last executing test programs:

6m55.000310017s ago: executing program 1 (id=10230):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000009300200000000a14000000db3052b13e3c7e790000000000006ba535ddce4fd7344985302d246f0aa8000a0000000000"], 0x28}}, 0x0) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000045f00"], 0x0, 0x34}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (rerun: 32)

6m54.835200044s ago: executing program 1 (id=10233):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff1b4fe9df0000610068000000889078ac1e0101ac1414aa00014e24004d9078c2e6000000000000ea6c0858ccfeb6f2f7140070c5accb455d83c80d55bd0bd1ccd42ae3e99f9744572967db76b52b4e3f7299f277"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6m54.639864222s ago: executing program 1 (id=10236):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r0, 0x1) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) (async)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
close(r0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0}) (async)
unshare(0x4000400) (async)
select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, 0x0)
r9 = socket(0x15, 0x80000, 0x3ff)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x19, &(0x7f0000000080)=@raw=[@exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x3, 0x0, 0x2, 0x3, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x852a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x1, 0x5, 0x0, 0x30, 0xfffffffffffffffc}], &(0x7f0000000000)='GPL\x00', 0xc5, 0xe1, &(0x7f0000000180)=""/225, 0x41000, 0xc9, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x4}, 0x10, 0x2a56c, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000340)=[{0x4, 0x3, 0xb, 0x7}, {0x2, 0x1, 0xb, 0x52d9d2ec9374640d}, {0x5, 0x5, 0x1, 0x5}, {0x0, 0x2, 0x6}, {0x4, 0x4, 0xa, 0x6}, {0x5, 0x2, 0x5, 0x9}, {0x2, 0x1, 0x0, 0x1}, {0x0, 0x2, 0x4, 0xa}, {0x4, 0x3, 0x0, 0x9}, {0x2, 0x5, 0xc, 0x1e}], 0x10, 0x3ff}, 0x94)
sendmsg$kcm(r9, &(0x7f0000000800)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="375761d7ad17f5f61c9d49c478b0ac35533373a7897c4deb5c58d3c6", 0x1c}, {&(0x7f0000000600)="f4578934f52bcb571377b3963743dc5f9127ab8820254bf19db053a2ac2b81156c13c03cd5b2a9033077395c5902d2e48ee05aeea632d4a2403689a31560cbfe8f49310c2af19a4bba2d848a006f6b5c2841b7afd904664dd7e543cb", 0x5c}, {&(0x7f0000000680)="e77331dd5d99b35bf03832f191292be474f6e8a15098a3ffc892602d686784f3a59899b5e72577b4c6aa4fb6f3c6cb8465c5b57c69caa294ee2e4f9963f3670f9b956b6786df5bee1277cf496def5ccdd4", 0x51}, {&(0x7f0000000700)="9c468045af5e68797b7c0c0df88c7e9986387473455168411888fe12117b6d2a66823315ac0436b1e13bbe099b7f6de68a0df149fc2f2fc0ce1763e778dce0d9e43850cc3abbc15f3c10d0d568c837bc2e1a4e961c3b1ea075e58ebcbe0387d9a1c55879c8dbbdac0047bb7dddb9f20ea289000710526031a2b939d9482b4e05fc2b539e3d0d29cefbab9aed1f981d84b997a805dd99bb3d5384aeeb30219660466eebda20ea15a4eb18bae6ea6026ef2ae7", 0xb2}], 0x4}, 0x4044040) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newchain={0xbc, 0x64, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0x2}, {0xd, 0xffff}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xfffc}}, @TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0x9}}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x6, 0xf5, 0xff, 0x10000}, {0xc, 0x4, 0xc, 0xbd7}, {0x3, 0x17, 0x9, 0x8}, {0x400, 0x7, 0x52, 0x401}, {0x7, 0x9, 0x3, 0x1}, {0x1, 0x9, 0xd, 0xa}, {0x400, 0x2, 0xd9, 0x4}, {0x9, 0x81, 0x1, 0x10000}, {0x6, 0x9, 0x6c, 0x7}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44044}, 0x0) (async)
getpid()

6m54.437250013s ago: executing program 1 (id=10242):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x84}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000180), 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000780)={r3, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @random}, 0x10)

6m54.226350908s ago: executing program 1 (id=10248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x18, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0)

6m54.005331879s ago: executing program 1 (id=10251):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/32, 0x20}], 0x1, 0x6, 0xf44b)

6m21.130273351s ago: executing program 32 (id=10251):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140)=0x3000, 0x4)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/32, 0x20}], 0x1, 0x6, 0xf44b)

2.743846787s ago: executing program 5 (id=13884):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0xe03}, 0x40}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r5=>r1})
getsockname$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x34c0a}, [@IFLA_CARRIER_CHANGES={0x0, 0x23, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x9015}, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

1.939369107s ago: executing program 2 (id=13901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
r2 = socket(0xb, 0x2, 0x80)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0xff, @private1, 0x7}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'ipvlan0\x00', 0x100})
r4 = socket$netlink(0x10, 0x3, 0x5)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x309, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0xc800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg0\x00', <r6=>0x0})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r10, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x404c845)
r11 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x44000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x5840bda6194aa3c2)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r5, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4004095)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r13, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x44}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b00)={<r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r14, 0x8982, &(0x7f0000000b40)={0x2, 'veth1_macvtap\x00'})
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x104, 0x453, 0x100, 0x70bd2d, 0x25dfdbfd, "2e000f06282823489945b3f3b935b25fcca5141fb0174c5434d9bda209ae7833f4cb1d10873c6d622f562193b041a51325ab4770a245f5634a2723a911edecbe0d162e7a720ed88b4e4c2749857ccd4e525ea7b8a262da9829b71b470da35f5660be6ede60136cdf49112bf8d5c661a80313a140656118bd6a17d01a03398dcedd56c11705174909a581ced7dc4bde1ba77d3f291058a239325251f7fb395f953cb212d9bc10c44be5d81eafa820ecc5732d51b3a75c62d95c98ac2a09b14ca2e7e0205f1d4c4b6ec4b8a2d1ca60e82ec347f179a29d5610d81c09fd130ed8128047653b001eadc3d008d9a0afce06153e29", ["", "", "", "", ""]}, 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x80)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000d80))
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000dc0)=0x269, &(0x7f0000000e00)=0x2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002300)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000022c0)={&(0x7f0000000fc0)={0x12d8, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "639f4cc7c0a7a44b1d7cf8ec45a423bf8a1ca2b25121da80347090b406117a295ed90a7a3b904b2fbab6c5b927ec649d7a7b8964c74d1e34b0356c386dfead06e828063f6509f838b5b220a23d5283b9c6f5cb4041a4c0931966880c02251c1ee8c6dc8d3214f927dcbe05f501b7057436cc763ac02f422a8280c8630295161adcfcfef54d267d31d72e612322c008bb9e7b9401ccaca88dad9a43225af684a78bc24acd556b61f4c406692d9325fe2cfe761754136fbbd3907db030b99978703522852e3abb3e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "4e4fe9bedfe44975fdcafad865337d669e7c09c46c5368a112de52e16c326ff3ddc46498eb9fa2316e82076d0eb1d8a12cdc8e06babb4e5a7c265869413d1724e7ff62cde4c9bd7fb8395ebf9f7c0a52d9f8d1938e24b7f4f388b013b926c3e678cf8d06c1646186faf9241e93c2d1bb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x12d8}, 0x1, 0x0, 0x0, 0x4c040}, 0x0)

1.875395646s ago: executing program 4 (id=13903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'geneve1\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x404c090)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

1.811749865s ago: executing program 5 (id=13905):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendmsg(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='l', 0x1}, {0x0, 0x2}], 0x2}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r1, 0xde, 0x1, 0x80})
ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040))

1.728067711s ago: executing program 2 (id=13906):
close(0x3)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(r2, &(0x7f0000000000)="0800b769ce3226aa", 0x8, 0xc004, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

1.727287612s ago: executing program 4 (id=13907):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f", 0x7}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x278}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8, r6}, [@IFA_FLAGS={0x8, 0x8, 0x408}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x34}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)

1.641761728s ago: executing program 3 (id=13909):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "3f25378bca"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) (async)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fa9e160, 0x47}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660affffffff000061114c000000000085000000a400000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)

1.427068269s ago: executing program 5 (id=13911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'macvlan0\x00', 0x3100})

1.426690326s ago: executing program 3 (id=13912):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000005c0)="3605bfa9b05d66571e703e7c88a8f90688a8", 0x5b8, 0x40080, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)="0d94124ee0e709", 0x7}], 0x1}, 0x0)

1.395724516s ago: executing program 2 (id=13913):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000380)={0x1f, @none, 0x5}, 0xa)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
close(r0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

1.302544191s ago: executing program 4 (id=13914):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffe93, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0)
write$tcp_congestion(r3, &(0x7f0000000540)='highspeed\x00', 0xa)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x86a40067e40dfca3, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0xb8, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x6b}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x755}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x132}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x0, 0x7, 0x8, 0x7, 0xfde, 0x9, 0x4, 0x1, 0x7, 0x5]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40800)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.159701749s ago: executing program 5 (id=13915):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10120000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x40, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.138357907s ago: executing program 4 (id=13916):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2d, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x11, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

