last executing test programs:

839.888238ms ago: executing program 0 (id=5932):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000440)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x16, &(0x7f0000000b80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x2160)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

729.969124ms ago: executing program 0 (id=5933):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async)
close(0x4)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r1, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010)

725.438784ms ago: executing program 1 (id=5935):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="003bbdbf4fffceba03000000000000140012800c0001006d6163766c616e0004", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd700017a5aec700000200000000008a803b588c5c2678ee6c921fa3a00f84cc4c40861d6cdc553d4301c939cb54f9467883c79667683259", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000e0cdfe66c403eb9b86e73076fdc605e3bc714bcfe88b18ce3664137cb114e2995e7a1e4dd40161e25886b48a7db7f5f80262934a08f6928f1a629e14b95c16c9b4ead03cc7c530d88e1a50c1c6d15cdcb35ad090617a315045bbaec30c6ea07ad208cfde7348d6ba1de6559a7c2f386520b4a432bd7bb11185e0cd692a10246c00597f489d064b7f309ca531dfd8700081f2987de434d6ede798", @ANYRES16=r12, @ANYBLOB="01072bbd7000ffdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r13 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
shutdown(r14, 0x0) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000200)={<r15=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x7a, &(0x7f0000000640)={r15, @in6={{0xa, 0x4e21, 0xffff3de2, @loopback, 0x7}}}, &(0x7f0000000540)=0x84) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_MAXSEG(r13, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r15, &(0x7f00000000c0)=0x4) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x32)
r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
setsockopt$sock_linger(r13, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x8}, 0x8)

620.212185ms ago: executing program 0 (id=5936):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0xf)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x4, 0x81, 0x3}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="007a0001000000000000001000aaa2b3e0cef2535e4886df9623ed1729000000000000004b018cd181b0ba", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001a0008000000050019000300000050446ae670d60da94308d4fef663ba27693218614f1fd1a17aa921d60e90f9b8e164284e438de23a3d2d1e8d78b8bca290791cd2c49e1343fb38294444e7f31132f33e36292386a4610f17356b90865dd9e9f3b28ad7eb"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

538.871327ms ago: executing program 0 (id=5938):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1, 0x7}, 0x50)
r2 = socket(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f00000004c0), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

537.68662ms ago: executing program 2 (id=5939):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r0, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x52, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r9, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)

531.783461ms ago: executing program 1 (id=5940):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000000)=""/115, 0x73, <r0=>0x0, &(0x7f0000000100)=""/70, 0x46}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xe, 0xb, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x20, 0x70bd28, 0x25dfdbfd, {0x2, 0x14, 0x14, 0x6, 0xb, 0x0, 0x0, 0x6}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x700, 0x7ff, 0x7, {{0x12, 0x4, 0x0, 0x14, 0x48, 0x64, 0x0, 0x40, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x1f, 0x90, [@rand_addr=0x64010100, @loopback, @multicast2, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}, @local]}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x8, [0x10b6, 0xfffffffb]}, @noop, @generic={0x88, 0x7, "96e0307a45"}, @end]}}}}})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
close(0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1341, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe64, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f00000002c0), &(0x7f0000000240)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvfrom(r3, &(0x7f0000000200)=""/29, 0x1d, 0x140, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x891b, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r8, 0x40106e80, &(0x7f0000000080)={0x80008000000000})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10)

417.286655ms ago: executing program 2 (id=5941):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 64)
r1 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, 0x0, 0x0) (async, rerun: 32)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) (async, rerun: 32)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x0, 0x20}, 0xc)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080), 0x0)
sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x8020) (async)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=<r8=>0x0) (async, rerun: 32)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r9)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x34, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty=0x2000a00}]}, 0x34}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) (async)
bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
close(r7)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000006100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x2874, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c0, 0x3, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x101, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xa6}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8e}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xabc, 0x3, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6a0}, @NFTA_SET_ELEM_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "30bf51dc5ef8360349686fcb5f214f527c5a906b23c2e203608513745ab6a7f943d1844891701ad8130cb1aa42bf16930939c87d0837b2d423fb49030d0cc3ba3d7c2083f96260a844828e1274fb5d7f3b8dd2d2abd1fd04b386583150eccfc44feae92fe5f5fbbe8ad705c3cb2e801b84c63dd52f4c9950e3ebd5cc0fc1617906da9b36"}, @NFTA_DATA_VALUE={0x52, 0x1, "9197d423f2a2627c957e2cb61a493db1a20874554277086828b95d3f2009685daeeadda972f8311a3c5cc8f3ffe457d74848006fc7aec76107faca4da6f63df48ab99bb609b39244460ce4dcd05c"}, @NFTA_DATA_VALUE={0x6c, 0x1, "345e10ecb13ce462a33627505d8d806276a6bfec90568caa6c35a15430217f17035dcc2b4e77e11c4ff5151081555ededae7cbfb7e42fd50d20afb3a7dbc0b3684b215abb68b98bdd422d783f4016e2bf2ca5d7e46dc87d43fd326a42084f55cf95d9b955f6b9c35"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "da9d56dd6ddcd84b8f2062a1216bcf5de0bc6804ddf41bbe787e2c"}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffabe2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xdc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "84696b9bae0168859c3c1c5425170da434cd0a7e952a4e35df2229d3956a531a878a34a3870a8fc2db458fe769f38d4bae504f33f1d09a0e32ba4a93e61d8cd4fdec4088098ac951123588e7a1c17f5dbe4e35432e365e99f175e77fedfe3d7d50271c49194790b8c8e253"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, {0x23c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x1dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "af4ed78cc3bcb563200be90373068f5717b0fc48723152343bb9448967a25ea42f2cd31ca2a5e5bbe73fd30bbd4c8f6017df6c52d614bafbdefad2be21fb0a6757c1128df6eb2b488ab5fe45e3c120b9ae1fef9df04c83d1d26ccd518d21f82a8638bea3a7e49336e6a52929db4835db743e74d3336c2bec98d0825afbf87326a54e1ab450246cf96b5accda50ec9edb62f6a3b9035c3c6b2e83cc7d3ffdea9a4207eb599bfae086af40772f75d27a89f8d57459077c1d29a7835d12740d35997d512cc48862e0e8868c4541f196de52bed5b7129e6ab8f2bb5c7c9f9ddd0ec7afc028cc39e7826caa116ee53cbbf85e0849"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x32c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x2e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "58bdb530b22a59618a92ed31c05fc03ccc8f42b73024598bc80eaa9470f26095dd651a454ae6c63aae010fdd3638117327dc84060ba7020e39d3f02f882809ddfeaddb5ca9e9ff6dfa8d23fd222a08bfef85885bbc"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x88, 0x1, "ace7855238f9b868b656d535efca3b3ca335650eeb603c5b9dbed26b6ea51c81d1de13aae7f53f5f24718806e183d74270674bf5e609d6b8917dc7f2a5c339436f0e6abdebda6bc47fcea23f7c26622b473fec7afcd41748c45b29238a46b0aedf7aadc1c05826886af97dd59a00df409fb69efa23ab45d4841b6865c565f292d935cb51"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "3641434276f41bf03fdc50c2e8d3fe2bf5bf4b9e33cfc136998fbd6bbc3d2b471849102cb32f2382320c0a59b9cfe2a46fbe34631cdb013294cf7dfdf0822f3ae7dd50a92ce69b5a99e78e91240196d9e24bced2ba31914de960756856db51de78916a107f0489f2af2403265ce4168fde76bb9c50101394752758b9dd13ec320b5d5f51505c22ff829aaadaa0a0f8f4d3be789f44bd0e9705ab3fcbbc6e2a3909d302758cf55529f581853bb354f791e4ea9d140b76b8035e742470c3a003719cbef7d96e5920e55e965f4825459f86b5571849dec741e952008efb202457"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "2ca580c61e5f2d6dd888f79d0e03d3854726ec86194ef0e53d62692503fef613bd595b94f4e65ab7712e4393d6b4f7463e37f3bf02395e6e583d6b627cc644521e4d686657e0e1e7f1eae0e7b9093b50c91c8ca597cc05a960e87a5b1a34267ab0ce73781e85a08ae8351e4780c69d3e1da3ad2449d5bc51bc5617bf6e49fb91c9f1fd16dddac798d5f2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "5e0c0b5c0e63944c69bd5504"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x29, 0x1, "6a42bdf8fd6d64833976e6e5094a2abd942023ceeb05793c4591b53b991976d635646b36fd"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x35, 0x6, 0x1, 0x0, "9f11795d8ea56f36b1a2df9eacc709a5659cc04e5f913ebd7b3bfee767dfe6d999975804fdf0f3a4fea709cd027b8d7cc5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x41}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x70, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b98, 0x3, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4a8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "6b958bd48d47ecaff51dd0cefd9aeb3fbab73784eaf90f6a9aa8e452e3"}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "66e64d1d0239befcda2ee83e2aaf5b4c58c788567608ce05a02700fc6da87a1c581181edaa10c2a90481ca9f92ca7c8e4b43de7fc61fb5980c6bec156474e18174d52a3bdd0a16a7a5b983df979e23d3d9eed4ea67b63a0ed568ab3a53b34fbf6bf5e51a677cdf265b1b6cd9f47204ca80e3060bd19ca6b7b99a6dd45bdd2f3d12bd5acc39df0c70e4ef9c9614aaaa53f730a36463832255b60c96d6"}, @NFTA_DATA_VALUE={0x28, 0x1, "d4514bd381e7bb7812acfc8bb701d124fc726cf840181a0385723e7bf23598befcb78225"}, @NFTA_DATA_VALUE={0xe3, 0x1, "3e3a052db733354e828ed690d94bfc5ea90a0db7ceb2ac7d13cbeece8c0c958fb99a56854139eb2467cbd0832f92711183ab9f2581db501ef54e6b4665a1d3097174313febadeebbe61829f7301e53455bc6744997640095c1159ff610db10c598badc6d5392be63fb6b92c3fdc1bbe59ab0b0bb5738d83af9941bb30e979aa22e9cbbb1d3f2a10621590fca5c00fa20feac46fab74f4c66ea70b933cf0940106854b8416b2186278590a9cf905afd69c7d52e07a7dcca318d9fec6a8d0413701dbe3286983f113b8a3ab53f9070054ed5334ad7c10c0dd6e05fbf5228aacf"}, @NFTA_DATA_VALUE={0x2a, 0x1, "6dae633a8509777ae40d0a939ee76c49d0b3c5492ba5594b242efb44d9d5a02368b85c6c275a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x280, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "c056246cf64791701c4714a0b0139afdc99c49566a3f5bf3344d4a34f3be7412fce1e5"}, @NFTA_DATA_VALUE={0xe7, 0x1, "4d772dc3d64c8f678c87097aa6ac3f444f2ddb917bd4281ca67b1caf2c2af7aea5df5ae17bac1abb846fd925d5f5195424a461a96fef50633d48d7b632d58351e7f7883ccb4b95fc32d8261b8506981758fed77c56b109ff4a9bbb48f97deb356015177a0965b2c50967db67fca4dad35a91cc49ce0184a67363841f0f05fc57ace1fbc680fbb381dd6712abd27496985ad4b125e7d7975500e375a440e7fee4139a58ed562c757e9fbeb4f461610019b0b79ca90907fa067d7b0adf250b02a7622002a71b7e256dd6a198a0dd06deb08990c3aa65e00e0c026192043dfcd71b964072"}, @NFTA_DATA_VALUE={0x16, 0x1, "b7d3d295be1f45c9354dc14833aba1097d9f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "c25bc19fd4c2b7cb02a6ce77949254db0130b86de8b316"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8, 0x1, "0c5dbbf8"}, @NFTA_DATA_VALUE={0xed, 0x1, "efad607b01f44bea2d3faf8c5a5e6dbed76dafd39fbb4921d5525bcc99629db1d17f6ae0b0478af95c46552454834ca4ff0c3eca2c1c6ea1437f8fa4d75c08b9e351a072c89436fae79ca6a81a38a816f49032a06feea50d465ce8bb40e85ce3c5a9e63ea0164290d30860f96622e1d2843ab7d0dfd4c2d58c1227d3810aefc0cf5fe7da083e1f8fa6627290ce0fa25e72552549af0f36034849d4d577d482ad794ae1d514a442103180ace22813665e6ae0f926d7433a0e5c934e06ffc287ddd9dffba7f6c38b833355329c3a08c4535790908f131d920175106af98201c7ab38a7f60a6cea071ef3"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}]}}}]}]}, {0xf60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x11, 0x6, 0x1, 0x0, "5349ffa9ae75c3c048da22efd6"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x8c, 0x6, 0x1, 0x0, "fbe5ab23461928e8b4c42dd3d3dce68df13515c8f06e1df6fef2da7a81caaba25dc9d43eb1ab75b9c63c8cc0d1f59d6547db1241f298f3152a2b21384548c66a14576d6206d95104ae148636073244fb5a9613b2d51e2396cb6b1c72b0f34f4fd4bccb591362c40c4f93794f0ab8dab357a8460aa8f7346c9a4b97369cd146b385a3aff46d03ffa6"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xe54, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe04, 0x1, "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"}, @NFTA_DATA_VALUE={0x4c, 0x1, "78f3df0407b322a131e330b53bff9c094ff4df9fef5dcaa69dc81cecac2281b589edae7416af87fde2b15202ca2cd926191ca14242484708f453dbcea8401900843d4b3ff677f5e8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, {0x484, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "d7015617234e9ac617e6a2b3600d8d93dd8f15d021707ea71f18f2f269a4105a0470dcbb4a547feb1a51c87e2f72b88dd60f87a5a14a494c2afb8c4f9dd14bd1eee4cd4b9b976d2f0dfc93d13aff80d68cc767fee45a8296b5bdb7996184c77316482b4c1445a157007584"}, @NFTA_DATA_VALUE={0xfa, 0x1, "7b41cd8fddbb3fadb20b1dd8617c013af6da92e18f47d4d3b47434eb757a25a022590fc8a56f2262da41cf811d63caeb9667c945f0daf26f0b85390f99ad888eb4151f34f9f68b0cecd19fdb22ccbb404766e557c732b72262dd1295ecbf9612b98c90a78dc628222656c69cb25d94274fdd61265bff6cc8b388e9acb231f59ccf0df8674382ecb29b4acad8c2205d995d6fe94ddc93d8eb2829f7d3dc99e2c42b5c2527e8b2e477e6cc936b5473864b6644163a0b7e1ffd80f4ef1cba6f88fb04ecd0766d1df3a3f0639ea888366bfb481da1c48654de2465a5cb9b71b0f3731465eab90f7050ab0d17f3a0332ff6a8eb0d5cdabdb0"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "b0a4b719481d7298782d10b5b08b8cbf0d5bbb32b9a32bb40198f8fac0c6734f1d38e8801b1ee7738a2fbd851aaaf22c8f34c0d3bcc9ff2c70fd00b6e113777aabd9b5e3e6aea60e79fcb08bada69779f3c20270d9476feb64ae9aa2a7436c9ddc72da11dc0051ec8fc599a28f89a2cd5d91bfa92cbfdf4567ff073812b45da4ffc4bc11525a6e62d21e3578ab72a0cdc88a54bb5b1dcaef4f2938a4c85a4ee28a8c8afa6dbe54a4ec7331af7a96084e8ea9da635a24d65c65bf0c3ebe9e18553872e11a710da87c7a2386a25b868634890ae00e2249c8a98cf17d62a504248bbf6c5f4361fba2810c2227736326db"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_DATA={0x38, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "c3aea7567fd69974b577fc4f205ab896c01747241a4a6ab7af941c9c34292a"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0xcc, 0x7, 0x0, 0x1, @range={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_FROM_DATA={0xa8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x97, 0x1, "e92e0f18a6cc57d975171dd1cda325482655f0f620b395c9d84c86da5d7de2b431744e5b1998c583e817186ab73a838e6014f4c847a9550a82faadb885a2a5711550d7745b470731894f3b11ddca0c146f87a0978eb67bfd362e4aa57d4069852f8d0508a133e2080a07e04b7452ac61b9b5b345a90bf55e3a9cc3fb58b7b7b21c4ede5c9862aac630a0a7fee77d9ce3602a32"}]}, @NFTA_RANGE_OP={0x8}]}}}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "34ea279a9dcc350155de66cc9a3841c7e9790c5ea719060bb1b500a183348a0f14cd15215e00880ef908fabb1c3f18"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xad8b}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}]}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELTABLE={0x274, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "81b905159b524c0bd9dfcdbdada7f97876fb24743752e6821b2b9ba3d523d09d74543fef42e544867ed380c0e76a083adeb097a7328683d0cf1366f1ab5c9785c934cd2b61b37a92f729045fdff1fabcf35cd79b37a1da226132d210fb73c8ffaa3faba7ddaa0bc1c455a5168b88c4915792f6115eeaab8cd5404b9bb6c8d7e1dc0bae292713b3810650df763ba3ba60865ef9d51130f6c18bc2bdd6a0f94e5e27c36f3df50596c93ed3f122ed0602c32b8e96"}, @NFTA_TABLE_USERDATA={0xdf, 0x6, "2793f90cb6a3a22d8a46a404fe6e98f077585d8ffdc016aaefab772f0f1a1fc244d5b5d374a31382a619ca451d308acc4a8e791f1fb9f04fc47f77e13c15e673ed8faea9dd038e06da9628421b00c7b07621fb03e462b00e97338e4f5a76e2ed2eb1b4ce9abee19e0e6cdc5844f00f92cdf5486fe0dfa4c7d4d2d74a7028de67c5b5e4e2d40f7f914ffda4febd069ebfd28d3a06a4b56c10ad1aecb57c22e9059195a95a5916c8b4b5d79b319a92a9c751fbd306b5484a94c62c0e155a4f628fad571007384a98ef7d5a8d3279fbd96905585210cc3d8ffe6fc56c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x91, 0x6, "d5614063e0d22ff9896b944e80c4d6253a0bf2e218f8e244da73fee02c5da03d279c663025d3cd8bb352824230623d53ec6e5c99202a604c55d302445d92c196805f3edd26b8ca23c760e6b2690816ff76c821d279d1d066c4e60e6b121927e9fc5713b319571d3918c19bbf468cb9d26441b4e69b34935d9e2f02f116b062885c845abfb0734934c09ab42d4c"}]}], {0x14}}, 0x2bd8}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) (async, rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (rerun: 64)

