last executing test programs:

2m19.944272655s ago: executing program 2 (id=510):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)

2m19.943840921s ago: executing program 2 (id=511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
socket(0xa, 0x800, 0x58e79a71)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800)
sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r10, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

2m19.73443307s ago: executing program 2 (id=513):
socketpair(0x2c, 0x800, 0x5, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2m19.590654999s ago: executing program 2 (id=517):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x7448d6d, 0x4) (async)
sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2m19.501982995s ago: executing program 2 (id=521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000004000000dd0000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000070000000000000000891735e866aa2068e4baa92f98cd0efb710d4980bda88e5a16159c34ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xc, 0x0, 0x0, 0xb00}, 0x40d40b70}], 0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32], 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRES32], 0x2c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000580)}, 0x20)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x40)
close(0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000280)={0x8, 'syzkaller0\x00', {'veth1_to_batadv\x00'}, 0x47a8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m19.404191011s ago: executing program 2 (id=523):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffff, 0x0, 0x6, 0xfff, 0x1, 0x0, 0x5}, 0x1c)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
socket(0x10, 0x803, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffff, 0x0, 0x6, 0xfff, 0x1, 0x0, 0x5}, 0x1c) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) (async)

2m4.438653308s ago: executing program 32 (id=523):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffff, 0x0, 0x6, 0xfff, 0x1, 0x0, 0x5}, 0x1c)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
socket(0x10, 0x803, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffff, 0x0, 0x6, 0xfff, 0x1, 0x0, 0x5}, 0x1c) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904faffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) (async)

36.378786679s ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

29.568676813s ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

23.994179828s ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

15.791281196s ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

9.631667862s ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

1.402130577s ago: executing program 1 (id=2545):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000002600030800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c00010000000000000000000500090000000000080005"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e0000000054010258330002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec000000020a01080000000000000000010000020900010073797a310000000008000240000000020900010073797a31000000007500060099c2eeaef87cfb6b89e93fe583a4c1f18b200de5271b010c59ddfb8992cf32df682aafa8b82bf33277b2a54328d10428fed480a605ab90b16d1a9c77e6ddbda7d7527449b6011a4632e0f51aba4d8c3566dbb2a53b21534ba6fba13fa8061540385d6a441b6126a034f8849d147ec705cf0000000c00044000000000000000030c00044000000000000000050c0004400000000000000003080002400000000008000240000000010900010073797a31000000002c0400000b0a010100000000000000000000000640001180080001006c6f670034000280080003400000009606000140001d00000800034000000400080006400000000008000640000000210600044014740000b9000d403618f2bfff38ac420c3d78a80a51bd7ecae67077fa926d31a72231c31a2eb3ac6fb27545db8f4245aadb1256b8ff8ee63fa9d2e5b734d04fa998858631ed1117beb9cff7fad4eaa23419e50b21902914d7afb01b04e7738b8084a9ce444d2472e1b3f902b5e2aff4759b7d040af7959af10a241ee5239e40b39e3d1635bfdd1c2fab152d0694b244b5ddd719f86386ff1ebf59759652e65a8fb6c6012b084626dd03f9258fa4580f850f3d07d95b0d6a0b9c898f2900000057000d40afc6577524e6b49f54b373c48d265b938959001e217c91b8490275b09149ef04fa9216ee5d18349c369e4eab3d614e639db00092bb1a13cd02d51646f62ce8ea80d8fc1b17fba26d04c0eceb240610d299bcfd0008000a40000000030900020073797a31000000000900020073797a30000000004c021280600101800a0001006d617463680000005001028008000240000000030d000100636f6e6e6d61726b00000000090001006c32747000100000ea0003002f69c45986d3066cb14bf2665dd4e1199d89cc121c4921bdd6cb1c104051860916790124b64e218a6c25f5e859619ab8c44e0933f66a1b980fcfae9690b8dd2a851ad3dc962f90786116484cc7923ad09824a52dca61b2c4fb7ab9e2f9e2fcce5fcc176b40a390211e5b4c30d851942324bccede2ac86cf78e96727600321dd19c47414abe77c78d27b7efc5b193ca9fdee9aaa47d70f0b847b97571985145e41b3cef1151227ad9079ee512b6e2c1d28d2f189db6ca163fd898cdaab973d9982224fac738e7b1638becae1f9dcd1de22067811608f8530ad2733c75da5797ff10430d5a04d200000b0001006367726f7570000008000240000000020900010069707673000000000d0001006164647274797065000000000b0001006c656e67746800002800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3100000000440001800a00010072656469720000003400028008000340000000080800034000000004080001400000000d0800034000000008080002400000000b08000240000000173c000180090001007866726d000000002c0002800800014000000012080001400000000a08000240000000040800044000000000080001400000001630000180080001006e617400240002800800074000000028080001400000000108000640000000110800054000000013100001800c0001006e6f747261636b00580011800d00010073796e70726f7879000000004400028008000340000000020500020004000000050002003a00000008000340000000210800034000000004060001400080000006000140062300000600014002000000140000001100010000000000000000000a00000a0fa27ff5837d1e9dc8d18affadc3af18bc975dbe05b1603161aacf95b5e161c50b4ac995de5575bbae9d4ef66685f3037a1333453708c65e04189157602bc3e7c1043ec8f666d8feb285d8c84f44ce4bc71a8fb65f16bba845b6ee75baf53641785d8f580aa3e4601ba9ca04eaf51cf2a651b5adcad262204e3ef125e2bd9d388d0e036b51bbc4f31c2746c23bf2345780c9f2b211e0defdc1c5506f84b7c454d94f28e6ca5d0023e1527c23f00e841cea93cb0d6f14efd2bce54178677d1e00aeb55d4468850468d1b4d9ae4037d0747e6b90c1d0b1d5c97e9e2ef35670755293b71ea7514e8a1f76fa0791a44ba6f3ee4b2e026cb4172cd7f086305cb949f595b78b855289f2ad50aec75299f68b957c0b6450ea9b9b6a142daec97be0e38332a76544f1841af8900c7da1a2f23656d6e1df36690edf6513c17c2d46baa2ba3f2a25152f7ea56e930af33a90a82f5272190c47ec677cc788446f0cbfd2c006d069f052301160b3f275eb7f8197ede1a5226893b0b9254f83a8b050f3da226f109ba9945a360a763702092855556c363a897695a205e4b1eb476923c988b60f54b921b1"], 0x540}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0x10, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="e7c86361b5c800243ecebe00000000000004aa00bffe976c0001"], 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000006ec76c15058cf5a000038000180060001000200000008007f0000000000000007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)

1.321811441s ago: executing program 1 (id=2548):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000700d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)

1.241451115s ago: executing program 1 (id=2549):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', <r0=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/20, 0x14, <r1=>0x0, &(0x7f0000000380)=""/145, 0x91}}, 0x10) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) (async)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x3}, 0xc) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x5, 0x86, &(0x7f0000000200)=""/134, 0x40f00, 0x2, '\x00', r0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x7, 0x25e000}, 0x10, r1, r2, 0x1, &(0x7f0000000600)=[r3, r4, r5, 0x1], &(0x7f0000000640)=[{0x2, 0x5, 0xa}], 0x10, 0x4}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94)

1.237903604s ago: executing program 3 (id=2550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x9}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "edae84e604dc272c17ff0edf35d8a72459c96d592d906cea"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "517f24c2d01b95605962fc437890a2eb60d4afd661278f4e"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x11)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000200)={<r3=>0x0, 0x0, 0x0, [0xbd, 0x5, 0x200, 0x6, 0x4], [0x5, 0xc2, 0x40, 0x2, 0x5b, 0x1000, 0x4, 0x6, 0x70, 0x4, 0x2, 0x9, 0xae, 0x3, 0x1, 0x4ab8, 0x8, 0x6, 0xffffffff, 0xd17, 0xbd, 0x80, 0x4, 0x7, 0xc, 0x200, 0x9, 0xa, 0x816, 0x8, 0x7, 0x10, 0x6, 0x4, 0x1ff, 0x62, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x7ff, 0x6, 0xc, 0x3, 0x3, 0x1ff, 0xea, 0xfffffffffffff1e9, 0x7, 0x9, 0x81, 0xc, 0xa, 0x8, 0x0, 0x0, 0x4, 0x4, 0xf, 0x0, 0x7fffffff, 0x7, 0x0, 0x10, 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x8390, 0x5, 0x4, 0x39, 0x8, 0x5, 0x1, 0x4608ab2f, 0x0, 0x7, 0x7ff, 0xfffffffffffff312, 0x3, 0xffffffff80000000, 0xffffffffffffffff, 0x40, 0x8, 0x1, 0x4, 0x800, 0x1800000, 0x40, 0x1, 0x6, 0x9, 0x5, 0x1, 0x6, 0x7fffffff, 0xfffffffffffff001, 0x2, 0x9, 0x1, 0x4, 0x8000000000000001, 0x100, 0x4, 0x1000, 0x8, 0xd, 0x3, 0xfffffffffffffffa, 0x7, 0xfffffffffffffffd, 0xb980000000000000, 0x9, 0x7, 0x1, 0x1, 0x4, 0x401, 0x1, 0x5]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000640)={r3, 0x200000000, 0x80000001})
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r4, 0x0, 0xb8, 0xa7, &(0x7f0000000ac0)="07bc459ab3a0f000f12d43c47d1cb0a62f93eacbb76b3143de43fa017cf8c4456dda9ff661b0a754eb448321ecfa911592bb8c17a3d3772d00adbf3ae008362dbab86c7916454a8b20f64c96c501c4434afeace8b40eb53a3a3efb7e164b56b3918dd98d9d4a5e2c756f2460cab17b489e598bd06fedad3c78082478375bcd3b36a5d124c004882fbebf6295a0ace94edf3d7d406fa78e69f4ba5e0157c489b2b40ac6278448cb72e77a98f596cc2015b4a44037c93ba02b", &(0x7f0000000b80)=""/167, 0xb, 0x0, 0x7e, 0x74, &(0x7f0000000c40)="e6673dc3d2c031475dc79f50e1405d1621d27d4bdd1145e3f59f110b84ee939dc99d614ee4bea4aebef00689240d9a079ce13ff74f1b7b5cb1f5488ab6c2c3af6d2ae097c62391d74ad57560d6d89b9d8ff8adc74c9cd2929a9114e452845ab2e0ec0549685cc524d58bbf95cc6a7bb9a84005a7803e56fa5cddb1955090", &(0x7f0000000cc0)="23bb25a157ae079cde089db7ce6d56206e345a56074b4551df0efed86ba0ed05050f35b8bd290e34c8a210d5f2a49356610376f5d6377bdb4833cc7c3e8053c256ae59c1302106effe5b9b2b6290b9cc6cf7ff177332a31c2eeda718c66cc27e2db6ec4cb0fcf4f216f44d24f9091a3f03f1d29a", 0x1, 0x0, 0xfffffffc}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x5)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x74, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44004}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f40)={'vxcan1\x00', <r7=>0x0})
connect$can_bcm(r2, &(0x7f0000000f80)={0x1d, r7}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000fc0)=0x1)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001040)={<r9=>0x0, 0x4}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000010c0)={<r10=>0x0}, &(0x7f0000001100)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001140)={<r11=>r9, 0xe, 0x6, 0xf09f, 0x691, 0x9, 0x0, 0x0, {r10, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x5, 0x7, 0x2, 0xf}}, &(0x7f0000001200)=0xb0)
getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000001240)=""/2, &(0x7f0000001280)=0x2)
write$cgroup_subtree(r8, &(0x7f00000012c0)={[{0x2b, 'memory'}, {0x2d, 'cpuset'}, {0x2b, 'pids'}, {0x2b, 'cpu'}]}, 0x1b)
openat$cgroup_procs(r8, &(0x7f0000001300)='tasks\x00', 0x2, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r13, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000800)
openat$cgroup_procs(r8, &(0x7f0000001480)='tasks\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000014c0)={<r14=>r11, 0x20, 0xae6, 0x6}, &(0x7f0000001500)=0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001540)=@assoc_value={r14, 0x6}, 0x8)

1.232462198s ago: executing program 1 (id=2551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}})
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000", 0x20}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r6], 0x24}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000005900000008000300c9fbd01bf7bfeceb9b839c03bd3b3362c4d7a6b5e99b6b33fb3f6f688b2280f32283f41444c091d72880458948b044c86d99b671f1e16f3813478ccaa09c70df8566e6e7188536c4", @ANYRES32=r1, @ANYBLOB="0600480010070000050088000900000004002a0050008900030000000500880001000000"], 0x40}}, 0x0)

1.091895467s ago: executing program 1 (id=2552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b060102000000000000000005000002050001000700f807ebaf637d622c7a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x448c4)
r1 = socket(0x10, 0x6, 0x400000)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xc, 0x0, 0x0, 0xb00}, 0x40d40b70}], 0x1, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
pipe(0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r2, &(0x7f0000000000)='\x00', 0x1, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x35, 0xe5, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x2}, 0xe)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x1, 0x1}, {0x6}, {0xe}, {0x60}, {0x12, 0x1}, {0x4, 0x1}, {0x18, 0x1}, {0x36, 0x1}, {0x5}, {0xb, 0x1}, {0x9}, {0xb}, {0x5, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffec}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x9e}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000440)}, 0xffffffff}, {{&(0x7f0000000240)=@xdp, 0x80, 0x0}, 0x7}], 0x2, 0x400000c0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f1a000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000000400)=0x8, 0x4)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r10, 0x1000)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x1000)

