753864][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  550.764004][T18488] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  550.818711][T18488] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  551.175220][T12378] IPVS: stop unused estimator thread 0...
[  551.327596][T18746] tipc: Started in network mode
[  551.342101][T18746] tipc: Node identity 128482c10ef, cluster identity 4711
[  551.365438][T18746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.539729][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'.
[  551.558539][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3149'.
[  551.580087][T18746] tipc: Disabling bearer <eth:syzkaller0>
[  551.637493][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'.
[  551.893656][T18776] sctp: [Deprecated]: syz.2.3152 (pid 18776) Use of int in maxseg socket option.
[  551.893656][T18776] Use struct sctp_assoc_value instead
[  551.989959][T18743] dvmrp0: entered allmulticast mode
[  552.022933][T18787] x_tables: duplicate underflow at hook 2
[  552.389305][T18488] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.531268][T18488] 8021q: adding VLAN 0 to HW filter on device team0
[  552.584906][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.592166][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  552.647432][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.654687][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.902980][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'.
[  553.132054][T18820] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  553.225583][T18817] syzkaller1: entered promiscuous mode
[  553.238218][T18817] syzkaller1: entered allmulticast mode
[  553.714059][ T7071] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  553.845984][T18851] syzkaller1: entered promiscuous mode
[  553.858599][T18851] syzkaller1: entered allmulticast mode
[  554.231926][T18488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.255649][T18855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  554.376173][T18885] syzkaller0: entered promiscuous mode
[  554.397596][T18885] syzkaller0: entered allmulticast mode
[  557.395825][T18906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  557.926343][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[  557.961599][T18961] netlink: 'syz.1.3176': attribute type 1 has an invalid length.
[  557.995119][T18961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3176'.
[  558.018412][T18960] netlink: 'syz.1.3176': attribute type 7 has an invalid length.
[  558.028223][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.068936][T18960] netlink: 'syz.1.3176': attribute type 8 has an invalid length.
[  558.099937][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'.
[  558.242347][T18488] veth0_vlan: entered promiscuous mode
[  558.326352][T18488] veth1_vlan: entered promiscuous mode
[  558.475437][T18488] veth0_macvtap: entered promiscuous mode
[  558.528237][T18488] veth1_macvtap: entered promiscuous mode
[  558.620415][T18488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.642584][T18488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.662080][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.699884][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.737851][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.778133][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.037744][T16434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.083122][T16434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.184344][T12378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.243202][T12378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.289456][T18992] geneve2: entered promiscuous mode
[  559.333650][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3183'.
[  559.841778][T19022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3188'.
[  559.891979][T19022] netlink: 'syz.0.3188': attribute type 10 has an invalid length.
[  559.920990][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'.
[  559.949007][T19028] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3190'.
[  560.002471][T19024] syzkaller0: entered promiscuous mode
[  560.016433][T19024] syzkaller0: entered allmulticast mode
[  560.053829][T19024] TC_ACT_REPEAT abuse ?
[  560.332622][T19035] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  560.630495][T19043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  560.675968][T19047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  560.736469][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  560.752963][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  560.765655][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  560.765831][T19043] syzkaller0: entered promiscuous mode
[  560.797691][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  560.811081][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  560.880841][T19043] syzkaller0: entered allmulticast mode
[  562.908154][ T5636] Bluetooth: hci4: command tx timeout
[  563.151091][ T1317] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  563.589672][T19043] tipc: Resetting bearer <eth:syzkaller0>
[  563.763472][T19043] tipc: Disabling bearer <eth:syzkaller0>
[  564.043389][  T809] tipc: Node number set to 477397697
[  564.090856][ T5622] bond1: (slave syz_tun): Removing an active aggregator
[  564.111834][ T5622] bond1: (slave syz_tun): Releasing backup interface
[  564.606476][T19115] vlan2: entered promiscuous mode
[  564.623116][T19115] bridge0: entered promiscuous mode
[  564.697546][T19120] ip6tnl1: left allmulticast mode
[  564.765602][T19119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  564.988266][ T5636] Bluetooth: hci4: command tx timeout
[  565.181168][T19145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3206'.
[  565.315733][T19146] No such timeout policy "syz1"
[  565.320607][T19150] netlink: 'syz.1.3207': attribute type 58 has an invalid length.
[  565.338822][T19151] netlink: zone id is out of range
[  565.339564][T19150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3207'.
[  565.351796][T19151] netlink: zone id is out of range
[  565.369177][T19151] netlink: zone id is out of range
[  565.381778][T19151] netlink: zone id is out of range
[  565.414572][T19151] netlink: zone id is out of range
[  565.433934][T19151] netlink: zone id is out of range
[  565.476304][T19151] netlink: zone id is out of range
[  565.518399][T19151] netlink: zone id is out of range
[  565.529493][T19151] netlink: zone id is out of range
[  565.550199][T19151] netlink: zone id is out of range
[  565.676020][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  566.216500][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3209'.
[  566.345033][T19161] macsec1: entered promiscuous mode
[  566.378607][T19161] dummy0: entered promiscuous mode
[  566.391716][T19180] netlink: 'syz.0.3212': attribute type 13 has an invalid length.
[  566.400618][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  566.404560][T19161] macsec1: entered allmulticast mode
[  566.417220][T19161] dummy0: entered allmulticast mode
[  566.445070][T19169] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  566.530074][T19163] pim6reg1: entered promiscuous mode
[  566.537383][T19163] pim6reg1: entered allmulticast mode
[  566.574343][T19180] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  566.662684][ T7071] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  566.783665][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3213'.
[  566.844689][T19185] veth1_vlan: left promiscuous mode
[  566.887923][T19185] veth0_vlan: left promiscuous mode
[  566.911098][T19185] veth0_vlan: entered promiscuous mode
[  566.941505][T19185] veth1_vlan: entered promiscuous mode
[  567.000680][T19185] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  567.044757][T19185] 8021q: adding VLAN 0 to HW filter on device bond1
[  567.068671][ T5636] Bluetooth: hci4: command tx timeout
[  567.081664][T19185] 8021q: adding VLAN 0 to HW filter on device bond2
[  567.160555][T19185] 8021q: adding VLAN 0 to HW filter on device bond3
[  567.184974][T19185] 8021q: adding VLAN 0 to HW filter on device bond4
[  567.202352][T19185] 8021q: adding VLAN 0 to HW filter on device bond5
[  567.214498][T19185] 8021q: adding VLAN 0 to HW filter on device bond6
[  567.234257][T19185] 8021q: adding VLAN 0 to HW filter on device bond7
[  567.242831][T19185] 8021q: adding VLAN 0 to HW filter on device bond8
[  567.250952][T19185] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  567.261594][T19185] 8021q: adding VLAN 0 to HW filter on device bond9
[  567.276532][T19185] 8021q: adding VLAN 0 to HW filter on device bond10
[  567.295279][T19185] 8021q: adding VLAN 0 to HW filter on device bond11
[  567.320704][T19185] 8021q: adding VLAN 0 to HW filter on device bond12
[  567.344601][T19185] 8021q: adding VLAN 0 to HW filter on device eth0
[  567.357699][T19185] 8021q: adding VLAN 0 to HW filter on device eth1
[  567.367690][T19185] 8021q: adding VLAN 0 to HW filter on device eth2
[  567.380698][T19185] 8021q: adding VLAN 0 to HW filter on device eth3
[  567.425318][T19185] 8021q: adding VLAN 0 to HW filter on device bond13
[  567.480243][ T7071] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  567.523567][T19189] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  567.591684][T19198] gtp0: entered allmulticast mode
[  567.633367][T19195] syzkaller0: entered promiscuous mode
[  567.649922][T19195] syzkaller0: entered allmulticast mode
[  567.945824][   T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  567.985764][ T7071] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.017797][ T7071] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.044664][ T7071] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.063251][ T7071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.078419][ T7071] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  568.164122][ T7071] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.198412][ T7071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.228295][ T7071] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  568.266751][T12378] vlan0: left allmulticast mode
[  568.288567][T12378] geneve0: left allmulticast mode
[  568.299717][T12378] vlan0: left promiscuous mode
[  568.317899][T12378] geneve0: left promiscuous mode
[  568.333335][T12378] bridge0: port 4(vlan0) entered disabled state
[  568.370936][T12378] macvlan0: left allmulticast mode
[  568.379592][T12378] macvlan0: left promiscuous mode
[  568.399861][T12378] bridge0: port 3(macvlan0) entered disabled state
[  568.426752][T12378] bridge_slave_1: left allmulticast mode
[  568.438820][T12378] bridge_slave_1: left promiscuous mode
[  568.451705][T12378] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.478677][T12378] bridge_slave_0: left allmulticast mode
[  568.495901][T12378] bridge_slave_0: left promiscuous mode
[  568.508484][T12378] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.707670][T12378] dvmrp8: left allmulticast mode
[  569.134298][T12378] gretap0 (unregistering): left promiscuous mode
[  569.153964][ T5636] Bluetooth: hci4: command tx timeout
[  569.275600][T12378] bond6 (unregistering): (slave gretap2): Releasing active interface
[  569.637297][T12378] bond0 (unregistering): left promiscuous mode
[  569.644107][T12378] bond_slave_0: left promiscuous mode
[  569.660340][T12378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  569.670067][T12378] bond0 (unregistering): Released all slaves
[  569.680959][T12378] bond1 (unregistering): Released all slaves
[  569.697310][T12378] bond2 (unregistering): Released all slaves
[  569.723573][T12378] bond3 (unregistering): Released all slaves
[  569.740493][T12378] bond4 (unregistering): (slave veth5): Releasing active interface
[  569.749333][T12378] bond4 (unregistering): Released all slaves
[  569.771941][T12378] bond5 (unregistering): Released all slaves
[  569.787663][T12378] bond6 (unregistering): Released all slaves
[  569.803226][T12378] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface
[  569.814255][T12378] bond7 (unregistering): Released all slaves
[  569.835478][T12378] bond8 (unregistering): Released all slaves
[  569.852342][ T7071] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  569.861137][ T7071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.869902][ T7071] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  570.089680][T19249] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.097655][T19249] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.233414][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.247385][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.356325][T19249] geneve2: left promiscuous mode
[  570.364382][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  570.397501][T19260] IPv6: sit1: Disabled Multicast RS
[  570.436173][   T36] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  570.487673][ T7071] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  570.504834][ T7071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.516954][ T7071] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  570.527606][ T7071] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.543552][ T7071] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.558860][T12378] 
: left promiscuous mode
[  570.644318][ T7071] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.655771][T19278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'.