414.595899ms ago: executing program 0 (id=5942):
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b", 0xb0}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a", 0x40}], 0x2, 0x5, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller1\x00', 0x2000})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r4, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt(r6, 0x0, 0x3, 0x0, &(0x7f0000000600))
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000003700010a000000000000000080000000c8268f5ab7b01581406c505235222a8d57af3d86129c3f415493c29562d8f6620ededb66a756279f6593b07731e2245ed51e2b9962273eee09fbf00d8fbd93feea3374cfaf2a4a"], 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
r7 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000540)=0x10, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

350.225212ms ago: executing program 1 (id=5943):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x48799000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0xfffffffc, 0xfffffffd, 0x7, 0x7}, 0x3c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002800)=@updpolicy={0x1fc, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x2, 0x0, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x2f}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000000, 0x4, 0x6}, {0x0, 0x3fffffffffffd, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3501, 0x0, 0x3, 0x8, 0x8, 0x0, 0x400}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3506, 0x4, 0x3, 0x5, 0x1a, 0x10000000, 0x2}, {{@in=@loopback, 0x4d6, 0x2b}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x8, 0x6, 0x6, 0x5fc}, {{@in=@multicast1, 0x4d5, 0x2b}, 0xa, @in6=@loopback, 0x3500, 0x4, 0x2, 0xff, 0x2, 0x2, 0x311d9dc2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x27}, 0x4d2, 0x3c}, 0xa, @in6=@mcast2, 0x3501, 0x0, 0x1, 0x9, 0x9, 0x4, 0xf50d}]}]}, 0x1fc}}, 0x0)

268.693868ms ago: executing program 1 (id=5944):
r0 = socket(0xa, 0x3, 0xff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000080000000f000000000000009bc9bc8ffc7b67209fd280c36e68bccdfdc032553db0f019e5e64614559bb7450ac647ae8ffbc9c88a80ba8d89d4b04cca76645c2944e89a0567773d8321dac045b72bde6a0f80d7246a2b5fba0eaadd78f3f8be532e55cb390471a4d7ff1d438f6fd32676b1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r6, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r1}, 0xc)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r7], 0x18}, 0x922bac8576b92dde)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xfffe)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000020101020000050000000000050000060800080f00000081080003400000300008001a"], 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
r9 = socket$inet6(0xa, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0)

267.735332ms ago: executing program 0 (id=5945):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x2c, 0x18, 0xa01, 0x0, 0xffffffff, {0x2, 0x10, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x2c}}, 0x4040818)
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x101)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', <r6=>0x0})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x0, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x62, 0x0, 0x6, 0x9, 0x4, 0xa9a}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "48db"}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xe, 0x4, 0x7, 0x8001, 0x9}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x24}, 0x4, 0x700000000000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd700003000000050000000c000600010000000100000008000300", @ANYRES32=r12, @ANYBLOB="0c00060003000000030000000c00e360439f70753d92f52f7a0600020000000000000008000300", @ANYRES32=r13, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40400d1}, 0x1)
unshare(0x20000400)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r14, 0x0, 0x20000000, 0x4}, 0x20)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="070200000000000000000100000004000480080001000300000004000880080002000100000054000c801c000b8008000a009b0100000800090057a1da6c080009002cdce22914000b80080009005c81685d08000a000cfb000014000b8008000a0066b4000008040000"], 0x80}}, 0x800)

210.183195ms ago: executing program 2 (id=5946):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000f00))
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000640)={<r2=>r0, &(0x7f0000000300)='\\\x00', 0x2ca420, &(0x7f0000000380)={@_ha_fsid={[0x2, 0x2]}, {0xfffa, 0x1, 0x1, 0x7}}, 0x4, &(0x7f00000003c0), &(0x7f0000000600)=0x3ff})
r3 = accept4$tipc(r2, &(0x7f0000000680), &(0x7f0000000100)=0xffffffffffffffcd, 0x80800)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000200)=0x658, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x4004000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000cc0)={'ip6gre0\x00', 0x0})
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772e35c17223f0f1dfc8faab1a7e7d53b3f1839a3f9ec10e980f3c0e89e808b4641aacc977b69172e7ae9efb164c872a29124d879022a25237abf939c", 0x9d}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30fc82c7897cc1af4d30ef0c0793f737a63a8a1c1f8d58547b8d9afc8d3c1dadefe19e63eadcea6c6377757750bd3d1b9136c63a1b12cf568a45375f9c41b2a6c9603606e84c6c6ca9e2f8ccf519fc369fb8a4a1ca3627388b9a658f5cf343f9d3ba0e1d38d3425543edf3d2a65bc497e25e0f753039bac1e0c668e49ae25c5dd8e4464809f71ac58e7c0dc5be4faaacd4d8976a19", 0xa1}, {&(0x7f0000000500)="6f976658a8ccf2205b80152be2084aca97d14fa2238920593f6b020ca84849bdf4727bff8134f870d82e48ee1338a8671fece3bd9d41987da0d069b7bb82abc305a7fb6a9c468e787de9f892c4b877dc7d444135bae8f1c8", 0x58}, {&(0x7f0000000580)="90b4c9f7cff365bfa4669d8a385895c797b4e435a9ff509b04f30de44b5ebc6f1239debd0649805017ff6ba386e6b90d228497518009450cb30dc2f87180a1893a0ec3181dfb1431b758e8d13fe4ddd3d5c55a4a244bc14bef5f4e40ffbbb6699a406ad3ee23a0af82fc8582d07f2a0e7139dccacfc1ff", 0x77}], 0x4, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0, 0x150}}], 0x2, 0x24040015)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

209.586813ms ago: executing program 1 (id=5947):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x20e69a38, 0x0)
close(r3) (async)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff0300000000000001000080180000000500000000000000090000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000078ffffff850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000000e790c00b50e00009500000000000000542def95f930c587bd8efe9e1a58e7ecf1394880df6fb97cc743cc26ce72c0864531474469099b6efee740caa9ee1f7fc561b3b470cf0eafbaf2b7b9bfb4170f5bdb39973bfe35d5af5f26f86eb34c28cbb99a7266e5cbdb9b04b7c20c207e99df150983aa8036f0b7401437d7372ccf402eceb6aa9c3b9b667c2bc835df6a6cbd2befabd43d0cadb261bb"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x89, &(0x7f0000000500)=""/137, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x4, r2, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xb, 0x2, 0x9c4f}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0x4, 0xa}, {0x1, 0x5, 0x9, 0xb}, {0x0, 0x5, 0xa, 0x2}, {0x2, 0x5, 0xe, 0x1}], 0x10, 0x6}, 0x94) (async)
write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12)
splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0}) (async)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 32)
r9 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
setsockopt$sock_attach_bpf(r9, 0x29, 0x22, &(0x7f0000000100), 0x4) (async, rerun: 64)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64)
listen(r8, 0x0)
close(0x4) (async, rerun: 32)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xafe8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x8, 0xa, 0x20, 0x0, 0x73, r6, r10}, {0x8000000000000001, 0x8001, 0x5, 0x800, 0x8, 0x3, 0x10, 0x5f}, {0x49a7, 0x1, 0xc3, 0x3}, 0x0, 0x6e6bb8, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x3503, 0x1, 0x0, 0x9, 0x40, 0x8, 0x3}}, 0xe8)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{}, "add31f29b36fc94e", "a9372775930bf8139a3d94935840487e", "0312a52a", "00001200"}, 0x28)

