last executing test programs:

24.835399109s ago: executing program 2 (id=6044):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
accept4(r1, 0x0, 0x0, 0x80000) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0xfffffffffffffffe, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newaddr={0x34, 0x14, 0x409, 0x70bd29, 0x25dfdbfe, {0x2, 0x8, 0xa2, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xb59c, 0xfff, 0x3, 0x5}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}]}, 0x34}}, 0x4020) (async)
getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f0000000080))
sendmsg$unix(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async)
recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) (async)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x801, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

24.750835718s ago: executing program 2 (id=6046):
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0002000000cbc700000000000700000020000000ef05c4441c0ec0b7efbd3c40a9b1e06b92ba8d849423a350c376d3d454520370886a045292ca9afe48f73778565cfda245011bcc68bba7df9f437b632f625e1906c3eeea2a725e3ba3d419f81d30317a1a6ed79033d68defecf6d912a66c7ab90a49a51dc49274edf71b8470142604ddcb4403e35ecd77f52bbacf007b3ee01e43dfcdc48b1362e820158fbacd77a855e0a392004ff7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0xfe, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x90, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff9d5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x0, 0x86b7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8}]}, 0x90}}, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10ef0000040000000400000002000000000000001a0141a48d18c4d728954b79797389f8b033d8a3d1b2deae28e29c7b26d1f88c85fd8976b3fbcbef6a20c0c756778d08e66e87cfe660d19384a7cafcb55b6d78ed43870959950149e4724402c36fc4513aee2c59a8ec54017660186541e442842b1a9baa8b4471172411ef116dcddffcc5b37edd5c901c31dcea041de9c4b27d9c00cc7b877b9a0afa0127d2b30c9e4df23344b50cf6ea3112ead550f1e19d0611fc7e85890db7dc43", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f0000000200)=r5}, 0x20)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}]}, 0x58}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$tipc(r7, &(0x7f0000000580)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x1}}, 0x10)
unshare(0x2a000000)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x8)

24.745116958s ago: executing program 2 (id=6047):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async, rerun: 32)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r3=>0x0}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0xa0, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f528afadc147f68aa39548407bcbe49d72cc57c8e9ce517d9c302de7eab3eca4a3eb"}}]}]}, 0xa0}}, 0x4004) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async, rerun: 64)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async, rerun: 64)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r3, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}}) (async)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001) (async)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

19.02234943s ago: executing program 1 (id=6153):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r2, &(0x7f0000000240)="94", 0x1) (async)
readv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) (async)
tee(r1, r4, 0x8f5, 0x100000000000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3c, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x14, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xfe}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaa1c, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x3ab4, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[r5], 0x0, 0x10, 0x7fffffff}, 0x94)

19.005488574s ago: executing program 1 (id=6155):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095", @ANYBLOB="3df0ce4f2d400f7ddd5f060b4f40eb0ba161876793365eb4eaeabcb0d39606f6ff515dc6c8160bd379fda8ce1b6ad5ffdca9b0f6251baafd818536d902106809a971894d2960e6c6ed489331fb88b515dfe21bc0f28867a79f22855eaa489414b13dc1ca815f4cc1a5093972ce98b5e4d6413ced032e38993bf578f5067d1a949ba0b4df3b7c9a863a8e3c47e4fed13474da790f31ed5f11dd5653034be4202531d0b83ab8aa98fc84bc0827f3c153d3fa38cb740dc1707277a3692035e4a0e478e4270f496a179e0c0efc2b43649239cb147d5efd"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1], 0x98}}, 0x4048010) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x31, &(0x7f000001e600)=""/2, &(0x7f000001e640)=0x2) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r6, @ANYBLOB="000029bd7000fbdbdf2503000000f6fd010073797a3100000000140002006970766c616e310000000000000000000000040002001e000000040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0xc1) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000007c0)={"2c17983fcf52d89930709ca087969d7e", 0x0, 0x0, {0xf, 0x8}, {0x3, 0x200}, 0xf0c, [0x3, 0xffffffff80000001, 0x8000, 0xc9, 0x7, 0xad6c, 0xfffffffffffffffd, 0x3, 0xfffffffffffffff7, 0x3, 0x100000001, 0x8000, 0x8, 0xe6b, 0x8, 0x9]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000840)={{r0}, 0x0, 0x10, @unused=[0xfff, 0x1, 0xc, 0xff], @devid}) (async, rerun: 32)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, &(0x7f0000000140))
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) (async)
getpid() (async, rerun: 64)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) (rerun: 64)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r11, @ANYBLOB="000b2cbd7000ffdbdf250f00000080005a803800018014000500810004000800040003000c00400005001e000100300560053901480324010203600627de4ed0aebfcee05eccfa926fab050c3b1b0000380002800500070001000000050004000200000005000700020000000500060001000000140005008000070000000e00010105006b0f02000c00008005000400020000002800178005000600d9000000000000000500060007000000000000001780050003001000000000000000050003000700000000000000050002000e00"], 0xe4}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)

18.930210115s ago: executing program 1 (id=6157):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000de0400"/38], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, <r1=>0x0, 0x0}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async)
unshare(0x20040600)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x2) (async)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x8, <r4=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r4, 0x4) (async, rerun: 64)
r5 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) (async)
sendto$inet(r5, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe00001f4}, 0x10)

18.847023894s ago: executing program 1 (id=6159):
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x400}]}, &(0x7f0000000080)=0x10)
getpeername$packet(r1, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x3a)
r5 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r5, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000000000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b36297232100210189f1dca18a4fd9e3b530f05305000000000c00180032cdd30e012e10f49ed74d7d5382e4eeb6b337b65315fe6c567aa56abe789a267b4ed99c91f19e06a73c3620b4f3d94a8480cd1a2375ca3b3575e1fcc5c7d004b4a4da761325373a5a869fa9bfaa54134bce28e428971aa05d9e4c367e3c3c6727ead8970ea811e1b2bda660cc4e7ff3c84f8d35d2c671d255c0e60dbbc551ddb4e0d4c47889cdfe45ae690658b6610f217c9c3871759a32f30665b9426f6c90ad2b11b66bcdc7cbbdf63672789747aba50140550b161daca28b75a9cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x2, &(0x7f00000000c0)='\x00\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00', @ANYBLOB="01530000f9ffffffff"], 0x34}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

18.691226613s ago: executing program 0 (id=6162):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) (async)
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0xffff}}, 0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32)
r3 = epoll_create1(0x0) (rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001400)={0xe0000017}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64)
epoll_wait(r3, &(0x7f0000001940)=[{}], 0x1, 0x0) (async, rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32)
sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8040) (rerun: 32)

18.631117695s ago: executing program 0 (id=6163):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcae, 0x0}, 0x8004) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r2, 0xffffe000) (async)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r6=>0x0}) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x6, 0xfc, 0x5, 0x0, 0x4, 0x400}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) (async)
accept4$inet(r2, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x800) (async)
socket(0x15, 0x800, 0x6) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003c000f010000000000000000017c00000c00d9000700000000000000204f4201520006003f0a916d106e1d00000004942d900000080020000100000004000280"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

18.471542388s ago: executing program 0 (id=6164):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
unshare(0x20000400)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000005c0))
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000d80)=0x2a82a30f, 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4)

18.471057441s ago: executing program 0 (id=6165):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000580), 0x0, 0x8008801)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1155df5aa89ba4548654c69e2d3e4719de272df4ea8568f5578c7cb2346ff1a89123636ff6666cb85e", 0x29}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x1000, &(0x7f00000002c0)=""/4096, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340), 0x0, 0x10, 0x4}, 0x94)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x15, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
socket$kcm(0x2, 0xa, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="320000001dfeffff03000000090000000400b21025ae91e9f7bd880100cd439a5f0f93e5a0a916a9d2a62dc8724b8a80c79b5155f066a03875e3189fbaaa139bc63b98fb87c92eee6991f396501a0c4d81a1edfb4d5454ca54e56ad94f0e9e95", @ANYRES32=r7, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000100"/24, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d030000", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

18.377318185s ago: executing program 1 (id=6166):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

18.274296114s ago: executing program 1 (id=6167):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x230, 0x3, 0x4, 0x70bd26, 0x25dfdbfe, {0x9}, [@generic="947042d6e3bdf7d599d49852839eaaf957f8c8e4badef4faab6bc7258001595ff63e2a5ee2fcd3041ed0833e1e8a5761b26c8fb7774f7d2dd0d69e32e2e77fb9f39b95d07fff3ca050ae84221d0647492c739ae75768a22a2b1937662f1895e304609ebad8fedc40c2518b0d66298cac01f9eea94ed6790796e95b5e445128014ff384e3e64640cfd49a8c55", @generic="92827f51fa2f820ec91bfe4fcbde3113aada0db3c5362b2de5b1f922ff6ced794a80e2e4fde3a9af9709013bb56763f22e7f29d2f965f8706728bb276cde06db8654c008487568c18c7378ff219fbe3bf33b1c95286c72b4aa6854f6c475f7bf6b1eff462e484d751112a1aacf336cb89e77ec05b55d49c03ba77b7853ae6d80eea484070af08fd707293d3abf", @typed={0xfd, 0xc0, 0x0, 0x0, @binary="909c585a0bdc579616cc6626f58ef6fe09bde2c05ee6e1adbf9b3869ffcdaec8c5d254fe57ae9d594743fc58185dd8cc2c922c7abd909d28643e7858e143ed479d3a75e48a0e821b6094ab39257d2b40a70fc4f90b085197d778ae84f21cd058f403db484c7bfad647216fec0d4119c1fd78cc506e1002403f052dd14ee5ca77d0f79aa0244ae9e76a68195c5f8890d093e05e0851896264ef9854f81322dc91b4ca13bd572fcbcc8f0714ece81aa065e4dd0d898fa81e7a3511cfe1d447ce1a6adacd0020ee9a22d825e8b9670c78d613f42358f8c0db5ca5c1e81cb26e51cbe38dc04552f6581f2250ade5243e562133d55ae814f30e0238"}]}, 0x230}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x68, &(0x7f0000000240)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x7]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb5}}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x28, 0x1, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000034c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a0002000000000a0b0fdb7b56d300000000ff44c6df47382a92a9f989e43d3c696b4d86c5da797a"], 0x28}}, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
r11 = accept4$inet(r9, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x800)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000780)={0x2, 'veth1_to_bond\x00', {0xb5}, 0xe})
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

17.560895287s ago: executing program 0 (id=6168):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRESOCT=r0, @ANYBLOB="c30c000800000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

17.56011129s ago: executing program 0 (id=6169):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00'}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1e0000000600000004000000d7070000a6900200", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030007f16faf3591a0208262848c4b8703000001000000000400000000"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="8102000000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000200"/28], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1411, 0x0, 0x0, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0xe45d, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x51)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
sendmmsg(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)}}], 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x5, 0x6, 0x6, 0x6, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000cfe50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
close(r6)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="140100003400010000000000ffdbdf25020100800c0022000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c02000000de1d5e8d3fb22a1b5046778b03000000b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565c56555ee923c65973deb0a99b9694a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac643378c17c3c6cbf0fe5078fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000000000ea0864973f4dae0e8c21372ee27e540dbf2ac81f358a2ada5e74aef0018b2b559558f6601e111045802c70e899ff002c88e04af2180269156926"], 0x114}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = gettid()
sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)

15.971112002s ago: executing program 2 (id=6170):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000008000500000000000800050004"], 0xd0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000004000001"], 0xfdef)

15.881003925s ago: executing program 2 (id=6171):
unshare(0x2040400)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r6], 0x20, 0x6044}, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x3}}, 0x0, 0x0, 0x8000, 0x0, 0x83}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x0, 0x2e, 0x0, 0x4}, 0x9c)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

15.0183071s ago: executing program 2 (id=6172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r3=>0x0, 0x7ff, 0x3, 0x8000, 0x4, 0xff1}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3, 0xef, "03403458d54f69a5dcc5dafc45c8b32c62328267ec52e4a2544ca8f43fc5d5d9f2dd5eb960b89a28392779e0e99d6f8515e534c3fee2830a7774936a4b9df5516133c09bbe84b1d9b472ce9bb4f9433d1184a1ce473985825be706d19a8f17092dd68efdb30fd1837c1c9390c2d4bdd18ec11cb806485d8c51933f58dd6d416a7a56668db412c3ee64a70466d2463e83a20af9b9221e8d2771cb18135eb7f7683a5c5b39f8d7741781d81e8475bad8a9c0e4b0ae77d6b2a7853e61628ebd5d67308d417ce015eb2eed1d223109adc2ea00e00f78bfa691983c8a50ec4cb3a99dfb75dc32d48acbadacc4fc2bf701c6"}, &(0x7f0000000240)=0xf7)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x878}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x4, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x17}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @tail_call, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x4d, &(0x7f0000000380)=""/77, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0xff, 0xffffffff}, 0x10, 0x267e7, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xb}, 0x94)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x5, 0x0, 0xffff, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @val=@tcx}, 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback=r2, r4, 0x2d, 0x200d, r5, @value=r7, @void, @void, @void, r6}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000780))
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0)
write$tun(r9, &(0x7f0000000800)={@void, @val={0x1, 0x80, 0x4, 0x9, 0x5, 0x9}, @eth={@remote, @random="6374cff008ec", @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x2}}, {@x25={0x805, {0x1, 0x58, 0x9, "516235074391febedc2c9d8e643802f6cb1dc05f805ca4aa5b9abaad3811f04e436d32e245e5931539c47bb3ac8fe0d0db5d93abe534361b363d29d22c77ad9a83d45c888b73696f7e749c105b4e910ab13164ff54a0732c9159e6bac3220135ee6dafa6741f088d1cd01d010d4906dce52051a6a4ace43a9d1534a6ffbf1b9678234f0f2ffa70b1"}}}}}, 0xab)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f00000008c0), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40a02900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000a40)={{}, [@netrom, @remote, @default, @netrom, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000ac0)=0x48, 0x80000)
accept4$ax25(r12, &(0x7f0000000b00)={{0x3, @null}, [@netrom, @remote, @default, @null, @bcast, @remote, @remote, @bcast]}, &(0x7f0000000b80)=0x48, 0x80800)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000001000)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x348, r14, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f22e62cc53b7c3420a438999ca055cc9f871ace54ec0c2"}}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0605c0e1eef3db1d8f7a0137ffaee40dde2e7d134ebf75dab8e34834f34ff7c6aee194b00f1ef925b3c2dfaf461c669adfe8fb5b30cd120ebc90e7095a7e58c260bdf9b97b90feb2d4cb02758bf5f2443d0ed676ee9d413ddcc127262583a4737654dc1ba511e13c64ba5cae1eb964bf6bb3d121b9bd1b2aa2c933a6f21da6ef4691ce0c1ccf811bf09ea5928adb0b30a5bf37776f73d73d41aa6bc8978095c46ea3891779103a4b8f9946b3c2a1d2829333bbe955c705e8a8aa71ec54fa2a008e9bfb94311cff0bb912f998584d2a8355f078aa5aa19eb1b485517512ec01ccb62fae9df1822fe0a33bd6b33741c8f572"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "385ac9209030a1221d93bcae2f9e42b9587aea55bed662"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c54}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "d729c1338a7095d15d71be7125c4cb2ba7e9258980887b4004c24f0971e51f2d565a6a97ffc311d4fa865ab4801d700d3cb20019ac8d427a363edfc9dfcc6b9f449f6d4b60cf2afe"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e2dbdd48815d0b12ccc508de447c039b78750578ed4c67abc2c3433f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "70277d5ea4f828bf4d54d48525602d66016a26cd6dedd79b25ca848c"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ba82e4025356a249de38dd68def87cd4e48cfb9f91761755eba098dfeb33a0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x37a8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x12, 0x3, "bb4ca224366efea4179d85ed3ade"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xefdc}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5b7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb54}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x1800}, 0x10000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000002880)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002840)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x17c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf0, 0x6, "35845830ea382815a2dbfaf787f406b16d4486d5d5ead605c88da46dc6a02745d0e1f6c99105b3507fd2b4dff6ecb38e1f15ab3a7cbab532abcb9524d7434026726c15b1ffa1a5e5857e727005833d85b7b53a0ab67bf9214c66c5d8e395d3102aaa85ede2db13c6ca697c4066efc6798e6c5b5c4f82a66af05dcce95efd165d7328f6cb8745e36ace1cd6ae55b6678dc887a9574970b953e1d1f8c6fd182dfa6c0bb62aaeecde76f1b4c50991513d1134fe8122ed24d8e7d799adbc996f0fdf51fbfb04291ca86a3b3bb1ff0e9fb2f816249856027986caa5a56858cf41dbfebc5e9054bb15008ccc5e5e4c"}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "d1d015b5dd4ecfc71b7f15d3606b8435e7a65a42151aa7e26d03488a15b5391fd1a6efb015620a86bdbaca336a101199010142e4005cccd8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0x210, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f4cb551}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x61c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x90, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "163a3ea687964a2c2669"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe4}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "74f6a9a45db678acf52ba553c2fe8947c8aa0d1d53c24495d26e9e711a6511e8056e57edb63a61c1e12226cb3743c1bde40cce87cb9d933069c73cdbd3f1a7de059da2c6e1863d09c80ac2babe2ba8752a7fc607af62f4eb020f97ec43c51fe78f96032ba8d52ed0ee"}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "905e04141617821cb8ab5e562e07f533cd6a02d1b609bbe0d9eea66722201514ff99731f3a2a00fb1eb5b5ed2cd35ed974112afd79bbdc4cfad2438889d1f4c9bf0a66fad684cd088c1090aae2493d3dee18fb84decdc4af490001e7563e0d1dc42cd76e2c751f3c5ad74ada73a35f67d3dae401"}, @NFTA_DATA_VALUE={0x35, 0x1, "1aa27bd2e33d81f295e55efaf46ffe1fdb7b89a2d8d29b92bc9effde34c6afb8eb9469877ed33f31ea6f42d824b0e6ba84"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "576e19f7a2894bc5f75a63fb08460d7ff09fd8a62926b1f8000c059c975ebb965bcdd31de801ce11afa58a20c1e9d3f49e3d897dd1d2e428984e7725c537776ce4eacd6b4216e6deb291f81fddc081107e86a1b7c79dd3f9bb631649ded8c4d9955643ffec85f5f70934e87b73a47cb37ab5e74e47ee524d114b783f9ada3cf8d58908a5566279b80b9312d53e85d69d254831299c4fc3ee78ce3259fed95add947a74031bcd4e615c78c855e4a92e91b6f72edd4e862f629c9eb9d7ad0cc2e2f0bea991258524f656945c068e6fdc8ae3f52bc28f77ae37be40d3a27016b6417bfd9b0ae611d42f725499d79d"}]}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x12, 0x1, "ab0a5276787b9e7a7a06da4adde2"}, @NFTA_DATA_VALUE={0x4f, 0x1, "a6d0941779fb06ede93f2b4960715341bb227d78a7bfd5b8c45721823ff48b5428826531046282a0f21cd080a3df33f809e073c2fec014f7a2399f4cf2ddf97ceffeaae23e5021e264835f"}, @NFTA_DATA_VALUE={0x37, 0x1, "4d2c914aa7143695afc76d1211b6a6363db366450b307a91af2de1501161e577d4d1d7094136676fbc06c943a6b691a2fd89b1"}, @NFTA_DATA_VALUE={0xc8, 0x1, "d9e021bb64d0d48e9e4100425166a08e1740d154a20092bc65fc7c3f4b51644d5260f47e6a15978ec5de99dfbb549abff3976afb50841436526b8dce65b897b3be4a8f3039758132ae6e65d16665cc95c64ff525ca1dcbef3b3daafb058c30616b8e7accb6c40b6a8a07a98c0133671512058c7f4a8361e8bd779e2aed95cfac28c41e20291664229f54a550d008595b1119a1ce8b4be4456d43700123d0c00a64a172dfcd317d4e345d3110681e3750d866db70b350e00bae8471a44a34b98b0d93eb30"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x120, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400100000000000}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x86}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x44, 0x6, 0x1, 0x0, "2dd39b66b5082c883c66a476a03a4ddacb9a0756a4c5f92e6cf33b715132ea518cad439d73fceacea8fc4718ac097768c0ab1c3eb97afd25d8d1bf72f091e5bc"}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x6a8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x664, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x140, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x130, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_INFO={0xfc, 0x3, "4156546a42023ce668717817ce400d312b03f3cb2a5d4c9613c380f7013f84975c9f1eae5a394856e7175fcefa0b7b42a6d4ebe449134019b3483b33f54fa80d2b748dff4f70fbd8983652c097c457ddebe169d149fcc3e41de7390f799fc06c21632d3f8c842dac0c2d3ece591b2562202cebd1846465a5f55069876b1d3a262a726a390347ae6d87b0dff300d9bbeb02bbb149148af6255478e2bed43e3e1c49794be030e6377eac9e89d30c98ec872ac87c3456679033dcede9556ef0d74b4f99a96b2a2431362678c381656e90c58898fb806aefc9316dd32aee58f80d4b5cffb3c33ee556ee1aef2a07d8781a2133aff907418b5d0c"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3c}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4d8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x32c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "140f3d6dafb2cb10a6249fb3ef40fbbafb2fc846e229f3a63a993209cb6c574d71b9981522d76190c4f865cf84ca449d933316564201296bac88b1b372c94d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "bed3575283c0f35504662725c503211518780ff8fe547a0295310c0fb997b64656e069423ff4f96a27d55413595e0dcd8b33928ea0350b50d0085bf271273bbe83276b5c7a160198aeb690f6b427136f89d786fe1ceaaad90f90c85b282941099095c1f4d08925c0a112ffa8625715cb11b675a833e03a9ab946c58e919d25df37869c9ad8aa89018f39110a0509943d850d132c395602ab553c8ba9cbf7edb57791f6b82a938386511a9a5fbd6d1f760a50b42e3a9017586350f760dedab762f51d51cc024660a5cc242d2c967dbbf8cfdcb27b3f00e209c1f756"}, @NFTA_DATA_VALUE={0x40, 0x1, "4179055ab735aec15ba690c2a66263f3b0f5bda5b9d951f6156dcc601acf7fa67369d6cbb83de1dd95eec3f967ad4ac845fd20cfb7175be53843140e"}, @NFTA_DATA_VALUE={0xcc, 0x1, "a9a26a7e9f33cc5884d23afc24d71c69023dbf5ee9335943273d48b706dbd79091426474f0a7be234b1d79ffb3d8a45a1a5581588df6bae62f8c93681bb30ae8ff884a7bc6d67a004a7b46960a8d283457acf6f1328bbe3691cbb5821dc663e12eb0003cb4cec958b04c00de27f072c8bc441d90ec9324234e4809fef4fd676a40cdc21dcc130aa0b09657688a35150d149ae8f7af1e8804dba64970a5c0ae8fc93e78fdc70a2f609d847e8ea6a3f0d74dfbca8d43cfc0cb68c6c9878665272a2434d71504e12288"}, @NFTA_DATA_VALUE={0x87, 0x1, "81df0d39700e77b0ebc753197359d52c4081b48b015a452b6fba380a234e80af0e4870aaed57b503dbed9e26d61127dd179a2d7e74136abcc148760caa1d8c61805446db097d6cbe14ae0be75c72c116d810d9c705bf4e0288d79f227eb10e263857689e3d0a8b32cc2eb7ebcf54be8730f7dddb49d65df41de0ac32aea98094c302e6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "dfd190f0d8830d"}, @NFTA_DATA_VALUE={0xbf, 0x1, "500dbd2abccad787bf614f5bce42d346b53ea2231ad8755c7988cc8465862a789b2c5ddb66c9dad860f920f609de9ebfa999c21d306633bc15825b3557c3a97813b70dd0bdf13ba95dc62c408baff884cc1c7ce0cbd1725a070c947953637b37836b416ccc5412129502797a3909a0bcf75f914a4a85c039e96326e16fbc44a35abd9523cf9913c186449e01da4bb70a9224da3107841be2cfe0049093d92e607ed46113ecc2316f6359cedb85affe11b73fc864a571b14ac06571"}, @NFTA_DATA_VALUE={0x5b, 0x1, "b5646f5438b9f2fe57818f0f2320dc1fe7212190271e99191c038550c695f3a4bc953732efc7a4c095e45d6ca450d1a180dd51685cf3de56640954faa733aa8e94724b070fd9a7de5ee4e1ea34e6d9acf8cce075d943d7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x49, 0x6, "60f7ea2e11a2bc56e7daade8be1f0c88682a90b7bee40b20eca5f3c022b7ece682251fa85f5c0872ae66ca00ba10779223c30ebfb6fe2fc1f6349eb2ce3ba85d607dddae3e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x35, 0x6, "6c3d192dc2adf2f9901c49ea298d8ab505973c498972f064dfc4fa9861a89795c2c7fe87516d9b88c8c9d9368556155e0d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x5e0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xe8, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffc57}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x47ce}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xbdf6}]}}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4b8, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x74, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x440}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}]}}}, {0x350, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x340, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xf2, 0x3, "6ca8c336a77395dfc6fde51435a67594e2fc814d14798e643d0134e362f6307ec1f7bc1e7d455215606dad3113c75c0f56eb75cee62c41a8ab4158624446c61e7641ab45720f5dde463089f9c1352dffb272876d8d5fd43be739e7e49f795ad4452d636dd51f1cfd80adadf3efb089003485b43ebb9857c52cc23664f1c1f89fe98a184c27137d640965279ca3eef58240b0afdc15ba4360e73f9b8fe85e2059365d64b1fe4dc8efb56e1ff5a8be3a974e12521005e498997957e6d36151d0354d3d44c00e106f8d5126dc1adc82c05fd729456db5abf0a2b5f360d18570a82460cd59568b4713d6984728df8438"}, @NFTA_MATCH_INFO={0xdc, 0x3, "e91a397fc5ffec14c99bb779bf137cdeaea65df009b6ce824011d412b88cd4c13193a2557c9d01cb961e280064efc3d7d7ecadfa23d4bef04c81f1c591cfcdf6db0415dc3d4380c6409b87f5879a5eb20a3956bc8661f53277120968a9dcd19d143d52ff49b7f5db753a8e50fb1aed4036912af9c4d260d0a05f7b312a36170c8ebd4c71ae5913909cc5280bfdad479986eb0eef36930907c27bcd7926e7a244493a18fd77f7fe081aa4f10c787d3ed901aad4b8098bbbdd2bec4239061bb86c60e11b00863067010f6224ab9c8708d9be4e6b66162127c5"}, @NFTA_MATCH_INFO={0xe7, 0x3, "9fb4a206c509221231fc00993ba997d2104633571ec59d642dc2b3e0a969a06f724010723848f87e556d4f0a0e9ab25e6134c825941fe3f445b202c6544d5e16bbfa75b5f72faa6d988e8e06a0e69209fe6d59b54799ed50f95ac77714991fcfd2794c19fb3796f8738e4a146dd2e66d75ff664084f98feec5697f124e7b66bfa694043a778c7495713bbd070076106d127911aa1c19fd2ecb2b82eace714d7c6702b9c5f567faf9b5c3c7d1de3d28e7549551e1d2adde5c8a2758f9d47ef7737b2ec5c793ba308ff64d4e899943bad22d1454a6195f2e01f0c03d48a4a37effeacc38"}, @NFTA_MATCH_INFO={0x73, 0x3, "5a5786c0886769898e8c7ddf9bad332457b29963583150c6c371161498284d851986779073a3502fc7c81f6bcf6f49aed4eaf61c7c5946af260176b8050439f31620d43adfc70520718ed861edb71773fd2c89a25dad046f661960be0d76cac8a603d2fba28aa2d7c90ae443485587"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x40, 0x6, "9e553b612a80424317b24c9219b903e42f440cb3ff99b6fefa6149aaea336010543fee67bf183cb9ea0244b9966f0cf6dd2f9967bd10f15f22cbc3e0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x20, 0x6, "76184bd9ee8df5c1c4c11cdaa5610578ea4caf80054b2c3154489453"}]}], {0x14}}, 0x17bc}, 0x1, 0x0, 0x0, 0x1}, 0x10c4)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002900), r13)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x24, r15, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000002a00)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