[  570.681408][ T7071] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  570.761194][T12378] tipc: Left network mode
[  570.815523][T19285] ip6tnl2: entered allmulticast mode
[  570.843258][   T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  570.864322][   T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  570.872453][ T6839] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  570.923700][T19275] 8021q: VLANs not supported on ip_vti0
[  570.954319][T12378] IPVS: stopping master sync thread 13347 ...
[  571.152519][T19299] netlink: 'syz.1.3232': attribute type 10 has an invalid length.
[  571.184235][T19299] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.3232'.
[  571.339915][T19311] x_tables: duplicate underflow at hook 2
[  571.500101][T19319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3234'.
[  571.562073][T19322] netlink: 'syz.1.3236': attribute type 1 has an invalid length.
[  571.642850][T19315] bond3: left promiscuous mode
[  571.655087][T19315] ip6gre1: left promiscuous mode
[  571.661787][T19315] bond4: left promiscuous mode
[  571.669023][T19315] bond5: left promiscuous mode
[  571.733128][T19315] ip6gre2: left promiscuous mode
[  571.778237][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  571.797359][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  571.882061][T19048] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.896700][ T6839] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  571.906941][T19048] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.930017][T19048] bridge_slave_0: entered allmulticast mode
[  571.950055][T19048] bridge_slave_0: entered promiscuous mode
[  572.090139][T19322] bond1: entered promiscuous mode
[  572.106223][T19322] 8021q: adding VLAN 0 to HW filter on device bond1
[  572.188453][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  572.212618][T19332] 8021q: adding VLAN 0 to HW filter on device bond1
[  572.229135][T19332] bond1: (slave vti1): The slave device specified does not support setting the MAC address
[  572.244429][T19348] xt_hashlimit: size too large, truncated to 1048576
[  572.253330][T19332] bond1: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  572.290456][T19332] bond1: (slave vti1): making interface the new active one
[  572.305790][T19332] vti1: entered promiscuous mode
[  572.317181][T19332] bond1: (slave vti1): Enslaving as an active interface with an up link
[  572.392508][T19048] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.412738][T19048] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.451160][T19048] bridge_slave_1: entered allmulticast mode
[  572.480368][T19048] bridge_slave_1: entered promiscuous mode
[  572.527486][T19354] SET target dimension over the limit!
[  572.547511][T19355] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3239'.
[  572.609765][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  572.670443][ T6839] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  572.705366][T19362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3240'.
[  572.711167][T19048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.723210][T19362] netlink: 'syz.0.3240': attribute type 2 has an invalid length.
[  572.742534][T19362] netlink: 'syz.0.3240': attribute type 1 has an invalid length.
[  572.764106][T19362] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3240'.
[  572.847427][T19048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.862960][T19357] netlink: 'syz.0.3240': attribute type 4 has an invalid length.
[  573.110689][T19048] team0: Port device team_slave_0 added
[  573.135234][T19048] team0: Port device team_slave_1 added
[  573.195558][T12378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.262230][T12378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.286165][T19382] netlink: 'syz.4.3246': attribute type 1 has an invalid length.
[  573.926083][T12378] team0 (unregistering): Port device team_slave_1 removed
[  574.208434][T19377] kthread_run failed with err -4
[  574.268451][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  574.425666][T19048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.469368][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.544303][T19048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.609195][T19048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.616190][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.668445][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  574.718134][T19048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.787793][T19424] syzkaller1: entered promiscuous mode
[  574.818240][T19424] syzkaller1: entered allmulticast mode
[  575.157617][T12378] IPVS: stop unused estimator thread 0...
[  575.334596][T19048] hsr_slave_0: entered promiscuous mode
[  575.351104][T19048] hsr_slave_1: entered promiscuous mode
[  575.389252][T19457] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  575.686420][T19457] can: request_module (can-proto-5) failed.
[  575.744241][T19471] Bluetooth: MGMT ver 1.23
[  576.044608][T19482] netlink: 'syz.3.3267': attribute type 13 has an invalid length.
[  576.097164][T19488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3267'.
[  576.311243][T19480] netlink: 'syz.4.3266': attribute type 2 has an invalid length.
[  576.949197][ T6841] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  577.237653][T19488] bond_slave_0: entered promiscuous mode
[  577.262175][T19488] bond_slave_0: entered allmulticast mode
[  577.439836][T19494] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  577.665951][T19494] bond2 (unregistering): Released all slaves
[  577.708938][ T6841] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  577.763178][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  578.034547][T19504] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535)
[  580.966880][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3275'.
[  581.075135][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  581.277814][T19537] netlink: 'syz.3.3276': attribute type 1 has an invalid length.
[  581.368624][T19537] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3276'.
[  582.350621][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  582.358649][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  582.372343][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3279'.
[  582.562626][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'.
[  582.924438][T19554] ip6tnl3: entered allmulticast mode
[  583.007114][T12379] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  583.425942][T19572] netlink: 'syz.1.3282': attribute type 16 has an invalid length.
[  583.487651][T19572] netlink: 'syz.1.3282': attribute type 17 has an invalid length.
[  584.549544][T19586] netlink: 'syz.3.3285': attribute type 4 has an invalid length.
[  584.598500][T19586] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3285'.
[  585.133708][T19048] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  585.235004][T19597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3287'.
[  585.260167][T19048] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  585.302229][T19048] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  585.421057][T19048] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  585.776811][T19048] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  585.846777][T19048] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  585.963144][T19613] bridge_slave_0: left allmulticast mode
[  585.975788][T19613] bridge_slave_0: left promiscuous mode
[  585.996384][T19613] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.060601][T19613] bridge_slave_1: left allmulticast mode
[  586.076732][T19613] bridge_slave_1: left promiscuous mode
[  586.087689][T19613] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.100198][T19620] netlink: 'syz.3.3291': attribute type 4 has an invalid length.
[  586.109544][T19621] netlink: 'syz.3.3291': attribute type 4 has an invalid length.
[  586.231507][T19613] bond0: (slave bond_slave_0): Releasing backup interface
[  586.264053][T19613] bond0: (slave bond_slave_1): Releasing backup interface
[  586.354668][T19613] team0: Port device team_slave_0 removed
[  586.375156][T19613] team0: Port device team_slave_1 removed
[  586.392132][T19613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.496241][T19613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.526367][T19613] net_ratelimit: 12 callbacks suppressed
[  586.526388][T19613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  586.688437][T19048] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  586.760019][T19048] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  587.148138][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  587.263136][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'.
[  587.362644][T19642] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3294'.
[  587.804175][T19642] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  587.844018][T19642] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  587.879634][T19642] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  588.318293][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  588.351832][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.388749][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  588.623269][    C0] sched: DL replenish lagged too much
[  588.833247][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  588.874350][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.923510][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  589.040541][T19048] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.304654][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.337686][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.395275][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  589.718482][T19048] 8021q: adding VLAN 0 to HW filter on device team0
[  589.805492][T12378] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.812756][T12378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.833518][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'.
[  590.023592][T12378] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.030873][T12378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.144927][T16434] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  590.209504][T16434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  590.271113][T16434] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  590.426259][T16434] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  590.465354][T16434] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  590.504800][T16434] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  590.631041][T16434] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  590.679843][T16434] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  590.725575][T16434] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  591.105781][T19480] Set syz1 is full, maxelem 65536 reached
[  591.169488][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.227351][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  591.283028][T19642] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  591.546216][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.609992][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  591.676024][T19642] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  591.973040][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.054544][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  592.117795][T19642] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  592.385160][ T4937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  592.422910][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  592.476550][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  592.518477][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  592.530971][ T4937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  593.871211][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  594.021449][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'.
[  594.060227][T19729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3307'.
[  594.111120][T19729] netlink: 'syz.3.3307': attribute type 2 has an invalid length.
[  594.137670][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'.
[  594.300400][ T7071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.322412][ T7071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.594380][ T4937] Bluetooth: hci3: command tx timeout
[  594.627561][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3309'.
[  594.636738][ T7071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.636811][ T7071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.839960][ T7071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.863533][ T7071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.039800][T19048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.151720][ T7071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  595.163936][ T7071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.788258][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  595.823766][ T7071] bridge_slave_1: left allmulticast mode
[  595.837295][ T7071] bridge_slave_1: left promiscuous mode
[  595.843325][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.867252][ T7071] bridge_slave_0: left allmulticast mode
[  595.879721][ T7071] bridge_slave_0: left promiscuous mode
[  595.895821][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.125925][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'.
[  596.135153][T19797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3315'.
[  596.311070][ T7071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  596.346659][ T7071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  596.374066][ T7071] bond0 (unregistering): Released all slaves
[  596.467551][T19048] veth0_vlan: entered promiscuous mode
[  596.782280][T19048] veth1_vlan: entered promiscuous mode
[  596.797861][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'.
[  596.930268][T19812] macvlan2: entered allmulticast mode
[  596.938946][T19812] gretap0: entered allmulticast mode
[  597.254589][ T7071] hsr_slave_0: left promiscuous mode
[  597.275862][ T7071] hsr_slave_1: left promiscuous mode
[  597.290524][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.307723][ T7071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.341273][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  597.363892][ T7071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  597.443260][ T7071] veth1_macvtap: left promiscuous mode
[  597.458451][ T7071] veth0_macvtap: left promiscuous mode
[  597.708156][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  597.716055][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  597.940736][ T7071] team0 (unregistering): Port device team_slave_1 removed
[  597.970859][ T7071] team0 (unregistering): Port device team_slave_0 removed
[  598.253048][T19048] veth0_macvtap: entered promiscuous mode
[  598.321552][T19048] veth1_macvtap: entered promiscuous mode
[  598.440317][T19048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  598.525974][T19048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  598.586187][T12379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  598.629519][T12379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  598.678851][T12379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  598.689537][T12379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.990658][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  599.183949][T19884] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  599.289608][T19701] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.321896][T19701] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.359520][T19887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3331'.