160.305237ms ago: executing program 2 (id=5948):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x413, 0x0, 0xffffffff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "b512b390ac60fe3e6b54c6b909007c9f70d0cf"}}]}, 0x150}}, 0x844)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, 0x140b, 0x911, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x2400c820)
write$cgroup_int(r1, &(0x7f00000000c0)=0x3, 0x12)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r6], 0x44}}, 0x0)

88.221184ms ago: executing program 2 (id=5949):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x14) (async, rerun: 32)
r2 = socket(0x1f, 0xa, 0x100000) (async, rerun: 32)
preadv(r0, &(0x7f0000000300), 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r4, 0x89e0, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000140)={0x32, 0x4, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xe}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1]}, 0x30)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

87.297307ms ago: executing program 2 (id=5950):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000dcf9952cc932eed8479d62ff462987ad1b2f1f10363fe3de0277d1c7542fc35ab48b7b2094268e7d095cc36308007c0439dd6d5dc648e43fcce28b7ad6fad0d9aedead41696943b59c937fb953197c7d83e6a8be3ea36c4a02889b30ebbb405d74d71da1ce1ce3843d00d7ee9518723fe69604108a03fa8c4fbd23e3a74e69334ea2e1bc45a548d14ddbc40a100723818e386c1c3ad6705130d9"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={<r6=>r4, &(0x7f00000000c0)='nl80211\x00', 0xc900, &(0x7f0000000100)={@align=0x80, {0x4, 0x0, 0x1, 0x7fffffffffffffff}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9})
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000240)={@loopback, r3}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

0s ago: executing program 1 (id=5951):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000000e56b5eaf4d59a8414800000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffffffffa61cfdf5942ae2a13ec84b53a573ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009"], 0x90)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x2}]}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @private0, 0x3ff}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x25, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=r3], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814)

kernel console output (not intermixed with test programs):