978.46302ms ago: executing program 2 (id=13918):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = epoll_create(0xeb4)
tee(r0, r1, 0x4, 0x0)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="00cc7f5d7d99", 0x6}], 0x1, 0x9)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1411, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2440, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16d0, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "bf7d5c8cc07b9c910528dfea4b3c588503887ffcf9a8d875b9e65100161a5149ded825934689b685c2ca909b7a0b348927d1cb06cff214ae0832d1fd49bd7d9c20e0900f765fd4f59069cb05202a9f9ae29700dbbbdbfbd39d70b7f9a2c9f7bc4edbd5b76b810b376d4ce9c7de3e3f10dd34d74cf8db37c77403a26142da4bc0eb787c7a38d98025b7ff3403a150e2c5a1579e21ee8d0a613aab05dc4593362a5f846eb5e43ed57def040fa1a10bdca95954c9cd23de2835ef04062e42bc253f9432631af05d2c7e7ce81b78e90d36e0810b6171ff7d230a32ef70d63a15217e4a3a0bf11e8a4713f9"}]}, {0x15d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "db1e040b7f5ebea6ff7a07749663a65161a062c2441785d23e6aab3297159e6e9575d9469bdbc4f7f7453f32d992db33a6da"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1338, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3f, 0x1, "2ac064bcd77306cf98ec0031be9c61f587b4c26cd83a1cf56db1ab55083fe1faedc29aba32bfed23349144890553889815c08ee11495680ffd5675"}, @NFTA_DATA_VALUE={0x75, 0x1, "5c7557cbae26c41662f16b316bd13e0c0a97cf89b784efec8dd4c827eed038c07494b1088dafc8a59c0de462ee960494fca77cb6de60918db0bedbf06954d29f42c69d6658a2e5c6ac36e3d798b6ab09f6fb950b57479165a2c8c3248283d523723badc4007fd03b6fc7ee8eceba62f46f"}, @NFTA_DATA_VALUE={0xa2, 0x1, "5802bca2d604bdbb77857ebdcf94b9e67d104aae8958f3144b29cc2dfe501b7913283bda8909091b55d38d9ebe3d39836a8f97ef78eacbb15166071a769fd1d2ccb79821dde638ca45b5368b108125310cfbb5a9fd0c20cde661beefb8e150dc42884b13d06c40af69beed5cc624eb8587260ac9c2886c29452855c21ecd4ae40fbe70901cc8def95b0479adcf76ede81b4d92f6b1c5ba4af87ebe699440"}, @NFTA_DATA_VALUE={0xdc, 0x1, "298069b08a6f0be045416a2a75f601556b63b2ebfb0ae94efbad233f095fef0eaa516977e870efc028ec60a702a5029c29de98e7a005e42f0250761ef85533425b14d64c014d1d026d6ac8c97c23a7e29ad34e5ea626dc0fe94ab6370a3a7848d806ed5fdc229a497f74348efb389c9a50716289991f2e60eff207518c9dd2423d20d92ae8b710ea48f78802eab9ec3354d39d52fa73af1ede40651c4d189e1ec8f1dc97ea82db78670c2e1e57c2670188f3ae666f9b35f03849ac5d1d90d25682a503dd448e4d2f75c359ba3af849a80714b11d3a527dd0"}, @NFTA_DATA_VALUE={0xf8, 0x1, "74d2e6eeefe11e0a0a02ed4fc5490f8f004434de2c4fac800492ca1fc53016520b1e1f4f01e40b5c3a96dc9b0fc43b2097c8748b75f0654ddce31b6237d8dc204c09944c5ea0ae95c41b0de8d057d14ee9f46232ea7f377651045590fb5dfd77ae545b88290943165db0dd28158d80eac164ad2c52e257991da7baf25ab45751ebced06b0b0ed23bd8e49c99125cd3171edb376f0a815b849e5128df06c23fba148c04a54301cb5fbc95b891d8cdfdc381aadbf4cce220e44c1b419088eea5b27d10b5d8a9c1c43520731f5e10a08c14072dec8254d00775840eeb4faa862113643d0646af25ebed580484f2302a6d683f5baf75"}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "51d12bcbfc092a401de746ca4cf3772c77514c87336834b43adeae53a9a20807e7befee6e90e910176a3c90458e3e957cce01641de06bd402c4583b024217b427817aa906e5f1915d22188027ff1f1097734f38bc2eae416dddc52627962e8241ccfab58a6573283560719bb89d391bfd81cbcc326c92da1e6f2f24b44c63d8886086741573d6a9d8ce307b08ebfe52fb0d1233105dcbeb140cd2f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "93fac2b6d0e6b14a962f3a7ce6d175312c239148a5b2c0b372b9d0fd81e394aed3074632afa1dc6f168513e4e990d8c68843ee4140738f6ab6ae8daf1afade7ec3985c8d01cdb3548a5336765a07432a2e4695c420fcf8f0f8623ba49023059cded797bc6217aa6aa5b788fc17201e69444f9a5639e6"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd08, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xeb, 0x6, 0x1, 0x0, "f2699ba802af06dad059418049ea8671486ac18752343c94ccf839daa3e05eff5010275f9b12062e8e12ca8b27057a2f336950ff48328adc3756fe8db8a6b08080febe06653f57378febbbd7a15ad1f4687c257132df7a53f43dc9271d69e04bacedc23d226930b371adec30975f76819cc22bbbd354a9055441a38521f3af808e5b96bbd19d57df92129f5a66c0d9cdcc0240a8cab6108804531a3a88f288ebb138b696d3d04e9dacdefbdfda07f33d1a34ec09f4c1c1ef89432dec49ab75c9285da4cf8d65cbddcf509115ee74afc899b52fd3795652765f2eb0bc7ecf7ac9e6ede6fae0afce"}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "ee2b59c30d3535314d89fa572f6f6992495eb811b450e6d6714c37c195368ba17d738526a838b1169aff6e0cba47eed10a8670bbc46235a1f9c8a4a5d0dcc3a9eecfe806395411645cf2be4cb5abbade16bc3c6d55194fc943d954ae37e37b4db4fb821ed659950b823d6c372384e71b6399cf441030aed5686224f2e7a3f1e8cdc4be443e0fca26874e5a60e179e3cd950b305bc48853a668d18e16fc182c01749d7ce66f07eb2d79d4a28d6de16fb69db069c26f6ebd276ae3"}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "99aa047420afe2c0103af4709065b243715c905f5a00232c137ca60b515eba47c37b23cac27734f26bd5e3534312833a10b546d4d0291715407674eec3c2a1636b39fadd0ddf930a9cac5079b9265693e3e1bf2456549a92d995ae6855ee125ff46ad748f7b7cfd5ada4a88ff3bc"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, {0x4d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "49b133ebd33721dd1ebbf0bcf5ca6a5b391df0b921079c49f0cc031fffa97c5ee8a65d4d0b2d99a1f70d87c0ebe68f1420cdbfa17b6a5f761412f9e888cc5d9b"}, @NFTA_DATA_VALUE={0x43, 0x1, "59abe782fb2427f7a4737db8e70300d3a33271fe268a492c001a08bea379db31840215a6b3445e96b4d7814d71a9275df0bf18aca102424d6427c58dfc5735"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x34, 0x1, "53248f4141355f5600e12cf1bac187a866c23e9079023a9ed9a94507e41fa48b5bfb038d85d6d50de41b3691f7f7e69e"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "bcf1c4e18a7f348e0a7270005b6e0c1ff6c7be9ac516f6332316463f1b2ffcaa30c524c14a0cc782873b928e350777a4351d46d7c28c175dcd9e440eb6ce9c075e1f776a7a51fe84638d5f2d3b266ed497c4f4baf9c2c1cd2c3f6f2a84fccfb805e8a52837a39eb0c4dc732fc67cf76df5e93219f61e0f545d1a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x6, 0x1, '7e'}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9, 0x1, "b730f3ec5f"}, @NFTA_DATA_VALUE={0x90, 0x1, "3bd8517b3dd5efc2f1884b741ece37cfa485824f7d16800f745c06500786a7b6ca64c5ee6cc675dbc0b6afc61ee974894cdb448bbb9226c756b5a0a945c7e665ca94e17e9911ed8e1bab530f03057194f2fc0a41304371f3d2305a53866f14a98684e24e2846bdf28bdf6d797c077c002701dcb864de8404b7656a89279f2a89fb4a510f0ce32fabcfb3020a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "6a0311ed3afc189fa6b972415087b77312673038f98a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x47, 0x1, "cb9cae08fb0581d0cbbedacf4a9640c91e1ca82a918fdec579fbae9a4db8d1872091ad496e31d581da8b39c8b7b70af283819f4cc83a0a2c3b0e2507e14da880515f02"}]}, @NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "d2ae06d473c71662a7ae8b55e7e794835e063f18724508c910df525861df2e68a458a2a347a2dc93bd66ca62aefa82076b282d2f929c60fc965b3c3276c54073ecffdff0872ea2b492d711588756b59fc37336db174c7e7175bee91d606383d394c4768f1ab2495f3d4431115af5c65b193fb9488dd24a734dcf0aa3d0776c01a9d4f51cd4a4439819a70b557f86299f1e6b88260544dd372ccff016c42495393ce2fc6a1ad986045ac55999a015d5ea2b915992437da0814e258b8b1f010d"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "81a85e238f245d383c41db72799703ebdc60dcd5cf99"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}]}, {0x470, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x57, 0x1, "8ad62b9520d055421574b4640cb729c1b47a66405877ce4dd801931036d9afda65bd21f0f853012314291c94744a5918ba2236c65b821f54e8041dcad76464032cd6b8e3bd11cb33041ca30fd422265e1283d2"}, @NFTA_DATA_VALUE={0x7b, 0x1, "c2acb960d8476a3a3ab30e94d16de73951a3505aa20b54f5c4793e4001b7d0d6def2d0d249dff7691ede74fe6a87920a9d50bf4e899f3c5164394cd4644ef73399ff45347f4e01210650991321ce70e576317e65a34f56fe182f3d3f758fa51ef8c6b4257c8c5e2030e2772a177b30c536543d239a1f3f"}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xab, 0x1, "45e68afd0d181555f6822d11da855a7a69f558ea5fe0f6654a6c3e55fcb466e303ee4fe5ad893741a3ff5a62ed63b26cafac4e69756ea8b53b79111ab1a6da3efffebb20c60aad32e7d0e6ea2c0a433d6159c14764bbf222784fb99f44920ff1e2d9ec7598429d9e8ffd9024b23744fa0cc7ba3786248b56b403fa2d4137e5993c21a0e8e4d01444c76c411c076e65a635db7e626780622bfbd74746a5d00ea5b608c29f50573b"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0x10c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "2864d91490c4d17baaa1a272854efaa65b42ea18e02d3a3a1848a8e4a0ef356a68dda1ead3bd8a998b13be7a7e8f929cb9a658270479df2ddeb0dbe739cb7823f4336f32c199122ffca803b4888b011caa09f967335c31a83ab32fbf6eec4dfff27e55d2b9c735b08f0ed7a6f2467832fedeaa08731f98d2ce2bc27b2c914e3b3eb76dd7afb4c199e5f57e15a32468d5fca567d296531e96158571a6127f4c"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "cb6f58b13083aaf187de10fc7c8d8d8d37f2b37d6fc09ac8c1e6d4eaa756f93ab70760971a5ba20ac150fa4d652e"}, @NFTA_DATA_VALUE={0x80, 0x1, "c3da55990c1dedc39ab960103be918f109e78d34c4ca17a3b46a2a8ccf5983de837d34aff316760aedb3995268f976be8fbb5ac93397ffb51898dace2fbc707fcbc779c3b15bed0bf189e477070a34e3c4c8b689af53f306ff536751be23412e78373bb926901968ba684a8854a32e6b95ec287b9ee961fe101ae22f"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x50, 0x1, "d357a815c7173af26c8a664474b0aa5e7f89d6d7cddbb903a845ecc860ee1b492fde6f044303e18a9b815cdd635e1bd843ad9eab85e377e470a363b1f64fc0803a16391554f6885547c4be17"}]}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x138, 0x3, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x29}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7665bed2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x320, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}, @NFTA_SET_DESC={0x1bc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40000}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd205}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b63a13e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x45}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1200000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd22}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x77}]}]}]}, @NFTA_SET_DESC={0x114, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x108, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32d}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x754}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9415}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef9f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x202, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2a10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x28, r3, 0x202, 0x70bd2b, 0x7, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x59}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002e00)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002e40)={'batadv0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x841}, 0x811)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000002f80), 0x4)
write(r6, &(0x7f0000002fc0)="952cd8a059a03a3567b1090bef3a0332eca86f68379569ddb77f69fa399c17ecd7c30b6b4798ee69d0854c220a61a85ddb4fdb1b115d7aa70816e50cb4e23eac2e9368e32de951", 0x47)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000003040)=@nfc, 0x80, &(0x7f00000034c0)=[{&(0x7f00000030c0)=""/80, 0x50}, {&(0x7f0000003140)=""/204, 0xcc}, {&(0x7f0000003240)=""/114, 0x72}, {&(0x7f00000032c0)=""/62, 0x3e}, {&(0x7f0000003300)=""/36, 0x24}, {&(0x7f0000003340)=""/209, 0xd1}, {&(0x7f0000003440)=""/90, 0x5a}], 0x7, &(0x7f0000003540)=""/142, 0x8e}}, {{&(0x7f0000003600)=@tipc=@name, 0x80, &(0x7f0000003740)=[{&(0x7f0000003680)=""/153, 0x99}], 0x1, &(0x7f0000003780)}, 0x3}], 0x2, 0x2000, &(0x7f0000003840)={0x77359400})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000038c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000003fc0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003f80)={&(0x7f0000003900)={0x664, r3, 0x44a54fc1fc1d91dc, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x354, 0x111, 0x0, 0x1, {0x350, 0x5, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x76}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x87cb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x347}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2e8, 0x111, 0x0, 0x1, {0x2e4, 0x5, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ea8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1bc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea2d}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2b4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x4010}, 0x58004)
r8 = socket(0x1a, 0x4, 0xd)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000004280)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004240)={&(0x7f0000004040)={0x1e4, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x1a4, 0x2a, [@cf={0x4, 0x6, {0x9, 0x1, 0x7fff, 0x3}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x48}}, @random_vendor={0xdd, 0x4d, "00135a7a7f86c5d1c082ab7bbd31c6c8f18d20741395a904165f0cf757ab26eb9c465aab2faaf58b86bf66c87b0b0e38dbeefe0b5c29a32d6712f42385320dcc2eeab2fd5c490fea992a426467"}, @cf={0x4, 0x6, {0x5, 0x6, 0x5fdc, 0x400}}, @measure_req={0x26, 0xfd, {0x8, 0x5, 0x3, "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"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfb}}, @link_id={0x65, 0x12, {@random="c4910728beb6", @broadcast, @device_b}}, @ht={0x2d, 0x1a, {0x2000, 0x2, 0x5, 0x0, {0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xc, 0x6}}]}, @NL80211_ATTR_IE={0x22, 0x2a, [@challenge={0x10, 0x1, 0x5b}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @cf={0x4, 0x6, {0x7f, 0x5a, 0x0, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x74, 0x4}}, @ibss={0x6, 0x2, 0x7}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x48040)
recvmsg(r9, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f00000042c0)=""/38, 0x26}, {&(0x7f0000004300)=""/195, 0xc3}], 0x2, &(0x7f0000004440)=""/226, 0xe2}, 0x40000000)
r10 = openat$cgroup_ro(r2, &(0x7f0000004580)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
getpeername$l2tp(r8, &(0x7f00000045c0)={0x2, 0x0, @dev}, &(0x7f0000004600)=0x10)
getsockname$packet(r8, &(0x7f0000004640)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004680)=0x14)
setsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f00000046c0)={@local, r11}, 0x14)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000004700)={0x5}, 0x1)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000004740)=[@in6={0xa, 0x4e23, 0x7, @private2, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3c83, @remote, 0x7}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x1e, @mcast1, 0x34f0}, @in={0x2, 0x4e22, @multicast1}], 0xa4)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000004840)={0x1f, 0x0, @none}, &(0x7f0000004880)=0xe, 0x800)

957.708218ms ago: executing program 4 (id=13919):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3000000000001f00840000000100000000000000008200000000000000000000000000000100690000000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000090007000c003404"], 0x48}, 0x805)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0xa)
shutdown(r3, 0x0)
connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r5 = accept(r4, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000002240)='\x00', 0x1, 0x400440e8, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000840)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4091}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)="c69d00008026fb00629ea7603961d9bb59b541a52ff6413a1708cb7ee923e43e8c0394420000e9de0e13456d547a9d06a5ec60ce1132b92bf4833e620a9a8f6b99b8cb2813c659ad85", 0x49}, {&(0x7f00000004c0)="c7357ee6aa49188d36a5b6e6e702efb338fb08e3af45c272a3579866a23cc1dd28194072dc0de985a40ef9e15f2a18b2b88a0d900a8b0273b8e859bf4cd8f22a396187814e434ffdee37a680bf080bb1841cd4ab76238e83e9030c7e00f43113658d0f49d4ebd72185ea509793cd5147e748785452ad2bf16e362a22c14be4c00911348ff6", 0x85}, {&(0x7f00000008c0)="8cfd07ef97f497ead0a36716ceda0f8f072425773e698e0524719441383b337398ff6c9c179b52dfaa9548f7e91ce1d7298fed9ab37c1ae21b7ba03e060db2c2e502f7aa2332268836cd8ce3b35823dc06a4c04810927c6c3ed1f53dee25d8df829869fa41bf8bee0ee60122fe423bc09bd6dec96966c5a7133c95e093a1b64a786f77560c3bc10a682e1c9f201a209cd76baadd14ca09e06d99aed397f5594b49ed1f169fd2cb00b9214d134cffe64d88730f47571c444ca0b3bef6d026e8f3a97bf3ae31151e4d", 0xc8}, {&(0x7f0000000740)="3a61175f3d82b436c03a41f559670f6bcf50d17fc1c942588a889bd7a3b91f2e447e8818f10731a9cf6efc9ea0e18eeb2b256630a684c6e1bc01fb15874e01821880c6cce82a694e102bce356aeeebc64365ed2b902e2bc051c03cc61041be47c47e79", 0x63}, {&(0x7f00000005c0)="089217791a5a29", 0x7}], 0x5, &(0x7f00000006c0)}], 0x2, 0x24041891)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)}, 0x3886d42165142a48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
shutdown(r6, 0x1)
mmap(&(0x7f000032b000/0x2000)=nil, 0x2000, 0x2, 0x3032, r0, 0x0)
syz_emit_ethernet(0x204a, &(0x7f0000004300)=ANY=[@ANYRESHEX=r7], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r5], &(0x7f00000003c0)='GPL\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_buf(r7, 0x0, 0x23, &(0x7f0000000180)=""/19, &(0x7f0000000100)=0x13)
ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0})

872.261149ms ago: executing program 5 (id=13921):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)

820.823143ms ago: executing program 5 (id=13922):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000240000000000119078000000000000000000004e2000109078829c00008000000092e45bd4474cf1b888c79199d12b608416820bcdfeb8f171fcd53186c608df86ce7c8e7671d373c8a47c346c1ba4f5bca74ed70a732e6df7c256179cb4c7717aa241fdd59a33e087cde1"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0)

540.108118ms ago: executing program 0 (id=13924):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x8, 0x3, 0x200}, 0x1a) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14220000520099b1000000000000000006000000"], 0x14}}, 0x0)

538.427837ms ago: executing program 0 (id=13925):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
getsockname(r2, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x31ac306cf582c6ba}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xf4, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x18dad687}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf04}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168)
socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

499.163557ms ago: executing program 0 (id=13926):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2) (async)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x6}, @val={0x0, 0x1, 0x1, 0x1, 0x101}, @ipv6=@generic={0x9, 0x6, "b75b25", 0x203, 0x1d, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@routing={0x88, 0xe, 0x0, 0x6, 0x0, [@empty, @mcast2, @empty, @remote, @private2, @mcast1, @mcast2]}, @fragment={0x2f, 0x0, 0xb4, 0x0, 0x0, 0x7, 0x65}, @srh={0x7a, 0x8, 0x4, 0x4, 0x4, 0x63321f3173b89d9f, 0x7, [@private2, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x15, 0x68}, @srh={0x67, 0x8, 0x4, 0x4, 0x78, 0x20, 0xfff5, [@mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}], "2725e231cc395e4e46d539bacbcc0452a56333fff38e3e67790f18100d7b25b15e80d21526b847becdbf3f9aeef1745f320a314cf256d62ff02ba4e8a9bbab0184d4df1b12649a5208f1e906ffa36737688479d1836f6352466bca56115844f06e85d37b263f2ef4a24e4178e3bef53e71c4ba94488a15e1fa9f31c28f89be3202679d40a1433ac701a7c6c3768f6980d4e9825fd64536c8680352a2760526e8d9a21299779d3ec04dcbf7733e44c32e5d457c84b5121b36ca66ad487730fc0ec727ff8cc451b856b2ee12571875d1cbd71f02ab9945eaeec8e5fc8eeb759e43b3efa003890ab2f242beec"}}}, 0x239)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef)

495.194796ms ago: executing program 3 (id=13927):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x10000, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0xc6, 0x5, 0x3, 0x7}, 0x10)

399.407704ms ago: executing program 3 (id=13928):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000004180)="4c6070cdc3", 0x5}], 0x1, 0x0, 0x0, 0x814}], 0x1, 0x4040054) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async)
r3 = socket$netlink(0x10, 0x3, 0xa)
preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000140)=""/28, 0x1c}], 0x3, 0x300, 0x6) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

311.187114ms ago: executing program 0 (id=13929):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, 0x0, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000380)=""/115, &(0x7f0000000440)=0x73)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0xfffffffffffffd47, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfffb}, {0xfff1, 0x4}, {0xa06d1318dbb4eb2c}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000040)=0x3f)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400060000000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
accept$ax25(r5, &(0x7f0000000480)={{0x3, @default}, [@netrom, @rose, @null, @bcast, @default, @remote, @rose, @rose]}, &(0x7f0000000500)=0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40008c0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x20040044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb01001800000a4299764960800037432b3097c80000000000180000001000000004000000020000c808e11d9d72477d8eec30b6000000000c02000000000000010000000d0000000000005f00"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r11, &(0x7f0000004dc0)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="a69c7e", 0x3}], 0x1}}], 0x2, 0x4000090)
setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036741722756d8d109c800b000100697036746e6c00000c00028006000f0000000000"], 0x50}}, 0x0)

268.29006ms ago: executing program 0 (id=13930):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0)

229.646564ms ago: executing program 3 (id=13931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x36)

75.804832ms ago: executing program 2 (id=13932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_SPORT={0xfffffffffffffd06, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4040144)

73.791274ms ago: executing program 0 (id=13933):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x2}, 0x94)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(r1, 0x0, 0x0)
connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x40012123)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x80}, 0x8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r7, 0x0, 0x10)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0xffeb, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010100, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xa8}, 0x0)

73.289548ms ago: executing program 3 (id=13934):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004})
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x0, 0x80, 0xfffffffe}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x6000001c})
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xfdaf) (async)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xf, @empty, 0xb}, 0x1c) (async)
epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0)