1.091181702s ago: executing program 3 (id=2553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004"], 0x64}}, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r2, &(0x7f0000000100)={0x2a, 0x3, 0x7fff}, 0xc)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r3 = socket$inet6(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4)
ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000000)="d7d833e1b92126000200017bb55794")

1.002255027s ago: executing program 3 (id=2554):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x2, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000), 0xe)
close(0x4)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00'], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8, 0x6, 0x7, r5}, &(0x7f0000000140)=0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

1.001879192s ago: executing program 3 (id=2555):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x48000)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0100000004000000080000000b08000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32=r3, @ANYBLOB="6b559debe1bad601f9fc1c13e2ddd932c781852d30561ceeb1b52d88490e9ee5f60e4c1103e3af18189386f8b0998a0afe358977f530b7160e9995ab1aeb32404c6f02b24dad16bbc0afbe7aeb1cb12615bd2fb04a89e2553faf15bc906b521209859154e65531324040082a24ebe7ab2470ff685f66012f363c1d7dcbee0a8b187bc82a9ea597bc02c20ef7cde0c1595cdaa53f728a949fd4f5a74fd0ac2f0e7e6b00ec545c5c260330bf16c80504b895ab48d66b2fe89c5c06dcb149819d53b9a4b735304a575a7971b68e0268adad86cd1658b35a9836bd4f589a6701f5453fda80292b88d2ba9b1071ccdf0b09e98d513a3d27db4d0ca62789e8ba177dc3437498b4284d3c5d193ca7978e439eb238418c58047f7ed106cd172715319404b066fde0a7b595da9f6a4a731d55deff4c70967e811d2cef067aafb297f0f9839c96b0e5b5e1b5af0174f3af6992443135bf342778395ae12d3c324ec0f3281494", @ANYRES32=r2, @ANYRES64=r3], 0x10)
close(r3)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="34038000", @ANYRES16=r4, @ANYBLOB="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"/814], 0x334}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000000000000000002e77a87b175904f4000200000026000000ffffff858e00007b0000000085000000130000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
clock_gettime(0x0, &(0x7f0000000300))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00)
sendmsg$tipc(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10)
accept4$nfc_llcp(r7, &(0x7f0000000580), &(0x7f0000000480)=0x60, 0x80000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000080)
write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0)
close(r10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$inet(0x2, 0x2, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00'})

232.105158ms ago: executing program 1 (id=2556):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000900000000000000da200000180100002020692500002100002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000104000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9d, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x1, 0x4, 0xf, 0x2}], 0x10, 0x191}, 0x94)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r4=>r3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x40)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000480)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000200)='htcp\x00', 0x5)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r7, &(0x7f0000001600)="3d1fffff75c44181a66f48a2edb6725b6555bd20d878f533e49ecb776c935d8a2e473eaa7ac10819b967cbc4369238107b11c7742ef0ba9852bb6ea594234773513e0c386d01ede822b098b8db07a438ca437546dd3d046d1fc7ae79b230a848954054229be8a293ff8a6ba392e6c906e253c0f1c6431d70b86d1b8509a318c41c228e8e700f87df1acfb1c8ca7ed48cd1cc93870134f8c0cc5bb3d3b36e5c8548d14fac89f53888b7540896452745e25aa0626ef91900040000000000002500009100000000000100d971a9d93a79bc4227b5137a209d5ac204f4", 0xdb, 0x0, 0x0, 0xfffffffffffffffb)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYRESOCT, @ANYRES32=r6, @ANYRES32=r6, @ANYRES64=r5, @ANYBLOB="c1592a3862fa8ff27d8192abb19380289e95a770b71504a5007185a72b6f2cb298fe81df234be289be5f7193a62e6d2075438a36b513088e62d1d4564dd1d1757660dcf723ab1405eb2042f79ee1ac68198e44dfc8220a673d4b14c8677926814fb0ddababdb7dd46d4da5437fd80658ab77de74ac4e7c3df01a59ede953a4426f9060f61b6229ae3d6a1500beaeafc7b71ca6674136c54fb8c9f5a1d5253881b262b86bb520af3f2a2bfbffb2e272d4f4", @ANYRESOCT=r7, @ANYBLOB="6b1a612107b6c928170c124fa053cbaaadaa2e8b50189d6239522b393d95a3ac6dca7cd1eda553357672c5560beb1f362bccab10f794ec54c6bd176559cdc6cc1130eb17a49652c3f56a24d2bf24953e2b937253001b5b18945913389090072d84bd7446787ec8ad3617f75c208578f21ffae76892311a3e9284211f286a751e53e6080d6da24187ef26cef0d599a93a0ca56c44f82b48d5bb460af11ea63e0c0deaaab4082b6a085da5ec183b88cf5e2e002c173ef6d715c604954315493d53a50b92bf5cde8f92d55eaaea2e", @ANYRES64=r7, @ANYRESHEX=r8], 0x4c}}, 0x4c000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000017c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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"], &(0x7f0000001700)='syzkaller\x00'}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r9}, 0x10)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8)
close(r11)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x3, <r12=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="210000002440000000ee6f1e98a10e87b9ac9f89705df335560000006f036676028901e3c8777db5a4e66a63de22fc6c210be3927d76641d076532a231b9fc39c20e1f4cb6de5a54f981904c14b8bef575e10168770d552e8ebc0ae60dc5f314057c150d8178c3b0575c025d0007b5cc2425a748dc5ba17159089c1a1ad587d4bd0996f4242fcf733997ec3479d5fa7284aaee765d52f287a7c91f9a2923c2481ec979e4402faec9f49be031e0646a858c75279c45b60f3bc8b6d1220d7795133c87cbf5b234ea16fab29e", @ANYRES32=r12, @ANYRES64=r6], 0x20)
listen(r1, 0xfff)
r13 = accept4(r1, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000000c0))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x4d, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x700, 0x2100, 0x3}})

92.11987ms ago: executing program 3 (id=2557):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x3c, @private=0xa010100, 0x4e21, 0x2, 'wrr\x00', 0x20, 0xb53, 0x5a}, 0x2c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffc}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)

51.37889ms ago: executing program 0 (id=2183):
r0 = socket(0x10, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)
socket(0x10, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811204000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000c00)=0x3, 0x4) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x99, 0xc78f}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000) (async)

0s ago: executing program 3 (id=2558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x1010, r1, 0xc5c3b000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1)
setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)='S', 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000300), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1, 0x9}], 0x2c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r6)
bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x2}, 0x6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e24, 0x0, @remote}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9, 0x6]}}, 0x5c)

kernel console output (not intermixed with test programs):