3.040123447s ago: executing program 32 (id=6167):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x230, 0x3, 0x4, 0x70bd26, 0x25dfdbfe, {0x9}, [@generic="947042d6e3bdf7d599d49852839eaaf957f8c8e4badef4faab6bc7258001595ff63e2a5ee2fcd3041ed0833e1e8a5761b26c8fb7774f7d2dd0d69e32e2e77fb9f39b95d07fff3ca050ae84221d0647492c739ae75768a22a2b1937662f1895e304609ebad8fedc40c2518b0d66298cac01f9eea94ed6790796e95b5e445128014ff384e3e64640cfd49a8c55", @generic="92827f51fa2f820ec91bfe4fcbde3113aada0db3c5362b2de5b1f922ff6ced794a80e2e4fde3a9af9709013bb56763f22e7f29d2f965f8706728bb276cde06db8654c008487568c18c7378ff219fbe3bf33b1c95286c72b4aa6854f6c475f7bf6b1eff462e484d751112a1aacf336cb89e77ec05b55d49c03ba77b7853ae6d80eea484070af08fd707293d3abf", @typed={0xfd, 0xc0, 0x0, 0x0, @binary="909c585a0bdc579616cc6626f58ef6fe09bde2c05ee6e1adbf9b3869ffcdaec8c5d254fe57ae9d594743fc58185dd8cc2c922c7abd909d28643e7858e143ed479d3a75e48a0e821b6094ab39257d2b40a70fc4f90b085197d778ae84f21cd058f403db484c7bfad647216fec0d4119c1fd78cc506e1002403f052dd14ee5ca77d0f79aa0244ae9e76a68195c5f8890d093e05e0851896264ef9854f81322dc91b4ca13bd572fcbcc8f0714ece81aa065e4dd0d898fa81e7a3511cfe1d447ce1a6adacd0020ee9a22d825e8b9670c78d613f42358f8c0db5ca5c1e81cb26e51cbe38dc04552f6581f2250ade5243e562133d55ae814f30e0238"}]}, 0x230}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x68, &(0x7f0000000240)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x7]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb5}}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x28, 0x1, 0x0)
getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000034c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a0002000000000a0b0fdb7b56d300000000ff44c6df47382a92a9f989e43d3c696b4d86c5da797a"], 0x28}}, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet(0x2, 0x80001, 0x84)
r11 = accept4$inet(r9, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x800)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000780)={0x2, 'veth1_to_bond\x00', {0xb5}, 0xe})
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

2.028231331s ago: executing program 33 (id=6169):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00'}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="1e0000000600000004000000d7070000a6900200", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030007f16faf3591a0208262848c4b8703000001000000000400000000"], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="8102000000000000000000f7ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000200"/28], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1411, 0x0, 0x0, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0xe45d, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x51)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10)
sendmmsg(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)}}], 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x5, 0x6, 0x6, 0x6, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000cfe50000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
close(r6)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = gettid()
sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000140a010400000000000000000a0000050900010073797a30000000000c00064000000000000000030800034000000003a0000000030a010400000000000000000a000009140004800800014000000001080002403c6eb26f08000a4000000000080007006e61740008000a400000000108000a4000000001400008800c000140000000000000000d0c00024000000000000000100c00014000000000000000070c00014000000000000000070c00024000000000ffffffff04000880080007006e6174000900030073797a3100000000140000000b0a05000000000000000000006cf8a54155faac00000914000000160a0101000000000000000003000007140000001100010000000000000000000000000a"], 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)

0s ago: executing program 34 (id=6172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={<r3=>0x0, 0x7ff, 0x3, 0x8000, 0x4, 0xff1}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3, 0xef, "03403458d54f69a5dcc5dafc45c8b32c62328267ec52e4a2544ca8f43fc5d5d9f2dd5eb960b89a28392779e0e99d6f8515e534c3fee2830a7774936a4b9df5516133c09bbe84b1d9b472ce9bb4f9433d1184a1ce473985825be706d19a8f17092dd68efdb30fd1837c1c9390c2d4bdd18ec11cb806485d8c51933f58dd6d416a7a56668db412c3ee64a70466d2463e83a20af9b9221e8d2771cb18135eb7f7683a5c5b39f8d7741781d81e8475bad8a9c0e4b0ae77d6b2a7853e61628ebd5d67308d417ce015eb2eed1d223109adc2ea00e00f78bfa691983c8a50ec4cb3a99dfb75dc32d48acbadacc4fc2bf701c6"}, &(0x7f0000000240)=0xf7)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x878}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x4, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x17}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @tail_call, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x4d, &(0x7f0000000380)=""/77, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xe, 0xff, 0xffffffff}, 0x10, 0x267e7, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xb}, 0x94)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@map, 0x5, 0x0, 0xffff, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @val=@tcx}, 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback=r2, r4, 0x2d, 0x200d, r5, @value=r7, @void, @void, @void, r6}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000780))
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0)
write$tun(r9, &(0x7f0000000800)={@void, @val={0x1, 0x80, 0x4, 0x9, 0x5, 0x9}, @eth={@remote, @random="6374cff008ec", @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x2}}, {@x25={0x805, {0x1, 0x58, 0x9, "516235074391febedc2c9d8e643802f6cb1dc05f805ca4aa5b9abaad3811f04e436d32e245e5931539c47bb3ac8fe0d0db5d93abe534361b363d29d22c77ad9a83d45c888b73696f7e749c105b4e910ab13164ff54a0732c9159e6bac3220135ee6dafa6741f088d1cd01d010d4906dce52051a6a4ace43a9d1534a6ffbf1b9678234f0f2ffa70b1"}}}}}, 0xab)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f00000008c0), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40a02900}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000a40)={{}, [@netrom, @remote, @default, @netrom, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000ac0)=0x48, 0x80000)
accept4$ax25(r12, &(0x7f0000000b00)={{0x3, @null}, [@netrom, @remote, @default, @null, @bcast, @remote, @remote, @bcast]}, &(0x7f0000000b80)=0x48, 0x80800)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000001000)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x348, r14, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f22e62cc53b7c3420a438999ca055cc9f871ace54ec0c2"}}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "0605c0e1eef3db1d8f7a0137ffaee40dde2e7d134ebf75dab8e34834f34ff7c6aee194b00f1ef925b3c2dfaf461c669adfe8fb5b30cd120ebc90e7095a7e58c260bdf9b97b90feb2d4cb02758bf5f2443d0ed676ee9d413ddcc127262583a4737654dc1ba511e13c64ba5cae1eb964bf6bb3d121b9bd1b2aa2c933a6f21da6ef4691ce0c1ccf811bf09ea5928adb0b30a5bf37776f73d73d41aa6bc8978095c46ea3891779103a4b8f9946b3c2a1d2829333bbe955c705e8a8aa71ec54fa2a008e9bfb94311cff0bb912f998584d2a8355f078aa5aa19eb1b485517512ec01ccb62fae9df1822fe0a33bd6b33741c8f572"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "385ac9209030a1221d93bcae2f9e42b9587aea55bed662"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6c54}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "d729c1338a7095d15d71be7125c4cb2ba7e9258980887b4004c24f0971e51f2d565a6a97ffc311d4fa865ab4801d700d3cb20019ac8d427a363edfc9dfcc6b9f449f6d4b60cf2afe"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e2dbdd48815d0b12ccc508de447c039b78750578ed4c67abc2c3433f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "70277d5ea4f828bf4d54d48525602d66016a26cd6dedd79b25ca848c"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "ba82e4025356a249de38dd68def87cd4e48cfb9f91761755eba098dfeb33a0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x37a8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x12, 0x3, "bb4ca224366efea4179d85ed3ade"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xefdc}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5b7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb54}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x1800}, 0x10000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000002880)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002840)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x17c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf0, 0x6, "35845830ea382815a2dbfaf787f406b16d4486d5d5ead605c88da46dc6a02745d0e1f6c99105b3507fd2b4dff6ecb38e1f15ab3a7cbab532abcb9524d7434026726c15b1ffa1a5e5857e727005833d85b7b53a0ab67bf9214c66c5d8e395d3102aaa85ede2db13c6ca697c4066efc6798e6c5b5c4f82a66af05dcce95efd165d7328f6cb8745e36ace1cd6ae55b6678dc887a9574970b953e1d1f8c6fd182dfa6c0bb62aaeecde76f1b4c50991513d1134fe8122ed24d8e7d799adbc996f0fdf51fbfb04291ca86a3b3bb1ff0e9fb2f816249856027986caa5a56858cf41dbfebc5e9054bb15008ccc5e5e4c"}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "d1d015b5dd4ecfc71b7f15d3606b8435e7a65a42151aa7e26d03488a15b5391fd1a6efb015620a86bdbaca336a101199010142e4005cccd8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0x210, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f4cb551}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x61c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x90, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "163a3ea687964a2c2669"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}]}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe4}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "74f6a9a45db678acf52ba553c2fe8947c8aa0d1d53c24495d26e9e711a6511e8056e57edb63a61c1e12226cb3743c1bde40cce87cb9d933069c73cdbd3f1a7de059da2c6e1863d09c80ac2babe2ba8752a7fc607af62f4eb020f97ec43c51fe78f96032ba8d52ed0ee"}, @NFTA_SET_ELEM_KEY_END={0x1b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "905e04141617821cb8ab5e562e07f533cd6a02d1b609bbe0d9eea66722201514ff99731f3a2a00fb1eb5b5ed2cd35ed974112afd79bbdc4cfad2438889d1f4c9bf0a66fad684cd088c1090aae2493d3dee18fb84decdc4af490001e7563e0d1dc42cd76e2c751f3c5ad74ada73a35f67d3dae401"}, @NFTA_DATA_VALUE={0x35, 0x1, "1aa27bd2e33d81f295e55efaf46ffe1fdb7b89a2d8d29b92bc9effde34c6afb8eb9469877ed33f31ea6f42d824b0e6ba84"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "576e19f7a2894bc5f75a63fb08460d7ff09fd8a62926b1f8000c059c975ebb965bcdd31de801ce11afa58a20c1e9d3f49e3d897dd1d2e428984e7725c537776ce4eacd6b4216e6deb291f81fddc081107e86a1b7c79dd3f9bb631649ded8c4d9955643ffec85f5f70934e87b73a47cb37ab5e74e47ee524d114b783f9ada3cf8d58908a5566279b80b9312d53e85d69d254831299c4fc3ee78ce3259fed95add947a74031bcd4e615c78c855e4a92e91b6f72edd4e862f629c9eb9d7ad0cc2e2f0bea991258524f656945c068e6fdc8ae3f52bc28f77ae37be40d3a27016b6417bfd9b0ae611d42f725499d79d"}]}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x12, 0x1, "ab0a5276787b9e7a7a06da4adde2"}, @NFTA_DATA_VALUE={0x4f, 0x1, "a6d0941779fb06ede93f2b4960715341bb227d78a7bfd5b8c45721823ff48b5428826531046282a0f21cd080a3df33f809e073c2fec014f7a2399f4cf2ddf97ceffeaae23e5021e264835f"}, @NFTA_DATA_VALUE={0x37, 0x1, "4d2c914aa7143695afc76d1211b6a6363db366450b307a91af2de1501161e577d4d1d7094136676fbc06c943a6b691a2fd89b1"}, @NFTA_DATA_VALUE={0xc8, 0x1, "d9e021bb64d0d48e9e4100425166a08e1740d154a20092bc65fc7c3f4b51644d5260f47e6a15978ec5de99dfbb549abff3976afb50841436526b8dce65b897b3be4a8f3039758132ae6e65d16665cc95c64ff525ca1dcbef3b3daafb058c30616b8e7accb6c40b6a8a07a98c0133671512058c7f4a8361e8bd779e2aed95cfac28c41e20291664229f54a550d008595b1119a1ce8b4be4456d43700123d0c00a64a172dfcd317d4e345d3110681e3750d866db70b350e00bae8471a44a34b98b0d93eb30"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x120, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400100000000000}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x86}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x44, 0x6, 0x1, 0x0, "2dd39b66b5082c883c66a476a03a4ddacb9a0756a4c5f92e6cf33b715132ea518cad439d73fceacea8fc4718ac097768c0ab1c3eb97afd25d8d1bf72f091e5bc"}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x6a8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x180}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x664, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x140, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x130, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ttl\x00'}, @NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_INFO={0xfc, 0x3, "4156546a42023ce668717817ce400d312b03f3cb2a5d4c9613c380f7013f84975c9f1eae5a394856e7175fcefa0b7b42a6d4ebe449134019b3483b33f54fa80d2b748dff4f70fbd8983652c097c457ddebe169d149fcc3e41de7390f799fc06c21632d3f8c842dac0c2d3ece591b2562202cebd1846465a5f55069876b1d3a262a726a390347ae6d87b0dff300d9bbeb02bbb149148af6255478e2bed43e3e1c49794be030e6377eac9e89d30c98ec872ac87c3456679033dcede9556ef0d74b4f99a96b2a2431362678c381656e90c58898fb806aefc9316dd32aee58f80d4b5cffb3c33ee556ee1aef2a07d8781a2133aff907418b5d0c"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3c}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x4d8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4c4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x32c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "140f3d6dafb2cb10a6249fb3ef40fbbafb2fc846e229f3a63a993209cb6c574d71b9981522d76190c4f865cf84ca449d933316564201296bac88b1b372c94d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "bed3575283c0f35504662725c503211518780ff8fe547a0295310c0fb997b64656e069423ff4f96a27d55413595e0dcd8b33928ea0350b50d0085bf271273bbe83276b5c7a160198aeb690f6b427136f89d786fe1ceaaad90f90c85b282941099095c1f4d08925c0a112ffa8625715cb11b675a833e03a9ab946c58e919d25df37869c9ad8aa89018f39110a0509943d850d132c395602ab553c8ba9cbf7edb57791f6b82a938386511a9a5fbd6d1f760a50b42e3a9017586350f760dedab762f51d51cc024660a5cc242d2c967dbbf8cfdcb27b3f00e209c1f756"}, @NFTA_DATA_VALUE={0x40, 0x1, "4179055ab735aec15ba690c2a66263f3b0f5bda5b9d951f6156dcc601acf7fa67369d6cbb83de1dd95eec3f967ad4ac845fd20cfb7175be53843140e"}, @NFTA_DATA_VALUE={0xcc, 0x1, "a9a26a7e9f33cc5884d23afc24d71c69023dbf5ee9335943273d48b706dbd79091426474f0a7be234b1d79ffb3d8a45a1a5581588df6bae62f8c93681bb30ae8ff884a7bc6d67a004a7b46960a8d283457acf6f1328bbe3691cbb5821dc663e12eb0003cb4cec958b04c00de27f072c8bc441d90ec9324234e4809fef4fd676a40cdc21dcc130aa0b09657688a35150d149ae8f7af1e8804dba64970a5c0ae8fc93e78fdc70a2f609d847e8ea6a3f0d74dfbca8d43cfc0cb68c6c9878665272a2434d71504e12288"}, @NFTA_DATA_VALUE={0x87, 0x1, "81df0d39700e77b0ebc753197359d52c4081b48b015a452b6fba380a234e80af0e4870aaed57b503dbed9e26d61127dd179a2d7e74136abcc148760caa1d8c61805446db097d6cbe14ae0be75c72c116d810d9c705bf4e0288d79f227eb10e263857689e3d0a8b32cc2eb7ebcf54be8730f7dddb49d65df41de0ac32aea98094c302e6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "dfd190f0d8830d"}, @NFTA_DATA_VALUE={0xbf, 0x1, "500dbd2abccad787bf614f5bce42d346b53ea2231ad8755c7988cc8465862a789b2c5ddb66c9dad860f920f609de9ebfa999c21d306633bc15825b3557c3a97813b70dd0bdf13ba95dc62c408baff884cc1c7ce0cbd1725a070c947953637b37836b416ccc5412129502797a3909a0bcf75f914a4a85c039e96326e16fbc44a35abd9523cf9913c186449e01da4bb70a9224da3107841be2cfe0049093d92e607ed46113ecc2316f6359cedb85affe11b73fc864a571b14ac06571"}, @NFTA_DATA_VALUE={0x5b, 0x1, "b5646f5438b9f2fe57818f0f2320dc1fe7212190271e99191c038550c695f3a4bc953732efc7a4c095e45d6ca450d1a180dd51685cf3de56640954faa733aa8e94724b070fd9a7de5ee4e1ea34e6d9acf8cce075d943d7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x49, 0x6, "60f7ea2e11a2bc56e7daade8be1f0c88682a90b7bee40b20eca5f3c022b7ece682251fa85f5c0872ae66ca00ba10779223c30ebfb6fe2fc1f6349eb2ce3ba85d607dddae3e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x35, 0x6, "6c3d192dc2adf2f9901c49ea298d8ab505973c498972f064dfc4fa9861a89795c2c7fe87516d9b88c8c9d9368556155e0d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x5e0, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xe8, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfffffc57}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x47ce}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xbdf6}]}}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffff}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4b8, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x74, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x440}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}]}}}, {0x350, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x340, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xf2, 0x3, "6ca8c336a77395dfc6fde51435a67594e2fc814d14798e643d0134e362f6307ec1f7bc1e7d455215606dad3113c75c0f56eb75cee62c41a8ab4158624446c61e7641ab45720f5dde463089f9c1352dffb272876d8d5fd43be739e7e49f795ad4452d636dd51f1cfd80adadf3efb089003485b43ebb9857c52cc23664f1c1f89fe98a184c27137d640965279ca3eef58240b0afdc15ba4360e73f9b8fe85e2059365d64b1fe4dc8efb56e1ff5a8be3a974e12521005e498997957e6d36151d0354d3d44c00e106f8d5126dc1adc82c05fd729456db5abf0a2b5f360d18570a82460cd59568b4713d6984728df8438"}, @NFTA_MATCH_INFO={0xdc, 0x3, "e91a397fc5ffec14c99bb779bf137cdeaea65df009b6ce824011d412b88cd4c13193a2557c9d01cb961e280064efc3d7d7ecadfa23d4bef04c81f1c591cfcdf6db0415dc3d4380c6409b87f5879a5eb20a3956bc8661f53277120968a9dcd19d143d52ff49b7f5db753a8e50fb1aed4036912af9c4d260d0a05f7b312a36170c8ebd4c71ae5913909cc5280bfdad479986eb0eef36930907c27bcd7926e7a244493a18fd77f7fe081aa4f10c787d3ed901aad4b8098bbbdd2bec4239061bb86c60e11b00863067010f6224ab9c8708d9be4e6b66162127c5"}, @NFTA_MATCH_INFO={0xe7, 0x3, "9fb4a206c509221231fc00993ba997d2104633571ec59d642dc2b3e0a969a06f724010723848f87e556d4f0a0e9ab25e6134c825941fe3f445b202c6544d5e16bbfa75b5f72faa6d988e8e06a0e69209fe6d59b54799ed50f95ac77714991fcfd2794c19fb3796f8738e4a146dd2e66d75ff664084f98feec5697f124e7b66bfa694043a778c7495713bbd070076106d127911aa1c19fd2ecb2b82eace714d7c6702b9c5f567faf9b5c3c7d1de3d28e7549551e1d2adde5c8a2758f9d47ef7737b2ec5c793ba308ff64d4e899943bad22d1454a6195f2e01f0c03d48a4a37effeacc38"}, @NFTA_MATCH_INFO={0x73, 0x3, "5a5786c0886769898e8c7ddf9bad332457b29963583150c6c371161498284d851986779073a3502fc7c81f6bcf6f49aed4eaf61c7c5946af260176b8050439f31620d43adfc70520718ed861edb71773fd2c89a25dad046f661960be0d76cac8a603d2fba28aa2d7c90ae443485587"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x40, 0x6, "9e553b612a80424317b24c9219b903e42f440cb3ff99b6fefa6149aaea336010543fee67bf183cb9ea0244b9966f0cf6dd2f9967bd10f15f22cbc3e0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x20, 0x6, "76184bd9ee8df5c1c4c11cdaa5610578ea4caf80054b2c3154489453"}]}], {0x14}}, 0x17bc}, 0x1, 0x0, 0x0, 0x1}, 0x10c4)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002900), r13)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x24, r15, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000002a00)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