39.400474ms ago: executing program 4 (id=13935):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 2 (id=13936):
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x40011)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004082)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x200, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1ec, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf0, 0x0, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x200}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000005c0)={0x3930, 0x206, 0x4, 0x9}, &(0x7f0000000600)=0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r7, @ANYBLOB="090427bd7000ffdbdf25790000000400f4000400f4000400f4000400f400"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004065)
socket$inet(0x2, 0x800, 0xfffffff8)

kernel console output (not intermixed with test programs):

tive one
[ 1067.762120][T16993] veth0_to_bond: entered promiscuous mode
[ 1067.769700][T16993] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1067.891070][T16993] bond11: (slave veth17): Enslaving as an active interface with a down link
[ 1067.901069][T16993] netlink: 'syz.4.11965': attribute type 1 has an invalid length.
[ 1067.909300][T16993] netlink: 'syz.4.11965': attribute type 2 has an invalid length.
[ 1068.189700][T17033] tipc: Failed to remove unknown binding: 66,0,0/1592897635:2308313656/2308313657
[ 1068.252192][T17033] tipc: Failed to remove unknown binding: 66,0,0/1592897635:2308313656/2308313657
[ 1068.271785][T17037] netlink: 'syz.3.11978': attribute type 2 has an invalid length.
[ 1068.280799][T17037] __nla_validate_parse: 18 callbacks suppressed
[ 1068.280821][T17037] netlink: 119 bytes leftover after parsing attributes in process `syz.3.11978'.
[ 1068.297886][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11977'.
[ 1068.498925][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11980'.
[ 1068.802593][T17059] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1068.811379][T17060] delete_channel: no stack
[ 1069.021288][T17068] bond14: entered promiscuous mode
[ 1069.047603][T17068] bond14: entered allmulticast mode
[ 1069.053145][T17068] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1069.369819][T17087] netlink: 252 bytes leftover after parsing attributes in process `syz.3.11994'.
[ 1069.458079][T17089] syzkaller1: entered promiscuous mode
[ 1069.463772][T17089] syzkaller1: entered allmulticast mode
[ 1069.528348][T17091] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11996'.
[ 1069.708971][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12000'.
[ 1069.718113][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12000'.
[ 1069.978469][T17120] netlink: 340 bytes leftover after parsing attributes in process `syz.0.12007'.
[ 1069.980519][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12003'.
[ 1069.987865][T17125] netlink: 'syz.4.12006': attribute type 1 has an invalid length.
[ 1070.005548][T17119] netlink: 'syz.2.12003': attribute type 15 has an invalid length.
[ 1070.013460][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12003'.
[ 1070.053543][T17126] veth19: entered promiscuous mode
[ 1070.098845][T10411] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[ 1070.109178][T10411] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[ 1070.120154][T17119] netlink: 'syz.2.12003': attribute type 15 has an invalid length.
[ 1070.132689][T10411] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[ 1070.153837][T10411] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[ 1070.200329][T17117] tipc: Resetting bearer <eth:syzkaller0>
[ 1070.287964][T17135] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[ 1070.344234][T17139] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1070.398038][T17150] sctp: [Deprecated]: syz.2.12012 (pid 17150) Use of int in maxseg socket option.
[ 1070.398038][T17150] Use struct sctp_assoc_value instead
[ 1070.492213][T17153] vlan3: entered promiscuous mode
[ 1070.506430][T17153] geneve1: entered promiscuous mode
[ 1070.517530][T17153] vlan3: entered allmulticast mode
[ 1070.524881][T17153] geneve1: entered allmulticast mode
[ 1070.611316][T17147] syzkaller0: entered promiscuous mode
[ 1070.618332][T17147] syzkaller0: entered allmulticast mode
[ 1070.800104][T17117] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1070.817087][T17117] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1073.316351][T17220] netlink: 'syz.5.12029': attribute type 2 has an invalid length.
[ 1073.739009][T17234] syzkaller0: entered promiscuous mode
[ 1073.745160][T17234] syzkaller0: entered allmulticast mode
[ 1074.131582][T17268] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[ 1075.558638][T17252] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 1075.703086][T17259] netlink: 'syz.4.12044': attribute type 2 has an invalid length.
[ 1075.758874][T17279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[ 1075.831794][T17285] rdma_rxe: rxe_newlink: failed to add lo
[ 1075.838480][T17279] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1075.867900][T17279] gretap5: entered promiscuous mode
[ 1075.884781][T17279] gretap5: entered allmulticast mode
[ 1075.990910][T17292] __nla_validate_parse: 4 callbacks suppressed
[ 1075.990930][T17292] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12050'.
[ 1076.103697][T17306] netlink: 'syz.3.12055': attribute type 8 has an invalid length.
[ 1076.397208][T17322] netlink: 'syz.0.12057': attribute type 27 has an invalid length.
[ 1076.487039][T17332] IPv6: Can't replace route, no match found
[ 1076.523230][T17337] rdma_rxe: rxe_newlink: failed to add vxcan1
[ 1076.768551][T17340] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12063'.
[ 1077.120443][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1077.386463][T17379] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[ 1077.678303][T17398] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12077'.
[ 1077.794974][T17403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12079'.
[ 1077.953769][T17413] bond15: option arp_all_targets: invalid value (18446744073709551613)
[ 1077.971286][T17413] bond15 (unregistering): Released all slaves
[ 1078.197326][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12085'.
[ 1078.794814][T17477] netlink: 'syz.4.12100': attribute type 1 has an invalid length.
[ 1078.823805][T17479] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1078.857856][T17479] bond5 (unregistering): Released all slaves
[ 1078.973536][T17483] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1078.998670][T17483] bond5 (unregistering): Released all slaves
[ 1079.036621][T17486] bridge_slave_0: left allmulticast mode
[ 1079.042786][T17486] bridge_slave_0: left promiscuous mode
[ 1079.049828][T17486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.110487][T17486] bridge_slave_1: left allmulticast mode
[ 1079.131700][T17486] bridge_slave_1: left promiscuous mode
[ 1079.147223][T17486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1079.179431][T17486] bond0: (slave bond_slave_0): Releasing backup interface
[ 1079.196721][T17486] bond0: (slave bond_slave_1): Releasing backup interface
[ 1079.239712][T17486] team0: Port device team_slave_0 removed
[ 1079.246162][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12109'.
[ 1079.269433][T17486] team0: Port device team_slave_1 removed
[ 1079.278026][T17486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1079.286726][T17486] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1079.303015][T17486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1079.313131][T17486] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1079.328042][T17486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1079.491655][T17521] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1079.501233][T17521] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12114'.
[ 1079.586946][T17525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12116'.
[ 1079.664563][T10406] veth0_to_bond: left promiscuous mode
[ 1079.685692][T17531] syzkaller0: entered promiscuous mode
[ 1079.691289][T17531] syzkaller0: entered allmulticast mode
[ 1079.965804][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12125'.
[ 1079.975965][T17544] netlink: 'syz.4.12125': attribute type 7 has an invalid length.
[ 1079.983800][T17544] netlink: 'syz.4.12125': attribute type 8 has an invalid length.
[ 1080.074742][T17545] ip6gre2: entered promiscuous mode
[ 1080.640255][T17582] nftables ruleset with unbound set
[ 1080.919374][T17603] erspan0: entered promiscuous mode
[ 1080.933061][T17611] netlink: 'syz.3.12146': attribute type 9 has an invalid length.
[ 1080.938426][T17603] erspan0: entered allmulticast mode
[ 1081.496699][T17646] __nla_validate_parse: 6 callbacks suppressed
[ 1081.496718][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12155'.
[ 1081.641551][T17657] netlink: 'syz.3.12157': attribute type 18 has an invalid length.
[ 1081.652832][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12161'.
[ 1081.668491][T17662] netlink: 177296 bytes leftover after parsing attributes in process `syz.2.12160'.
[ 1081.695442][T17660] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1081.728135][T17660] netlink: 148 bytes leftover after parsing attributes in process `syz.4.12161'.
[ 1081.854861][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12166'.
[ 1081.923457][T17679] ip6tnl2: entered allmulticast mode
[ 1082.056458][T17691] netlink: 324 bytes leftover after parsing attributes in process `syz.2.12170'.
[ 1082.076699][T17695] xt_l2tp: v2 doesn't support IP mode
[ 1082.219600][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12174'.
[ 1082.510664][T17731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12183'.
[ 1082.552765][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12183'.
[ 1082.567200][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12183'.
[ 1082.706261][T17754] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1082.844659][T17763] netlink: 'syz.4.12193': attribute type 10 has an invalid length.
[ 1082.865411][T17768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1082.874713][T17768] syzkaller0: entered promiscuous mode
[ 1082.880284][T17768] syzkaller0: entered allmulticast mode
[ 1082.953814][T17768] tipc: Resetting bearer <eth:syzkaller0>
[ 1082.962522][T17764] tipc: Resetting bearer <eth:syzkaller0>
[ 1082.994995][T17764] tipc: Disabling bearer <eth:syzkaller0>
[ 1083.500672][T17810] netlink: 'syz.4.12207': attribute type 11 has an invalid length.
[ 1083.650639][T17821] netlink: 'syz.0.12211': attribute type 6 has an invalid length.
[ 1084.425719][T17877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1084.772940][T17904] netlink: 'syz.4.12231': attribute type 1 has an invalid length.
[ 1084.782212][T17904] netlink: 'syz.4.12231': attribute type 2 has an invalid length.
[ 1084.792313][T17904] netlink: 'syz.4.12231': attribute type 1 has an invalid length.
[ 1086.557554][T17921] : entered promiscuous mode
[ 1086.738596][T17942] __nla_validate_parse: 10 callbacks suppressed
[ 1086.738614][T17942] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12243'.
[ 1087.016252][T17957] delete_channel: no stack
[ 1087.032559][T17960] netlink: 'syz.4.12250': attribute type 33 has an invalid length.
[ 1087.047554][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12248'.
[ 1087.150539][T17955] bond1: option xmit_hash_policy: invalid value (64)
[ 1087.166110][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12251'.
[ 1087.189020][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12252'.
[ 1087.200678][T17955] bond1 (unregistering): Released all slaves
[ 1087.251096][T17971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12253'.
[ 1087.261034][T17971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12253'.
[ 1087.332869][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12253'.
[ 1087.449386][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12254'.
[ 1088.374259][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.399130][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12265'.
[ 1088.422087][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.463539][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.479440][T18010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12263'.
[ 1088.503839][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.539535][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.560342][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.582694][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1088.592897][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.605794][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1088.626310][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1088.637289][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1088.645587][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1088.647125][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.724109][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.737274][T25949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1088.744841][T25949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1088.752158][T25949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1088.761013][T25949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1088.768711][T25949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1088.776470][T18013] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1088.902699][T18020] geneve1 speed is unknown, defaulting to 1000
[ 1089.087001][T18033] netlink: 'syz.4.12270': attribute type 1 has an invalid length.
[ 1089.194234][T18028] hsr_slave_0 (unregistering): left promiscuous mode
[ 1089.294127][T18031] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1089.828661][T18031] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1089.874126][T18020] wlan0 speed is unknown, defaulting to 1000
[ 1089.991141][T14304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.005549][T14304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.016159][T14304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1090.057081][T18080] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1090.083124][T18080] syzkaller0: entered promiscuous mode
[ 1090.091724][T18080] syzkaller0: entered allmulticast mode
[ 1090.138789][T14304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.167894][T14304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.183000][T18086] netlink: 'syz.5.12277': attribute type 23 has an invalid length.
[ 1090.195561][T14304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1090.251811][T18090] syzkaller0: mtu less than device minimum
[ 1090.345018][T14304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.357474][T14304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.368589][T14304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1090.475913][T18095] wireguard0: entered promiscuous mode
[ 1090.488370][T18095] wireguard0: entered allmulticast mode
[ 1090.511414][T18095] team0: Port device wireguard0 added
[ 1090.588280][T14304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1090.598934][T14304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1090.610519][T14304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1090.819457][T25949] Bluetooth: hci3: command tx timeout
[ 1090.869358][T18119] gre1: entered promiscuous mode
[ 1090.878030][T18119] gre1: entered allmulticast mode
[ 1091.273335][T18142] netlink: 'syz.5.12295': attribute type 4 has an invalid length.
[ 1091.334120][T14304] .: left allmulticast mode
[ 1091.336698][T18144] netlink: 'syz.5.12295': attribute type 4 has an invalid length.
[ 1091.343307][T14304] .: left promiscuous mode
[ 1091.353620][T14304] bridge0: port 2(.) entered disabled state
[ 1091.425894][T14304] bridge_slave_0: left promiscuous mode
[ 1091.431699][T14304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.482953][T18154] netlink: 'syz.0.12297': attribute type 1 has an invalid length.
[ 1091.812885][T14304] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1091.834537][T14304] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - aa:db:fd:42:36:f0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1092.080953][T14304] bond2 (unregistering): (slave gretap2): Releasing backup interface
[ 1092.139100][T14304] bond12 (unregistering): (slave gre2): Releasing backup interface
[ 1092.149117][T14304] gre2 (unregistering): left promiscuous mode
[ 1092.192305][T14304] bond7 (unregistering): (slave geneve3): Releasing active interface
[ 1092.427524][T14304] bond4 (unregistering): (slave bridge3): Releasing backup interface
[ 1092.435681][T14304] bridge3 (unregistering): left promiscuous mode
[ 1092.577758][T14304] bond8 (unregistering): (slave bridge6): Releasing active interface
[ 1092.626080][T14304] bond9 (unregistering): (slave bridge7): Releasing active interface
[ 1092.872539][T14304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1092.883537][T14304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1092.893900][T14304] bond0 (unregistering): Released all slaves
[ 1092.905432][T25949] Bluetooth: hci3: command tx timeout
[ 1092.905654][T14304] bond1 (unregistering): Released all slaves
[ 1093.027554][T14304] bond2 (unregistering): (slave bond3): Releasing backup interface
[ 1093.036214][T14304] bond2 (unregistering): Released all slaves
[ 1093.154124][T14304] bond3 (unregistering): Released all slaves
[ 1093.262539][T14304] bond4 (unregistering): Released all slaves
[ 1093.375975][T14304] bond5 (unregistering): Released all slaves
[ 1093.383141][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 30 seconds
[ 1093.396939][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 30 seconds
[ 1093.397958][T14304] bond6 (unregistering): (slave veth3): Releasing backup interface
[ 1093.407921][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 30 seconds
[ 1093.407978][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 30 seconds
[ 1093.440222][T14304] bond6 (unregistering): Released all slaves
[ 1093.452667][T14304] bond7 (unregistering): Released all slaves
[ 1093.471646][T14304] bond8 (unregistering): Released all slaves
[ 1093.485892][T14304] bond9 (unregistering): Released all slaves
[ 1093.599225][T14304] bond10 (unregistering): Released all slaves
[ 1093.709798][T14304] bond11 (unregistering): Released all slaves
[ 1093.820399][T14304] bond12 (unregistering): Released all slaves
[ 1093.928320][T14304] bond13 (unregistering): Released all slaves
[ 1094.035183][T14304] bond14 (unregistering): Released all slaves
[ 1094.076604][T18157] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[ 1094.250282][T18193] __nla_validate_parse: 15 callbacks suppressed
[ 1094.250300][T18193] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12301'.
[ 1094.292854][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12303'.
[ 1094.308637][T14304] : left promiscuous mode
[ 1094.331238][T18195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12303'.
[ 1094.400587][T18020] chnl_net:caif_netlink_parms(): no params data found
[ 1094.447888][T14304] tipc: Left network mode
[ 1094.568396][T18208] netlink: 'syz.0.12305': attribute type 1 has an invalid length.
[ 1094.722793][T18219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12306'.
[ 1094.763790][T18208] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1094.836699][T18212] bond10: (slave veth15): Enslaving as an active interface with a down link
[ 1094.975101][T25949] Bluetooth: hci3: command tx timeout
[ 1095.157901][T18020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1095.172838][T18020] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1095.180983][T18239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12308'.
[ 1095.214038][T18020] bridge_slave_0: entered allmulticast mode
[ 1095.238548][T18020] bridge_slave_0: entered promiscuous mode
[ 1095.265078][T18020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.297522][T18020] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1095.335311][T18020] bridge_slave_1: entered allmulticast mode
[ 1095.349920][T18020] bridge_slave_1: entered promiscuous mode
[ 1095.480146][T18020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1095.549086][T18256] netlink: 'syz.0.12313': attribute type 11 has an invalid length.