d on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.708134][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.713300][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.715853][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.724716][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.755235][ T8257] hsr_slave_0: entered promiscuous mode
[  100.757681][ T8257] hsr_slave_1: entered promiscuous mode
[  100.759999][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.762574][ T8257] Cannot create hsr debugfs directory
[  100.767596][ T8279] netlink: 'syz.1.731': attribute type 12 has an invalid length.
[  100.770151][ T8279] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.731'.
[  100.892768][ T8283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.733'.
[  100.894729][ T8257] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.901735][ T8257] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.909236][ T8257] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.914187][ T8257] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.950851][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.954061][ T8257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.957225][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.960120][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.044223][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.060207][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.063093][ T8295] openvswitch: netlink: Multiple metadata blocks provided
[  101.063361][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.077156][ T8257] 8021q: adding VLAN 0 to HW filter on device team0
[  101.091264][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.093681][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.100200][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.102534][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.135462][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  101.183131][ T8305] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[  101.208446][ T8305] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  101.221353][ T8305] veth3: entered promiscuous mode
[  101.226163][ T8305] bond4: (slave veth3): Enslaving as a backup interface with a down link
[  101.244370][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.276488][ T8257] veth0_vlan: entered promiscuous mode
[  101.282173][ T8257] veth1_vlan: entered promiscuous mode
[  101.300150][ T8257] veth0_macvtap: entered promiscuous mode
[  101.306191][ T8257] veth1_macvtap: entered promiscuous mode
[  101.320457][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.326304][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.338166][ T8257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.341101][ T8257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.344617][ T8257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.347486][ T8257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.388567][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.391073][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.411120][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.415440][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.523528][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  101.572172][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  101.623143][ T8331] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  101.669942][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'.
[  101.752167][ T8342] unsupported nlmsg_type 40
[  101.768168][ T8342] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  102.313207][   T54] Bluetooth: hci3: command tx timeout
[  102.609894][ T8359] syzkaller1: entered allmulticast mode
[  102.938762][ T8380] trusted_key: syz.0.764 sent an empty control message without MSG_MORE.
[  103.428831][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.910113][ T8433] xt_hashlimit: size too large, truncated to 1048576
[  103.912775][ T8433] xt_hashlimit: overflow, try lower: 3/0
[  103.979649][ T8437] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  103.990567][ T8435] IPVS: stopping backup sync thread 8437 ...
[  104.219180][ T8448] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  104.239363][ T8448] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  104.242844][ T8448] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  104.395675][   T54] Bluetooth: hci3: command tx timeout
[  104.513636][ T8473] netlink: 'syz.3.791': attribute type 11 has an invalid length.
[  104.558687][ T8475] tipc: Failed to remove unknown binding: 66,1,1/0:2803077039/2803077041
[  104.562556][ T8475] tipc: Failed to remove unknown binding: 66,1,1/0:2803077039/2803077041
[  104.565691][ T8475] tipc: Failed to remove unknown binding: 66,1,1/0:2803077039/2803077041
[  104.861727][ T8492] __nla_validate_parse: 14 callbacks suppressed
[  104.861769][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'.
[  105.876483][ T8552] netlink: 'syz.0.817': attribute type 11 has an invalid length.
[  106.206444][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  106.218238][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'.
[  106.301967][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  106.335240][ T8579] DRBG: could not allocate digest TFM handle: hmac(sha384)
[  106.473628][   T54] Bluetooth: hci3: command tx timeout
[  107.620474][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.676612][ T8626] netlink: 64 bytes leftover after parsing attributes in process `syz.0.841'.
[  107.713470][ T8626] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  107.925967][ T8652] No such timeout policy "syz1"
[  108.035816][ T8671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  108.510591][ T8698] openvswitch: netlink: Multiple metadata blocks provided
[  108.554471][ T5220] Bluetooth: hci3: command tx timeout
[  109.106914][ T8725] openvswitch: netlink: Multiple metadata blocks provided
[  109.210636][ T8739] netlink: 27 bytes leftover after parsing attributes in process `syz.0.871'.
[  109.387322][ T8755] openvswitch: netlink: Multiple metadata blocks provided
[  109.421402][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'.
[  109.500344][ T8764] netlink: 'syz.1.882': attribute type 1 has an invalid length.
[  109.683695][ T8782] openvswitch: netlink: Multiple metadata blocks provided
[  109.766472][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'.
[  109.769767][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'.
[  110.030333][ T8801] netlink: 248 bytes leftover after parsing attributes in process `syz.1.895'.
[  110.112669][ T8811] openvswitch: netlink: Multiple metadata blocks provided
[  110.145858][ T8815] x_tables: duplicate underflow at hook 2
[  110.241880][ T8824] vxcan1: entered allmulticast mode
[  110.279187][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'.
[  110.311935][ T8832] openvswitch: netlink: Missing key (keys=40, expected=80)
[  110.317280][ T8833] openvswitch: netlink: Missing key (keys=40, expected=80)
[  110.342317][ T8835] openvswitch: netlink: Multiple metadata blocks provided
[  110.348477][ T8837] netlink: 104 bytes leftover after parsing attributes in process `syz.0.909'.
[  110.352915][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'.
[  110.396501][ T8843] vlan1: entered promiscuous mode
[  110.398245][ T8843] bond0: entered promiscuous mode
[  110.400612][ T8843] bond_slave_0: entered promiscuous mode
[  110.407672][ T8843] bond_slave_1: entered promiscuous mode
[  110.409574][ T8843] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  110.417113][ T8843] vlan1: entered allmulticast mode
[  110.418868][ T8843] bond0: entered allmulticast mode
[  110.420851][ T8843] bond_slave_0: entered allmulticast mode
[  110.428329][ T8843] bond_slave_1: entered allmulticast mode
[  110.430217][ T8843] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  110.548406][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'.
[  110.554864][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  110.566508][ T8860] xfrm1: entered promiscuous mode
[  110.569991][ T8860] xfrm1: entered allmulticast mode
[  110.670981][ T8870] openvswitch: netlink: Multiple metadata blocks provided
[  110.992272][ T8878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.920'.
[  111.577635][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'.
[  111.825945][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'.
[  111.847808][ T8932] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.863863][ T8932] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.867885][ T8932] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  111.872986][ T8932] bond1: (slave vti0): Error -95 calling set_mac_address
[  111.936182][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'.
[  111.970008][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[  112.058280][ T8950] dummy0: left allmulticast mode
[  112.060194][ T8950] bridge0: port 3(dummy0) entered disabled state
[  112.062704][ T8952] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.069544][ T8950] bridge_slave_0: left promiscuous mode
[  112.071385][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.079997][ T8950] bridge_slave_1: left allmulticast mode
[  112.082566][ T8950] bridge_slave_1: left promiscuous mode
[  112.089159][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.101863][ T8950] bond0: (slave bond_slave_0): Releasing backup interface
[  112.108358][ T8950] bond_slave_0: left promiscuous mode
[  112.110920][ T8950] bond_slave_0: left allmulticast mode
[  112.118973][ T8955] netlink: 'syz.0.945': attribute type 10 has an invalid length.
[  112.127162][ T8950] bond0: (slave bond_slave_1): Releasing backup interface
[  112.131321][ T8950] bond_slave_1: left promiscuous mode
[  112.137147][ T8950] bond_slave_1: left allmulticast mode
[  112.160928][ T8950] team0: Port device team_slave_0 removed
[  112.172354][ T8950] team0: Port device team_slave_1 removed
[  112.179267][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.182663][ T8950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.187683][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.190907][ T8950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.200146][ T8950] bond0: (slave wlan1): Releasing backup interface
[  112.203766][ T8950] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  112.208830][ T8950] bond4: (slave ip6gretap1): Releasing backup interface
[  112.211109][ T8950] bond4: (slave ip6gretap1): the permanent HWaddr of slave - d6:c4:25:84:0b:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  112.228544][ T8950] bond4: (slave veth3): Releasing backup interface
[  112.242062][ T8955] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  112.245737][ T8955] bond0: (slave wlan1): refused to change device type
[  112.255999][ T8959] netlink: 'syz.3.947': attribute type 4 has an invalid length.
[  112.530288][ T8980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.537648][ T8980] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  112.540880][ T8980] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  112.654939][ T8984] macsec2: entered promiscuous mode
[  112.673158][ T8984] macsec2: entered allmulticast mode
[  112.714484][ T8986] vlan0: entered promiscuous mode
[  112.774557][ T8991] veth5: entered promiscuous mode
[  113.654479][ T5894] tipc: Node number set to 1588978487
[  113.894370][ T9031] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.958571][ T9035] netlink: 'syz.0.970': attribute type 11 has an invalid length.
[  114.758264][ T9057] netlink: 'syz.0.979': attribute type 20 has an invalid length.
[  115.179543][ T9094] __nla_validate_parse: 12 callbacks suppressed
[  115.179553][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'.
[  115.194610][ T9094] netlink: 'syz.3.990': attribute type 1 has an invalid length.
[  115.194639][ T9095] netlink: 'syz.3.990': attribute type 1 has an invalid length.
[  115.272732][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.994'.
[  115.358501][ T9121] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  115.431816][ T9123] net_ratelimit: 5 callbacks suppressed
[  115.431828][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.476034][ T9129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1005'.
[  115.484209][ T9129] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1005'.
[  115.488193][ T9129] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1005'.
[  115.491610][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'.
[  115.573263][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'.
[  115.635963][ T9151] bridge2: the hash_elasticity option has been deprecated and is always 16
[  115.640299][ T9151] bridge2: entered allmulticast mode
[  115.695116][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'.
[  115.782947][ T9172] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1019'.
[  115.792648][ T9172] netlink: zone id is out of range
[  115.798206][ T9178] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  115.799468][ T9172] netlink: zone id is out of range
[  115.802521][ T9172] netlink: zone id is out of range
[  115.809002][ T9172] netlink: zone id is out of range
[  115.810813][ T9172] netlink: zone id is out of range
[  115.812635][ T9172] netlink: zone id is out of range
[  115.815416][ T9172] netlink: zone id is out of range
[  115.818076][ T9172] netlink: zone id is out of range
[  115.821035][ T9172] netlink: zone id is out of range
[  115.838050][ T9178] bond5: (slave gretap1): making interface the new active one
[  115.840954][ T9178] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  115.860221][ T9182] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  116.011903][ T9190] xt_CT: No such helper "snmp"
[  116.130457][ T9203] xt_CT: No such helper "snmp"
[  116.491383][ T9236] IPVS: set_ctl: invalid protocol: 58 172.20.20.64:20004
[  116.594616][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'.
[  116.680609][ T9252] tipc: Cannot configure node identity twice
[  116.683374][ T9252] tipc: Cannot configure node identity twice
[  117.081397][ T9279] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  117.246692][ T9297] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  117.249244][ T9297] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  117.644976][ T9334] netlink: 'syz.1.1072': attribute type 1 has an invalid length.
[  117.775832][ T9345] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1129335124)
[  117.779201][ T9345] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  117.850425][ T9354] ipvlan0: entered allmulticast mode
[  117.852723][ T9354] veth0_vlan: entered allmulticast mode
[  117.883196][ T9358] ipvlan0: left allmulticast mode
[  117.885084][ T9358] veth0_vlan: left allmulticast mode
[  117.890338][ T9359] netlink: 'syz.3.1082': attribute type 1 has an invalid length.
[  117.901934][ T9359] netlink: 'syz.3.1082': attribute type 3 has an invalid length.
[  117.918244][ T9359] NCSI netlink: No device for ifindex 246
[  117.946793][ T9359] xt_CT: No such helper "snmp_trap"
[  118.162724][ T9388] ip6tnl1: entered promiscuous mode
[  118.166672][ T9388] ip6tnl1: entered allmulticast mode
[  118.170762][ T9388] team0: Device ip6tnl1 is of different type
[  118.301021][ T9397] GUP no longer grows the stack in syz.3.1092 (9397): 200000006000-20000000a000 (200000005000)
[  118.306254][ T9397] CPU: 0 UID: 0 PID: 9397 Comm: syz.3.1092 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  118.306269][ T9397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.306274][ T9397] Call Trace:
[  118.306278][ T9397]  <TASK>
[  118.306283][ T9397]  dump_stack_lvl+0x189/0x250
[  118.306301][ T9397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.306311][ T9397]  ? __pfx__printk+0x10/0x10
[  118.306321][ T9397]  ? find_vma+0xe7/0x160
[  118.306337][ T9397]  __get_user_pages+0x2a60/0x30b0
[  118.306362][ T9397]  ? __pfx___get_user_pages+0x10/0x10
[  118.306370][ T9397]  ? __gup_longterm_locked+0xbf7/0x15b0
[  118.306378][ T9397]  ? down_read_killable+0x1d1/0x350
[  118.306387][ T9397]  ? try_get_folio+0x633/0x660
[  118.306397][ T9397]  __gup_longterm_locked+0xd66/0x15b0
[  118.306408][ T9397]  ? try_grab_folio_fast+0x1be/0x4f0
[  118.306421][ T9397]  ? gup_fast_fallback+0x1afc/0x2260
[  118.306431][ T9397]  gup_fast_fallback+0x1cd4/0x2260
[  118.306479][ T9397]  ? __pfx_gup_fast_fallback+0x10/0x10
[  118.306488][ T9397]  ? trace_contention_end+0x39/0x120
[  118.306500][ T9397]  ? __mutex_lock+0x330/0xe80
[  118.306508][ T9397]  ? futex_unqueue+0x22/0x240
[  118.306519][ T9397]  ? futex_unqueue+0x22/0x240
[  118.306528][ T9397]  ? futex_unqueue+0x22/0x240
[  118.306537][ T9397]  ? is_valid_gup_args+0x11f/0x200
[  118.306546][ T9397]  ? get_user_pages_fast+0x4d/0xb0
[  118.306556][ T9397]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  118.306569][ T9397]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  118.306581][ T9397]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  118.306591][ T9397]  ? wait_for_space+0x24d/0x2d0
[  118.306601][ T9397]  iov_iter_get_pages2+0x5e/0xa0
[  118.306611][ T9397]  __se_sys_vmsplice+0x548/0x10d0
[  118.306629][ T9397]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  118.306639][ T9397]  ? __pfx_futex_wait+0x10/0x10
[  118.306668][ T9397]  ? rcu_is_watching+0x15/0xb0
[  118.306679][ T9397]  ? do_syscall_64+0xbe/0x3b0
[  118.306689][ T9397]  do_syscall_64+0xfa/0x3b0
[  118.306695][ T9397]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.306706][ T9397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.306712][ T9397]  ? exc_page_fault+0x9f/0xf0
[  118.306724][ T9397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.306730][ T9397] RIP: 0033:0x7f2a9e98e929
[  118.306739][ T9397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.306745][ T9397] RSP: 002b:00007f2a9f74d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  118.306754][ T9397] RAX: ffffffffffffffda RBX: 00007f2a9ebb5fa0 RCX: 00007f2a9e98e929
[  118.306759][ T9397] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  118.306763][ T9397] RBP: 00007f2a9ea10b39 R08: 0000000000000000 R09: 0000000000000000
[  118.306768][ T9397] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  118.306772][ T9397] R13: 0000000000000000 R14: 00007f2a9ebb5fa0 R15: 00007ffe3b4d2258
[  118.306783][ T9397]  </TASK>
[  118.541682][ T9402] bridge0: entered allmulticast mode
[  118.722287][ T9416] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  118.725239][ T9416] team0: Device ipvlan2 is already an upper device of the team interface
[  118.770479][ T9417] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (436207616)
[  118.965185][ T9429] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  119.466257][ T9468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.470384][ T9468] syzkaller0: entered promiscuous mode
[  119.472325][ T9468] syzkaller0: entered allmulticast mode
[  119.489776][ T9468] tipc: Resetting bearer <eth:syzkaller0>
[  119.493363][ T9466] tipc: Resetting bearer <eth:syzkaller0>
[  119.502486][ T9466] tipc: Disabling bearer <eth:syzkaller0>
[  119.901651][ T9486] xt_hashlimit: max too large, truncated to 1048576
[  120.295445][ T9505] __nla_validate_parse: 36 callbacks suppressed
[  120.295463][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'.
[  120.302509][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'.
[  120.453938][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  120.493545][ T9513] netlink: 'syz.1.1130': attribute type 1 has an invalid length.
