last executing test programs:

1.191380701s ago: executing program 1 (id=674):
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@bridge_delvlan={0x38, 0x71, 0x1, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x40}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xf2ef}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x0)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="bfb108000000fbdb05d581a12a17576b447b741a4b847231b96dc2d922db0d197eed2398cab044e1cde6b82f678be755a006cb1f27c1bfa171d33f33ee6816d6df6d0d4f63196f4f34975b5eba069549e289ba99f47200cef1d8e1762c7cf765807300e72a6786d4a98a14ac7b2e697f2f29126cad7c91efd8070d8fccc768ff3b4f9f2d08d4c2ab95ec3d42ba7776dbc1e31ddbfc9942deb9a278ccc97fa4f0e0b992301668a7758c8e0d58205b3351e22f9ae86d1f0817ec6e8bc93662ac4904afb23874c4ed225382"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084000000000000000002000000000000000000000000000009030000000000000000000009"], 0x0, 0x4a}, 0x20)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty, 0x700, 0x20, 0x0, 0x983a}})
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x8080)

1.190642833s ago: executing program 1 (id=676):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0xfffffffffffffc50)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0xb}, 0x20)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x6, @empty, 0x0, 0x4}, 0xffffffffffffff8f)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711253000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000001140)='Y', 0x1)

1.114009372s ago: executing program 1 (id=678):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x1, 0x5, 0x234})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
shutdown(r1, 0x1)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x3212}, 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x143, 0xfffffff7, 0x7fffffff}, &(0x7f00000000c0)=0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
socket$netlink(0x10, 0x3, 0x4)
sendfile(r5, r4, 0x0, 0x4)

1.042217264s ago: executing program 1 (id=681):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a7870000000004007bd02059"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

963.000612ms ago: executing program 1 (id=684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
accept4(r3, 0x0, 0x0, 0x80000)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d70", 0x2c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r5, 0x0, 0x9}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a3000000000052679c7c3cb3990810001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r7, 0x0, 0xc0b0)
poll(&(0x7f00000002c0), 0x0, 0x7ae6)

512.304513ms ago: executing program 0 (id=694):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000de80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000de40)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x130, 0x0, 0xa, 0xb01, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xbc, 0x6, "b2f5c76bbd3abf55d8b16416726178fc7bd2f08b2ef02b5498cc4bd4697f2842a4cbee538f536df9a723695afbd2375077dad9db8aa3e9dda8a3189e16004337542dfe835f1ae27382f40d68ac61040607cf2e30b4ed2b9d119410dd4e2584b9b1096aa662aebd21619c4d8ef0afbe4baa8d883536b578e1bb0bf5faced624efb441cce9dd2ca1673daab1cf2d2839cd355a5fbe6a0521789663c5ed5bab64a97713ea9973b242509ced3433b6df8b9170df05d577526093"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x37, 0x6, "31247c7ab7d28d5e997845a2d2c762bbb2f7c3d4e26d7798c563b7456b358d747b3884a8d84a9a0a7f109ba8f5eb83c0da15d9"}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x8d0, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "b665b88e1104a9e19e5eeb62"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x77c, 0x3, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139aaf9d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x37, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb9371"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2ff0dd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce85186eac014a92c3de7a0627"}]}, {0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c60bcbbe83d695"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0xb0, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x87, 0x2, 0x1, 0x0, '\xf9\x00\x8b\xa36Py\x11\xa0y\xb0\x93\xcb\x12>\xc7\xe7\xa4&|\x871\xf5\xc6\xe3\xdf\xbb\xfa\xc7\xbe\x16b?\x8d\x16z\xdd\xe7V\xa1A\xbaY\xc1+\xe3\x02\xc0a9X)\xaf\xad\xc6FM\x8e\x1d\xe6Y+\xe8\x90\xeaC\xdeR\xaa\x9f\xc7kt\x1a\xac\xed/\x862K\x81*\xb0Rg\xda\x86J\x8f(F\x8c\xfcyY\xd0yKm\xc8\x83\xdf\x0f\x96\xb3\xc8\x05r\n\a\xe9c\xd8\x83\x98\xae;C\x10\r\xa2\xf8\xbf\xa7\xd4\xdcu\x8am]c'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x99f}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "666a203baf36bab1bb85f4519c122ca289dcd11925e84ab71600a4a601065f8e5f6520aeca7829cdc3a18535ae84b6461d7f69"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "15a378cb1185ebac10a35259329a0ab752a289c7d2a6e5e0cc48530e10bf3e0b223189dce581ea380c10710dfc044b77c8e059916e3f68a6587f64b35c6d011945ea46a1bbec21497e1773357fb06275454537da85c5bb3968d61c335c600ada03e0696bbbff61a31602dd1eb1822a393da8c3f9231058993738c3ebc2265aa3d3e7dcdc7ed65f54a2d4c7fec67677b5b163e2a3050b68f4c8b505634acfc4f98cea005eb572a6f0a8aab9135fc6b7dc5b84e9d3568a4b9607f99d979239ef9e7049de8f1ab62ba7946b1115c773d7a2e95488e0f0a0f5f5d295085d2647ade57efb432662d39f74c5a480ccb5428b727b73998ddde26a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae32"}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5476e4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xa}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfff}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x24, 0x6, "3eb45c5a436a8675a6f4475ba5436a923b1f798c9ce8d7f61eecab59ae06a1cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd54}, 0x1, 0x0, 0x0, 0x8040}, 0x894)
shutdown(r1, 0x1)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
socket$igmp6(0xa, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket(0x1, 0x803, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000240)=0x8, 0x4)
shutdown(0xffffffffffffffff, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000300)={0x8, 'vlan0\x00', {'ipvlan0\x00'}, 0x8})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000e40)={0x0, 0x32, "7f658d2ce34a324aa7e997cbc327bb3594f3d0d58d385e98e081a3fe9a9baa8c6ad8db9dd85fb35df0edc2c8a808da73d77e"}, &(0x7f0000000ec0)=0x3a)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000031c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x1}}, 0x6, 0x5, 0x8, 0xcfe, 0x80, 0x2, 0x53}, &(0x7f0000003280)=0x9c)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x88800}, 0x20044000)

