last executing test programs:

2m17.743096881s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

2m10.291699484s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

2m4.216006136s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m57.174884071s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m51.367258508s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m48.310157761s ago: executing program 2 (id=665):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x0, 0x10000000}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240870000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd7000", @ANYRES32=0x0, @ANYRES32=0x0], 0x30}}, 0x40000c0)

1m48.149385658s ago: executing program 2 (id=666):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6, <r9=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x5c}, 0x1, 0xba01, 0x0, 0x801}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0xd], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffd7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x50)

1m47.146091781s ago: executing program 2 (id=668):
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0)
sendfile(r1, r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

1m47.090024387s ago: executing program 2 (id=669):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$igmp6(0xa, 0x3, 0x3a)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x4, 0x63, 0x40, 0x5, 0x8]}, &(0x7f0000000100)=0x54)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000380)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, {0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x0, {[0x410, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x6]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000380)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, {0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x0, {[0x410, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x6]}}, 0x5c)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

1m46.815160648s ago: executing program 2 (id=671):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)
pipe(0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000240)=0x4) (async)
recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) (async)
listen(r4, 0xd3) (async)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f50000"], 0x1eb) (async)
sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xf3b04ff45d9e12fb) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x41100, 0x4}, 0x94) (async)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94)

1m46.806778575s ago: executing program 1 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m46.639449843s ago: executing program 32 (id=355):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
unshare(0x20000400) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x8004b706, 0x0) (async)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB='\n\x00\t\x00'], 0x30}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000000400001f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x1e4, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x804}, 0x30000091)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="632099"], 0xa)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="a0ba36c100000000280012800a000100767863616e000000180002801600010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

1m46.230591358s ago: executing program 2 (id=674):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000213010400000200"/28], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030301010000000000000000020040"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8008800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
sendmsg$NET_DM_CMD_START(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x34004000)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xe, 0x9}, {0x4, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44084)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
preadv(r11, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r12, 0x400448e7, &(0x7f0000000300))
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m45.976983445s ago: executing program 33 (id=674):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000213010400000200"/28], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030301010000000000000000020040"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8008800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
sendmsg$NET_DM_CMD_START(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x34004000)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xe, 0x9}, {0x4, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44084)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
preadv(r11, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1, 0x7)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r12, 0x400448e7, &(0x7f0000000300))
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

37.611371954s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

31.658013235s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

25.05421114s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

18.751446082s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

11.966439449s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.267932279s ago: executing program 0 (id=1270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x28, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xa6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @call={0x85, 0x0, 0x0, 0x43}, @cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x0, 0x1, 0x1, 0x2, 0x2, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc31, 0x0, 0x0, 0x0, 0x8834}]}, &(0x7f00000004c0)='syzkaller\x00', 0x16, 0x51, &(0x7f0000000740)=""/81, 0x41000, 0x10, '\x00', r7, 0x0, r2, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xb, 0x5}, {0x5, 0x2, 0x4, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x5, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}, {0x2, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@rand_addr, <r8=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x110, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xeb}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xfaa9f4f9ce10bff6}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "83ff266e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0)

707.629653ms ago: executing program 3 (id=1824):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x19000000, 0x0, 'jitterentropy_rng\x00'}, 0x58)

648.226104ms ago: executing program 3 (id=1827):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, 0x0) (async)
unshare(0x20000400) (async, rerun: 64)
r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$kcm(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="05000000000000001701000002000000"], 0x10}, 0x20000001) (async, rerun: 64)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @bcast, 0x8, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default]}) (rerun: 64)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a312000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async)
close(r3) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 32)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r8], 0x4) (async)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r6, 0x90a, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r13, 0x0, 0x81, &(0x7f0000000d40)={'broute\x00', 0x0, 0x0, 0x0, [0x1d8, 0x7fffffffffffffff, 0x314, 0x6, 0x8, 0x4], 0x1, 0x0, 0x0, [{}, {}]}, 0x98) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (rerun: 32)

559.720957ms ago: executing program 3 (id=1828):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c00000e"], 0x73)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000007c00000200000d0000000008000000050000400a00000e040000000400000000000008030d00000200000000000009010000000700000000000002040000000c00000000000010040000000800000000000009000000000800000001010100000000001000000002000000020000000000000100000000180054ffffffff2e8b0b000000000000"], &(0x7f0000000700)=""/212, 0xa0, 0xd4}, 0x28)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000011140100cf4413380000000008000100"], 0x30}}, 0x24000000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x5, 0xfffffffc, 0xe010, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x6}, 0x50)
pwritev(r8, &(0x7f00000001c0), 0x0, 0xfffffff3, 0x1010000)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x53, 0x40000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x7, 0x3, 0x8, 0xb}, 0x14)
recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/261, 0x105}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000100)=""/147, 0x93}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2140, 0x0)

469.354526ms ago: executing program 4 (id=1829):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x2})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0xb, 0x4e24, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d3, 0x3c}, 0x0, @in=@loopback, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in=@local, 0x3503, 0x3, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x2, 0x1, 0x0, 0xabf}]}]}, 0x1bc}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)

399.557722ms ago: executing program 4 (id=1830):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x10}, 0x94)

327.494978ms ago: executing program 4 (id=1831):
ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)={'gretap0\x00', 0x200}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000004000000851000000300000018"], 0x0, 0xc, 0xf1, &(0x7f0000000280)=""/241, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 64)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000001640)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3341, 0x0) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x118, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r9, {0xc, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe8, 0x2, [@TCA_CGROUP_EMATCHES={0xe4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb8, 0x3, 0x0, 0x0, {{0x6, 0x4, 0xfff2}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="a69936", @TCF_META_TYPE_VAR="55e79f869b30ca", @TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="4f59165a1b8341b6", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x4, 0x1}, {0x1, 0x80}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xb}, {0x101, 0x4, 0xf9fc16ebb0b3f471}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="d4", @TCF_META_TYPE_VAR="fe", @TCF_META_TYPE_VAR="44cc0357588244", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xa, 0x1}, {0x8, 0xf3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5a, 0x6, 0x2}, {0x56c3, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="b8db657ea9bf55e9464d", @TCF_META_TYPE_VAR="201b34172f9e8b14ec35", @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x1000, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x90}, 0x40010) (async, rerun: 32)
syz_emit_ethernet(0xc5, &(0x7f0000000600)={@link_local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x1, "2a8b", "7b3bac", 0x7, "c790adef53fec0234b88541805e88164649d33d199560a5c282cfda6868f401556803c2431e10d3497161c789bb433014b3e134ea8c1525da8a96a06677b504956b1fa1fc3e576ca14c4d77d40f789ad6baa3630aff309d55f9bf1bdf4ab087c2ba0c8cd2fe39a62a097254e02cd10c8a067a1b2691a1df40e83c7907083b2683ea26bd46719e8b213a305fbd7897bd9312c9cf9fe8ce391f1b7e43808531f9ab6c97a321b2cc676b21b57eb9120"}}}}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r10 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r11}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async)
ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, 0x0)

278.723117ms ago: executing program 3 (id=1832):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x1048, &(0x7f0000002240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x103a, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x303, 0x0, @wg=@data={0x4, 0x8, 0x4, "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"}}}}}}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca314f8852df8f05000f02b5258ec56ec5fd", 0x41}, {0x0}], 0x2, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x200000d4)

215.467152ms ago: executing program 4 (id=1833):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r0, 0x100, 0x1, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x3, 0x4, 0x0, {0x1, 0xc, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0, 0x512, 0x3a}}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)

215.087609ms ago: executing program 3 (id=1834):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_fc_commit_start\x00', r0, 0x0, 0x8}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x75, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000a80), 0x4) (async, rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f"], 0x30}}, 0x40) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000004406a5a505a0365ed91db8f4b5d193ce724f5b6cd6c0f4fc4766c7dc3223c168afe201cb0449fd1a71a111946665297fdd", @ANYRES16=r7, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002"], 0x78}, 0x1, 0xffffffff00000003}, 0x800) (async, rerun: 32)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r6) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r5) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="24002d800500010002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000340)=0xc) (rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)

130.016364ms ago: executing program 4 (id=1835):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

48.734452ms ago: executing program 4 (id=1836):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

0s ago: executing program 3 (id=1837):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r8, 0x0, 0x0)
sendto$rose(r8, 0x0, 0x0, 0xc0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000000000000000a0003000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173, @ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140e00000020c00018008000140e0000002050014002000000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)

kernel console output (not intermixed with test programs):