[  120.512156][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'.
[  120.534537][ T9514] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  120.596148][ T9523] netlink: 'syz.1.1133': attribute type 21 has an invalid length.
[  120.613262][ T9523] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.616541][ T9523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  120.619495][ T9523] IPv6: NLM_F_CREATE should be set when creating new route
[  120.622486][ T9523] IPv6: NLM_F_CREATE should be set when creating new route
[  120.625562][ T9523] IPv6: NLM_F_CREATE should be set when creating new route
[  120.672021][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'.
[  120.679138][ T9526] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1134'.
[  121.189524][ T9540] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1139'.
[  121.225136][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'.
[  123.649680][ T9543] netlink: 'syz.1.1140': attribute type 21 has an invalid length.
[  123.651089][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'.
[  123.652681][ T9543] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1140'.
[  123.693173][ T9543] netlink: 'syz.1.1140': attribute type 4 has an invalid length.
[  123.695786][ T9543] netlink: 'syz.1.1140': attribute type 3 has an invalid length.
[  123.811110][  T790] hid-generic 0005:0000:0005.0001: item fetching failed at offset 0/3
[  123.818793][  T790] hid-generic 0005:0000:0005.0001: probe with driver hid-generic failed with error -22
[  123.824501][ T9562] SET target dimension over the limit!
[  123.826835][ T9559] SET target dimension over the limit!
[  123.921748][ T9573] syz_tun: entered allmulticast mode
[  123.956535][ T9581] syz_tun: left allmulticast mode
[  124.428918][ T9623] vlan0: left promiscuous mode
[  124.458721][ T9623] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  124.707726][ T9644] netlink: 'syz.0.1172': attribute type 1 has an invalid length.
[  124.799514][ T9654] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  124.837783][ T9654] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.867045][ T9657] vxcan1 (unregistering): left allmulticast mode
[  124.984803][ T9654] veth3: entered promiscuous mode
[  125.000949][ T9662] erspan0: entered allmulticast mode
[  125.318600][ T9679] __nla_validate_parse: 17 callbacks suppressed
[  125.318621][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'.
[  125.336260][ T9685] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  125.418221][ T9691] netlink: 'syz.3.1185': attribute type 11 has an invalid length.
[  125.491010][ T9697] netlink: 'syz.3.1187': attribute type 24 has an invalid length.
[  125.688144][ T9708] net_ratelimit: 13 callbacks suppressed
[  125.688154][ T9708] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  125.747280][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'.
[  126.059755][ T9729] netlink: 'syz.3.1200': attribute type 3 has an invalid length.
[  126.067999][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'.
[  126.071853][ T9729] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  126.075739][ T9729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.108110][ T9733] x_tables: ip_tables: udp match: only valid for protocol 17
[  126.355476][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'.
[  126.582443][ T9757] netlink: 'syz.1.1210': attribute type 2 has an invalid length.
[  126.590764][ T9757] netlink: 'syz.1.1210': attribute type 4 has an invalid length.
[  126.695784][ T9768] netlink: 'syz.0.1214': attribute type 1 has an invalid length.
[  126.747379][ T9768] 8021q: adding VLAN 0 to HW filter on device bond6
[  126.771043][ T9776] bond6: (slave bridge3): making interface the new active one
[  126.784688][ T9776] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  126.802639][ T9768] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  126.897477][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1217'.
[  126.994872][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'.
[  127.246186][ T9805] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1226'.
[  127.388094][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'.
[  127.511033][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'.
[  127.567367][ T9832] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1235'.
[  127.799407][ T9847] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  128.274106][ T9872] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.438276][ T9885] tun0: tun_chr_ioctl cmd 1074025675
[  128.440731][ T9885] tun0: persist enabled
[  128.442813][ T9885] tun0: tun_chr_ioctl cmd 1074025675
[  128.445793][ T9885] tun0: persist disabled
[  128.728266][ T9905] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  128.878682][ T9912] geneve2: entered allmulticast mode
[  128.965658][   T10] IPVS: starting estimator thread 0...
[  129.063344][ T9919] IPVS: using max 40 ests per chain, 96000 per kthread
[  129.131714][   T12] IPVS: stop unused estimator thread 0...
[  129.656046][ T9975] sctp: [Deprecated]: syz.3.1278 (pid 9975) Use of int in maxseg socket option.
[  129.656046][ T9975] Use struct sctp_assoc_value instead
[  129.777815][ T9987] openvswitch: netlink: Flow actions attr not present in new flow.
[  129.878977][ T9991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  130.011805][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.015724][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.027581][ T9999] validate_nla: 5 callbacks suppressed
[  130.027596][ T9999] netlink: 'syz.3.1285': attribute type 5 has an invalid length.
[  130.124262][T10009] lo speed is unknown, defaulting to 1000
[  130.128264][T10009] lo speed is unknown, defaulting to 1000
[  130.135174][T10009] lo speed is unknown, defaulting to 1000
[  130.228634][T10018] netlink: 'syz.3.1293': attribute type 3 has an invalid length.
[  130.231882][T10018] netlink: 'syz.3.1293': attribute type 3 has an invalid length.
[  130.247610][T10009] infiniband syz2: set active
[  130.250576][ T5894] lo speed is unknown, defaulting to 1000
[  130.252595][T10009] infiniband syz2: added lo
[  130.281428][T10009] RDS/IB: syz2: added
[  130.283629][T10009] smc: adding ib device syz2 with port count 1
[  130.285992][T10009] smc:    ib device syz2 port 1 has pnetid 
[  130.292930][ T5894] lo speed is unknown, defaulting to 1000
[  130.296327][T10009] lo speed is unknown, defaulting to 1000
[  130.327873][T10023] syzkaller1: entered promiscuous mode
[  130.330336][T10023] syzkaller1: entered allmulticast mode
[  130.474274][T10027] __nla_validate_parse: 12 callbacks suppressed
[  130.474286][T10027] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1297'.
[  130.537473][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'.
[  130.558266][T10034] netlink: 'syz.0.1300': attribute type 1 has an invalid length.
[  130.561579][T10034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1300'.
[  130.567170][T10009] lo speed is unknown, defaulting to 1000
[  130.637396][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  130.692909][T10009] lo speed is unknown, defaulting to 1000
[  130.730632][T10048] netlink: 'syz.3.1305': attribute type 9 has an invalid length.
[  130.735217][T10048] netlink: 'syz.3.1305': attribute type 6 has an invalid length.
[  130.817081][T10009] lo speed is unknown, defaulting to 1000
[  131.133337][ T5878] IPVS: starting estimator thread 0...
[  131.223362][T10078] IPVS: using max 51 ests per chain, 122400 per kthread
[  131.291515][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.296759][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.301060][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.308357][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.327058][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.330810][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1319'.
[  131.708405][T10123] batman_adv: batadv0: Adding interface: gretap2
[  131.713817][T10123] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.727139][T10123] batman_adv: batadv0: Interface activated: gretap2
[  131.793120][T10132] netlink: 'syz.1.1333': attribute type 29 has an invalid length.
[  131.975214][T10148] netlink: 'syz.1.1338': attribute type 3 has an invalid length.
[  132.028527][T10152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.097733][T10155] netlink: 'syz.1.1341': attribute type 19 has an invalid length.
[  132.136844][T10155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  132.140083][T10155] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  132.190311][T10161] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  132.205889][    T9] lo speed is unknown, defaulting to 1000
[  132.209457][    T9] syz2: Port: 1 Link DOWN
[  132.211750][    T9] lo speed is unknown, defaulting to 1000
[  132.547413][T10179] xt_ecn: cannot match TCP bits for non-tcp packets
[  132.587150][T10179] syzkaller0: entered allmulticast mode
[  132.730313][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  134.017074][T10217] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  134.098215][T10224] lo: entered promiscuous mode
[  134.102080][T10223] lo: left promiscuous mode
[  134.240008][T10238] lo speed is unknown, defaulting to 1000
[  134.328007][T10242] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.330944][T10242] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.388643][T10244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.419006][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.429437][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.494796][T10242] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.498235][T10242] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.501892][T10242] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.506829][T10242] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.635213][T10249] bond7: entered promiscuous mode
[  135.637931][T10249] 8021q: adding VLAN 0 to HW filter on device bond7
[  136.116939][T10279] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  136.121509][T10281] netlink: 'syz.0.1379': attribute type 1 has an invalid length.
[  136.235949][T10289] Unsupported ieee802154 address type: 0
[  136.311534][T10295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.319133][T10295] syzkaller0: entered promiscuous mode
[  136.321364][T10295] syzkaller0: entered allmulticast mode
[  136.338078][T10295] sit2: entered promiscuous mode
[  136.344459][T10295] __nla_validate_parse: 12 callbacks suppressed
[  136.344472][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'.
[  136.362972][T10295] sch_fq: defrate 257 ignored.
[  136.370453][T10295] tipc: Resetting bearer <eth:syzkaller0>
[  136.379546][T10294] tipc: Resetting bearer <eth:syzkaller0>
[  136.392817][T10294] tipc: Disabling bearer <eth:syzkaller0>
[  137.033295][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.040025][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.229702][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1395'.
[  137.243492][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'.
[  138.401886][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'.
[  138.482365][T10379] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1414'.
[  138.552365][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1417'.
[  138.631164][T10392] netlink: 'syz.1.1420': attribute type 1 has an invalid length.
[  138.635202][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'.
[  138.659108][T10392] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1420'.
[  138.838308][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  138.845508][T10394] xt_TPROXY: Can be used only with -p tcp or -p udp
[  138.979614][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'.
[  139.071110][T10415] netlink: 'syz.0.1427': attribute type 2 has an invalid length.
[  139.356357][T10448] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.441971][T10455] lo speed is unknown, defaulting to 1000
[  139.919364][T10463] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  140.023854][T10466] nbd3: detected capacity change from 0 to 63
[  140.028060][T10470] block nbd3: NBD_DISCONNECT
[  140.031263][T10470] block nbd3: Disconnected due to user request.
[  140.035719][T10470] block nbd3: shutting down sockets
[  140.107059][T10473] tipc: Resetting bearer <eth:syzkaller0>
[  140.125860][T10473] tipc: Resetting bearer <eth:syzkaller0>
[  140.167736][T10475] lo speed is unknown, defaulting to 1000
[  140.197362][T10483] netlink: 'syz.3.1443': attribute type 29 has an invalid length.
[  140.212199][T10483] netlink: 'syz.3.1443': attribute type 29 has an invalid length.
[  140.375288][T10490] netlink: 'syz.0.1447': attribute type 11 has an invalid length.
[  140.465444][T10493] netlink: 'syz.1.1448': attribute type 2 has an invalid length.
[  140.469189][T10493] netlink: 'syz.1.1448': attribute type 1 has an invalid length.
[  140.495729][T10496] netlink: 'syz.3.1449': attribute type 9 has an invalid length.
[  140.588561][T10499] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  140.760720][T10494] lo speed is unknown, defaulting to 1000
[  141.065046][T10535] bridge_slave_0: left allmulticast mode
[  141.067087][T10535] bridge_slave_0: left promiscuous mode
[  141.069721][T10535] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.077847][T10535] bridge_slave_1: left allmulticast mode
[  141.079856][T10535] bridge_slave_1: left promiscuous mode
[  141.081786][T10535] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.087711][T10535] bond0: (slave bond_slave_0): Releasing backup interface
[  141.092596][T10535] bond0: (slave bond_slave_1): Releasing backup interface
[  141.102170][T10535] team0: Port device team_slave_0 removed
[  141.108542][T10535] team0: Port device team_slave_1 removed
[  141.110666][T10535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.114847][T10535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.247185][T10543] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  141.279708][T10543] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  141.448177][T10555] validate_nla: 2 callbacks suppressed
[  141.448194][T10555] netlink: 'syz.1.1465': attribute type 1 has an invalid length.
[  141.556251][T10563] __nla_validate_parse: 11 callbacks suppressed
[  141.556267][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'.
[  141.561684][T10563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1466'.
[  141.566521][T10555] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  141.794967][T10585] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.802637][T10585] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.806186][T10585] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.809836][T10585] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.901781][T10592] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.957659][T10592] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.014410][T10592] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.095248][T10592] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.162010][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'.
[  142.195433][T10592] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.215688][T10592] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.241379][T10592] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.258854][T10592] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.305278][T10622] netlink: 'syz.3.1482': attribute type 1 has an invalid length.
[  142.308888][T10622] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1482'.
[  142.312855][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'.
[  142.320322][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'.
[  142.356137][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'.
[  142.402179][T10628] tipc: Enabled bearer <eth:gre0>, priority 10
[  142.452703][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'.
[  142.460037][T10633] openvswitch: netlink: Flow key attr not present in new flow.
[  142.582127][T10639] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.1489'.
[  142.772745][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'.
[  142.784170][T10655] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.787677][T10655] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.791137][T10655] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.795170][T10655] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.365567][T10692] netlink: 'syz.3.1508': attribute type 1 has an invalid length.
[  143.429575][T10703] ip6tnl1: entered promiscuous mode
[  143.431283][T10703] ip6tnl1: entered allmulticast mode
[  143.437393][T10705] delete_channel: no stack
[  143.513442][  T790] tipc: Node number set to 3538095744
[  143.537400][   T33] audit: type=1800 audit(1752288883.249:2): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1515" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2634 res=0 errno=0
[  143.551682][   T33] audit: type=1804 audit(1752288883.259:3): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1515" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=2634 res=1 errno=0
[  144.370668][T10733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.613770][   T33] audit: type=1800 audit(1752288884.329:4): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1523" name="memory.events" dev="tmpfs" ino=2651 res=0 errno=0
[  144.625508][T10744] net veth1_virt_wifi : renamed from virt_wifi0
[  144.671484][T10750] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  144.688499][T10750] netlink: 'syz.0.1526': attribute type 16 has an invalid length.
[  144.691645][T10750] netlink: 'syz.0.1526': attribute type 17 has an invalid length.
[  144.764207][T10750] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.769089][T10750] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.781313][T10750] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.799951][T10750] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  144.864250][T10760] erspan0: left allmulticast mode
[  144.888819][T10760] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.892580][T10760] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.896348][T10760] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.899825][T10760] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.907769][T10760] ip6tnl1: left promiscuous mode
[  144.909840][T10760] ip6tnl1: left allmulticast mode
[  145.123241][T10766] netlink: 'syz.3.1530': attribute type 5 has an invalid length.
[  145.296194][T10780] tun0: tun_chr_ioctl cmd 1074025677
[  145.298427][T10780] tun0: linktype set to 773
[  145.347816][T10783] openvswitch: netlink: nsh attr 0 has unexpected len 5119 expected 0
[  145.350836][T10783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.640846][T10802] sch_fq: defrate 0 ignored.
[  145.729936][T10806] 8021q: VLANs not supported on ip_vti0
[  145.849671][T10820] netem: incorrect ge model size
[  145.851922][T10820] netem: change failed
[  145.940251][T10826] set match dimension is over the limit!
[  146.132763][T10831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.137141][T10831] syzkaller0: entered promiscuous mode
[  146.139510][T10831] syzkaller0: entered allmulticast mode
[  146.164694][T10831] tipc: Resetting bearer <eth:syzkaller0>
[  146.169483][T10830] tipc: Resetting bearer <eth:syzkaller0>
[  146.180374][T10830] tipc: Disabling bearer <eth:syzkaller0>
[  146.485112][T10850] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  146.585412][T10858] __nla_validate_parse: 15 callbacks suppressed
[  146.585429][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'.