[ 1095.559863][T18256] netlink: 'syz.0.12313': attribute type 11 has an invalid length.
[ 1095.569385][T18256] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12313'.
[ 1095.601933][T18020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1095.916613][T18020] team0: Port device team_slave_0 added
[ 1095.983541][T18020] team0: Port device team_slave_1 added
[ 1096.032341][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12317'.
[ 1096.050071][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12318'.
[ 1096.053574][T18275] netlink: 'syz.4.12317': attribute type 7 has an invalid length.
[ 1096.070262][T18275] netlink: 'syz.4.12317': attribute type 8 has an invalid length.
[ 1096.079082][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12317'.
[ 1096.111975][T18274] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1096.122296][T18274] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12318'.
[ 1096.220106][T18275] gretap0: entered promiscuous mode
[ 1096.234193][T18275] batadv_slave_1: entered promiscuous mode
[ 1096.246283][T18275] batadv_slave_1: left promiscuous mode
[ 1096.257858][T18275] gretap0: left promiscuous mode
[ 1096.303922][T18020] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1096.322632][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1096.351680][T18020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1096.363878][T18287] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1096.435931][T18020] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1096.442996][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1096.477221][T18020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1096.632229][T18299] syzkaller0: entered promiscuous mode
[ 1096.638517][T18299] syzkaller0: entered allmulticast mode
[ 1096.925310][T18020] hsr_slave_0: entered promiscuous mode
[ 1096.956588][T18020] hsr_slave_1: entered promiscuous mode
[ 1096.982597][T18020] debugfs: 'hsr0' already exists in 'hsr'
[ 1097.008266][T18020] Cannot create hsr debugfs directory
[ 1097.055191][T25949] Bluetooth: hci3: command tx timeout
[ 1097.066768][T18319] xt_hashlimit: overflow, try lower: 3/0
[ 1098.856379][T14304] hsr_slave_0: left promiscuous mode
[ 1098.902801][T14304] hsr_slave_1: left promiscuous mode
[ 1098.916602][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1098.947141][T14304] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1098.962299][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1098.982838][T14304] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1098.991701][T18340] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1099.077133][T14304] veth1_macvtap: left promiscuous mode
[ 1099.377947][T18364] __nla_validate_parse: 5 callbacks suppressed
[ 1099.377966][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12341'.
[ 1100.111120][T18353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12339'.
[ 1100.290020][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12344'.
[ 1100.418036][T18383] 8021q: VLANs not supported on wg1
[ 1100.823007][ T5830] IPVS: starting estimator thread 0...
[ 1100.879640][T14304] IPVS: stop unused estimator thread 0...
[ 1100.890281][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12352'.
[ 1100.935183][T18405] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1101.312048][T18434] netlink: 'syz.2.12358': attribute type 1 has an invalid length.
[ 1101.489776][T18434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12358'.
[ 1101.583514][T18448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12358'.
[ 1101.607789][T18439] geneve1 speed is unknown, defaulting to 1000
[ 1101.609071][T18020] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1101.630597][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12362'.
[ 1101.657038][T18020] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1101.673331][T18020] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1101.688362][T18448] gre0: entered promiscuous mode
[ 1101.905563][T18452] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12363'.
[ 1101.915717][T18453] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12363'.
[ 1101.964806][T18454] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12363'.
[ 1102.008855][T18020] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1102.020969][T18450] mac80211_hwsim hwsim100 syzkaller0: left promiscuous mode
[ 1102.029626][T18450] mac80211_hwsim hwsim100 syzkaller0: left allmulticast mode
[ 1102.039262][T18450] tipc: Resetting bearer <eth:syzkaller0>
[ 1102.046543][T18439] wlan0 speed is unknown, defaulting to 1000
[ 1102.053116][T18453] ipvlan2: entered promiscuous mode
[ 1102.077804][T18452] ipvlan3: entered promiscuous mode
[ 1102.090464][T18454] ipvlan4: entered promiscuous mode
[ 1102.345890][T18471] netlink: 'syz.0.12366': attribute type 1 has an invalid length.
[ 1102.397825][T18020] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1102.456394][T18020] 8021q: adding VLAN 0 to HW filter on device team0
[ 1102.516172][T10403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.523375][T10403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1102.579421][T18474] syzkaller0: entered promiscuous mode
[ 1102.586070][T18474] syzkaller0: entered allmulticast mode
[ 1102.620960][T10403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.628187][T10403] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1103.569637][T18020] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1103.900650][T18539] netdevsim netdevsim0 ������: renamed from netdevsim0
[ 1103.958415][T18020] veth0_vlan: entered promiscuous mode
[ 1104.033425][T18546] wireguard0: entered promiscuous mode
[ 1104.058515][T18546] wireguard0: entered allmulticast mode
[ 1104.071231][T18546] team0: Device wireguard0 is of different type
[ 1104.143802][T18020] veth1_vlan: entered promiscuous mode
[ 1104.293034][T18020] veth0_macvtap: entered promiscuous mode
[ 1104.319437][T18020] veth1_macvtap: entered promiscuous mode
[ 1104.362858][T18020] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1104.393119][T18020] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1104.558626][T10407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.571829][T10407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.593438][T10407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.620854][T10407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1107.152521][T18579] __nla_validate_parse: 5 callbacks suppressed
[ 1107.152538][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12391'.
[ 1107.256496][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12393'.
[ 1107.426282][ T3845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1107.450192][ T3845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1107.557584][ T3845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1107.570276][ T3845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1108.051546][T18647] syzkaller0: entered promiscuous mode
[ 1108.059769][T18647] syzkaller0: entered allmulticast mode
[ 1108.281719][T18666] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[ 1108.387354][T18657] syzkaller0: entered promiscuous mode
[ 1108.413234][T18657] syzkaller0: entered allmulticast mode
[ 1108.479522][T18673] netlink: 'syz.5.12411': attribute type 10 has an invalid length.
[ 1108.517797][T18673] netlink: 228 bytes leftover after parsing attributes in process `syz.5.12411'.
[ 1108.528117][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12411'.
[ 1108.554752][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1108.567878][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1108.577415][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1108.589185][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1108.597738][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1110.660470][ T5843] Bluetooth: hci2: command tx timeout
[ 1111.208265][T18677] geneve1 speed is unknown, defaulting to 1000
[ 1111.748403][T18768] netlink: 'syz.3.12421': attribute type 2 has an invalid length.
[ 1111.827120][T18768] �9: entered promiscuous mode
[ 1111.851120][T18774] xt_socket: unknown flags 0xe4
[ 1111.931657][T18781] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12426'.
[ 1111.937592][T18677] wlan0 speed is unknown, defaulting to 1000
[ 1111.963095][T18781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12426'.
[ 1112.271939][T18794] netlink: 348 bytes leftover after parsing attributes in process `syz.0.12429'.
[ 1112.709755][T18677] chnl_net:caif_netlink_parms(): no params data found
[ 1112.734937][ T5843] Bluetooth: hci2: command tx timeout
[ 1113.066022][T18677] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1113.073254][T18677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1113.084892][T18677] bridge_slave_0: entered allmulticast mode
[ 1113.118381][T18677] bridge_slave_0: entered promiscuous mode
[ 1113.164491][T18677] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.171706][T18677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.194039][T18677] bridge_slave_1: entered allmulticast mode
[ 1113.226291][T18677] bridge_slave_1: entered promiscuous mode
[ 1113.615056][T18849] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1113.625887][T18849] gretap1: entered promiscuous mode
[ 1113.631122][T18849] gretap1: entered allmulticast mode
[ 1113.659674][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1113.715948][T18864] ip6gre2: entered allmulticast mode
[ 1113.731249][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.766846][T18867] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12448'.
[ 1113.833646][T18677] team0: Port device team_slave_0 added
[ 1113.852650][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12451'.
[ 1113.872372][T18677] team0: Port device team_slave_1 added
[ 1113.911343][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.918561][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.945307][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1113.994837][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1114.002177][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1114.097835][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1114.142097][T18888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1114.204765][T18677] hsr_slave_0: entered promiscuous mode
[ 1114.216819][T18677] hsr_slave_1: entered promiscuous mode
[ 1114.231584][T18677] debugfs: 'hsr0' already exists in 'hsr'
[ 1114.248087][T18677] Cannot create hsr debugfs directory
[ 1114.297623][T18902] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1114.324035][T18902] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1114.560019][T18917] bridge8: entered promiscuous mode
[ 1114.565643][T18917] bridge8: entered allmulticast mode
[ 1114.581554][T18917] team0: Port device bridge8 added
[ 1114.598072][T18917] bridge0: port 1(team0) entered blocking state
[ 1114.604758][T18917] bridge0: port 1(team0) entered disabled state
[ 1114.605347][T18919] SET target dimension over the limit!
[ 1114.611431][T18917] team0: entered allmulticast mode
[ 1114.626933][T18917] team_slave_0: entered allmulticast mode
[ 1114.632834][T18917] team_slave_1: entered allmulticast mode
[ 1114.646238][T18917] team0: left allmulticast mode
[ 1114.651288][T18917] team_slave_0: left allmulticast mode
[ 1114.657419][T18917] team_slave_1: left allmulticast mode
[ 1114.658479][T18920] netlink: 264 bytes leftover after parsing attributes in process `syz.5.12462'.
[ 1114.718770][T18677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1114.730755][T18677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[ 1114.742146][T18677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.769232][T18926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12465'.
[ 1114.817542][ T5843] Bluetooth: hci2: command tx timeout
[ 1114.888962][T18677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1114.914811][T18677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[ 1114.934558][T18677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.954662][T18930] bond0: Caught tx_queue_len zero misconfig
[ 1115.004455][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12468'.
[ 1115.032050][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12468'.
[ 1115.046353][T18677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1115.071937][T18677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[ 1115.088390][T18677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.103529][T18937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12466'.
[ 1115.170411][T18936] team_slave_0: left promiscuous mode
[ 1115.176951][T18936] team_slave_1: left promiscuous mode
[ 1115.233204][T18936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1115.251115][T18936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1115.323288][T18936] veth0_macvtap: left allmulticast mode
[ 1115.339701][T18936] veth1_vlan: left allmulticast mode
[ 1115.449432][T18677] bond0: (slave netdevsim0): Releasing backup interface
[ 1115.518051][T10407] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.538996][T10407] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[ 1115.551965][T10407] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.562798][T10407] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[ 1115.572693][T10407] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.584640][T10407] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[ 1115.711116][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12474'.
[ 1115.729222][T18931] Bluetooth: hci0: Opcode 0x0401 failed: -4
[ 1115.833337][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12476'.
[ 1116.108040][T18677] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1116.140898][T18677] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1116.186891][T18677] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1116.210111][T18677] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1116.476526][T18677] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1116.562060][T18677] 8021q: adding VLAN 0 to HW filter on device team0
[ 1116.583550][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.590889][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1116.649090][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.656298][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1116.914035][ T5843] Bluetooth: hci2: command tx timeout
[ 1117.058487][T19027] bridge_slave_0 (unregistering): left allmulticast mode
[ 1117.066906][T19027] bridge_slave_0 (unregistering): left promiscuous mode
[ 1117.073945][T19027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.090691][T19038] Can't find ip_set type 
[ 1117.166822][T19044] netlink: 'syz.3.12501': attribute type 1 has an invalid length.
[ 1117.566907][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.673338][T19075] __nla_validate_parse: 6 callbacks suppressed
[ 1117.673417][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12510'.
[ 1117.703214][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12510'.
[ 1117.708726][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12512'.
[ 1117.929574][T19094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12516'.
[ 1118.005131][T19098] bridge_slave_0: left allmulticast mode
[ 1118.010963][T19098] bridge_slave_0: left promiscuous mode
[ 1118.018430][T19098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.034038][T19098] bridge_slave_1: left allmulticast mode
[ 1118.040990][T19098] bridge_slave_1: left promiscuous mode
[ 1118.049463][T19098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.066976][T19098] bond0: (slave bond_slave_0): Releasing backup interface
[ 1118.088068][T19098] bond0: (slave bond_slave_1): Releasing backup interface
[ 1118.117945][T19098] team0: Port device team_slave_0 removed
[ 1118.133387][T19098] team0: Port device team_slave_1 removed
[ 1118.141318][T19098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1118.149138][T19098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.157812][T19098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1118.166113][T19098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1118.176491][T19098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1118.193711][T19090] netlink: 'syz.5.12515': attribute type 10 has an invalid length.
[ 1118.204047][T19090] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1118.303562][T19106] netlink: 'syz.2.12519': attribute type 1 has an invalid length.
[ 1118.365899][T19106] bond1: (slave bridge3): making interface the new active one
[ 1118.374109][T19106] bond1: (slave bridge3): Enslaving as an active interface with an up link
[ 1118.391457][T18677] veth0_vlan: entered promiscuous mode
[ 1118.417117][T12412] IPVS: ip_vs_send_async error -101
[ 1118.427726][T18677] veth1_vlan: entered promiscuous mode
[ 1118.511788][T18677] veth0_macvtap: entered promiscuous mode
[ 1118.557302][T18677] veth1_macvtap: entered promiscuous mode
[ 1118.590626][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12521'.
[ 1118.624918][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.654180][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12524'.
[ 1118.656770][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.689137][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.704899][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.716629][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.792168][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.020372][T19134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12527'.
[ 1119.030585][T10407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.052500][T10407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.157070][T19140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1119.836897][T19136] macvtap0: left allmulticast mode
[ 1119.909975][T19136] netdevsim netdevsim0 ������: left promiscuous mode
[ 1119.953269][T19136] tipc: Resetting bearer <eth:syzkaller0>
[ 1119.974138][T19136] bond1: left promiscuous mode
[ 1119.987841][T19136] bond3: left promiscuous mode
[ 1119.992637][T19136] bridge2: left promiscuous mode
[ 1120.043499][T19136] veth7: left promiscuous mode
[ 1120.053867][T19136] geneve2: left promiscuous mode
[ 1120.065691][T19136] geneve2: left allmulticast mode
[ 1120.095295][T19136] veth9: left promiscuous mode
[ 1120.108868][T19136] vlan0: left allmulticast mode
[ 1120.113931][T19136] veth0_vlan: left allmulticast mode
[ 1120.119499][T19136] vlan0: left promiscuous mode
[ 1120.125274][T19136] macvtap1: left promiscuous mode
[ 1120.130299][T19136] macvtap1: left allmulticast mode
[ 1120.152179][T19136] ipvlan2: left promiscuous mode
[ 1120.161472][T19136] gretap2: left promiscuous mode
[ 1120.171105][T19136] geneve3: left allmulticast mode
[ 1120.187510][T19136] bridge9: left promiscuous mode
[ 1120.192483][T19136] bridge9: left allmulticast mode
[ 1120.211362][T19136] gretap5: left promiscuous mode
[ 1120.216516][T19136] gretap5: left allmulticast mode
[ 1120.268293][T10404] netdevsim netdevsim0 ������: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.312508][T10404] netdevsim netdevsim0 ������: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1120.354754][T10404] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.374915][T10404] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1120.401003][T10404] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.426112][T10404] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1120.449013][T19161] netlink: 'syz.0.12534': attribute type 4 has an invalid length.
[ 1120.454365][T10404] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.474350][T10404] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1120.488314][T26735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.507494][T26735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1120.602553][T19168] netlink: 'syz.4.12408': attribute type 1 has an invalid length.
[ 1120.629810][T19171] netlink: 'syz.2.12539': attribute type 12 has an invalid length.
[ 1120.680012][T19171] bond2: option primary_reselect: invalid value (255)
[ 1120.690696][T19171] bond2 (unregistering): Released all slaves
[ 1120.728203][T19168] netlink: 340 bytes leftover after parsing attributes in process `syz.4.12408'.