[  599.368146][T19701] bridge_slave_0: entered allmulticast mode
[  599.390359][T19701] bridge_slave_0: entered promiscuous mode
[  599.450134][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'.
[  599.470753][T19701] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.491347][T19701] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.521726][T19701] bridge_slave_1: entered allmulticast mode
[  599.546045][T19891] netlink: 'syz.3.3332': attribute type 5 has an invalid length.
[  599.554306][T19701] bridge_slave_1: entered promiscuous mode
[  599.610362][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'.
[  599.629091][T19891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3332'.
[  599.669883][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.671305][T19894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3332'.
[  599.697545][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.771962][T19894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3332'.
[  599.841803][T19701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.944573][T19906] bond2: entered promiscuous mode
[  599.961480][T19906] 8021q: adding VLAN 0 to HW filter on device bond2
[  600.072718][T19701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.151827][T19923] FAULT_INJECTION: forcing a failure.
[  600.151827][T19923] name failslab, interval 1, probability 0, space 0, times 0
[  600.216444][T19923] CPU: 0 UID: 0 PID: 19923 Comm: syz.1.3336 Not tainted syzkaller #0 PREEMPT(full) 
[  600.216472][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  600.216485][T19923] Call Trace:
[  600.216494][T19923]  <TASK>
[  600.216503][T19923]  dump_stack_lvl+0xe8/0x150
[  600.216544][T19923]  should_fail_ex+0x40c/0x560
[  600.216580][T19923]  should_failslab+0xa8/0x100
[  600.216614][T19923]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  600.216648][T19923]  ? kmem_cache_alloc_noprof+0x150/0x5f0
[  600.216671][T19923]  ? __anon_vma_prepare+0x10e/0x4e0
[  600.216694][T19923]  ? __anon_vma_prepare+0x10e/0x4e0
[  600.216724][T19923]  __anon_vma_prepare+0x10e/0x4e0
[  600.216755][T19923]  do_pte_missing+0x2f18/0x34b0
[  600.216801][T19923]  handle_mm_fault+0x1b36/0x3080
[  600.216838][T19923]  ? handle_mm_fault+0xec/0x3080
[  600.216869][T19923]  ? __pfx_handle_mm_fault+0x10/0x10
[  600.216912][T19923]  ? lock_mm_and_find_vma+0xa7/0x340
[  600.216941][T19923]  do_user_addr_fault+0x744/0x1340
[  600.217050][T19923]  exc_page_fault+0x6a/0xc0
[  600.217087][T19923]  asm_exc_page_fault+0x26/0x30
[  600.217109][T19923] RIP: 0010:rep_movs_alternative+0x33/0xa0
[  600.217136][T19923] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  600.217154][T19923] RSP: 0018:ffffc90005207d48 EFLAGS: 00050212
[  600.217173][T19923] RAX: 0000000000000258 RBX: 0000000000000010 RCX: 0000000000000010
[  600.217187][T19923] RDX: 0000000000000000 RSI: ffffc90005207da0 RDI: 0000200000000280
[  600.217201][T19923] RBP: ffffc90005207e10 R08: ffffc90005207daf R09: 1ffff92000a40fb5
[  600.217216][T19923] R10: dffffc0000000000 R11: fffff52000a40fb6 R12: 0000200000000290
[  600.217231][T19923] R13: 00007ffffffff000 R14: ffffc90005207da0 R15: 0000200000000280
[  600.217267][T19923]  _copy_to_user+0x8a/0xb0
[  600.217303][T19923]  put_timespec64+0xc8/0x130
[  600.217335][T19923]  ? __pfx_put_timespec64+0x10/0x10
[  600.217378][T19923]  __x64_sys_clock_gettime+0x22a/0x290
[  600.217405][T19923]  ? __pfx___x64_sys_clock_gettime+0x10/0x10
[  600.217439][T19923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.217462][T19923]  do_syscall_64+0x174/0x580
[  600.217491][T19923]  ? trace_irq_disable+0x3b/0x140
[  600.217519][T19923]  ? clear_bhb_loop+0x40/0x90
[  600.217563][T19923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.217585][T19923] RIP: 0033:0x7f0f4c59de59
[  600.217605][T19923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.217622][T19923] RSP: 002b:00007f0f4a7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4
[  600.217653][T19923] RAX: ffffffffffffffda RBX: 00007f0f4c825fa0 RCX: 00007f0f4c59de59
[  600.217668][T19923] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000001
[  600.217682][T19923] RBP: 00007f0f4a7f6090 R08: 0000000000000000 R09: 0000000000000000
[  600.217695][T19923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  600.217707][T19923] R13: 00007f0f4c826038 R14: 00007f0f4c825fa0 R15: 00007fff86babe08
[  600.217742][T19923]  </TASK>
[  600.655270][T19701] team0: Port device team_slave_0 added
[  600.693518][T19701] team0: Port device team_slave_1 added
[  600.730806][T19701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.737794][T19701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.764007][T19701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.776856][T19701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.784118][T19701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.810240][T19701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.876701][ T7071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.906689][ T7071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.931537][T19701] hsr_slave_0: entered promiscuous mode
[  600.946293][T19701] hsr_slave_1: entered promiscuous mode
[  600.960663][T19701] debugfs: 'hsr0' already exists in 'hsr'
[  600.977316][T19701] Cannot create hsr debugfs directory
[  601.682916][   T30] audit: type=1804 audit(1784202368.483:14): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3343" name="/newroot/66/cgroup.controllers" dev="tmpfs" ino=356 res=1 errno=0
[  601.756496][   T30] audit: type=1800 audit(1784202368.483:15): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3343" name="cgroup.controllers" dev="tmpfs" ino=356 res=0 errno=0
[  601.795210][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'.
[  602.042801][T19701] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  602.079368][T19701] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  602.106351][T19701] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  602.133431][T19701] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  602.144956][T19978] netlink: 'syz.3.3347': attribute type 5 has an invalid length.
[  602.150138][T19701] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  602.196228][T19701] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  602.215227][T19701] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  602.246877][T19701] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  602.338664][T19988] veth1_to_bond: entered promiscuous mode
[  602.497170][T19701] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.532369][T19701] 8021q: adding VLAN 0 to HW filter on device team0
[  602.574204][T12377] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.581488][T12377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.649447][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.656732][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.849978][T20009] sctp: [Deprecated]: syz.3.3352 (pid 20009) Use of int in max_burst socket option deprecated.
[  602.849978][T20009] Use struct sctp_assoc_value instead
[  603.151004][T19981] veth1_to_bond: left promiscuous mode
[  603.564584][T20029] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  603.611937][T20039] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  603.762452][T20046] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  603.893691][T20049] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3358'.
[  604.022260][T20049] netlink: 'syz.2.3358': attribute type 1 has an invalid length.
[  604.124983][T20055] syzkaller1: entered promiscuous mode
[  604.144378][T20055] syzkaller1: entered allmulticast mode
[  604.259587][T20060] veth3: entered allmulticast mode
[  604.297097][T20063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3360'.
[  604.485810][T19701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.909353][T20086] netlink: 'syz.2.3362': attribute type 29 has an invalid length.
[  605.206912][T20108] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3367'.
[  605.257427][T20111] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3367'.
[  605.376894][T19701] veth0_vlan: entered promiscuous mode
[  605.433035][T19701] veth1_vlan: entered promiscuous mode
[  605.506856][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3370'.
[  605.576424][T19701] veth0_macvtap: entered promiscuous mode
[  605.600525][T19701] veth1_macvtap: entered promiscuous mode
[  605.653276][T19701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.706462][T19701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.797738][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.821383][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.846069][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3371'.
[  605.859652][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.884255][   T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.203233][T12377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.222730][T12377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.249038][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  606.321995][T20144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3375'.
[  606.369719][T12377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.410997][T12377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.857390][T20165] netlink: 'syz.0.3380': attribute type 1 has an invalid length.
[  606.872198][T20170] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  606.881707][ T6839] IPVS: starting estimator thread 0...
[  606.903245][T20166] can: request_module (can-proto-0) failed.
[  606.924632][T20165] netlink: 'syz.0.3380': attribute type 2 has an invalid length.
[  606.978155][T20173] IPVS: using max 26 ests per chain, 62400 per kthread
[  607.755141][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  607.772031][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  607.787655][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  607.801095][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  607.809967][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  608.240554][T20227] bond0: entered promiscuous mode
[  608.280230][T20227] bond0: left promiscuous mode
[  608.297621][T20233] xt_hashlimit: size too large, truncated to 1048576
[  608.406051][T20232] bond0: entered promiscuous mode
[  608.426597][T20232] bond0: left promiscuous mode
[  608.456977][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3392'.
[  608.516715][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  608.852651][T20251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3395'.
[  608.899171][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'.
[  609.354060][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3397'.
[  609.691765][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3397'.
[  609.737492][T20287] tipc: Started in network mode
[  609.761550][T20287] tipc: Node identity ac1414aa, cluster identity 4711
[  609.779829][T20287] tipc: Enabled bearer <udp:s>, priority 10
[  609.869367][ T5636] Bluetooth: hci0: command tx timeout
[  610.068154][T20300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  610.137554][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  610.316446][T20312] netlink: 'syz.5.3405': attribute type 1 has an invalid length.
[  610.426785][T20209] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.442562][T20209] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.450062][T20209] bridge_slave_0: entered allmulticast mode
[  610.458818][T20209] bridge_slave_0: entered promiscuous mode
[  610.468443][T20209] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.475768][T20209] bridge0: port 2(bridge_slave_1) entered disabled state
[  610.483406][T20209] bridge_slave_1: entered allmulticast mode
[  610.493201][T20209] bridge_slave_1: entered promiscuous mode
[  610.542959][T20209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.560154][T20209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.722813][T20209] team0: Port device team_slave_0 added
[  610.774340][T20209] team0: Port device team_slave_1 added
[  610.882209][T20330] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  610.897910][T20330] bond1 (unregistering): Released all slaves
[  611.005480][ T5732] tipc: Node number set to 2886997162
[  611.021733][T20209] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.038578][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.098632][T20209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.187483][T20209] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.224293][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.279066][T20209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  611.291584][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3410'.