414.189237ms ago: executing program 0 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x40}}, 0x4040810)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000340)="3f000000010003", 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x4d9, 0x0, 0x2000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061105000000000009500000000000000f3e0f1065911b7bdcd980187fd85bd7d9bb4ccf4b0733febf705456aa7e701e42bba3ca24335515c7ca4a04acec3c30d9864885c338e4d65e6982f"], &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)

333.88099ms ago: executing program 0 (id=697):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xe, &(0x7f0000001500)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x5d, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x12f9667de2cc9c02, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x104, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS={0x4}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x9, 0x7f, 0x7, 0xbc, 0x8000]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5a}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x40080c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

333.05992ms ago: executing program 0 (id=699):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x7b4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf136e55}, @in6={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x9}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380), 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

284.112923ms ago: executing program 2 (id=700):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000)
write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) (async)
close(r0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000070000000006001500040000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={<r2=>0x0, 0x4ab}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8}, 0x8)

283.133871ms ago: executing program 0 (id=701):
r0 = socket(0x1, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0xffff, 0x7, 0x4, 0x5, 0x56}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40002}, 0x840)
ioctl$SIOCGETSGCNT(r0, 0x89a0, &(0x7f0000000200)={@remote, @rand_addr=0x64010125})

222.481521ms ago: executing program 0 (id=702):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$isdn(0x22, 0x2, 0x25)
close(r1)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000000c0)=0x2, 0x4)
unshare(0x20000400)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$igmp6(0xa, 0x3, 0x2)
splice(r3, 0xfffffffffffffffe, r4, 0x0, 0x8, 0x0)
socketpair(0x11, 0x1, 0x401, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={<r6=>0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000040)=0x10)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
readv(r7, &(0x7f0000001500)=[{&(0x7f0000000400)=""/96, 0x60}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000004c0)={r6, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x8001)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010028bd7000fedbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000100000014000100fc000000000000000000000000000000202ada3a2b0cee5d146024e752b31e5f2ddfcf37452f012abb0c6d5c25061e0d003396f9412149078e04be23d192962cdb70209a8fcd60bf15fdef6d44379b8f0e5d081004efdbb7e5d9fe2c"], 0x38}, 0x1, 0x0, 0x0, 0x14000000}, 0x80)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000040)={0x1, @null, @bpq0, 0xb49, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

221.207434ms ago: executing program 2 (id=703):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81", 0x11)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000"], 0x33fe0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0xfffffffffffffe3a, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="f3d6eef1ba2eb58231b20934790763d8b458814456034f30a6ae3abcad9fc2a0db0d17529c4c121db786a1c455e741210c3cfb24471c2994726d9fd99992817df06ceb9350adba9c8e0b8007ebbee770f3b53ee118e337218105a61e3c46", @ANYRESDEC=r0], 0x60}, 0x1, 0xf000}, 0x0)

208.835966ms ago: executing program 2 (id=704):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400002b60ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

62.239775ms ago: executing program 1 (id=705):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3b0d}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) (async)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3b0d}]}, &(0x7f0000000080)=0x10) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async)

61.629642ms ago: executing program 2 (id=706):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007", @ANYRES32], 0x38}}, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="d3177a76ac27"}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x44}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @filter_kind_options=@f_cgroup={{0xb}, {0x154, 0x2, [@TCA_CGROUP_ACT={0x118, 0x1, [@m_nat={0x114, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x6, 0x4, 0xfffff546, 0x2}, @loopback, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe100000, 0x8, 0x1, 0x6, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd958, 0x5, 0x5, 0x2, 0x7f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}]}, {0x72, 0x6, "d64adc28c655bec138efd4275668c61e2405fdec449ea1f31e5130b9f3082186ac8ec38c0b42d594da8099916a16ad08381d1dcb7cc3d836988cbc44ee56367b805ba42cb8c811304156e9b97b0fb48d4c6b1e1a482b0886d54d3ecaeda03b5bd5f8ad4709d1c15a993aaf5af994"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x2c, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="fbffff", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fddbdf256d000000"], 0x14}}, 0x20000840)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @empty}, 0x28, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='dummy0\x00', 0xff, 0xfffffffffffffffe, 0x67e})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.266922ms ago: executing program 2 (id=707):
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08004d010010"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00001c0012800b00010062726964676500000c00028006002700000d0000"], 0x3c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000000000000dcfab1804252dc849424192a46552cdecd72d9996144c27288ca40b4629068b853cab3fe89e2df1b73b67b392502f15788a40ffd9ae7ea6496e0c80db3d0161b04b0084125f24266cbb36fc6e56315b4295a450a5c017089c5608fef8e0cfc98acdb28a7775d96ea9901dd3af6a24451780c6802d703988aa76321f083aef76dddffbce410a588a7e8b6297b480228f6721caa8cf90519604f89136123fe3defa3c7a578b3d7c448ffe8a8ceac159d221f73aaa81a3210af92c414ad74cc9b5cf2bdab188b56c255"], 0x48)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.state\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