 get link speed/duplex
[  544.289621][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  544.409640][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  544.520401][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  544.629914][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  545.560418][T21871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.668090][T21908] netlink: 'syz.2.4215': attribute type 11 has an invalid length.
[  545.672193][T21908] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4215'.
[  545.707035][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'.
[  545.716339][T21910] netlink: 'syz.0.4216': attribute type 14 has an invalid length.
[  545.718821][T21910] netlink: 'syz.0.4216': attribute type 11 has an invalid length.
[  545.759417][T21916] netlink: 'syz.1.4218': attribute type 1 has an invalid length.
[  545.807313][T21916] bond66: entered promiscuous mode
[  545.817481][T21916] bond66: entered allmulticast mode
[  545.823497][T21916] 8021q: adding VLAN 0 to HW filter on device bond66
[  545.840365][T21917] bridge24: entered promiscuous mode
[  545.842745][T21917] bridge24: entered allmulticast mode
[  545.845566][T21917] bond66: (slave bridge24): Enslaving as a backup interface with an up link
[  545.875021][T21925] bond48: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  545.877839][T21925] bond48: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  545.897959][T21917] bridge25: entered promiscuous mode
[  545.902960][T21917] bridge25: entered allmulticast mode
[  545.905105][T21917] bond66: (slave bridge25): Enslaving as a backup interface with a down link
[  545.915198][T21916] bridge26: entered promiscuous mode
[  545.916986][T21916] bridge26: entered allmulticast mode
[  545.919139][T21916] bond66: (slave bridge26): Enslaving as a backup interface with a down link
[  546.001963][T21942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  546.007344][T21942] batman_adv: batadv0: Adding interface: gretap3
[  546.010116][T21942] batman_adv: batadv0: Interface activated: gretap3
[  546.265080][T21974] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  546.268260][T21974] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  546.295531][T21975] ip6t_REJECT: ECHOREPLY is not supported
[  546.309062][T21975] netlink: 'syz.2.4234': attribute type 1 has an invalid length.
[  546.358826][T21974] netlink: 'syz.0.4233': attribute type 13 has an invalid length.
[  547.092750][T22034] nbd: must specify a size in bytes for the device
[  547.588596][T22055] __nla_validate_parse: 6 callbacks suppressed
[  547.588616][T22055] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4250'.
[  547.592590][T22048] lo speed is unknown, defaulting to 1000
[  547.611045][T22057] bond26: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  547.622105][T22057] bond26: (slave ): Enslaving as an active interface with an up link
[  547.637383][T22055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4250'.
[  547.895676][T22068] netlink: 'syz.2.4254': attribute type 1 has an invalid length.
[  547.898419][T22068] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4254'.
[  547.902135][T22068] netlink: 'syz.2.4254': attribute type 1 has an invalid length.
[  547.905247][T22068] netlink: 638 bytes leftover after parsing attributes in process `syz.2.4254'.
[  547.908911][T22068] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4254'.
[  547.915278][T22068] ip6tnl0: Caught tx_queue_len zero misconfig
[  548.145561][T22081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4256'.
[  548.149281][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4256'.
[  548.671886][T22109] dvmrp1: entered allmulticast mode
[  548.689848][   T12] net_ratelimit: 36 callbacks suppressed
[  548.689872][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  548.800405][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  548.921557][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  548.966608][T22116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  548.992434][T22116] tipc: Resetting bearer <eth:syzkaller0>
[  549.024175][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'.
[  549.027788][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4265'.
[  549.031898][T11690] bond46: (slave bridge21): failed to get link speed/duplex
[  549.108870][T22114] lo speed is unknown, defaulting to 1000
[  549.179475][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  549.299607][T11690] bond46: (slave bridge21): failed to get link speed/duplex
[  549.353997][T22137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4269'.
[  549.413125][T11690] bond46: (slave bridge21): failed to get link speed/duplex
[  550.147826][T13261] lo speed is unknown, defaulting to 1000
[  550.150463][T13261] sy2: Port: 1 Link DOWN
[  550.181976][T13258] syz0: Port: 1 Link DOWN
[  550.186948][T11690] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.191800][T11690] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.195189][T11690] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.198445][T11690] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.207679][T11690] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.222675][T11690] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.229959][T11690] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  550.241516][T11690] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.261138][T11690] bond46: (slave bridge21): failed to get link speed/duplex
[  550.361311][T22176] pimreg: entered allmulticast mode
[  550.371025][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  550.438656][T22186] xt_l2tp: invalid flags combination: 8
[  550.479777][T11690] bond46: (slave bridge21): failed to get link speed/duplex
[  550.745039][T22210] netlink: 'syz.2.4290': attribute type 1 has an invalid length.
[  550.752613][T22210] netlink: 'syz.2.4290': attribute type 1 has an invalid length.
[  550.854908][T22219] gretap0: left promiscuous mode
[  550.916415][T22219] netlink: 'syz.2.4293': attribute type 2 has an invalid length.
[  551.695393][T22262] lo: Caught tx_queue_len zero misconfig
[  551.763271][T22264] v: renamed from ip6_vti0 (while UP)
[  551.908148][T22273] netlink: 'syz.2.4305': attribute type 32 has an invalid length.
[  552.085429][T22282] netlink: 'syz.1.4306': attribute type 1 has an invalid length.
[  552.105590][T22282] bond67: entered promiscuous mode
[  552.107470][T22282] 8021q: adding VLAN 0 to HW filter on device bond67
[  552.131899][T22282] macvtap2: entered allmulticast mode
[  552.150343][T22282] bond67: (slave bridge27): making interface the new active one
[  552.154331][T22282] bridge27: entered promiscuous mode
[  552.158615][T22282] bond67: (slave bridge27): Enslaving as an active interface with an up link
[  552.205408][T22284] netlink: 'syz.2.4307': attribute type 1 has an invalid length.
[  552.217876][T22284] netlink: 'syz.2.4307': attribute type 2 has an invalid length.
[  552.226051][T22284] netlink: 'syz.2.4307': attribute type 1 has an invalid length.
[  552.938631][ T5628] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  552.954493][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  552.954508][ T5628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  552.954515][ T5628] Call Trace:
[  552.954534][ T5628]  <TASK>
[  552.954539][ T5628]  dump_stack_lvl+0xe8/0x150
[  552.954555][ T5628]  dump_header+0xd3/0x4c0
[  552.954570][ T5628]  oom_kill_process+0x3ab/0x970
[  552.954583][ T5628]  out_of_memory+0x106c/0x1410
[  552.954592][ T5628]  ? try_charge_memcg+0xbb9/0x1570
[  552.954606][ T5628]  ? __pfx___mutex_lock+0x10/0x10
[  552.954622][ T5628]  ? __pfx_out_of_memory+0x10/0x10
[  552.954630][ T5628]  ? do_raw_spin_unlock+0x4d/0x210
[  552.954647][ T5628]  try_charge_memcg+0xc77/0x1570
[  552.954666][ T5628]  ? __pfx_try_charge_memcg+0x10/0x10
[  552.954676][ T5628]  ? percpu_ref_tryget+0x15/0x180
[  552.954697][ T5628]  ? charge_memcg+0x23/0x2b0
[  552.954709][ T5628]  charge_memcg+0x1a2/0x2b0
[  552.954720][ T5628]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  552.954731][ T5628]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  552.954743][ T5628]  __swap_cache_prepare_and_add+0xdc/0x700
[  552.954756][ T5628]  ? page_rmappable_folio+0x9a/0x170
[  552.954773][ T5628]  swap_cache_alloc_folio+0xf1/0x240
[  552.954784][ T5628]  swap_cluster_readahead+0x355/0x670
[  552.954796][ T5628]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  552.954811][ T5628]  ? get_vma_policy+0x27b/0x3c0
[  552.954824][ T5628]  swapin_readahead+0x196/0xc50
[  552.954835][ T5628]  ? swap_table_get+0x1e/0x260
[  552.954846][ T5628]  ? __pfx_swapin_readahead+0x10/0x10
[  552.954856][ T5628]  ? swap_table_get+0x1e/0x260
[  552.954865][ T5628]  ? swap_table_get+0x1e/0x260
[  552.954872][ T5628]  ? swap_table_get+0x1e/0x260
[  552.954880][ T5628]  ? swap_table_get+0x216/0x260
[  552.954889][ T5628]  ? swap_cache_get_folio+0x2e4/0x2f0
[  552.954901][ T5628]  do_swap_page+0x555/0x5120
[  552.954914][ T5628]  ? __pte_offset_map+0x29/0x240
[  552.954924][ T5628]  ? __pte_offset_map+0x29/0x240
[  552.954937][ T5628]  ? do_swap_page+0x128/0x5120
[  552.954946][ T5628]  ? __pfx_do_swap_page+0x10/0x10
[  552.954953][ T5628]  ? __pte_offset_map+0x1ae/0x240
[  552.954964][ T5628]  ? pte_offset_map_rw_nolock+0xea/0x160
[  552.954975][ T5628]  handle_mm_fault+0x12d2/0x3170
[  552.954991][ T5628]  ? handle_mm_fault+0xee/0x3170
[  552.955004][ T5628]  ? __pfx_handle_mm_fault+0x10/0x10
[  552.955012][ T5628]  ? lock_vma_under_rcu+0x45a/0x500
[  552.955028][ T5628]  ? clockevents_program_event+0x491/0x630
[  552.955043][ T5628]  do_user_addr_fault+0xa73/0x1340
[  552.955056][ T5628]  ? rcu_is_watching+0x15/0xb0
[  552.955065][ T5628]  ? trace_page_fault_user+0x84/0x1e0
[  552.955075][ T5628]  exc_page_fault+0x6a/0xc0
[  552.955086][ T5628]  asm_exc_page_fault+0x26/0x30
[  552.955100][ T5628] RIP: 0033:0x7fef6de6adf7
[  552.955110][ T5628] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c0 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 a8 ed 00 48 01 d1 39 7c 24
[  552.955116][ T5628] RSP: 002b:00007fffc8289440 EFLAGS: 00010202
[  552.955125][ T5628] RAX: 0000001b33a24000 RBX: 0000000000001137 RCX: 0000000000086c40
[  552.955130][ T5628] RDX: 000000000b7837f3 RSI: 00007fffc82894d0 RDI: 000000000000000f
[  552.955135][ T5628] RBP: 00007fffc828947c R08: 000000002bc0c8f0 R09: 3fffffffffffffff
[  552.955141][ T5628] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  552.955146][ T5628] R13: 00000000000927c0 R14: 0000000000086db9 R15: 00007fffc82894d0
[  552.955160][ T5628]  </TASK>
[  553.061232][ T5628] memory: usage 307200kB, limit 307200kB, failcnt 3944
[  553.063889][ T5628] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[  553.066991][ T5628] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  553.069831][ T5628] Memory cgroup stats for /syz0:
[  553.070192][ T5628] cache 0
[  553.073067][ T5628] rss 0
[  553.075668][ T5628] rss_huge 0
[  553.076774][ T5628] shmem 0
[  553.077804][ T5628] mapped_file 0
[  553.078971][ T5628] dirty 0
[  553.081869][ T5628] writeback 0
[  553.082971][ T5628] workingset_refault_anon 1
[  553.084462][ T5628] workingset_refault_file 0
[  553.085889][ T5628] swap 208896
[  553.086953][ T5628] swapcached 249856
[  553.088211][ T5628] pgpgin 177866
[  553.089520][ T5628] pgpgout 177858
[  553.090684][ T5628] pgfault 329373
[  553.091834][ T5628] pgmajfault 5
[  553.092933][ T5628] inactive_anon 16384
[  553.094223][ T5628] active_anon 16384
[  553.095481][ T5628] inactive_file 0
[  553.096703][ T5628] active_file 0
[  553.097905][ T5628] unevictable 0
[  553.099065][ T5628] hierarchical_memory_limit 314572800
[  553.100851][ T5628] hierarchical_memsw_limit 9223372036854771712
[  553.102874][ T5628] total_cache 0
[  553.103931][ T5628] total_rss 0
[  553.105018][ T5628] total_rss_huge 0
[  553.106254][ T5628] total_shmem 0
[  553.107397][ T5628] total_mapped_file 0
[  553.108724][ T5628] total_dirty 0
[  553.109970][ T5628] total_writeback 0
[  553.111188][ T5628] total_workingset_refault_anon 1
[  553.112782][ T5628] total_workingset_refault_file 0
[  553.114464][ T5628] total_swap 208896
[  553.115677][ T5628] total_swapcached 249856
[  553.117038][ T5628] total_pgpgin 177866
[  553.118321][ T5628] total_pgpgout 177858
[  553.119833][ T5628] total_pgfault 329373
[  553.121226][ T5628] total_pgmajfault 5
[  553.122517][ T5628] total_inactive_anon 16384
[  553.123967][ T5628] total_active_anon 16384
[  553.125385][ T5628] total_inactive_file 0
[  553.126737][ T5628] total_active_file 0
[  553.128139][ T5628] total_unevictable 0
[  553.129585][ T5628] anon_cost 0
[  553.130741][ T5628] file_cost 0
[  553.131897][ T5628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4310,pid=22295,uid=0
[  553.138784][ T5628] Memory cgroup out of memory: Killed process 22295 (syz.0.4310) total-vm:102424kB, anon-rss:1244kB, file-rss:23052kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  553.310190][T22316] veth1: Caught tx_queue_len zero misconfig
[  553.370168][T22318] openvswitch: : Dropping previously announced user features
[  553.548168][T22328] __nla_validate_parse: 48 callbacks suppressed
[  553.548180][T22328] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4318'.
[  553.582091][T22328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4318'.
[  553.721165][ T6072] net_ratelimit: 28 callbacks suppressed
[  553.721177][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  553.820194][T22350] netlink: 'syz.1.4325': attribute type 1 has an invalid length.
[  553.838205][T22350] bond68: entered promiscuous mode
[  553.841825][T22350] 8021q: adding VLAN 0 to HW filter on device bond68
[  553.849939][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  553.864050][T22355] tipc: Failed to remove unknown binding: 66,1,1/4179346734:3222017650/3222017652
[  553.956028][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4328'.
[  553.958708][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4328'.
[  553.967491][T22361] netlink: 'syz.0.4328': attribute type 4 has an invalid length.
[  553.999694][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  554.110962][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  554.131847][T22369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  554.134209][T22369] IPv6: NLM_F_CREATE should be set when creating new route
[  554.136459][T22369] IPv6: NLM_F_CREATE should be set when creating new route
[  554.172409][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4331'.
[  554.220695][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  554.362145][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'.
[  554.409591][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  554.456346][T22381] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  554.519557][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  554.629450][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  554.668309][T22408] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  554.694013][T22410] netlink: 'syz.2.4343': attribute type 10 has an invalid length.
[  554.698199][T22410] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  554.701814][T22410] netlink: 'syz.2.4343': attribute type 2 has an invalid length.
[  554.739453][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  554.740029][T22412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4344'.
[  554.781149][T22418] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  554.800670][T22414] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  554.835326][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'.
[  554.835855][T22421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4347'.
[  554.838399][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'.
[  554.854522][T22422] tc_dump_action: action bad kind
[  554.869700][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  554.990762][T22437] batadv_slave_0: Caught tx_queue_len zero misconfig
[  555.071095][T22450] netlink: 'syz.0.4354': attribute type 8 has an invalid length.
[  555.253621][T22463] netlink: 'syz.0.4360': attribute type 58 has an invalid length.
[  555.475680][T22468] veth0_macvtap: Caught tx_queue_len zero misconfig
[  555.485885][ T8199] block nbd0: Receive control failed (result -32)
[  555.640241][T22477] IPv6: sit4: Disabled Multicast RS
[  555.898650][T22488] macvlan0: Caught tx_queue_len zero misconfig
[  556.881344][T22507] SET target dimension over the limit!
[  557.088252][T22516] bridge25: entered promiscuous mode
[  557.094100][T22516] bridge25: entered allmulticast mode
[  557.171706][T22522] ip6tnl0: Caught tx_queue_len zero misconfig
[  557.176325][T22521] syzkaller0: left promiscuous mode
[  557.178050][T22521] syzkaller0: left allmulticast mode
[  557.243377][T22527] netem: change failed
[  557.282881][T22529] netlink: 'syz.0.4378': attribute type 1 has an invalid length.
[  557.386819][T22540] nbd: must specify at least one socket
[  557.473136][T22554] netlink: 'syz.2.4386': attribute type 11 has an invalid length.