kernel console output (not intermixed with test programs):

813] dvmrp0: left allmulticast mode
[  452.831891][T22819] xt_l2tp: invalid flags combination: 0
[  452.851917][T22819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.985704][T22828] Can't find ip_set type sh:ip,mark
[  453.000520][T22831] D speed is unknown, defaulting to 1000
[  453.271088][T22837] netlink: 'syz.2.4972': attribute type 10 has an invalid length.
[  453.300006][T22839] __nla_validate_parse: 23 callbacks suppressed
[  453.300017][T22839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4973'.
[  453.664055][T22857] netlink: 'syz.1.4979': attribute type 1 has an invalid length.
[  453.726143][T22857] 8021q: adding VLAN 0 to HW filter on device bond85
[  453.749144][T22863] bond85: (slave wlan0): Enslaving as an active interface with a down link
[  453.758994][T22857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4979'.
[  453.869001][T22883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4985'.
[  453.935739][T22881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4985'.
[  454.016086][T22892] netlink: 'syz.0.4988': attribute type 1 has an invalid length.
[  454.049333][T22892] 8021q: adding VLAN 0 to HW filter on device bond31
[  454.235436][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4995'.
[  454.301115][T22919] netlink: 'syz.0.4993': attribute type 1 has an invalid length.
[  454.596620][T22927] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4996'.
[  454.942477][T22933] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.994924][T22933] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.051290][T22933] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.106306][T22933] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.177555][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.190162][T16626] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.204475][T16626] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.220786][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5001'.
[  455.224061][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.225161][T22942] netlink: 'syz.1.5001': attribute type 2 has an invalid length.
[  455.231580][T22942] netlink: 'syz.1.5001': attribute type 1 has an invalid length.
[  455.234683][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'.
[  455.798840][T22991] netlink: 'syz.0.5013': attribute type 10 has an invalid length.
[  455.804232][T22991] hsr0: left allmulticast mode
[  455.810075][T22991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.815814][T22991] hsr0: entered promiscuous mode
[  455.819388][T22991] hsr0: entered allmulticast mode
[  455.822282][T22991] team0: Port device hsr0 added
[  455.830175][T22991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.833625][T22991] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  456.009549][T23004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5018'.
[  456.135729][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5021'.
[  456.139189][T23014] tun0: tun_chr_ioctl cmd 2148553947
[  456.250982][T23022] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  456.257756][T23022] CPU: 0 UID: 0 PID: 23022 Comm: syz.0.5024 Not tainted syzkaller #0 PREEMPT(full) 
[  456.257771][T23022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  456.257778][T23022] Call Trace:
[  456.257783][T23022]  <TASK>
[  456.257788][T23022]  dump_stack_lvl+0x189/0x250
[  456.257812][T23022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  456.257824][T23022]  ? __pfx__printk+0x10/0x10
[  456.257841][T23022]  ? kernfs_path_from_node+0x2f/0x290
[  456.257852][T23022]  ? kernfs_path_from_node+0x250/0x290
[  456.257862][T23022]  ? kernfs_path_from_node+0x2f/0x290
[  456.257874][T23022]  sysfs_warn_dup+0x8e/0xa0
[  456.257883][T23022]  sysfs_do_create_link_sd+0xc0/0x110
[  456.257893][T23022]  device_add_class_symlinks+0x1cf/0x240
[  456.257906][T23022]  device_add+0x475/0xb50
[  456.257920][T23022]  wiphy_register+0x1c81/0x2aa0
[  456.257940][T23022]  ? __pfx_wiphy_register+0x10/0x10
[  456.257950][T23022]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  456.257970][T23022]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  456.257988][T23022]  ieee80211_register_hw+0x3473/0x40d0
[  456.258004][T23022]  ? ieee80211_register_hw+0x1471/0x40d0
[  456.258017][T23022]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  456.258025][T23022]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  456.258036][T23022]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  456.258044][T23022]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  456.258058][T23022]  ? __hrtimer_setup+0x187/0x210
[  456.258073][T23022]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  456.258088][T23022]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  456.258146][T23022]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  456.258162][T23022]  ? trace_kmalloc+0x1f/0xd0
[  456.258174][T23022]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  456.258186][T23022]  ? kstrndup+0xbf/0x160
[  456.258201][T23022]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  456.258218][T23022]  ? __pfx___nla_validate_parse+0x10/0x10
[  456.258234][T23022]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  456.258253][T23022]  ? __nla_parse+0x40/0x60
[  456.258263][T23022]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  456.258298][T23022]  genl_family_rcv_msg_doit+0x215/0x300
[  456.258316][T23022]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  456.258335][T23022]  ? bpf_lsm_capable+0x9/0x20
[  456.258348][T23022]  ? security_capable+0x7e/0x2e0
[  456.258364][T23022]  genl_rcv_msg+0x60e/0x790
[  456.258379][T23022]  ? __pfx_genl_rcv_msg+0x10/0x10
[  456.258390][T23022]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  456.258410][T23022]  netlink_rcv_skb+0x208/0x470
[  456.258419][T23022]  ? __lock_acquire+0xab9/0xd20
[  456.258430][T23022]  ? __pfx_genl_rcv_msg+0x10/0x10
[  456.258443][T23022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  456.258462][T23022]  ? down_read+0x1ad/0x2e0
[  456.258474][T23022]  genl_rcv+0x28/0x40
[  456.258485][T23022]  netlink_unicast+0x82f/0x9e0
[  456.258498][T23022]  ? __pfx_netlink_unicast+0x10/0x10
[  456.258508][T23022]  ? netlink_sendmsg+0x642/0xb30
[  456.258517][T23022]  ? skb_put+0x11b/0x210
[  456.258532][T23022]  netlink_sendmsg+0x805/0xb30
[  456.258548][T23022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  456.258560][T23022]  ? aa_sock_msg_perm+0xf1/0x1d0
[  456.258575][T23022]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  456.258583][T23022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  456.258594][T23022]  __sock_sendmsg+0x21c/0x270
[  456.258609][T23022]  ____sys_sendmsg+0x505/0x830
[  456.258623][T23022]  ? __pfx_____sys_sendmsg+0x10/0x10
[  456.258639][T23022]  ? import_iovec+0x74/0xa0
[  456.258651][T23022]  ___sys_sendmsg+0x21f/0x2a0
[  456.258664][T23022]  ? __pfx____sys_sendmsg+0x10/0x10
[  456.258708][T23022]  ? __fget_files+0x2a/0x420
[  456.258724][T23022]  ? __fget_files+0x3a0/0x420
[  456.258742][T23022]  __x64_sys_sendmsg+0x19b/0x260
[  456.258757][T23022]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  456.258775][T23022]  ? rcu_is_watching+0x15/0xb0
[  456.258788][T23022]  ? do_syscall_64+0xbe/0x3b0
[  456.258803][T23022]  do_syscall_64+0xfa/0x3b0
[  456.258817][T23022]  ? lockdep_hardirqs_on+0x9c/0x150
[  456.258829][T23022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.258839][T23022]  ? exc_page_fault+0x9f/0xf0
[  456.258850][T23022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.258858][T23022] RIP: 0033:0x7ff4f938ec29
[  456.258868][T23022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.258877][T23022] RSP: 002b:00007ff4fa2f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  456.258887][T23022] RAX: ffffffffffffffda RBX: 00007ff4f95d5fa0 RCX: 00007ff4f938ec29
[  456.258893][T23022] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  456.258899][T23022] RBP: 00007ff4f9411e41 R08: 0000000000000000 R09: 0000000000000000
[  456.258905][T23022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.258911][T23022] R13: 00007ff4f95d6038 R14: 00007ff4f95d5fa0 R15: 00007ffc7fbfe4d8
[  456.258928][T23022]  </TASK>
[  456.531877][T23024] nbd: couldn't find a device at index 0
[  456.854798][T23062] mac80211_hwsim hwsim49 wlan1: left allmulticast mode
[  457.346898][T23101] netlink: 'syz.1.5045': attribute type 5 has an invalid length.
[  457.438639][T23102] netlink: 'syz.1.5045': attribute type 13 has an invalid length.
[  457.527608][T23102] tipc: Resetting bearer <eth:syzkaller0>
[  458.027888][T23124] netlink: 'syz.1.5052': attribute type 1 has an invalid length.
[  458.050397][T23124] bond86: (slave vcan1): The slave device specified does not support setting the MAC address
[  458.054089][T23124] bond86: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  458.059325][T23124] bond86: (slave vcan1): making interface the new active one
[  458.062128][T23124] bond86: (slave vcan1): Enslaving as an active interface with an up link
[  458.068148][T23125] netlink: 'syz.0.5050': attribute type 1 has an invalid length.
[  458.075052][T23124] bond86: (slave vcan2): The slave device specified does not support setting the MAC address
[  458.080725][T23124] bond86: (slave vcan2): Enslaving as a backup interface with an up link
[  458.114445][T23135] netlink: 'syz.1.5055': attribute type 2 has an invalid length.
[  458.117812][T23135] netlink: 'syz.1.5055': attribute type 8 has an invalid length.
[  458.321453][T23155] __nla_validate_parse: 12 callbacks suppressed
[  458.321469][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'.
[  458.329446][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5061'.
[  458.374798][T23159] netlink: 508 bytes leftover after parsing attributes in process `syz.1.5063'.
[  458.415231][T23161] sctp: [Deprecated]: syz.2.5064 (pid 23161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  458.415231][T23161] Use struct sctp_sack_info instead
[  458.537367][T23175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5070'.
[  458.650217][T23187] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5073'.
[  458.655208][T23187] netlink: 'syz.2.5073': attribute type 13 has an invalid length.
[  458.724459][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'.
[  458.962032][T23221] D speed is unknown, defaulting to 1000
[  459.038656][T23231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5086'.
[  459.159493][T23239] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5090'.
[  459.286318][T23250] netlink: 8576 bytes leftover after parsing attributes in process `syz.2.5093'.
[  459.322762][T23235] D speed is unknown, defaulting to 1000
[  459.335518][T23252] lo: entered promiscuous mode
[  459.338620][T23252] tunl0: entered promiscuous mode
[  459.340829][T23252] gre0: entered promiscuous mode
[  459.342461][T23252] gretap0: entered promiscuous mode
[  459.344140][T23252] erspan0: entered promiscuous mode
[  459.345847][T23252] ip_vti0: entered promiscuous mode
[  459.351696][T23252] ip6_vti0: entered promiscuous mode
[  459.354007][T23252] sit0: entered promiscuous mode
[  459.355950][T23252] ip6tnl0: entered promiscuous mode
[  459.357960][T23252] ip6gre0: entered promiscuous mode
[  459.359937][T23252] syz_tun: entered promiscuous mode
[  459.361881][T23252] ip6gretap0: entered promiscuous mode
[  459.363790][T23252] nlmon0: entered promiscuous mode
[  459.365507][T23252] 0X: entered promiscuous mode
[  459.368130][T23252] wg0: entered promiscuous mode
[  459.370241][T23252] wg1: entered promiscuous mode
[  459.373183][T23252] wg2: entered promiscuous mode
[  459.374870][T23252] veth0_to_bridge: entered promiscuous mode
[  459.376886][T23252] bridge_slave_0: entered promiscuous mode
[  459.378780][T23252] veth1_to_bridge: entered promiscuous mode
[  459.380769][T23252] bridge_slave_1: entered promiscuous mode
[  459.382694][T23252] : entered promiscuous mode
[  459.384239][T23252] bond_slave_0: entered promiscuous mode
[  459.386052][T23252] veth1_to_bond: entered promiscuous mode
[  459.388708][T23252] bond_slave_1: entered promiscuous mode
[  459.390483][T23252] veth1_to_team: entered promiscuous mode
[  459.392350][T23252] team_slave_1: entered promiscuous mode
[  459.394208][T23252] veth0_to_batadv: entered promiscuous mode
[  459.396014][T23252] batadv_slave_0: entered promiscuous mode
[  459.398478][T23252] veth1_to_batadv: entered promiscuous mode
[  459.400408][T23252] batadv_slave_1: entered promiscuous mode
[  459.402678][T23252] xfrm0: entered promiscuous mode
[  459.404868][T23252] veth0_to_hsr: entered promiscuous mode
[  459.407505][T23252] ..0: entered promiscuous mode
[  459.409486][T23252] veth1_virt_wifi: entered promiscuous mode
[  459.411729][T23252] veth0_virt_wifi: entered promiscuous mode
[  459.414294][T23252] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  459.417674][T23252] vlan0: entered promiscuous mode
[  459.420024][T23252] vlan1: entered promiscuous mode
[  459.422235][T23252] macvlan0: entered promiscuous mode
[  459.424513][T23252] macvlan1: entered promiscuous mode
[  459.427079][T23252] ipvlan0: entered promiscuous mode
[  459.429305][T23252] ipvlan1: entered promiscuous mode
[  459.432325][T23252] geneve0: entered promiscuous mode
[  459.439982][T23252] geneve1: entered promiscuous mode
[  459.446255][T23252] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  459.451522][T23252] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  459.454306][T23252] sit1: entered promiscuous mode
[  459.456386][T23252] bridge1: entered promiscuous mode
[  459.458980][T23252] vti0: entered promiscuous mode
[  459.461032][T23252] bridge2: entered promiscuous mode
[  459.463104][T23252] bond1: entered promiscuous mode
[  459.465107][T23252] veth2: entered promiscuous mode
[  459.467955][T23252] veth3: entered promiscuous mode
[  459.469998][T23252] hsr1: entered promiscuous mode
[  459.472022][T23252] ip6gre1: entered promiscuous mode
[  459.474289][T23252] bridge3: entered promiscuous mode
[  459.476427][T23252] bridge4: entered promiscuous mode
[  459.478728][T23252] veth4: entered promiscuous mode
[  459.480774][T23252] veth5: entered promiscuous mode
[  459.482821][T23252] geneve2: entered promiscuous mode
[  459.484941][T23252] bridge5: entered promiscuous mode
[  459.488407][T23252] ip6tnl1: entered promiscuous mode
[  459.490537][T23252] mac80211_hwsim hwsim8 wlan2: entered promiscuous mode
[  459.493285][T23252] bridge6: entered promiscuous mode
[  459.495156][T23252] erspan1: entered promiscuous mode
[  459.497891][T23252] gtp0: entered promiscuous mode
[  459.499977][T23252] bridge7: entered promiscuous mode
[  459.501744][T23252] sit2: entered promiscuous mode
[  459.503667][T23252] bridge8: entered promiscuous mode
[  459.505307][T23252] ip6erspan0: entered promiscuous mode
[  459.507686][T23252] veth0: entered promiscuous mode
[  459.509367][T23252] veth1: entered promiscuous mode
[  459.511078][T23252] bond2: entered promiscuous mode
[  459.512698][T23252] macsec1: entered promiscuous mode
[  459.514392][T23252] bond3: entered promiscuous mode
[  459.516031][T23252] bond4: entered promiscuous mode
[  459.517687][T23252] bond5: entered promiscuous mode
[  459.519795][T23252] bond6: entered promiscuous mode
[  459.521754][T23252] bond7: entered promiscuous mode
[  459.523390][T23252] bond8: entered promiscuous mode
[  459.525047][T23252] bond9: entered promiscuous mode
[  459.527258][T23252] bond10: entered promiscuous mode
[  459.529104][T23252] bond11: entered promiscuous mode
[  459.530929][T23252] bond12: entered promiscuous mode
[  459.532563][T23252] bond13: entered promiscuous mode
[  459.534233][T23252] bond14: entered promiscuous mode
[  459.536052][T23252] bond15: entered promiscuous mode
[  459.538267][T23252] bond16: entered promiscuous mode
[  459.540018][T23252] bond17: entered promiscuous mode
[  459.541755][T23252] bond18: entered promiscuous mode
[  459.543356][T23252] bond19: entered promiscuous mode
[  459.545218][T23252] bond20: entered promiscuous mode
[  459.547517][T23252] bond21: entered promiscuous mode
[  459.549354][T23252] bond22: entered promiscuous mode
[  459.551286][T23252] bond23: entered promiscuous mode
[  459.553126][T23252] bond24: entered promiscuous mode
[  459.555124][T23252] bond25: entered promiscuous mode
[  459.557374][T23252] bond26: entered promiscuous mode
[  459.559445][T23252] bond27: entered promiscuous mode
[  459.561310][T23252] bond28: entered promiscuous mode
[  459.563010][T23252] bond29: entered promiscuous mode
[  459.564679][T23252] bond30: entered promiscuous mode
[  459.566385][T23252] bond31: entered promiscuous mode
[  459.568262][T23252] bond32: entered promiscuous mode
[  459.570216][T23252] bond33: entered promiscuous mode
[  459.572112][T23252] bond34: entered promiscuous mode
[  459.573769][T23252] bond35: entered promiscuous mode
[  459.575813][T23252] macvlan2: entered promiscuous mode
[  459.578093][T23252] ip6tnl2: entered promiscuous mode
[  459.580293][T23252] gretap1: entered promiscuous mode
[  459.582380][T23252] sit3: entered promiscuous mode
[  459.584208][T23252] bridge9: entered promiscuous mode
[  459.585858][T23252] bridge10: entered promiscuous mode
[  459.588193][T23252] veth6: entered promiscuous mode
[  459.590303][T23252] veth7: entered promiscuous mode
[  459.592455][T23252] bond36: entered promiscuous mode
[  459.594585][T23252] vxlan0: entered promiscuous mode
[  459.596736][T23252] bond37: entered promiscuous mode
[  459.598808][T23252] bridge11: entered promiscuous mode
[  459.601019][T23252] mac80211_hwsim hwsim15 wlan3: entered promiscuous mode
[  459.603800][T23252] ip6gre2: entered promiscuous mode
[  459.605973][T23252] bond38: entered promiscuous mode
[  459.609047][T23252] bond39: entered promiscuous mode
[  459.611122][T23252] bond0: entered promiscuous mode
[  459.613236][T23252] mac80211_hwsim hwsim16 wlan4: entered promiscuous mode
[  459.616073][T23252] bridge12: entered promiscuous mode
[  459.618691][T23252] gre1: entered promiscuous mode
[  459.620761][T23252] bridge13: entered promiscuous mode
[  459.622982][T23252] @: entered promiscuous mode
[  459.624967][T23252] sit4: entered promiscuous mode
[  459.627334][T23252] sit5: entered promiscuous mode
[  459.629322][T23252] gtp1: entered promiscuous mode
[  459.631642][T23252] bond40: entered promiscuous mode
[  459.633772][T23252] veth8: entered promiscuous mode
[  459.635840][T23252] veth9: entered promiscuous mode
[  459.638290][T23252] sit6: entered promiscuous mode
[  459.640351][T23252] ip6gretap1: entered promiscuous mode
[  459.642593][T23252] pimreg3: entered promiscuous mode
[  459.644703][T23252] ipip0: entered promiscuous mode
[  459.647086][T23252] sit7: entered promiscuous mode
[  459.649185][T23252] bond41: entered promiscuous mode
[  459.651229][T23252] bridge14: entered promiscuous mode
[  459.653695][T23252] bond42: entered promiscuous mode
[  459.655690][T23252] bond43: entered promiscuous mode
[  459.658141][T23252] bridge15: entered promiscuous mode
[  459.660679][T23252] bridge16: entered promiscuous mode
[  459.662847][T23252] ip6gretap2: entered promiscuous mode
[  459.665066][T23252] veth10: entered promiscuous mode
[  459.667454][T23252] veth11: entered promiscuous mode
[  459.669656][T23252] bond44: entered promiscuous mode
[  459.673527][T23252] bond45: entered promiscuous mode
[  459.678889][T23252] bond46: entered promiscuous mode
[  459.680979][T23252] gtp2: entered promiscuous mode
[  459.683000][T23252] ip6tnl3: entered promiscuous mode
[  459.685064][T23252] batadv0.0: entered promiscuous mode
[  459.687716][T23252] vxlan1: entered promiscuous mode
[  459.693726][T23252] vlan3: entered promiscuous mode
[  459.698404][T23252] bond47: entered promiscuous mode
[  459.700718][T23252] gretap2: entered promiscuous mode
[  459.703074][T23252] bridge0: entered promiscuous mode
[  459.705689][T23252] veth12: entered promiscuous mode
[  459.708160][T23252] veth14: entered promiscuous mode
[  459.710671][T23252] veth15: entered promiscuous mode
[  459.712994][T23252] geneve3: entered promiscuous mode
[  459.715158][T23252] gretap3: entered promiscuous mode
[  459.718371][T23252] gretap4: entered promiscuous mode
[  459.721039][T23252] veth16: entered promiscuous mode
[  459.723226][T23252] veth17: entered promiscuous mode
[  459.725444][T23252] ip6tnl4: entered promiscuous mode
[  459.728348][T23252] bond48: entered promiscuous mode
[  459.730584][T23252] pim6reg: entered promiscuous mode
[  459.732977][T23252] sit8: entered promiscuous mode
[  459.735146][T23252] bond49: entered promiscuous mode
[  459.737656][T23252] veth18: entered promiscuous mode
[  459.739870][T23252] veth19: entered promiscuous mode
[  459.742098][T23252] bond50: entered promiscuous mode
[  459.744309][T23252] batman_adv: batadv0: Interface deactivated: gretap5
[  459.747982][T23252] gretap5: entered promiscuous mode
[  459.755522][T23252] ip6gre3: entered promiscuous mode
[  459.759927][T23252] gre2: entered promiscuous mode
[  459.765400][T23252] bond51: entered promiscuous mode
[  459.770720][T23252] veth20: entered promiscuous mode
[  459.775807][T23252] macvlan3: entered promiscuous mode
[  459.779118][T23252] bridge17: entered promiscuous mode
[  459.784469][T23252] bond52: entered promiscuous mode
[  459.787474][T23252] veth22: entered promiscuous mode
[  459.791333][T23252] bond53: entered promiscuous mode
[  459.793060][T23252] ip6gre4: entered promiscuous mode
[  459.794774][T23252] veth24: entered promiscuous mode
[  459.796448][T23252] veth25: entered promiscuous mode
[  459.801671][T23252] bond54: entered promiscuous mode
[  459.803279][T23252] gretap6: entered promiscuous mode
[  459.811004][T23252] macsec0: left allmulticast mode
[  459.812716][T23252] netpci0: entered promiscuous mode
[  459.814831][T23252] bond55: left allmulticast mode
[  459.817911][T23252] veth26: entered promiscuous mode
[  459.819527][T23252] veth27: entered promiscuous mode
[  459.821700][T23252] bond56: left allmulticast mode
[  459.823615][T23252] bond57: left allmulticast mode
[  459.830930][T23252] gre3: entered promiscuous mode
[  459.832731][T23252] bridge18: entered promiscuous mode
[  459.834765][T23252] bridge19: entered promiscuous mode
[  459.837331][T23252] ip6tnl5: entered promiscuous mode
[  459.839723][T23252] bond58: entered promiscuous mode
[  459.842702][T23252] veth28: entered promiscuous mode
[  459.844757][T23252] veth29: entered promiscuous mode
[  459.848463][T23252] gre4: entered promiscuous mode
[  459.851074][T23252] bond59: entered promiscuous mode
[  459.853050][T23252] vti1: entered promiscuous mode
[  459.854962][T23252] veth30: entered promiscuous mode
[  459.857206][T23252] veth31: entered promiscuous mode
[  459.863133][T23252] gtp3: entered promiscuous mode
[  459.865047][T23252] netdevsim netdevsim2 eth0: entered promiscuous mode
[  459.867872][T23252] netdevsim netdevsim2 eth1: entered promiscuous mode
[  459.870205][T23252] netdevsim netdevsim2 eth2: entered promiscuous mode
[  459.872399][T23252] netdevsim netdevsim2 eth3: entered promiscuous mode
[  459.875294][T23252] bridge20: entered promiscuous mode
[  459.880546][T23252] bridge21: entered promiscuous mode
[  459.886357][T23252] ip6gretap3: entered promiscuous mode
[  459.898818][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.901596][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.904219][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  459.907808][T23255] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  459.938635][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  460.282673][T23285] xt_l2tp: missing protocol rule (udp|l2tpip)
[  460.301654][T23284] xt_l2tp: missing protocol rule (udp|l2tpip)
[  460.497993][T23293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5102'.
[  460.673726][T23309] openvswitch: netlink: Message has -2 unknown bytes.
[  460.812415][T23320] vlan5: entered promiscuous mode