[  147.004973][T10887] bridge1: entered promiscuous mode
[  147.007384][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  147.080035][T10894] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.093533][T10894] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.108736][T10894] tipc: Resetting bearer <eth:syzkaller0>
[  147.152220][T10898] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1574'.
[  147.230744][T10904] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  147.355680][T10906] raw_sendmsg: syz.0.1578 forgot to set AF_INET. Fix it!
[  147.388898][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  147.412020][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[  147.469770][T10927] lo speed is unknown, defaulting to 1000
[  147.596456][T10941] sock: sock_timestamping_bind_phc: sock not bind to device
[  147.599703][T10940] sock: sock_timestamping_bind_phc: sock not bind to device
[  147.656112][T10944] netlink: 'syz.0.1591': attribute type 58 has an invalid length.
[  147.658880][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'.
[  147.929574][T10959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1595'.
[  147.944245][T10960] vlan0: entered promiscuous mode
[  147.946459][T10960] bond0: entered promiscuous mode
[  147.952773][T10960] bond0: (slave vlan0): Opening slave failed
[  147.960755][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'.
[  147.982808][T10959] lo speed is unknown, defaulting to 1000
[  148.338282][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'.
[  148.431422][T10970] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1599'.
[  148.438547][T10970] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.777524][T10984] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[  148.779168][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.800137][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.891198][T10987] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  149.474097][T10997] netlink: 'syz.0.1609': attribute type 30 has an invalid length.
[  149.544535][T11006] bpf setsockopt: ignoring program buffer with optlen=4896 (max_optlen=4096)
[  149.548683][T11006] xt_cgroup: path and classid specified
[  149.667965][T11017] ip6tnl3: entered promiscuous mode
[  149.766310][T11028] sctp: [Deprecated]: syz.0.1620 (pid 11028) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.766310][T11028] Use struct sctp_sack_info instead
[  149.782629][T11031] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  149.906126][T11040] netlink: 'syz.0.1624': attribute type 2 has an invalid length.
[  149.928201][T11043] netlink: 'syz.1.1625': attribute type 1 has an invalid length.
[  149.930921][T11043] netlink: 'syz.1.1625': attribute type 2 has an invalid length.
[  151.091736][T11046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.359061][T11076] lo speed is unknown, defaulting to 1000
[  151.451710][T11089] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  151.656551][T11104] __nla_validate_parse: 15 callbacks suppressed
[  151.656569][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  151.660313][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'.
[  151.762477][T11107] lo speed is unknown, defaulting to 1000
[  152.099334][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1645'.
[  152.158599][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'.
[  152.285841][T11132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.426987][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.589104][T11153] syzkaller0: entered promiscuous mode
[  152.591492][T11153] syzkaller0: entered allmulticast mode
[  152.827483][T11163] block nbd0: server does not support multiple connections per device.
[  152.835461][T11163] block nbd0: shutting down sockets
[  152.842370][T11172] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  152.912503][T11183] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1664'.
[  152.942011][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'.
[  152.948339][T11173] macvlan0: entered allmulticast mode
[  152.951683][T11173] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  152.955776][T11173] netlink: 'syz.0.1662': attribute type 2 has an invalid length.
[  152.968052][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'.
[  152.997983][T11185] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.065518][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'.
[  153.110171][T11199] tipc: Enabling of bearer <et:g> rejected, media not registered
[  153.374803][T11212] bridge5: entered allmulticast mode
[  153.554997][T11233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1679'.
[  153.601904][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'.
[  153.644826][T11237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.698867][T11239] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  153.801876][T11241] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  153.979253][T11249] ieee802154 phy1 wpan1: encryption failed: -22
[  154.001103][T11249] netlink: 'syz.3.1687': attribute type 4 has an invalid length.
[  154.011443][T11251] bridge7: the hash_elasticity option has been deprecated and is always 16
[  154.015492][T11251] bridge7: entered allmulticast mode
[  154.018305][T11249] netlink: 'syz.3.1687': attribute type 4 has an invalid length.
[  154.078266][ T6048] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  154.473270][T11300] netlink: 'syz.1.1701': attribute type 26 has an invalid length.
[  154.625485][T11311] xt_CT: No such helper "syz0"
[  154.675197][T11309] dvmrp8: entered allmulticast mode
[  154.679386][T11306] dvmrp8: left allmulticast mode
[  154.849038][T11336] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  154.858344][T11336] vti0: entered promiscuous mode
[  155.041445][T11356] netlink: 'syz.3.1720': attribute type 1 has an invalid length.
[  155.239732][T11375] netlink: 'syz.0.1725': attribute type 3 has an invalid length.
[  155.424990][T11404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.427272][T11404] IPv6: NLM_F_CREATE should be set when creating new route
[  155.429643][T11406] ieee802154 phy1 wpan1: encryption failed: -90
[  155.432628][T11406] netlink: 'syz.1.1734': attribute type 2 has an invalid length.
[  155.482592][T11412] netlink: 'syz.3.1735': attribute type 4 has an invalid length.
[  155.527201][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.610074][T11423] sit0: entered promiscuous mode
[  156.847876][T11536] 8021q: VLANs not supported on nlmon0
[  156.887102][T11540] __nla_validate_parse: 27 callbacks suppressed
[  156.887116][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'.
[  156.968207][T11538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.976174][T11538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1775'.
[  157.437573][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1785'.
[  157.478713][T11570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1787'.
[  157.490458][T11570] SET target dimension over the limit!
[  157.614767][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  157.672560][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1792'.
[  157.694899][T11590] lo speed is unknown, defaulting to 1000
[  157.750980][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[  157.755212][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'.
[  157.853975][T11598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.052380][T11614] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1799'.
[  158.090849][T11616] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1800'.
[  158.176723][T11619] validate_nla: 9 callbacks suppressed
[  158.176738][T11619] netlink: 'syz.3.1801': attribute type 1 has an invalid length.
[  158.183479][T11619] netlink: 'syz.3.1801': attribute type 2 has an invalid length.
[  158.909842][T11647] bond0: entered promiscuous mode
[  158.921315][T11647] bond0: left promiscuous mode
[  159.382421][T11677] bridge0: left allmulticast mode
[  159.650953][T11704] sctp: [Deprecated]: syz.0.1827 (pid 11704) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.650953][T11704] Use struct sctp_sack_info instead
[  159.721733][T11714] netlink: 'syz.3.1830': attribute type 2 has an invalid length.
[  159.768954][T11716] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  159.808169][T11722] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  159.870352][T11728] pim6reg: entered allmulticast mode
[  159.874653][T11728] pim6reg: left allmulticast mode
[  159.889225][T11730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.942708][T11732] blkio.reset_stats is deprecated
[  159.948392][T11732] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.041795][T11738] netlink: 'syz.3.1840': attribute type 1 has an invalid length.
[  160.220869][T11754] bridge0: port 1(ipvlan2) entered blocking state
[  160.224943][T11754] bridge0: port 1(ipvlan2) entered disabled state
[  160.227901][T11754] ipvlan2: entered allmulticast mode
[  160.230172][T11754] bridge0: entered allmulticast mode
[  160.236011][T11754] ipvlan2: left allmulticast mode
[  160.238627][T11754] bridge0: left allmulticast mode
[  160.551784][T11773] netlink: 'syz.1.1854': attribute type 21 has an invalid length.
[  160.874849][T11786] netlink: 'syz.1.1857': attribute type 1 has an invalid length.
[  161.191388][T11801] openvswitch: netlink: Flow actions attr not present in new flow.
[  161.296123][T11804] lo speed is unknown, defaulting to 1000
[  161.439717][T11811] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.568839][T11820] netlink: 'syz.0.1869': attribute type 8 has an invalid length.
[  168.543872][T11853] veth3: entered promiscuous mode
[  168.551826][T11856] __nla_validate_parse: 27 callbacks suppressed
[  168.551840][T11856] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1880'.
[  168.566320][T11856] netlink: zone id is out of range
[  168.568531][T11856] netlink: zone id is out of range
[  168.571172][T11856] netlink: zone id is out of range
[  168.584272][T11856] netlink: zone id is out of range
[  168.586401][T11856] netlink: zone id is out of range
[  168.595938][T11856] netlink: zone id is out of range
[  168.598020][T11856] netlink: zone id is out of range
[  168.600044][T11856] netlink: zone id is out of range
[  168.607269][T11856] netlink: zone id is out of range
[  168.609445][T11856] netlink: zone id is out of range
[  168.669805][T11870] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  168.680993][T11869] Unsupported ieee802154 address type: 0
[  168.684820][T11872] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  168.910005][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'.
[  168.999246][T11900] batadv_slave_1: entered promiscuous mode
[  169.002771][T11900] netlink: 'syz.0.1893': attribute type 1 has an invalid length.
[  169.054956][T11908] xt_time: unknown flags 0x4
[  169.119998][T11900] SET target dimension over the limit!
[  169.147325][T11899] batadv_slave_1: left promiscuous mode
[  169.296904][T11931] bond5: entered promiscuous mode
[  169.298937][T11931] bond5: entered allmulticast mode
[  169.301326][T11931] 8021q: adding VLAN 0 to HW filter on device bond5
[  169.543194][T11954] netlink: 'syz.0.1903': attribute type 1 has an invalid length.
[  169.550636][T11954] netlink: 'syz.0.1903': attribute type 3 has an invalid length.
[  169.554848][T11954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1903'.
[  169.557886][T11954] NCSI netlink: No device for ifindex 246
[  169.679668][T11966] dvmrp0: entered allmulticast mode
[  169.779541][T11972] netlink: 'syz.3.1907': attribute type 3 has an invalid length.
[  169.782740][T11972] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1907'.
[  169.930145][T11990] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  170.129763][T11999] netlink: 'syz.0.1912': attribute type 1 has an invalid length.
[  170.346771][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1920'.
[  170.361257][T12024] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  170.397873][T12025] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1919'.
[  170.670551][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'.
[  170.676710][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'.
[  170.769164][T12036] tap0: tun_chr_ioctl cmd 1074025678
[  170.771126][T12036] tap0: group set to 0
[  170.851729][T12038] netlink: 'syz.3.1925': attribute type 1 has an invalid length.
[  170.872765][T12038] bond6: (slave bridge3): making interface the new active one
[  170.876973][T12038] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  170.881988][T12038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'.
[  170.885764][T12038] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1925'.
[  171.043403][T12049] netlink: 'syz.3.1928': attribute type 1 has an invalid length.
[  171.057982][T12045] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.062569][T12045] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.127200][T12045] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.133065][T12045] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.231438][T12045] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.238636][T12045] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.262028][T12058] block nbd3: not configured, cannot reconfigure
[  171.351202][T12045] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.359478][T12045] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.383563][T12066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.391014][T12066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.398031][T12066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.401771][T12066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.406057][T12066] geneve2: entered promiscuous mode
[  171.500040][T12045] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.507276][T12045] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.531589][T12045] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.535065][T12045] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.555863][T12045] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.559042][T12045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.587321][T12045] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.601134][T12045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.795994][T12105] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  171.799658][T12105] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  171.820847][T12102] smc: net device bond0 applied user defined pnetid SYZ2
[  171.824794][T12102] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2
[  171.828154][T12102] smc: net device bond0 erased user defined pnetid SYZ2
[  171.831079][T12102] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2
[  171.841579][T12101] delete_channel: no stack
[  172.039979][T12128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.042455][T12128] IPv6: NLM_F_CREATE should be set when creating new route
[  172.044798][T12128] IPv6: NLM_F_CREATE should be set when creating new route
[  172.244002][T12145] netlink: 'syz.1.1962': attribute type 9 has an invalid length.
[  172.403169][T12169] netlink: 'syz.3.1969': attribute type 1 has an invalid length.
[  172.442262][T12172] smc: net device bond0 applied user defined pnetid SYZ2
[  172.446982][T12173] netlink: 'syz.3.1971': attribute type 11 has an invalid length.
[  172.557874][T12184] lo speed is unknown, defaulting to 1000
[  172.697018][T12183] lo speed is unknown, defaulting to 1000
[  172.898680][T12204] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.040008][T12216] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  173.448989][   T33] audit: type=1800 audit(1752288913.159:5): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1999" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2125 res=0 errno=0
[  173.460351][   T33] audit: type=1804 audit(1752288913.159:6): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1999" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2125 res=1 errno=0
[  173.629367][T12269] 8021q: adding VLAN 0 to HW filter on device bond7
[  173.667951][T12269] bond7: (slave gretap2): making interface the new active one
[  173.671584][T12269] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  173.816009][T12291] xt_TPROXY: Can be used only with -p tcp or -p udp
[  173.915093][T12299] __nla_validate_parse: 16 callbacks suppressed
[  173.915107][T12299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2011'.
[  173.920978][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2013'.
[  174.016551][T12309] pim6reg1: entered promiscuous mode
[  174.018560][T12309] pim6reg1: entered allmulticast mode
[  174.044280][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'.
[  174.104340][T12318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2016'.
[  174.138193][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2017'.
[  174.165707][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'.
[  174.169524][T12322] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2018'.
[  174.977528][T12339] x_tables: unsorted entry at hook 1
[  175.014734][T12341] validate_nla: 1 callbacks suppressed
[  175.014744][T12341] netlink: 'syz.3.2026': attribute type 1 has an invalid length.
[  175.019308][T12341] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2026'.
[  175.368007][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'.
[  175.571610][T12383] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.2041'.
[  175.575450][T12385] ipvlan0: entered promiscuous mode
[  175.584902][T12383] tipc: Resetting bearer <eth:gre0>
[  175.591213][   T33] audit: type=1107 audit(1752288915.299:7): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6'
[  175.710087][T12397] IPv6: sit2: Disabled Multicast RS
[  175.717325][T12397] netlink: 'syz.3.2044': attribute type 1 has an invalid length.
[  176.119382][T12431] net_ratelimit: 76 callbacks suppressed
[  176.119396][T12431] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  176.404756][T12443] rdma_rxe: rxe_newlink: failed to add vxcan1
[  176.535622][T12453] netlink: 'syz.3.2061': attribute type 3 has an invalid length.
[  176.538620][T12453] netlink: 'syz.3.2061': attribute type 3 has an invalid length.
[  176.715185][T12471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.870718][T12485] tipc: Started in network mode
[  176.872692][T12485] tipc: Node identity 0ebdc05eff45, cluster identity 4711
[  176.876457][T12485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.907135][T12488] tipc: Disabling bearer <eth:syzkaller0>
[  177.362702][T12529] ip6gre1: entered allmulticast mode
[  177.565179][T12551] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  177.569489][T12549] lo speed is unknown, defaulting to 1000
[  177.570051][T12551] : renamed from bond_slave_1
[  177.714865][T12557] netlink: 'syz.3.2092': attribute type 7 has an invalid length.
[  177.862180][T12563] bond0: option fail_over_mac: invalid value (9)
[  178.081693][T12577] netlink: 'syz.0.2096': attribute type 83 has an invalid length.
[  178.303460][T12587] lo speed is unknown, defaulting to 1000
[  178.498488][T12598] netlink: 'syz.1.2103': attribute type 10 has an invalid length.
[  178.542716][T12598] team0: Cannot enslave team device to itself
[  178.611112][T12606] xt_cluster: node mask cannot exceed total number of nodes
[  178.741611][T12611] netlink: 'syz.3.2107': attribute type 4 has an invalid length.
[  178.762973][T12612] netlink: 'syz.3.2107': attribute type 4 has an invalid length.
[  178.769005][T12611] netlink: 'syz.3.2107': attribute type 4 has an invalid length.