 entered disabled state
[  118.374739][ T5658] bridge_slave_0: left allmulticast mode
[  118.383679][ T5658] bridge_slave_0: left promiscuous mode
[  118.390438][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.523494][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.529093][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.534418][ T5658] bond0 (unregistering): Released all slaves
[  118.586763][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.591492][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.604077][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.610177][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.615346][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.791155][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.794481][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.894220][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  118.928134][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  119.104542][ T8391] netlink: 'syz.0.676': attribute type 2 has an invalid length.
[  119.145461][ T8384] chnl_net:caif_netlink_parms(): no params data found
[  119.236970][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.241042][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.245013][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.249759][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.254769][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.330439][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.341291][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.349006][ T8384] bridge_slave_0: entered allmulticast mode
[  119.353000][ T8384] bridge_slave_0: entered promiscuous mode
[  119.368333][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.371281][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.374244][ T8384] bridge_slave_1: entered allmulticast mode
[  119.383963][ T8384] bridge_slave_1: entered promiscuous mode
[  119.423286][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.447135][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.516969][ T8384] team0: Port device team_slave_0 added
[  119.531923][ T8384] team0: Port device team_slave_1 added
[  119.590663][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.593319][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.603980][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.615290][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.618299][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.628995][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.732264][   T33] audit: type=1800 audit(1752656916.111:6): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.680" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1408 res=0 errno=0
[  119.759715][ T8384] hsr_slave_0: entered promiscuous mode
[  119.762363][ T8384] hsr_slave_1: entered promiscuous mode
[  119.924980][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[  119.985285][ T8395] chnl_net:caif_netlink_parms(): no params data found
[  120.003645][ T8420] vlan0: entered promiscuous mode
[  120.107905][   T33] audit: type=1800 audit(1752656916.491:7): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.685" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1434 res=0 errno=0
[  120.139993][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'.
[  120.177309][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.179587][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.181945][ T8395] bridge_slave_0: entered allmulticast mode
[  120.187118][ T8395] bridge_slave_0: entered promiscuous mode
[  120.197347][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.199646][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.201931][ T8395] bridge_slave_1: entered allmulticast mode
[  120.204721][ T8395] bridge_slave_1: entered promiscuous mode
[  120.236712][ T8384] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  120.243754][ T8384] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  120.253683][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.271541][ T8384] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  120.285267][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.300217][ T8384] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  120.363455][ T8395] team0: Port device team_slave_0 added
[  120.389354][ T8395] team0: Port device team_slave_1 added
[  120.410560][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'.
[  120.542908][ T5658] bond6 (unregistering): (slave vti0): Releasing backup interface
[  120.665803][ T5830] Bluetooth: hci0: command tx timeout
[  120.743021][ T5658] bond0 (unregistering): Released all slaves
[  120.750934][ T5658] bond1 (unregistering): Released all slaves
[  120.760936][ T5658] bond2 (unregistering): Released all slaves
[  120.889398][ T5658] bond3 (unregistering): Released all slaves
[  120.902355][ T5658] bond4 (unregistering): Released all slaves
[  121.021715][ T5658] bond5 (unregistering): Released all slaves
[  121.034328][ T5658] bond6 (unregistering): Released all slaves
[  121.050878][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.053622][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.063868][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.069504][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.071726][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.079859][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.169460][ T5658] : left promiscuous mode
[  121.235826][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  121.252372][ T8395] hsr_slave_0: entered promiscuous mode
[  121.254779][ T8395] hsr_slave_1: entered promiscuous mode
[  121.257498][ T8395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.260265][ T8395] Cannot create hsr debugfs directory
[  121.262957][ T5658] tipc: Left network mode
[  121.271682][ T5658] IPVS: stopping backup sync thread 8240 ...
[  121.305833][ T5830] Bluetooth: hci1: command tx timeout
[  121.306491][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.377212][ T8384] 8021q: adding VLAN 0 to HW filter on device team0
[  121.399701][ T8456] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  121.405074][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  121.415172][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[  121.433068][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.435933][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.482690][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.485351][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.678543][ T8395] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.694323][ T8395] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.709166][ T5658] hsr_slave_0: left promiscuous mode
[  121.714897][ T5658] hsr_slave_1: left promiscuous mode
[  122.352066][ T5658] lo (unregistering): left allmulticast mode
[  122.362190][ T8395] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.372568][ T8395] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.509276][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[  122.512257][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.586434][ T8384] veth0_vlan: entered promiscuous mode
[  122.600416][ T8384] veth1_vlan: entered promiscuous mode
[  122.612759][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.636229][ T8395] 8021q: adding VLAN 0 to HW filter on device team0
[  122.644486][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.646825][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.659116][ T8384] veth0_macvtap: entered promiscuous mode
[  122.664054][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.666425][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.681709][ T8384] veth1_macvtap: entered promiscuous mode
[  122.689129][ T8481] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.699'.
[  122.698980][ T5658] IPVS: stop unused estimator thread 0...
[  122.728839][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.736041][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.741807][ T8384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.744691][ T8384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.749884][ T5830] Bluetooth: hci0: command tx timeout
[  122.752422][ T8384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.755289][ T8483] Bluetooth: MGMT ver 1.23
[  122.756099][ T8384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.884213][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.893497][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.977775][  T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.980660][  T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.996646][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.252681][ T8506] netlink: 71 bytes leftover after parsing attributes in process `syz.3.703'.
[  123.308456][ T8395] veth0_vlan: entered promiscuous mode
[  123.314938][ T8395] veth1_vlan: entered promiscuous mode
[  123.386200][ T5830] Bluetooth: hci1: command tx timeout
[  123.397898][ T8395] veth0_macvtap: entered promiscuous mode
[  123.427882][ T8395] veth1_macvtap: entered promiscuous mode
[  123.459601][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.474641][ T8508] netlink: 'syz.3.704': attribute type 23 has an invalid length.
[  123.488312][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.516224][ T8395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.519083][ T8395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.521757][ T8395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.524413][ T8395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.692163][  T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.694681][  T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.745462][  T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.749710][  T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.911900][ T8518] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.707'.
[  123.917377][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'.
[  124.018379][ T8524] netlink: 268 bytes leftover after parsing attributes in process `syz.4.711'.
[  124.022331][ T8524] unsupported nla_type 65024
[  124.100584][ T8532] xt_ecn: cannot match TCP bits for non-tcp packets
[  124.273084][ T8547] batadv_slave_1: entered promiscuous mode
[  124.295209][ T8551] batadv_slave_1: left promiscuous mode
[  124.378025][ T8559] xt_limit: Overflow, try lower: 262144/524288
[  124.522661][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.525255][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.677347][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.690731][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.788703][ T8564] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.791596][ T8564] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.794432][ T8564] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.799258][ T8564] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.826472][ T5830] Bluetooth: hci0: command tx timeout
[  125.141977][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'.
[  125.468835][ T5830] Bluetooth: hci1: command tx timeout
[  126.048282][ T8611] netlink: 'syz.4.740': attribute type 2 has an invalid length.
[  126.050793][ T8611] netlink: 'syz.4.740': attribute type 1 has an invalid length.
[  126.905753][ T5830] Bluetooth: hci0: command tx timeout
[  127.088910][ T8640] trusted_key: syz.4.749 sent an empty control message without MSG_MORE.
[  127.125181][ T8646] __nla_validate_parse: 3 callbacks suppressed
[  127.125193][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.4.750'.
[  127.275176][ T8652] No such timeout policy "syz0"
[  127.545854][ T5830] Bluetooth: hci1: command tx timeout
[  127.762672][ T8675] netlink: 96 bytes leftover after parsing attributes in process `syz.3.758'.
[  127.771460][ T8677] sctp: [Deprecated]: syz.0.759 (pid 8677) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.771460][ T8677] Use struct sctp_sack_info instead
[  127.839095][ T8680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.863886][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.757'.
[  128.103739][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'.
[  128.140824][ T8703] netlink: 5 bytes leftover after parsing attributes in process `syz.3.765'.
[  128.148758][ T8703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'.
[  128.597792][ T8711] netlink: 6 bytes leftover after parsing attributes in process `syz.4.768'.
[  128.603833][ T8711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.768'.
[  128.713321][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.718573][ T8713] batadv_slave_1: entered promiscuous mode
[  128.730050][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'.
[  128.740570][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'.
[  128.744489][ T8713] hsr_slave_0: left promiscuous mode
[  128.748601][ T8713] hsr_slave_1: left promiscuous mode
[  129.287676][ T8738] syz.0.776 (8738) used greatest stack depth: 19000 bytes left
[  129.313181][ T8745] netlink: 'syz.0.777': attribute type 25 has an invalid length.
[  130.063362][ T8767] gretap0: entered promiscuous mode
[  130.069534][ T8767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.072367][ T8767] Cannot create hsr debugfs directory
[  130.074442][ T8767] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.194378][ T8778] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  131.118166][ T8805] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  131.148441][ T8805] bridge_slave_0: left allmulticast mode
[  131.150701][ T8805] bridge_slave_0: left promiscuous mode
[  131.153003][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.164163][ T8805] bridge_slave_1: left allmulticast mode
[  131.168694][ T8805] bridge_slave_1: left promiscuous mode
[  131.171069][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.181300][ T8805] bond0: (slave bond_slave_0): Releasing backup interface
[  131.190805][ T8805] bond0: (slave bond_slave_1): Releasing backup interface
[  131.193980][ T8806] netlink: 'syz.4.798': attribute type 10 has an invalid length.
[  131.212355][ T8805] team0: Port device team_slave_0 removed
[  131.224920][ T8805] team0: Port device team_slave_1 removed
[  131.229118][ T8805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.232007][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.238648][ T8805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.266756][ T8806] mac80211_hwsim hwsim27 wlan1: left allmulticast mode
[  131.278550][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.282848][ T8806] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.384849][ T8811] netlink: 'syz.3.800': attribute type 2 has an invalid length.
[  131.416761][ T8813] netlink: 'syz.0.801': attribute type 23 has an invalid length.
[  131.646760][ T8833] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  131.694894][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.185676][ T5830] Bluetooth: hci1: command tx timeout
[  132.349793][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.352866][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.539524][ T8858] netlink: 'syz.0.817': attribute type 12 has an invalid length.
[  132.740504][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.852830][ T8872] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  132.882281][ T8872] bond0: (slave wlan1): Releasing backup interface
[  132.911986][ T8872] netlink: 'syz.4.822': attribute type 10 has an invalid length.
[  132.914681][ T8872] mac80211_hwsim hwsim27 wlan1: left allmulticast mode
[  132.923045][ T8872] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.993981][ T8874] xt_CT: No such helper "syz0"
[  133.068926][ T8884] __nla_validate_parse: 8 callbacks suppressed
[  133.068939][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  133.073481][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  133.287043][ T8896] netlink: 'syz.3.831': attribute type 1 has an invalid length.
[  133.316121][ T8896] bond1: (slave bridge1): making interface the new active one
[  133.319119][ T8896] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  133.484931][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.834'.
[  133.581514][ T8921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.586812][ T8921] tipc: Resetting bearer <eth:syzkaller0>
[  133.826032][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'.
[  133.836621][ T8936] netlink: 68 bytes leftover after parsing attributes in process `syz.0.842'.
[  134.006853][ T8945] openvswitch: netlink: Actions may not be safe on all matching packets
[  134.007371][ T8952] openvswitch: netlink: Actions may not be safe on all matching packets