[ 1120.934131][T19185] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003
[ 1120.962468][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12545'.
[ 1121.144724][T19198] bond0: (slave gre0): Error: Device type is different from other slaves
[ 1121.168573][T19198] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1121.175442][T19198] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1121.279881][T19198] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1121.467812][T19212] netlink: 'syz.5.12552': attribute type 1 has an invalid length.
[ 1121.659063][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12556'.
[ 1121.678347][T19222] openvswitch: netlink: Flow key attr not present in new flow.
[ 1121.705751][T25949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1121.733540][T25949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1121.749192][T25949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1121.760574][T25949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1121.769094][T25949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1122.085645][T19240] bridge1: entered promiscuous mode
[ 1122.091199][T19240] bridge1: entered allmulticast mode
[ 1122.150821][T19224] geneve1 speed is unknown, defaulting to 1000
[ 1122.227815][T19257] netlink: 'syz.2.12563': attribute type 1 has an invalid length.
[ 1122.259277][T19262] sctp: [Deprecated]: syz.5.12565 (pid 19262) Use of int in max_burst socket option deprecated.
[ 1122.259277][T19262] Use struct sctp_assoc_value instead
[ 1122.660141][T19224] wlan0 speed is unknown, defaulting to 1000
[ 1122.739606][T19285] __nla_validate_parse: 3 callbacks suppressed
[ 1122.739625][T19285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12572'.
[ 1122.951012][T19298] xt_socket: unknown flags 0xe4
[ 1123.139381][T19307] netlink: 13 bytes leftover after parsing attributes in process `syz.4.12579'.
[ 1123.166230][T19306] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12578'.
[ 1123.270285][ T1297] bridge_slave_1: left allmulticast mode
[ 1123.291536][ T1297] bridge_slave_1: left promiscuous mode
[ 1123.314001][ T1297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1123.457440][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 60 seconds
[ 1123.470835][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 60 seconds
[ 1123.481998][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 60 seconds
[ 1123.495279][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 60 seconds
[ 1123.865526][ T5843] Bluetooth: hci5: command tx timeout
[ 1123.997154][ T1297] erspan0 (unregistering): left promiscuous mode
[ 1124.097704][ T1297] bond6 (unregistering): (slave gretap1): Releasing active interface
[ 1124.141589][ T1297] bond8 (unregistering): (slave gretap2): Releasing active interface
[ 1124.173556][ T1297] bond9 (unregistering): (slave gretap3): Releasing active interface
[ 1124.455647][ T1297] bond3 (unregistering): (slave bridge2): Releasing backup interface
[ 1124.915408][ T1297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1124.925601][ T1297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1124.936971][ T1297] bond0 (unregistering): Released all slaves
[ 1125.045761][ T1297] bond1 (unregistering): Released all slaves
[ 1125.058840][ T1297] bond2 (unregistering): Released all slaves
[ 1125.179259][ T1297] bond3 (unregistering): Released all slaves
[ 1125.192337][ T1297] bond4 (unregistering): (slave veth3): Releasing active interface
[ 1125.202101][ T1297] bond4 (unregistering): (slave veth5): Releasing active interface
[ 1125.210957][ T1297] bond4 (unregistering): Released all slaves
[ 1125.327490][ T1297] bond5 (unregistering): (slave veth7): Releasing active interface
[ 1125.336768][ T1297] bond5 (unregistering): Released all slaves
[ 1125.453452][ T1297] bond6 (unregistering): Released all slaves
[ 1125.570410][ T1297] bond7 (unregistering): (slave veth9): Releasing active interface
[ 1125.580373][ T1297] bond7 (unregistering): Released all slaves
[ 1125.592476][ T1297] bond8 (unregistering): Released all slaves
[ 1125.605811][ T1297] bond9 (unregistering): Released all slaves
[ 1125.724538][ T1297] bond10 (unregistering): (slave veth15): Releasing active interface
[ 1125.733428][ T1297] bond10 (unregistering): Released all slaves
[ 1125.936457][ T5843] Bluetooth: hci5: command tx timeout
[ 1125.956673][ T1297] �9: left promiscuous mode
[ 1125.966629][T19333] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12585'.
[ 1125.979598][T19333] netlink: 'syz.2.12585': attribute type 83 has an invalid length.
[ 1125.982382][T19335] netlink: 'syz.4.12586': attribute type 1 has an invalid length.
[ 1126.072876][ T1297] �9: left promiscuous mode
[ 1126.096580][T19336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12586'.
[ 1126.239024][T19338] bond1 (unregistering): Released all slaves
[ 1126.287366][ T1297] tipc: Disabling bearer <eth:syzkaller0>
[ 1126.317998][ T1297] tipc: Left network mode
[ 1126.499202][T19224] chnl_net:caif_netlink_parms(): no params data found
[ 1126.525607][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12594'.
[ 1126.667258][T19381] netlink: 'syz.2.12597': attribute type 10 has an invalid length.
[ 1126.677671][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12596'.
[ 1126.720404][T19381] team0: Device veth1_macvtap failed to register rx_handler
[ 1127.010938][T19397] netlink: 'syz.5.12602': attribute type 30 has an invalid length.
[ 1127.049927][T19224] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.059940][T19224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.075715][T19224] bridge_slave_0: entered allmulticast mode
[ 1127.096864][T19224] bridge_slave_0: entered promiscuous mode
[ 1127.179008][T19224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.223552][T19224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.235327][T19224] bridge_slave_1: entered allmulticast mode
[ 1127.244020][T19224] bridge_slave_1: entered promiscuous mode
[ 1127.252525][T19398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.616248][T19407] syzkaller1: entered promiscuous mode
[ 1127.621871][T19407] syzkaller1: entered allmulticast mode
[ 1127.819150][T19224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1127.901984][T19224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1128.024439][ T5843] Bluetooth: hci5: command tx timeout
[ 1128.302839][ T1297] batadv_slave_1: left promiscuous mode
[ 1128.335347][T19457] netlink: 'syz.2.12613': attribute type 4 has an invalid length.
[ 1128.385422][T19467] netlink: 'syz.2.12613': attribute type 4 has an invalid length.
[ 1129.315187][ T1297] team0 (unregistering): Port device team_slave_1 removed
[ 1129.365552][ T1297] team0 (unregistering): Port device team_slave_0 removed
[ 1129.711793][T19224] team0: Port device team_slave_0 added
[ 1129.740347][T19470] syzkaller0: entered promiscuous mode
[ 1129.746241][T19470] syzkaller0: entered allmulticast mode
[ 1130.098366][ T5843] Bluetooth: hci5: command tx timeout
[ 1130.215243][ T5201] udevd[5201]: worker [16662] /devices/virtual/block/nbd7 is taking a long time
[ 1131.766983][T19224] team0: Port device team_slave_1 added
[ 1132.028631][T19224] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1132.049630][T19224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.084746][T19224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1132.099611][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12627'.
[ 1132.169221][T19224] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1132.204350][T19224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.269222][T19224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1132.498159][T19224] hsr_slave_0: entered promiscuous mode
[ 1132.529594][T19224] hsr_slave_1: entered promiscuous mode
[ 1132.567908][T19224] debugfs: 'hsr0' already exists in 'hsr'
[ 1132.577072][T19224] Cannot create hsr debugfs directory
[ 1132.768371][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12638'.
[ 1132.783064][T19559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12638'.
[ 1132.808631][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12637'.
[ 1132.832571][T19559] gretap1: entered promiscuous mode
[ 1132.840898][T19559] gretap1: entered allmulticast mode
[ 1133.156966][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12644'.
[ 1133.402670][T19596] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12646'.
[ 1133.429443][T19590] bond2: option lp_interval: invalid value (0)
[ 1133.455603][T19590] bond2: option lp_interval: allowed values 1 - 2147483647
[ 1133.489419][T19590] bond2 (unregistering): Released all slaves
[ 1133.565160][T19618] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1133.621159][T19606] syzkaller0: entered promiscuous mode
[ 1133.656835][T19606] syzkaller0: entered allmulticast mode
[ 1133.799418][T19627] netlink: 'syz.2.12651': attribute type 1 has an invalid length.
[ 1133.810995][T19630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12651'.
[ 1133.832315][T19627] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1134.065772][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12654'.
[ 1134.301016][T19224] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1134.330111][T19224] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1134.386558][T19224] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1134.413002][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12657'.
[ 1134.424036][T19224] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1134.569817][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12659'.
[ 1134.781833][T19224] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1134.862654][T19688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.881799][T19679] bond2: (slave veth3): Enslaving as an active interface with a down link
[ 1134.896395][T19693] SET target dimension over the limit!
[ 1134.967756][T19682] bond2: (slave veth5): Enslaving as an active interface with a down link
[ 1134.988947][T19687] netlink: 'syz.3.12665': attribute type 11 has an invalid length.
[ 1135.005852][T19687] netlink: 'syz.3.12665': attribute type 11 has an invalid length.
[ 1135.044094][T19224] 8021q: adding VLAN 0 to HW filter on device team0
[ 1135.132474][T19703] bond0: (slave macvlan2): Opening slave failed
[ 1135.181459][  T132] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.189084][  T132] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1135.227363][T10404] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.235342][T10404] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1135.492808][T19720] netlink: 'syz.2.12673': attribute type 11 has an invalid length.
[ 1135.514002][T19720] netlink: 'syz.2.12673': attribute type 11 has an invalid length.
[ 1135.538863][T19719] netlink: 'syz.2.12673': attribute type 11 has an invalid length.
[ 1135.566478][T19719] netlink: 'syz.2.12673': attribute type 11 has an invalid length.
[ 1135.887417][T19224] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.048046][T19224] veth0_vlan: entered promiscuous mode
[ 1136.101495][T19224] veth1_vlan: entered promiscuous mode
[ 1136.262629][T19224] veth0_macvtap: entered promiscuous mode
[ 1136.322496][T19224] veth1_macvtap: entered promiscuous mode
[ 1136.362097][T19224] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1136.404217][T19224] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1136.472088][T10407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.502068][T10407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.599696][T19777] tipc: Started in network mode
[ 1136.614831][T19777] tipc: Node identity fa351a951813, cluster identity 4711
[ 1136.622152][T19777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1136.655925][T10407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.693835][T10407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.732794][T19777] tipc: Disabling bearer <eth:syzkaller0>
[ 1136.752161][T19792] netlink: 'syz.3.12690': attribute type 33 has an invalid length.
[ 1136.879053][T19792] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1136.922408][T19792] bond1 (unregistering): Released all slaves
[ 1136.953411][T19804] netlink: 'syz.2.12693': attribute type 1 has an invalid length.
[ 1136.961577][T19803] netlink: 'syz.2.12693': attribute type 1 has an invalid length.
[ 1137.056161][T19800] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1137.147688][T19800] bond7 (unregistering): Released all slaves
[ 1137.220696][T19823] netlink: 'syz.2.12696': attribute type 2 has an invalid length.
[ 1137.234728][T19823] __nla_validate_parse: 14 callbacks suppressed
[ 1137.234744][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12696'.
[ 1137.477244][T10404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1137.505768][T10404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1137.588344][T14304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1137.600706][T14304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1137.911298][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12703'.
[ 1138.034819][T19863] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12705'.
[ 1138.075136][T19863] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12705'.
[ 1138.886077][T19880] mac80211_hwsim hwsim144 wlan1: entered allmulticast mode
[ 1139.183422][T19915] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12715'.
[ 1139.196257][T19918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1139.203951][T19918] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.211245][T19918] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.218525][T19918] IPv6: NLM_F_CREATE should be set when creating new route
[ 1139.319727][T19926] x_tables: duplicate underflow at hook 1
[ 1139.417948][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12719'.
[ 1140.007289][T19976] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12725'.
[ 1140.150851][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12729'.
[ 1140.194662][T19990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1140.225375][T19990] macvtap4: entered promiscuous mode
[ 1140.233466][T19990] macvtap4: entered allmulticast mode
[ 1140.255598][T19990] veth1_vlan: entered allmulticast mode
[ 1140.277955][T19996] bond_slave_0: entered allmulticast mode
[ 1140.343006][T19996] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1140.371897][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12733'.
[ 1140.771667][T20029] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1140.966554][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12740'.
[ 1141.136225][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.148396][T18052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.219433][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.338245][T20059] netlink: 'syz.2.12744': attribute type 1 has an invalid length.
[ 1141.363882][T20039] geneve1 speed is unknown, defaulting to 1000
[ 1141.548626][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.963555][T20039] wlan0 speed is unknown, defaulting to 1000
[ 1142.005419][T20100] netlink: 'syz.0.12755': attribute type 4 has an invalid length.
[ 1142.800172][T20140] netlink: 'syz.5.12765': attribute type 8 has an invalid length.
[ 1143.084574][T20142] syzkaller0: entered promiscuous mode
[ 1143.090088][T20142] syzkaller0: entered allmulticast mode
[ 1143.113846][T20147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1143.180815][T20142] __nla_validate_parse: 46 callbacks suppressed
[ 1143.180834][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12766'.
[ 1143.182105][T20147] tipc: Disabling bearer <eth:syzkaller0>
[ 1143.267511][T20157] delete_channel: no stack
[ 1143.277882][T20156] delete_channel: no stack
[ 1143.307070][T20161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12772'.
[ 1143.441887][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12773'.
[ 1143.509895][T20173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12775'.
[ 1143.543733][T20173] netlink: 92 bytes leftover after parsing attributes in process `syz.4.12775'.
[ 1143.593467][T20180] syzkaller0: entered promiscuous mode
[ 1143.601537][T20180] syzkaller0: entered allmulticast mode
[ 1143.977424][T20203] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12785'.
[ 1144.073729][T20210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1144.083277][T20216] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12789'.
[ 1144.158016][T20216] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12789'.
[ 1144.194650][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12789'.
[ 1144.232888][T20216] netlink: 232 bytes leftover after parsing attributes in process `syz.3.12789'.
[ 1144.380893][T20239] netlink: 'syz.5.12794': attribute type 64 has an invalid length.
[ 1144.422796][T20242] netlink: 'syz.2.12795': attribute type 1 has an invalid length.
[ 1144.515632][T20242] bond3: entered promiscuous mode
[ 1144.521358][T20242] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1144.588430][T20245] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1144.596820][T20245] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[ 1144.607334][T20245] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode
[ 1144.619920][T20245] bond3: (slave gre1): making interface the new active one
[ 1144.627813][T20245] gre1: entered promiscuous mode
[ 1144.652744][T20245] bond3: (slave gre1): Enslaving as an active interface with an up link
[ 1144.810823][T20257] netlink: 'syz.2.12800': attribute type 1 has an invalid length.
[ 1144.890035][T20265] netlink: 'syz.2.12800': attribute type 1 has an invalid length.
[ 1144.896707][T20257] bond4: entered promiscuous mode
[ 1144.923016][T20257] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1144.966999][T20265] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1144.994420][T20265] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1145.006950][T20265] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[ 1145.109630][T20274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1145.331479][T20293] 8021q: VLANs not supported on ip6gre0
[ 1145.392147][T20291] netlink: 'syz.2.12809': attribute type 3 has an invalid length.
[ 1145.436881][T20305] netlink: 'syz.3.12810': attribute type 1 has an invalid length.
[ 1145.543645][T20308] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1145.579649][T20308] bond5 (unregistering): Released all slaves
[ 1145.682774][T20313] bond1: (slave bridge3): making interface the new active one
[ 1145.692233][T20313] bond1: (slave bridge3): Enslaving as an active interface with an up link
[ 1146.300881][T20332] gre2: entered promiscuous mode
[ 1146.308491][T20332] gre2: entered allmulticast mode
[ 1146.356634][T20342] netlink: 'syz.5.12822': attribute type 1 has an invalid length.
[ 1146.436214][T20339] veth3: entered promiscuous mode
[ 1146.442150][T20339] veth3: entered allmulticast mode
[ 1146.661387][T20363] block nbd8: Unsupported socket: should be TCP or UNIX.
[ 1146.783537][T20370] xt_cgroup: path and classid specified
[ 1146.873274][T20368] syzkaller0: entered promiscuous mode
[ 1146.879255][T20368] syzkaller0: entered allmulticast mode
[ 1149.720514][T20388] team0 (unregistering): Port device team_slave_0 removed
[ 1149.752548][T20388] team0 (unregistering): Port device team_slave_1 removed
[ 1149.863387][T20404] __nla_validate_parse: 66 callbacks suppressed
[ 1149.863408][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12839'.
[ 1150.097888][T20422] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1150.182096][T20424] gtp0: entered promiscuous mode
[ 1150.222595][T20424] gtp0: entered allmulticast mode
[ 1150.269395][T20434] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1150.615307][T20459] vcan1: entered promiscuous mode
[ 1150.620638][T20459] vcan1: entered allmulticast mode
[ 1150.752874][T20467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12860'.
[ 1150.881401][T20479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12864'.
[ 1151.063363][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12867'.
[ 1151.076039][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12868'.
[ 1151.093503][T20490] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12868'.
[ 1151.138934][T20493] can: request_module (can-proto-3) failed.