[  557.538373][T22563] netlink: 'syz.1.4389': attribute type 10 has an invalid length.
[  558.494261][T22587] netlink: 'syz.0.4395': attribute type 2 has an invalid length.
[  558.535248][T22593] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  558.594480][T22607] x_tables: duplicate underflow at hook 1
[  558.615778][T22608] x_tables: duplicate underflow at hook 1
[  558.624171][T22606] __nla_validate_parse: 19 callbacks suppressed
[  558.624182][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4398'.
[  558.661650][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'.
[  558.664395][T22613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4397'.
[  558.711243][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4400'.
[  558.714915][T22615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'.
[  558.749938][   T13] net_ratelimit: 34 callbacks suppressed
[  558.749990][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  558.766150][T22619] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4401'.
[  558.859834][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  558.969459][   T12] bond46: (slave bridge21): failed to get link speed/duplex
[  559.081498][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  559.189720][   T13] bond46: (slave bridge21): failed to get link speed/duplex
[  559.299518][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  559.409434][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  559.412009][T22600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  559.508014][T22642] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4406'.
[  559.511341][T22642] 0X: renamed from 61X (while UP)
[  559.517727][T22642] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  559.539784][ T6072] bond46: (slave bridge21): failed to get link speed/duplex
[  559.607139][T22655] xt_time: invalid argument - start or stop time greater than 23:59:59
[  559.612433][T22655] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4411'.
[  559.618278][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4412'.
[  559.646589][T22662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4410'.
[  559.652598][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  559.772379][T22667] : Caught tx_queue_len zero misconfig
[  559.852969][T22657] lo speed is unknown, defaulting to 1000
[  560.372995][T22701] sctp: [Deprecated]: syz.1.4422 (pid 22701) Use of int in max_burst socket option deprecated.
[  560.372995][T22701] Use struct sctp_assoc_value instead
[  560.392648][T22702] sctp: [Deprecated]: syz.1.4422 (pid 22702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  560.392648][T22702] Use struct sctp_sack_info instead
[  560.717550][T22732] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  560.721691][T22732] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  561.030096][T22760] 8021q: adding VLAN 0 to HW filter on device bond50
[  561.035138][T22760] validate_nla: 2 callbacks suppressed
[  561.035150][T22760] netlink: 'syz.0.4435': attribute type 8 has an invalid length.
[  561.056800][T22760] bond50 (unregistering): Released all slaves
[  561.183600][T22764] bond50: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  561.212961][T22764] bond50 (unregistering): Released all slaves
[  561.225700][T22765] workqueue: Failed to create a rescuer kthread for wq "bond50": -EINTR
[  561.845210][T22825] xt_recent: Unsupported userspace flags (000000b1)
[  562.217937][T22852] netlink: 'syz.0.4454': attribute type 7 has an invalid length.
[  562.271346][T22829] xt_hashlimit: size too large, truncated to 1048576
[  562.626091][T22875] bond50: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  562.634187][T22875] bond50 (unregistering): Released all slaves
[  562.836040][T22889] bond69: Unable to set down delay as MII monitoring is disabled
[  562.840758][T22889] bond69 (unregistering): Released all slaves
[  562.868306][T22890] bond69: Unable to set down delay as MII monitoring is disabled
[  562.873733][T22890] bond69 (unregistering): Released all slaves
[  562.910256][T22883] netlink: 'syz.0.4463': attribute type 1 has an invalid length.
[  562.956723][T22883] bond26: (slave ): Releasing backup interface
[  562.961058][T22883] bond26: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[  562.971777][T22883] veth3: left allmulticast mode
[  562.975924][T22883] veth3: left promiscuous mode
[  562.978946][T22883] bridge1: port 1(veth3) entered disabled state
[  562.985956][T22883] veth5: left allmulticast mode
[  562.987852][T22883] veth5: left promiscuous mode
[  562.990810][T22883] bridge1: port 3(veth5) entered disabled state
[  562.997135][T22883] bond2: (slave ip6gre2): Releasing backup interface
[  563.003877][T22883] bond9: (slave gretap1): Releasing active interface
[  563.014678][T22883] bond10: (slave bridge5): Releasing backup interface
[  563.022368][T22883] bond14: (slave erspan1): Releasing active interface
[  563.029083][T22883] bond21: (slave geneve5): Releasing active interface
[  563.034992][T22883] bond23: (slave ip6gretap2): Releasing active interface
[  563.041977][T22883] bond24: (slave gretap0): Releasing active interface
[  563.047423][T22883] bond25: (slave bridge14): Releasing active interface
[  563.054281][T22883] bond27: (slave veth17): Releasing active interface
[  563.059865][T22883] bond27: (slave veth17): the permanent HWaddr of slave - 9a:f5:69:18:3d:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  563.065560][T22883] batadv1: entered promiscuous mode
[  563.070188][T22883] bond27: (slave batadv1): Releasing active interface
[  563.072904][T22883] batadv1: left promiscuous mode
[  563.077567][T22883] bond37: (slave bond38): Releasing backup interface
[  563.084548][T22883] bond43: (slave bridge21): Releasing active interface
[  563.088315][T22883] bond44: (slave wireguard0): Releasing backup interface
[  563.093606][T22883] bond46: (slave bridge23): Releasing backup interface
[  563.096669][T22883] batman_adv: batadv0: Interface deactivated: gretap3
[  563.098821][T22883] batman_adv: batadv0: Removing interface: gretap3
[  563.288301][T22908] netlink: 'syz.0.4469': attribute type 83 has an invalid length.
[  563.406566][T22925] netlink: 'syz.0.4475': attribute type 3 has an invalid length.
[  563.469914][T22936] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  563.691139][T22943] netlink: 'syz.0.4478': attribute type 16 has an invalid length.
[  563.698778][T22943] netlink: 'syz.0.4478': attribute type 17 has an invalid length.
[  563.753216][T22943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.797727][T22943] veth1_macvtap: entered promiscuous mode
[  563.807045][T22943] net_ratelimit: 33 callbacks suppressed
[  563.807061][T22943] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  563.824993][ T5675] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.827646][ T5675] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.842672][ T5675] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.847874][ T5675] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.870645][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  563.906467][T22954] __nla_validate_parse: 44 callbacks suppressed
[  563.906479][T22954] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4482'.
[  563.971289][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4483'.
[  563.979702][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  564.036533][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4484'.
[  564.089744][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  564.102729][T22963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'.
[  564.199683][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  564.309675][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  564.443607][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'.
[  564.459993][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  564.540433][T22983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4491'.
[  564.544112][T22983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4491'.
[  564.546992][T22983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4491'.
[  564.550427][T22983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4491'.
[  564.553690][T22983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4491'.
[  564.570020][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  564.720114][ T5675] bond46: (slave bridge21): failed to get link speed/duplex
[  564.753054][T22999] netlink: 'syz.1.4495': attribute type 1 has an invalid length.
[  564.768597][T22999] bond69: entered promiscuous mode
[  564.772889][T22999] 8021q: adding VLAN 0 to HW filter on device bond69
[  564.773050][T23003] netlink: 'syz.0.4496': attribute type 1 has an invalid length.
[  564.787779][T22999] 8021q: adding VLAN 0 to HW filter on device bond69
[  564.790471][T22999] bond69: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  564.793724][T22999] bond69: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode
[  564.800895][T22999] bond69: (slave ip6gre4): making interface the new active one
[  564.803326][T22999] ip6gre4: entered promiscuous mode
[  564.806273][T22999] bond69: (slave ip6gre4): Enslaving as an active interface with an up link
[  564.811536][T23003] workqueue: Failed to create a rescuer kthread for wq "bond51": -EINTR
[  564.841298][T23008] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  564.850627][ T5476] bond46: (slave bridge21): failed to get link speed/duplex
[  564.958157][T23018] bridge31: entered promiscuous mode
[  564.961033][T23018] bridge31: entered allmulticast mode
[  564.965462][T23018] team0: Port device bridge31 added
[  564.978521][T23018] bridge32: entered promiscuous mode
[  564.981881][T23018] bridge32: entered allmulticast mode
[  564.986173][T23018] team0: Port device bridge32 added
[  565.014433][T23015] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  565.359942][T23053] macsec2: entered promiscuous mode
[  565.475263][T23057] bond70: entered promiscuous mode
[  565.478274][T23057] 8021q: adding VLAN 0 to HW filter on device bond70
[  566.027803][T23089] bond51: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  566.035438][T23095] tipc: MTU too low for tipc bearer
[  566.056249][T23089] veth33: entered promiscuous mode
[  566.062005][T23089] bond51: (slave veth33): Enslaving as a backup interface with a down link
[  566.074334][T23089] 8021q: adding VLAN 0 to HW filter on device bond51
[  566.545825][T23135] syzkaller1: entered allmulticast mode
[  566.978034][T23106] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  566.980992][T23106] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  567.012436][T23141] validate_nla: 6 callbacks suppressed
[  567.012454][T23141] netlink: 'syz.2.4536': attribute type 1 has an invalid length.
[  567.279240][T23149] netlink: 'syz.2.4538': attribute type 13 has an invalid length.
[  567.891255][T23148] tipc: Resetting bearer <eth:syzkaller0>
[  570.004111][ T5476] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.007707][ T5476] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 34533 - 0
[  570.011891][ T5476] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  570.015270][ T5476] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  570.018545][ T5476] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 256 - 0
[  570.028730][ T5476] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.038100][ T5476] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 34533 - 0
[  570.049381][ T5476] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  570.054052][ T5476] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  570.060678][ T5476] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 256 - 0
[  570.063994][ T5476] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.067267][ T5476] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 34533 - 0
[  570.072841][ T5476] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  570.079636][ T5476] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  570.089744][ T5476] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 256 - 0
[  570.106417][ T5476] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.110402][T23169] __nla_validate_parse: 48 callbacks suppressed
[  570.110415][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'.
[  570.114420][ T5476] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 34533 - 0
[  570.118844][T23169] nbd: must specify a size in bytes for the device
[  570.121491][ T5476] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  570.125828][ T5476] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  570.129057][ T5476] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 256 - 0
[  570.160980][T23171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'.
[  570.173492][T23169] workqueue: Failed to create a rescuer kthread for wq "bond71": -EINTR
[  570.365323][T23192] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4547'.
[  570.403021][T23192] dummy0 (unregistering): left promiscuous mode
[  570.423923][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4547'.
[  570.498327][T23190] lo speed is unknown, defaulting to 1000
[  570.531961][T23201] netlink: 'syz.1.4548': attribute type 2 has an invalid length.
[  570.539535][T23201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'.
[  570.728154][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'.
[  571.486074][T23221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4553'.
[  571.553361][T23222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4553'.
[  571.724760][T23238] veth0_vlan: entered allmulticast mode
[  571.783584][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'.
[  571.944664][T23242] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4558'.
[  572.737733][T23253] netlink: 'syz.0.4562': attribute type 2 has an invalid length.
[  572.741618][T23253] netlink: 'syz.0.4562': attribute type 2 has an invalid length.
[  572.826698][T23265] netlink: 'syz.1.4567': attribute type 3 has an invalid length.
[  572.835371][T23265] netlink: 'syz.1.4567': attribute type 3 has an invalid length.
[  573.236476][T23287] netlink: 'syz.2.4574': attribute type 1 has an invalid length.
[  573.458261][T23313] team_slave_1: Caught tx_queue_len zero misconfig
[  573.565293][T23313] bond58: (slave lo): Releasing backup interface
[  573.572662][T23313] bond58: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  573.607052][T23313] bond31: (slave wireguard1): Releasing backup interface
[  573.609362][T23313] bond31: (slave wireguard2): making interface the new active one
[  573.614898][T23313] bond31: (slave wireguard2): Releasing backup interface
[  573.620194][T23313] bond33: (slave bond34): Releasing backup interface
[  573.625720][T23313] bond46: (slave bridge21): Removing an active aggregator
[  573.628533][T23313] bond46: (slave bridge21): Releasing backup interface
[  573.630754][T23313] bond46: (slave bridge21): the permanent HWaddr of slave - 56:04:30:21:fe:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  573.637089][T23313] bridge21: left promiscuous mode
[  573.639811][T23313] bridge21: left allmulticast mode
[  573.644483][T23313] bond46: (slave bridge22): Releasing backup interface
[  573.648437][T23313] bridge22: left promiscuous mode
[  573.650843][T23313] bridge22: left allmulticast mode
[  573.654958][T23313] bond47: (slave bridge23): Releasing backup interface
[  573.657056][T23313] bridge23: left promiscuous mode
[  573.658618][T23313] bridge23: left allmulticast mode
[  573.665640][T23313] bond51: (slave bridge25): Releasing backup interface
[  573.671029][T23313] team0: Port device bridge26 removed
[  573.674251][T23313] team0: Port device bridge31 removed
[  573.677128][T23313] team0: Port device bridge32 removed
[  573.749020][T23326] syzkaller0: entered promiscuous mode
[  573.751000][T23326] syzkaller0: entered allmulticast mode
[  574.268754][T23347] bond71: entered promiscuous mode
[  574.401751][T23352] : renamed from bond0
[  574.994675][T23396] net_ratelimit: 22 callbacks suppressed
[  574.994697][T23396] netlink: zone id is out of range
[  575.002741][T23396] netlink: zone id is out of range
[  575.004524][T23396] netlink: zone id is out of range
[  575.006144][T23396] netlink: zone id is out of range
[  575.007704][T23396] netlink: zone id is out of range
[  575.011598][T23396] netlink: zone id is out of range
[  575.016078][T23396] netlink: zone id is out of range
[  575.023340][T23396] netlink: zone id is out of range
[  575.027536][T23404] sctp: [Deprecated]: syz.1.4606 (pid 23404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  575.027536][T23404] Use struct sctp_sack_info instead
[  575.035280][T23396] netlink: zone id is out of range
[  575.038130][T23396] netlink: zone id is out of range
[  575.135891][ T5476] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  575.141161][ T5476] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  575.146328][ T5476] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  575.154417][ T5476] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  575.214162][T23418] __nla_validate_parse: 17 callbacks suppressed