0s ago: executing program 2 (id=708):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4ec, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000006840), 0x0}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x800448d4, 0x0) (async)
setsockopt(r5, 0x1, 0x9, &(0x7f00000004c0)="fe50584547d205c80a8b3e30cd4b188f1217a286be2f2a38cd66945a24ff63acd929f9803707d184a2046253ebc94dab3b52dc018c0733fad541f6a6781c8e20aac78d8778f4192ea71e71ab4bcfe81bfd521f1cdbea1e322e122daa451ee0c52bd7f423c2c61332db45690fbeb30efc2b6b640ac334099558ba9a32f3e981133e65b4abb137bab1f6", 0x89) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', <r8=>0x0, 0x29, 0x18, 0x3, 0x6, 0x1b, @local, @remote, 0x8, 0x7800, 0x7, 0xd5}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', r8, 0x29, 0x81, 0x0, 0x4, 0x21, @mcast1, @private2, 0x10, 0x700, 0x200, 0x1}}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000f9f285e01dc24824c940300040000000000000000700000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x3}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56378' (ED25519) to the list of known hosts.
syzkaller login: [   47.777847][ T5824] cgroup: Unknown subsys name 'net'
[   47.862649][ T5824] cgroup: Unknown subsys name 'cpuset'
[   47.866546][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.346008][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.329053][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.333033][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.336581][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.337570][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.342670][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.342991][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.351727][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.355081][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.360280][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.363543][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.372320][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.380639][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.390133][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.402184][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.407881][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.714776][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   54.785192][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.848598][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.873441][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.876662][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.879294][ T5846] bridge_slave_0: entered allmulticast mode
[   54.882226][ T5846] bridge_slave_0: entered promiscuous mode
[   54.894488][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.897967][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.900826][ T5846] bridge_slave_1: entered allmulticast mode
[   54.903663][ T5846] bridge_slave_1: entered promiscuous mode
[   54.971507][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.973917][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.976400][ T5843] bridge_slave_0: entered allmulticast mode
[   54.979303][ T5843] bridge_slave_0: entered promiscuous mode
[   54.999676][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.002237][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.005350][ T5843] bridge_slave_1: entered allmulticast mode
[   55.009341][ T5843] bridge_slave_1: entered promiscuous mode
[   55.030520][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.049806][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.064915][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.067904][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.071647][ T5852] bridge_slave_0: entered allmulticast mode
[   55.074861][ T5852] bridge_slave_0: entered promiscuous mode
[   55.106012][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.110381][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.113155][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.115968][ T5852] bridge_slave_1: entered allmulticast mode
[   55.119263][ T5852] bridge_slave_1: entered promiscuous mode
[   55.131732][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.148022][ T5846] team0: Port device team_slave_0 added
[   55.151990][ T5846] team0: Port device team_slave_1 added
[   55.185478][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.190869][ T5843] team0: Port device team_slave_0 added
[   55.193606][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.196043][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.204901][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.210650][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.214198][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.216575][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.227135][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.235523][ T5843] team0: Port device team_slave_1 added
[   55.275740][ T5852] team0: Port device team_slave_0 added
[   55.280151][ T5852] team0: Port device team_slave_1 added
[   55.319996][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.322501][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.332525][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.348777][ T5846] hsr_slave_0: entered promiscuous mode
[   55.351504][ T5846] hsr_slave_1: entered promiscuous mode
[   55.354851][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.357875][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.370710][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.376553][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.379565][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.391030][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.397107][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.400523][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.411469][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.491083][ T5843] hsr_slave_0: entered promiscuous mode
[   55.493854][ T5843] hsr_slave_1: entered promiscuous mode
[   55.496416][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   55.498410][ T5843] Cannot create hsr debugfs directory
[   55.518676][ T5852] hsr_slave_0: entered promiscuous mode
[   55.521514][ T5852] hsr_slave_1: entered promiscuous mode
[   55.523692][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   55.525618][ T5852] Cannot create hsr debugfs directory
[   55.793052][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.802370][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.807900][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.813358][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.872894][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.880311][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.887343][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.894559][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.945621][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.969440][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.976017][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.981624][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.086279][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.115266][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.132632][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.139078][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.152737][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.156007][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.164152][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.166892][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.176589][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.191761][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.199214][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.201671][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.222026][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.224550][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.235805][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.238727][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.256548][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.258941][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.380111][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.423532][ T5846] veth0_vlan: entered promiscuous mode