[  134.074165][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.849'.
[  134.147486][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'.
[  134.150629][ T8959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.154949][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'.
[  134.165185][ T8959] x_tables: duplicate underflow at hook 1
[  134.256941][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.852'.
[  134.298365][ T8973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.854'.
[  134.402698][ T8982] netlink: 'syz.4.855': attribute type 13 has an invalid length.
[  134.407003][ T8982] netlink: 'syz.4.855': attribute type 17 has an invalid length.
[  134.458341][ T5894] IPVS: starting estimator thread 0...
[  134.545900][ T8984] IPVS: using max 62 ests per chain, 148800 per kthread
[  135.174023][ T8982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.326904][ T8991] netlink: 'syz.3.858': attribute type 142 has an invalid length.
[  135.617626][ T9010] netlink: 'syz.0.865': attribute type 4 has an invalid length.
[  135.862077][ T9025] ip6gre1: entered allmulticast mode
[  136.162600][ T9042] pim6reg: entered allmulticast mode
[  136.325138][ T9052] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  136.329875][ T9052] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  136.516739][ T9064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.670122][ T9076] veth1: entered promiscuous mode
[  136.681055][ T9076] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  136.757865][ T9079] validate_nla: 2 callbacks suppressed
[  136.757878][ T9079] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  136.769438][ T9081] unsupported nlmsg_type 40
[  137.628958][ T9138] netlink: 'syz.0.906': attribute type 1 has an invalid length.
[  137.631490][ T9138] netlink: 'syz.0.906': attribute type 4 has an invalid length.
[  137.691970][ T9143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.701405][ T9145] ip6gre2: entered allmulticast mode
[  137.759732][ T9147] @: renamed from bond_slave_0
[  138.087681][ T9179] __nla_validate_parse: 46 callbacks suppressed
[  138.087702][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'.
[  138.094129][ T9179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.915'.
[  138.106961][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'.
[  138.111166][ T9175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.916'.
[  138.217892][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  138.285158][ T9194] netlink: 71 bytes leftover after parsing attributes in process `syz.0.921'.
[  138.352591][ T9197] netlink: 'syz.0.922': attribute type 21 has an invalid length.
[  138.361048][ T9197] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.422496][ T9201] DL<Y: renamed from lo (while UP)
[  138.502719][ T9205] netlink: 'syz.0.924': attribute type 1 has an invalid length.
[  138.505334][ T9205] netlink: 'syz.0.924': attribute type 1 has an invalid length.
[  138.677652][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.927'.
[  138.764787][ T9232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.777374][ T9232] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  138.779756][ T9232] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  138.798717][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'.
[  138.947509][ T9245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.933'.
[  138.953798][ T9245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.933'.
[  139.354978][ T9289] netlink: 'syz.4.944': attribute type 16 has an invalid length.
[  139.359639][ T9289] netlink: 'syz.4.944': attribute type 17 has an invalid length.
[  139.381541][ T9289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.973345][ T9341] tipc: Started in network mode
[  140.974995][ T9341] tipc: Node identity 080211000001, cluster identity 4711
[  140.977838][ T9341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.285310][ T9352] xt_TCPMSS: Only works on TCP SYN packets
[  141.371790][ T9357] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.985903][ T5894] tipc: Node number set to 134418688
[  142.217781][ T9388] macsec1: entered promiscuous mode
[  142.219995][ T9388] macsec1: entered allmulticast mode
[  143.417666][ T9416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.024598][ T9445] netlink: 'syz.4.991': attribute type 4 has an invalid length.
[  144.027999][ T9445] __nla_validate_parse: 13 callbacks suppressed
[  144.028012][ T9445] netlink: 17 bytes leftover after parsing attributes in process `syz.4.991'.
[  144.239591][ T9455] netlink: 'syz.4.996': attribute type 23 has an invalid length.
[  144.277112][ T9457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.997'.
[  144.334371][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  144.337997][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'.
[  144.443090][ T9464] Unknown options in mask 700
[  144.452042][ T9466] netlink: 'syz.3.1000': attribute type 30 has an invalid length.
[  144.499204][ T9472] netlink: 'syz.4.1003': attribute type 23 has an invalid length.
[  144.672217][ T9485] netlink: 'syz.3.1007': attribute type 1 has an invalid length.
[  144.713695][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  144.752751][ T9492] netlink: 'syz.3.1011': attribute type 23 has an invalid length.
[  144.799692][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1009'.
[  144.881345][ T9504] openvswitch: netlink: Unknown key attributes 2
[  145.272867][ T9526] xt_TPROXY: Can be used only with -p tcp or -p udp
[  145.321480][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'.
[  145.367610][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  145.427225][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1025'.
[  145.476410][ T9542] gretap1: entered promiscuous mode
[  145.478077][ T9542] gretap1: entered allmulticast mode
[  145.528305][ T9549] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1029'.
[  145.994226][ T9570] netlink: 'syz.3.1036': attribute type 23 has an invalid length.
[  146.418000][ T9590] netlink: 'syz.4.1043': attribute type 23 has an invalid length.
[  146.758769][ T9614] syzkaller1: entered promiscuous mode
[  146.771100][ T9614] syzkaller1: entered allmulticast mode
[  146.923311][ T9616] netlink: 'syz.4.1051': attribute type 23 has an invalid length.
[  147.184591][ T9626] netlink: 'syz.3.1056': attribute type 12 has an invalid length.
[  147.207432][ T9630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.223365][ T9630] tipc: Resetting bearer <eth:syzkaller0>
[  147.609589][ T9648] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  147.612983][ T9648] openvswitch: netlink: Message has 1 unknown bytes.
[  148.174449][ T9650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  148.241074][ T9652] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  148.259336][ T9650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  148.334341][ T9650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  148.638437][ T9674] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  148.763662][ T9688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.790833][ T9686] xt_l2tp: unknown flags: 10
[  148.830278][ T9692] tipc: Can't bind to reserved service type 1
[  148.838096][ T9692] veth1: entered promiscuous mode
[  149.291971][ T9700] __nla_validate_parse: 14 callbacks suppressed
[  149.291992][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'.
[  149.318601][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'.
[  149.385166][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'.
[  149.389714][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1078'.
[  149.508621][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'.
[  149.892715][ T9730] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1090'.
[  149.903054][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1091'.
[  149.970457][ T9737] validate_nla: 3 callbacks suppressed
[  149.970470][ T9737] netlink: 'syz.0.1092': attribute type 2 has an invalid length.
[  150.033277][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'.
[  150.034898][ T9742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.043807][ T9743] netlink: 'syz.4.1094': attribute type 11 has an invalid length.
[  150.054281][ T9743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'.
[  150.110392][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  150.114988][ T9753] netlink: 'syz.0.1098': attribute type 11 has an invalid length.
[  150.122106][ T9750] geneve2: entered promiscuous mode
[  151.036800][ T9803] netlink: 'syz.0.1111': attribute type 23 has an invalid length.
[  151.082735][ T9805] gtp1: entered promiscuous mode
[  151.084367][ T9805] gtp1: entered allmulticast mode
[  152.338125][ T9840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.511532][ T9856] hsr_slave_0: left promiscuous mode
[  152.514402][ T9856] hsr_slave_1: left promiscuous mode
[  152.616232][ T9861] IPv6: sit1: Disabled Multicast RS
[  152.707489][ T9866] netlink: 'syz.3.1132': attribute type 5 has an invalid length.
[  152.751559][ T9873] tipc: Started in network mode
[  152.755829][ T9873] tipc: Node identity f61ddb389fa4, cluster identity 4711
[  152.758173][ T9873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.777511][ T9871] tipc: Disabling bearer <eth:syzkaller0>
[  153.095041][ T9893] netlink: 'syz.3.1142': attribute type 23 has an invalid length.
[  153.569357][ T9915] netlink: 'syz.3.1149': attribute type 23 has an invalid length.
[  153.834812][ T9929] netlink: 'syz.3.1154': attribute type 1 has an invalid length.
[  154.009933][ T9940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.168088][ T9950] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  155.016632][ T9962] __nla_validate_parse: 16 callbacks suppressed
[  155.016672][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'.
[  155.086837][ T9964] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  155.089038][ T9964] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  155.100285][ T9964] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.135400][ T9972] smc: net device bond0 applied user defined pnetid SYZ2
[  155.139431][ T9974] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1168'.
[  155.238390][ T9974] smc: removing net device bond0 with user defined pnetid SYZ2
[  155.247248][ T9974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.251690][ T9974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.257586][ T9974] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  155.264562][ T9974] bond0 (unregistering): Released all slaves
[  155.314885][ T9971] delete_channel: no stack
[  155.511159][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1172'.
[  155.557056][ T9986] 8021q: VLANs not supported on ip6gre0
[  155.611466][ T9988] Bluetooth: hci1: Opcode 0x080f failed: -4
[  156.220455][T10009] netlink: 'syz.0.1181': attribute type 23 has an invalid length.
[  156.388358][T10013] veth7: entered allmulticast mode
[  156.611915][T10017] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  157.292941][T10060] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  157.297512][T10060] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  157.391824][T10065] C: renamed from team_slave_0
[  157.398127][T10065] netlink: 'syz.3.1197': attribute type 1 has an invalid length.
[  157.401401][T10065] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1197'.
[  157.408169][T10065] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  157.635815][ T5830] Bluetooth: hci1: command 0x080f tx timeout
[  157.742765][T10086] x_tables: duplicate underflow at hook 2
[  157.802541][T10091] netlink: 'syz.3.1203': attribute type 2 has an invalid length.
[  157.912744][T10094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'.
[  158.010397][T10100] netlink: 'syz.3.1206': attribute type 30 has an invalid length.
[  158.028146][T10100] smc: adding net device bond0 with user defined pnetid SYZ2
[  158.561059][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1214'.
[  158.752586][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'.
[  158.757250][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'.
[  158.760413][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'.
[  158.804834][T10143] netlink: 'syz.0.1220': attribute type 3 has an invalid length.
[  158.810792][T10139] x_tables: duplicate underflow at hook 1
[  158.943238][T10154] netlink: 'syz.3.1222': attribute type 11 has an invalid length.
[  158.953765][T10154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1222'.
[  159.166821][T10156] veth1: left promiscuous mode
[  159.314633][T10156] tipc: Resetting bearer <eth:syzkaller0>
[  159.320527][T10156] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  159.333581][T10156] gretap1: left promiscuous mode
[  159.338580][T10156] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.342119][T10156] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.347384][T10156] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.350762][T10156] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.354922][T10156] geneve2: left promiscuous mode
[  159.447577][T10167] xt_TCPMSS: Only works on TCP SYN packets
[  160.497630][T10192] x_tables: duplicate underflow at hook 2
[  160.677116][T10199] __nla_validate_parse: 1 callbacks suppressed
[  160.677134][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'.
[  160.688481][T10198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1235'.
[  161.301973][T10256] netlink: 'syz.3.1253': attribute type 2 has an invalid length.
[  161.378896][T10264] ieee802154 phy0 wpan0: encryption failed: -22
[  161.652762][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'.
[  161.660137][T10276] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  161.758692][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1260'.
[  162.683850][T10303] openvswitch: netlink: Duplicate or invalid key (type 0).
[  162.692181][T10303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.710810][T10303] netlink: 'syz.4.1266': attribute type 16 has an invalid length.
[  162.713115][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1266'.
[  162.818356][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.823560][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.837128][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.864330][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.880996][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  163.111553][T10322] netlink: 'syz.3.1274': attribute type 30 has an invalid length.
[  163.124614][T10322] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  163.186757][T10322] tipc: Resetting bearer <eth:syzkaller0>
[  163.196478][T10321] tipc: Resetting bearer <eth:syzkaller0>
[  163.239192][T10328] netlink: 'syz.4.1276': attribute type 1 has an invalid length.
[  163.241691][T10328] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1276'.
[  163.299001][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'.
[  163.301754][T10330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1277'.
[  163.305291][T10330] netlink: 'syz.4.1277': attribute type 10 has an invalid length.
[  164.177540][ T5885] tipc: Node number set to 1773787960
[  164.400772][T10321] tipc: Disabling bearer <eth:syzkaller0>
[  164.407227][T10311] chnl_net:caif_netlink_parms(): no params data found
[  164.579043][T10311] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.581739][T10311] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.584674][T10311] bridge_slave_0: entered allmulticast mode
[  164.593067][T10311] bridge_slave_0: entered promiscuous mode
[  164.598281][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'.
[  164.601566][T10311] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.603775][T10311] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.608342][T10311] bridge_slave_1: entered allmulticast mode
[  164.613660][T10311] bridge_slave_1: entered promiscuous mode
[  164.624471][T10337] macvtap0: entered promiscuous mode
[  164.625828][T10346] netlink: 'syz.3.1281': attribute type 1 has an invalid length.
[  164.630588][T10337] veth0: entered promiscuous mode
[  164.632639][T10337] macvtap0: entered allmulticast mode
[  164.634443][T10337] veth0: entered allmulticast mode
[  164.640411][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'.
[  164.661447][T10337] veth0: left allmulticast mode
[  164.663253][T10337] veth0: left promiscuous mode
[  164.668820][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.677793][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.713942][T10311] team0: Port device team_slave_0 added
[  164.722609][T10311] team0: Port device team_slave_1 added
[  164.744314][T10349] netlink: 'syz.3.1282': attribute type 29 has an invalid length.