[ 1151.183831][T20488] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1151.187232][T20493] Bluetooth: MGMT ver 1.23
[ 1151.211998][T20493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12869'.
[ 1151.262426][T20493] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1151.350655][T20493] xt_CT: No such helper "snmp_trap"
[ 1151.475609][T20514] x_tables: unsorted underflow at hook 3
[ 1151.595264][T20521] dvmrp0: entered allmulticast mode
[ 1151.915802][T20546] rdma_op ffff8880251871f0 conn xmit_rdma 0000000000000000
[ 1152.109295][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12888'.
[ 1152.180445][T20571] netlink: 'syz.5.12890': attribute type 1 has an invalid length.
[ 1152.229450][T20571] bond7: (slave geneve3): making interface the new active one
[ 1152.280900][T20571] bond7: (slave geneve3): Enslaving as an active interface with an up link
[ 1152.314890][T10410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[ 1152.329413][T10410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[ 1152.374963][T10410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[ 1152.618769][ T5843] block nbd8: Receive control failed (result -32)
[ 1152.983759][T20607] netlink: 'syz.5.12900': attribute type 18 has an invalid length.
[ 1153.574445][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 90 seconds
[ 1153.585570][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 90 seconds
[ 1153.597711][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 90 seconds
[ 1153.608740][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 90 seconds
[ 1153.838787][T20656] syzkaller0: entered promiscuous mode
[ 1153.860223][T20656] syzkaller0: entered allmulticast mode
[ 1153.874418][T20660] netlink: 'syz.0.12914': attribute type 10 has an invalid length.
[ 1153.924740][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12914'.
[ 1153.948774][T20660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12914'.
[ 1154.052243][T20665] ip6gre0: Master is either lo or non-ether device
[ 1154.183180][T20635] lec:lec_atm_close: lec0: Shut down!
[ 1154.240230][T20679] syzkaller1: entered promiscuous mode
[ 1154.255340][T20679] syzkaller1: entered allmulticast mode
[ 1154.436978][T20681] netlink: 'syz.0.12920': attribute type 29 has an invalid length.
[ 1154.473055][T20681] netlink: 'syz.0.12920': attribute type 29 has an invalid length.
[ 1154.493897][T20685] syzkaller0: entered promiscuous mode
[ 1154.515937][T20685] syzkaller0: entered allmulticast mode
[ 1154.904529][T20714] netlink: 'syz.5.12928': attribute type 1 has an invalid length.
[ 1154.935724][T20716] netlink: 'syz.5.12928': attribute type 1 has an invalid length.
[ 1154.975555][T20687] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 1154.986688][T20714] netlink: 'syz.5.12928': attribute type 4 has an invalid length.
[ 1155.067979][T20693] __nla_validate_parse: 5 callbacks suppressed
[ 1155.067996][T20693] netlink: 324 bytes leftover after parsing attributes in process `syz.4.12923'.
[ 1155.111013][T20723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12930'.
[ 1155.150594][T20725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12931'.
[ 1155.287761][T20728] syzkaller0: entered promiscuous mode
[ 1155.293564][T20728] syzkaller0: entered allmulticast mode
[ 1155.333753][T20734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12935'.
[ 1155.353375][T20686] lec:lec_atm_close: lec0: Shut down!
[ 1155.705997][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12940'.
[ 1156.003419][T20782] syzkaller0: entered promiscuous mode
[ 1156.034314][T20782] syzkaller0: entered allmulticast mode
[ 1156.060524][T20782] tipc: Started in network mode
[ 1156.088940][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12949'.
[ 1156.108726][T20782] tipc: Node identity ba5bd74def8a, cluster identity 4711
[ 1156.117045][T20782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1156.182368][T20781] tipc: Resetting bearer <eth:syzkaller0>
[ 1156.191942][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12953'.
[ 1156.236962][T20781] tipc: Disabling bearer <eth:syzkaller0>
[ 1156.273089][T20786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1156.452977][T20811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12955'.
[ 1156.778633][T20841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12959'.
[ 1156.810098][T20841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12959'.
[ 1156.981802][T20856] rdma_op ffff8880321d21f0 conn xmit_rdma 0000000000000000
[ 1157.156415][T20870] netlink: 'syz.2.12968': attribute type 8 has an invalid length.
[ 1157.264163][T20875] IPv6: sit1: Disabled Multicast RS
[ 1157.277070][T20875] sit1: entered allmulticast mode
[ 1157.485166][T20892] bridge0: entered allmulticast mode
[ 1157.600986][T20899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1157.734102][T20914] netlink: 'syz.0.12981': attribute type 11 has an invalid length.
[ 1158.012890][T20922] syzkaller0: entered promiscuous mode
[ 1158.019430][T20922] syzkaller0: entered allmulticast mode
[ 1158.587950][T20961] geneve1 speed is unknown, defaulting to 1000
[ 1158.590915][T20957] netlink: 'syz.4.12996': attribute type 1 has an invalid length.
[ 1158.629551][T20963] tipc: Enabled bearer <eth:ipvlan1>, priority 2
[ 1159.135041][T20961] wlan0 speed is unknown, defaulting to 1000
[ 1159.459743][T20980] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1160.229523][T21009] syzkaller0: entered promiscuous mode
[ 1160.246047][T21009] syzkaller0: entered allmulticast mode
[ 1160.354697][T21009] can: request_module (can-proto-0) failed.
[ 1161.207109][T21054] netlink: 'syz.3.13022': attribute type 2 has an invalid length.
[ 1161.215154][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5870 ms
[ 1161.215301][    C0] lec:lec_tx_timeout: lec0
[ 1161.225229][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1161.234514][T21061] __nla_validate_parse: 9 callbacks suppressed
[ 1161.234531][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13024'.
[ 1161.308308][T21065] netlink: 'syz.3.13022': attribute type 1 has an invalid length.
[ 1161.634172][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13030'.
[ 1161.641105][T21076] netlink: 'syz.5.13028': attribute type 1 has an invalid length.
[ 1161.756212][T21076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13028'.
[ 1161.882390][T21093] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1161.894888][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13031'.
[ 1162.554420][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13039'.
[ 1162.735535][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13041'.
[ 1162.793567][T21131] netlink: 'syz.3.13041': attribute type 14 has an invalid length.
[ 1162.821731][T21135] netlink: 'syz.2.13042': attribute type 11 has an invalid length.
[ 1162.992449][T21138] netlink: 'syz.4.13043': attribute type 1 has an invalid length.
[ 1163.007895][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13043'.
[ 1163.550432][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13052'.
[ 1163.724921][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13054'.
[ 1163.963954][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13056'.
[ 1164.133792][T20914] Set syz1 is full, maxelem 65536 reached
[ 1164.299502][T21214] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[ 1164.492937][T21225] openvswitch: netlink: Flow key attr not present in new flow.
[ 1165.733454][T21292] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma?
[ 1165.763502][T21293] bond0: (slave gre0): Error: Device type is different from other slaves
[ 1165.968914][T21307] veth7: entered allmulticast mode
[ 1166.161487][T21324] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1166.614447][T21355] __nla_validate_parse: 10 callbacks suppressed
[ 1166.614466][T21355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13103'.
[ 1166.978180][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[ 1166.986734][    C0] lec:lec_tx_timeout: lec0
[ 1166.992596][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1172.814315][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[ 1172.822351][    C0] lec:lec_tx_timeout: lec0
[ 1172.829299][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1177.844747][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1177.852742][    C0] lec:lec_tx_timeout: lec0
[ 1177.858186][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1179.854913][T12412] IPVS: ip_vs_send_async error -101
[ 1182.864366][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1182.872494][    C0] lec:lec_tx_timeout: lec0
[ 1182.877238][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1183.616301][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 120 seconds
[ 1183.627488][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 120 seconds
[ 1183.638661][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 120 seconds
[ 1183.649776][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 120 seconds
[ 1187.884348][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1187.892368][    C0] lec:lec_tx_timeout: lec0
[ 1187.897740][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1192.904944][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1192.912969][    C0] lec:lec_tx_timeout: lec0
[ 1192.917622][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1197.924973][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1197.932997][    C0] lec:lec_tx_timeout: lec0
[ 1197.937935][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1202.944471][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1202.952498][    C0] lec:lec_tx_timeout: lec0
[ 1202.957755][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1207.964808][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1207.972839][    C0] lec:lec_tx_timeout: lec0
[ 1207.977542][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1212.984493][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1212.992514][    C0] lec:lec_tx_timeout: lec0
[ 1212.997127][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1213.695128][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 150 seconds
[ 1213.705949][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 150 seconds
[ 1213.716937][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 150 seconds
[ 1213.728439][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 150 seconds
[ 1215.135208][T25949] Bluetooth: hci3: command 0x0406 tx timeout
[ 1218.814302][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[ 1218.822332][    C0] lec:lec_tx_timeout: lec0
[ 1218.828299][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1223.844323][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1223.852336][    C0] lec:lec_tx_timeout: lec0
[ 1223.857767][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1228.864803][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1228.872810][    C0] lec:lec_tx_timeout: lec0
[ 1228.877522][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1229.086914][T21386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13105'.
[ 1229.575494][T21431] netlink: 'syz.4.13118': attribute type 1 has an invalid length.
[ 1229.609854][T21431] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1229.650415][T21439] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13120'.
[ 1229.742851][T21446] netlink: 6 bytes leftover after parsing attributes in process `syz.4.13123'.
[ 1229.799903][T21441] veth0: entered promiscuous mode
[ 1229.809149][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13121'.
[ 1229.945400][T21462] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002
[ 1230.204101][T21483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13128'.
[ 1230.368419][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13129'.
[ 1230.386017][T21489] netlink: 'syz.2.13129': attribute type 12 has an invalid length.
[ 1230.393960][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13129'.
[ 1230.426507][T14304] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[ 1230.426623][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13129'.
[ 1230.453586][T14304] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[ 1230.463656][T21497] netlink: 'syz.3.13132': attribute type 2 has an invalid length.
[ 1230.471201][T21489] netlink: 'syz.2.13129': attribute type 12 has an invalid length.
[ 1230.484332][T14304] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[ 1230.512986][T14304] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[ 1230.662350][T21512] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1230.672674][T21514] vlan2: entered promiscuous mode
[ 1230.679174][T21514] vlan2: entered allmulticast mode
[ 1230.684934][T21514] hsr_slave_1: entered allmulticast mode
[ 1230.700297][T21518] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1230.783217][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13135'.
[ 1230.893392][T21531] netlink: 6 bytes leftover after parsing attributes in process `syz.5.13143'.
[ 1230.940977][T21511] hsr_slave_1 (unregistering): left promiscuous mode
[ 1230.977526][T21528] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[ 1231.090762][T21520] syzkaller0: entered promiscuous mode
[ 1231.129265][T21520] syzkaller0: entered allmulticast mode
[ 1231.372302][T21562] tipc: Trying to set illegal importance in message
[ 1233.894275][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[ 1233.902340][    C0] lec:lec_tx_timeout: lec0
[ 1233.907448][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1233.945819][T21627] netlink: 'syz.0.13168': attribute type 10 has an invalid length.
[ 1233.966270][T21627] batman_adv: batadv0: Adding interface: netdevsim0
[ 1233.972903][T21627] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1234.002201][T21627] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[ 1234.245532][T21650] __nla_validate_parse: 7 callbacks suppressed
[ 1234.245551][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13171'.
[ 1234.561809][T21666] netlink: 6 bytes leftover after parsing attributes in process `syz.2.13180'.
[ 1234.587627][T21672] netlink: 'syz.3.13181': attribute type 2 has an invalid length.
[ 1234.605234][T21672] netlink: 119 bytes leftover after parsing attributes in process `syz.3.13181'.
[ 1234.655515][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13181'.
[ 1234.683360][T21672] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1234.874654][T21685] sch_fq: defrate 0 ignored.
[ 1234.942972][T21689] x_tables: duplicate underflow at hook 3
[ 1235.021809][T21692] netlink: 'syz.3.13184': attribute type 1 has an invalid length.
[ 1235.187863][T21692] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1235.211659][T21695] bond2: (slave geneve2): making interface the new active one
[ 1235.221502][T21695] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1235.251099][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13189'.
[ 1235.276814][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13189'.
[ 1235.311962][T21711] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1235.467837][T21734] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[ 1235.500407][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13195'.
[ 1235.509129][T21734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13196'.
[ 1235.533584][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13198'.
[ 1235.560966][T21734] netlink: 'syz.2.13196': attribute type 9 has an invalid length.
[ 1235.615306][T16739] Bluetooth: hci2: command 0x0405 tx timeout
[ 1235.714092][T21751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13202'.
[ 1235.983126][T21777] xt_ct_set_helper: 23 callbacks suppressed
[ 1235.983144][T21777] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1236.270855][T21792] syzkaller0: entered promiscuous mode
[ 1236.287392][T21792] syzkaller0: entered allmulticast mode
[ 1237.253970][T21863] Cannot find add_set index 0 as target
[ 1237.409208][T21871] IPv6: sit2: Disabled Multicast RS
[ 1237.607523][T21879] geneve1 speed is unknown, defaulting to 1000
[ 1238.186786][T21915] netlink: 'syz.3.13244': attribute type 5 has an invalid length.
[ 1238.211692][T21879] wlan0 speed is unknown, defaulting to 1000
[ 1238.480883][T21933] netlink: 'syz.3.13248': attribute type 28 has an invalid length.
[ 1238.501012][T21933] netlink: 'syz.3.13248': attribute type 3 has an invalid length.
[ 1238.639249][T21938] netlink: 'syz.0.13251': attribute type 5 has an invalid length.
[ 1238.851725][T21949] netlink: 'syz.0.13254': attribute type 13 has an invalid length.
[ 1238.914980][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1238.923018][    C0] lec:lec_tx_timeout: lec0
[ 1238.928067][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1239.018885][T21956] netlink: 'syz.4.13256': attribute type 64 has an invalid length.
[ 1239.352669][T21972] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1239.456909][T21978] __nla_validate_parse: 11 callbacks suppressed
[ 1239.456927][T21978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13261'.
[ 1240.517298][T22013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13270'.
[ 1240.985300][T22059] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1241.100641][T22067] netlink: 564 bytes leftover after parsing attributes in process `syz.5.13284'.
[ 1241.199581][T22071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1241.223261][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13280'.
[ 1241.225428][T22071] syzkaller0: entered promiscuous mode
[ 1241.258158][T22071] syzkaller0: entered allmulticast mode
[ 1241.296609][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13288'.
[ 1241.309605][T22083] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1241.321117][T22071] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[ 1241.385304][T22071] tipc: Resetting bearer <eth:syzkaller0>
[ 1241.401751][T22070] tipc: Resetting bearer <eth:syzkaller0>
[ 1241.459153][T22070] tipc: Disabling bearer <eth:syzkaller0>
[ 1241.495771][T22091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13293'.
[ 1241.512216][T22093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1241.600804][T22102] netlink: 'syz.4.13295': attribute type 27 has an invalid length.
[ 1241.699046][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13295'.
[ 1241.745532][T22102] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1241.753048][T22102] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.796669][T22116] netlink: 'syz.0.13300': attribute type 4 has an invalid length.
[ 1241.841718][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1241.848427][T22118] netlink: 'syz.0.13300': attribute type 4 has an invalid length.
[ 1241.859271][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1241.922257][T22102] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[ 1241.946395][T22102] gretap1: left promiscuous mode
[ 1241.951369][T22102] gretap1: left allmulticast mode
[ 1242.037805][T10410] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1242.072350][T10410] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1242.099895][T26735] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1242.151439][T26735] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1242.235186][T22130] syzkaller1: entered promiscuous mode
[ 1242.252636][T22130] syzkaller1: entered allmulticast mode
[ 1242.333161][T22133] bond5: option miimon: invalid value (18446744073709551585)
[ 1242.348321][T22133] bond5: option miimon: allowed values 0 - 2147483647
[ 1242.359004][T22133] bond5 (unregistering): Released all slaves
[ 1242.433891][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13308'.
[ 1242.534049][T22125] sctp: [Deprecated]: syz.3.13302 (pid 22125) Use of int in max_burst socket option deprecated.
[ 1242.534049][T22125] Use struct sctp_assoc_value instead
[ 1242.573924][T22146] veth1_vlan: mtu greater than device maximum
[ 1242.967981][T22183] lo: entered promiscuous mode
[ 1242.972793][T22183] lo: entered allmulticast mode
[ 1243.056477][T18052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1243.068130][T22186] tipc: New replicast peer: 255.255.255.255
[ 1243.084932][T22186] tipc: Enabled bearer <udp:s>, priority 10
[ 1243.118759][T22194] netlink: 284 bytes leftover after parsing attributes in process `syz.0.13322'.