[   56.437341][ T5846] veth1_vlan: entered promiscuous mode
[   56.441860][ T5231] Bluetooth: hci1: command tx timeout
[   56.444004][ T5850] Bluetooth: hci2: command tx timeout
[   56.445156][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.450604][ T5850] Bluetooth: hci0: command tx timeout
[   56.473395][ T5846] veth0_macvtap: entered promiscuous mode
[   56.479568][ T5846] veth1_macvtap: entered promiscuous mode
[   56.494020][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.508466][ T5843] veth0_vlan: entered promiscuous mode
[   56.516013][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.531733][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.542881][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.547199][ T5843] veth1_vlan: entered promiscuous mode
[   56.557806][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.563791][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.575014][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.601800][ T5852] veth0_vlan: entered promiscuous mode
[   56.627065][ T5852] veth1_vlan: entered promiscuous mode
[   56.648778][ T5843] veth0_macvtap: entered promiscuous mode
[   56.660047][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.663511][ T5843] veth1_macvtap: entered promiscuous mode
[   56.670549][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.702098][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.712360][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.715779][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.719406][ T5852] veth0_macvtap: entered promiscuous mode
[   56.732748][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.736760][ T5852] veth1_macvtap: entered promiscuous mode
[   56.765344][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.794152][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.806375][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.814911][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.822550][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.852207][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.871894][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.891339][ T5912] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.928062][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.931960][ T5912] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   56.942939][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.943317][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.983020][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.988804][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.994539][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.999432][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.003883][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.143590][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.147040][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.192542][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.197085][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.222078][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.262852][ T5926] can: request_module (can-proto-4) failed.
[   57.345393][ T5931] tipc: Started in network mode
[   57.347412][ T5931] tipc: Node identity ded746296427, cluster identity 4711
[   57.350636][ T5931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.359559][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.359665][ T5931] syzkaller0: entered promiscuous mode
[   57.365197][ T5931] syzkaller0: entered allmulticast mode
[   57.402233][ T5931] tipc: Resetting bearer <eth:syzkaller0>
[   57.413329][ T5929] tipc: Resetting bearer <eth:syzkaller0>
[   57.420768][ T5929] tipc: Disabling bearer <eth:syzkaller0>
[   57.441028][ T5935] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.895169][ T5971] syzkaller1: entered promiscuous mode
[   57.897248][ T5971] syzkaller1: entered allmulticast mode
[   58.097409][ T5981] netlink: 21 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.101609][ T5981] netlink: 21 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.247991][ T5991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.261049][ T5991] syzkaller0: entered promiscuous mode
[   58.263267][ T5991] syzkaller0: entered allmulticast mode
[   58.301392][ T5996] Zero length message leads to an empty skb
[   58.338613][ T5997] tipc: Resetting bearer <eth:syzkaller0>
[   58.520386][ T5231] Bluetooth: hci2: command tx timeout
[   58.520485][ T5848] Bluetooth: hci1: command tx timeout
[   58.522744][ T5850] Bluetooth: hci0: command tx timeout
[   59.087921][ T5990] tipc: Resetting bearer <eth:syzkaller0>
[   59.101687][ T5990] tipc: Disabling bearer <eth:syzkaller0>
[   59.127507][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.165814][ T6005] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   59.168677][ T6005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.27'.
[   59.209163][ T6007] netlink: 'syz.1.29': attribute type 4 has an invalid length.
[   59.338690][ T6021] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   59.459010][ T6027] tipc: Started in network mode
[   59.462631][ T6027] tipc: Node identity 0100008000000000ff7f, cluster identity 4711
[   59.469572][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'.
[   59.495072][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'.
[   59.542650][ T6031] team_slave_0: entered promiscuous mode
[   59.544831][ T6031] team_slave_1: entered promiscuous mode
[   59.548417][ T6031] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   59.552731][ T6031] team0: Device macvtap1 is already an upper device of the team interface
[   59.556353][ T6031] team_slave_0: left promiscuous mode
[   59.558207][ T6031] team_slave_1: left promiscuous mode
[   59.577095][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   59.804204][ T6051] sctp: [Deprecated]: syz.0.46 (pid 6051) Use of int in maxseg socket option.
[   59.804204][ T6051] Use struct sctp_assoc_value instead
[   59.902531][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.943096][ T6060] netlink: 'syz.0.48': attribute type 7 has an invalid length.
[   60.024680][ T6066] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   60.031501][ T6065] Illegal XDP return value 4057111523 on prog  (id 15) dev N/A, expect packet loss!
[   60.254531][ T6086] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   60.600159][ T5848] Bluetooth: hci0: command tx timeout
[   60.602131][ T5231] Bluetooth: hci1: command tx timeout
[   60.602454][ T5850] Bluetooth: hci2: command tx timeout
[   60.614401][ T6109] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   60.618533][ T6109] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   60.656969][ T6112] netlink: 'syz.1.68': attribute type 5 has an invalid length.
[   60.827125][ T6126] tipc: MTU too low for tipc bearer
[   60.974768][ T6134] bridge0: port 3(vlan2) entered blocking state
[   60.977707][ T6134] bridge0: port 3(vlan2) entered disabled state
[   60.982672][ T6134] vlan2: entered allmulticast mode
[   60.984908][ T6134] bridge0: entered allmulticast mode
[   61.009287][ T6134] vlan2: left allmulticast mode
[   61.014922][ T6134] bridge0: left allmulticast mode
[   61.105946][ T6141] netlink: 'syz.1.78': attribute type 13 has an invalid length.
[   61.125035][ T6141] netlink: 'syz.1.78': attribute type 13 has an invalid length.
[   61.125242][ T6134] syzkaller1: entered promiscuous mode
[   61.132048][ T6134] syzkaller1: entered allmulticast mode
[   61.138066][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.142584][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.147219][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.159827][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.217508][ T6145] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   61.409073][ T6167] pim6reg9: entered allmulticast mode
[   61.503114][ T6176] team0: Port device geneve0 added
[   61.528791][ T6180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.664446][ T6190] batadv_slave_1: entered promiscuous mode
[   61.747959][ T6198] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001
[   61.754668][ T6196] tipc: Started in network mode
[   61.757381][ T6196] tipc: Node identity 021b0eeab8c2, cluster identity 4711