[  611.305380][T20351] netlink: 'syz.2.3412': attribute type 21 has an invalid length.
[  611.356127][T20351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3412'.
[  611.376657][T20351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3412'.
[  611.540391][T20209] hsr_slave_0: entered promiscuous mode
[  611.557654][T20209] hsr_slave_1: entered promiscuous mode
[  611.572503][T20209] debugfs: 'hsr0' already exists in 'hsr'
[  611.583812][T20209] Cannot create hsr debugfs directory
[  611.668747][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  611.928368][T20378] netlink: 'syz.2.3419': attribute type 6 has an invalid length.
[  611.948080][ T5636] Bluetooth: hci0: command tx timeout
[  612.166306][T20363] syzkaller1: entered promiscuous mode
[  612.178539][T20363] syzkaller1: entered allmulticast mode
[  612.276571][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3421'.
[  612.464506][T20387] bond1 (unregistering): Released all slaves
[  612.481897][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'.
[  612.516119][T20401] netlink: 193 bytes leftover after parsing attributes in process `syz.1.3426'.
[  612.556632][T20383] dummy0: entered promiscuous mode
[  612.632191][T20398] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  612.736692][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'.
[  613.001880][T20407] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[  613.061601][T20419] bond1 (unregistering): (slave macvlan1): Releasing backup interface
[  613.109669][T20419] bond1 (unregistering): Released all slaves
[  613.161926][T20423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  614.029046][ T5636] Bluetooth: hci0: command tx timeout
[  614.175508][T20455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3435'.
[  614.199347][T20455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3435'.
[  615.811683][T20413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.873901][T20209] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  615.946708][T20209] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  615.981815][T20209] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  616.020065][T20209] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  616.109043][ T5636] Bluetooth: hci0: command tx timeout
[  616.235604][T20209] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  616.276962][T20209] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  616.291168][T20209] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  616.335330][T20209] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  616.432737][ T5636] Bluetooth: hci5: command 0x0406 tx timeout
[  616.841878][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'.
[  616.862842][T20530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3446'.
[  616.931631][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'.
[  617.066049][T20534] vlan2: entered promiscuous mode
[  617.072261][T20534] bridge0: entered promiscuous mode
[  617.187350][T20546] Bluetooth: MGMT ver 1.23
[  617.195803][T20542] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.203796][T20542] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.340574][T20542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.371161][T20542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.617052][T20542] veth3: left allmulticast mode
[  617.622307][T20542] vlan2: left promiscuous mode
[  617.634894][T20542] bridge0: left promiscuous mode
[  617.650365][T20209] 8021q: adding VLAN 0 to HW filter on device bond0
[  617.669788][T20540] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3450'.
[  617.712858][ T6669] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.730355][T20563] openvswitch: netlink: Multiple metadata blocks provided
[  617.749818][ T6669] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.765562][ T6669] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.806302][ T6669] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.866066][T20564] can: request_module (can-proto-5) failed.
[  617.924146][T20569] netlink: 'syz.2.3457': attribute type 1 has an invalid length.
[  617.924518][T20570] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  617.942087][T20209] 8021q: adding VLAN 0 to HW filter on device team0
[  617.973979][T20569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  618.079245][T20579] openvswitch: netlink: Message has 1 unknown bytes.
[  618.099590][T12377] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.106997][T12377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.153908][T12377] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.161193][T12377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.242574][T20577] bridge4: entered promiscuous mode
[  618.249563][T20588] openvswitch: netlink: Flow actions attr not present in new flow.
[  618.269231][T20577] bridge4: entered allmulticast mode
[  618.300789][T20577] team0: Port device bridge4 added
[  618.360089][   T24] IPVS: starting estimator thread 0...
[  618.468049][T20595] IPVS: using max 25 ests per chain, 60000 per kthread
[  618.577495][T20593] bridge0: port 1(vlan2) entered blocking state
[  618.588979][T20593] bridge0: port 1(vlan2) entered disabled state
[  618.620089][T20593] vlan2: entered allmulticast mode
[  618.633830][T20593] geneve0: entered allmulticast mode
[  618.659316][T20593] vlan2: entered promiscuous mode
[  618.682965][T20593] geneve0: entered promiscuous mode
[  618.734458][T20577] bridge5: entered promiscuous mode
[  618.750842][T20577] bridge5: entered allmulticast mode
[  618.773375][T20577] team0: Port device bridge5 added
[  618.897764][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'.
[  619.789053][T20628] syzkaller1: entered promiscuous mode
[  619.827257][T20628] syzkaller1: entered allmulticast mode
[  620.349898][T20652] ip6gre1: entered promiscuous mode
[  620.362488][T20652] ip6gre1: entered allmulticast mode
[  620.379055][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.402054][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.411700][   T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.659780][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'.
[  620.687740][T20666] netlink: 'syz.0.3468': attribute type 21 has an invalid length.
[  620.942035][T20209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.942226][T20679] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  620.966042][   T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  621.012329][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3471'.
[  621.280918][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'.
[  621.283139][T20694] sctp: [Deprecated]: syz.1.3476 (pid 20694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  621.283139][T20694] Use struct sctp_sack_info instead
[  621.323190][T20209] veth0_vlan: entered promiscuous mode
[  621.334930][T20696] xt_TCPMSS: Only works on TCP SYN packets
[  621.371371][T20209] veth1_vlan: entered promiscuous mode
[  621.390049][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  621.453179][T20694] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3476'.
[  621.455313][T20209] veth0_macvtap: entered promiscuous mode
[  621.479912][T20209] veth1_macvtap: entered promiscuous mode
[  621.515826][T20694] veth1_to_hsr: entered promiscuous mode
[  621.530270][T20694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3476'.
[  621.555636][T20694] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  621.614616][T20209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.671568][T20209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.705766][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.732715][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.757556][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.775107][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.981217][T20706] netlink: 'syz.0.3480': attribute type 61 has an invalid length.
[  622.027640][ T7071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.068459][ T7071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.136293][T20707] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  622.177463][ T7071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.213722][ T7071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.353313][T20723] syzkaller0: entered promiscuous mode
[  622.397283][T20723] syzkaller0: entered allmulticast mode
[  622.616547][T20738] netlink: 'syz.0.3487': attribute type 15 has an invalid length.
[  622.935030][T20715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.062974][ T6839] IPVS: starting estimator thread 0...
[  623.198113][T20763] IPVS: using max 28 ests per chain, 67200 per kthread
[  623.429971][T20774] syzkaller0: entered promiscuous mode
[  623.435516][T20774] syzkaller0: entered allmulticast mode
[  623.561011][T20788] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3499'.
[  623.620127][T20776] syzkaller0: entered promiscuous mode
[  623.625664][T20776] syzkaller0: entered allmulticast mode
[  624.268497][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  624.590095][ T1317] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  627.148296][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  627.718283][T20834] veth1_to_hsr: left promiscuous mode
[  627.730275][T20834] dummy0: left allmulticast mode
[  627.735393][T20834] dummy0: left promiscuous mode
[  627.743580][T20834] macsec1: left promiscuous mode
[  627.749453][T20834] macsec1: left allmulticast mode
[  627.773540][T20834] gtp0: left allmulticast mode
[  627.788410][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  627.797521][T20834] bond1: left promiscuous mode
[  627.802354][T20834] vti1: left promiscuous mode
[  627.852295][T20834] gretap0: left allmulticast mode
[  627.857528][T20834] macvlan2: left allmulticast mode
[  627.888058][T20834] bond2: left promiscuous mode
[  627.902953][T20834] bridge4: left promiscuous mode
[  627.909434][T20834] bridge4: left allmulticast mode
[  627.923855][T20834] bridge5: left promiscuous mode
[  627.928825][T20834] bridge5: left allmulticast mode
[  627.939555][T20834] ip6gre1: left promiscuous mode
[  627.944525][T20834] ip6gre1: left allmulticast mode
[  628.352062][T20877] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3514'.
[  628.472128][T20875] veth3: entered allmulticast mode
[  628.537023][T20875] team0: Port device veth3 added
[  628.978995][T20899] netlink: 'syz.5.3521': attribute type 1 has an invalid length.
[  628.986907][T20899] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3521'.
[  628.987739][T20892] 8021q: adding VLAN 0 to HW filter on device bond3
[  629.015453][T20892] bond2: (slave bond3): Enslaving as an active interface with an up link
[  629.093544][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3520'.
[  629.521170][T20933] netlink: 'syz.5.3522': attribute type 2 has an invalid length.
[  629.674737][T20929] syzkaller0: entered promiscuous mode
[  629.680315][T20929] syzkaller0: entered allmulticast mode
[  629.714777][T20933] 
þ: entered promiscuous mode
[  630.040461][T20951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3527'.
[  630.106130][T20956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'.
[  630.118372][T20955] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3528'.
[  630.147034][T20955] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3528'.
[  630.289307][T20947] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002
[  630.987455][T20981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  633.615363][T20952] tipc: Started in network mode
[  633.621251][T20952] tipc: Node identity ac14140f, cluster identity 4711
[  633.633953][T20952] tipc: Enabled bearer <udp:syz2>, priority 10
[  633.745537][T20984] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  634.151292][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'.
[  634.234382][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'.
[  634.268272][T21005] netlink: 'syz.2.3538': attribute type 18 has an invalid length.
[  634.944593][ T5754] tipc: Node number set to 2886997007
[  634.966752][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3546'.
[  635.032412][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3546'.
[  635.469084][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  635.600707][T21072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3556'.
[  635.999450][T21078] syzkaller1: entered promiscuous mode
[  636.012967][T21078] syzkaller1: entered allmulticast mode
[  636.323327][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'.
[  636.435232][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'.
[  636.445253][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'.
[  636.612431][T21113] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3565'.
[  636.854041][T21124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3568'.
[  637.066126][T21136] netlink: 'syz.3.3570': attribute type 1 has an invalid length.
[  637.116485][T21135] netlink: 'syz.0.3573': attribute type 1 has an invalid length.
[  637.206714][T21141] ipt_REJECT: TCP_RESET invalid for non-tcp
[  637.807406][T21159] sctp: [Deprecated]: syz.0.3581 (pid 21159) Use of int in maxseg socket option.