[  164.750386][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.752943][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.766484][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.777985][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.780737][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.792131][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.893707][T10356] Cannot find add_set index 4 as target
[  164.907910][ T5835] Bluetooth: hci2: command tx timeout
[  164.938459][T10311] hsr_slave_0: entered promiscuous mode
[  164.956559][T10311] hsr_slave_1: entered promiscuous mode
[  164.960586][T10311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.972278][T10311] Cannot create hsr debugfs directory
[  165.343133][T10372] macvtap0: left promiscuous mode
[  165.430526][T10379] bond0: (slave wlan1): Releasing backup interface
[  165.658033][T10311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  165.667961][T10311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  165.672737][T10311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  165.686663][T10311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  165.779613][T10311] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.792011][T10311] 8021q: adding VLAN 0 to HW filter on device team0
[  165.798470][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.800843][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.833535][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.836531][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.851366][T10404] __nla_validate_parse: 3 callbacks suppressed
[  165.851378][T10404] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1297'.
[  165.957216][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'.
[  166.000222][T10415] netlink: 'syz.4.1300': attribute type 1 has an invalid length.
[  166.049889][T10311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.091374][T10311] veth0_vlan: entered promiscuous mode
[  166.097213][T10311] veth1_vlan: entered promiscuous mode
[  166.114359][T10311] veth0_macvtap: entered promiscuous mode
[  166.119059][T10311] veth1_macvtap: entered promiscuous mode
[  166.129871][T10311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.140132][T10311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.148114][T10311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.150862][T10311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.153621][T10311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.156643][T10311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.218864][  T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.226907][  T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.247394][  T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.250575][  T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.465042][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'.
[  166.697257][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'.
[  166.700123][T10442] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1308'.
[  166.745083][T10442] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  167.005912][T10453] team0: Device gtp0 is of different type
[  167.088437][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'.
[  167.097291][T10459] gretap0: left promiscuous mode
[  167.100298][T10459] batadv_slave_1: left promiscuous mode
[  167.407321][T10473] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1318'.
[  167.423079][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'.
[  167.427625][T10471] netlink: 'syz.3.1319': attribute type 2 has an invalid length.
[  167.514732][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1321'.
[  167.910517][   T33] audit: type=1804 audit(1752656964.291:8): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1326" name="/newroot/241/cgroup.controllers" dev="tmpfs" ino=1238 res=1 errno=0
[  167.922336][   T33] audit: type=1800 audit(1752656964.291:9): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1326" name="cgroup.controllers" dev="tmpfs" ino=1238 res=0 errno=0
[  167.995365][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.058519][T10498] vlan0: entered promiscuous mode
[  168.060712][T10498] bridge0: entered promiscuous mode
[  168.063116][T10498] vlan0: entered allmulticast mode
[  168.065198][T10498] bridge0: entered allmulticast mode
[  168.202192][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'.
[  168.432393][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.438505][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.442371][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.448919][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.453511][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.634934][T10511] chnl_net:caif_netlink_parms(): no params data found
[  168.724492][T10511] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.727921][T10511] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.731052][T10511] bridge_slave_0: entered allmulticast mode
[  168.735140][T10511] bridge_slave_0: entered promiscuous mode
[  168.740734][T10511] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.743806][T10511] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.747420][T10511] bridge_slave_1: entered allmulticast mode
[  168.751244][T10511] bridge_slave_1: entered promiscuous mode
[  168.786463][T10511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.793974][T10511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.850681][T10511] team0: Port device team_slave_0 added
[  168.865028][T10511] team0: Port device team_slave_1 added
[  168.900429][T10511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.903224][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.915702][T10511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.930711][T10511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.933479][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.943891][T10511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.997288][T10511] hsr_slave_0: entered promiscuous mode
[  169.000378][T10511] hsr_slave_1: entered promiscuous mode
[  169.003243][T10511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.006597][T10511] Cannot create hsr debugfs directory
[  169.166763][T10524] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  169.521457][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.528342][T10542] netlink: 'syz.4.1340': attribute type 23 has an invalid length.
[  169.601359][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.633729][T10546] netlink: 'syz.4.1342': attribute type 5 has an invalid length.
[  169.712242][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.752900][T10559] set match dimension is over the limit!
[  169.986981][   T13] bridge_slave_1: left allmulticast mode
[  169.992302][   T13] bridge_slave_1: left promiscuous mode
[  169.994577][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.000941][   T13] bridge_slave_0: left allmulticast mode
[  170.003306][   T13] bridge_slave_0: left promiscuous mode
[  170.011008][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.332249][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.338617][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.343276][   T13] bond0 (unregistering): Released all slaves
[  170.507024][ T5830] Bluetooth: hci2: command tx timeout
[  170.518768][T10575] netlink: 'syz.4.1351': attribute type 29 has an invalid length.
[  170.528863][T10577] netlink: 'syz.4.1351': attribute type 29 has an invalid length.
[  170.533348][T10576] netlink: 'syz.4.1351': attribute type 29 has an invalid length.
[  170.598505][T10579] netlink: 'syz.4.1352': attribute type 23 has an invalid length.
[  170.628216][   T13] hsr_slave_0: left promiscuous mode
[  170.630637][   T13] hsr_slave_1: left promiscuous mode
[  170.632829][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.635243][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.638364][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.640780][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.653080][   T13] veth1_macvtap: left promiscuous mode
[  170.654940][   T13] veth0_macvtap: left promiscuous mode
[  170.657025][   T13] veth1_vlan: left promiscuous mode
[  170.658811][   T13] veth0_vlan: left promiscuous mode
[  171.085196][T10593] __nla_validate_parse: 11 callbacks suppressed
[  171.085209][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'.
[  171.193841][   T13] team0 (unregistering): Port device team_slave_1 removed
[  171.228004][   T13] team0 (unregistering): Port device team_slave_0 removed
[  171.744849][T10511] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  171.750566][T10511] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  171.758440][T10511] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  171.771914][T10511] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  171.851034][T10604] IPVS: Scheduler module ip_vs_ not found
[  171.899055][T10511] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.929484][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'.
[  171.934365][T10511] 8021q: adding VLAN 0 to HW filter on device team0
[  171.949358][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.951521][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.967426][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.969713][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.037689][T10612] netlink: 'syz.3.1361': attribute type 1 has an invalid length.
[  172.058214][T10612] 8021q: adding VLAN 0 to HW filter on device bond6
[  172.078890][T10612] 8021q: adding VLAN 0 to HW filter on device bond6
[  172.081178][T10612] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  172.088822][T10612] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  172.154610][T10511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.193217][T10511] veth0_vlan: entered promiscuous mode
[  172.202826][T10511] veth1_vlan: entered promiscuous mode
[  172.225075][T10511] veth0_macvtap: entered promiscuous mode
[  172.230669][T10511] veth1_macvtap: entered promiscuous mode
[  172.249789][T10511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.261666][T10511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.272588][T10511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.278155][T10511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.281725][T10511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.285140][T10511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.356588][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.363317][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.390122][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.392703][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.685171][T10626] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001
[  172.915411][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'.
[  172.932343][T10638] netlink: 'syz.4.1368': attribute type 12 has an invalid length.
[  172.936676][T10638] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1368'.
[  173.071222][T10645] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.121681][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1371'.
[  173.143761][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'.
[  173.195012][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'.
[  173.251124][T10646] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1371'.
[  173.433200][T10666] No such timeout policy "syz1"
[  173.554493][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'.
[  173.739836][T10685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1384'.
[  174.016221][T10699] netlink: 'syz.3.1390': attribute type 4 has an invalid length.
[  174.308061][ T5658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.594610][T10720] team0 (unregistering): Port device C removed
[  174.600932][T10720] team0 (unregistering): Port device team_slave_1 removed
[  174.605376][T10723] netlink: 'syz.3.1397': attribute type 10 has an invalid length.
[  174.661535][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.665015][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.673885][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.681112][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.685005][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.972785][T10724] chnl_net:caif_netlink_parms(): no params data found
[  175.114883][T10724] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.118437][T10724] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.125087][T10724] bridge_slave_0: entered allmulticast mode
[  175.129610][T10724] bridge_slave_0: entered promiscuous mode
[  175.137353][T10724] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.140414][T10724] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.143375][T10724] bridge_slave_1: entered allmulticast mode
[  175.155910][T10724] bridge_slave_1: entered promiscuous mode
[  175.233101][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.238639][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.342501][T10724] team0: Port device team_slave_0 added
[  175.349909][T10724] team0: Port device team_slave_1 added
[  175.376071][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.378527][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.389349][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.394103][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.396792][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.409614][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.461237][T10724] hsr_slave_0: entered promiscuous mode
[  175.464227][T10724] hsr_slave_1: entered promiscuous mode
[  175.469121][T10724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.472169][T10724] Cannot create hsr debugfs directory
[  175.834380][T10798] Cannot find add_set index 3 as target
[  176.091747][T10810] __nla_validate_parse: 4 callbacks suppressed
[  176.091759][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'.
[  176.097502][T10810] netlink: 720 bytes leftover after parsing attributes in process `syz.3.1425'.
[  176.102742][T10810] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  176.111161][T10810] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  176.140116][ T5658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.200983][ T5658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.284080][ T5658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.465915][ T5658] bridge_slave_1: left allmulticast mode
[  176.470219][ T5658] bridge_slave_1: left promiscuous mode
[  176.472212][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.487254][ T5658] bridge_slave_0: left allmulticast mode
[  176.489372][ T5658] bridge_slave_0: left promiscuous mode
[  176.491559][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.745956][ T5835] Bluetooth: hci2: command tx timeout
[  176.873640][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.881564][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.888315][ T5658] bond0 (unregistering): Released all slaves
[  176.911576][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'.
[  177.034656][T10848] xt_ecn: cannot match TCP bits for non-tcp packets
[  177.151980][T10855] netlink: 'syz.3.1435': attribute type 11 has an invalid length.
[  177.164491][T10856] netlink: 'syz.3.1435': attribute type 11 has an invalid length.
[  177.188623][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'.
[  177.223759][T10860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1437'.
[  177.231641][T10858] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  177.283131][ T5658] hsr_slave_0: left promiscuous mode
[  177.285326][ T5658] hsr_slave_1: left promiscuous mode
[  177.298098][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.300687][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.309384][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.311705][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.338729][ T5658] veth1_macvtap: left promiscuous mode
[  177.340637][ T5658] veth0_macvtap: left promiscuous mode
[  177.342455][ T5658] veth1_vlan: left promiscuous mode
[  177.354329][ T5658] veth0_vlan: left promiscuous mode
[  177.771024][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  177.798629][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  178.203334][T10878] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1443'.
[  178.218888][T10879] netlink: 'syz.4.1442': attribute type 15 has an invalid length.
[  178.242172][T10879] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1442'.