[   61.763654][ T6196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.766537][ T6196] syzkaller0: entered promiscuous mode
[   61.768521][ T6196] syzkaller0: entered allmulticast mode
[   61.790179][ T6196] tipc: Resetting bearer <eth:syzkaller0>
[   61.794398][ T6195] tipc: Resetting bearer <eth:syzkaller0>
[   61.812195][ T6195] tipc: Disabling bearer <eth:syzkaller0>
[   61.893725][ T6189] batadv_slave_1: left promiscuous mode
[   62.199268][ T6238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.206454][ T6238] syzkaller0: entered promiscuous mode
[   62.211218][ T6238] syzkaller0: entered allmulticast mode
[   62.222754][ T6238] tipc: Resetting bearer <eth:syzkaller0>
[   62.259652][ T6237] tipc: Resetting bearer <eth:syzkaller0>
[   62.276336][ T6237] tipc: Disabling bearer <eth:syzkaller0>
[   62.328636][ T6257] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   62.519472][ T6273] __nla_validate_parse: 30 callbacks suppressed
[   62.519485][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[   62.530763][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'.
[   62.537685][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.116'.
[   62.545961][ T6273] netlink: 204108 bytes leftover after parsing attributes in process `syz.0.116'.
[   62.627606][ T6286] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   62.671639][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.122'.
[   62.681300][ T5850] Bluetooth: hci2: command tx timeout
[   62.681554][ T5231] Bluetooth: hci0: command tx timeout
[   62.683605][ T5848] Bluetooth: hci1: command tx timeout
[   62.767524][ T6291] syzkaller0: entered promiscuous mode
[   62.769580][ T6291] syzkaller0: entered allmulticast mode
[   62.883738][ T6292] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   62.895362][ T6292] netlink: 3 bytes leftover after parsing attributes in process `syz.0.124'.
[   62.906287][ T6292] batadv1: entered promiscuous mode
[   62.908425][ T6292] batadv1: entered allmulticast mode
[   62.946718][ T6310] netlink: 88 bytes leftover after parsing attributes in process `syz.0.124'.
[   62.962694][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   62.965938][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   63.254430][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'.
[   63.579778][ T6302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   63.795566][ T6369] syzkaller1: entered promiscuous mode
[   63.797893][ T6369] syzkaller1: entered allmulticast mode
[   64.117336][ T6381] 8021q: VLANs not supported on syzkaller1
[   64.435062][ T6417] vlan0: entered promiscuous mode
[   64.448463][ T6417] team0: Port device vlan0 added
[   64.780763][ T6447] validate_nla: 6 callbacks suppressed
[   64.780780][ T6447] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   64.829114][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.845170][ T6447] bond1: (slave gretap1): making interface the new active one
[   64.850715][ T6447] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   65.289873][ T6483] netlink: 'syz.0.165': attribute type 4 has an invalid length.
[   65.545404][ T6503] ip6gre1: entered promiscuous mode
[   65.599598][ T6515] netlink: 'syz.0.173': attribute type 1 has an invalid length.
[   66.179213][ T6558] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   66.185771][ T6558] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   66.387658][ T6565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.886895][ T6575] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.894421][ T6575] bond1: (slave batadv1): Opening slave failed
[   67.012007][ T6581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.103193][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.107395][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.169345][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.175473][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.245330][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.254011][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.260787][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.263743][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.429540][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.433572][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.565445][ T6618] __nla_validate_parse: 18 callbacks suppressed
[   67.565464][ T6618] netlink: 144 bytes leftover after parsing attributes in process `syz.2.202'.
[   67.742524][   T33] audit: type=1800 audit(1755584156.381:2): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.203" name="memory.events" dev="tmpfs" ino=333 res=0 errno=0
[   67.821622][ T6639] netlink: 84 bytes leftover after parsing attributes in process `syz.1.208'.
[   67.832176][ T6639] batadv_slave_0: entered promiscuous mode
[   67.834971][ T6639] batadv_slave_0: left promiscuous mode
[   67.907616][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[   67.944632][ T6652] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   67.988320][ T6647] netlink: 'syz.0.211': attribute type 4 has an invalid length.
[   68.014773][ T6656] netlink: 'syz.2.213': attribute type 3 has an invalid length.
[   68.038647][ T6658] netlink: 48 bytes leftover after parsing attributes in process `syz.2.213'.
[   68.059935][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'.
[   68.119365][ T6664] team0: Device gtp0 is of different type
[   68.279475][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.283445][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.376761][ T6689] syzkaller1: entered promiscuous mode
[   68.379953][ T6689] syzkaller1: entered allmulticast mode
[   68.388026][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.222'.
[   68.412721][ T6686] sit0: entered promiscuous mode
[   68.416029][ T6686] sit0: entered allmulticast mode
[   68.436060][ T6692] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.487362][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'.
[   68.724397][ T6709] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[   68.777800][ T6713] netlink: 'syz.1.229': attribute type 11 has an invalid length.
[   68.783598][ T6713] netlink: 140 bytes leftover after parsing attributes in process `syz.1.229'.
[   69.191338][ T6735] netlink: 'syz.2.233': attribute type 2 has an invalid length.
[   69.237503][ T6738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.244672][ T6738] syzkaller0: entered promiscuous mode
[   69.248999][ T6738] syzkaller0: entered allmulticast mode
[   69.275215][ T6738] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   69.289977][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[   69.311475][ T6737] tipc: Disabling bearer <eth:syzkaller0>
[   69.318683][ T6741] netlink: 'syz.2.235': attribute type 4 has an invalid length.
[   69.588652][ T6765] netlink: 'syz.1.242': attribute type 3 has an invalid length.
[   69.805877][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.099570][ T6810] syzkaller0: entered promiscuous mode
[   70.102552][ T6810] syzkaller0: entered allmulticast mode
[   70.107612][ T6821] C: renamed from team_slave_0 (while UP)
[   70.113477][ T6821] validate_nla: 1 callbacks suppressed
[   70.113485][ T6821] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[   70.118165][ T6821] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   70.809984][ T3144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.812664][ T3144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.822060][ T6833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.904177][ T6844] Bluetooth: MGMT ver 1.23
[   71.025272][ T6850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.037500][ T6850] pim6reg1: entered promiscuous mode
[   71.042734][ T6850] pim6reg1: entered allmulticast mode
[   71.085131][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.179400][ T6860] netlink: 'syz.1.263': attribute type 10 has an invalid length.
[   71.193818][ T6862] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[   71.194373][ T6860] team0: Device ipvlan1 failed to register rx_handler
[   71.328246][ T6875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.530827][ T6892] ipvlan2: entered promiscuous mode
[   71.532716][ T6892] ipvlan2: entered allmulticast mode
[   71.534764][ T6892] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   71.625043][ T6896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.627818][ T6896] syzkaller0: entered promiscuous mode