[  637.807406][T21159] Use struct sctp_assoc_value instead
[  638.180732][T21166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  638.190040][T21166] syzkaller0: entered promiscuous mode
[  638.195623][T21166] syzkaller0: entered allmulticast mode
[  638.268555][T21166] tipc: Resetting bearer <eth:syzkaller0>
[  638.286495][T21166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.415901][T21163] netlink: 'syz.2.3582': attribute type 3 has an invalid length.
[  638.424045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.425672][T21178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  638.558162][T21178] syzkaller0: entered promiscuous mode
[  638.563700][T21178] syzkaller0: entered allmulticast mode
[  638.570925][T21178] tipc: Resetting bearer <eth:syzkaller0>
[  638.688133][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.700868][T21178] bond4 (unregistering): Released all slaves
[  638.825410][T21188] hsr_slave_0: left promiscuous mode
[  638.831912][T21188] hsr_slave_1: left promiscuous mode
[  638.900518][T21187] vlan1: entered promiscuous mode
[  639.102337][T21164] tipc: Resetting bearer <eth:syzkaller0>
[  639.159368][T21164] tipc: Disabling bearer <eth:syzkaller0>
[  639.171732][T21177] tipc: Resetting bearer <eth:syzkaller0>
[  639.349195][T21195] __nla_validate_parse: 4 callbacks suppressed
[  639.349216][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'.
[  639.570733][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'.
[  639.573857][T21200] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3590'.
[  639.631641][T21201] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3589'.
[  639.950192][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3592'.
[  642.061765][ T5636] Bluetooth: hci2: command 0x041b tx timeout
[  643.274712][T21177] tipc: Disabling bearer <eth:syzkaller0>
[  643.299936][T21209] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  643.310147][T21209] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  643.320543][T21209] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  643.427216][T21226] vlan2: entered promiscuous mode
[  643.432413][T21226] bridge0: entered promiscuous mode
[  643.709968][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3602'.
[  643.787237][T21248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3603'.
[  643.983727][  T809] IPVS: starting estimator thread 0...
[  644.088115][T21257] IPVS: using max 25 ests per chain, 60000 per kthread
[  644.209296][ T4937] Bluetooth: hci2: command 0x041b tx timeout
[  644.328558][T21265] x_tables: duplicate underflow at hook 1
[  644.451795][T21275] x_tables: duplicate underflow at hook 1
[  644.692255][T21279] syzkaller0: entered promiscuous mode
[  644.724536][T21279] syzkaller0: entered allmulticast mode
[  644.731860][T21282] IPv6: addrconf: prefix option has invalid lifetime
[  644.822657][T21286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.123768][T21291] pimreg: entered allmulticast mode
[  645.138287][T21291] pimreg: left allmulticast mode
[  645.215030][T21292] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3614'.
[  645.234189][T21293] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3614'.
[  645.244678][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3614'.
[  645.256895][T21293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3614'.
[  645.265923][T21292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3614'.
[  645.274982][T21292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3614'.
[  646.181081][T21318] netlink: 'syz.5.3618': attribute type 11 has an invalid length.
[  646.331967][ T4937] Bluetooth: hci2: command 0x041b tx timeout
[  646.491621][T21330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3625'.
[  646.961631][T21345] netlink: 'syz.3.3627': attribute type 4 has an invalid length.
[  646.982590][T21346] netlink: 'syz.1.3629': attribute type 4 has an invalid length.
[  646.994036][T21345] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3627'.
[  647.032828][T21345] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  647.121615][T21346] netlink: 'syz.1.3629': attribute type 4 has an invalid length.
[  647.287295][T21358] Bluetooth: MGMT ver 1.23
[  647.359757][T21357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  647.370123][T21357] batman_adv: batadv0: Adding interface: gretap1
[  647.412485][T21357] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  647.465998][T21357] batman_adv: batadv0: Interface activated: gretap1
[  647.907561][T21384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3638'.
[  648.019660][T21386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3639'.
[  648.088304][T21389] tipc: Invalid UDP bearer configuration
[  648.088363][T21389] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  648.135198][T21392] netlink: 'syz.2.3638': attribute type 30 has an invalid length.
[  648.143075][T21392] netlink: 'syz.2.3638': attribute type 2 has an invalid length.
[  648.297275][T21392] bond1 (unregistering): Released all slaves
[  648.375408][ T5636] Bluetooth: hci2: command 0x041b tx timeout
[  648.382912][ T4937] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  648.391510][T21391] batadv_slave_1: entered promiscuous mode
[  648.399528][T21391] macvlan2: entered allmulticast mode
[  648.405367][T21391] batadv_slave_1: entered allmulticast mode
[  648.415086][T21391] batman_adv: batadv0: Adding interface: macvlan2
[  648.441272][T21391] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.509426][T21391] batman_adv: batadv0: Interface activated: macvlan2
[  648.766429][T21419] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  648.768193][T21411] ipvlan2: entered promiscuous mode
[  649.378044][T21435] "syz.3.3652" (21435) uses obsolete ecb(arc4) skcipher
[  649.503476][T21440] syzkaller0: entered promiscuous mode
[  649.519944][T21440] syzkaller0: entered allmulticast mode
[  649.647746][T21440] IPv6: sit2: Disabled Multicast RS
[  649.657587][T21454] netlink: 'syz.1.3656': attribute type 13 has an invalid length.
[  649.906973][   T30] audit: type=1804 audit(1784202416.703:16): pid=21469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3661" name="/newroot/51/cgroup.controllers" dev="tmpfs" ino=278 res=1 errno=0
[  649.947739][   T30] audit: type=1800 audit(1784202416.743:17): pid=21469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3661" name="cgroup.controllers" dev="tmpfs" ino=278 res=0 errno=0
[  650.421553][T21494] __nla_validate_parse: 4 callbacks suppressed
[  650.421574][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3669'.
[  650.505330][ T4937] Bluetooth: hci2: command 0x041b tx timeout
[  651.330881][T21538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.367747][T21540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.414097][T21531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.445465][T21531] syzkaller0: entered promiscuous mode
[  651.454030][T21531] syzkaller0: entered allmulticast mode
[  651.510333][T21531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  651.566868][T21527] tipc: Resetting bearer <eth:syzkaller0>
[  651.716207][T21527] tipc: Disabling bearer <eth:syzkaller0>
[  651.740575][T21548] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  651.748913][T21548] bridge0: port 3(macvlan2) entered blocking state
[  651.755690][T21548] bridge0: port 3(macvlan2) entered disabled state
[  651.763194][T21548] macvlan2: entered allmulticast mode
[  651.769243][T21548] batadv0: entered allmulticast mode
[  651.777135][T21548] macvlan2: entered promiscuous mode
[  651.783187][T21548] batadv0: entered promiscuous mode
[  652.003661][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3689'.
[  652.021099][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3689'.
[  652.035464][T21565] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3689'.
[  652.454352][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  652.463555][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  652.474016][T21586] xt_TCPMSS: Only works on TCP SYN packets
[  652.480591][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  652.524813][   T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  652.588211][ T4937] Bluetooth: hci2: command 0x041b tx timeout
[  653.614544][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'.
[  654.138693][T21647] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  654.155820][T21645] IPv6: NLM_F_CREATE should be specified when creating new route
[  654.192745][T21645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  654.200018][T21645] IPv6: NLM_F_CREATE should be set when creating new route
[  654.207309][T21645] IPv6: NLM_F_CREATE should be set when creating new route
[  654.214575][T21645] IPv6: NLM_F_CREATE should be set when creating new route
[  654.265019][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'.
[  654.376451][T21647] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  654.430292][T21647] bond1 (unregistering): Released all slaves
[  654.543518][T21667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3715'.
[  654.785467][T21654] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.793356][T21654] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.912365][T21679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3717'.
[  654.976655][T21679] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3717'.
[  654.988092][T21682] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3721'.
[  655.039216][T21654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.107211][T21654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.181426][T21654] batman_adv: batadv0: Interface deactivated: macvlan2
[  655.222077][T21654] batadv_slave_1: left allmulticast mode
[  655.292501][T16434] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  655.317197][T16434] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.350580][T16434] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  655.368371][T16434] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.454055][T21693] syzkaller0: entered promiscuous mode
[  655.473211][T21693] syzkaller0: entered allmulticast mode
[  655.495977][T16434] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  655.508076][T16434] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.526690][T16434] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  655.537116][T16434] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.008906][T21708] __nla_validate_parse: 1 callbacks suppressed
[  656.008929][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'.
[  656.157527][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3734'.
[  656.582460][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'.
[  656.683797][T21743] netlink: 'syz.1.3738': attribute type 21 has an invalid length.
[  656.691684][T21743] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3738'.
[  656.805184][T21744] netlink: 'syz.1.3738': attribute type 10 has an invalid length.
[  656.961667][T21743] netlink: 'syz.1.3738': attribute type 4 has an invalid length.
[  656.969462][T21743] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3738'.
[  656.981292][T21744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  657.003979][T21744] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  657.242063][T21752] netlink: 'syz.5.3740': attribute type 1 has an invalid length.
[  657.590971][T21761] tipc: Enabled bearer <udp:s>, priority 10
[  657.803631][T21763] 8021q: adding VLAN 0 to HW filter on device bond0
[  657.812532][T21763] 8021q: adding VLAN 0 to HW filter on device team0
[  657.827310][T21763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.867487][T21763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.879137][T21763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.906318][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'.
[  657.924698][T21763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  657.935103][T21763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  657.953001][T21763] veth1_vlan: left promiscuous mode
[  657.962498][T21763] veth0_vlan: left promiscuous mode
[  657.969534][T21763] veth0_vlan: entered promiscuous mode
[  657.977587][T21763] veth1_vlan: entered promiscuous mode
[  657.997463][T21763] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  658.033694][T21763] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  658.059653][T21763] 8021q: adding VLAN 0 to HW filter on device bond1
[  658.081107][T21763] gretap0: entered promiscuous mode
[  658.093806][T21763] 8021q: adding VLAN 0 to HW filter on device bond2
[  658.102283][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3749'.
[  658.139310][T21779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.148455][T21763] tun0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  658.218186][ T5754] dummy0: entered promiscuous mode
[  658.228064][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.246732][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.300158][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.307451][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  658.405097][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.408765][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3751'.