[ 1243.132605][T22194] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1243.150893][T26735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1243.162937][T18052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1243.177807][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1243.182290][T22196] netlink: 6 bytes leftover after parsing attributes in process `syz.2.13323'.
[ 1243.383841][T10408] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1243.446557][T10408] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1243.481703][T10408] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1243.492269][T10408] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1243.538752][ T5201] udevd[5201]: worker [16662] /devices/virtual/block/nbd7 timeout; kill it
[ 1243.584447][ T5201] udevd[5201]: seq 48739 '/devices/virtual/block/nbd7' killed
[ 1243.815422][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 180 seconds
[ 1243.826534][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 180 seconds
[ 1243.838152][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 180 seconds
[ 1243.852766][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 180 seconds
[ 1243.884800][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1243.936875][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1243.944923][    C0] lec:lec_tx_timeout: lec0
[ 1243.949469][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1244.065609][T16739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1244.078885][T16739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1244.097077][T16739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1244.105861][T16739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1244.113532][T16739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1244.120631][T18052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1244.228061][T22234] geneve1 speed is unknown, defaulting to 1000
[ 1244.486130][T22252] __nla_validate_parse: 6 callbacks suppressed
[ 1244.486149][T22252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13339'.
[ 1244.544360][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13339'.
[ 1244.570874][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13339'.
[ 1244.655722][T22259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13341'.
[ 1244.693981][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13341'.
[ 1244.837876][T22234] wlan0 speed is unknown, defaulting to 1000
[ 1244.865317][T22269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13343'.
[ 1245.135373][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1245.640626][T22234] chnl_net:caif_netlink_parms(): no params data found
[ 1245.791407][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13353'.
[ 1245.843381][T22299] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001
[ 1245.879538][T22234] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.887506][T22234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.895202][T22234] bridge_slave_0: entered allmulticast mode
[ 1245.903851][T22234] bridge_slave_0: entered promiscuous mode
[ 1245.916879][T22234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.924089][T22234] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.936064][T22234] bridge_slave_1: entered allmulticast mode
[ 1245.943899][T22234] bridge_slave_1: entered promiscuous mode
[ 1246.096965][T22234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1246.110552][T22234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1246.174732][ T5843] Bluetooth: hci4: command tx timeout
[ 1246.182387][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.207589][T22234] team0: Port device team_slave_0 added
[ 1246.220247][T22234] team0: Port device team_slave_1 added
[ 1246.255187][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.263341][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.272283][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.283331][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.299487][T22234] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1246.307492][T22234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1246.335768][T22234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1246.367635][T22234] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1246.375804][T22234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1246.403716][T22234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1246.485610][T22333] syzkaller0: entered promiscuous mode
[ 1246.491142][T22333] syzkaller0: entered allmulticast mode
[ 1246.580544][T22234] hsr_slave_0: entered promiscuous mode
[ 1246.590115][T22234] hsr_slave_1: entered promiscuous mode
[ 1246.598862][T22234] debugfs: 'hsr0' already exists in 'hsr'
[ 1246.605526][T22234] Cannot create hsr debugfs directory
[ 1246.718992][T22349] syzkaller0: entered promiscuous mode
[ 1246.726236][T22349] syzkaller0: entered allmulticast mode
[ 1246.935067][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13367'.
[ 1247.081234][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13369'.
[ 1247.085898][T22371] netlink: 'syz.0.13371': attribute type 12 has an invalid length.
[ 1247.105266][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13371'.
[ 1247.125618][T22369] netlink: 'syz.2.13370': attribute type 1 has an invalid length.
[ 1247.136922][T22369] netlink: 'syz.2.13370': attribute type 32 has an invalid length.
[ 1247.160400][T22371] netlink: 'syz.0.13371': attribute type 12 has an invalid length.
[ 1247.198655][T22234] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1247.214600][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1247.241086][  T132] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.251029][T22373] netlink: 'syz.0.13371': attribute type 12 has an invalid length.
[ 1247.260851][  T132] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.291790][T22373] netlink: 'syz.0.13371': attribute type 12 has an invalid length.
[ 1247.313929][T22234] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1247.329855][  T132] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.341577][  T132] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1247.410229][T22234] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1247.457900][T22389] : entered promiscuous mode
[ 1247.510130][T22234] bond0: (slave netdevsim0): Releasing backup interface
[ 1247.838538][T22234] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1247.862217][T22234] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1247.958478][T22413] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 1247.977804][T22234] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1247.991193][T22234] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1248.030972][T22416] tipc: Started in network mode
[ 1248.040662][T22416] tipc: Node identity 36b9e81ee023, cluster identity 4711
[ 1248.072188][T22416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1248.082308][T22423] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[ 1248.153322][T22424] syzkaller0: entered promiscuous mode
[ 1248.162487][T22424] syzkaller0: entered allmulticast mode
[ 1248.169278][T22424] tipc: Resetting bearer <eth:syzkaller0>
[ 1248.203423][T22414] tipc: Resetting bearer <eth:syzkaller0>
[ 1248.255121][ T5843] Bluetooth: hci4: command tx timeout
[ 1248.265728][T18053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1248.967819][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1248.975866][    C0] lec:lec_tx_timeout: lec0
[ 1248.980801][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1249.300517][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1250.137072][T22414] tipc: Disabling bearer <eth:syzkaller0>
[ 1250.184591][ T5890] tipc: Node number set to 3600476190
[ 1250.335805][ T5843] Bluetooth: hci4: command tx timeout
[ 1250.341616][T18053] net_ratelimit: 1 callbacks suppressed
[ 1250.341633][T18053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1250.437637][T22460] ipvlan2: entered promiscuous mode
[ 1250.485572][T22234] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1250.505034][T22467] __nla_validate_parse: 11 callbacks suppressed
[ 1250.505052][T22467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13398'.
[ 1250.520463][T22234] 8021q: adding VLAN 0 to HW filter on device team0
[ 1250.560530][T10428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1250.567742][T10428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1250.589628][T22467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13398'.
[ 1250.589740][T10428] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1250.599889][T22467] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13398'.
[ 1250.605932][T10428] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1250.635365][T22467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13398'.
[ 1250.649342][T22477] netlink: zone id is out of range
[ 1250.657353][T22477] netlink: zone id is out of range
[ 1250.662506][T22477] netlink: del zone limit has 4 unknown bytes
[ 1251.031436][T22498] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13405'.
[ 1251.100489][T22234] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1251.307992][T18053] IPVS: starting estimator thread 0...
[ 1251.317703][T22508] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 1251.373261][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13408'.
[ 1251.394741][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1251.394925][T22513] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1251.564815][T22527] netlink: 6 bytes leftover after parsing attributes in process `syz.2.13413'.
[ 1251.595685][T22528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13412'.
[ 1251.749563][T22234] veth0_vlan: entered promiscuous mode
[ 1251.833405][T22234] veth1_vlan: entered promiscuous mode
[ 1251.917214][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13416'.
[ 1251.942978][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13416'.
[ 1251.962140][T22234] veth0_macvtap: entered promiscuous mode
[ 1252.003508][T22234] veth1_macvtap: entered promiscuous mode
[ 1252.076213][T22234] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1252.116599][T22234] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1252.152944][T10404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.198562][T10404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.213477][T10404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.240050][T10404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1252.331349][T22564] syzkaller1: entered promiscuous mode
[ 1252.334934][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1252.365242][T22564] syzkaller1: entered allmulticast mode
[ 1252.414608][ T5843] Bluetooth: hci4: command tx timeout
[ 1252.417546][T18052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1252.666486][T26735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.692421][T26735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.731944][T22586] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1252.851431][T10408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.870160][T10408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.973328][T22599] sctp: [Deprecated]: syz.4.13427 (pid 22599) Use of int in max_burst socket option deprecated.
[ 1252.973328][T22599] Use struct sctp_assoc_value instead
[ 1253.023227][T22606] netlink: 'syz.3.13430': attribute type 16 has an invalid length.
[ 1253.080366][T22597] geneve1 speed is unknown, defaulting to 1000
[ 1253.170423][T22611] netlink: 'syz.3.13431': attribute type 4 has an invalid length.
[ 1253.225342][T22614] xt_hashlimit: overflow, try lower: 3/0
[ 1253.456100][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1253.753482][T22644] xt_l2tp: v2 sid > 0xffff: 1114112
[ 1253.938712][T22652] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20000
[ 1253.967451][T22654] syzkaller0: entered promiscuous mode
[ 1253.972955][T22654] syzkaller0: entered allmulticast mode
[ 1253.995000][T22650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1254.076854][T22597] wlan0 speed is unknown, defaulting to 1000
[ 1254.083150][T22650] tipc: Resetting bearer <eth:syzkaller0>
[ 1254.150542][T22650] tipc: Disabling bearer <eth:syzkaller0>
[ 1254.246321][T22672] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 1254.549718][T22692] netlink: 'syz.5.13454': attribute type 6 has an invalid length.
[ 1254.814294][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[ 1254.822326][    C0] lec:lec_tx_timeout: lec0
[ 1254.828034][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1254.898146][T22710] geneve2: entered promiscuous mode
[ 1254.928321][T22710] geneve2: entered allmulticast mode
[ 1254.961359][ T1719] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[ 1255.012833][ T1719] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[ 1255.049138][ T1719] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[ 1255.091474][ T1719] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[ 1255.535882][T18054] net_ratelimit: 5 callbacks suppressed
[ 1255.535901][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1255.633964][T22752] lo: Caught tx_queue_len zero misconfig
[ 1255.797946][T22761] __nla_validate_parse: 15 callbacks suppressed
[ 1255.797967][T22761] netlink: 6 bytes leftover after parsing attributes in process `syz.2.13472'.
[ 1256.340059][T22792] "syz.0.13478" (22792) uses obsolete ecb(arc4) skcipher
[ 1256.376763][T22792] "syz.0.13478" (22792) uses obsolete ecb(arc4) skcipher
[ 1256.476389][T22803] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1256.668794][T22814] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 1256.682989][T22814] bond4: entered promiscuous mode
[ 1256.688557][T22814] bond4: entered allmulticast mode
[ 1256.695193][T22814] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1256.786167][T22830] netlink: 'syz.4.13487': attribute type 11 has an invalid length.
[ 1257.238998][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13498'.
[ 1257.266546][T22866] veth0: entered promiscuous mode
[ 1257.282202][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13499'.
[ 1257.326711][T22865] veth0: left promiscuous mode
[ 1257.382471][T22897] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1257.468719][T22908] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13504'.
[ 1257.542236][T22913] xt_ipcomp: unknown flags 1D
[ 1257.553388][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13504'.
[ 1257.759156][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13505'.
[ 1257.798004][T22927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13510'.
[ 1257.861681][T22892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1257.870598][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1257.880053][T22934] lo: left allmulticast mode
[ 1257.891828][T22934] tunl0: entered promiscuous mode
[ 1257.903432][T22934] gre0: entered promiscuous mode
[ 1257.947979][T22934] gretap0: entered promiscuous mode
[ 1257.987727][T22934] erspan0: entered promiscuous mode
[ 1258.000293][T22943] netlink: 190792 bytes leftover after parsing attributes in process `syz.5.13513'.
[ 1258.015212][T22934] ip_vti0: entered promiscuous mode
[ 1258.031501][T22933] vlan2: entered promiscuous mode
[ 1258.039842][T22933] vlan2: entered allmulticast mode
[ 1258.045433][T22933] hsr_slave_1: entered allmulticast mode
[ 1258.320178][T22975] x_tables: ip_tables: icmp match: only valid for protocol 1
[ 1258.426488][T22980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13522'.
[ 1258.499829][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1258.511669][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1258.525115][T22534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1258.555313][T22990] netlink: 'syz.0.13526': attribute type 18 has an invalid length.
[ 1258.564518][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13525'.
[ 1258.676204][T22993] veth9: entered promiscuous mode
[ 1258.687503][T22993] veth9: entered allmulticast mode
[ 1258.711113][T22999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1258.765963][T18054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1259.400376][T23036] siw: device registration error -23
[ 1259.536735][T23045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1259.551606][T23043] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[ 1259.589738][T23043] netlink: 'syz.2.13544': attribute type 21 has an invalid length.
[ 1259.598555][T23047] netlink: 'syz.5.13546': attribute type 1 has an invalid length.
[ 1259.604084][T23043] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1259.608376][T23047] netlink: 'syz.5.13546': attribute type 3 has an invalid length.
[ 1259.680796][T23048] netlink: 'syz.5.13546': attribute type 1 has an invalid length.
[ 1259.713209][T23048] netlink: 'syz.5.13546': attribute type 3 has an invalid length.
[ 1259.789751][T23013] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1259.818558][T23013] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1259.834316][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1259.842487][    C0] lec:lec_tx_timeout: lec0
[ 1259.847579][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1259.930153][T23013] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1259.956499][T23013] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1260.030230][T23013] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1260.040857][T23013] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1260.116717][T23013] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1260.131366][T23013] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1260.189884][T23082] siw: device registration error -23
[ 1260.201322][T23082] siw: device registration error -23
[ 1260.535768][T23097] sctp: [Deprecated]: syz.3.13558 (pid 23097) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1260.535768][T23097] Use struct sctp_sack_info instead
[ 1260.665954][T23097] sctp: [Deprecated]: syz.3.13558 (pid 23097) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1260.665954][T23097] Use struct sctp_sack_info instead
[ 1260.841102][T23121] __nla_validate_parse: 12 callbacks suppressed
[ 1260.841121][T23121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13565'.
[ 1260.980547][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13569'.
[ 1260.991961][T23141] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1261.013658][T23141] netlink: 'syz.3.13568': attribute type 29 has an invalid length.
[ 1261.046620][T23141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13568'.
[ 1261.058769][T23141] netlink: 'syz.3.13568': attribute type 1 has an invalid length.
[ 1261.072605][T23141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13568'.
[ 1261.116795][T23146] netlink: 'syz.2.13572': attribute type 1 has an invalid length.
[ 1261.140093][T23141] netlink: 'syz.3.13568': attribute type 29 has an invalid length.
[ 1261.205481][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13571'.
[ 1261.238771][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13571'.
[ 1261.397469][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13575'.
[ 1261.455949][T23169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13576'.
[ 1261.502636][T23169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13576'.
[ 1261.522725][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13577'.
[ 1261.708842][T23192] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20002
[ 1261.901781][T23201] xt_socket: unknown flags 0xe4
[ 1261.971937][T23204] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1261.997956][T23204] bond1 (unregistering): Released all slaves
[ 1263.046883][T23294] syz_tun: entered allmulticast mode
[ 1263.067775][T23292] syz_tun: left allmulticast mode
[ 1263.375839][T23310] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8
[ 1263.467476][T23319] syzkaller1: entered promiscuous mode
[ 1263.472987][T23319] syzkaller1: entered allmulticast mode
[ 1263.652330][T23342] validate_nla: 1 callbacks suppressed
[ 1263.652349][T23342] netlink: 'syz.5.13622': attribute type 15 has an invalid length.
[ 1264.445885][T23396] 8021q: VLANs not supported on ip6_vti0
[ 1264.854991][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1264.863029][    C0] lec:lec_tx_timeout: lec0