[  178.270795][T10724] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  178.294040][T10724] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  178.309626][T10884] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  178.315787][T10724] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  178.328495][T10724] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  178.825708][ T5835] Bluetooth: hci2: command tx timeout
[  179.121128][T10894] netlink: 'syz.3.1445': attribute type 1 has an invalid length.
[  179.181877][T10894] 8021q: adding VLAN 0 to HW filter on device bond7
[  179.218445][T10898] 8021q: adding VLAN 0 to HW filter on device bond7
[  179.221472][T10898] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  179.227687][T10898] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  179.253182][T10894] bond7: (slave bridge3): Enslaving as an active interface with a down link
[  179.323757][T10724] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.394319][T10724] 8021q: adding VLAN 0 to HW filter on device team0
[  179.403324][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.406503][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.418371][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.421322][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.593300][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.629538][T10919] netlink: 'syz.4.1451': attribute type 39 has an invalid length.
[  179.676090][T10724] veth0_vlan: entered promiscuous mode
[  179.684627][T10724] veth1_vlan: entered promiscuous mode
[  179.688806][T10921] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  179.724507][T10724] veth0_macvtap: entered promiscuous mode
[  179.730539][T10724] veth1_macvtap: entered promiscuous mode
[  179.740580][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.747446][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1453'.
[  179.753168][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.763035][T10724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.770974][T10724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.773528][T10724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.777815][T10724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.845984][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.850871][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.863798][T10923] netlink: 'syz.3.1453': attribute type 1 has an invalid length.
[  179.882962][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1453'.
[  179.892258][ T6998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.894671][ T6998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.054409][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1456'.
[  180.804872][T10940] lo: entered allmulticast mode
[  180.809651][T10940] lo: left allmulticast mode
[  181.002756][T10954] vlan3: entered promiscuous mode
[  181.004330][T10954] dummy0: entered promiscuous mode
[  181.167404][T10962] __nla_validate_parse: 3 callbacks suppressed
[  181.167424][T10962] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1467'.
[  181.324291][T10973] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  181.327082][T10973] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  181.334821][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'.
[  181.556287][T10976] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.640950][ T6708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.271190][T10981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.275085][T10981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.281417][T10981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.284877][T10981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.298060][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'.
[  182.306226][T10982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1472'.
[  182.315322][T10982] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  182.507152][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1476'.
[  182.521576][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.527162][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.530709][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.533683][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.539611][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.632078][T10994] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  182.734732][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'.
[  182.751534][T10991] chnl_net:caif_netlink_parms(): no params data found
[  182.827931][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1479'.
[  182.830918][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1479'.
[  182.900339][ T6708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.925558][T10991] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.927935][T10991] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.930362][T10991] bridge_slave_0: entered allmulticast mode
[  182.933246][T10991] bridge_slave_0: entered promiscuous mode
[  182.940266][T10991] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.942538][T10991] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.944946][T10991] bridge_slave_1: entered allmulticast mode
[  182.948132][T10991] bridge_slave_1: entered promiscuous mode
[  182.980286][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.988459][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.053122][T10991] team0: Port device team_slave_0 added
[  183.062289][T10991] team0: Port device team_slave_1 added
[  183.080764][T11018] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  183.133898][ T6708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.146215][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.148389][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.167475][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.177326][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.179487][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.187731][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.211769][ T6708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.278058][T10991] hsr_slave_0: entered promiscuous mode
[  183.280727][T10991] hsr_slave_1: entered promiscuous mode
[  183.282867][T10991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.290757][T10991] Cannot create hsr debugfs directory
[  183.466834][ T6708] bridge_slave_1: left allmulticast mode
[  183.469008][ T6708] bridge_slave_1: left promiscuous mode
[  183.470852][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.480642][ T6708] bridge_slave_0: left allmulticast mode
[  183.490138][ T6708] bridge_slave_0: left promiscuous mode
[  183.495063][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.777751][T11044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.918795][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.923370][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.929245][ T6708] bond0 (unregistering): Released all slaves
[  183.974760][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1492'.
[  183.981416][T11051] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1492'.
[  184.247325][ T6708] hsr_slave_0: left promiscuous mode
[  184.251178][ T6708] hsr_slave_1: left promiscuous mode
[  184.255883][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.258598][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.261546][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.263953][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.278561][ T6708] veth1_macvtap: left promiscuous mode
[  184.280457][ T6708] veth0_macvtap: left promiscuous mode
[  184.282509][ T6708] veth1_vlan: left promiscuous mode
[  184.284435][ T6708] veth0_vlan: left promiscuous mode
[  184.590219][ T5835] Bluetooth: hci2: command tx timeout
[  184.642389][ T6708] team0 (unregistering): Port device team_slave_1 removed
[  184.670833][ T6708] team0 (unregistering): Port device team_slave_0 removed
[  185.111732][T11078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.150776][T10991] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  185.157138][T10991] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  185.162492][T10991] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  185.173780][T10991] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  185.264589][T10991] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.296330][T10991] 8021q: adding VLAN 0 to HW filter on device team0
[  185.323883][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.326269][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.339334][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.341563][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.565108][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.611889][T10991] veth0_vlan: entered promiscuous mode
[  185.621152][T10991] veth1_vlan: entered promiscuous mode
[  185.648091][T10991] veth0_macvtap: entered promiscuous mode
[  185.653937][T10991] veth1_macvtap: entered promiscuous mode
[  185.670187][T10991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.680908][T10991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.688885][T10991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.692497][T10991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.698000][T10991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.701357][T10991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.787692][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.794644][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.830609][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.833657][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.270803][T11110] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  186.278814][T11110] bridge_slave_0: left allmulticast mode
[  186.280557][T11110] bridge_slave_0: left promiscuous mode
[  186.282478][T11110] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.287960][T11110] bridge_slave_1: left allmulticast mode
[  186.289705][T11110] bridge_slave_1: left promiscuous mode
[  186.291730][T11110] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.297744][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.300641][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.304234][T11110] bond1: (slave bridge1): Releasing active interface
[  186.309974][T11110] bond7: (slave bridge3): Releasing active interface
[  186.316254][T11110] netlink: 'syz.3.1506': attribute type 10 has an invalid length.
[  186.318963][T11110] mac80211_hwsim hwsim24 wlan1: left allmulticast mode
[  186.322380][T11110] netlink: 'syz.3.1506': attribute type 1 has an invalid length.
[  186.324860][T11110] __nla_validate_parse: 4 callbacks suppressed
[  186.324867][T11110] netlink: 14550 bytes leftover after parsing attributes in process `syz.3.1506'.
[  186.753828][T11137] netlink: 'syz.4.1516': attribute type 21 has an invalid length.
[  186.757074][T11137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1516'.
[  186.820450][T11143] netlink: 'syz.4.1519': attribute type 13 has an invalid length.
[  186.823319][T11143] netlink: 'syz.4.1519': attribute type 17 has an invalid length.
[  186.842180][T11143] tipc: Resetting bearer <eth:syzkaller0>
[  186.844887][T11143] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  186.850204][T11143] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  186.855201][T11143] ip6gre1: left allmulticast mode
[  186.857656][T11143] gretap1: left allmulticast mode
[  186.863396][T11143] macvtap0: left allmulticast mode
[  186.873727][T11143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.877085][T11143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.880020][T11143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.882923][T11143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.929188][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'.
[  186.968174][T11149] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  186.970722][T11149] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  187.273734][T11156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1524'.
[  187.362000][ T5658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.367067][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1525'.
[  188.051193][T11164] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  188.234480][T11174] x_tables: ip_tables: udp match: only valid for protocol 17
[  188.249061][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.252892][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.256904][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.259584][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.262127][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.295324][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1529'.
[  188.402845][T11176] chnl_net:caif_netlink_parms(): no params data found
[  188.470411][T11176] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.472966][T11176] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.478402][T11176] bridge_slave_0: entered allmulticast mode
[  188.481900][T11176] bridge_slave_0: entered promiscuous mode
[  188.486757][T11176] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.489622][T11176] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.493428][T11176] bridge_slave_1: entered allmulticast mode
[  188.500456][T11176] bridge_slave_1: entered promiscuous mode
[  188.540905][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.548205][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.588152][T11176] team0: Port device team_slave_0 added
[  188.594193][T11176] team0: Port device team_slave_1 added
[  188.633498][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.636780][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.651721][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.748576][ T5658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.754274][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.759620][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.769374][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.799345][T11200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1534'.
[  188.802488][T11201] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1534'.
[  188.812659][T11176] hsr_slave_0: entered promiscuous mode
[  188.815404][T11176] hsr_slave_1: entered promiscuous mode
[  188.818072][T11176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.820490][T11176] Cannot create hsr debugfs directory
[  189.002504][ T5658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.060794][ T5658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.176783][ T5658] bridge_slave_1: left allmulticast mode
[  189.180621][ T5658] bridge_slave_1: left promiscuous mode
[  189.182878][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.192179][ T5658] bridge_slave_0: left allmulticast mode
[  189.194014][ T5658] bridge_slave_0: left promiscuous mode
[  189.197763][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.484965][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.491301][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.495244][ T5658] bond0 (unregistering): Released all slaves
[  189.850249][ T5658] hsr_slave_0: left promiscuous mode
[  189.856085][ T5658] hsr_slave_1: left promiscuous mode
[  189.860583][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.863466][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.870444][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.873377][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.893723][ T5658] veth1_macvtap: left promiscuous mode
[  189.897924][ T5658] veth0_macvtap: left promiscuous mode
[  189.899748][ T5658] veth1_vlan: left promiscuous mode
[  189.902780][ T5658] veth0_vlan: left promiscuous mode
[  190.331031][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  190.347730][ T5835] Bluetooth: hci2: command tx timeout
[  190.364389][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  190.732030][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1544'.
[  190.742539][T11227] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  190.825105][T11176] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  190.842105][T11176] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  190.847367][T11176] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  190.851561][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1544'.
[  190.858119][T11176] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  190.944465][ T5894] IPVS: starting estimator thread 0...
[  190.947403][T11250] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  190.964767][T11176] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.982248][T11176] 8021q: adding VLAN 0 to HW filter on device team0