[  460.835688][T23316] pim6reg: left allmulticast mode
[  461.152993][T23335] netlink: 'syz.2.5116': attribute type 17 has an invalid length.
[  461.157317][T23335] lo: left promiscuous mode
[  461.169322][T23335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  461.624727][T23362] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  461.632990][T23362] CPU: 1 UID: 0 PID: 23362 Comm: syz.0.5123 Not tainted syzkaller #0 PREEMPT(full) 
[  461.633004][T23362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  461.633015][T23362] Call Trace:
[  461.633022][T23362]  <TASK>
[  461.633032][T23362]  dump_stack_lvl+0x189/0x250
[  461.633055][T23362]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.633066][T23362]  ? __pfx__printk+0x10/0x10
[  461.633082][T23362]  ? kernfs_path_from_node+0x2f/0x290
[  461.633094][T23362]  ? kernfs_path_from_node+0x250/0x290
[  461.633103][T23362]  ? kernfs_path_from_node+0x2f/0x290
[  461.633117][T23362]  sysfs_warn_dup+0x8e/0xa0
[  461.633132][T23362]  sysfs_do_create_link_sd+0xc0/0x110
[  461.633150][T23362]  device_add_class_symlinks+0x1cf/0x240
[  461.633165][T23362]  device_add+0x475/0xb50
[  461.633179][T23362]  wiphy_register+0x1c81/0x2aa0
[  461.633200][T23362]  ? __pfx_wiphy_register+0x10/0x10
[  461.633210][T23362]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  461.633229][T23362]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  461.633244][T23362]  ieee80211_register_hw+0x3473/0x40d0
[  461.633261][T23362]  ? ieee80211_register_hw+0x1471/0x40d0
[  461.633276][T23362]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  461.633288][T23362]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  461.633308][T23362]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  461.633322][T23362]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  461.633334][T23362]  ? __hrtimer_setup+0x187/0x210
[  461.633346][T23362]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  461.633363][T23362]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  461.633397][T23362]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  461.633410][T23362]  ? trace_kmalloc+0x1f/0xd0
[  461.633422][T23362]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  461.633433][T23362]  ? kstrndup+0xbf/0x160
[  461.633447][T23362]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  461.633464][T23362]  ? __pfx___nla_validate_parse+0x10/0x10
[  461.633481][T23362]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  461.633499][T23362]  ? __nla_parse+0x40/0x60
[  461.633509][T23362]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  461.633528][T23362]  genl_family_rcv_msg_doit+0x215/0x300
[  461.633545][T23362]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  461.633574][T23362]  ? bpf_lsm_capable+0x9/0x20
[  461.633587][T23362]  ? security_capable+0x7e/0x2e0
[  461.633603][T23362]  genl_rcv_msg+0x60e/0x790
[  461.633619][T23362]  ? __pfx_genl_rcv_msg+0x10/0x10
[  461.633632][T23362]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  461.633651][T23362]  netlink_rcv_skb+0x208/0x470
[  461.633660][T23362]  ? __lock_acquire+0xab9/0xd20
[  461.633672][T23362]  ? __pfx_genl_rcv_msg+0x10/0x10
[  461.633685][T23362]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  461.633704][T23362]  ? down_read+0x1ad/0x2e0
[  461.633716][T23362]  genl_rcv+0x28/0x40
[  461.633734][T23362]  netlink_unicast+0x82f/0x9e0
[  461.633757][T23362]  ? __pfx_netlink_unicast+0x10/0x10
[  461.633794][T23362]  ? netlink_sendmsg+0x642/0xb30
[  461.633812][T23362]  ? skb_put+0x11b/0x210
[  461.633836][T23362]  netlink_sendmsg+0x805/0xb30
[  461.633852][T23362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  461.633863][T23362]  ? aa_sock_msg_perm+0xf1/0x1d0
[  461.633878][T23362]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  461.633886][T23362]  ? __pfx_netlink_sendmsg+0x10/0x10
[  461.633897][T23362]  __sock_sendmsg+0x21c/0x270
[  461.633913][T23362]  ____sys_sendmsg+0x505/0x830
[  461.633927][T23362]  ? __pfx_____sys_sendmsg+0x10/0x10
[  461.633943][T23362]  ? import_iovec+0x74/0xa0
[  461.633956][T23362]  ___sys_sendmsg+0x21f/0x2a0
[  461.633968][T23362]  ? __pfx____sys_sendmsg+0x10/0x10
[  461.633997][T23362]  ? __fget_files+0x2a/0x420
[  461.634010][T23362]  ? __fget_files+0x3a0/0x420
[  461.634027][T23362]  __x64_sys_sendmsg+0x19b/0x260
[  461.634039][T23362]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  461.634056][T23362]  ? rcu_is_watching+0x15/0xb0
[  461.634067][T23362]  ? do_syscall_64+0xbe/0x3b0
[  461.634079][T23362]  do_syscall_64+0xfa/0x3b0
[  461.634088][T23362]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.634097][T23362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.634106][T23362]  ? exc_page_fault+0x9f/0xf0
[  461.634116][T23362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.634124][T23362] RIP: 0033:0x7ff4f938ec29
[  461.634133][T23362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.634141][T23362] RSP: 002b:00007ff4fa2f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  461.634151][T23362] RAX: ffffffffffffffda RBX: 00007ff4f95d5fa0 RCX: 00007ff4f938ec29
[  461.634158][T23362] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  461.634165][T23362] RBP: 00007ff4f9411e41 R08: 0000000000000000 R09: 0000000000000000
[  461.634171][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.634177][T23362] R13: 00007ff4f95d6038 R14: 00007ff4f95d5fa0 R15: 00007ffc7fbfe4d8
[  461.634194][T23362]  </TASK>
[  461.824474][T23363] D speed is unknown, defaulting to 1000
[  462.328817][T23394] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  462.333420][T23394] CPU: 1 UID: 0 PID: 23394 Comm: syz.0.5132 Not tainted syzkaller #0 PREEMPT(full) 
[  462.333445][T23394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.333457][T23394] Call Trace:
[  462.333466][T23394]  <TASK>
[  462.333477][T23394]  dump_stack_lvl+0x189/0x250
[  462.333506][T23394]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.333527][T23394]  ? __pfx__printk+0x10/0x10
[  462.333555][T23394]  ? kernfs_path_from_node+0x2f/0x290
[  462.333575][T23394]  ? kernfs_path_from_node+0x250/0x290
[  462.333592][T23394]  ? kernfs_path_from_node+0x2f/0x290
[  462.333614][T23394]  sysfs_warn_dup+0x8e/0xa0
[  462.333632][T23394]  sysfs_do_create_link_sd+0xc0/0x110
[  462.333659][T23394]  device_add_class_symlinks+0x1cf/0x240
[  462.333684][T23394]  device_add+0x475/0xb50
[  462.333705][T23394]  wiphy_register+0x1c81/0x2aa0
[  462.333767][T23394]  ? __pfx_wiphy_register+0x10/0x10
[  462.333788][T23394]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  462.333819][T23394]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  462.333846][T23394]  ieee80211_register_hw+0x3473/0x40d0
[  462.333874][T23394]  ? ieee80211_register_hw+0x1471/0x40d0
[  462.333900][T23394]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  462.333914][T23394]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  462.333937][T23394]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  462.333953][T23394]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  462.333975][T23394]  ? __hrtimer_setup+0x187/0x210
[  462.333997][T23394]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  462.334024][T23394]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  462.334073][T23394]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  462.334093][T23394]  ? trace_kmalloc+0x1f/0xd0
[  462.334110][T23394]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  462.334130][T23394]  ? kstrndup+0xbf/0x160
[  462.334153][T23394]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  462.334181][T23394]  ? __pfx___nla_validate_parse+0x10/0x10
[  462.334209][T23394]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  462.334245][T23394]  ? __nla_parse+0x40/0x60
[  462.334265][T23394]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  462.334297][T23394]  genl_family_rcv_msg_doit+0x215/0x300
[  462.334328][T23394]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  462.334364][T23394]  ? bpf_lsm_capable+0x9/0x20
[  462.334383][T23394]  ? security_capable+0x7e/0x2e0
[  462.334434][T23394]  genl_rcv_msg+0x60e/0x790
[  462.334463][T23394]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.334484][T23394]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  462.334518][T23394]  netlink_rcv_skb+0x208/0x470
[  462.334534][T23394]  ? __lock_acquire+0xab9/0xd20
[  462.334555][T23394]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.334578][T23394]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  462.334612][T23394]  ? down_read+0x1ad/0x2e0
[  462.334634][T23394]  genl_rcv+0x28/0x40
[  462.334659][T23394]  netlink_unicast+0x82f/0x9e0
[  462.334685][T23394]  ? __pfx_netlink_unicast+0x10/0x10
[  462.334703][T23394]  ? netlink_sendmsg+0x642/0xb30
[  462.334719][T23394]  ? skb_put+0x11b/0x210
[  462.334773][T23394]  netlink_sendmsg+0x805/0xb30
[  462.334799][T23394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.334818][T23394]  ? aa_sock_msg_perm+0xf1/0x1d0
[  462.334843][T23394]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  462.334858][T23394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.334875][T23394]  __sock_sendmsg+0x21c/0x270
[  462.334898][T23394]  ____sys_sendmsg+0x505/0x830
[  462.334926][T23394]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.334952][T23394]  ? import_iovec+0x74/0xa0
[  462.334974][T23394]  ___sys_sendmsg+0x21f/0x2a0
[  462.334995][T23394]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.335045][T23394]  ? __fget_files+0x2a/0x420
[  462.335067][T23394]  ? __fget_files+0x3a0/0x420
[  462.335096][T23394]  __x64_sys_sendmsg+0x19b/0x260
[  462.335118][T23394]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  462.335143][T23394]  ? rcu_is_watching+0x15/0xb0
[  462.335162][T23394]  ? do_syscall_64+0xbe/0x3b0
[  462.335186][T23394]  do_syscall_64+0xfa/0x3b0
[  462.335201][T23394]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.335218][T23394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.335235][T23394]  ? exc_page_fault+0x9f/0xf0
[  462.335255][T23394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.335272][T23394] RIP: 0033:0x7ff4f938ec29
[  462.335288][T23394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.335311][T23394] RSP: 002b:00007ff4fa2f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.335329][T23394] RAX: ffffffffffffffda RBX: 00007ff4f95d5fa0 RCX: 00007ff4f938ec29
[  462.335342][T23394] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  462.335353][T23394] RBP: 00007ff4f9411e41 R08: 0000000000000000 R09: 0000000000000000
[  462.335364][T23394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.335374][T23394] R13: 00007ff4f95d6038 R14: 00007ff4f95d5fa0 R15: 00007ffc7fbfe4d8
[  462.335400][T23394]  </TASK>
[  462.592542][T23396] IPVS: stopping backup sync thread 12859 ...
[  462.818287][T23416] netlink: 'syz.1.5139': attribute type 4 has an invalid length.
[  462.967718][T23433] bond86: option mode: unable to set because the bond device has slaves
[  462.998756][T23435] netlink: 'syz.0.5146': attribute type 5 has an invalid length.
[  463.040618][T23440] macvlan0: entered promiscuous mode
[  463.042596][T23440] macvlan0: entered allmulticast mode
[  463.181521][T23449] netlink: 'syz.0.5150': attribute type 1 has an invalid length.
[  463.245488][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.252013][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  463.296307][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  463.299735][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  463.369594][T23468] __nla_validate_parse: 9 callbacks suppressed
[  463.369616][T23468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5156'.
[  463.381245][T23468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5156'.
[  463.384831][T23468] openvswitch: netlink: Flow key attr not present in new flow.
[  463.861931][T23493] netlink: 'syz.1.5158': attribute type 1 has an invalid length.
[  463.865005][T23493] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5158'.
[  463.960434][T23501] vlan0: entered promiscuous mode
[  463.989465][T23501] IPVS: set_ctl: invalid protocol: 12 172.20.20.42:20001
[  464.019810][T23508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5161'.
[  464.719232][T23567] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5177'.
[  464.814342][T23568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5179'.
[  464.826059][T23568] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5179'.
[  465.196310][T23574] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004
[  465.204125][T23574] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5181'.
[  465.431413][T23583] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  465.566855][T23587] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5186'.
[  465.569688][T23587] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5186'.
[  465.585166][T23588] netlink: 'syz.1.5186': attribute type 11 has an invalid length.
[  465.674644][T23591] syzkaller1: entered promiscuous mode
[  465.677145][T23591] syzkaller1: entered allmulticast mode
[  465.964233][T23603] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  465.973398][T23603] CPU: 0 UID: 0 PID: 23603 Comm: syz.1.5190 Not tainted syzkaller #0 PREEMPT(full) 
[  465.973425][T23603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  465.973437][T23603] Call Trace:
[  465.973452][T23603]  <TASK>
[  465.973462][T23603]  dump_stack_lvl+0x189/0x250
[  465.973479][T23603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  465.973489][T23603]  ? __pfx__printk+0x10/0x10
[  465.973531][T23603]  ? kernfs_path_from_node+0x2f/0x290
[  465.973542][T23603]  ? kernfs_path_from_node+0x250/0x290
[  465.973551][T23603]  ? kernfs_path_from_node+0x2f/0x290
[  465.973564][T23603]  sysfs_warn_dup+0x8e/0xa0
[  465.973578][T23603]  sysfs_do_create_link_sd+0xc0/0x110
[  465.973595][T23603]  device_add_class_symlinks+0x1cf/0x240
[  465.973617][T23603]  device_add+0x475/0xb50
[  465.973635][T23603]  wiphy_register+0x1c81/0x2aa0
[  465.973671][T23603]  ? __pfx_wiphy_register+0x10/0x10
[  465.973691][T23603]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  465.973720][T23603]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  465.973744][T23603]  ieee80211_register_hw+0x3473/0x40d0
[  465.973770][T23603]  ? ieee80211_register_hw+0x1471/0x40d0
[  465.973795][T23603]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  465.973811][T23603]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  465.973828][T23603]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  465.973842][T23603]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  465.973862][T23603]  ? __hrtimer_setup+0x187/0x210
[  465.973881][T23603]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  465.973906][T23603]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  465.973957][T23603]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  465.973976][T23603]  ? trace_kmalloc+0x1f/0xd0
[  465.973990][T23603]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  465.974005][T23603]  ? kstrndup+0xbf/0x160
[  465.974023][T23603]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  465.974047][T23603]  ? __pfx___nla_validate_parse+0x10/0x10
[  465.974073][T23603]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  465.974104][T23603]  ? __nla_parse+0x40/0x60
[  465.974122][T23603]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  465.974149][T23603]  genl_family_rcv_msg_doit+0x215/0x300
[  465.974178][T23603]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  465.974208][T23603]  ? bpf_lsm_capable+0x9/0x20
[  465.974227][T23603]  ? security_capable+0x7e/0x2e0
[  465.974255][T23603]  genl_rcv_msg+0x60e/0x790
[  465.974279][T23603]  ? __pfx_genl_rcv_msg+0x10/0x10
[  465.974297][T23603]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  465.974325][T23603]  netlink_rcv_skb+0x208/0x470
[  465.974339][T23603]  ? __lock_acquire+0xab9/0xd20
[  465.974357][T23603]  ? __pfx_genl_rcv_msg+0x10/0x10
[  465.974377][T23603]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  465.974408][T23603]  ? down_read+0x1ad/0x2e0
[  465.974430][T23603]  genl_rcv+0x28/0x40
[  465.974458][T23603]  netlink_unicast+0x82f/0x9e0
[  465.974482][T23603]  ? __pfx_netlink_unicast+0x10/0x10
[  465.974533][T23603]  ? netlink_sendmsg+0x642/0xb30
[  465.974551][T23603]  ? skb_put+0x11b/0x210
[  465.974570][T23603]  netlink_sendmsg+0x805/0xb30
[  465.974599][T23603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.974618][T23603]  ? aa_sock_msg_perm+0xf1/0x1d0
[  465.974640][T23603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  465.974655][T23603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.974672][T23603]  __sock_sendmsg+0x21c/0x270
[  465.974698][T23603]  ____sys_sendmsg+0x505/0x830
[  465.974721][T23603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  465.974749][T23603]  ? import_iovec+0x74/0xa0
[  465.974768][T23603]  ___sys_sendmsg+0x21f/0x2a0
[  465.974791][T23603]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.974840][T23603]  ? __fget_files+0x2a/0x420
[  465.974861][T23603]  ? __fget_files+0x3a0/0x420
[  465.974893][T23603]  __x64_sys_sendmsg+0x19b/0x260
[  465.974916][T23603]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  465.974947][T23603]  ? do_syscall_64+0xbe/0x3b0
[  465.974968][T23603]  do_syscall_64+0xfa/0x3b0
[  465.974985][T23603]  ? lockdep_hardirqs_on+0x9c/0x150
[  465.975001][T23603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.975015][T23603]  ? exc_page_fault+0x9f/0xf0
[  465.975034][T23603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.975050][T23603] RIP: 0033:0x7fa665f8ec29
[  465.975065][T23603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.975078][T23603] RSP: 002b:00007fa666e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.975095][T23603] RAX: ffffffffffffffda RBX: 00007fa6661d5fa0 RCX: 00007fa665f8ec29
[  465.975104][T23603] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  465.975113][T23603] RBP: 00007fa666011e41 R08: 0000000000000000 R09: 0000000000000000
[  465.975121][T23603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  465.975129][T23603] R13: 00007fa6661d6038 R14: 00007fa6661d5fa0 R15: 00007fffe27b6b78
[  465.975155][T23603]  </TASK>
[  466.241669][T23612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.318076][T23624] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  466.322122][T23624] CPU: 0 UID: 0 PID: 23624 Comm: syz.1.5198 Not tainted syzkaller #0 PREEMPT(full) 
[  466.322135][T23624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  466.322142][T23624] Call Trace:
[  466.322147][T23624]  <TASK>
[  466.322152][T23624]  dump_stack_lvl+0x189/0x250
[  466.322169][T23624]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.322179][T23624]  ? __pfx__printk+0x10/0x10
[  466.322194][T23624]  ? kernfs_path_from_node+0x2f/0x290
[  466.322204][T23624]  ? kernfs_path_from_node+0x250/0x290
[  466.322213][T23624]  ? kernfs_path_from_node+0x2f/0x290
[  466.322224][T23624]  sysfs_warn_dup+0x8e/0xa0
[  466.322233][T23624]  sysfs_do_create_link_sd+0xc0/0x110
[  466.322243][T23624]  device_add_class_symlinks+0x1cf/0x240
[  466.322256][T23624]  device_add+0x475/0xb50
[  466.322268][T23624]  wiphy_register+0x1c81/0x2aa0
[  466.322287][T23624]  ? __pfx_wiphy_register+0x10/0x10
[  466.322297][T23624]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  466.322315][T23624]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  466.322331][T23624]  ieee80211_register_hw+0x3473/0x40d0
[  466.322347][T23624]  ? ieee80211_register_hw+0x1471/0x40d0
[  466.322359][T23624]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  466.322366][T23624]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  466.322378][T23624]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  466.322386][T23624]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  466.322398][T23624]  ? __hrtimer_setup+0x187/0x210
[  466.322410][T23624]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  466.322433][T23624]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  466.322461][T23624]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  466.322495][T23624]  ? trace_kmalloc+0x1f/0xd0
[  466.322508][T23624]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  466.322519][T23624]  ? kstrndup+0xbf/0x160
[  466.322534][T23624]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  466.322550][T23624]  ? __pfx___nla_validate_parse+0x10/0x10
[  466.322567][T23624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  466.322586][T23624]  ? __nla_parse+0x40/0x60
[  466.322596][T23624]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  466.322613][T23624]  genl_family_rcv_msg_doit+0x215/0x300
[  466.322630][T23624]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  466.322649][T23624]  ? bpf_lsm_capable+0x9/0x20
[  466.322660][T23624]  ? security_capable+0x7e/0x2e0
[  466.322676][T23624]  genl_rcv_msg+0x60e/0x790
[  466.322691][T23624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  466.322702][T23624]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  466.322721][T23624]  netlink_rcv_skb+0x208/0x470
[  466.322730][T23624]  ? __lock_acquire+0xab9/0xd20
[  466.322741][T23624]  ? __pfx_genl_rcv_msg+0x10/0x10
[  466.322754][T23624]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  466.322773][T23624]  ? down_read+0x1ad/0x2e0
[  466.322785][T23624]  genl_rcv+0x28/0x40
[  466.322796][T23624]  netlink_unicast+0x82f/0x9e0
[  466.322809][T23624]  ? __pfx_netlink_unicast+0x10/0x10
[  466.322822][T23624]  ? netlink_sendmsg+0x642/0xb30
[  466.322836][T23624]  ? skb_put+0x11b/0x210
[  466.322856][T23624]  netlink_sendmsg+0x805/0xb30
[  466.322873][T23624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.322885][T23624]  ? aa_sock_msg_perm+0xf1/0x1d0
[  466.322900][T23624]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.322910][T23624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.322921][T23624]  __sock_sendmsg+0x21c/0x270
[  466.322945][T23624]  ____sys_sendmsg+0x505/0x830
[  466.322968][T23624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.322993][T23624]  ? import_iovec+0x74/0xa0
[  466.323015][T23624]  ___sys_sendmsg+0x21f/0x2a0
[  466.323028][T23624]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.323058][T23624]  ? __fget_files+0x2a/0x420
[  466.323070][T23624]  ? __fget_files+0x3a0/0x420
[  466.323087][T23624]  __x64_sys_sendmsg+0x19b/0x260
[  466.323099][T23624]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.323115][T23624]  ? rcu_is_watching+0x15/0xb0
[  466.323152][T23624]  ? do_syscall_64+0xbe/0x3b0
[  466.323175][T23624]  do_syscall_64+0xfa/0x3b0
[  466.323193][T23624]  ? lockdep_hardirqs_on+0x9c/0x150
[  466.323205][T23624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.323214][T23624]  ? exc_page_fault+0x9f/0xf0
[  466.323224][T23624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.323232][T23624] RIP: 0033:0x7fa665f8ec29
[  466.323242][T23624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.323250][T23624] RSP: 002b:00007fa666e01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.323260][T23624] RAX: ffffffffffffffda RBX: 00007fa6661d5fa0 RCX: 00007fa665f8ec29
[  466.323267][T23624] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  466.323274][T23624] RBP: 00007fa666011e41 R08: 0000000000000000 R09: 0000000000000000
[  466.323280][T23624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  466.323285][T23624] R13: 00007fa6661d6038 R14: 00007fa6661d5fa0 R15: 00007fffe27b6b78
[  466.323300][T23624]  </TASK>
[  466.563346][T23639] vlan0: entered promiscuous mode
[  466.565182][T23639] geneve1: entered promiscuous mode
[  466.567515][T23639] vlan0: entered allmulticast mode
[  466.569166][T23639] geneve1: entered allmulticast mode
[  466.575208][T23634] D speed is unknown, defaulting to 1000
[  466.606101][T23643] netlink: 'syz.1.5204': attribute type 74 has an invalid length.
[  466.665552][T23652] bridge34: the hash_elasticity option has been deprecated and is always 16