[  658.414381][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.422971][T21786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'.
[  658.442296][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.457535][T12379] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.476817][T12379] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.485073][T21781] dummy0: mtu less than device minimum
[  658.541401][T12379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  658.550175][T12379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  658.576908][ T5627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  658.590945][ T5754] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.682114][ T5627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  658.937109][T21795] syzkaller1: entered promiscuous mode
[  658.958909][T21795] syzkaller1: entered allmulticast mode
[  658.978857][T21802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3753'.
[  659.084988][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  659.264782][ T6841] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  659.391757][ T5627] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  660.100046][T21830] bridge0: port 3(macvlan2) entered blocking state
[  660.106806][T21830] bridge0: port 3(macvlan2) entered forwarding state
[  660.154011][T21830] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.163876][T21830] 8021q: adding VLAN 0 to HW filter on device team0
[  660.252469][T21830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  660.375282][ T4937] block nbd2: Receive control failed (result -32)
[  660.393896][T21830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.411470][T21830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.445805][T21830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  660.464498][T21830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  660.483053][T21830] veth1_vlan: left promiscuous mode
[  660.508073][T21830] veth0_vlan: left promiscuous mode
[  660.515447][T21830] veth0_vlan: entered promiscuous mode
[  660.524856][T21830] veth1_vlan: entered promiscuous mode
[  660.537820][T21830] veth1_macvtap: left promiscuous mode
[  660.545087][T21830] veth0_macvtap: left promiscuous mode
[  660.552257][T21830] veth0_macvtap: entered promiscuous mode
[  660.559938][T21830] veth1_macvtap: entered promiscuous mode
[  660.581587][T21830] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  660.633724][T21846] vlan3: entered promiscuous mode
[  660.642872][T21846] ip6gretap0: entered promiscuous mode
[  660.665841][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.673115][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.690042][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.697332][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.735261][T21826] nbd2: detected capacity change from 0 to 63
[  660.746309][   T25] block nbd2: Dead connection, failed to find a fallback
[  660.757079][   T25] block nbd2: shutting down sockets
[  660.764618][   T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.777957][   T25] buffer_io_error: 18 callbacks suppressed
[  660.777978][   T25] Buffer I/O error on dev nbd2, logical block 0, async page read
[  660.792012][   T25] Buffer I/O error on dev nbd2, logical block 1, async page read
[  660.799832][   T25] Buffer I/O error on dev nbd2, logical block 2, async page read
[  660.807726][   T25] Buffer I/O error on dev nbd2, logical block 3, async page read
[  660.825773][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.847035][ T1705] Buffer I/O error on dev nbd2, logical block 0, async page read
[  660.859087][T21852] bond3: entered allmulticast mode
[  660.867469][ T7071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.868099][ T1705] Buffer I/O error on dev nbd2, logical block 1, async page read
[  660.876169][ T7071] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.884194][ T1705] Buffer I/O error on dev nbd2, logical block 2, async page read
[  660.891658][ T7071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.891701][ T7071] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.919525][ T1705] Buffer I/O error on dev nbd2, logical block 3, async page read
[  660.929572][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.939364][ T1705] Buffer I/O error on dev nbd2, logical block 0, async page read
[  660.947813][ T1705] Buffer I/O error on dev nbd2, logical block 1, async page read
[  660.956957][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.966969][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.977039][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  660.988973][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  661.001876][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  661.011943][T18430] ldm_validate_partition_table(): Disk read failed.
[  661.019091][ T1705] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  661.029102][ T1705] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  661.044179][T18430] Dev nbd2: unable to read RDB block 0
[  661.055854][T18430]  nbd2: unable to read partition table
[  661.108698][T21856] __nla_validate_parse: 1 callbacks suppressed
[  661.108730][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  661.122991][T18430] ldm_validate_partition_table(): Disk read failed.
[  661.123900][T21856] netlink: 'syz.2.3768': attribute type 12 has an invalid length.
[  661.137245][T18430] Dev nbd2: unable to read RDB block 0
[  661.160720][T18430]  nbd2: unable to read partition table
[  661.162161][ T5754] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2
[  661.278838][   T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  661.290380][   T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  661.311587][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  661.320601][T21856] netlink: 'syz.2.3768': attribute type 12 has an invalid length.
[  661.329318][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  661.337562][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  661.461892][T21863] netlink: 'syz.2.3771': attribute type 4 has an invalid length.
[  661.488915][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'.
[  661.513413][T21863] netlink: 'syz.2.3771': attribute type 4 has an invalid length.
[  661.546584][T21869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3772'.
[  661.561546][T21869] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3772'.
[  661.771537][T21877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'.
[  661.828723][T21877] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  661.836358][T21877] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  661.953091][T21884] netlink: 'syz.1.3776': attribute type 1 has an invalid length.
[  662.106327][T21880] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  662.175154][T21891] netlink: 'syz.2.3778': attribute type 1 has an invalid length.
[  662.192440][T21884] bond4: entered promiscuous mode
[  662.197781][T21891] netlink: 'syz.2.3778': attribute type 12 has an invalid length.
[  662.214553][T21884] 8021q: adding VLAN 0 to HW filter on device bond4
[  662.221544][T21891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3778'.
[  662.264185][T21892] 8021q: adding VLAN 0 to HW filter on device bond4
[  662.271439][T21892] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address
[  662.281602][T21892] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  662.294360][T21892] bond4: (slave xfrm1): making interface the new active one
[  662.324595][T21892] xfrm1: entered promiscuous mode
[  662.332618][T21892] xfrm1: left promiscuous mode
[  662.711121][T21902] netlink: 'syz.2.3781': attribute type 1 has an invalid length.
[  662.977057][T21902] 8021q: adding VLAN 0 to HW filter on device bond1
[  663.176885][T21900] bond1: (slave geneve2): making interface the new active one
[  663.220168][T21900] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  664.389451][T21961] netlink: 'syz.3.3792': attribute type 2 has an invalid length.
[  664.417586][T21961] netlink: 'syz.3.3792': attribute type 11 has an invalid length.
[  664.435531][T21961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3792'.
[  664.689626][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'.
[  664.871972][T21989] syzkaller0: entered promiscuous mode
[  664.888251][T21989] syzkaller0: entered allmulticast mode
[  665.337772][T22012] 8021q: VLANs not supported on vcan0
[  665.548985][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  665.549005][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  666.226698][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'.
[  666.235720][T22043] netlink: 'syz.3.3813': attribute type 5 has an invalid length.
[  666.244087][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'.
[  666.321230][T22050] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3815'.
[  666.440853][T22051] wlan0: mtu less than device minimum
[  666.470181][T22051] bond0: (slave wlan0): Error -22 calling dev_set_mtu
[  666.526913][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'.
[  666.539501][T12377] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  666.557773][T12377] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  666.572749][T22043] sctp: [Deprecated]: syz.3.3813 (pid 22043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  666.572749][T22043] Use struct sctp_sack_info instead
[  666.577573][T12377] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  666.617571][T22043] sctp: [Deprecated]: syz.3.3813 (pid 22043) Use of struct sctp_assoc_value in delayed_ack socket option.
[  666.617571][T22043] Use struct sctp_sack_info instead
[  666.638466][T12377] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  666.899046][T22065] set match dimension is over the limit!
[  667.040291][T22070] netlink: 'syz.0.3820': attribute type 3 has an invalid length.
[  667.125543][T22070] syzkaller0: entered promiscuous mode
[  667.138519][T22070] syzkaller0: entered allmulticast mode
[  667.490215][T22080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3823'.
[  667.664278][T22088] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3825'.
[  667.750541][T22090] netlink: 'syz.1.3825': attribute type 13 has an invalid length.
[  667.758831][T22090] netlink: 'syz.1.3825': attribute type 17 has an invalid length.
[  667.775110][T22086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3824'.
[  667.788648][T22086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3824'.
[  667.918800][T22095] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3827'.
[  667.947721][T22088] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.955449][T22088] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.320674][T22088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.421887][T22088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.241051][T22126] netlink: 'syz.5.3835': attribute type 58 has an invalid length.
[  669.256816][T22126] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3835'.
[  669.460952][T22088] batman_adv: batadv0: Interface deactivated: gretap1
[  669.484749][T22090] gretap0: left promiscuous mode
[  669.562968][T22090] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.571974][T22090] 8021q: adding VLAN 0 to HW filter on device team0
[  669.582650][T22090] dummy0: left promiscuous mode
[  669.590635][T22090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.617561][T22090] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.624921][T22090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.635858][T22090] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.643103][T22090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.664790][T22090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.674892][T22090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.699185][T22090] veth1_vlan: left promiscuous mode
[  669.705455][T22090] veth0_vlan: left promiscuous mode
[  669.714143][T22090] veth0_vlan: entered promiscuous mode
[  669.722583][T22090] veth1_vlan: entered promiscuous mode
[  669.739368][T22090] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.751185][T22090] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.767847][T22090] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.792420][T22090] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.810731][T22090] gretap0: entered promiscuous mode
[  669.822987][T22090] 8021q: adding VLAN 0 to HW filter on device bond2
[  669.881000][T22090] batman_adv: batadv0: Interface activated: gretap1
[  669.895678][T22090] bond3: left allmulticast mode
[  669.901747][T22090] 8021q: adding VLAN 0 to HW filter on device bond3
[  669.911653][T22090] 8021q: adding VLAN 0 to HW filter on device bond4
[  669.937394][T22093] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.950737][ T6839] dummy0: entered promiscuous mode
[  670.314046][T16434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  670.344182][T22139] vlan3: entered allmulticast mode
[  670.357686][T22139] bond0: entered allmulticast mode
[  670.470383][T22140] syzkaller0: entered promiscuous mode
[  670.486983][T22140] syzkaller0: entered allmulticast mode
[  670.507660][T22140] tipc: Started in network mode
[  670.518018][T22140] tipc: Node identity 2671ac4fbc0a, cluster identity 4711
[  670.584455][T22140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  670.630089][T12377] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  670.671736][T22140] tipc: Resetting bearer <eth:syzkaller0>
[  670.741726][T22138] tipc: Resetting bearer <eth:syzkaller0>
[  670.805230][T22138] tipc: Disabling bearer <eth:syzkaller0>
[  671.336237][T22189] __nla_validate_parse: 100 callbacks suppressed
[  671.336259][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3852'.