[  575.214183][T23418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4609'.
[  575.325238][T23426] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4613'.
[  575.369046][   T56] block nbd1: Receive control failed (result -32)
[  575.396359][T23411] lo speed is unknown, defaulting to 1000
[  575.460015][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.474506][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.478266][T23430] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.482407][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.486167][T23430] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.490027][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4615'.
[  575.572905][T23433] netlink: 'syz.1.4616': attribute type 12 has an invalid length.
[  575.713783][T23437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4617'.
[  575.766190][T23435] syzkaller1: entered promiscuous mode
[  575.768672][T23435] syzkaller1: entered allmulticast mode
[  575.777666][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'.
[  575.967749][T23447] netlink: 'syz.0.4621': attribute type 2 has an invalid length.
[  576.024051][T23451] netlink: 'syz.1.4622': attribute type 1 has an invalid length.
[  576.413867][T23481] bridge33: entered promiscuous mode
[  576.526087][T23487] veth0_vlan: left allmulticast mode
[  576.539896][T23487] mac80211_hwsim hwsim15 d: left promiscuous mode
[  576.542660][T23487] mac80211_hwsim hwsim15 d: left allmulticast mode
[  576.545996][T23487] gretap6: left promiscuous mode
[  576.548051][T23487] bond65: left promiscuous mode
[  576.551998][T23487] bridge23: left promiscuous mode
[  576.554295][T23487] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  576.556395][T23487] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  576.558779][T23487] bond66: left promiscuous mode
[  576.560849][T23487] bridge24: left promiscuous mode
[  576.562920][T23487] bridge25: left promiscuous mode
[  576.564746][T23487] bridge26: left promiscuous mode
[  576.566388][T23487] bond66: left allmulticast mode
[  576.567901][T23487] bridge24: left allmulticast mode
[  576.569740][T23487] bridge25: left allmulticast mode
[  576.571213][T23487] bridge26: left allmulticast mode
[  576.577870][T23487] bond67: left promiscuous mode
[  576.583829][T23487] bridge27: left promiscuous mode
[  576.586335][T23485] netlink: 'syz.2.4632': attribute type 2 has an invalid length.
[  576.591670][T23485] netlink: 'syz.2.4632': attribute type 2 has an invalid length.
[  576.595557][T23487] macvtap2: left allmulticast mode
[  576.601834][T23487] bond68: left promiscuous mode
[  576.605109][T23487] bond69: left promiscuous mode
[  576.607105][T23487] ip6gre4: left promiscuous mode
[  576.613029][T23487] bond70: left promiscuous mode
[  576.621758][T23487] bond71: left promiscuous mode
[  577.058466][T23499] netlink: 'syz.2.4637': attribute type 11 has an invalid length.
[  577.228623][T23514] dvmrp6: entered allmulticast mode
[  577.458786][T23530] syzkaller1: entered promiscuous mode
[  577.461379][T23530] syzkaller1: entered allmulticast mode
[  577.484374][T23532] bridge25: port 1(veth37) entered blocking state
[  577.487180][T23532] bridge25: port 1(veth37) entered disabled state
[  577.490413][T23532] veth37: entered allmulticast mode
[  577.494430][T23532] veth37: entered promiscuous mode
[  577.529680][T23532] bridge25: port 2(veth0_to_bond) entered blocking state
[  577.533975][T23532] bridge25: port 2(veth0_to_bond) entered disabled state
[  577.536253][T23532] veth0_to_bond: entered allmulticast mode
[  577.539037][T23532] veth0_to_bond: entered promiscuous mode
[  577.673380][T23523] lo speed is unknown, defaulting to 1000
[  577.884482][T23550] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  577.933385][T23557] validate_nla: 1 callbacks suppressed
[  577.933405][T23557] netlink: 'syz.0.4655': attribute type 5 has an invalid length.
[  577.977648][T23557] sit4: entered promiscuous mode
[  578.815142][T23623] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  578.826697][T23623] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  578.918356][T23626] netlink: 'syz.0.4671': attribute type 21 has an invalid length.
[  578.924174][T23626] netlink: 'syz.0.4671': attribute type 5 has an invalid length.
[  578.931615][T23626] netlink: 'syz.0.4671': attribute type 6 has an invalid length.
[  579.036770][T23644] Cannot find set identified by id 3 to match
[  579.070733][T23648] netlink: 'syz.1.4677': attribute type 1 has an invalid length.
[  579.079609][ T5000] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  579.107216][T23648] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  579.111722][T23648] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  579.139138][T23644] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  579.174731][T23653] bond0: (slave bridge31): Enslaving as an active interface with a down link
[  579.180788][T23654] netlink: 'syz.2.4676': attribute type 2 has an invalid length.
[  579.189618][T23654] netlink: 'syz.2.4676': attribute type 2 has an invalid length.
[  579.230395][T23648] ip6gretap0: entered promiscuous mode
[  579.232660][T23648] ip6gretap0: entered allmulticast mode
[  579.238612][T23648] bond0: (slave ip6gretap0): making interface the new active one
[  579.242325][T23648] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  579.302225][T23656] netem: change failed
[  579.603207][T23658] lo speed is unknown, defaulting to 1000
[  580.161098][T23690] bond52: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  580.165661][T23690] bond52: entered promiscuous mode
[  580.168321][T23690] 8021q: adding VLAN 0 to HW filter on device bond52
[  580.264030][T23701] __nla_validate_parse: 30 callbacks suppressed
[  580.264046][T23701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4688'.
[  580.383973][T23697] ip6gretap3: entered promiscuous mode
[  580.467566][T23704] net_ratelimit: 341 callbacks suppressed
[  580.467588][T23704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.640766][T23710] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4693'.
[  580.644474][T23710] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4693'.
[  580.824937][T23730] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  580.913504][T23730] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  581.088280][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4699'.
[  581.262857][T23768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4701'.
[  581.376680][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4703'.
[  581.380620][T23780] openvswitch: netlink: Invalid VLAN frame
[  581.384160][T23780] siw: device registration error -23
[  581.388046][T23780] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  581.541473][T23785] can: request_module (can-proto-4) failed.
[  581.618886][T23790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4706'.
[  581.625471][T23790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'.
[  581.687810][T23802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4708'.
[  581.817696][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4712'.
[  581.983276][T11690] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  581.986383][T11690] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  581.989037][T11690] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  581.996519][T11690] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  582.205045][T23852] netlink: 'syz.0.4722': attribute type 1 has an invalid length.
[  582.238509][T23852] 8021q: adding VLAN 0 to HW filter on device bond53
[  582.335653][T23863] bond70: entered allmulticast mode
[  582.446244][T23874] bond63: entered promiscuous mode
[  582.448122][T23874] bond63: entered allmulticast mode
[  582.450479][T23874] 8021q: adding VLAN 0 to HW filter on device bond63
[  582.474040][T23863] dvmrp8: entered allmulticast mode
[  582.481493][T23862] bond70: left allmulticast mode
[  582.570786][T23877] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  582.574708][T23877] netlink: 'syz.2.4728': attribute type 3 has an invalid length.
[  582.577250][T23877] netlink: 'syz.2.4728': attribute type 1 has an invalid length.
[  582.584875][T23877] NCSI netlink: No device for ifindex 0
[  582.919839][T23912] sctp: [Deprecated]: syz.1.4738 (pid 23912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  582.919839][T23912] Use struct sctp_sack_info instead
[  582.982636][T23912] bond72: (slave vxcan1): The slave device specified does not support setting the MAC address
[  582.986284][T23912] bond72: (slave vxcan1): Error -95 calling set_mac_address
[  583.185582][T23927] xt_hashlimit: size too large, truncated to 1048576
[  583.570620][T23943] siw: device registration error -23
[  583.765578][T23950] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  583.769173][T23950] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  584.086385][T23956] bridge27: entered promiscuous mode
[  584.088278][T23956] bridge27: entered allmulticast mode
[  584.179139][T23956] bridge27: entered promiscuous mode
[  584.182803][T23956] bridge27: entered allmulticast mode
[  584.493618][T23970] bond54: entered promiscuous mode
[  584.495669][T23970] bond54: entered allmulticast mode
[  584.617801][T23991] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  584.785307][T23997] 0{X: entered promiscuous mode
[  585.562027][T24013] __nla_validate_parse: 17 callbacks suppressed
[  585.562048][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4761'.
[  585.627529][T24018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4764'.
[  585.645375][T24018] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  585.830174][T24016] lo speed is unknown, defaulting to 1000
[  585.928696][T24037] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4768'.
[  585.935867][T24037] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4768'.
[  585.946910][T24043] sctp: [Deprecated]: syz.2.4769 (pid 24043) Use of int in maxseg socket option.
[  585.946910][T24043] Use struct sctp_assoc_value instead
[  586.008679][T24043] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4769'.
[  586.065502][T24051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4770'.
[  586.137353][T24058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4772'.
[  586.320338][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  586.327405][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  586.344263][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4770'.
[  586.349058][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  586.356466][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  586.378772][T24061] vlan6: entered promiscuous mode
[  586.383615][T24061] bridge0: entered promiscuous mode
[  586.574735][ T8199] block nbd7: Receive control failed (result -32)
[  586.582978][   T55] block nbd7: Receive control failed (result -32)
[  586.642733][T24065] lo speed is unknown, defaulting to 1000
[  586.668662][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4774'.
[  586.673448][T24071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4774'.
[  586.673790][T24077] validate_nla: 1 callbacks suppressed
[  586.673799][T24077] netlink: 'syz.1.4776': attribute type 6 has an invalid length.
[  586.697209][   T55] block nbd8: Receive control failed (result -32)
[  586.823203][T24084] netlink: 'syz.1.4777': attribute type 12 has an invalid length.
[  586.831545][T24084] netlink: 'syz.1.4777': attribute type 12 has an invalid length.
[  586.988712][T24094] sctp: [Deprecated]: syz.1.4782 (pid 24094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  586.988712][T24094] Use struct sctp_sack_info instead
[  586.994361][T24094] sctp: [Deprecated]: syz.1.4782 (pid 24094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  586.994361][T24094] Use struct sctp_sack_info instead
[  587.021094][T24094] vlan6: entered promiscuous mode
[  587.302088][T24121] netlink: 'syz.0.4789': attribute type 12 has an invalid length.
[  587.313822][T24121] netlink: 'syz.0.4789': attribute type 11 has an invalid length.
[  587.436106][T24128] team0: Device vlan0 failed to change mtu
[  587.436205][T13261] lo speed is unknown, defaulting to 1000
[  587.444550][T13261] sy2: Port: 1 Link ACTIVE
[  587.496203][T24137] netlink: 'syz.1.4795': attribute type 1 has an invalid length.
[  587.517305][T24133] netlink: 'syz.2.4794': attribute type 1 has an invalid length.
[  587.523624][T24137] 8021q: adding VLAN 0 to HW filter on device bond73
[  587.577376][T24137] tipc: Resetting bearer <eth:syzkaller0>
[  587.601666][   T10] lo speed is unknown, defaulting to 1000
[  587.677617][T24150] bond0: Caught tx_queue_len zero misconfig
[  587.712231][T24156] bridge0: Device is already in use.
[  587.754098][T24159] syzkaller0: left promiscuous mode
[  587.756067][T24159] syzkaller0: left allmulticast mode
[  588.427242][T24178] sctp: [Deprecated]: syz.0.4806 (pid 24178) Use of int in maxseg socket option.
[  588.427242][T24178] Use struct sctp_assoc_value instead
[  588.622247][ T5476] bond51: (slave ip6gretap3): link status up again after 0 ms
[  588.625161][ T5476] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  588.654204][T24180] netlink: 'syz.0.4807': attribute type 29 has an invalid length.
[  588.664413][T24180] netlink: 'syz.0.4807': attribute type 29 has an invalid length.
[  588.710870][T24185] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  588.729811][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  588.840779][ T5476] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  588.959798][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.110065][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.220040][   T13] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.340454][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.449666][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.559877][   T13] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  589.798119][T24254] syzkaller0: entered promiscuous mode
[  589.806305][T24253] netlink: 'syz.1.4818': attribute type 1 has an invalid length.
[  589.809116][T24254] syzkaller0: entered allmulticast mode
[  590.027405][T24266] syzkaller1: entered promiscuous mode
[  590.032275][T24266] syzkaller1: entered allmulticast mode
[  590.641632][T24291] __nla_validate_parse: 25 callbacks suppressed
[  590.641650][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4828'.
[  590.854179][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4832'.
[  590.863303][T24306] vlan8: entered allmulticast mode
[  590.865107][T24306] macvtap0: entered allmulticast mode
[  590.904447][T24312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4833'.
[  590.970348][T24315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4834'.
[  590.987517][T24315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4834'.
[  591.099463][T24317] 8021q: adding VLAN 0 to HW filter on device bond66
[  591.118505][T24318] bond66: (slave gretap6): making interface the new active one
[  591.122391][T24318] bond66: (slave gretap6): Enslaving as an active interface with an up link
[  591.177472][T24325] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  591.181063][T24325] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  591.711651][T24339] validate_nla: 3 callbacks suppressed
[  591.711664][T24339] netlink: 'syz.0.4841': attribute type 1 has an invalid length.
[  591.769011][T24339] tipc: Resetting bearer <eth:syzkaller0>
[  591.947964][T24353] netlink: 'syz.0.4844': attribute type 2 has an invalid length.
[  591.956678][T24353] netlink: 'syz.0.4844': attribute type 8 has an invalid length.
[  591.960185][T24353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4844'.
[  592.061632][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4847'.
[  592.366644][   T34] audit: type=1804 audit(1778662937.276:26): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4851" name="/newroot/1653/memory.events" dev="tmpfs" ino=8447 res=1 errno=0
[  592.374448][   T34] audit: type=1800 audit(1778662937.286:27): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4851" name="memory.events" dev="tmpfs" ino=8447 res=0 errno=0
[  592.404430][T24381] bond67: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  592.414393][T24381] bond67 (unregistering): Released all slaves
[  592.556836][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'.
[  592.564964][T24384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4852'.
[  592.776120][T24404] netlink: 'syz.2.4857': attribute type 11 has an invalid length.
[  592.778719][T24404] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4857'.
[  593.136463][T24410] bond0: Caught tx_queue_len zero misconfig
[  593.168645][T24410] netlink: 'syz.0.4859': attribute type 1 has an invalid length.
[  593.445331][T24427] netlink: 'syz.0.4864': attribute type 29 has an invalid length.
[  593.450032][T24427] netlink: 'syz.0.4864': attribute type 29 has an invalid length.
[  593.661543][   T13] net_ratelimit: 36 callbacks suppressed