[  466.670580][T23652] bridge34: entered allmulticast mode
[  466.870659][T23649] bond87: entered promiscuous mode
[  466.872485][T23649] bond87: entered allmulticast mode
[  466.874767][T23649] 8021q: adding VLAN 0 to HW filter on device bond87
[  467.037043][T23649] bond87 (unregistering): Released all slaves
[  467.117408][T23663] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  467.215008][T23649] bond87: entered promiscuous mode
[  467.216809][T23649] bond87: entered allmulticast mode
[  467.218660][T23649] 8021q: adding VLAN 0 to HW filter on device bond87
[  467.346183][T23649] bond87 (unregistering): Released all slaves
[  467.524349][T23649] bond87: entered promiscuous mode
[  467.526184][T23649] bond87: entered allmulticast mode
[  467.528536][T23649] 8021q: adding VLAN 0 to HW filter on device bond87
[  467.761022][T23649] bond87 (unregistering): Released all slaves
[  467.928633][T23679] macvlan0: left allmulticast mode
[  467.930319][T23679] netlink: 'syz.0.5211': attribute type 1 has an invalid length.
[  467.963955][T23691] nbd: couldn't find device at index 536870912
[  468.156140][T23714] netlink: 'syz.0.5221': attribute type 6 has an invalid length.
[  468.400751][T23742] netlink: 'syz.0.5230': attribute type 1 has an invalid length.
[  468.403136][T23742] __nla_validate_parse: 43 callbacks suppressed
[  468.403148][T23742] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5230'.
[  468.478291][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'.
[  468.559120][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'.
[  468.563956][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'.
[  468.616068][T23758] netlink: 'syz.0.5237': attribute type 9 has an invalid length.
[  468.621445][T23758] netlink: 'syz.0.5237': attribute type 7 has an invalid length.
[  468.624590][T23758] netlink: 'syz.0.5237': attribute type 8 has an invalid length.
[  468.741450][T23772] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  468.743707][T23772] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  469.108155][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5246'.
[  469.236091][T23805] netlink: 656 bytes leftover after parsing attributes in process `syz.1.5252'.
[  469.240837][T23813] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5254'.
[  469.287129][T23818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5255'.
[  469.377393][T23819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5255'.
[  469.415400][T23838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5261'.
[  469.510860][T23851] netlink: 'syz.2.5266': attribute type 2 has an invalid length.
[  469.518264][T23851] : entered promiscuous mode
[  469.577611][T23861] syzkaller1: left promiscuous mode
[  469.583683][T23861] syzkaller1: left allmulticast mode
[  469.703169][T23873] netlink: 'syz.0.5273': attribute type 23 has an invalid length.
[  469.777581][T23889] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  469.793668][T23889] netlink: 'syz.2.5277': attribute type 1 has an invalid length.
[  469.878226][T23899] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  469.880439][T23899] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  470.251963][T23934] Unsupported ieee802154 address type: 0
[  470.834545][T23953] netlink: 'syz.2.5297': attribute type 1 has an invalid length.
[  471.952952][T23978] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.013188][T23982] D speed is unknown, defaulting to 1000
[  472.174304][T23994] D speed is unknown, defaulting to 1000
[  472.237709][T23993] block nbd6: shutting down sockets
[  472.288072][T23999] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  473.113836][T24082] validate_nla: 3 callbacks suppressed
[  473.113847][T24082] netlink: 'syz.0.5335': attribute type 1 has an invalid length.
[  473.129928][T24082] netlink: 'syz.0.5335': attribute type 6 has an invalid length.
[  473.132714][T24082] netlink: 'syz.0.5335': attribute type 3 has an invalid length.
[  473.298738][T24092] netlink: 'syz.0.5338': attribute type 13 has an invalid length.
[  473.410012][T24107] __nla_validate_parse: 29 callbacks suppressed
[  473.410024][T24107] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5341'.
[  473.414936][T24107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5341'.
[  473.553161][T24114] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  473.565068][T24111] D speed is unknown, defaulting to 1000
[  473.668984][T24128] netlink: 'syz.2.5347': attribute type 1 has an invalid length.
[  473.671407][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'.
[  473.853300][T24138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5351'.
[  474.124053][T24153] D speed is unknown, defaulting to 1000
[  474.298628][T24168] netlink: 'syz.2.5358': attribute type 1 has an invalid length.
[  474.338455][T24168] bond60: entered promiscuous mode
[  474.340137][T24168] bond60: entered allmulticast mode
[  474.342153][T24168] 8021q: adding VLAN 0 to HW filter on device bond60
[  474.381334][T24168] bond61 (unregistering): Released all slaves
[  474.394074][T24174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5360'.
[  474.397402][T24174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5360'.
[  474.534095][T24185] pim6reg1: entered promiscuous mode
[  474.536417][T24185] pim6reg1: entered allmulticast mode
[  474.680322][T24201] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  474.745127][T24204] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  474.748690][T24204] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  474.874725][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5369'.
[  475.233713][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'.
[  475.269966][T24266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5383'.
[  475.884541][T24283] x_tables: ip_tables: udp match: only valid for protocol 17
[  475.982282][T24288] delete_channel: no stack
[  476.139130][T24306] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  476.222629][T24319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5398'.
[  476.294645][T24324] batadv0: entered promiscuous mode
[  476.296486][T24324] batadv0: entered allmulticast mode
[  476.587980][T24325] D speed is unknown, defaulting to 1000
[  476.827984][T24350] rdma_rxe: rxe_newlink: failed to add vxcan1
[  476.828667][T24351] rdma_rxe: rxe_newlink: failed to add vxcan1
[  476.982727][ T5879] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.988675][ T5879] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.992148][ T5879] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.996650][ T5879] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.030581][T24366] netlink: 'syz.1.5413': attribute type 4 has an invalid length.
[  477.269321][T24384] netlink: 'syz.0.5420': attribute type 12 has an invalid length.
[  477.445582][T24403] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  477.527752][T24412] netlink: 'syz.0.5426': attribute type 2 has an invalid length.
[  477.934198][T24448] nbd: must specify at least one socket
[  477.970031][T24458] sctp: [Deprecated]: syz.0.5441 (pid 24458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  477.970031][T24458] Use struct sctp_sack_info instead
[  478.400583][T24481] D speed is unknown, defaulting to 1000
[  478.645679][T24498] __nla_validate_parse: 19 callbacks suppressed
[  478.645692][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5453'.
[  478.749156][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5456'.
[  478.752251][T24506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5456'.
[  478.755220][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5456'.
[  478.758378][T24506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5456'.
[  478.761326][T24506] netlink: 'syz.1.5456': attribute type 6 has an invalid length.
[  478.871854][T24512] nbd: illegal input index -1
[  478.873445][T24511] sctp: [Deprecated]: syz.0.5458 (pid 24511) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.873445][T24511] Use struct sctp_sack_info instead
[  478.888147][T24511] netlink: 'syz.0.5458': attribute type 1 has an invalid length.
[  478.925995][T24511] 8021q: adding VLAN 0 to HW filter on device bond33
[  479.012480][T24528] netlink: 'syz.0.5465': attribute type 39 has an invalid length.
[  479.062786][T24533] lo: Caught tx_queue_len zero misconfig
[  479.222993][T24553] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  479.326400][T24557] D speed is unknown, defaulting to 1000
[  479.916048][T24582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  479.921192][T24582] tipc: Resetting bearer <eth:syzkaller0>
[  480.036009][T24586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5483'.
[  480.041045][T24586] openvswitch: netlink: Flow key attr not present in new flow.
[  480.248404][T24592] D speed is unknown, defaulting to 1000
[  480.445915][T24599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5487'.
[  480.453101][T24599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5487'.
[  480.456316][T24599] netlink: 'syz.1.5487': attribute type 7 has an invalid length.
[  480.459059][T24599] netlink: 'syz.1.5487': attribute type 8 has an invalid length.
[  480.461680][T24599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'.
[  480.504497][T24600] netlink: ct family unspecified
[  480.507529][T24600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.612302][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'.
[  481.621145][T24643] netlink: 'syz.1.5500': attribute type 1 has an invalid length.
[  481.783553][T24646] tunl0: Caught tx_queue_len zero misconfig
[  481.941284][T24653] vlan2: entered allmulticast mode
[  482.082035][T24658] netlink: 'syz.2.5506': attribute type 1 has an invalid length.
[  482.297700][T24673] netlink: 'syz.0.5511': attribute type 21 has an invalid length.
[  482.484212][T24696] netlink: 'syz.0.5518': attribute type 1 has an invalid length.
[  482.507548][T24696] bond34: entered promiscuous mode
[  482.509967][T24696] 8021q: adding VLAN 0 to HW filter on device bond34
[  482.574015][T24698] tunl0: left promiscuous mode
[  482.576195][T24698] gre0: left promiscuous mode
[  482.579282][T24698] ip_vti0: left promiscuous mode
[  482.581286][T24698] ip6_vti0: left promiscuous mode
[  482.583402][T24698] sit0: left promiscuous mode
[  482.585061][T24698] ip6tnl0: left promiscuous mode
[  482.587204][T24698] ip6gre0: left promiscuous mode
[  482.589026][T24698] syz_tun: left promiscuous mode
[  482.590796][T24698] ip6gretap0: left promiscuous mode
[  482.592879][T24698] nlmon0: left promiscuous mode
[  482.594907][T24698] 0X: left promiscuous mode
[  482.597124][T24698] wg0: left promiscuous mode
[  482.599114][T24698] wg1: left promiscuous mode
[  482.600766][T24698] wg2: left promiscuous mode
[  482.602268][T24698] veth0_to_bridge: left promiscuous mode
[  482.604069][T24698] bridge_slave_0: left promiscuous mode
[  482.605873][T24698] veth1_to_bridge: left promiscuous mode
[  482.607957][T24698] bridge_slave_1: left promiscuous mode
[  482.609847][T24698] : left promiscuous mode
[  482.611274][T24698] bond_slave_0: left promiscuous mode
[  482.613049][T24698] veth1_to_bond: left promiscuous mode
[  482.614911][T24698] bond_slave_1: left promiscuous mode
[  482.617691][T24698] veth1_to_team: left promiscuous mode
[  482.619576][T24698] team_slave_1: left promiscuous mode
[  482.621768][T24698] veth0_to_batadv: left promiscuous mode
[  482.623987][T24698] batadv_slave_0: left promiscuous mode
[  482.626102][T24698] veth1_to_batadv: left promiscuous mode
[  482.628879][T24698] batadv_slave_1: left promiscuous mode
[  482.630852][T24698] xfrm0: left promiscuous mode
[  482.632501][T24698] veth0_to_hsr: left promiscuous mode
[  482.634318][T24698] ..0: left promiscuous mode
[  482.635863][T24698] veth1_virt_wifi: left promiscuous mode
[  482.637996][T24698] veth0_virt_wifi: left promiscuous mode
[  482.639800][T24698] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  482.642222][T24698] vlan0: left promiscuous mode
[  482.643960][T24698] vlan1: left promiscuous mode
[  482.645611][T24698] macvlan0: left promiscuous mode
[  482.647531][T24698] macvlan1: left promiscuous mode
[  482.649181][T24698] ipvlan0: left promiscuous mode
[  482.650766][T24698] ipvlan1: left promiscuous mode
[  482.652462][T24698] geneve0: left promiscuous mode
[  482.654110][T24698] geneve1: left promiscuous mode
[  482.655750][T24698] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  482.658621][T24698] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  482.661023][T24698] sit1: left promiscuous mode
[  482.662879][T24698] bridge1: left promiscuous mode
[  482.664606][T24698] vti0: left promiscuous mode
[  482.666306][T24698] bridge2: left promiscuous mode
[  482.668170][T24698] bond1: left promiscuous mode
[  482.669907][T24698] veth2: left promiscuous mode
[  482.671722][T24698] veth3: left promiscuous mode
[  482.673531][T24698] hsr1: left promiscuous mode
[  482.675206][T24698] ip6gre1: left promiscuous mode
[  482.677534][T24698] bridge3: left promiscuous mode
[  482.679249][T24698] bridge4: left promiscuous mode
[  482.681145][T24698] veth4: left promiscuous mode
[  482.682886][T24698] veth5: left promiscuous mode
[  482.684723][T24698] geneve2: left promiscuous mode
[  482.686731][T24698] bridge5: left promiscuous mode
[  482.688525][T24698] ip6tnl1: left promiscuous mode
[  482.691061][T24698] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  482.693764][T24698] bridge6: left promiscuous mode
[  482.695570][T24698] erspan1: left promiscuous mode
[  482.697436][T24698] gtp0: left promiscuous mode
[  482.699011][T24698] bridge7: left promiscuous mode
[  482.700825][T24698] sit2: left promiscuous mode
[  482.702845][T24698] bridge8: left promiscuous mode
[  482.704798][T24698] ip6erspan0: left promiscuous mode
[  482.706828][T24698] veth0: left promiscuous mode
[  482.708434][T24698] veth1: left promiscuous mode
[  482.710105][T24698] bond2: left promiscuous mode
[  482.711813][T24698] macsec1: left promiscuous mode
[  482.713495][T24698] bond3: left promiscuous mode
[  482.715041][T24698] bond4: left promiscuous mode
[  482.717062][T24698] bond5: left promiscuous mode
[  482.718632][T24698] bond6: left promiscuous mode
[  482.720178][T24698] bond7: left promiscuous mode
[  482.721866][T24698] bond8: left promiscuous mode
[  482.723602][T24698] bond9: left promiscuous mode
[  482.725199][T24698] bond10: left promiscuous mode
[  482.727248][T24698] bond11: left promiscuous mode
[  482.728847][T24698] bond12: left promiscuous mode
[  482.730389][T24698] bond13: left promiscuous mode
[  482.732178][T24698] bond14: left promiscuous mode
[  482.733786][T24698] bond15: left promiscuous mode
[  482.735380][T24698] bond16: left promiscuous mode
[  482.737210][T24698] bond17: left promiscuous mode
[  482.738834][T24698] bond18: left promiscuous mode
[  482.740382][T24698] bond19: left promiscuous mode
[  482.742224][T24698] bond20: left promiscuous mode
[  482.743740][T24698] bond21: left promiscuous mode
[  482.745349][T24698] bond22: left promiscuous mode
[  482.747282][T24698] bond23: left promiscuous mode
[  482.748829][T24698] bond24: left promiscuous mode
[  482.750370][T24698] bond25: left promiscuous mode
[  482.752146][T24698] bond26: left promiscuous mode
[  482.753729][T24698] bond27: left promiscuous mode
[  482.755276][T24698] bond28: left promiscuous mode
[  482.757125][T24698] bond29: left promiscuous mode
[  482.758672][T24698] bond30: left promiscuous mode
[  482.760188][T24698] bond31: left promiscuous mode
[  482.761939][T24698] bond32: left promiscuous mode
[  482.763595][T24698] bond33: left promiscuous mode
[  482.765171][T24698] bond34: left promiscuous mode
[  482.767117][T24698] bond35: left promiscuous mode
[  482.768868][T24698] macvlan2: left promiscuous mode
[  482.770702][T24698] ip6tnl2: left promiscuous mode
[  482.772382][T24698] gretap1: left promiscuous mode
[  482.773974][T24698] sit3: left promiscuous mode
[  482.775535][T24698] bridge9: left promiscuous mode
[  482.777351][T24698] bridge10: left promiscuous mode
[  482.778959][T24698] veth6: left promiscuous mode
[  482.780514][T24698] veth7: left promiscuous mode
[  482.782130][T24698] bond36: left promiscuous mode
[  482.783727][T24698] vxlan0: left promiscuous mode
[  482.785279][T24698] bond37: left promiscuous mode
[  482.787507][T24698] bridge11: left promiscuous mode
[  482.789111][T24698] mac80211_hwsim hwsim15 wlan3: left promiscuous mode
[  482.791275][T24698] ip6gre2: left promiscuous mode
[  482.792895][T24698] bond38: left promiscuous mode
[  482.794490][T24698] bond39: left promiscuous mode
[  482.800722][T24698] bond0: left promiscuous mode
[  482.803642][T24698] mac80211_hwsim hwsim16 wlan4: left promiscuous mode
[  482.805844][T24698] bridge12: left promiscuous mode
[  482.807819][T24698] gre1: left promiscuous mode
[  482.809360][T24698] bridge13: left promiscuous mode
[  482.810999][T24698] @: left promiscuous mode
[  482.812556][T24698] sit4: left promiscuous mode
[  482.814094][T24698] sit5: left promiscuous mode
[  482.815616][T24698] gtp1: left promiscuous mode
[  482.817372][T24698] bond40: left promiscuous mode
[  482.818953][T24698] veth8: left promiscuous mode
[  482.820510][T24698] veth9: left promiscuous mode
[  482.822105][T24698] sit6: left promiscuous mode
[  482.823660][T24698] ip6gretap1: left promiscuous mode
[  482.825336][T24698] pimreg3: left promiscuous mode
[  482.827253][T24698] ipip0: left promiscuous mode
[  482.828900][T24698] sit7: left promiscuous mode
[  482.830456][T24698] bond41: left promiscuous mode
[  482.832308][T24698] bridge14: left promiscuous mode
[  482.834374][T24698] bond42: left promiscuous mode
[  482.836281][T24698] bond43: left promiscuous mode
[  482.837968][T24698] bridge15: left promiscuous mode
[  482.839569][T24698] bridge16: left promiscuous mode
[  482.841205][T24698] ip6gretap2: left promiscuous mode
[  482.842769][T24698] veth10: left promiscuous mode
[  482.844333][T24698] veth11: left promiscuous mode
[  482.846249][T24698] bond44: left promiscuous mode
[  482.848136][T24698] bond45: left promiscuous mode
[  482.849898][T24698] bond46: left promiscuous mode
[  482.851459][T24698] gtp2: left promiscuous mode
[  482.853235][T24698] ip6tnl3: left promiscuous mode
[  482.855158][T24698] batadv0.0: left promiscuous mode
[  482.857230][T24698] vxlan1: left promiscuous mode
[  482.858800][T24698] vlan3: left promiscuous mode
[  482.860284][T24698] gretap0: left promiscuous mode
[  482.862232][T24698] bond47: left promiscuous mode
[  482.864189][T24698] gretap2: left promiscuous mode
[  482.865936][T24698] bridge0: left promiscuous mode
[  482.868045][T24698] veth12: left promiscuous mode
[  482.869841][T24698] veth14: left promiscuous mode
[  482.871424][T24698] veth15: left promiscuous mode
[  482.873050][T24698] geneve3: left promiscuous mode
[  482.874720][T24698] gretap3: left promiscuous mode
[  482.876372][T24698] gretap4: left promiscuous mode
[  482.878219][T24698] veth16: left promiscuous mode
[  482.879807][T24698] veth17: left promiscuous mode
[  482.881390][T24698] ip6tnl4: left promiscuous mode
[  482.883022][T24698] bond48: left promiscuous mode
[  482.884626][T24698] sit8: left promiscuous mode
[  482.886245][T24698] bond49: left promiscuous mode
[  482.887930][T24698] erspan0: left promiscuous mode
[  482.889651][T24698] veth18: left promiscuous mode
[  482.891349][T24698] veth19: left promiscuous mode
[  482.893353][T24698] bond50: left promiscuous mode
[  482.895350][T24698] gretap5: left promiscuous mode
[  482.898135][T24698] ip6gre3: left promiscuous mode
[  482.900065][T24698] gre2: left promiscuous mode
[  482.901929][T24698] bond51: left promiscuous mode
[  482.903880][T24698] veth20: left promiscuous mode
[  482.905588][T24698] veth21: left promiscuous mode
[  482.907457][T24698] macvlan3: left promiscuous mode
[  482.909086][T24698] bridge17: left promiscuous mode
[  482.910947][T24698] bond52: left promiscuous mode
[  482.912538][T24698] veth22: left promiscuous mode
[  482.914325][T24698] veth23: left promiscuous mode
[  482.916058][T24698] bond53: left promiscuous mode
[  482.917839][T24698] ip6gre4: left promiscuous mode
[  482.919595][T24698] veth24: left promiscuous mode
[  482.921309][T24698] veth25: left promiscuous mode
[  482.923034][T24698] bond54: left promiscuous mode
[  482.924899][T24698] gretap6: left promiscuous mode
[  482.926810][T24698] macsec0: left promiscuous mode
[  482.928480][T24698] netpci0: left promiscuous mode
[  482.930123][T24698] bond55: left promiscuous mode
[  482.931710][T24698] veth26: left promiscuous mode
[  482.933299][T24698] veth27: left promiscuous mode
[  482.934914][T24698] bond56: left promiscuous mode
[  482.936931][T24698] bond57: left promiscuous mode
[  482.938563][T24698] gre3: left promiscuous mode
[  482.940079][T24698] bridge18: left promiscuous mode
[  482.941738][T24698] bridge19: left promiscuous mode
[  482.943361][T24698] ip6tnl5: left promiscuous mode
[  482.944976][T24698] bond58: left promiscuous mode
[  482.946797][T24698] veth28: left promiscuous mode
[  482.948421][T24698] veth29: left promiscuous mode
[  482.950034][T24698] gre4: left promiscuous mode
[  482.951656][T24698] bond59: left promiscuous mode
[  482.953260][T24698] vti1: left promiscuous mode
[  482.954887][T24698] veth30: left promiscuous mode
[  482.956703][T24698] veth31: left promiscuous mode
[  482.958294][T24698] gtp3: left promiscuous mode
[  482.959836][T24698] netdevsim netdevsim2 eth0: left promiscuous mode
[  482.961917][T24698] netdevsim netdevsim2 eth1: left promiscuous mode
[  482.963991][T24698] netdevsim netdevsim2 eth2: left promiscuous mode
[  482.966206][T24698] netdevsim netdevsim2 eth3: left promiscuous mode
[  482.968540][T24698] bridge20: left promiscuous mode
[  482.970211][T24698] bridge21: left promiscuous mode
[  482.971846][T24698] ip6gretap3: left promiscuous mode
[  482.974684][T24698] bond60: left promiscuous mode
[  482.976286][T24698] bond60: left allmulticast mode
[  483.283143][T24754] bond0: Unable to set down delay as MII monitoring is disabled
[  483.293206][T24757] dvmrp12: entered allmulticast mode
[  483.345187][T24762] vlan2: entered allmulticast mode
[  483.348810][T24762] batadv0: entered allmulticast mode
[  483.415447][T24769] netlink: 'syz.2.5537': attribute type 1 has an invalid length.
[  483.754140][T24793] __nla_validate_parse: 10 callbacks suppressed
[  483.754157][T24793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'.
[  483.763093][T24793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5542'.
[  483.765890][T24793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5542'.
[  483.803995][T24795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5543'.
[  484.047808][T24737] dvmrp12: left allmulticast mode
[  484.107423][T24806] validate_nla: 1 callbacks suppressed
[  484.107441][T24806] netlink: 'syz.2.5547': attribute type 1 has an invalid length.
[  484.149190][T24806] bond62: (slave vxcan1): The slave device specified does not support setting the MAC address
[  484.153869][T24806] bond62: (slave vxcan1): Error -95 calling set_mac_address
[  484.195462][T24811] gretap8: entered promiscuous mode
[  484.201314][T24811] bond62: (slave gretap8): making interface the new active one
[  484.204841][T24811] bond62: (slave gretap8): Enslaving as an active interface with an up link
[  484.216459][T24811] macvlan4: entered promiscuous mode
[  484.220744][T24811] macvlan4: entered allmulticast mode
[  484.223560][T24811] bond62: entered promiscuous mode
[  484.227625][T24811] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  484.233374][T24811] bond62: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap8
[  484.239284][T24811] bond62: left promiscuous mode
[  484.269497][T24809] D speed is unknown, defaulting to 1000
[  484.318058][T24812] D speed is unknown, defaulting to 1000
[  484.475676][T24821] ip6tnl5: entered promiscuous mode