[  190.991313][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.993574][ T7012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.012025][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.014228][ T7012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.040409][T11251] IPVS: using max 62 ests per chain, 148800 per kthread
[  191.155044][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.192008][T11176] veth0_vlan: entered promiscuous mode
[  191.197694][T11176] veth1_vlan: entered promiscuous mode
[  191.220988][T11176] veth0_macvtap: entered promiscuous mode
[  191.227316][T11176] veth1_macvtap: entered promiscuous mode
[  191.242445][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.259169][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.266809][T11176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.269622][T11176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.272283][T11176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.274957][T11176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.340814][ T7012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.343277][ T7012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.371194][ T7362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.373624][ T7362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.743587][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1558'.
[  192.948082][T11282] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[  192.976767][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'.
[  192.982958][T11307] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1563'.
[  193.086245][T11314] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1565'.
[  193.184809][T11318] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1567'.
[  193.211241][T11318] xt_hashlimit: size too large, truncated to 1048576
[  193.353582][ T8035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.788848][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.791022][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.185918][ T5835] Bluetooth: hci1: command 0x080f tx timeout
[  194.292728][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.306284][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.310918][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.314497][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.318196][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.488469][T11334] chnl_net:caif_netlink_parms(): no params data found
[  194.580863][T11334] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.583796][T11334] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.587404][T11334] bridge_slave_0: entered allmulticast mode
[  194.591467][T11334] bridge_slave_0: entered promiscuous mode
[  194.598841][T11334] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.601770][T11334] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.604734][T11334] bridge_slave_1: entered allmulticast mode
[  194.609187][T11334] bridge_slave_1: entered promiscuous mode
[  194.644004][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.650898][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.697874][T11334] team0: Port device team_slave_0 added
[  194.704075][T11334] team0: Port device team_slave_1 added
[  194.740423][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.743074][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.758608][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.764701][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.767830][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.778431][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.816611][T11334] hsr_slave_0: entered promiscuous mode
[  194.819420][T11334] hsr_slave_1: entered promiscuous mode
[  194.821696][T11334] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.823940][T11334] Cannot create hsr debugfs directory
[  194.941746][T11344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1571'.
[  194.945038][T11344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1571'.
[  194.949134][T11344] netlink: 'syz.4.1571': attribute type 1 has an invalid length.
[  195.031383][T11348] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1573'.
[  195.212037][ T8035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.284022][ T8035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.350049][ T8035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.449425][ T8035] bridge_slave_1: left allmulticast mode
[  195.451450][ T8035] bridge_slave_1: left promiscuous mode
[  195.458163][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.465177][ T8035] bridge_slave_0: left allmulticast mode
[  195.468227][ T8035] bridge_slave_0: left promiscuous mode
[  195.470595][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.863263][ T8035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.871587][ T8035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.878019][ T8035] bond0 (unregistering): Released all slaves
[  196.032646][T11371] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  196.089061][T11371] tipc: Resetting bearer <eth:syzkaller0>
[  196.162622][ T8035] hsr_slave_0: left promiscuous mode
[  196.177706][ T8035] hsr_slave_1: left promiscuous mode
[  196.180156][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.182541][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1585'.
[  196.183322][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.190537][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.193223][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.214024][ T8035] veth1_macvtap: left promiscuous mode
[  196.216521][ T8035] veth0_macvtap: left promiscuous mode
[  196.218891][ T8035] veth1_vlan: left promiscuous mode
[  196.220993][ T8035] veth0_vlan: left promiscuous mode
[  196.346554][ T5830] Bluetooth: hci2: command tx timeout
[  196.677995][ T8035] team0 (unregistering): Port device team_slave_1 removed
[  196.710729][ T8035] team0 (unregistering): Port device team_slave_0 removed
[  197.192818][T11334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  197.201056][T11334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  197.216613][T11334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  197.222950][T11334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  197.342526][T11387] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1588'.
[  197.352243][T11334] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.367494][T11334] 8021q: adding VLAN 0 to HW filter on device team0
[  197.379708][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.382540][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.399383][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.402146][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.577120][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.624098][T11334] veth0_vlan: entered promiscuous mode
[  197.633749][T11334] veth1_vlan: entered promiscuous mode
[  197.661613][T11334] veth0_macvtap: entered promiscuous mode
[  197.678969][T11334] veth1_macvtap: entered promiscuous mode
[  197.688755][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.695050][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.707527][T11334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.710115][T11334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.712811][T11334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.715392][T11334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.775441][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.783999][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.803673][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.807496][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.032828][T11424] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.144724][T11428] __nla_validate_parse: 2 callbacks suppressed
[  198.144736][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1599'.
[  198.150290][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1599'.
[  198.152932][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1599'.
[  198.156197][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1599'.
[  198.674791][T11451] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.1605'.
[  198.679511][T11451] ieee802154 phy0 wpan0: encryption failed: -22
[  198.771653][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  198.888555][T11463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'.
[  199.886168][T11501] netlink: 'syz.4.1611': attribute type 21 has an invalid length.
[  199.889340][T11501] netlink: 'syz.4.1611': attribute type 6 has an invalid length.
[  199.892393][T11501] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1611'.
[  199.952172][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'.
[  199.976621][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'.
[  199.976721][ T6708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.089916][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  201.093640][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  201.096739][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  201.102557][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  201.106306][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.250074][T11530] chnl_net:caif_netlink_parms(): no params data found
[  201.361938][T11530] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.364403][T11530] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.367962][T11530] bridge_slave_0: entered allmulticast mode
[  201.371293][T11530] bridge_slave_0: entered promiscuous mode
[  201.381320][T11530] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.383876][T11530] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.388849][T11530] bridge_slave_1: entered allmulticast mode
[  201.392268][T11530] bridge_slave_1: entered promiscuous mode
[  201.399447][T11558] veth6: entered allmulticast mode
[  201.431662][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.436937][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.467364][T11559] veth6: entered allmulticast mode
[  201.476780][T11530] team0: Port device team_slave_0 added
[  201.481902][T11530] team0: Port device team_slave_1 added
[  201.513620][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.519137][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.528751][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.536658][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.538762][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.568849][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.593792][ T6708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.633691][T11530] hsr_slave_0: entered promiscuous mode
[  201.637310][T11530] hsr_slave_1: entered promiscuous mode
[  201.640267][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.642720][T11530] Cannot create hsr debugfs directory
[  201.683857][ T6708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.713550][T11570] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  201.742721][ T6708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.884861][T11574] dummy0: entered allmulticast mode
[  201.891920][ T6708] bridge_slave_1: left allmulticast mode
[  201.894128][ T6708] bridge_slave_1: left promiscuous mode
[  201.896872][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.901755][ T6708] bridge_slave_0: left allmulticast mode
[  201.903983][ T6708] bridge_slave_0: left promiscuous mode
[  201.908514][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.271087][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.276046][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.281148][ T6708] bond0 (unregistering): Released all slaves
[  202.545106][ T6708] hsr_slave_0: left promiscuous mode
[  202.548337][ T6708] hsr_slave_1: left promiscuous mode
[  202.551108][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.553932][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.557265][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.560357][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.581104][ T6708] veth1_macvtap: left promiscuous mode
[  202.583112][ T6708] veth0_macvtap: left promiscuous mode
[  202.585146][ T6708] veth1_vlan: left promiscuous mode
[  202.588290][ T6708] veth0_vlan: left promiscuous mode
[  203.123244][ T6708] team0 (unregistering): Port device team_slave_1 removed
[  203.149721][ T5830] Bluetooth: hci2: command tx timeout
[  203.168481][ T6708] team0 (unregistering): Port device team_slave_0 removed
[  203.753710][T11530] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  203.779380][T11530] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  203.809633][T11530] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  203.836410][T11530] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  203.992974][T11530] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.045028][T11606] __nla_validate_parse: 2 callbacks suppressed
[  204.045041][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'.
[  204.050216][T11530] 8021q: adding VLAN 0 to HW filter on device team0
[  204.063936][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.066234][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.077443][T11606] netlink: 'syz.4.1638': attribute type 6 has an invalid length.
[  204.088308][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.091193][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.338353][T11618] ip6gre2: entered allmulticast mode
[  204.412447][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.446059][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'.
[  204.448700][T11627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1644'.
[  204.472970][T11530] veth0_vlan: entered promiscuous mode
[  204.487602][T11530] veth1_vlan: entered promiscuous mode
[  204.521208][T11530] veth0_macvtap: entered promiscuous mode
[  204.539785][T11530] veth1_macvtap: entered promiscuous mode
[  204.564567][T11634] netlink: 'syz.3.1643': attribute type 6 has an invalid length.
[  204.606967][T11635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1645'.
[  204.757112][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.771402][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.789970][T11530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.793332][T11530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.816103][T11530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.820343][T11530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.883329][T11648] netlink: 'syz.4.1648': attribute type 7 has an invalid length.
[  204.886272][T11647] netlink: 'syz.3.1649': attribute type 23 has an invalid length.
[  204.896698][T11649] netlink: 'syz.4.1648': attribute type 7 has an invalid length.
[  204.938553][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.940946][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.973462][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.976712][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.139288][T11656] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1652'.
[  205.581452][T11681] netlink: 'syz.3.1660': attribute type 23 has an invalid length.
[  205.588278][T11682] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  205.592800][T11682] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  205.622442][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[  205.681944][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1663'.
[  205.763964][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'.
[  205.907481][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'.
[  205.992536][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1671'.
[  206.151675][T11719] netlink: 'syz.3.1675': attribute type 23 has an invalid length.
[  206.270318][ T5658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.256762][T11726] netlink: 'syz.4.1678': attribute type 2 has an invalid length.
[  207.490265][ T5658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.494602][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.500085][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.505765][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.510306][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.514550][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.657372][T11748] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  207.699620][ T5658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.712727][T11739] chnl_net:caif_netlink_parms(): no params data found
[  207.750767][ T5658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.764053][T11753] openvswitch: netlink: Flow key attribute not present in set flow.
[  207.832303][T11753] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.837731][T11753] 8021q: adding VLAN 0 to HW filter on device team0