[  178.892048][T12618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.939421][T12620] __nla_validate_parse: 99 callbacks suppressed
[  178.939435][T12620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2111'.
[  178.950497][T12621] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2111'.
[  179.121185][T12626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.196389][T12624] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2112'.
[  179.293246][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2115'.
[  179.297354][T12634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2115'.
[  179.402524][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2118'.
[  179.549154][T12644] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  179.560222][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'.
[  179.754026][T12659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.763312][ T5831] Bluetooth: hci3: command 0x0405 tx timeout
[  179.937142][T12683] tc_dump_action: action bad kind
[  180.078299][T12692] vlan3: entered promiscuous mode
[  180.080124][T12692] vlan3: entered allmulticast mode
[  180.187576][T12697] lo speed is unknown, defaulting to 1000
[  180.379779][T12714] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  180.732474][T12737] lo speed is unknown, defaulting to 1000
[  180.776857][T12739] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  180.874111][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  180.883498][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  180.991103][T12754] Bluetooth: MGMT ver 1.23
[  181.501744][T12776] netlink: 720 bytes leftover after parsing attributes in process `syz.3.2157'.
[  181.517935][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2157'.
[  181.527427][T12780] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  181.773611][T12798] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  181.776949][T12798] tipc: Bearer <ib:lo>: trying with adjusted priority
[  181.779935][T12798] tipc: Enabling <ib:lo> not permitted
[  181.782363][T12798] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  181.928710][T12804] lo speed is unknown, defaulting to 1000
[  181.980203][   T33] audit: type=1800 audit(1752288921.689:8): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2162" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3738 res=0 errno=0
[  182.000778][   T33] audit: type=1804 audit(1752288921.689:9): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2162" name="/newroot/726/x000000000000000400000000000000000000004" dev="tmpfs" ino=3738 res=1 errno=0
[  182.112131][T12811] lo speed is unknown, defaulting to 1000
[  182.539073][T12821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'.
[  182.612468][T12825] validate_nla: 4 callbacks suppressed
[  182.612481][T12825] netlink: 'syz.0.2166': attribute type 1 has an invalid length.
[  182.761040][T12830] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  182.792748][   T10] IPVS: starting estimator thread 0...
[  182.829287][T12838] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  182.832412][T12838] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  182.839307][T12838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  182.888947][T12836] xt_CT: No such helper "syz0"
[  182.895452][T12834] IPVS: using max 78 ests per chain, 187200 per kthread
[  182.920455][T12840] xt_CT: No such helper "syz0"
[  183.018483][T12851] netlink: 'syz.0.2175': attribute type 10 has an invalid length.
[  183.379449][T12878] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  183.416576][T12878] lo speed is unknown, defaulting to 1000
[  183.576955][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.580461][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.584528][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.588022][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.591556][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.641243][T12880] lo speed is unknown, defaulting to 1000
[  184.043347][T12899] Unsupported ieee802154 address type: 0
[  184.079896][T12880] chnl_net:caif_netlink_parms(): no params data found
[  184.083546][T12899] __nla_validate_parse: 2 callbacks suppressed
[  184.083559][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'.
[  184.097629][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'.
[  184.101335][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'.
[  184.255609][T12880] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.258704][T12880] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.261874][T12880] bridge_slave_0: entered allmulticast mode
[  184.273910][T12880] bridge_slave_0: entered promiscuous mode
[  184.285839][T12880] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.288934][T12880] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.291995][T12880] bridge_slave_1: entered allmulticast mode
[  184.301644][T12880] bridge_slave_1: entered promiscuous mode
[  184.372994][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.391760][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.431181][T12880] team0: Port device team_slave_0 added
[  184.438665][T12925] bridge0: entered promiscuous mode
[  184.442803][T12880] team0: Port device team_slave_1 added
[  184.495061][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.497730][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.508718][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.523905][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.526458][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.553580][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.616537][T12880] hsr_slave_0: entered promiscuous mode
[  184.618853][T12880] hsr_slave_1: entered promiscuous mode
[  184.621226][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.624470][T12880] Cannot create hsr debugfs directory
[  184.627135][T12933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.792953][T12880] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.797680][T12880] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.821993][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'.
[  184.826534][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'.
[  184.830230][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'.
[  184.835819][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2204'.
[  184.867759][T12880] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.871252][T12880] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.938132][T12880] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.942137][T12880] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.989703][T12880] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.993108][T12880] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.007167][T12962] netlink: 'syz.3.2207': attribute type 1 has an invalid length.
[  185.009863][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2207'.
[  185.012998][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'.
[  185.034519][T12964] lo speed is unknown, defaulting to 1000
[  185.122067][T12880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  185.139585][T12880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  185.145249][T12880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  185.151133][T12880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  185.267424][T12880] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.270297][T12968] lo speed is unknown, defaulting to 1000
[  185.282215][T12880] 8021q: adding VLAN 0 to HW filter on device team0
[  185.289559][  T172] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.291971][  T172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.307062][  T172] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.309673][  T172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.397795][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2208'.
[  185.433574][ T5220] Bluetooth: hci3: command 0x0405 tx timeout
[  185.445861][T12970] smc: removing ib device syz2
[  185.681466][   T54] Bluetooth: hci1: command tx timeout
[  185.972656][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.136315][T12880] veth0_vlan: entered promiscuous mode
[  186.146006][T12880] veth1_vlan: entered promiscuous mode
[  186.165602][T12880] veth0_macvtap: entered promiscuous mode
[  186.170204][T12880] veth1_macvtap: entered promiscuous mode
[  186.180028][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.190828][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.202191][T12880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.212183][T12880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.218382][T12880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.222170][T12880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.346414][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.350470][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.398121][ T5113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.402140][ T5113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.858540][   T54] Bluetooth: hci3: link tx timeout
[  186.861148][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  186.866355][ T5220] Bluetooth: hci3: link tx timeout
[  186.868109][ T5220] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  186.922365][T13012] netlink: 'syz.1.2218': attribute type 5 has an invalid length.
[  187.135486][T13019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  187.252378][T13025] netlink: 'syz.3.2222': attribute type 11 has an invalid length.
[  187.573895][T13049] netlink: 'syz.3.2229': attribute type 1 has an invalid length.
[  187.766632][T13056] netlink: 'syz.3.2232': attribute type 15 has an invalid length.
[  187.812666][T13058] netlink: 'syz.3.2233': attribute type 1 has an invalid length.
[  188.030544][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.048789][T13066] xt_hashlimit: size too large, truncated to 1048576
[  188.286177][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.289387][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.292072][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.297582][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.301376][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.440457][T13083] nbd: must specify a size in bytes for the device
[  188.568784][T13076] chnl_net:caif_netlink_parms(): no params data found
[  188.674668][T13076] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.684318][T13076] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.687386][T13076] bridge_slave_0: entered allmulticast mode
[  188.707837][T13076] bridge_slave_0: entered promiscuous mode
[  188.712615][T13076] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.719081][T13076] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.722220][T13076] bridge_slave_1: entered allmulticast mode
[  188.729210][T13076] bridge_slave_1: entered promiscuous mode
[  188.782864][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.791634][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.835574][T13076] team0: Port device team_slave_0 added
[  188.841570][T13076] team0: Port device team_slave_1 added
[  188.876117][ T5220] Bluetooth: hci3: command 0x0405 tx timeout
[  188.899289][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.902227][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.922217][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.939207][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.942789][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.960261][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.086763][T13076] hsr_slave_0: entered promiscuous mode
[  189.090078][T13076] hsr_slave_1: entered promiscuous mode
[  189.093616][T13076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.096951][T13076] Cannot create hsr debugfs directory
[  189.180913][T13119] __nla_validate_parse: 10 callbacks suppressed
[  189.180930][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2250'.
[  189.302967][T13123] netlink: 'syz.1.2251': attribute type 58 has an invalid length.
[  189.348338][T13127] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  189.351389][T13127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2253'.
[  189.408609][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2255'.
[  189.457790][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.462955][T13135] sctp: [Deprecated]: syz.3.2256 (pid 13135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.462955][T13135] Use struct sctp_sack_info instead
[  189.482074][T13137] team0: Device gtp3 is of different type
[  189.519251][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.580360][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.589302][T13147] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2260'.
[  189.674038][T13145] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  189.677409][ T5858] bridge_slave_1: left allmulticast mode
[  189.679474][ T5858] bridge_slave_1: left promiscuous mode
[  189.683133][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.688688][T13145] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  189.696623][ T5858] bridge_slave_0: left allmulticast mode
[  189.698477][ T5858] bridge_slave_0: left promiscuous mode
[  189.700461][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.972836][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.978671][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.984800][ T5858] bond0 (unregistering): Released all slaves
[  190.054208][T13167] netlink: 'syz.3.2264': attribute type 12 has an invalid length.
[  190.056770][T13167] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2264'.
[  190.099715][T13158] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.315789][   T54] Bluetooth: hci1: command tx timeout
[  191.208865][ T5858] hsr_slave_0: left promiscuous mode
[  191.221434][ T5858] hsr_slave_1: left promiscuous mode
[  191.224608][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.236165][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.243927][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.247004][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.271822][ T5858] veth1_macvtap: left promiscuous mode
[  191.277689][ T5858] veth0_macvtap: left promiscuous mode
[  191.280114][ T5858] veth1_vlan: left promiscuous mode
[  191.281878][ T5858] veth0_vlan: left promiscuous mode
[  191.340853][T13179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2267'.
[  191.610005][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  191.641361][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  192.106918][T13076] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.115916][T13076] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.130228][T13076] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.168220][T13076] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.171477][T13205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.183597][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'.
[  192.187424][T13205] netlink: 'syz.1.2273': attribute type 4 has an invalid length.
[  192.190615][T13205] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2273'.
[  192.394695][   T54] Bluetooth: hci1: command tx timeout
[  192.400353][T13076] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.436723][T13076] 8021q: adding VLAN 0 to HW filter on device team0
[  192.447085][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.450090][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.466104][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.469196][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.594649][T13236] openvswitch: netlink: Missing valid actions attribute.
[  192.596902][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.688909][T13251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.689140][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.702028][T13250] bridge0: entered allmulticast mode
[  192.706673][T13250] pim6reg: entered allmulticast mode
[  192.709444][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'.
[  192.728018][T13250] bridge0 (unregistering): left allmulticast mode
[  192.765341][T13252] netlink: 676 bytes leftover after parsing attributes in process `syz.3.2284'.
[  192.819767][T13076] veth0_vlan: entered promiscuous mode
[  192.830144][T13076] veth1_vlan: entered promiscuous mode
[  192.844674][T13076] veth0_macvtap: entered promiscuous mode
[  192.848451][T13076] veth1_macvtap: entered promiscuous mode
[  192.862658][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.869266][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.874753][T13076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.877951][T13076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.880723][T13076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.889081][T13076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.936738][T13256] macsec1: entered allmulticast mode
[  192.938482][T13256] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  192.990095][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.994319][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.026374][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.029535][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.049988][T13264] syzkaller0: entered promiscuous mode
[  193.060122][T13264] syzkaller0: entered allmulticast mode
[  194.444744][T13280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.553664][T13280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.581396][T13288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  194.646293][T13280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.702201][T13280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.707899][T13297] __nla_validate_parse: 5 callbacks suppressed
[  194.707908][T13297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2299'.
[  194.748970][T13300] netlink: 'syz.3.2300': attribute type 15 has an invalid length.
[  194.752221][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'.
[  194.790724][T13280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.806586][T13280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.830144][T13280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.874270][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.895750][T13280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.054182][T13313] delete_channel: no stack
[  195.159135][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.164612][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.168723][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.177452][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.180993][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.285130][T13316] chnl_net:caif_netlink_parms(): no params data found
[  195.310629][T13332] set match dimension is over the limit!
[  195.326718][T13332] set match dimension is over the limit!
[  195.333360][T13332] set match dimension is over the limit!
[  195.338701][T13332] set match dimension is over the limit!
[  195.350236][T13332] set match dimension is over the limit!
[  195.352115][T13332] set match dimension is over the limit!
[  195.355495][T13316] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.357761][T13316] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.360099][T13316] bridge_slave_0: entered allmulticast mode
[  195.360409][T13332] set match dimension is over the limit!
[  195.363642][T13316] bridge_slave_0: entered promiscuous mode