[  484.478962][T24821] ip6tnl5: entered allmulticast mode
[  484.482649][T24821] team0: Device ip6tnl5 is of different type
[  484.812750][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5559'.
[  484.933917][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'.
[  484.961668][T24856] netlink: 'syz.0.5561': attribute type 9 has an invalid length.
[  485.644051][T24883] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5569'.
[  485.731761][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5572'.
[  485.735597][T24897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5572'.
[  485.782619][T24903] netlink: 'syz.0.5574': attribute type 1 has an invalid length.
[  485.800585][T24903] bond35: entered promiscuous mode
[  485.802353][T24903] bond35: entered allmulticast mode
[  485.804535][T24903] 8021q: adding VLAN 0 to HW filter on device bond35
[  485.846345][T24903] 8021q: adding VLAN 0 to HW filter on device bond36
[  485.852215][T24903] bond36: entered promiscuous mode
[  485.854343][T24903] bond36: entered allmulticast mode
[  485.858673][T24903] bond35: (slave bond36): Enslaving as a backup interface with a down link
[  485.863751][T24903] netlink: 'syz.0.5574': attribute type 1 has an invalid length.
[  485.921282][T24915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5576'.
[  485.986672][T24923] batadv_slave_0: entered promiscuous mode
[  485.993601][T24923] batadv_slave_0: left promiscuous mode
[  486.152933][T24943] D speed is unknown, defaulting to 1000
[  487.048119][T24959] D speed is unknown, defaulting to 1000
[  487.220658][T24979] 8021q: adding VLAN 0 to HW filter on device bond87
[  487.276455][T24986] tipc: Failed to remove unknown binding: 66,1,1/2648178629:2242771628/2242771630
[  487.292943][T24986] tipc: Failed to remove unknown binding: 66,1,1/2648178629:2242771628/2242771630
[  487.337744][T24990] netlink: 'syz.0.5599': attribute type 13 has an invalid length.
[  487.340749][T24990] netlink: 'syz.0.5599': attribute type 13 has an invalid length.
[  487.810628][T25036] ip6tnl0: Caught tx_queue_len zero misconfig
[  487.930800][T25054] netlink: 'syz.1.5619': attribute type 9 has an invalid length.
[  487.981048][T25058] netlink: 'syz.2.5621': attribute type 21 has an invalid length.
[  488.354382][T25092] team0: Caught tx_queue_len zero misconfig
[  488.499168][T25107] netlink: 'syz.1.5638': attribute type 1 has an invalid length.
[  488.690916][T25122] bridge0: left allmulticast mode
[  488.743203][T25128] netlink: 'syz.0.5647': attribute type 11 has an invalid length.
[  488.745664][T25128] netlink: 'syz.0.5647': attribute type 4 has an invalid length.
[  488.758925][T25128] __nla_validate_parse: 18 callbacks suppressed
[  488.758936][T25128] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5647'.
[  488.777320][T25128] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5647'.
[  488.780288][T25128] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5647'.
[  489.523708][T25166] block nbd6: Unsupported socket: shutdown callout must be supported.
[  489.610163][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'.
[  489.613439][T25175] veth13: left allmulticast mode
[  489.615388][T25175] veth13: left promiscuous mode
[  489.618727][T25175] bridge0: port 1(veth13) entered disabled state
[  489.677279][T25179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5664'.
[  489.683240][T25179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5664'.
[  489.778326][T25194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5668'.
[  489.837514][T25198] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5666'.
[  489.861130][T25202] ip6_vti0: Caught tx_queue_len zero misconfig
[  489.928673][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5673'.
[  489.931626][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5673'.
[  490.130644][T25226] netlink: 'syz.0.5678': attribute type 15 has an invalid length.
[  490.134444][T25226] netlink: 'syz.0.5678': attribute type 15 has an invalid length.
[  490.234996][T25233] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  490.239474][T25233] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  490.532974][T25253] vxcan4: entered allmulticast mode
[  491.047151][T25280] D speed is unknown, defaulting to 1000
[  491.128803][T25284] 8021q: adding VLAN 0 to HW filter on device bond63
[  491.851474][T25321] D speed is unknown, defaulting to 1000
[  492.595089][ T5879] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  492.599012][ T5879] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  492.616988][   T95] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  492.789647][   T47] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  492.813607][T25366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  492.817271][T25366] syzkaller0: entered promiscuous mode
[  492.818966][T25366] syzkaller0: entered allmulticast mode
[  492.832080][T25366] tipc: Resetting bearer <eth:syzkaller0>
[  492.987240][   T47] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  493.043146][ T5879] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  493.102496][T25388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  493.261542][T25408] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  493.263929][T25408] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  493.354402][T25413] sctp: [Deprecated]: syz.2.5724 (pid 25413) Use of int in maxseg socket option.
[  493.354402][T25413] Use struct sctp_assoc_value instead
[  493.758456][T25436] netlink: 'syz.2.5729': attribute type 1 has an invalid length.
[  493.761316][T25436] netlink: 'syz.2.5729': attribute type 3 has an invalid length.
[  493.779017][T25436] pim6reg1: entered promiscuous mode
[  493.784297][T25436] pim6reg1: entered allmulticast mode
[  493.806731][   T47] tipc: Node number set to 2372738280
[  493.818590][T25440] __nla_validate_parse: 14 callbacks suppressed
[  493.818602][T25440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  493.829553][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5731'.
[  493.905904][T25445] D speed is unknown, defaulting to 1000
[  493.936112][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5732'.
[  494.023016][T25445] netlink: 'syz.2.5733': attribute type 2 has an invalid length.
[  494.029217][T25445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5733'.
[  494.172531][T25460] netlink: 'syz.1.5735': attribute type 1 has an invalid length.
[  494.175384][T25460] netlink: 'syz.1.5735': attribute type 2 has an invalid length.
[  494.750818][T25481] D speed is unknown, defaulting to 1000
[  494.810099][T25485] D speed is unknown, defaulting to 1000
[  495.207907][T25523] 8021q: adding VLAN 0 to HW filter on device bond45
[  495.255674][T25523] macvlan4: entered promiscuous mode
[  495.260281][T25523] macvlan4: entered allmulticast mode
[  495.377570][T25540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5758'.
[  495.381204][T25540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5758'.
[  495.613977][T25551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5762'.
[  495.725245][T25560] tun0: tun_chr_ioctl cmd 1074812118
[  495.819402][T25582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  495.822485][T25581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  495.890561][T25589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5770'.
[  496.054702][T25597] netlink: 424 bytes leftover after parsing attributes in process `syz.2.5772'.
[  496.061088][T25597] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5772'.
[  496.118564][T25599] pim6reg: entered allmulticast mode
[  496.233121][T25608] netlink: 'syz.2.5776': attribute type 1 has an invalid length.
[  496.255422][T25608] 8021q: adding VLAN 0 to HW filter on device bond64
[  497.046721][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  497.050177][T25651] netlink: 'syz.0.5787': attribute type 19 has an invalid length.
[  497.053119][T25651] netlink: 'syz.0.5787': attribute type 19 has an invalid length.
[  497.300893][T25676] netlink: 'syz.2.5793': attribute type 1 has an invalid length.
[  497.489045][T25682]  (unregistering): Released all slaves
[  498.685092][T25726] vlan5: entered allmulticast mode
[  498.923465][T25738] __nla_validate_parse: 15 callbacks suppressed
[  498.923485][T25738] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5809'.
[  498.939548][T25738] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  499.122257][T25745] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5813'.
[  499.125863][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5813'.
[  499.136803][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5813'.
[  499.157960][T25748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5815'.
[  499.309712][T25757] pim6reg99999999: entered allmulticast mode
[  499.340255][T25759] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  499.360893][T25761] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  499.430298][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5822'.
[  499.519229][T25764] bond0: (slave gretap0): Error: Device type is different from other slaves
[  499.529071][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.531608][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.581647][T25772] 8021q: adding VLAN 0 to HW filter on device bond65
[  499.800920][T25793] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5831'.
[  499.804997][T25795] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5830'.
[  499.809329][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'.
[  499.971736][T25808] netlink: 528 bytes leftover after parsing attributes in process `syz.0.5835'.
[  500.665221][T25856] IPVS: length: 30 != 24
[  500.668949][T25858] netlink: 'syz.0.5851': attribute type 10 has an invalid length.
[  500.780281][T25866] tipc: Resetting bearer <eth:syzkaller0>
[  500.823696][T25866] netlink: 'syz.1.5855': attribute type 1 has an invalid length.
[  500.852957][T25866] 8021q: adding VLAN 0 to HW filter on device bond89
[  500.990325][T25877] D speed is unknown, defaulting to 1000
[  501.370811][T25908] netlink: 'syz.1.5867': attribute type 13 has an invalid length.
[  501.374800][T25908] netlink: 'syz.1.5867': attribute type 17 has an invalid length.
[  501.384998][T25910] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  501.399853][T25908] ip6gretap0: left promiscuous mode
[  501.411667][T25908] 8021q: adding VLAN 0 to HW filter on device team0
[  501.414900][T25908] tipc: Resetting bearer <eth:team0>
[  501.418018][T25908] tipc: Resetting bearer <eth:team0>
[  501.424249][T25908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.441206][   T13] bond0: (slave 30): link status definitely down, disabling slave
[  501.447545][   T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  501.501639][T25918] netlink: 'syz.1.5870': attribute type 18 has an invalid length.
[  501.653025][T25932] netlink: 'syz.1.5875': attribute type 10 has an invalid length.
[  501.784693][T25937] D speed is unknown, defaulting to 1000
[  502.106333][T25951] IPVS: Error connecting to the multicast addr
[  502.912876][T25985] tipc: Resetting bearer <eth:team0>
[  503.063892][T26009] netlink: 'syz.2.5896': attribute type 1 has an invalid length.
[  503.067920][T26009] netlink: 'syz.2.5896': attribute type 2 has an invalid length.
[  503.070952][T26009] netlink: 'syz.2.5896': attribute type 1 has an invalid length.
[  503.609502][T26049] D speed is unknown, defaulting to 1000
[  504.195078][T26065] __nla_validate_parse: 163 callbacks suppressed
[  504.195125][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5909'.
[  504.218958][T26065] netlink: 'syz.1.5909': attribute type 1 has an invalid length.
[  504.231597][T26065] bond86: (slave vcan3): The slave device specified does not support setting the MAC address
[  504.240394][T26065] bond86: (slave vcan3): Enslaving as a backup interface with an up link
[  504.299256][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5909'.
[  504.310973][T26065] bond86: (slave vcan4): The slave device specified does not support setting the MAC address
[  504.315922][T26065] bond86: (slave vcan4): Enslaving as a backup interface with an up link
[  504.320995][T26065] 8021q: adding VLAN 0 to HW filter on device bond86
[  504.449640][T26088] openvswitch: netlink: Flow key attr not present in new flow.
[  504.493757][T26090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5918'.
[  504.594824][T26103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5921'.
[  504.599306][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5922'.
[  504.601324][T26103] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5921'.
[  504.613735][T26104] netlink: 'syz.2.5922': attribute type 3 has an invalid length.
[  504.616207][T26104] netlink: 'syz.2.5922': attribute type 1 has an invalid length.
[  504.620733][T26104] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5922'.
[  504.627708][T26107] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  504.762731][T26123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5931'.
[  504.881195][T26130] lo: left allmulticast mode
[  504.886297][T26130] tunl0: left allmulticast mode
[  504.901585][T26130] gre0: left allmulticast mode
[  504.909461][T26130] gretap0: left allmulticast mode
[  504.913981][T26130] erspan0: left allmulticast mode
[  504.918139][T26130] ip_vti0: left allmulticast mode
[  504.921391][T26130] ip6_vti0: left allmulticast mode
[  504.924758][T26130] sit0: left allmulticast mode
[  504.938737][T26130] ip6tnl0: left allmulticast mode
[  504.943924][T26130] ip6gre0: left allmulticast mode
[  504.950103][T26130] ip6gretap0: left allmulticast mode
[  504.956389][T26130] team0: left allmulticast mode
[  504.959062][T26130] hsr0: left allmulticast mode
[  504.963523][T26130] 8021q: adding VLAN 0 to HW filter on device team0
[  504.967745][T26130] nlmon0: left allmulticast mode
[  504.972093][T26130] caif0: left allmulticast mode
[  504.974147][T26130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  505.140232][T26144] D speed is unknown, defaulting to 1000
[  505.238418][T26153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5939'.
[  505.241858][T26153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5939'.
[  505.714713][T26178] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  505.737933][T26183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  505.847943][T26191] IPv6: NLM_F_CREATE should be specified when creating new route
[  505.983771][T26204] 8021q: adding VLAN 0 to HW filter on device bond90
[  506.245867][T26217] hsr0: mtu greater than device maximum
[  506.248350][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  506.254147][T26217] team0: Device hsr0 failed to change mtu
[  506.512074][T26242] dvmrp0: entered allmulticast mode
[  506.870510][T26252] vlan5: entered promiscuous mode
[  506.893626][T26254] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode
[  506.898381][T26254] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode
[  507.789129][T26290] bridge23: the hash_elasticity option has been deprecated and is always 16
[  507.792341][T26290] bridge23: entered allmulticast mode
[  507.805092][T26294] sctp: [Deprecated]: syz.0.5986 (pid 26294) Use of int in max_burst socket option deprecated.
[  507.805092][T26294] Use struct sctp_assoc_value instead
[  507.869968][T26303] validate_nla: 3 callbacks suppressed
[  507.869991][T26303] netlink: 'syz.0.5987': attribute type 2 has an invalid length.
[  507.915205][T26303] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  507.919192][T26303] sctp: [Deprecated]: syz.0.5987 (pid 26303) Use of int in maxseg socket option.
[  507.919192][T26303] Use struct sctp_assoc_value instead
[  507.932495][T26306] netlink: 'syz.1.5989': attribute type 21 has an invalid length.
[  507.977944][T26312] netlink: 'syz.1.5992': attribute type 2 has an invalid length.
[  508.021605][T26308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.047172][T26314] D speed is unknown, defaulting to 1000
[  508.153389][T26324] xt_HMARK: spi-set and port-set can't be combined
[  508.171058][T26324] delete_channel: no stack
[  508.182860][T26327] delete_channel: no stack
[  508.272751][T26330] D speed is unknown, defaulting to 1000
[  508.953364][T26370] bond0: ARP target 170.170.170.170 is already present
[  508.955573][T26370] bond0: option arp_ip_target: invalid value (2863311530)
[  509.054212][T26378] netlink: 'syz.1.6009': attribute type 1 has an invalid length.
[  509.140414][T26384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  509.144536][T26384] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode
[  509.149377][T26384] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode
[  509.264003][T26387] netlink: 'syz.1.6011': attribute type 1 has an invalid length.
[  509.342152][T26387] __nla_validate_parse: 24 callbacks suppressed
[  509.342170][T26387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6011'.
[  510.116803][T26415] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  510.247564][T26420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'.
[  510.382818][T26429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6022'.
[  510.471532][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6026'.
[  510.475131][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6026'.
[  510.480108][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6026'.
[  510.483806][T26434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6026'.
[  510.488314][T26434] netlink: 'syz.2.6026': attribute type 6 has an invalid length.
[  510.515958][T26435] netlink: 'syz.1.6025': attribute type 12 has an invalid length.
[  510.557220][T26437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6027'.
[  510.796172][T26456] D speed is unknown, defaulting to 1000
[  511.305389][T26488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6038'.
[  511.351202][T26492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6040'.
[  511.439445][T26499] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  511.444707][T26496] netlink: 'syz.0.6042': attribute type 23 has an invalid length.
[  511.770731][T26522] warn_alloc: 1 callbacks suppressed
[  511.770751][T26522] syz.0.6048: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  511.788420][T26522] CPU: 0 UID: 0 PID: 26522 Comm: syz.0.6048 Not tainted syzkaller #0 PREEMPT(full) 
[  511.788435][T26522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  511.788458][T26522] Call Trace:
[  511.788463][T26522]  <TASK>
[  511.788467][T26522]  dump_stack_lvl+0x189/0x250
[  511.788483][T26522]  ? __pfx_dump_stack_lvl+0x10/0x10
[  511.788493][T26522]  ? __pfx__printk+0x10/0x10
[  511.788505][T26522]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  511.788515][T26522]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  511.788525][T26522]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  511.788535][T26522]  warn_alloc+0x214/0x310
[  511.788552][T26522]  ? __pfx_warn_alloc+0x10/0x10
[  511.788568][T26522]  ? __get_vm_area_node+0x28f/0x300
[  511.788580][T26522]  ? xskq_create+0xbf/0x170
[  511.788591][T26522]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  511.788637][T26522]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  511.788652][T26522]  ? __kasan_kmalloc+0x93/0xb0
[  511.788665][T26522]  vmalloc_user_noprof+0xad/0xf0
[  511.788676][T26522]  ? xskq_create+0xbf/0x170
[  511.788685][T26522]  xskq_create+0xbf/0x170
[  511.788694][T26522]  xsk_init_queue+0xb0/0x110
[  511.788704][T26522]  xsk_setsockopt+0x57b/0x8d0
[  511.788719][T26522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  511.788731][T26522]  ? __pfx_aa_sk_perm+0x10/0x10
[  511.788745][T26522]  ? __se_sys_futex+0x36f/0x400
[  511.788755][T26522]  ? aa_sock_opt_perm+0xff/0x1b0
[  511.788764][T26522]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  511.788773][T26522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  511.788785][T26522]  do_sock_setsockopt+0x17c/0x1b0
[  511.788799][T26522]  __x64_sys_setsockopt+0x13f/0x1b0
[  511.788812][T26522]  do_syscall_64+0xfa/0x3b0
[  511.788821][T26522]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.788830][T26522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.788838][T26522]  ? exc_page_fault+0x9f/0xf0
[  511.788848][T26522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.788856][T26522] RIP: 0033:0x7ff4f938ec29
[  511.788865][T26522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.788873][T26522] RSP: 002b:00007ff4fa2d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  511.788883][T26522] RAX: ffffffffffffffda RBX: 00007ff4f95d6090 RCX: 00007ff4f938ec29
[  511.788889][T26522] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  511.788894][T26522] RBP: 00007ff4f9411e41 R08: 0000000000000004 R09: 0000000000000000
[  511.788899][T26522] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  511.788905][T26522] R13: 00007ff4f95d6128 R14: 00007ff4f95d6090 R15: 00007ffc7fbfe4d8
[  511.788918][T26522]  </TASK>
[  511.789076][T26522] Mem-Info:
[  511.900170][T26522] active_anon:6167 inactive_anon:0 isolated_anon:0
[  511.900170][T26522]  active_file:1867 inactive_file:38413 isolated_file:0
[  511.900170][T26522]  unevictable:1768 dirty:111 writeback:0
[  511.900170][T26522]  slab_reclaimable:12205 slab_unreclaimable:139081
[  511.900170][T26522]  mapped:18439 shmem:2441 pagetables:1154
[  511.900170][T26522]  sec_pagetables:0 bounce:0
[  511.900170][T26522]  kernel_misc_reclaimable:0
[  511.900170][T26522]  free:189721 free_pcp:25320 free_cma:0
[  511.916876][T26522] Node 0 active_anon:11296kB inactive_anon:0kB active_file:4496kB inactive_file:47968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30308kB dirty:184kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8032kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  511.929775][T26522] Node 1 active_anon:13372kB inactive_anon:0kB active_file:2972kB inactive_file:105684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43448kB dirty:260kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9084kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  511.942031][T26522] Node 0 DMA free:14896kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:460kB local_pcp:124kB free_cma:0kB
[  511.953705][T26522] lowmem_reserve[]: 0 814 814 814 814
[  511.955952][T26522] Node 0 DMA32 free:285488kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11296kB inactive_anon:0kB active_file:4496kB inactive_file:47968kB unevictable:3536kB writepending:184kB present:1556484kB managed:833584kB mlocked:0kB bounce:0kB free_pcp:48620kB local_pcp:33024kB free_cma:0kB
[  511.968839][T26522] lowmem_reserve[]: 0 0 0 0 0
[  511.970816][T26522] Node 1 DMA32 free:328244kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:19620kB local_pcp:7640kB free_cma:0kB
[  511.982453][T26522] lowmem_reserve[]: 0 0 854 854 854
[  511.984624][T26522] Node 1 Normal free:130256kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13372kB inactive_anon:0kB active_file:2972kB inactive_file:105684kB unevictable:3536kB writepending:260kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32920kB local_pcp:21360kB free_cma:0kB
[  511.997311][T26522] lowmem_reserve[]: 0 0 0 0 0
[  511.999199][T26522] Node 0 DMA: 2*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 3*128kB (U) 2*256kB (U) 3*512kB (U) 2*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14896kB
[  512.005364][T26522] Node 0 DMA32: 834*4kB (UM) 947*8kB (UME) 332*16kB (UME) 435*32kB (UM) 167*64kB (UME) 217*128kB (UME) 117*256kB (UME) 43*512kB (UME) 15*1024kB (UM) 9*2048kB (UM) 32*4096kB (U) = 285440kB
[  512.012791][T26522] Node 1 DMA32: 15*4kB (UM) 17*8kB (UM) 13*16kB (UM) 21*32kB (UME) 16*64kB (UM) 16*128kB (UME) 18*256kB (UME) 10*512kB (UME) 11*1024kB (UME) 6*2048kB (ME) 71*4096kB (UM) = 328244kB
[  512.020386][T26522] Node 1 Normal: 108*4kB (UM) 844*8kB (UME) 914*16kB (UME) 105*32kB (UME) 235*64kB (UME) 129*128kB (UME) 79*256kB (UME) 12*512kB (UM) 8*1024kB (UM) 5*2048kB (M) 7*4096kB (UM) = 130192kB