[   71.629939][ T6896] syzkaller0: entered allmulticast mode
[   71.641152][ T6896] tipc: Resetting bearer <eth:syzkaller0>
[   71.643865][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.646658][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.653604][ T6895] tipc: Resetting bearer <eth:syzkaller0>
[   71.665971][ T6895] tipc: Disabling bearer <eth:syzkaller0>
[   71.750067][ T6898] syzkaller1: entered promiscuous mode
[   71.752638][ T6898] syzkaller1: entered allmulticast mode
[   72.547369][ T6939] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.557402][ T6939] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.565322][ T6939] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.592395][ T6944] __nla_validate_parse: 24 callbacks suppressed
[   72.592413][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'.
[   72.613936][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'.
[   72.638361][ T6946] bridge0: port 3(macvlan2) entered blocking state
[   72.641549][ T6946] bridge0: port 3(macvlan2) entered disabled state
[   72.644642][ T6946] macvlan2: entered allmulticast mode
[   72.647095][ T6946] bridge0: entered allmulticast mode
[   72.652713][ T6946] macvlan2: left allmulticast mode
[   72.655153][ T6946] bridge0: left allmulticast mode
[   72.673076][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[   72.773336][ T6954] netlink: 'syz.2.297': attribute type 11 has an invalid length.
[   72.778958][ T6955] netlink: 'syz.2.297': attribute type 11 has an invalid length.
[   72.835414][ T6963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.837610][ T6966] netlink: 'syz.0.300': attribute type 3 has an invalid length.
[   72.845948][ T6966] netlink: 'syz.0.300': attribute type 1 has an invalid length.
[   72.849606][ T6966] netlink: 220 bytes leftover after parsing attributes in process `syz.0.300'.
[   72.859538][ T6966] netlink: 'syz.0.300': attribute type 3 has an invalid length.
[   72.987130][   T33] audit: type=1804 audit(1755584161.631:3): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.304" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=566 res=1 errno=0
[   72.997147][   T33] audit: type=1800 audit(1755584161.631:4): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.304" name="cgroup.controllers" dev="tmpfs" ino=566 res=0 errno=0
[   72.997431][ T6984] netlink: 64 bytes leftover after parsing attributes in process `syz.1.304'.
[   73.274836][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[   73.326352][ T7022] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   73.337232][ T7020] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   73.340914][ T7020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'.
[   73.448427][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[   73.477984][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[   73.506661][ T7037] netlink: 'syz.0.321': attribute type 17 has an invalid length.
[   74.615796][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.0.330'.
[   74.683371][ T5882] hid-generic 0005:0C45:06F5.0001: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa
[   74.710225][ T7094] bridge0: entered allmulticast mode
[   74.725579][ T7096] bridge0: entered allmulticast mode
[   74.870123][ T7112] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96
[   74.920346][ T7115] batman_adv: batadv0: Adding interface: netdevsim0
[   74.923148][ T7115] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.932545][ T7115] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   75.345993][ T7138] validate_nla: 3 callbacks suppressed
[   75.346006][ T7138] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   75.355530][ T7138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.525575][ T7136] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   75.713779][ T7163] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   75.873900][ T7174] netlink: 'syz.2.359': attribute type 4 has an invalid length.
[   76.133812][ T7201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.351890][ T7221] tipc: Invalid UDP bearer configuration
[   76.351921][ T7221] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.766011][ T7252] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   77.107623][ T7276] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   77.190131][ T7276] nbd0: detected capacity change from 0 to 127
[   77.198132][   T57] block nbd0: Receive control failed (result -104)
[   77.349153][ T7291] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[   77.558885][ T7305] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   77.616618][ T7313] __nla_validate_parse: 20 callbacks suppressed
[   77.616637][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[   77.809316][ T7337] gtp0: entered promiscuous mode
[   77.816610][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'.
[   77.951445][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'.
[   78.019477][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'.
[   78.065476][ T7348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.408'.
[   78.513706][ T7353] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   78.544285][ T7355] netlink: 'syz.1.410': attribute type 58 has an invalid length.
[   78.550178][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'.
[   78.587783][ T7357] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   78.595481][ T7357] netlink: 256 bytes leftover after parsing attributes in process `syz.0.411'.
[   78.670368][ T7359] IPVS: length: 209 != 24
[   78.924290][ T7369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.949993][ T7369] syzkaller0: entered promiscuous mode
[   78.952449][ T7369] syzkaller0: entered allmulticast mode
[   78.965504][ T7369] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.415'.
[   78.988263][ T7369] tipc: Resetting bearer <eth:syzkaller0>
[   79.100687][ T7377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.419'.
[   79.107031][ T7377] netlink: 43 bytes leftover after parsing attributes in process `syz.0.419'.
[   79.131386][ T7377] netlink: 'syz.0.419': attribute type 5 has an invalid length.
[   79.215335][ T7382] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[   79.218804][ T7382] netlink: 'syz.2.420': attribute type 2 has an invalid length.
[   79.285878][ T7389] netlink: 'syz.0.424': attribute type 1 has an invalid length.
[   79.289505][ T7389] netlink: 'syz.0.424': attribute type 3 has an invalid length.
[   79.343468][ T7395] ieee802154 phy1 wpan1: encryption failed: -22
[   79.361449][ T7398] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   79.414263][ T7401] netlink: 'syz.2.427': attribute type 10 has an invalid length.
[   79.425682][ T7401] team0: Port device geneve0 added
[   79.428575][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.435159][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.450384][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.458403][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.532790][ T7405] netlink: zone id is out of range
[   79.541309][ T7405] netlink: zone id is out of range
[   79.543644][ T7405] netlink: zone id is out of range
[   79.546496][ T7405] netlink: get zone limit has 8 unknown bytes
[   79.721739][ T7427] geneve2: entered promiscuous mode
[   79.965579][ T7452] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   79.970802][ T5869] tipc: Node number set to 3134787306
[   80.015428][ T7460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.019398][ T7460] tipc: Resetting bearer <eth:syzkaller0>
[   80.023567][ T7460] syzkaller0: left promiscuous mode
[   80.034056][ T7463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.046072][ T7463] vxlan0: entered promiscuous mode
[   80.048102][ T7463] vxlan0: entered allmulticast mode
[   80.076557][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.081651][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.084870][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.088522][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.624632][ T7517] validate_nla: 3 callbacks suppressed
[   80.624650][ T7517] netlink: 'syz.2.463': attribute type 4 has an invalid length.
[   80.716747][ T7528] batadv_slave_0: entered promiscuous mode
[   80.735176][ T7527] batadv_slave_0: left promiscuous mode
[   80.902028][ T7537] trusted_key: syz.2.470 sent an empty control message without MSG_MORE.