[  195.367245][T13316] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.369598][T13316] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.370539][T13332] set match dimension is over the limit!
[  195.372229][T13316] bridge_slave_1: entered allmulticast mode
[  195.384052][T13316] bridge_slave_1: entered promiscuous mode
[  195.420078][T13316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.425455][T13316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.478156][T13316] team0: Port device team_slave_0 added
[  195.482300][T13316] team0: Port device team_slave_1 added
[  195.509596][T13316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.511850][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.534135][T13316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.538632][T13316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.541017][T13316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.555787][T13316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.592151][T13316] hsr_slave_0: entered promiscuous mode
[  195.595126][T13316] hsr_slave_1: entered promiscuous mode
[  195.597297][T13316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.599685][T13316] Cannot create hsr debugfs directory
[  195.649501][T13366] netlink: 'syz.3.2316': attribute type 1 has an invalid length.
[  195.651955][T13366] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2316'.
[  195.921537][T13378] sctp: [Deprecated]: syz.3.2322 (pid 13378) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.921537][T13378] Use struct sctp_sack_info instead
[  195.931302][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.155347][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.230344][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.334356][   T12] bridge_slave_1: left allmulticast mode
[  196.336617][   T12] bridge_slave_1: left promiscuous mode
[  196.344448][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.349634][   T12] bridge_slave_0: left allmulticast mode
[  196.351412][   T12] bridge_slave_0: left promiscuous mode
[  196.355692][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.605261][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.609917][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.614005][   T12] bond0 (unregistering): Released all slaves
[  196.870312][T13393] openvswitch: netlink: IPv4 tunnel dst address is zero
[  196.910599][   T12] hsr_slave_0: left promiscuous mode
[  196.913921][   T12] hsr_slave_1: left promiscuous mode
[  196.916647][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.919874][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.928045][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.931563][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.950440][   T12] veth1_macvtap: left promiscuous mode
[  196.954097][   T12] veth0_macvtap: left promiscuous mode
[  196.957112][   T12] veth1_vlan: left promiscuous mode
[  196.960294][   T12] veth0_vlan: left promiscuous mode
[  197.273278][   T54] Bluetooth: hci1: command tx timeout
[  197.327621][   T12] team0 (unregistering): Port device team_slave_1 removed
[  197.356250][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.585385][T13406] netlink: 'syz.1.2330': attribute type 2 has an invalid length.
[  197.588163][T13406] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2330'.
[  197.728446][T13316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  197.751481][T13316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  197.761451][T13316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  197.787808][T13316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  197.817903][T13417] netlink: 'syz.1.2333': attribute type 11 has an invalid length.
[  197.820529][T13417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2333'.
[  197.871986][T13422] lo speed is unknown, defaulting to 1000
[  197.891016][T13316] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.897158][T13422] lo speed is unknown, defaulting to 1000
[  197.901453][T13316] 8021q: adding VLAN 0 to HW filter on device team0
[  197.916217][T13422] lo speed is unknown, defaulting to 1000
[  197.918314][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.920710][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.929264][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.931565][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.969972][T13423] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2334'.
[  198.076455][T13316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.100675][ T5879] lo speed is unknown, defaulting to 1000
[  198.105569][T13422] infiniband syz0: set down
[  198.114745][T13422] infiniband syz0: added lo
[  198.118582][T13316] veth0_vlan: entered promiscuous mode
[  198.127728][T13316] veth1_vlan: entered promiscuous mode
[  198.158102][T13316] veth0_macvtap: entered promiscuous mode
[  198.167252][T13422] RDS/IB: syz0: added
[  198.168742][T13422] smc: adding ib device syz0 with port count 1
[  198.170866][T13422] smc:    ib device syz0 port 1 has pnetid 
[  198.172351][T13316] veth1_macvtap: entered promiscuous mode
[  198.178059][T13422] lo speed is unknown, defaulting to 1000
[  198.179983][ T5879] lo speed is unknown, defaulting to 1000
[  198.208734][T13316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.220162][T13316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.231518][T13316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.236956][T13316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.240659][T13316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.245937][T13316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.317155][T13422] lo speed is unknown, defaulting to 1000
[  198.371616][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.378387][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.416676][T13440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2337'.
[  198.429944][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.435701][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.442165][T13422] lo speed is unknown, defaulting to 1000
[  198.566217][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2338'.
[  198.578876][T13422] lo speed is unknown, defaulting to 1000
[  198.681262][T13446] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2340'.
[  198.693242][T13447] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2340'.
[  198.745561][T13422] lo speed is unknown, defaulting to 1000
[  198.913470][T13422] lo speed is unknown, defaulting to 1000
[  199.608256][T13472] pim6reg1: entered promiscuous mode
[  199.610515][T13472] pim6reg1: entered allmulticast mode
[  199.836319][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  199.905001][T13485] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  199.908120][T13485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2351'.
[  200.360116][T13513] veth7: entered promiscuous mode
[  200.365179][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2361'.
[  200.369212][   T33] audit: type=1800 audit(1752288940.079:10): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2361" name="memory.events" dev="tmpfs" ino=3067 res=0 errno=0
[  200.422933][T13515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.440475][ T5857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.004510][T13521] Cannot find add_set index 3 as target
[  201.017962][T13521] netlink: 'syz.1.2363': attribute type 3 has an invalid length.
[  201.035772][T13521] ip6gre1: entered promiscuous mode
[  201.087622][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2365'.
[  201.090464][T13526] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2366'.
[  201.104636][T13526] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2366'.
[  201.165010][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  201.168993][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  201.172495][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  201.172685][T13532] netlink: 'syz.1.2367': attribute type 3 has an invalid length.
[  201.179725][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  201.180967][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  201.187943][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.188680][T13532] netlink: 'syz.1.2367': attribute type 3 has an invalid length.
[  201.196280][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'.
[  201.216299][T13530] lo speed is unknown, defaulting to 1000
[  201.460521][T13530] chnl_net:caif_netlink_parms(): no params data found
[  201.547224][T13530] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.550219][T13530] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.553920][T13530] bridge_slave_0: entered allmulticast mode
[  201.557786][T13530] bridge_slave_0: entered promiscuous mode
[  201.562361][T13530] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.566130][T13530] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.569177][T13530] bridge_slave_1: entered allmulticast mode
[  201.572896][T13530] bridge_slave_1: entered promiscuous mode
[  201.604706][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.611271][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.649914][T13530] team0: Port device team_slave_0 added
[  201.655371][T13530] team0: Port device team_slave_1 added
[  201.697382][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.700275][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.711427][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.718064][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.720955][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.731716][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.850050][T13530] hsr_slave_0: entered promiscuous mode
[  201.864646][T13530] hsr_slave_1: entered promiscuous mode
[  201.869894][T13530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.876773][T13530] Cannot create hsr debugfs directory
[  202.480069][ T5857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.595355][ T5857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.654889][ T5857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.751489][ T5857] bridge_slave_1: left allmulticast mode
[  202.755675][ T5857] bridge_slave_1: left promiscuous mode
[  202.757834][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.761919][ T5857] bridge_slave_0: left allmulticast mode
[  202.764049][ T5857] bridge_slave_0: left promiscuous mode
[  202.766094][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.045670][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.120266][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.169976][ T5857] bond0 (unregistering): Released all slaves
[  203.273730][ T5220] Bluetooth: hci1: command tx timeout
[  203.805009][T13530] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  203.817039][T13530] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  203.873464][ T5857] hsr_slave_0: left promiscuous mode
[  203.877246][ T5857] hsr_slave_1: left promiscuous mode
[  203.880105][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.888397][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.902427][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.908043][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.950267][ T5857] veth1_macvtap: left promiscuous mode
[  203.952606][ T5857] veth0_macvtap: left promiscuous mode
[  203.958110][ T5857] veth1_vlan: left promiscuous mode
[  203.960405][ T5857] veth0_vlan: left promiscuous mode
[  203.996294][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'.
[  204.406115][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  204.475135][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  204.790138][T13530] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  204.798277][T13530] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  204.960362][T13530] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.989651][T13530] 8021q: adding VLAN 0 to HW filter on device team0
[  205.000261][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.003382][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.025183][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.028304][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.095348][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2388'.
[  205.099292][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  205.123547][T13682] netlink: 'syz.1.2388': attribute type 10 has an invalid length.
[  205.127521][T13682] bridge0: port 3(team0) entered blocking state
[  205.130375][T13682] bridge0: port 3(team0) entered disabled state
[  205.134014][T13682] team0: entered allmulticast mode
[  205.136131][T13682] team_slave_0: entered allmulticast mode
[  205.138838][T13682] team_slave_1: entered allmulticast mode
[  205.146208][T13682] team0: entered promiscuous mode
[  205.148340][T13682] team_slave_0: entered promiscuous mode
[  205.151422][T13682] team_slave_1: entered promiscuous mode
[  205.207289][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'.
[  205.268911][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.314987][T13530] veth0_vlan: entered promiscuous mode
[  205.327533][T13530] veth1_vlan: entered promiscuous mode
[  205.353303][ T5220] Bluetooth: hci1: command tx timeout
[  205.366091][T13530] veth0_macvtap: entered promiscuous mode
[  205.379905][T13530] veth1_macvtap: entered promiscuous mode
[  205.399786][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.408146][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.416074][T13530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.419267][T13530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.422576][T13530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.427645][T13530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.503425][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.508424][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.545302][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.549834][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.554575][T13702] netlink: 'syz.1.2394': attribute type 11 has an invalid length.
[  205.648938][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'.
[  205.652516][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'.
[  206.483993][T13728] infiniband syz2: set down
[  206.487486][T13728] infiniband syz2: added macvlan0
[  206.519199][T13728] RDS/IB: syz2: added
[  206.520991][T13728] smc: adding ib device syz2 with port count 1
[  206.527552][T13728] smc:    ib device syz2 port 1 has pnetid 
[  206.809596][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'.
[  206.821453][T13735] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 59305 - 0
[  206.828153][T13735] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 59305 - 0
[  206.831661][T13735] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 59305 - 0
[  206.834664][T13735] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 59305 - 0
[  206.837541][T13735] geneve3: entered promiscuous mode
[  206.839376][T13735] geneve3: entered allmulticast mode
[  207.443428][ T5220] Bluetooth: hci1: command 0x040f tx timeout
[  207.622281][T13748] netlink: 'syz.3.2408': attribute type 5 has an invalid length.
[  207.679941][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2410'.
[  207.688242][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2410'.
[  207.691844][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2410'.
[  207.695335][T13755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2410'.
[  207.711833][T13755] lo speed is unknown, defaulting to 1000
[  207.852903][T13759] Cannot find add_set index 3 as target
[  207.857381][T13759] netlink: 'syz.1.2411': attribute type 3 has an invalid length.
[  208.119467][T13774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.126529][T13774] syzkaller0: entered promiscuous mode
[  208.128745][T13774] syzkaller0: entered allmulticast mode
[  208.134325][T13774] tipc: Resetting bearer <eth:syzkaller0>
[  208.152811][T13774] tipc: Resetting bearer <eth:syzkaller0>
[  208.164714][T13774] tipc: Disabling bearer <eth:syzkaller0>
[  208.226162][T13779] Cannot find add_set index 3 as target
[  208.485163][T13802] Cannot find add_set index 3 as target
[  208.920502][T12991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.010484][T12991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.068290][T12991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.141017][T12991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.271330][T12991] bridge_slave_1: left allmulticast mode
[  209.277559][T12991] bridge_slave_1: left promiscuous mode
[  209.280043][T12991] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.304118][T12991] bridge_slave_0: left allmulticast mode
[  209.306274][T12991] bridge_slave_0: left promiscuous mode
[  209.315969][T12991] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.484724][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.492836][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.502554][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.507044][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.514863][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.670206][T13829] Cannot find add_set index 3 as target
[  209.704963][T12991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.712791][T12991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.718279][T12991] bond0 (unregistering): Released all slaves
[  209.744916][T13823] lo speed is unknown, defaulting to 1000
[  209.891981][T13841] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  210.057697][T13850] Cannot find add_set index 3 as target
[  210.202047][T13852] netlink: 'syz.3.2442': attribute type 14 has an invalid length.
[  210.409524][T12991] hsr_slave_0: left promiscuous mode
[  210.412477][T12991] hsr_slave_1: left promiscuous mode
[  210.416050][T12991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.419068][T12991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.422680][T12991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.430810][T12991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.449835][T12991] veth1_macvtap: left promiscuous mode
[  210.452275][T12991] veth0_macvtap: left promiscuous mode
[  210.454985][T12991] veth1_vlan: left promiscuous mode
[  210.457253][T12991] veth0_vlan: left promiscuous mode
[  210.802276][T12991] team0 (unregistering): Port device team_slave_1 removed
[  210.829158][T12991] team0 (unregistering): Port device team_slave_0 removed
[  211.097877][T13862] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  211.112580][T13862] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  211.332100][T13823] chnl_net:caif_netlink_parms(): no params data found
[  211.441457][T13874] __nla_validate_parse: 8 callbacks suppressed
[  211.441470][T13874] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2446'.
[  211.519240][T13823] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.522927][T13823] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.529657][T13823] bridge_slave_0: entered allmulticast mode
[  211.536238][T13823] bridge_slave_0: entered promiscuous mode
[  211.548883][T13880] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2449'.
[  211.550096][T13823] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.552225][T13880] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2449'.
[  211.561206][T13823] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.565827][T13823] bridge_slave_1: entered allmulticast mode
[  211.569713][T13823] bridge_slave_1: entered promiscuous mode
[  211.575934][T13878] tap0: tun_chr_ioctl cmd 1074025677
[  211.578189][T13878] tap0: linktype set to 0