[  512.027799][T26522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  512.031490][T26522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  512.035138][T26522] 42726 total pagecache pages
[  512.037387][T26522] 5 pages in swap cache
[  512.039093][T26522] Free swap  = 124976kB
[  512.040774][T26522] Total swap = 124996kB
[  512.042408][T26522] 786301 pages RAM
[  512.044034][T26522] 0 pages HighMem/MovableOnly
[  512.046029][T26522] 240673 pages reserved
[  512.047869][T26522] 0 pages cma reserved
[  512.079022][T26533] siw: device registration error -23
[  512.652448][T26589] D speed is unknown, defaulting to 1000
[  514.249892][T26686] netlink: 'syz.1.6098': attribute type 5 has an invalid length.
[  514.252467][T26686] netlink: 'syz.1.6098': attribute type 5 has an invalid length.
[  514.416384][T26695] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  514.475157][T26699] __nla_validate_parse: 11 callbacks suppressed
[  514.475168][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6103'.
[  514.517589][T26704] netlink: 'syz.1.6104': attribute type 10 has an invalid length.
[  514.520610][T26704] tipc: Resetting bearer <eth:team0>
[  514.523682][T26704] 8021q: adding VLAN 0 to HW filter on device team0
[  514.528982][T26704] bond0: (slave team0): Enslaving as an active interface with a down link
[  514.719140][T26714] netlink: 'syz.0.6108': attribute type 30 has an invalid length.
[  514.725123][T26720] netlink: 'syz.0.6108': attribute type 30 has an invalid length.
[  514.838761][T26727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'.
[  515.539777][T26732] netlink: 'syz.1.6112': attribute type 11 has an invalid length.
[  515.543068][T26732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6112'.
[  515.633917][T26739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6114'.
[  515.945460][T26765] D speed is unknown, defaulting to 1000
[  516.440410][T26798] netlink: 468 bytes leftover after parsing attributes in process `syz.1.6129'.
[  516.444597][T26799] netlink: 468 bytes leftover after parsing attributes in process `syz.1.6129'.
[  516.453489][T26798] netlink: 'syz.1.6129': attribute type 6 has an invalid length.
[  516.807715][T26822] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6134'.
[  516.912357][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6137'.
[  516.918331][T26829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6137'.
[  516.999199][T26837] netlink: 'syz.1.6141': attribute type 4 has an invalid length.
[  517.108996][T26850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6145'.
[  517.241513][T26865] netlink: 'syz.1.6149': attribute type 2 has an invalid length.
[  517.243946][T26865] netlink: 'syz.1.6149': attribute type 2 has an invalid length.
[  517.325688][T26875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.771294][T26924] openvswitch: netlink: Flow key attr not present in new flow.
[  517.983486][T26932] netlink: 'syz.1.6166': attribute type 10 has an invalid length.
[  517.986187][T26932] tipc: Resetting bearer <eth:team0>
[  517.995966][T26932] bond0: (slave team0): Releasing backup interface
[  518.001117][T26932] tipc: Resetting bearer <eth:team0>
[  518.003756][T26932] team0: Cannot enslave team device to itself
[  518.089110][T26936] bond85: (slave wlan0): Releasing active interface
[  524.806834][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  533.550055][T21754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  533.554348][T21754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  533.559890][T21754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  533.563799][T21754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  533.568983][T21754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  533.583041][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  533.586422][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  533.590360][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  533.593685][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  533.599189][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  533.756512][T26952] chnl_net:caif_netlink_parms(): no params data found
[  533.831937][T26952] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.834979][T26952] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.838884][T26952] bridge_slave_0: entered allmulticast mode
[  533.844935][T26952] bridge_slave_0: entered promiscuous mode
[  533.850271][T26952] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.852502][T26952] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.854811][T26952] bridge_slave_1: entered allmulticast mode
[  533.858551][T26952] bridge_slave_1: entered promiscuous mode
[  533.881145][T26952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.886462][T26952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.908689][T26952] team0: Port device team_slave_0 added
[  533.912180][T26952] team0: Port device team_slave_1 added
[  533.933000][T26952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.935267][T26952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.943912][T26952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.948881][T26952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.951071][T26952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.959220][T26952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.990286][T26952] hsr_slave_0: entered promiscuous mode
[  533.992744][T26952] hsr_slave_1: entered promiscuous mode
[  533.994957][T26952] debugfs: 'hsr0' already exists in 'hsr'
[  533.997256][T26952] Cannot create hsr debugfs directory
[  534.495944][T21754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  534.500978][T21754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  534.504986][T21754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  534.509912][T21754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  534.513328][T21754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  534.670288][T26961] chnl_net:caif_netlink_parms(): no params data found
[  534.759664][T26961] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.762078][T26961] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.764953][T26961] bridge_slave_0: entered allmulticast mode
[  534.769509][T26961] bridge_slave_0: entered promiscuous mode
[  534.775653][T26961] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.779257][T26961] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.782413][T26961] bridge_slave_1: entered allmulticast mode
[  534.787356][T26961] bridge_slave_1: entered promiscuous mode
[  534.819825][T26961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.826027][T26961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.857428][T26961] team0: Port device team_slave_0 added
[  534.862672][T26961] team0: Port device team_slave_1 added
[  534.895721][T26961] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.899229][T26961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.909058][T26961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.914246][T26961] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.916472][T26961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.927897][T26961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.971746][T26961] hsr_slave_0: entered promiscuous mode
[  534.975261][T26961] hsr_slave_1: entered promiscuous mode
[  534.978811][T26961] debugfs: 'hsr0' already exists in 'hsr'
[  534.981330][T26961] Cannot create hsr debugfs directory
[  535.687413][ T5858] Bluetooth: hci3: command tx timeout
[  536.517935][T21754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  536.521866][T21754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  536.525591][T21754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  536.529746][T21754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  536.532865][T21754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  536.567448][ T5858] Bluetooth: hci4: command tx timeout
[  536.699146][T26970] chnl_net:caif_netlink_parms(): no params data found
[  536.783114][T26970] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.786134][T26970] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.789651][T26970] bridge_slave_0: entered allmulticast mode
[  536.793720][T26970] bridge_slave_0: entered promiscuous mode
[  536.801680][T26970] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.804478][T26970] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.808088][T26970] bridge_slave_1: entered allmulticast mode
[  536.812066][T26970] bridge_slave_1: entered promiscuous mode
[  536.847981][T26970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.855439][T26970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.892097][T26970] team0: Port device team_slave_0 added
[  536.897443][T26970] team0: Port device team_slave_1 added
[  536.931064][T26970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.933905][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.944682][T26970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.951915][T26970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.954744][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.965206][T26970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.998501][T26970] hsr_slave_0: entered promiscuous mode
[  537.001145][T26970] hsr_slave_1: entered promiscuous mode
[  537.003449][T26970] debugfs: 'hsr0' already exists in 'hsr'
[  537.005438][T26970] Cannot create hsr debugfs directory
[  537.767228][ T5858] Bluetooth: hci3: command tx timeout
[  538.566804][ T5858] Bluetooth: hci5: command tx timeout
[  538.646840][ T5858] Bluetooth: hci4: command tx timeout
[  539.846977][ T5858] Bluetooth: hci3: command tx timeout
[  540.646899][ T5858] Bluetooth: hci5: command tx timeout
[  540.726872][ T5858] Bluetooth: hci4: command tx timeout
[  541.926838][ T5858] Bluetooth: hci3: command tx timeout
[  542.726880][ T5858] Bluetooth: hci5: command tx timeout
[  542.806839][ T5858] Bluetooth: hci4: command tx timeout
[  544.806871][ T5858] Bluetooth: hci5: command tx timeout
[  561.927169][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  594.515609][T21754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  594.519513][T21754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  594.522822][T21754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  594.528498][T21754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  594.532147][T21754] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  594.695151][T26982] chnl_net:caif_netlink_parms(): no params data found
[  594.778384][T26982] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.782951][T26982] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.785960][T26982] bridge_slave_0: entered allmulticast mode
[  594.790711][T26982] bridge_slave_0: entered promiscuous mode
[  594.795570][T26982] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.799180][T26982] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.802104][T26982] bridge_slave_1: entered allmulticast mode
[  594.805979][T26982] bridge_slave_1: entered promiscuous mode
[  594.830808][T26982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.836988][T26982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.864007][T26982] team0: Port device team_slave_0 added
[  594.868879][T26982] team0: Port device team_slave_1 added
[  594.888770][T26982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  594.891313][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.901311][T26982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  594.906079][T26982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  594.908782][T26982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  594.917500][T26982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  594.953963][T26982] hsr_slave_0: entered promiscuous mode
[  594.957474][T26982] hsr_slave_1: entered promiscuous mode
[  594.960278][T26982] debugfs: 'hsr0' already exists in 'hsr'
[  594.962447][T26982] Cannot create hsr debugfs directory
[  595.548946][ T5858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  595.553872][ T5858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  595.558558][ T5858] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  595.562359][ T5858] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  595.565964][ T5858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  595.761459][T26991] chnl_net:caif_netlink_parms(): no params data found
[  595.851132][T26991] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.853993][T26991] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.858184][T26991] bridge_slave_0: entered allmulticast mode
[  595.862109][T26991] bridge_slave_0: entered promiscuous mode
[  595.866894][T26991] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.869766][T26991] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.872660][T26991] bridge_slave_1: entered allmulticast mode
[  595.877675][T26991] bridge_slave_1: entered promiscuous mode
[  595.912766][T26991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.921255][T26991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.956490][T26991] team0: Port device team_slave_0 added
[  595.962822][T26991] team0: Port device team_slave_1 added
[  595.991955][T26991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.994798][T26991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.004164][T26991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.010748][T26991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.013823][T26991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.022027][T26991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.052703][T26991] hsr_slave_0: entered promiscuous mode
[  596.055519][T26991] hsr_slave_1: entered promiscuous mode
[  596.058448][T26991] debugfs: 'hsr0' already exists in 'hsr'
[  596.060262][T26991] Cannot create hsr debugfs directory
[  596.576987][ T5858] Bluetooth: hci6: command tx timeout
[  597.489820][T21754] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  597.493539][T21754] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  597.498548][T21754] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  597.501941][T21754] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  597.505528][T21754] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  597.606961][ T5858] Bluetooth: hci7: command tx timeout
[  597.629375][T27000] chnl_net:caif_netlink_parms(): no params data found
[  597.688794][T27000] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.691151][T27000] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.693542][T27000] bridge_slave_0: entered allmulticast mode
[  597.697530][T27000] bridge_slave_0: entered promiscuous mode
[  597.701576][T27000] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.704499][T27000] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.708120][T27000] bridge_slave_1: entered allmulticast mode
[  597.711162][T27000] bridge_slave_1: entered promiscuous mode
[  597.735553][T27000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.743074][T27000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.764157][T27000] team0: Port device team_slave_0 added
[  597.767841][T27000] team0: Port device team_slave_1 added
[  597.788623][T27000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  597.790837][T27000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.799502][T27000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.804527][T27000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.807277][T27000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  597.815940][T27000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  597.850401][T27000] hsr_slave_0: entered promiscuous mode
[  597.853778][T27000] hsr_slave_1: entered promiscuous mode
[  597.856515][T27000] debugfs: 'hsr0' already exists in 'hsr'
[  597.859498][T27000] Cannot create hsr debugfs directory
[  598.646799][ T5858] Bluetooth: hci6: command tx timeout
[  599.527091][ T5858] Bluetooth: hci8: command tx timeout
[  599.686980][ T5858] Bluetooth: hci7: command tx timeout
[  600.727074][ T5858] Bluetooth: hci6: command tx timeout
[  601.606863][ T5858] Bluetooth: hci8: command tx timeout
[  601.767060][ T5858] Bluetooth: hci7: command tx timeout
[  602.806882][ T5858] Bluetooth: hci6: command tx timeout
[  603.686919][ T5858] Bluetooth: hci8: command tx timeout
[  603.847047][ T5858] Bluetooth: hci7: command tx timeout
[  605.767011][ T5858] Bluetooth: hci8: command tx timeout
[  639.376803][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  654.485865][T21754] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  654.489962][T21754] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  654.492955][T21754] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  654.495857][T21754] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  654.500779][T21754] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  654.618238][T27012] chnl_net:caif_netlink_parms(): no params data found
[  654.676348][T27012] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.679338][T27012] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.681863][T27012] bridge_slave_0: entered allmulticast mode
[  654.684671][T27012] bridge_slave_0: entered promiscuous mode
[  654.688480][T27012] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.690730][T27012] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.692962][T27012] bridge_slave_1: entered allmulticast mode
[  654.695669][T27012] bridge_slave_1: entered promiscuous mode
[  654.719524][T27012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.725371][T27012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.749849][T27012] team0: Port device team_slave_0 added
[  654.753515][T27012] team0: Port device team_slave_1 added
[  654.775881][T27012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  654.778923][T27012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.788054][T27012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  654.792906][T27012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  654.795167][T27012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  654.803857][T27012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.834270][T27012] hsr_slave_0: entered promiscuous mode
[  654.837148][T27012] hsr_slave_1: entered promiscuous mode
[  654.839413][T27012] debugfs: 'hsr0' already exists in 'hsr'
[  654.841141][T27012] Cannot create hsr debugfs directory
[  656.508884][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  656.513548][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  656.518942][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  656.523511][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  656.526726][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  656.566949][ T5236] Bluetooth: hci9: command tx timeout
[  656.670131][T27022] chnl_net:caif_netlink_parms(): no params data found
[  656.759950][T27022] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.762825][T27022] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.765799][T27022] bridge_slave_0: entered allmulticast mode
[  656.770573][T27022] bridge_slave_0: entered promiscuous mode
[  656.775868][T27022] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.779321][T27022] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.782263][T27022] bridge_slave_1: entered allmulticast mode
[  656.786201][T27022] bridge_slave_1: entered promiscuous mode
[  656.812468][ T5236] Bluetooth: hci4: command 0x0406 tx timeout
[  656.815599][T27020] Bluetooth: hci3: command 0x0406 tx timeout
[  656.834597][T27022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  656.842468][T27022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  656.874615][T27022] team0: Port device team_slave_0 added
[  656.880951][T27022] team0: Port device team_slave_1 added
[  656.916516][T27022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.919758][T27022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.929941][T27022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.936177][T27022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.939405][T27022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  656.950267][T27022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.990361][T27022] hsr_slave_0: entered promiscuous mode
[  656.992917][T27022] hsr_slave_1: entered promiscuous mode
[  656.995230][T27022] debugfs: 'hsr0' already exists in 'hsr'
[  656.997451][T27022] Cannot create hsr debugfs directory
[  657.595879][T21754] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  657.601766][T21754] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  657.605477][T21754] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  657.613899][T21754] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  657.618751][T21754] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  657.797227][T27032] chnl_net:caif_netlink_parms(): no params data found
[  657.881453][T27032] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.884416][T27032] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.888242][T27032] bridge_slave_0: entered allmulticast mode
[  657.892228][T27032] bridge_slave_0: entered promiscuous mode
[  657.897396][T27032] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.900423][T27032] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.903549][T27032] bridge_slave_1: entered allmulticast mode
[  657.908401][T27032] bridge_slave_1: entered promiscuous mode
[  657.945785][T27032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.952687][T27032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.988530][T27032] team0: Port device team_slave_0 added
[  657.993531][T27032] team0: Port device team_slave_1 added
[  658.025252][T27032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.028598][T27032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.037439][T27032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.043435][T27032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.046074][T27032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.056417][T27032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.100518][T27032] hsr_slave_0: entered promiscuous mode
[  658.103798][T27032] hsr_slave_1: entered promiscuous mode
[  658.107108][T27032] debugfs: 'hsr0' already exists in 'hsr'
[  658.109292][T27032] Cannot create hsr debugfs directory
[  658.447112][T26936] unregister_netdevice: waiting for D to become free. Usage count = 3
[  658.450603][T26936] ref_tracker: netdev@ffff888126308610 has 1/1 users at
[  658.450603][T26936]      ib_device_set_netdev+0x31f/0x6d0
[  658.450603][T26936]      siw_newlink+0x40c/0xd70
[  658.450603][T26936]      nldev_newlink+0x4a5/0x5a0
[  658.450603][T26936]      rdma_nl_rcv+0x6ae/0x980
[  658.450603][T26936]      netlink_unicast+0x82f/0x9e0
[  658.450603][T26936]      netlink_sendmsg+0x805/0xb30
[  658.450603][T26936]      __sock_sendmsg+0x21c/0x270
[  658.450603][T26936]      ____sys_sendmsg+0x505/0x830
[  658.450603][T26936]      ___sys_sendmsg+0x21f/0x2a0
[  658.450603][T26936]      __x64_sys_sendmsg+0x19b/0x260
[  658.450603][T26936]      do_syscall_64+0xfa/0x3b0
[  658.450603][T26936]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.450603][T26936] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  658.566918][ T5858] Bluetooth: hci10: command tx timeout
[  658.647517][ T5858] Bluetooth: hci9: command tx timeout
[  659.686915][ T5858] Bluetooth: hci11: command tx timeout
[  660.646895][ T5858] Bluetooth: hci10: command tx timeout
[  660.726920][ T5858] Bluetooth: hci9: command tx timeout
[  661.767247][ T5858] Bluetooth: hci11: command tx timeout
[  661.927756][ T5858] Bluetooth: hci5: command 0x0406 tx timeout
[  662.727036][T21754] Bluetooth: hci10: command tx timeout
[  662.806780][T21754] Bluetooth: hci9: command tx timeout
[  663.846850][T21754] Bluetooth: hci11: command tx timeout
[  664.806995][T21754] Bluetooth: hci10: command tx timeout
[  665.926838][T21754] Bluetooth: hci11: command tx timeout