[  593.661565][   T13] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  593.817787][ T7067] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  593.837870][T24462] netlink: 'syz.1.4872': attribute type 1 has an invalid length.
[  593.920293][T24464] 8021q: adding VLAN 0 to HW filter on device bond75
[  593.920858][T24467] netlink: 'syz.0.4873': attribute type 1 has an invalid length.
[  593.925521][T24464] bond74: (slave bond75): making interface the new active one
[  593.928321][T24464] bond74: (slave bond75): Enslaving as an active interface with an up link
[  593.937798][T24462] 8021q: adding VLAN 0 to HW filter on device bond74
[  593.958461][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.071486][ T7067] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.181051][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.420090][ T7067] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.550018][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.630265][T24514] netlink: 'syz.2.4885': attribute type 1 has an invalid length.
[  594.820524][ T7067] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  594.929524][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  595.039936][T11690] bond51: (slave ip6gretap3): failed to get link speed/duplex
[  595.455382][T24526] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  595.624272][T24534] pim6reg1: entered promiscuous mode
[  595.626144][T24534] pim6reg1: entered allmulticast mode
[  595.677671][T24536] hmac(sh: entered promiscuous mode
[  595.853622][T24556] bridge_slave_1: invalid flags given to default FDB implementation
[  595.917715][T24561] __nla_validate_parse: 13 callbacks suppressed
[  595.917737][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4901'.
[  595.930249][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4901'.
[  595.937294][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4901'.
[  595.968339][T24566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4904'.
[  596.008855][T24571] bond67: entered promiscuous mode
[  596.358342][T24588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4910'.
[  596.371380][T24578] lo speed is unknown, defaulting to 1000
[  596.429049][T24595] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4912'.
[  596.533808][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'.
[  596.542780][T24585] lo speed is unknown, defaulting to 1000
[  597.010455][T24620] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4919'.
[  597.026311][T24616] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  597.029730][T24616] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  597.076920][T24623] validate_nla: 5 callbacks suppressed
[  597.076934][T24623] netlink: 'syz.0.4920': attribute type 8 has an invalid length.
[  597.168784][T24627] netlink: 'syz.0.4921': attribute type 1 has an invalid length.
[  597.223539][T24627] bond56: entered promiscuous mode
[  597.225468][T24627] bond56: entered allmulticast mode
[  597.227503][T24627] 8021q: adding VLAN 0 to HW filter on device bond56
[  597.355242][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4922'.
[  597.365223][T24631] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4922'.
[  597.547890][T24633] bridge28: entered promiscuous mode
[  597.556593][T24633] bridge28: entered allmulticast mode
[  598.275938][T24706] veth0_to_bond: left allmulticast mode
[  598.278279][T24706] veth0_to_bond: left promiscuous mode
[  598.301017][T24706] bridge25: port 2(veth0_to_bond) entered disabled state
[  598.310673][T24709] netlink: 'syz.2.4943': attribute type 2 has an invalid length.
[  598.322709][T24706] bond51: (slave ip6gretap3): Removing an active aggregator
[  598.334706][T24706] bond51: (slave ip6gretap3): Releasing backup interface
[  598.337341][T24706] bond51: (slave ip6gretap3): the permanent HWaddr of slave - 9a:e8:70:3f:75:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  598.359790][T24706] bond51: (slave veth33): Releasing backup interface
[  598.369267][T24706] veth37: left allmulticast mode
[  598.373599][T24706] veth37: left promiscuous mode
[  598.375430][T24706] bridge25: port 1(veth37) entered disabled state
[  598.402612][T24710] vlan6: entered promiscuous mode
[  598.462952][T24721] bond57: Unable to set down delay as MII monitoring is disabled
[  598.466859][T24721] bond57 (unregistering): Released all slaves
[  598.485760][T24719] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  598.492813][T24719] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  598.497479][T24719] veth0_virt_wifi: entered allmulticast mode
[  598.502192][T24719] veth0_virt_wifi: entered promiscuous mode
[  598.726758][T24750] netlink: 'syz.0.4953': attribute type 1 has an invalid length.
[  598.732473][T24750] netlink: 'syz.0.4953': attribute type 1 has an invalid length.
[  598.749657][T24750] syzkaller1: entered promiscuous mode
[  598.752623][T24750] syzkaller1: entered allmulticast mode
[  598.920759][T24759] netlink: 'syz.2.4952': attribute type 10 has an invalid length.
[  599.122469][T24772] net_ratelimit: 29 callbacks suppressed
[  599.122487][T24772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.294615][T24785] openvswitch: netlink: IP tunnel TTL not specified.
[  599.298217][T24785] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  599.404338][T24799] netlink: 'syz.1.4967': attribute type 1 has an invalid length.
[  602.536349][T24813] x_tables: duplicate underflow at hook 1
[  602.581342][T24817] __nla_validate_parse: 13 callbacks suppressed
[  602.581364][T24817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4972'.
[  602.591970][T24817] nbd: nbd0 already in use
[  602.593613][T24817] block nbd0: NBD_DISCONNECT
[  602.595006][T24817] block nbd0: Send disconnect failed -32
[  602.596741][T24817] block nbd0: shutting down sockets
[  602.774835][T24818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  602.781831][T13270] lo speed is unknown, defaulting to 1000
[  602.784131][T13270] sy2: Port: 1 Link DOWN
[  602.789516][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4973'.
[  602.796481][   T55] block nbd0: Receive control failed (result -32)
[  619.012644][T24835] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4976'.
[  619.025747][T24841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4975'.
[  619.077988][T24848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'.
[  619.151523][T24837] lo speed is unknown, defaulting to 1000
[  619.183772][T24856] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  619.367388][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'.
[  619.530659][T24872] netlink: 'syz.1.4984': attribute type 6 has an invalid length.
[  619.663309][T24882] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  619.842710][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'.
[  619.851016][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4989'.
[  619.854355][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'.
[  619.857299][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4989'.
[  620.102269][T24900] lo speed is unknown, defaulting to 1000
[  620.558247][T24915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  620.821980][T24943] syzkaller1: entered promiscuous mode
[  620.823990][T24943] syzkaller1: entered allmulticast mode
[  620.872335][T24943] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  620.875802][T24943] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  620.881881][T24943] ip6gretap0: left promiscuous mode
[  620.884003][T24943] ip6gretap0: left allmulticast mode
[  620.886120][T24943] ip6gretap3: left promiscuous mode
[  620.907940][T24943] syzkaller1: left promiscuous mode
[  620.910455][T24943] syzkaller1: left allmulticast mode
[  621.223152][T24963] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5008'.
[  621.607547][T24987] xt_hashlimit: size too large, truncated to 1048576
[  621.676908][T24998] netlink: 'syz.1.5013': attribute type 1 has an invalid length.
[  621.680399][T24998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5013'.
[  621.976322][T25017] bond57: Unable to set down delay as MII monitoring is disabled
[  621.986317][T25017] bond57 (unregistering): Released all slaves
[  622.250164][T25047] syzkaller1: entered allmulticast mode
[  622.366597][T25053] netlink: 'syz.2.5025': attribute type 3 has an invalid length.
[  622.399111][T25056] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  622.401805][T25056] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  622.441186][T25053] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  622.512795][T25068] netlink: 'syz.1.5029': attribute type 3 has an invalid length.
[  622.515588][T25068] netlink: 'syz.1.5029': attribute type 3 has an invalid length.
[  622.777884][T25087] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  622.783904][T25087] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  622.788453][T25087] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  622.820605][T25092] netlink: 'syz.1.5038': attribute type 1 has an invalid length.
[  622.836637][T25092] bond78: entered promiscuous mode
[  622.839061][T25092] 8021q: adding VLAN 0 to HW filter on device bond78
[  623.016742][T25103] netlink: 'syz.0.5041': attribute type 11 has an invalid length.
[  623.081438][T25107] openvswitch: netlink: IP tunnel dst address not specified
[  623.088316][T25107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.138276][T25111] netlink: 'syz.1.5044': attribute type 4 has an invalid length.
[  623.143935][T25111] netlink: 'syz.1.5044': attribute type 8 has an invalid length.
[  623.148385][T25111] netlink: 'syz.1.5044': attribute type 1 has an invalid length.
[  623.152564][T25111] NCSI netlink: No device for ifindex 0
[  623.259987][T25114] team0 (unregistering): left promiscuous mode
[  623.262580][T25114] vlan0: left promiscuous mode
[  623.266728][T25114] macvlan4: left promiscuous mode
[  623.274796][T25114] team0 (unregistering): Port device vlan0 removed
[  623.282780][T25114] team0 (unregistering): Port device macvlan4 removed
[  623.727962][T25122] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  624.228288][T25141] __nla_validate_parse: 17 callbacks suppressed
[  624.228344][T25141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5053'.
[  624.240373][T25141] netlink: 'syz.0.5053': attribute type 14 has an invalid length.
[  624.245680][T25141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5053'.
[  624.399864][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5054'.
[  624.692846][T25152] bridge29: entered promiscuous mode
[  624.694658][T25152] bridge29: entered allmulticast mode
[  624.810814][T25152] syzkaller1: entered promiscuous mode
[  624.816787][T25152] syzkaller1: entered allmulticast mode
[  625.052710][T25171] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5064'.
[  625.062379][T25172] xt_CT: You must specify a L4 protocol and not use inversions on it
[  625.113276][T25177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5064'.
[  625.162483][T25169] validate_nla: 1 callbacks suppressed
[  625.162494][T25169] netlink: 'syz.1.5061': attribute type 3 has an invalid length.
[  625.167319][T25169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5061'.
[  625.213907][T25184] netlink: 'syz.0.5066': attribute type 1 has an invalid length.
[  625.217118][T25184] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5066'.
[  625.437098][T25186] bond57: option min_links: invalid value (18446744073709551612)
[  625.439836][T25186] bond57: option min_links: allowed values 0 - 2147483647
[  625.443703][T25186] bond57 (unregistering): Released all slaves
[  625.645059][T25195] netlink: 'syz.0.5070': attribute type 2 has an invalid length.
[  625.677331][T25197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5071'.
[  625.682186][T25197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5071'.
[  625.685205][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5071'.
[  627.188556][T25244] lo speed is unknown, defaulting to 1000
[  627.428201][T25267] netlink: 'syz.2.5093': attribute type 1 has an invalid length.
[  627.491267][T25267] 8021q: adding VLAN 0 to HW filter on device bond68
[  627.558316][T25273] netlink: 'syz.1.5095': attribute type 1 has an invalid length.
[  627.731394][T25277] tipc: Resetting bearer <eth:syzkaller0>
[  627.741506][T13270] lo speed is unknown, defaulting to 1000
[  627.998072][T25301] wg2: Caught tx_queue_len zero misconfig
[  628.092792][T25310] netlink: 'syz.0.5104': attribute type 13 has an invalid length.
[  628.096019][T25310] netlink: 'syz.0.5104': attribute type 17 has an invalid length.
[  628.494581][T25310] 0{X: left promiscuous mode
[  628.554918][T25310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.587465][T25310] veth1_macvtap: left promiscuous mode
[  628.602063][T25310] veth1_macvtap: entered promiscuous mode
[  628.608065][T25310] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  629.415787][T25361] __nla_validate_parse: 16 callbacks suppressed
[  629.415800][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5118'.
[  629.748471][T25369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5120'.
[  629.752315][T25368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5120'.
[  629.793508][T25368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5120'.
[  629.848980][T25373] netlink: 'syz.2.5122': attribute type 1 has an invalid length.
[  629.867766][T25373] bond69: entered promiscuous mode
[  629.870683][T25373] bond69: entered allmulticast mode
[  629.873783][T25373] 8021q: adding VLAN 0 to HW filter on device bond69
[  629.881847][T25373] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5122'.
[  629.884847][T25378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5124'.
[  629.893949][T25373] macvlan4: entered promiscuous mode
[  629.896162][T25373] macvlan4: entered allmulticast mode
[  629.901371][T25373] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  630.072545][T25391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5127'.
[  630.075985][T25390] gtp3: entered promiscuous mode
[  630.078017][T25390] gtp3: entered allmulticast mode
[  630.105240][T25393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  630.120406][T25393] xt_l2tp: invalid flags combination: 8
[  630.135104][T25393] netlink: 'syz.2.5129': attribute type 1 has an invalid length.
[  630.141410][T25394] gre0: entered promiscuous mode
[  630.144220][T25394] gre0: entered allmulticast mode
[  630.253581][T25407] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  630.267386][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'.
[  630.301393][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'.
[  630.389532][T25417] dvmrp0: entered allmulticast mode
[  630.626369][T25432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.765457][T25433] bond57: option miimon: invalid value (18446744073709551607)
[  630.767812][T25433] bond57: option miimon: allowed values 0 - 2147483647
[  630.772261][T25433] bond57 (unregistering): Released all slaves
[  630.834159][T25425] lo speed is unknown, defaulting to 1000
[  630.850918][   T55] block nbd9: Receive control failed (result -32)
[  634.398950][T25456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.441451][T25496] netlink: 'syz.0.5155': attribute type 1 has an invalid length.
[  635.452900][T25496] netlink: 'syz.0.5155': attribute type 1 has an invalid length.
[  635.506876][T25498] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  635.510766][T25498] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  635.562079][T25504] __nla_validate_parse: 4 callbacks suppressed
[  635.562103][T25504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5157'.
[  635.681081][T25510] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  635.855742][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.860123][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.863932][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.866729][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.870769][T25516] netlink: 'syz.2.5161': attribute type 10 has an invalid length.
[  635.874194][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.877052][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.880531][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.883884][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.890345][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.895468][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.901951][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.908854][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.918317][T25517] netlink: 'syz.1.5162': attribute type 29 has an invalid length.
[  635.920631][T25518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.930613][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'.
[  635.932605][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'.
[  636.097703][T25522] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.997888][T25546] netlink: 'syz.1.5171': attribute type 11 has an invalid length.