[  207.841162][T11753] dummy0: left allmulticast mode
[  207.845045][T11753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.911519][T11739] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.916777][T11739] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.919248][T11739] bridge_slave_0: entered allmulticast mode
[  207.922136][T11739] bridge_slave_0: entered promiscuous mode
[  207.952565][T11739] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.956786][T11739] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.959861][T11739] bridge_slave_1: entered allmulticast mode
[  207.963799][T11739] bridge_slave_1: entered promiscuous mode
[  207.991950][T11760] vti0: entered promiscuous mode
[  208.051599][T11739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.060249][T11739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.065276][ T5658] bridge_slave_1: left allmulticast mode
[  208.069375][ T5658] bridge_slave_1: left promiscuous mode
[  208.072135][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.078253][ T5658] bridge_slave_0: left allmulticast mode
[  208.080507][ T5658] bridge_slave_0: left promiscuous mode
[  208.082789][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.504728][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.511491][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.515306][ T5658] bond0 (unregistering): Released all slaves
[  208.591772][T11739] team0: Port device team_slave_0 added
[  208.600727][T11739] team0: Port device team_slave_1 added
[  208.720840][T11739] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.723610][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.734629][T11739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.763282][T11774] wg2: entered promiscuous mode
[  208.776770][T11739] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.779556][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.793523][T11739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.816896][T11777] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  208.999578][T11739] hsr_slave_0: entered promiscuous mode
[  209.002833][T11739] hsr_slave_1: entered promiscuous mode
[  209.006977][T11739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.010040][T11739] Cannot create hsr debugfs directory
[  209.043030][ T5658] hsr_slave_0: left promiscuous mode
[  209.047801][ T5658] hsr_slave_1: left promiscuous mode
[  209.057135][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.060142][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.066356][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.069252][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.099626][ T5658] veth1_macvtap: left promiscuous mode
[  209.102056][ T5658] veth0_macvtap: left promiscuous mode
[  209.104664][ T5658] veth1_vlan: left promiscuous mode
[  209.107428][ T5658] veth0_vlan: left promiscuous mode
[  209.546823][ T5835] Bluetooth: hci2: command tx timeout
[  209.600297][ T5658] team0 (unregistering): Port device team_slave_1 removed
[  209.644062][ T5658] team0 (unregistering): Port device team_slave_0 removed
[  210.148713][T11797] __nla_validate_parse: 3 callbacks suppressed
[  210.148732][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  210.155297][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1698'.
[  210.232386][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'.
[  210.247116][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'.
[  210.268846][T11802] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1699'.
[  210.272877][T11802] nbd: socks must be embedded in a SOCK_ITEM attr
[  210.392654][T11808] netlink: 'syz.3.1701': attribute type 23 has an invalid length.
[  210.761285][T11739] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  210.768428][T11739] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.774439][T11739] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.781751][T11739] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.860385][T11739] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.873425][T11739] 8021q: adding VLAN 0 to HW filter on device team0
[  210.882996][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.885400][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.897261][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.899613][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.911339][T11839] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  210.938847][T11739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.032846][T11842] tipc: Resetting bearer <eth:syzkaller0>
[  211.070265][T11739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.103891][T11739] veth0_vlan: entered promiscuous mode
[  211.122600][T11739] veth1_vlan: entered promiscuous mode
[  211.169687][T11739] veth0_macvtap: entered promiscuous mode
[  211.175448][T11739] veth1_macvtap: entered promiscuous mode
[  211.190333][T11739] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.202363][T11739] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.208042][T11739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.211510][T11739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.214682][T11739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.220309][T11739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.298224][T11855] batadv1: entered promiscuous mode
[  211.310154][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.313280][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.337150][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.339873][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.559674][T11861] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  211.749422][T11867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.752256][T11867] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode
[  211.754619][T11867] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode
[  211.763933][T11867] tipc: Resetting bearer <eth:syzkaller0>
[  211.798402][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'.
[  211.808664][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'.
[  211.843556][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  212.434829][T11907] netlink: 'syz.4.1730': attribute type 23 has an invalid length.
[  213.050327][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.096221][T11914] batadv_slave_1: entered promiscuous mode
[  214.115841][ T5830] Bluetooth: hci1: command 0x080f tx timeout
[  214.149966][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'.
[  214.390057][T11913] batadv_slave_1: left promiscuous mode
[  214.397386][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.402949][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.409452][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.413957][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.419695][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.475362][T11937] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1738'.
[  214.624604][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.703432][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.718255][T11934] chnl_net:caif_netlink_parms(): no params data found
[  214.782573][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.850003][T11934] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.852391][T11934] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.854683][T11934] bridge_slave_0: entered allmulticast mode
[  214.858049][T11934] bridge_slave_0: entered promiscuous mode
[  214.861957][T11934] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.864381][T11934] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.867344][T11934] bridge_slave_1: entered allmulticast mode
[  214.870242][T11934] bridge_slave_1: entered promiscuous mode
[  214.896764][T11934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.902199][T11934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.939492][T11934] team0: Port device team_slave_0 added
[  214.969557][T11934] team0: Port device team_slave_1 added
[  215.049320][T11934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.057512][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.074012][T11934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.101692][T11934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.104529][T11934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.116967][T11934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.121028][   T13] bridge_slave_1: left allmulticast mode
[  215.123556][   T13] bridge_slave_1: left promiscuous mode
[  215.126578][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.135382][   T13] bridge_slave_0: left allmulticast mode
[  215.140760][   T13] bridge_slave_0: left promiscuous mode
[  215.148087][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.471249][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.476423][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.480559][   T13] bond0 (unregistering): Released all slaves
[  215.593331][T11934] hsr_slave_0: entered promiscuous mode
[  215.601281][T11934] hsr_slave_1: entered promiscuous mode
[  215.604372][T11934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.608309][T11934] Cannot create hsr debugfs directory
[  215.679593][T11975] netlink: 'syz.3.1747': attribute type 1 has an invalid length.
[  215.693675][T11975] __nla_validate_parse: 1 callbacks suppressed
[  215.693691][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1747'.
[  215.714481][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'.
[  215.845289][T11981] IPVS: length: 201 != 8
[  215.897409][   T13] hsr_slave_0: left promiscuous mode
[  215.900286][   T13] hsr_slave_1: left promiscuous mode
[  215.908995][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.916101][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.919335][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.921571][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.957802][   T13] veth1_macvtap: left promiscuous mode
[  215.959732][   T13] veth0_macvtap: left promiscuous mode
[  215.961644][   T13] veth1_vlan: left promiscuous mode
[  215.963413][   T13] veth0_vlan: left promiscuous mode
[  215.970468][T11986] netlink: 'syz.4.1751': attribute type 23 has an invalid length.
[  216.008976][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'.
[  216.147933][T11994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1752'.
[  216.353473][   T13] team0 (unregistering): Port device team_slave_1 removed
[  216.388897][   T13] team0 (unregistering): Port device team_slave_0 removed
[  216.436819][ T5830] Bluetooth: hci2: command tx timeout
[  216.920529][T11997] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  216.923701][T11997] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  217.023988][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'.
[  217.256150][T11934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.267750][T11934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.280461][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'.
[  217.290612][T11934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  217.303936][T11934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  217.379417][T12025] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  217.390641][T12025] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  217.414164][T11934] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.435432][T11934] 8021q: adding VLAN 0 to HW filter on device team0
[  217.443982][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.446948][ T7012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.462779][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.465685][ T7012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.578936][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1762'.
[  217.646931][T11934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.689194][T11934] veth0_vlan: entered promiscuous mode
[  217.709609][T11934] veth1_vlan: entered promiscuous mode
[  217.720291][T12040] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1765'.
[  217.738625][T11934] veth0_macvtap: entered promiscuous mode
[  217.743051][T11934] veth1_macvtap: entered promiscuous mode
[  217.759684][T11934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.767624][T11934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.778957][T11934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.781741][T11934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.784408][T11934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.788699][T11934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.879407][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.887501][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.910100][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.912510][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.979497][T12051] netlink: 'syz.3.1769': attribute type 2 has an invalid length.
[  217.982102][T12051] netlink: 'syz.3.1769': attribute type 1 has an invalid length.
[  217.984652][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'.
[  217.989323][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'.
[  218.562943][T12070] bond0: invalid ARP target 0.0.0.0 specified for addition
[  218.569341][T12070] bond0: option arp_ip_target: invalid value (0)
[  218.710390][T12074] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.714396][T12074] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  218.719589][T12074] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  218.739600][T12074] sch_fq: defrate 257 ignored.
[  218.988859][T12088] netlink: 'syz.3.1782': attribute type 3 has an invalid length.
[  219.210833][T12102] pim6reg1: entered promiscuous mode
[  219.213139][T12102] pim6reg1: entered allmulticast mode
[  219.714464][T12124] netlink: 'syz.4.1792': attribute type 1 has an invalid length.
[  219.742460][ T6708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.011363][T12131] macsec2: entered promiscuous mode
[  221.013022][T12131] macsec2: entered allmulticast mode
[  221.066609][T12138] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.117309][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.121056][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.123818][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.129256][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.131739][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.353629][T12139] chnl_net:caif_netlink_parms(): no params data found
[  221.444060][T12149] __nla_validate_parse: 15 callbacks suppressed
[  221.444075][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'.
[  221.491112][ T6708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.526916][T12158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.571626][ T6708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.603272][T12139] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.606459][T12139] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.609159][T12139] bridge_slave_0: entered allmulticast mode
[  221.612352][T12139] bridge_slave_0: entered promiscuous mode
[  221.617840][T12139] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.620625][T12139] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.623032][T12139] bridge_slave_1: entered allmulticast mode
[  221.633171][T12139] bridge_slave_1: entered promiscuous mode
[  221.679417][ T6708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.706909][T12139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.712345][T12139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.753318][T12139] team0: Port device team_slave_0 added
[  221.760082][T12139] team0: Port device team_slave_1 added
[  221.823050][T12139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.829998][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.840363][T12139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.901720][T12139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.904789][T12139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.914403][T12139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.987460][ T6708] bridge_slave_1: left allmulticast mode
[  221.990623][ T6708] bridge_slave_1: left promiscuous mode
[  221.994433][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.011315][ T6708] bridge_slave_0: left allmulticast mode
[  222.013022][ T6708] bridge_slave_0: left promiscuous mode
[  222.022516][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.161859][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'.
[  222.247265][T12187] nbd3: detected capacity change from 0 to 127
[  222.264023][   T56] block nbd3: Receive control failed (result -32)