[  671.862020][T22193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3855'.
[  671.890823][T22193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3855'.
[  672.437332][T22233] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3863'.
[  672.492967][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3864'.
[  672.587752][T22236] hsr_slave_1 (unregistering): left promiscuous mode
[  672.910628][T22259] lo speed is unknown, defaulting to 1000
[  672.916496][T22259] lo speed is unknown, defaulting to 1000
[  672.923773][T22259] lo speed is unknown, defaulting to 1000
[  672.930714][T22259] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  672.944938][T22259] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  672.954526][T22262] netlink: 'syz.3.3871': attribute type 13 has an invalid length.
[  672.977389][T16434] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.987685][T16434] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.996607][T16434] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  673.005556][T16434] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  673.032859][T22259] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  673.038778][T22262] netlink: 'syz.3.3871': attribute type 17 has an invalid length.
[  673.097075][T22269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3872'.
[  673.121532][T22259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  673.231950][T22262] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.246326][T22262] 8021q: adding VLAN 0 to HW filter on device team0
[  673.262509][T22262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  673.317600][T22277] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004
[  673.376918][ T6839] hid-generic 0005:0B57:0040.0002: item fetching failed at offset 0/2
[  673.386657][ T6839] hid-generic 0005:0B57:0040.0002: probe with driver hid-generic failed with error -22
[  673.387341][T22262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  673.400957][ T6839] 
[  673.406068][ T6839] ======================================================
[  673.413625][ T6839] WARNING: possible circular locking dependency detected
[  673.420765][ T6839] syzkaller #0 Not tainted
[  673.425312][ T6839] ------------------------------------------------------
[  673.432740][ T6839] kworker/0:8/6839 is trying to acquire lock:
[  673.438905][ T6839] ffff88801c28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0
[  673.449496][ T6839] 
[  673.449496][ T6839] but task is already holding lock:
[  673.457385][ T6839] ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  673.467671][ T6839] 
[  673.467671][ T6839] which lock already depends on the new lock.
[  673.467671][ T6839] 
[  673.478255][ T6839] 
[  673.478255][ T6839] the existing dependency chain (in reverse order) is:
[  673.487278][ T6839] 
[  673.487278][ T6839] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  673.495391][ T6839]        down_write+0x96/0x200
[  673.500207][ T6839]        kernfs_add_one+0x41/0x5e0
[  673.505331][ T6839]        kernfs_create_dir_ns+0x1a1/0x230
[  673.511064][ T6839]        internal_create_group+0x440/0x1180
[  673.516972][ T6839]        cpuhp_invoke_callback+0x434/0x810
[  673.522817][ T6839]        cpuhp_issue_call+0x3f0/0x750
[  673.528199][ T6839]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  673.534814][ T6839]        __cpuhp_setup_state+0x3f/0x60
[  673.540307][ T6839]        do_one_initcall+0x250/0x870
[  673.545793][ T6839]        do_initcall_level+0x10a/0x1a0
[  673.551359][ T6839]        do_initcalls+0x59/0xa0
[  673.556222][ T6839]        kernel_init_freeable+0x29d/0x3e0
[  673.561958][ T6839]        kernel_init+0x1d/0x1d0
[  673.566819][ T6839]        ret_from_fork+0x514/0xb70
[  673.572092][ T6839]        ret_from_fork_asm+0x1a/0x30
[  673.577477][ T6839] 
[  673.577477][ T6839] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  673.585503][ T6839] 
[  673.585503][ T6839] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  673.593377][ T6839]        cpus_read_lock+0x42/0x160
[  673.598514][ T6839]        static_key_slow_inc+0x12/0x30
[  673.604010][ T6839]        nbd_genl_reconfigure+0x1301/0x1e80
[  673.610004][ T6839]        genl_family_rcv_msg_doit+0x233/0x340
[  673.616110][ T6839]        genl_rcv_msg+0x614/0x7a0
[  673.621147][ T6839]        netlink_rcv_skb+0x226/0x4a0
[  673.626448][ T6839]        genl_rcv+0x28/0x40
[  673.630955][ T6839]        netlink_unicast+0x7bb/0x940
[  673.637286][ T6839]        netlink_sendmsg+0x813/0xb40
[  673.642655][ T6839]        sock_sendmsg_nosec+0x13a/0x180
[  673.648230][ T6839]        ____sys_sendmsg+0x54e/0x850
[  673.653719][ T6839]        ___sys_sendmsg+0x2a5/0x360
[  673.658925][ T6839]        __x64_sys_sendmsg+0x1b1/0x290
[  673.664477][ T6839]        do_syscall_64+0x174/0x580
[  673.669682][ T6839]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.676098][ T6839] 
[  673.676098][ T6839] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  673.683921][ T6839]        __mutex_lock+0x19d/0x1550
[  673.689043][ T6839]        nbd_queue_rq+0x373/0x1150
[  673.694266][ T6839]        blk_mq_dispatch_rq_list+0x499/0x1990
[  673.700523][ T6839]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  673.707443][ T6839]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  673.713961][ T6839]        blk_mq_run_work_fn+0x16c/0x300
[  673.719515][ T6839]        process_scheduled_works+0xa8e/0x14e0
[  673.725590][ T6839]        worker_thread+0xa47/0xfb0
[  673.730707][ T6839]        kthread+0x388/0x470
[  673.735312][ T6839]        ret_from_fork+0x514/0xb70
[  673.740442][ T6839]        ret_from_fork_asm+0x1a/0x30
[  673.745732][ T6839] 
[  673.745732][ T6839] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  673.753010][ T6839]        __mutex_lock+0x19d/0x1550
[  673.758137][ T6839]        nbd_queue_rq+0xc1/0x1150
[  673.763191][ T6839]        blk_mq_dispatch_rq_list+0x499/0x1990
[  673.769269][ T6839]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  673.776958][ T6839]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  673.783618][ T6839]        blk_mq_run_work_fn+0x16c/0x300
[  673.789190][ T6839]        process_scheduled_works+0xa8e/0x14e0
[  673.795286][ T6839]        worker_thread+0xa47/0xfb0
[  673.800424][ T6839]        kthread+0x388/0x470
[  673.805031][ T6839]        ret_from_fork+0x514/0xb70
[  673.810268][ T6839]        ret_from_fork_asm+0x1a/0x30
[  673.816146][ T6839] 
[  673.816146][ T6839] -> #4 (set->srcu){.+.+}-{0:0}:
[  673.823390][ T6839]        __synchronize_srcu+0xc9/0x2f0
[  673.829922][ T6839]        elevator_switch+0x1e8/0x7b0
[  673.835376][ T6839]        elevator_change+0x2fa/0x480
[  673.840687][ T6839]        elevator_set_default+0x375/0x440
[  673.846423][ T6839]        blk_register_queue+0x3f3/0x4e0
[  673.852020][ T6839]        __add_disk+0x6cb/0xe30
[  673.856910][ T6839]        add_disk_fwnode+0xfb/0x4b0
[  673.862115][ T6839]        nbd_dev_add+0x733/0xb60
[  673.867086][ T6839]        nbd_init+0x15f/0x1e0
[  673.871873][ T6839]        do_one_initcall+0x250/0x870
[  673.877195][ T6839]        do_initcall_level+0x10a/0x1a0
[  673.883071][ T6839]        do_initcalls+0x59/0xa0
[  673.887957][ T6839]        kernel_init_freeable+0x29d/0x3e0
[  673.893961][ T6839]        kernel_init+0x1d/0x1d0
[  673.898826][ T6839]        ret_from_fork+0x514/0xb70
[  673.903968][ T6839]        ret_from_fork_asm+0x1a/0x30
[  673.909267][ T6839] 
[  673.909267][ T6839] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  673.917106][ T6839]        __mutex_lock+0x19d/0x1550
[  673.922235][ T6839]        elevator_change+0x1af/0x480
[  673.927529][ T6839]        elevator_set_none+0xb5/0x140
[  673.932910][ T6839]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  673.939250][ T6839]        nbd_start_device+0x189/0xb30
[  673.944739][ T6839]        nbd_genl_connect+0x1597/0x1c10
[  673.950566][ T6839]        genl_family_rcv_msg_doit+0x233/0x340
[  673.956747][ T6839]        genl_rcv_msg+0x614/0x7a0
[  673.961782][ T6839]        netlink_rcv_skb+0x226/0x4a0
[  673.967107][ T6839]        genl_rcv+0x28/0x40
[  673.971625][ T6839]        netlink_unicast+0x7bb/0x940
[  673.976923][ T6839]        netlink_sendmsg+0x813/0xb40
[  673.982217][ T6839]        sock_sendmsg_nosec+0x13a/0x180
[  673.987775][ T6839]        ____sys_sendmsg+0x54e/0x850
[  673.993079][ T6839]        ___sys_sendmsg+0x2a5/0x360
[  673.998305][ T6839]        __x64_sys_sendmsg+0x1b1/0x290
[  674.004478][ T6839]        do_syscall_64+0x174/0x580
[  674.009695][ T6839]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.016115][ T6839] 
[  674.016115][ T6839] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  674.024747][ T6839]        blk_alloc_queue+0x544/0x690
[  674.030064][ T6839]        __blk_mq_alloc_disk+0x194/0x390
[  674.035721][ T6839]        nbd_dev_add+0x494/0xb60
[  674.040957][ T6839]        nbd_init+0x15f/0x1e0
[  674.045760][ T6839]        do_one_initcall+0x250/0x870
[  674.051080][ T6839]        do_initcall_level+0x10a/0x1a0
[  674.056664][ T6839]        do_initcalls+0x59/0xa0
[  674.061542][ T6839]        kernel_init_freeable+0x29d/0x3e0
[  674.067368][ T6839]        kernel_init+0x1d/0x1d0
[  674.072315][ T6839]        ret_from_fork+0x514/0xb70
[  674.077537][ T6839]        ret_from_fork_asm+0x1a/0x30
[  674.082831][ T6839] 