[   81.216882][ T7542] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   81.328318][ T1268] cfg80211: failed to load regulatory.db
[   81.397426][ T7554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.401661][ T7554] syzkaller0: entered promiscuous mode
[   81.404127][ T7554] syzkaller0: entered allmulticast mode
[   81.420380][ T7554] tipc: Resetting bearer <eth:syzkaller0>
[   81.434421][ T7553] tipc: Resetting bearer <eth:syzkaller0>
[   81.444604][ T7553] tipc: Disabling bearer <eth:syzkaller0>
[   81.628797][ T7561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.756374][ T7573] bridge0: left allmulticast mode
[   81.936984][ T7594] IPVS: length: 24 != 98328
[   81.979191][ T7596] vlan2: entered promiscuous mode
[   81.981581][ T7596] bond0: entered promiscuous mode
[   81.983951][ T7596] bond_slave_0: entered promiscuous mode
[   81.986531][ T7596] bond_slave_1: entered promiscuous mode
[   81.989253][ T7596] vlan2: entered allmulticast mode
[   81.993545][ T7596] bond0: entered allmulticast mode
[   81.996336][ T7596] bond_slave_0: entered allmulticast mode
[   81.998772][ T7596] bond_slave_1: entered allmulticast mode
[   82.026619][ T7598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.033914][ T7598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.088187][ T7598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.092575][ T7598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.176474][ T7598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.180284][ T7598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.258105][ T7598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.261910][ T7598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.363909][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.367388][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.377359][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.380292][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.402781][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.405532][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.408286][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.412447][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.804190][ T7628] __nla_validate_parse: 25 callbacks suppressed
[   82.804202][ T7628] netlink: 156 bytes leftover after parsing attributes in process `syz.1.497'.
[   82.810100][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.1.497'.
[   82.813251][ T7627] openvswitch: netlink: Flow key attr not present in new flow.
[   82.819207][ T7628] openvswitch: netlink: Flow key attr not present in new flow.
[   82.831330][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[   82.842241][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'.
[   82.877648][ T7636] sctp: [Deprecated]: syz.2.500 (pid 7636) Use of int in maxseg socket option.
[   82.877648][ T7636] Use struct sctp_assoc_value instead
[   82.883237][ T7635] sctp: [Deprecated]: syz.2.500 (pid 7635) Use of int in maxseg socket option.
[   82.883237][ T7635] Use struct sctp_assoc_value instead
[   83.104033][ T7668] syz_tun: entered allmulticast mode
[   83.105977][ T7668] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   83.158073][ T7672] bridge0: port 3(batadv1) entered blocking state
[   83.169559][ T7672] bridge0: port 3(batadv1) entered disabled state
[   83.173650][ T7672] batadv1: entered allmulticast mode
[   83.182352][ T7672] batadv1: entered promiscuous mode
[   83.517422][ T7683] netlink: 'syz.2.514': attribute type 1 has an invalid length.
[   83.660301][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   83.664434][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   84.063634][ T7697] netlink: 76 bytes leftover after parsing attributes in process `syz.0.519'.
[   84.092141][ T7699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.097500][ T7699] syzkaller0: entered promiscuous mode
[   84.100413][ T7699] syzkaller0: entered allmulticast mode
[   84.114644][ T7699] tipc: Resetting bearer <eth:syzkaller0>
[   84.159638][ T7698] tipc: Resetting bearer <eth:syzkaller0>
[   84.171299][ T7698] tipc: Disabling bearer <eth:syzkaller0>
[   84.475550][ T7729] netlink: 116 bytes leftover after parsing attributes in process `syz.0.529'.
[   84.481784][ T7729] netlink: 248 bytes leftover after parsing attributes in process `syz.0.529'.
[   84.530018][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'.
[   84.533938][ T7729] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   84.563770][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[   84.567614][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'.
[   84.874584][ T7760] macvlan0: entered allmulticast mode
[   84.876627][ T7760] veth1_vlan: entered allmulticast mode
[   85.480418][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[   85.937420][ T7883] bridge0: port 3(erspan0) entered blocking state
[   85.960506][ T7883] bridge0: port 3(erspan0) entered disabled state
[   85.963273][ T7883] erspan0: entered allmulticast mode
[   85.966960][ T7883] erspan0: entered promiscuous mode
[   85.985229][ T7883] erspan0: left allmulticast mode
[   85.990276][ T7883] erspan0: left promiscuous mode
[   85.994011][ T7883] bridge0: port 3(erspan0) entered disabled state
[   86.121340][ T7904] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   86.256143][ T7917] bridge0: entered allmulticast mode
[   86.295610][ T7922] netlink: 'syz.1.559': attribute type 21 has an invalid length.
[   86.337754][ T7922] sctp: [Deprecated]: syz.1.559 (pid 7922) Use of int in max_burst socket option deprecated.
[   86.337754][ T7922] Use struct sctp_assoc_value instead
[   87.305956][ T7943] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   87.388600][ T7946] bond2: entered promiscuous mode
[   87.420998][ T7944] block nbd1: server does not support multiple connections per device.
[   87.424991][ T7944] block nbd1: shutting down sockets
[   87.633080][ T7970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.869103][ T7982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.872491][ T7983] syzkaller0: entered promiscuous mode
[   88.025990][ T7990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.031506][ T7989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.204819][ T8004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.207652][ T8004] syzkaller0: entered promiscuous mode
[   88.209511][ T8004] syzkaller0: entered allmulticast mode
[   88.223399][ T8004] tipc: Resetting bearer <eth:syzkaller0>
[   88.228297][ T8003] tipc: Resetting bearer <eth:syzkaller0>
[   88.237158][ T8003] tipc: Disabling bearer <eth:syzkaller0>
[   88.288441][ T8008] __nla_validate_parse: 18 callbacks suppressed
[   88.288459][ T8008] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.583'.
[   88.379065][ T8016] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   88.877991][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'.
[   89.018653][ T8056] netlink: 'syz.0.594': attribute type 10 has an invalid length.
[   89.022539][ T8056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.594'.
[   89.026559][ T8056] dummy0: entered promiscuous mode
[   89.028767][ T8056] dummy0: entered allmulticast mode
[   89.034180][ T8056] bridge0: port 4(dummy0) entered blocking state
[   89.036493][ T8056] bridge0: port 4(dummy0) entered disabled state
[   89.042008][ T8056] bridge0: port 4(dummy0) entered blocking state
[   89.045077][ T8056] bridge0: port 4(dummy0) entered forwarding state
[   89.198266][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'.
[   89.449030][ T8076] syzkaller0: entered promiscuous mode
[   89.451257][ T8076] syzkaller0: entered allmulticast mode
[   89.455849][ T8075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.465745][ T8074] tipc: Resetting bearer <eth:syzkaller0>
[   89.487843][ T8074] tipc: Disabling bearer <eth:syzkaller0>
[   89.727127][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'.
[   89.736822][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'.
[   90.172052][ T8138] bridge0: port 5(erspan0) entered blocking state
[   90.175141][ T8138] bridge0: port 5(erspan0) entered disabled state
[   90.178194][ T8138] erspan0: entered allmulticast mode
[   90.184163][ T8138] erspan0: entered promiscuous mode
[   90.188972][ T8138] bridge0: port 5(erspan0) entered blocking state