[  211.597074][   T54] Bluetooth: hci1: command tx timeout
[  211.640747][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.648572][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.688767][T13823] team0: Port device team_slave_0 added
[  211.698045][T13823] team0: Port device team_slave_1 added
[  211.739170][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.742127][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.756459][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.768259][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.771064][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.782125][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.797201][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2452'.
[  211.800658][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'.
[  211.843906][T13823] hsr_slave_0: entered promiscuous mode
[  211.846997][T13823] hsr_slave_1: entered promiscuous mode
[  211.849925][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.857477][T13823] Cannot create hsr debugfs directory
[  211.886744][T13897] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2454'.
[  211.978297][T13905] netlink: 'syz.1.2456': attribute type 10 has an invalid length.
[  212.174776][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'.
[  212.284716][T13823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  212.289710][T13823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  212.300433][T13823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  212.312912][T13823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  212.371418][T13823] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.382228][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'.
[  212.390982][T13823] 8021q: adding VLAN 0 to HW filter on device team0
[  212.398818][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.401200][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.412909][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.416043][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.472148][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2464'.
[  212.478432][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2464'.
[  212.563325][T13947] netlink: 'syz.3.2466': attribute type 2 has an invalid length.
[  212.586914][T13947] k*]: entered promiscuous mode
[  212.591644][T13947] netlink: 'syz.3.2466': attribute type 2 has an invalid length.
[  212.606005][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.656371][T13823] veth0_vlan: entered promiscuous mode
[  212.672362][T13823] veth1_vlan: entered promiscuous mode
[  212.704802][T13823] veth0_macvtap: entered promiscuous mode
[  212.717110][T13823] veth1_macvtap: entered promiscuous mode
[  212.738063][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.750027][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.769287][T13823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.772972][T13823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.780280][T13823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.786009][T13823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.910158][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.921121][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.952360][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.957612][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.974660][T13965] 8021q: VLANs not supported on gre0
[  213.208966][T13978] lo speed is unknown, defaulting to 1000
[  213.277754][T13985] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  213.686315][T14013] netlink: 'syz.3.2488': attribute type 32 has an invalid length.
[  214.080860][T14049] bond0: option fail_over_mac: invalid value (9)
[  214.794301][ T5838] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.625303][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.629366][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.632433][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.636353][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.639103][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.666566][T14063] lo speed is unknown, defaulting to 1000
[  216.117873][T14063] chnl_net:caif_netlink_parms(): no params data found
[  216.181148][T14063] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.183884][T14063] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.186766][T14063] bridge_slave_0: entered allmulticast mode
[  216.190313][T14063] bridge_slave_0: entered promiscuous mode
[  216.194668][T14063] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.196932][T14063] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.199208][T14063] bridge_slave_1: entered allmulticast mode
[  216.202473][T14063] bridge_slave_1: entered promiscuous mode
[  216.236176][T14063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.242857][T14063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.279504][T14063] team0: Port device team_slave_0 added
[  216.285124][T14063] team0: Port device team_slave_1 added
[  216.343958][T14063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.346923][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.360279][T14063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.370382][T14063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.373707][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.393163][T14063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.440763][T14063] hsr_slave_0: entered promiscuous mode
[  216.448102][T14063] hsr_slave_1: entered promiscuous mode
[  216.451113][T14063] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.455602][T14063] Cannot create hsr debugfs directory
[  216.639046][ T5838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.671123][T14106] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001
[  216.716054][ T5838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.811575][ T5838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.921861][ T5838] bridge_slave_1: left allmulticast mode
[  216.926650][ T5838] bridge_slave_1: left promiscuous mode
[  216.928957][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.935947][ T5838] bridge_slave_0: left allmulticast mode
[  216.938197][ T5838] bridge_slave_0: left promiscuous mode
[  216.940517][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.092835][T14132] __nla_validate_parse: 8 callbacks suppressed
[  217.092850][T14132] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2523'.
[  217.234160][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.238755][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.242732][ T5838] bond0 (unregistering): Released all slaves
[  217.317119][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'.
[  217.326176][T14141] sctp: [Deprecated]: syz.1.2525 (pid 14141) Use of struct sctp_assoc_value in delayed_ack socket option.
[  217.326176][T14141] Use struct sctp_sack_info instead
[  217.673286][   T54] Bluetooth: hci1: command tx timeout
[  217.701612][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2533'.
[  217.721605][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'.
[  217.767011][T14063] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.777635][T14063] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.792736][T14063] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.919116][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'.
[  219.754025][   T54] Bluetooth: hci1: command tx timeout
[  220.823985][ T5838] hsr_slave_0: left promiscuous mode
[  220.826700][ T5838] hsr_slave_1: left promiscuous mode
[  220.829388][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.832093][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.835369][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.837855][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.849718][ T5838] veth1_macvtap: left promiscuous mode
[  220.851736][ T5838] veth0_macvtap: left promiscuous mode
[  220.853975][ T5838] veth1_vlan: left promiscuous mode
[  220.855855][ T5838] veth0_vlan: left promiscuous mode
[  221.140935][ T5838] team0 (unregistering): Port device team_slave_1 removed
[  221.161354][ T5838] team0 (unregistering): Port device team_slave_0 removed
[  221.466464][T14063] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  221.589109][T14183] syzkaller0: tun_chr_ioctl cmd 1074025677
[  221.591542][T14183] syzkaller0: linktype set to 774
[  221.642272][T14183] syzkaller0: entered promiscuous mode
[  221.644688][T14183] syzkaller0: entered allmulticast mode
[  221.649217][   T12] syzkaller0: tun_net_xmit 56
[  221.833349][   T54] Bluetooth: hci1: command tx timeout
[  222.787795][T14063] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.802770][T14063] 8021q: adding VLAN 0 to HW filter on device team0
[  222.814886][T13612] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.817181][T13612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.834805][T13612] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.837838][T13612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.882574][T14197] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  222.901226][T14197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2544'.
[  222.951222][T14205] netlink: 'syz.1.2545': attribute type 58 has an invalid length.
[  222.956829][T14205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2545'.
[  222.967625][T14207] @: renamed from veth0_vlan
[  223.011529][T14205] netlink: 'syz.1.2545': attribute type 23 has an invalid length.
[  223.017587][T14063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.064769][T14063] veth0_vlan: entered promiscuous mode
[  223.071364][T14063] veth1_vlan: entered promiscuous mode
[  223.100050][T14063] veth0_macvtap: entered promiscuous mode
[  223.105599][T14063] veth1_macvtap: entered promiscuous mode
[  223.121609][T14063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.128830][T14063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.142001][T14063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.152482][T14063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.156351][T14063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.159152][T14063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.190646][T14222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2551'.
[  223.221688][T13612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.226017][T13612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.257448][T13608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.257621][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'.
[  223.260338][T13608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.311333][T14229] netlink: 16167 bytes leftover after parsing attributes in process `syz.3.2553'.
[  224.272339][T14241] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001
[  224.379536][T13170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.620732][T13170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.984618][T13170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.013602][ T7636] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.327495][T14249] syz_tun: entered allmulticast mode
[  225.354907][T14246] syz_tun: left allmulticast mode
[  225.579638][T13170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.598123][ T5220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  225.606752][ T5220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  225.612767][ T5220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  225.621548][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  225.627192][ T5220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.658615][T14250] lo speed is unknown, defaulting to 1000
[  225.792805][T13170] bridge_slave_1: left allmulticast mode
[  225.796915][T13170] bridge_slave_1: left promiscuous mode
[  225.799487][T13170] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.806361][T13170] bridge_slave_0: left allmulticast mode
[  225.808685][T13170] bridge_slave_0: left promiscuous mode
[  225.814564][T13170] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.061529][T13170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.066060][T13170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.069992][T13170] bond0 (unregistering): Released all slaves
[  226.227969][T14250] chnl_net:caif_netlink_parms(): no params data found
[  226.372924][T14250] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.378734][T14250] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.381841][T14250] bridge_slave_0: entered allmulticast mode
[  226.389360][T14250] bridge_slave_0: entered promiscuous mode
[  226.407516][T14250] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.410524][T14250] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.416081][T14250] bridge_slave_1: entered allmulticast mode
[  226.420362][T14250] bridge_slave_1: entered promiscuous mode
[  226.513946][T13170] hsr_slave_0: left promiscuous mode
[  226.517334][T13170] hsr_slave_1: left promiscuous mode
[  226.519443][T13170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.521753][T13170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.526066][T13170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.528530][T13170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.538463][T13170] veth1_macvtap: left promiscuous mode
[  226.540267][T13170] veth0_macvtap: left promiscuous mode
[  226.542129][T13170] veth1_vlan: left promiscuous mode
[  226.544127][T13170] veth0_vlan: left promiscuous mode
[  226.797397][T13170] team0 (unregistering): Port device team_slave_1 removed
[  226.821495][T13170] team0 (unregistering): Port device team_slave_0 removed
[  227.078852][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.086246][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.126200][T14250] team0: Port device team_slave_0 added
[  227.133578][T14250] team0: Port device team_slave_1 added
[  227.171859][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.174932][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.185450][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.191399][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.196371][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.208264][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.245827][T14250] hsr_slave_0: entered promiscuous mode
[  227.248874][T14250] hsr_slave_1: entered promiscuous mode
[  227.252339][T14250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.255575][T14250] Cannot create hsr debugfs directory
[  227.642925][T14250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  227.648100][T14250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  227.652823][T14250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  227.657685][T14250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  227.673674][ T5220] Bluetooth: hci1: command tx timeout
[  227.861263][T13170] bond7 (unregistering): (slave gretap2): Releasing active interface
[  228.012633][T13170] bond6 (unregistering): (slave bridge3): Releasing active interface
[  228.280959][T13170] bond0 (unregistering): Released all slaves
[  228.350545][T13170] bond1 (unregistering): Released all slaves
[  228.420986][T13170] bond2 (unregistering): Released all slaves
[  228.433161][T13170] bond3 (unregistering): Released all slaves
[  228.442715][T13170] bond4 (unregistering): Released all slaves
[  228.527048][T13170] bond5 (unregistering): Released all slaves
[  228.538023][T13170] bond6 (unregistering): Released all slaves
[  228.620781][T13170] bond7 (unregistering): Released all slaves
[  228.627602][T13170] bond8 (unregistering): Released all slaves
[  228.650991][T14250] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.660413][T14250] 8021q: adding VLAN 0 to HW filter on device team0
[  228.665619][T13612] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.667980][T13612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.684936][T13612] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.688054][T13612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.739844][T13170] k*]: left promiscuous mode
[  228.794390][T13170] tipc: Left network mode
[  228.821999][T13170] IPVS: stopping backup sync thread 9685 ...
[  228.902846][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.942077][T14250] veth0_vlan: entered promiscuous mode
[  228.965764][T14250] veth1_vlan: entered promiscuous mode
[  228.989215][T14250] veth0_macvtap: entered promiscuous mode
[  228.999785][T14250] veth1_macvtap: entered promiscuous mode
[  229.024326][T14250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.032551][T14250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.042417][T14250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.047029][T14250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.050669][T14250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.054899][T14250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.169422][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.172642][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.218644][T13612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.222645][T13612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.401306][T13170] hsr_slave_0: left promiscuous mode
[  229.405958][T13170] hsr_slave_1: left promiscuous mode
[  229.432626][T13170] pim6reg (unregistering): left allmulticast mode
[  229.585722][T13612] smc: removing ib device syz2
[  230.093284][   T26] smc: removing ib device syz0
[  231.392679][T13170] IPVS: stop unused estimator thread 0...
[  231.455100][T13170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.041054][T13170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.097976][T13170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.175450][T13170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.272626][T13170] bridge_slave_1: left allmulticast mode
[  232.275243][T13170] bridge_slave_1: left promiscuous mode
[  232.277647][T13170] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.283675][T13170] bridge_slave_0: left allmulticast mode
[  232.285950][T13170] bridge_slave_0: left promiscuous mode
[  232.288331][T13170] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.621882][T13170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.628626][T13170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.633857][T13170] bond0 (unregistering): Released all slaves
[  232.859375][T13170] hsr_slave_0: left promiscuous mode
[  232.861537][T13170] hsr_slave_1: left promiscuous mode
[  232.864260][T13170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.866767][T13170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.869762][T13170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.872446][T13170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.883590][T13170] veth1_macvtap: left promiscuous mode
[  232.885595][T13170] veth0_macvtap: left promiscuous mode
[  232.889082][T13170] veth1_vlan: left promiscuous mode
[  232.891058][T13170] veth0_vlan: left promiscuous mode
[  233.209136][T13170] team0 (unregistering): Port device team_slave_1 removed
[  233.232169][T13170] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
02:56:04  Registers:
info registers vcpu 0

CPU#0
RAX=cd1b54733d2fa600 RBX=ffffffff81976c78 RCX=cd1b54733d2fa600 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c00784338 CR3=0000000027b0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a184795d1e366900 RBX=ffffffff81976c78 RCX=a184795d1e366900 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2a9eb7f2d8 CR3=000000010d13e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