[  674.082831][ T6839] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  674.091228][ T6839]        fs_reclaim_acquire+0x71/0x100
[  674.096834][ T6839]        kmem_cache_alloc_noprof+0x64/0x5f0
[  674.102746][ T6839]        __kernfs_iattrs+0xdd/0x380
[  674.107971][ T6839]        kernfs_iop_setattr+0xe6/0x3f0
[  674.113438][ T6839]        notify_change+0xbba/0xea0
[  674.118558][ T6839]        do_truncate+0x1c2/0x250
[  674.123498][ T6839]        path_openat+0x2fed/0x3830
[  674.128623][ T6839]        do_file_open+0x23e/0x4a0
[  674.133662][ T6839]        do_sys_openat2+0x115/0x200
[  674.138868][ T6839]        __x64_sys_openat+0x138/0x170
[  674.144254][ T6839]        do_syscall_64+0x174/0x580
[  674.149643][ T6839]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.156077][ T6839] 
[  674.156077][ T6839] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  674.164608][ T6839]        __lock_acquire+0x1520/0x2cf0
[  674.170052][ T6839]        lock_acquire+0x106/0x350
[  674.175091][ T6839]        down_write+0x96/0x200
[  674.180070][ T6839]        __kernfs_remove+0x174/0x8e0
[  674.185372][ T6839]        kernfs_remove_by_name_ns+0xc0/0x140
[  674.191370][ T6839]        really_probe+0x36e/0xae0
[  674.197528][ T6839]        __driver_probe_device+0x1e8/0x360
[  674.203368][ T6839]        driver_probe_device+0x4f/0x240
[  674.208940][ T6839]        __device_attach_driver+0x270/0x410
[  674.214864][ T6839]        bus_for_each_drv+0x258/0x2f0
[  674.220316][ T6839]        __device_attach+0x2c4/0x450
[  674.225613][ T6839]        device_initial_probe+0xa1/0xd0
[  674.231169][ T6839]        bus_probe_device+0x12a/0x220
[  674.236555][ T6839]        device_add+0x7d7/0xb80
[  674.241471][ T6839]        hid_add_device+0x272/0x3e0
[  674.246762][ T6839]        hidp_session_dev_work+0x45/0x160
[  674.252549][ T6839]        process_scheduled_works+0xa8e/0x14e0
[  674.258625][ T6839]        worker_thread+0xa47/0xfb0
[  674.263747][ T6839]        kthread+0x388/0x470
[  674.268352][ T6839]        ret_from_fork+0x514/0xb70
[  674.273583][ T6839]        ret_from_fork_asm+0x1a/0x30
[  674.278904][ T6839] 
[  674.278904][ T6839] other info that might help us debug this:
[  674.278904][ T6839] 
[  674.289178][ T6839] Chain exists of:
[  674.289178][ T6839]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  674.289178][ T6839] 
[  674.303673][ T6839]  Possible unsafe locking scenario:
[  674.303673][ T6839] 
[  674.311202][ T6839]        CPU0                    CPU1
[  674.316649][ T6839]        ----                    ----
[  674.322020][ T6839]   lock(&root->kernfs_rwsem);
[  674.326801][ T6839]                                lock(cpuhp_state_mutex);
[  674.334788][ T6839]                                lock(&root->kernfs_rwsem);
[  674.342179][ T6839]   lock(&root->kernfs_iattr_rwsem);
[  674.347478][ T6839] 
[  674.347478][ T6839]  *** DEADLOCK ***
[  674.347478][ T6839] 
[  674.355675][ T6839] 5 locks held by kworker/0:8/6839:
[  674.360894][ T6839]  #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  674.372043][ T6839]  #1: ffffc90005b67c40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  674.384422][ T6839]  #2: ffff888046799a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  674.393781][ T6839]  #3: ffff88801c28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  674.405209][ T6839]  #4: ffff88801c28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  674.416124][ T6839] 
[  674.416124][ T6839] stack backtrace:
[  674.422038][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) 
[  674.422064][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  674.422075][ T6839] Workqueue: events hidp_session_dev_work
[  674.422105][ T6839] Call Trace:
[  674.422115][ T6839]  <TASK>
[  674.422125][ T6839]  dump_stack_lvl+0xe8/0x150
[  674.422153][ T6839]  print_circular_bug+0x2e1/0x300
[  674.422171][ T6839]  check_noncircular+0x12e/0x150
[  674.422199][ T6839]  __lock_acquire+0x1520/0x2cf0
[  674.422224][ T6839]  ? __lock_acquire+0x683/0x2cf0
[  674.422248][ T6839]  ? __lock_acquire+0x683/0x2cf0
[  674.422270][ T6839]  ? __kernfs_remove+0x174/0x8e0
[  674.422294][ T6839]  lock_acquire+0x106/0x350
[  674.422314][ T6839]  ? __kernfs_remove+0x174/0x8e0
[  674.422342][ T6839]  down_write+0x96/0x200
[  674.422358][ T6839]  ? __kernfs_remove+0x174/0x8e0
[  674.422381][ T6839]  ? __pfx_down_write+0x10/0x10
[  674.422396][ T6839]  ? kernfs_root+0x1c/0x230
[  674.422417][ T6839]  ? kernfs_root+0x1c/0x230
[  674.422436][ T6839]  ? kernfs_root+0x1ea/0x230
[  674.422457][ T6839]  __kernfs_remove+0x174/0x8e0
[  674.422481][ T6839]  ? kernfs_find_ns+0x59f/0x600
[  674.422505][ T6839]  kernfs_remove_by_name_ns+0xc0/0x140
[  674.422531][ T6839]  really_probe+0x36e/0xae0
[  674.422553][ T6839]  __driver_probe_device+0x1e8/0x360
[  674.422571][ T6839]  driver_probe_device+0x4f/0x240
[  674.422591][ T6839]  __device_attach_driver+0x270/0x410
[  674.422611][ T6839]  bus_for_each_drv+0x258/0x2f0
[  674.422632][ T6839]  ? __pfx___device_attach_driver+0x10/0x10
[  674.422652][ T6839]  ? __pfx_bus_for_each_drv+0x10/0x10
[  674.422674][ T6839]  ? lockdep_hardirqs_on+0x7a/0x110
[  674.422698][ T6839]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  674.422779][ T6839]  __device_attach+0x2c4/0x450
[  674.422796][ T6839]  ? __pfx___device_attach+0x10/0x10
[  674.422815][ T6839]  ? _raw_spin_unlock+0x28/0x50
[  674.422835][ T6839]  device_initial_probe+0xa1/0xd0
[  674.422853][ T6839]  bus_probe_device+0x12a/0x220
[  674.422877][ T6839]  device_add+0x7d7/0xb80
[  674.422902][ T6839]  hid_add_device+0x272/0x3e0
[  674.422923][ T6839]  ? hidp_session_dev_work+0x1e/0x160
[  674.422943][ T6839]  hidp_session_dev_work+0x45/0x160
[  674.422961][ T6839]  ? process_scheduled_works+0xa20/0x14e0
[  674.422980][ T6839]  process_scheduled_works+0xa8e/0x14e0
[  674.423009][ T6839]  ? __pfx_process_scheduled_works+0x10/0x10
[  674.423028][ T6839]  ? assign_work+0x3cf/0x5d0
[  674.423047][ T6839]  worker_thread+0xa47/0xfb0
[  674.423070][ T6839]  ? __kthread_parkme+0x71/0x1f0
[  674.423092][ T6839]  kthread+0x388/0x470
[  674.423115][ T6839]  ? __pfx_worker_thread+0x10/0x10
[  674.423132][ T6839]  ? __pfx_kthread+0x10/0x10
[  674.423153][ T6839]  ret_from_fork+0x514/0xb70
[  674.423178][ T6839]  ? __pfx_ret_from_fork+0x10/0x10
[  674.423199][ T6839]  ? __switch_to+0xc89/0x1420
[  674.423220][ T6839]  ? __pfx_kthread+0x10/0x10
[  674.423242][ T6839]  ret_from_fork_asm+0x1a/0x30
[  674.423265][ T6839]  </TASK>
[  674.708324][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  674.748450][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  674.763470][T22262] batadv_slave_1: left promiscuous mode
[  674.769806][T22262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  674.794114][T22262] veth1_vlan: left promiscuous mode
[  674.801093][T22262] veth0_vlan: left promiscuous mode
[  674.808415][T22262] veth0_vlan: entered promiscuous mode
[  674.816143][T22262] veth1_vlan: entered promiscuous mode
[  674.827218][T22262] veth1_macvtap: left promiscuous mode
[  674.835384][T22262] veth0_macvtap: left promiscuous mode
[  674.842346][T22262] veth0_macvtap: entered promiscuous mode
[  674.855857][T22262] veth1_macvtap: entered promiscuous mode
[  674.868400][T22262] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  674.880899][T22262] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  674.893701][T22262] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  674.907171][T22262] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  674.923584][T22262] veth3: left allmulticast mode
[  674.929990][T22262] vlan2: left promiscuous mode
[  674.935001][T22262] bridge0: left promiscuous mode
[  674.943219][T22262] batadv_slave_1: entered promiscuous mode
[  674.950859][T22262] batadv_slave_1: entered allmulticast mode
[  674.957227][T22262] macvlan2: left allmulticast mode
[  674.962915][T22262] batadv_slave_1: left allmulticast mode
[  674.969570][T22262] batman_adv: batadv0: Interface activated: macvlan2
[  675.002328][T22262] 8021q: adding VLAN 0 to HW filter on device bond1
[  675.021349][T22259] lo speed is unknown, defaulting to 1000
[  675.035093][T22259] lo speed is unknown, defaulting to 1000
[  675.045263][T12378] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.053101][T12378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  675.079439][T12378] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.086921][T12378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  675.145510][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  675.158302][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.172918][T22259] lo speed is unknown, defaulting to 1000
[  675.183375][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.193322][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.205719][T22259] lo speed is unknown, defaulting to 1000
[  675.210938][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.221101][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.235886][T22259] lo speed is unknown, defaulting to 1000
[  675.235941][   T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  675.252372][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.262720][T22259] lo speed is unknown, defaulting to 1000
[  675.270975][T22259] lo speed is unknown, defaulting to 1000
[  682.188619][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  682.988041][ T4937] Bluetooth: hci4: command 0x0406 tx timeout