[ 1264.867621][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1265.042941][T23427] netlink: 'syz.0.13647': attribute type 10 has an invalid length.
[ 1265.152546][T23428] can: request_module (can-proto-5) failed.
[ 1265.341483][T23417] gretap1: left promiscuous mode
[ 1265.352136][T23417] bridge1: left promiscuous mode
[ 1265.367891][T23417] veth3: left promiscuous mode
[ 1265.433300][T23417] bond4: left promiscuous mode
[ 1265.489291][T22889] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1265.542685][T22889] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.593122][T22889] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1265.633546][T22889] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.679245][T22889] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1265.700793][T22889] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.712975][T22889] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1265.744338][T22889] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1265.872590][T23473] __nla_validate_parse: 21 callbacks suppressed
[ 1265.872608][T23473] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13656'.
[ 1265.889876][T23474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13657'.
[ 1266.287516][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13667'.
[ 1266.297789][T23509] block nbd9: Unsupported socket: should be TCP or UNIX.
[ 1266.540938][T23522] syzkaller0: entered promiscuous mode
[ 1266.547344][T23522] syzkaller0: entered allmulticast mode
[ 1266.566021][T23528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13672'.
[ 1266.694711][T23534] netlink: 'syz.0.13674': attribute type 1 has an invalid length.
[ 1266.696598][T23536] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1266.703212][T23534] netlink: 'syz.0.13674': attribute type 3 has an invalid length.
[ 1266.729407][T23534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1266.760736][T23536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1266.760741][T23534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1266.831747][T23536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1266.889647][T23536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13674'.
[ 1268.801805][T23570] ip6tnl3: entered allmulticast mode
[ 1268.999367][T23589] netlink: 'syz.3.13683': attribute type 1 has an invalid length.
[ 1269.421005][T23618] xt_socket: unknown flags 0x50
[ 1269.631680][T23629] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1269.858007][T23640] dvmrp6: entered allmulticast mode
[ 1269.874303][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1269.882345][    C0] lec:lec_tx_timeout: lec0
[ 1269.887351][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1270.209394][T23659] geneve1 speed is unknown, defaulting to 1000
[ 1270.398083][T23675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1270.415948][T23678] +
: renamed from syzkaller0
[ 1270.436305][T23678] tipc: Disabling bearer <eth:syzkaller0>
[ 1270.450747][T23680] netlink: 'syz.2.13710': attribute type 1 has an invalid length.
[ 1270.610906][T23683] bond5: (slave gretap1): making interface the new active one
[ 1270.631936][T23683] bond5: (slave gretap1): Enslaving as an active interface with an up link
[ 1270.828106][T23659] wlan0 speed is unknown, defaulting to 1000
[ 1270.905468][T23701] __nla_validate_parse: 22 callbacks suppressed
[ 1270.905486][T23701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13716'.
[ 1271.007575][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13717'.
[ 1271.263838][T23719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13720'.
[ 1271.473757][T23731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13724'.
[ 1271.590528][T23733] netlink: 'syz.3.13725': attribute type 2 has an invalid length.
[ 1271.623446][T23733] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13725'.
[ 1272.196490][T23761] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13732'.
[ 1272.206222][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13733'.
[ 1272.456536][T23779] ip6gre1: entered allmulticast mode
[ 1272.689798][T23792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13745'.
[ 1272.981439][T23807] netlink: 'syz.5.13747': attribute type 1 has an invalid length.
[ 1273.056724][T23807] bond1: entered promiscuous mode
[ 1273.074744][T23807] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1273.083396][T23817] x_tables: unsorted underflow at hook 1
[ 1273.139649][T23811] geneve1 speed is unknown, defaulting to 1000
[ 1273.266381][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13755'.
[ 1273.299972][T23828] veth0: entered promiscuous mode
[ 1273.311980][T23827] veth0: left promiscuous mode
[ 1273.549505][T23811] wlan0 speed is unknown, defaulting to 1000
[ 1273.648780][T23843] netlink: 108 bytes leftover after parsing attributes in process `syz.5.13760'.
[ 1273.865605][   T25] block nbd7: Possible stuck request ffff888026470000: control (read@0,1024B). Runtime 210 seconds
[ 1273.876447][   T25] block nbd7: Possible stuck request ffff888026470200: control (read@1024,1024B). Runtime 210 seconds
[ 1273.888635][   T25] block nbd7: Possible stuck request ffff888026470400: control (read@2048,1024B). Runtime 210 seconds
[ 1273.900125][   T25] block nbd7: Possible stuck request ffff888026470600: control (read@3072,1024B). Runtime 210 seconds
[ 1274.083073][T23869] netlink: 'syz.0.13769': attribute type 3 has an invalid length.
[ 1274.568834][T23898] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1274.719632][T23909] netlink: 'syz.5.13781': attribute type 30 has an invalid length.
[ 1274.894277][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1274.902303][    C0] lec:lec_tx_timeout: lec0
[ 1274.908375][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1274.922416][T23909] bond2: option arp_missed_max: invalid value (0)
[ 1274.960385][T23909] bond2: option arp_missed_max: allowed values 1 - 255
[ 1274.984134][T23909] bond2 (unregistering): Released all slaves
[ 1275.313038][T23929] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1275.561489][T23952] netlink: 'syz.5.13792': attribute type 2 has an invalid length.
[ 1275.994019][T23976] netlink: 'syz.2.13801': attribute type 1 has an invalid length.
[ 1276.036621][T23976] __nla_validate_parse: 10 callbacks suppressed
[ 1276.036639][T23976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13801'.
[ 1276.076065][T23978] netlink: 'syz.2.13801': attribute type 29 has an invalid length.
[ 1276.139743][T23982] netlink: 'syz.0.13803': attribute type 4 has an invalid length.
[ 1276.174133][T23982] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13803'.
[ 1276.337902][T23994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13803'.
[ 1276.380869][T23990] ip6gre0: Caught tx_queue_len zero misconfig
[ 1276.480895][T23982] `: renamed from bond0 (while UP)
[ 1277.493804][T24017] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13811'.
[ 1277.591159][T24020] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1277.648239][T24024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1277.753420][T24021] geneve1 speed is unknown, defaulting to 1000
[ 1277.806121][T24034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13813'.
[ 1277.967872][T24040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1278.118576][T24049] netlink: 'syz.3.13817': attribute type 9 has an invalid length.
[ 1278.406992][T24021] wlan0 speed is unknown, defaulting to 1000
[ 1279.561943][T24130] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1279.620048][T24130] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1279.706997][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13835'.
[ 1279.773006][T24138] netlink: 'syz.3.13837': attribute type 33 has an invalid length.
[ 1279.821419][T24138] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13837'.
[ 1279.888078][T24145] Cannot find add_set index 2 as target
[ 1279.895560][T24145] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13839'.
[ 1279.924233][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1279.932284][    C0] lec:lec_tx_timeout: lec0
[ 1279.940329][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1280.139573][T24146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13838'.
[ 1280.636154][T24182] openvswitch: netlink: Invalid VLAN frame
[ 1280.705416][T24186] xt_l2tp: invalid flags combination: 0
[ 1280.708436][T24188] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13851'.
[ 1280.857305][T24199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1280.963125][T24200] bond0: Removing last ns target with arp_interval on
[ 1281.125768][T24226] __nla_validate_parse: 1 callbacks suppressed
[ 1281.125788][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13863'.
[ 1281.155761][T24229] netlink: 'syz.4.13865': attribute type 1 has an invalid length.
[ 1281.175867][T24226] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1281.183564][T24227] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13864'.
[ 1281.289448][T24229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1281.315279][T24229] netlink: 'syz.4.13865': attribute type 5 has an invalid length.
[ 1281.350198][T24242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.387724][T24242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.400085][T24242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.520878][T24253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.615627][T24259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.628454][T24260] sctp: [Deprecated]: syz.3.13872 (pid 24260) Use of int in maxseg socket option.
[ 1281.628454][T24260] Use struct sctp_assoc_value instead
[ 1281.632328][T24259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1281.716090][T24268] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1
[ 1281.746874][T24268] netlink: 'syz.3.13875': attribute type 1 has an invalid length.
[ 1281.809077][T24274] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13877'.
[ 1281.820425][T24274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13877'.
[ 1281.831013][T24268] syzkaller1: entered promiscuous mode
[ 1281.836955][T24268] syzkaller1: entered allmulticast mode
[ 1282.037066][T24287] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[ 1282.226907][T24298] syzkaller0: entered promiscuous mode
[ 1282.239124][T24298] syzkaller0: entered allmulticast mode
[ 1282.359517][T24310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13888'.
[ 1282.427173][T24315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13889'.
[ 1282.471082][T24315] bond6: option xmit_hash_policy: invalid value (64)
[ 1282.481371][T24315] bond6 (unregistering): Released all slaves
[ 1282.647404][T24335] syzkaller0: entered promiscuous mode
[ 1282.652910][T24335] syzkaller0: entered allmulticast mode
[ 1282.748696][T24334] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1283.168003][T24369] netlink: 'syz.5.13905': attribute type 21 has an invalid length.
[ 1283.180194][T24363] bond6: entered allmulticast mode
[ 1283.186616][T24363] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1283.214726][T24369] netlink: 'syz.5.13905': attribute type 6 has an invalid length.
[ 1283.250136][T24369] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13905'.
[ 1283.611957][T24399] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13913'.
[ 1283.628679][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13910'.
[ 1283.639432][T24401] netlink: 'syz.4.13914': attribute type 3 has an invalid length.
[ 1283.650216][T24399] gretap0: entered promiscuous mode
[ 1283.655751][T24401] netlink: 'syz.4.13914': attribute type 1 has an invalid length.
[ 1283.663671][T24401] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13914'.
[ 1283.761148][T24399] gre0: left promiscuous mode
[ 1283.770447][T24399] gretap0: left promiscuous mode
[ 1283.780202][T24399] erspan0: left promiscuous mode
[ 1283.786337][T24399] erspan0: left allmulticast mode
[ 1283.799249][T24399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1283.877169][T24405] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1284.123626][T24434] netlink: 'syz.0.13923': attribute type 1 has an invalid length.
[ 1284.210320][T24434] bond1 (unregistering): Released all slaves
[ 1284.347488][T24441] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[ 1284.667642][T24458] bond1: option miimon: invalid value (18446744073709551585)
[ 1284.679117][T24458] bond1: option miimon: allowed values 0 - 2147483647
[ 1284.690027][T24458] bond1 (unregistering): Released all slaves
[ 1284.878411][T24469] 
[ 1284.880776][T24469] ======================================================
[ 1284.887795][T24469] WARNING: possible circular locking dependency detected
[ 1284.894831][T24469] syzkaller #0 Not tainted
[ 1284.899236][T24469] ------------------------------------------------------
[ 1284.906239][T24469] syz.0.13933/24469 is trying to acquire lock:
[ 1284.912370][T24469] ffffffff8f924738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[ 1284.921802][T24469] 
[ 1284.921802][T24469] but task is already holding lock:
[ 1284.929152][T24469] ffff888143301670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[ 1284.938459][T24469] 
[ 1284.938459][T24469] which lock already depends on the new lock.
[ 1284.938459][T24469] 
[ 1284.948847][T24469] 
[ 1284.948847][T24469] the existing dependency chain (in reverse order) is:
[ 1284.957843][T24469] 
[ 1284.957843][T24469] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1284.965831][T24469]        _raw_spin_lock_bh+0x36/0x50
[ 1284.971112][T24469]        nr_rt_device_down+0x12a/0x720
[ 1284.976558][T24469]        nr_device_event+0x137/0x150
[ 1284.981835][T24469]        notifier_call_chain+0x19d/0x3a0
[ 1284.987453][T24469]        __dev_notify_flags+0x16d/0x310
[ 1284.992982][T24469]        netif_change_flags+0xe8/0x1a0
[ 1284.998426][T24469]        dev_change_flags+0x130/0x260
[ 1285.003793][T24469]        dev_ioctl+0x7b4/0x1150
[ 1285.008640][T24469]        sock_do_ioctl+0x23e/0x320
[ 1285.013737][T24469]        sock_ioctl+0x5c6/0x7f0
[ 1285.018593][T24469]        __se_sys_ioctl+0xfc/0x170
[ 1285.023695][T24469]        do_syscall_64+0xe2/0xf80
[ 1285.028709][T24469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.035108][T24469] 
[ 1285.035108][T24469] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1285.042912][T24469]        _raw_spin_lock_bh+0x36/0x50
[ 1285.048194][T24469]        nr_rt_device_down+0xa9/0x720
[ 1285.053645][T24469]        nr_device_event+0x137/0x150
[ 1285.058921][T24469]        notifier_call_chain+0x19d/0x3a0
[ 1285.064561][T24469]        __dev_notify_flags+0x16d/0x310
[ 1285.070091][T24469]        netif_change_flags+0xe8/0x1a0
[ 1285.075534][T24469]        dev_change_flags+0x130/0x260
[ 1285.081297][T24469]        dev_ioctl+0x7b4/0x1150
[ 1285.086248][T24469]        sock_do_ioctl+0x23e/0x320
[ 1285.091378][T24469]        sock_ioctl+0x5c6/0x7f0
[ 1285.096391][T24469]        __se_sys_ioctl+0xfc/0x170
[ 1285.101506][T24469]        do_syscall_64+0xe2/0xf80
[ 1285.106526][T24469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.112932][T24469] 
[ 1285.112932][T24469] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1285.120913][T24469]        __lock_acquire+0x15a5/0x2cf0
[ 1285.126272][T24469]        lock_acquire+0x106/0x330
[ 1285.131275][T24469]        _raw_spin_lock_bh+0x36/0x50
[ 1285.136547][T24469]        nr_remove_neigh+0x25/0xe0
[ 1285.141736][T24469]        nr_add_node+0x1d9f/0x2570
[ 1285.146837][T24469]        nr_rt_ioctl+0xcb0/0xdf0
[ 1285.151781][T24469]        sock_do_ioctl+0x101/0x320
[ 1285.156889][T24469]        sock_ioctl+0x5c6/0x7f0
[ 1285.161724][T24469]        __se_sys_ioctl+0xfc/0x170
[ 1285.166838][T24469]        do_syscall_64+0xe2/0xf80
[ 1285.171863][T24469]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.178261][T24469] 
[ 1285.178261][T24469] other info that might help us debug this:
[ 1285.178261][T24469] 
[ 1285.188563][T24469] Chain exists of:
[ 1285.188563][T24469]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1285.188563][T24469] 
[ 1285.202379][T24469]  Possible unsafe locking scenario:
[ 1285.202379][T24469] 
[ 1285.209825][T24469]        CPU0                    CPU1
[ 1285.215175][T24469]        ----                    ----
[ 1285.220561][T24469]   lock(&nr_node->node_lock);
[ 1285.225318][T24469]                                lock(nr_node_list_lock);
[ 1285.232416][T24469]                                lock(&nr_node->node_lock);
[ 1285.239790][T24469]   lock(nr_neigh_list_lock);
[ 1285.244640][T24469] 
[ 1285.244640][T24469]  *** DEADLOCK ***
[ 1285.244640][T24469] 
[ 1285.253297][T24469] 1 lock held by syz.0.13933/24469:
[ 1285.258586][T24469]  #0: ffff888143301670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[ 1285.268443][T24469] 
[ 1285.268443][T24469] stack backtrace:
[ 1285.274339][T24469] CPU: 0 UID: 0 PID: 24469 Comm: syz.0.13933 Not tainted syzkaller #0 PREEMPT(full) 
[ 1285.274358][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1285.274369][T24469] Call Trace:
[ 1285.274378][T24469]  <TASK>
[ 1285.274386][T24469]  dump_stack_lvl+0xe8/0x150
[ 1285.274409][T24469]  print_circular_bug+0x2e1/0x300
[ 1285.274430][T24469]  check_noncircular+0x12e/0x150
[ 1285.274451][T24469]  __lock_acquire+0x15a5/0x2cf0
[ 1285.274476][T24469]  ? nr_remove_neigh+0x25/0xe0
[ 1285.274491][T24469]  lock_acquire+0x106/0x330
[ 1285.274505][T24469]  ? nr_remove_neigh+0x25/0xe0
[ 1285.274521][T24469]  ? nr_add_node+0xcce/0x2570
[ 1285.274542][T24469]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1285.274563][T24469]  ? nr_remove_neigh+0x25/0xe0
[ 1285.274577][T24469]  _raw_spin_lock_bh+0x36/0x50
[ 1285.274595][T24469]  ? nr_remove_neigh+0x25/0xe0
[ 1285.274608][T24469]  nr_remove_neigh+0x25/0xe0
[ 1285.274623][T24469]  nr_add_node+0x1d9f/0x2570
[ 1285.274645][T24469]  ? dev_get_by_name+0x21/0x200
[ 1285.274664][T24469]  ? dev_get_by_name+0x21/0x200
[ 1285.274679][T24469]  ? dev_get_by_name+0x21/0x200
[ 1285.274695][T24469]  ? nr_call_to_digi+0x136/0x1b0
[ 1285.274717][T24469]  nr_rt_ioctl+0xcb0/0xdf0
[ 1285.274742][T24469]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1285.274767][T24469]  ? apparmor_capable+0x137/0x1a0
[ 1285.274785][T24469]  ? capable+0x88/0xe0
[ 1285.274806][T24469]  ? nr_ioctl+0x1b1/0x3b0
[ 1285.274824][T24469]  sock_do_ioctl+0x101/0x320
[ 1285.274843][T24469]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1285.274859][T24469]  ? do_futex+0x395/0x420
[ 1285.274881][T24469]  sock_ioctl+0x5c6/0x7f0
[ 1285.274898][T24469]  ? __pfx_sock_ioctl+0x10/0x10
[ 1285.274915][T24469]  ? __fget_files+0x2a/0x420
[ 1285.274933][T24469]  ? __fget_files+0x3a0/0x420
[ 1285.274950][T24469]  ? __fget_files+0x2a/0x420
[ 1285.274969][T24469]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1285.274985][T24469]  ? __pfx_sock_ioctl+0x10/0x10
[ 1285.275001][T24469]  __se_sys_ioctl+0xfc/0x170
[ 1285.275024][T24469]  do_syscall_64+0xe2/0xf80
[ 1285.275045][T24469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.275061][T24469]  ? trace_irq_disable+0x37/0x100
[ 1285.275080][T24469]  ? clear_bhb_loop+0x60/0xb0
[ 1285.275097][T24469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1285.275112][T24469] RIP: 0033:0x7fc98999acb9
[ 1285.275127][T24469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1285.275141][T24469] RSP: 002b:00007fc98a85e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1285.275158][T24469] RAX: ffffffffffffffda RBX: 00007fc989c15fa0 RCX: 00007fc98999acb9
[ 1285.275170][T24469] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006
[ 1285.275181][T24469] RBP: 00007fc989a08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1285.275191][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1285.275201][T24469] R13: 00007fc989c16038 R14: 00007fc989c15fa0 R15: 00007ffffc284768
[ 1285.275219][T24469]  </TASK>
[ 1285.566540][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms
[ 1285.574559][    C0] lec:lec_tx_timeout: lec0
[ 1285.581292][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1291.134235][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms
[ 1291.142289][    C0] lec:lec_tx_timeout: lec0
[ 1291.147513][    C0] lec:lec_start_xmit: lec0:No lecd attached