VM DIAGNOSIS:
11:11:48  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11020f60701 RBX=ffffffff8f5a06d0 RCX=ffffffff819ce228 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f5a0680 RBP=1ffffffff1eb40d0 RSP=ffffc90006ab7540
R8 =ffffffff8f5a0687 R9 =1ffffffff1eb40d0 R10=dffffc0000000000 R11=fffffbfff1eb40d1
R12=ffffffff8f5a0680 R13=ffffffff8f5a06d0 R14=fffffbfff1eb40d1 R15=1ffffffff1eb40d0
RIP=ffffffff822319b6 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555586ea6500 ffffffff 00c00000
GS =0000 ffff8880b8639000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6058006440 CR3=000000003274e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=0000000000000000 00ff00000000ff00
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00000000ff000000
XMM04=0000000000ff0000 00000000000000ff XMM05=0000000000000000 00007fb0cf812e7b
XMM06=0000000000000000 00007fb0cf812e75 XMM07=0000000000000000 00007fb0cf812e89
XMM08=0000000000000000 00007fb0cf812f0f XMM09=0000000000000000 00007fb0cf812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc900072ce950
R8 =ffff888106998237 R9 =1ffff11020d33046 R10=dffffc0000000000 R11=ffffffff854fb560
R12=dffffc0000000000 R13=ffffffff99adb91e R14=ffffffff99dd0460 R15=0000000000000000
RIP=ffffffff854fb5dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa666e016c0 ffffffff 00c00000
GS =0000 ffff8881a3c39000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9fcde18497 CR3=0000000024b56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000002e547f6 000000000000000f XMM01=0100010000000001 000000ffffffffff
XMM02=0100080000000032 0000003565736f72 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffff0000000000 XMM05=0200000000000000 00000000000002ff
XMM06=0200000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