[   90.192249][ T8138] bridge0: port 5(erspan0) entered forwarding state
[   90.201062][ T8138] erspan0: left allmulticast mode
[   90.203239][ T8138] erspan0: left promiscuous mode
[   90.205570][ T8138] bridge0: port 5(erspan0) entered disabled state
[   90.251815][ T8143] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[   90.254431][ T8143] netlink: 232 bytes leftover after parsing attributes in process `syz.0.615'.
[   90.257430][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[   90.448136][ T8153] bridge2: entered promiscuous mode
[   90.450539][ T8153] bridge2: entered allmulticast mode
[   90.455060][ T8153] team0: Port device bridge2 added
[   90.779205][ T8162] bond1: entered promiscuous mode
[   90.798778][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'.
[   90.878563][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'.
[   90.913248][ T8167] unsupported nlmsg_type 40
[   91.629307][ T8210] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[   91.635502][ T8212] : renamed from wg2 (while UP)
[   91.675926][ T8210] bond2: (slave bridge1): making interface the new active one
[   91.679374][ T8210] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   91.886442][ T8235] netlink: 'syz.1.645': attribute type 9 has an invalid length.
[   92.000828][ T8255] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[   92.027305][ T8257] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[   92.152468][ T8278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.767134][ T8318] netlink: 'syz.1.667': attribute type 2 has an invalid length.
[   92.879356][ T8328] tap0: tun_chr_ioctl cmd 1074025680
[   92.882552][ T8328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.885468][ T8328] D: renamed from syzkaller0
[   92.887941][ T8328] tipc: Disabling bearer <eth:syzkaller0>
[   92.917435][ T8330] netlink: 'syz.2.672': attribute type 1 has an invalid length.
[   92.931157][ T8330] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.950660][ T8330] bond2: (slave veth7): Enslaving as an active interface with a down link
[   92.962060][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv1
[   92.965170][ T8330] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   93.022639][ T8335] netlink: 'syz.2.672': attribute type 4 has an invalid length.
[   93.026432][ T8339] netlink: 'syz.1.673': attribute type 10 has an invalid length.
[   93.043220][ T8339] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   93.178296][ T8359] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   93.241216][ T8366] syzkaller1: entered promiscuous mode
[   93.243673][ T8366] syzkaller1: entered allmulticast mode
[   93.305757][ T8370] __nla_validate_parse: 14 callbacks suppressed
[   93.305770][ T8370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.683'.
[   93.350694][ T8372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.684'.
[   93.359301][ T8372] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[   93.554703][ T8387] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0
[   93.796325][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'.
[   93.799554][ T8401] ip6gre0: Master is either lo or non-ether device
[   93.920467][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.697'.
[   93.971083][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'.
[   93.986852][ T8421] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[   94.047285][ T8427] delete_channel: no stack
[   94.054799][ T8430] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.703'.
[   94.265378][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'.
[   94.308741][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[   94.406905][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.709'.
[  107.570816][   T25] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 30 seconds
[  107.575518][   T25] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 30 seconds
[  107.581691][   T25] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 30 seconds
[  107.586038][   T25] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 30 seconds
[  137.360838][ T5290] udevd[5290]: worker [5854] /devices/virtual/block/nbd0 is taking a long time
[  137.660155][   T25] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 60 seconds
[  137.664747][   T25] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 60 seconds
[  137.669399][   T25] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 60 seconds
[  137.674432][   T25] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 60 seconds
[  167.721956][   T25] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 90 seconds
[  167.726186][   T25] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 90 seconds
[  167.730643][   T25] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 90 seconds
[  167.734377][   T25] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 90 seconds
[  180.683429][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  197.810291][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 120 seconds
[  197.814931][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 120 seconds
[  197.819584][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 120 seconds
[  197.824895][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 120 seconds
[  206.280379][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  227.882227][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 150 seconds
[  227.886143][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 150 seconds
[  227.890583][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 150 seconds
[  227.894164][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 150 seconds
[  257.374552][ T5290] udevd[5290]: worker [5854] /devices/virtual/block/nbd0 timeout; kill it
[  257.381725][ T5290] udevd[5290]: seq 11273 '/devices/virtual/block/nbd0' killed
[  257.970182][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 180 seconds
[  257.973937][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 180 seconds
[  257.977629][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 180 seconds
[  257.981581][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 180 seconds
[  288.050228][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 210 seconds
[  288.054524][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 210 seconds
[  288.058846][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 210 seconds
[  288.063653][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 210 seconds
[  318.132012][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 240 seconds
[  318.136300][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 240 seconds
[  318.141191][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 240 seconds
[  318.145644][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 240 seconds
[  348.200445][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 270 seconds
[  348.204817][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 270 seconds
[  348.209459][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 270 seconds
[  348.214421][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 270 seconds
[  378.283063][   T61] block nbd0: Possible stuck request ffff888021740000: control (read@0,1024B). Runtime 300 seconds
[  378.287108][   T61] block nbd0: Possible stuck request ffff888021740200: control (read@1024,1024B). Runtime 300 seconds
[  378.291154][   T61] block nbd0: Possible stuck request ffff888021740400: control (read@2048,1024B). Runtime 300 seconds
[  378.295242][   T61] block nbd0: Possible stuck request ffff888021740600: control (read@3072,1024B). Runtime 300 seconds

VM DIAGNOSIS:
06:21:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44deb RBX=1ffff11026cc7f61 RCX=ffff8880275a0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000a7077e0 RSP=ffffc9000a707660
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44deb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560114e9e600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000039 000000003932636c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=00000000000000f1 0000000039326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=bb39851904434b00 RBX=ffffffff819683a8 RCX=bb39851904434b00 RDX=0000000000000001
RSI=ffffffff8d9b69f6 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005636bffa1fc8 CR3=000000010e6e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