[  222.267333][ T7258] block nbd3: Send control failed (result -32)
[  222.267425][ T7258] block nbd3: Request send failed, requeueing
[  222.270923][   T60] block nbd3: Dead connection, failed to find a fallback
[  222.275312][   T60] block nbd3: shutting down sockets
[  222.278078][   T60] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.282901][   T60] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.292941][ T7258] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.296735][ T7258] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.301439][ T7258] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.304953][ T7258] Buffer I/O error on dev nbd3, logical block 2, async page read
[  222.309225][ T7258] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.312523][ T7258] Buffer I/O error on dev nbd3, logical block 3, async page read
[  222.329902][ T7258] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.333024][ T7258] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.335826][ T7258] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.338686][ T7258] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.342353][ T7258] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.345319][ T7258] Buffer I/O error on dev nbd3, logical block 2, async page read
[  222.348269][ T7258] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.351227][ T7258] Buffer I/O error on dev nbd3, logical block 3, async page read
[  222.354508][ T7258] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.358299][ T7258] Buffer I/O error on dev nbd3, logical block 0, async page read
[  222.361425][ T7258] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  222.364914][ T7258] Buffer I/O error on dev nbd3, logical block 1, async page read
[  222.372255][ T7258] ldm_validate_partition_table(): Disk read failed.
[  222.378229][ T7258] Dev nbd3: unable to read RDB block 0
[  222.382060][ T7258]  nbd3: unable to read partition table
[  222.397612][ T7258] ldm_validate_partition_table(): Disk read failed.
[  222.401682][ T7258] Dev nbd3: unable to read RDB block 0
[  222.405396][ T7258]  nbd3: unable to read partition table
[  222.558673][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.565040][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.570892][ T6708] bond0 (unregistering): Released all slaves
[  222.647016][T12139] hsr_slave_0: entered promiscuous mode
[  222.650010][T12139] hsr_slave_1: entered promiscuous mode
[  222.652937][T12139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.658840][T12139] Cannot create hsr debugfs directory
[  222.872168][ T6708] hsr_slave_0: left promiscuous mode
[  222.874845][ T6708] hsr_slave_1: left promiscuous mode
[  222.877914][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.880473][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.883840][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.889736][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.907283][ T6708] veth1_macvtap: left promiscuous mode
[  222.909205][ T6708] veth0_macvtap: left promiscuous mode
[  222.911493][ T6708] veth1_vlan: left promiscuous mode
[  222.913365][ T6708] veth0_vlan: left promiscuous mode
[  223.145726][ T5835] Bluetooth: hci2: command tx timeout
[  223.325237][ T6708] team0 (unregistering): Port device team_slave_1 removed
[  223.377263][ T6708] team0 (unregistering): Port device team_slave_0 removed
[  223.707724][T12211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1817'.
[  223.926754][T12213] syzkaller1: entered promiscuous mode
[  223.929159][T12213] syzkaller1: entered allmulticast mode
[  224.423457][T12139] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  224.441360][T12139] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  224.451810][T12139] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  224.457877][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'.
[  224.469637][T12139] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  224.634818][T12256] netlink: 'syz.4.1831': attribute type 142 has an invalid length.
[  224.678700][T12139] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.708852][T12139] 8021q: adding VLAN 0 to HW filter on device team0
[  224.721958][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.724347][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.744018][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.747010][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.802081][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  224.808420][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  224.812066][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  224.815431][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  224.827888][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  224.835635][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'.
[  225.030673][T12276] 
[  225.031599][T12276] ======================================================
[  225.034031][T12276] WARNING: possible circular locking dependency detected
[  225.036337][T12276] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  225.039424][T12276] ------------------------------------------------------
[  225.042439][T12276] syz.3.1837/12276 is trying to acquire lock:
[  225.044292][T12276] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  225.047128][T12276] 
[  225.047128][T12276] but task is already holding lock:
[  225.049319][T12276] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  225.052686][T12276] 
[  225.052686][T12276] which lock already depends on the new lock.
[  225.052686][T12276] 
[  225.056462][T12276] 
[  225.056462][T12276] the existing dependency chain (in reverse order) is:
[  225.059857][T12276] 
[  225.059857][T12276] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  225.062626][T12276]        lock_acquire+0x120/0x360
[  225.064247][T12276]        _raw_spin_lock_bh+0x36/0x50
[  225.065907][T12276]        nr_rt_ioctl+0x390/0xd50
[  225.067437][T12276]        sock_do_ioctl+0xdc/0x300
[  225.069127][T12276]        sock_ioctl+0x576/0x790
[  225.070803][T12276]        __se_sys_ioctl+0xfc/0x170
[  225.072399][T12276]        do_syscall_64+0xfa/0x3b0
[  225.073920][T12276]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.075969][T12276] 
[  225.075969][T12276] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  225.078805][T12276]        lock_acquire+0x120/0x360
[  225.080463][T12276]        _raw_spin_lock_bh+0x36/0x50
[  225.082232][T12276]        nr_rt_ioctl+0x193/0xd50
[  225.083790][T12276]        sock_do_ioctl+0xdc/0x300
[  225.085352][T12276]        sock_ioctl+0x576/0x790
[  225.087044][T12276]        __se_sys_ioctl+0xfc/0x170
[  225.088746][T12276]        do_syscall_64+0xfa/0x3b0
[  225.090377][T12276]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.092490][T12276] 
[  225.092490][T12276] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  225.095017][T12276]        validate_chain+0xb9b/0x2140
[  225.097118][T12276]        __lock_acquire+0xab9/0xd20
[  225.099186][T12276]        lock_acquire+0x120/0x360
[  225.100860][T12276]        _raw_spin_lock_bh+0x36/0x50
[  225.102647][T12276]        nr_rt_device_down+0xa9/0x720
[  225.104515][T12276]        nr_device_event+0x137/0x150
[  225.106379][T12276]        notifier_call_chain+0x1b6/0x3e0
[  225.108300][T12276]        dev_close_many+0x29c/0x410
[  225.110045][T12276]        netif_close+0x158/0x210
[  225.111674][T12276]        dev_close+0x10a/0x220
[  225.113220][T12276]        bpq_device_event+0x2f4/0x600
[  225.115132][T12276]        notifier_call_chain+0x1b6/0x3e0
[  225.117363][T12276]        dev_close_many+0x29c/0x410
[  225.119423][T12276]        netif_close+0x158/0x210
[  225.121365][T12276]        dev_close+0x10a/0x220
[  225.123104][T12276]        bond_setup_by_slave+0x5f/0x3f0
[  225.124949][T12276]        bond_enslave+0x7a0/0x3a20
[  225.127002][T12276]        bond_do_ioctl+0x635/0x9b0
[  225.129050][T12276]        dev_ifsioc+0x90b/0xf00
[  225.130982][T12276]        dev_ioctl+0x7b4/0x1150
[  225.132914][T12276]        sock_do_ioctl+0x22c/0x300
[  225.134922][T12276]        sock_ioctl+0x576/0x790
[  225.136700][T12276]        __se_sys_ioctl+0xfc/0x170
[  225.138223][T12276]        do_syscall_64+0xfa/0x3b0
[  225.139960][T12276]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.141986][T12276] 
[  225.141986][T12276] other info that might help us debug this:
[  225.141986][T12276] 
[  225.145409][T12276] Chain exists of:
[  225.145409][T12276]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  225.145409][T12276] 
[  225.150258][T12276]  Possible unsafe locking scenario:
[  225.150258][T12276] 
[  225.152902][T12276]        CPU0                    CPU1
[  225.154583][T12276]        ----                    ----
[  225.156239][T12276]   lock(nr_neigh_list_lock);
[  225.157741][T12276]                                lock(&nr_node->node_lock);
[  225.159957][T12276]                                lock(nr_neigh_list_lock);
[  225.162177][T12276]   lock(nr_node_list_lock);
[  225.163599][T12276] 
[  225.163599][T12276]  *** DEADLOCK ***
[  225.163599][T12276] 
[  225.166063][T12276] 2 locks held by syz.3.1837/12276:
[  225.167632][T12276]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  225.170251][T12276]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  225.173275][T12276] 
[  225.173275][T12276] stack backtrace:
[  225.175111][T12276] CPU: 0 UID: 0 PID: 12276 Comm: syz.3.1837 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.175124][T12276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.175132][T12276] Call Trace:
[  225.175139][T12276]  <TASK>
[  225.175146][T12276]  dump_stack_lvl+0x189/0x250
[  225.175162][T12276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.175172][T12276]  ? __pfx__printk+0x10/0x10
[  225.175184][T12276]  ? print_lock_name+0xde/0x100
[  225.175196][T12276]  print_circular_bug+0x2ee/0x310
[  225.175210][T12276]  check_noncircular+0x134/0x160
[  225.175221][T12276]  validate_chain+0xb9b/0x2140
[  225.175232][T12276]  ? rt6_disable_ip+0x6b3/0x720
[  225.175245][T12276]  ? __lock_acquire+0xab9/0xd20
[  225.175254][T12276]  __lock_acquire+0xab9/0xd20
[  225.175263][T12276]  ? nr_rt_device_down+0xa9/0x720
[  225.175271][T12276]  lock_acquire+0x120/0x360
[  225.175279][T12276]  ? nr_rt_device_down+0xa9/0x720
[  225.175290][T12276]  ? nr_rt_device_down+0xa9/0x720
[  225.175297][T12276]  _raw_spin_lock_bh+0x36/0x50
[  225.175310][T12276]  ? nr_rt_device_down+0xa9/0x720
[  225.175317][T12276]  nr_rt_device_down+0xa9/0x720
[  225.175325][T12276]  ? do_raw_spin_unlock+0x4d/0x240
[  225.175337][T12276]  nr_device_event+0x137/0x150
[  225.175349][T12276]  notifier_call_chain+0x1b6/0x3e0
[  225.175361][T12276]  dev_close_many+0x29c/0x410
[  225.175371][T12276]  ? __pfx_dev_close_many+0x10/0x10
[  225.175379][T12276]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  225.175391][T12276]  ? bond_netdev_event+0x227/0xe80
[  225.175404][T12276]  netif_close+0x158/0x210
[  225.175412][T12276]  ? __pfx_netif_close+0x10/0x10
[  225.175420][T12276]  ? tun_device_event+0x77/0x1020
[  225.175431][T12276]  dev_close+0x10a/0x220
[  225.175441][T12276]  bpq_device_event+0x2f4/0x600
[  225.175454][T12276]  notifier_call_chain+0x1b6/0x3e0
[  225.175465][T12276]  dev_close_many+0x29c/0x410
[  225.175474][T12276]  ? __pfx_dev_close_many+0x10/0x10
[  225.175484][T12276]  netif_close+0x158/0x210
[  225.175492][T12276]  ? __pfx_netif_close+0x10/0x10
[  225.175500][T12276]  ? do_raw_spin_lock+0x121/0x290
[  225.175513][T12276]  ? __local_bh_enable_ip+0x12d/0x1c0
[  225.175523][T12276]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.175535][T12276]  dev_close+0x10a/0x220
[  225.175544][T12276]  bond_setup_by_slave+0x5f/0x3f0
[  225.175557][T12276]  bond_enslave+0x7a0/0x3a20
[  225.175568][T12276]  ? arch_stack_walk+0xfc/0x150
[  225.175583][T12276]  ? __pfx_bond_enslave+0x10/0x10
[  225.175596][T12276]  ? apparmor_capable+0x137/0x1b0
[  225.175605][T12276]  ? full_name_hash+0x92/0xe0
[  225.175618][T12276]  ? netdev_name_node_lookup+0xdf/0x120
[  225.175630][T12276]  bond_do_ioctl+0x635/0x9b0
[  225.175640][T12276]  ? __pfx_bond_do_ioctl+0x10/0x10
[  225.175647][T12276]  ? trace_contention_end+0x39/0x120
[  225.175660][T12276]  ? __mutex_lock+0x330/0xe80
[  225.175671][T12276]  ? full_name_hash+0x92/0xe0
[  225.175684][T12276]  ? netdev_name_node_lookup+0xdf/0x120
[  225.175706][T12276]  dev_ifsioc+0x90b/0xf00
[  225.175717][T12276]  ? dev_load+0x21/0x1f0
[  225.175727][T12276]  dev_ioctl+0x7b4/0x1150
[  225.175736][T12276]  sock_do_ioctl+0x22c/0x300
[  225.175752][T12276]  ? __pfx_sock_do_ioctl+0x10/0x10
[  225.175763][T12276]  ? __lock_acquire+0xab9/0xd20
[  225.175775][T12276]  sock_ioctl+0x576/0x790
[  225.175787][T12276]  ? __pfx_sock_ioctl+0x10/0x10
[  225.175797][T12276]  ? __fget_files+0x2a/0x420
[  225.175807][T12276]  ? __fget_files+0x3a0/0x420
[  225.175817][T12276]  ? __fget_files+0x2a/0x420
[  225.175827][T12276]  ? bpf_lsm_file_ioctl+0x9/0x20
[  225.175836][T12276]  ? __pfx_sock_ioctl+0x10/0x10
[  225.175846][T12276]  __se_sys_ioctl+0xfc/0x170
[  225.175855][T12276]  do_syscall_64+0xfa/0x3b0
[  225.175863][T12276]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.175874][T12276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.175920][T12276]  ? exc_page_fault+0x9f/0xf0
[  225.175939][T12276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.175952][T12276] RIP: 0033:0x7f7adc38e929
[  225.175966][T12276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.175979][T12276] RSP: 002b:00007f7add1e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  225.176010][T12276] RAX: ffffffffffffffda RBX: 00007f7adc5b5fa0 RCX: 00007f7adc38e929
[  225.176016][T12276] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 000000000000000d
[  225.176022][T12276] RBP: 00007f7adc410b39 R08: 0000000000000000 R09: 0000000000000000
[  225.176028][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.176034][T12276] R13: 0000000000000000 R14: 00007f7adc5b5fa0 R15: 00007ffec05bc068
[  225.176043][T12276]  </TASK>
[  225.347552][ T5835] Bluetooth: hci2: command tx timeout
[  225.361755][T12276] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.368727][T12276] bond0: (slave rose0): Enslaving as an active interface with an up link
[  227.061374][ T6708] bridge_slave_1: left allmulticast mode
[  227.063617][ T6708] bridge_slave_1: left promiscuous mode
[  227.066974][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.071305][ T6708] bridge_slave_0: left allmulticast mode
[  227.073577][ T6708] bridge_slave_0: left promiscuous mode
[  227.077668][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.166659][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.171612][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.176529][ T6708] bond0 (unregistering): Released all slaves
[  227.289909][ T6708] hsr_slave_0: left promiscuous mode
[  227.292664][ T6708] hsr_slave_1: left promiscuous mode
[  227.295251][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.298941][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.407940][ T6708] team0 (unregistering): Port device team_slave_1 removed
[  227.429601][ T6708] team0 (unregistering): Port device team_slave_0 removed
[  228.463887][ T6708] bond0 (unregistering): Released all slaves
[  228.469187][ T6708] bond1 (unregistering): Released all slaves
[  228.473772][ T6708] bond2 (unregistering): Released all slaves
[  228.478509][ T6708] bond3 (unregistering): Released all slaves
[  228.522552][ T6708] tipc: Disabling bearer <eth:syzkaller0>
[  228.525018][ T6708] tipc: Left network mode
[  228.737804][ T6708] pim6reg (unregistering): left allmulticast mode
[  229.414052][ T6708] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
09:10:21  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006cbb RDI=0000000000006cbc RBP=00000000000003f8 RSP=ffffc9000174e8d0
R8 =ffff888021a40237 R9 =1ffff11004348046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af988f R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7add1e96c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30115ff8 CR3=000000011e1f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7adc411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c210 RBX=ffff88813663b1c0 RCX=ffff888021a59cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000338f700 RSP=ffffc9000338f5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63614e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f63609856a3 00007f63609856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555565c8d0d9 0000555565c8bde0
XMM06=0000000000000000 0000000000000000 XMM07=ffffffffffffffff e508048003001000
XMM08=4280040100000008 0606015ad6200800 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