[  637.005261][T25547] netlink: 'syz.1.5171': attribute type 11 has an invalid length.
[  637.076262][T25552] 8021q: adding VLAN 0 to HW filter on device bond80
[  637.093288][T25552] vlan6: entered allmulticast mode
[  637.095709][T25552] bond80: entered allmulticast mode
[  637.816729][T25591] openvswitch: netlink: IP tunnel dst address not specified
[  638.064604][T25610] 8021q: adding VLAN 0 to HW filter on device bond57
[  638.120624][T25610] bond57: (slave veth39): Enslaving as an active interface with a down link
[  638.350557][T25631] geneve1: entered promiscuous mode
[  638.629446][T25660] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  638.892551][T25683] syzkaller1: tun_chr_ioctl cmd 1074025677
[  638.894733][T25683] syzkaller1: linktype set to 780
[  638.977455][T25688] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.026698][T25688] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.081090][T25688] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.134140][T25688] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.201851][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.215566][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.237798][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.256866][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.554887][T25725] openvswitch: netlink: IP tunnel dst address not specified
[  639.661303][T25733] syzkaller1: entered promiscuous mode
[  639.663199][T25733] syzkaller1: entered allmulticast mode
[  640.205436][T25780] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  640.415858][T25793] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20001
[  641.406215][T25825] __nla_validate_parse: 108 callbacks suppressed
[  641.406232][T25825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5236'.
[  641.452379][T25830] validate_nla: 94 callbacks suppressed
[  641.452397][T25830] netlink: 'syz.1.5238': attribute type 12 has an invalid length.
[  641.508285][T25832] netlink: 'syz.2.5239': attribute type 18 has an invalid length.
[  641.511195][T25832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'.
[  641.514777][T25832] netlink: 'syz.2.5239': attribute type 18 has an invalid length.
[  641.518115][T25832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'.
[  641.670913][T25839] block nbd10: server does not support multiple connections per device.
[  641.693013][T25839] block nbd10: shutting down sockets
[  641.702074][T25848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5240'.
[  641.818454][T25842] lo speed is unknown, defaulting to 1000
[  641.965444][T25855] nbd: must specify an index to disconnect
[  642.424277][T25857] lo speed is unknown, defaulting to 1000
[  642.483385][T25873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5247'.
[  642.489127][T25873] nbd: illegal input index -1113835520
[  642.493599][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5246'.
[  642.663654][T25887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'.
[  642.691901][T25887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5249'.
[  642.708326][T25886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5250'.
[  642.867405][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5250'.
[  644.098242][T25932] syzkaller1: entered promiscuous mode
[  644.100740][T25932] syzkaller1: entered allmulticast mode
[  644.331054][T25941] netlink: 'syz.1.5262': attribute type 322 has an invalid length.
[  644.517244][T25952] veth0_vlan: entered allmulticast mode
[  644.585923][T25963] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  644.594523][T25962] netlink: 'syz.0.5268': attribute type 1 has an invalid length.
[  644.597476][T25962] netlink: 'syz.0.5268': attribute type 3 has an invalid length.
[  644.685648][T25978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  644.722530][T25980] veth0_to_team: entered promiscuous mode
[  644.764391][T25981] netlink: 'syz.1.5273': attribute type 4 has an invalid length.
[  644.798843][T25984] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.807762][T25981] 8021q: VLANs not supported on syzkaller1
[  644.813307][T25981] syzkaller1: entered promiscuous mode
[  644.815089][T25981] syzkaller1: entered allmulticast mode
[  644.825060][T25984] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.874477][T25984] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.937118][T25984] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.004641][ T5476] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.023181][ T5476] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.039130][ T5476] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.052501][ T5476] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.633825][T25995] netlink: 'syz.1.5278': attribute type 1 has an invalid length.
[  646.075541][T26020] x_tables: duplicate underflow at hook 3
[  646.461195][T26045] netlink: 'syz.2.5293': attribute type 18 has an invalid length.
[  646.464421][T26045] __nla_validate_parse: 18 callbacks suppressed
[  646.464434][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'.
[  646.471011][T26045] netlink: 'syz.2.5293': attribute type 18 has an invalid length.
[  646.473909][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'.
[  646.646563][T26061] syzkaller1: entered promiscuous mode
[  646.648936][T26061] syzkaller1: entered allmulticast mode
[  646.656025][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5297'.
[  646.699168][T26064] netlink: 'syz.0.5298': attribute type 1 has an invalid length.
[  646.702195][T26063] netlink: 'syz.0.5298': attribute type 1 has an invalid length.
[  646.837473][T26077] netlink: 'syz.2.5301': attribute type 1 has an invalid length.
[  646.846187][T26077] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5301'.
[  646.939169][T26081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5302'.
[  646.973983][T26083] netlink: 'syz.2.5303': attribute type 1 has an invalid length.
[  646.988575][T26083] bond72: entered promiscuous mode
[  646.990687][T26083] 8021q: adding VLAN 0 to HW filter on device bond72
[  646.996159][T26083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5303'.
[  646.999146][T26083] bond72: entered allmulticast mode
[  647.012722][T26083] bond72: (slave bridge37): making interface the new active one
[  647.015182][T26083] bridge37: entered promiscuous mode
[  647.017004][T26083] bridge37: entered allmulticast mode
[  647.020767][T26083] bond72: (slave bridge37): Enslaving as an active interface with an up link
[  647.122008][T26088] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5305'.
[  647.175250][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5306'.
[  647.178856][T26090] bridge0: port 2(wlan0) entered blocking state
[  647.184824][T26090] bridge0: port 2(wlan0) entered disabled state
[  647.187610][T26090] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  647.194366][T26090] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  647.910619][T26099] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5309'.
[  648.445492][T26111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5312'.
[  648.569956][T26111] tipc: Resetting bearer <eth:syzkaller0>
[  648.665104][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.669160][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.677190][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.680946][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.784848][T26126] macvtap0: entered promiscuous mode
[  648.792764][T26126] gretap0: entered promiscuous mode
[  648.798494][T26126] macvtap0: entered allmulticast mode
[  648.801089][T26126] gretap0: entered allmulticast mode
[  648.804780][T26128] bridge0: port 1(erspan0) entered blocking state
[  648.811946][T26128] bridge0: port 1(erspan0) entered disabled state
[  648.815008][T26128] erspan0: entered allmulticast mode
[  648.817777][T26128] erspan0: left allmulticast mode
[  648.841597][T26126] macvtap2: entered promiscuous mode
[  648.850206][T26126] macvtap2: entered allmulticast mode
[  648.970663][T26146] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  649.664563][T26177] x_tables: duplicate underflow at hook 3
[  649.698841][T26180] netlink: 'syz.1.5329': attribute type 10 has an invalid length.
[  649.785467][T26187] netlink: 'syz.1.5331': attribute type 16 has an invalid length.
[  649.988626][T26208] netlink: 'syz.1.5337': attribute type 1 has an invalid length.
[  650.026714][T26208] 8021q: adding VLAN 0 to HW filter on device bond83
[  650.065085][T26219] veth131: entered promiscuous mode
[  650.164933][T26228] netlink: 'syz.0.5341': attribute type 9 has an invalid length.
[  650.321581][T26235] 8021q: adding VLAN 0 to HW filter on device bond58
[  650.324757][T26242] tipc: Invalid UDP bearer configuration
[  650.324784][T26242] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  650.558331][T26270] bond0: entered promiscuous mode
[  650.564824][T26270] gretap0: entered promiscuous mode
[  650.568065][T26270] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  650.571846][T26270] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  650.577704][T26270] hsr0: entered promiscuous mode
[  650.675406][T26275] 0{X: entered promiscuous mode
[  650.677679][T26275] macvlan6: entered allmulticast mode
[  650.680581][T26275] 0{X: entered allmulticast mode
[  650.763476][T26284] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  650.915957][T26286] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  650.934276][T26286] bridge30: entered promiscuous mode
[  650.935967][T26286] bridge30: entered allmulticast mode
[  651.331414][T26339] vti0: entered promiscuous mode
[  651.333588][T26339] vti0: entered allmulticast mode
[  651.375917][T26347] kthread_run failed with err -4
[  652.041857][T26374] bond59: option mode: invalid value (254)
[  652.046095][T26374] bond59 (unregistering): Released all slaves
[  652.077722][T26376] __nla_validate_parse: 27 callbacks suppressed
[  652.077740][T26376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5373'.
[  652.333596][T26383] bond59 (unregistering): Released all slaves
[  652.584731][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'.
[  652.602575][T26393] validate_nla: 5 callbacks suppressed
[  652.602587][T26393] netlink: 'syz.1.5378': attribute type 9 has an invalid length.
[  652.619612][T26393] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5378'.
[  652.950266][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'.
[  652.961086][T26415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5384'.
[  652.964815][T26415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5384'.
[  653.022965][T26419] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5386'.
[  653.045878][T26419] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5386'.
[  653.053467][T26419] 1{X: renamed from 30{X
[  653.061636][T26419] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  653.166350][T26439] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5391'.
[  653.180749][T26439] netlink: 'syz.0.5391': attribute type 10 has an invalid length.
[  653.208391][T26446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'.
[  653.288379][T26453] netlink: 'syz.2.5394': attribute type 18 has an invalid length.
[  653.297672][T26454] netlink: 'syz.2.5394': attribute type 18 has an invalid length.
[  653.358500][T26463] netlink: 'syz.1.5396': attribute type 1 has an invalid length.
[  653.362365][T26467] netlink: 'syz.0.5398': attribute type 10 has an invalid length.
[  653.376091][T26467] netlink: 'syz.0.5398': attribute type 10 has an invalid length.
[  653.445517][T26463] 8021q: adding VLAN 0 to HW filter on device bond85
[  653.462851][T26463] bond84: (slave bond85): making interface the new active one
[  653.468560][T26463] bond84: (slave bond85): Enslaving as an active interface with an up link
[  653.486083][T26463] 8021q: adding VLAN 0 to HW filter on device bond84
[  653.552381][T26483] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  653.674104][T26495] netlink: 'syz.0.5406': attribute type 18 has an invalid length.
[  653.822700][T26506] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  653.830090][T26506] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  655.667082][T26586] netlink: 'syz.1.5433': attribute type 11 has an invalid length.
[  655.715983][T26588] bond59: Unable to set down delay as MII monitoring is disabled
[  655.728563][T26588] bond59 (unregistering): Released all slaves
[  655.936445][T26605] : renamed from veth0_to_bond
[  656.037939][T26609] netlink: 'syz.2.5442': attribute type 12 has an invalid length.
[  656.261489][T26613] macsec0: entered promiscuous mode
[  657.006098][T26631] tunl0: Caught tx_queue_len zero misconfig
[  657.008102][T26631] netem: change failed
[  657.320372][T26640] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  657.376939][T26656] __nla_validate_parse: 23 callbacks suppressed
[  657.376954][T26656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'.
[  657.389877][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5456'.
[  657.426499][T26660] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5458'.
[  657.429238][T26660] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5458'.
[  657.432156][T26660] netlink: 658 bytes leftover after parsing attributes in process `syz.0.5458'.
[  657.477705][T26665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5457'.
[  657.513685][T26662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5459'.
[  657.686754][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5461'.
[  657.887900][T26678] xt_CT: You must specify a L4 protocol and not use inversions on it
[  657.888445][T26678] validate_nla: 5 callbacks suppressed
[  657.888456][T26678] netlink: 'syz.1.5462': attribute type 21 has an invalid length.
[  657.933423][T26681] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5463'.
[  657.983009][T26685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.034300][T26685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.096521][T26685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.154127][T26685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.241081][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.259139][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.269827][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.289875][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.325130][T26699] netlink: 'syz.0.5468': attribute type 1 has an invalid length.
[  658.361410][T26699] bond59: (slave bridge30): making interface the new active one
[  658.365892][T26699] bond59: (slave bridge30): Enslaving as an active interface with an up link
[  658.567508][T26708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5470'.
[  658.769263][T26727] netlink: 'syz.1.5473': attribute type 10 has an invalid length.
[  658.999910][T26755] bond0: left promiscuous mode
[  659.002839][T26755] gretap0: left promiscuous mode
[  659.211230][T26759] lo speed is unknown, defaulting to 1000
[  659.268407][T26784] netlink: 'syz.0.5488': attribute type 1 has an invalid length.
[  659.269587][T26783] netlink: 'syz.2.5486': attribute type 9 has an invalid length.
[  659.308105][T26784] 8021q: adding VLAN 0 to HW filter on device bond60
[  659.600800][T26791] veth47: entered allmulticast mode
[  659.615357][T26791] bond61: (slave veth47): Enslaving as an active interface with an up link
[  659.634704][T26791] bond61 (unregistering): (slave veth47): Releasing backup interface
[  659.643238][T26791] bond61 (unregistering): Released all slaves
[  659.903125][T26799] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  659.923630][T26800] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  659.931653][T26801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  660.117385][T26818] bond73: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  660.127115][T26818] bond73 (unregistering): Released all slaves
[  660.370839][T26832] netlink: 'syz.2.5500': attribute type 3 has an invalid length.
[  660.374077][T26832] netlink: 'syz.2.5500': attribute type 3 has an invalid length.
[  660.507620][T26837] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  661.062772][T26853] netlink: 'syz.1.5506': attribute type 2 has an invalid length.
[  661.236763][T26870] veth0_to_team: left promiscuous mode
[  661.239563][T26870] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  661.723711][T26926] bond62: entered promiscuous mode
[  661.726104][T26926] 8021q: adding VLAN 0 to HW filter on device bond62
[  661.756639][T26926] 8021q: adding VLAN 0 to HW filter on device bond63
[  661.761178][T26926] bond63: entered promiscuous mode
[  661.764136][T26926] bond62: (slave bond63): Enslaving as an active interface with an up link
[  661.981644][T26944] netlink: 'syz.0.5526': attribute type 1 has an invalid length.
[  662.103692][T26948] geneve8: entered promiscuous mode
[  662.107562][T11690] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 50572 - 0
[  662.116471][T11690] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 50572 - 0
[  662.121187][T26938] lo speed is unknown, defaulting to 1000
[  662.125773][T11690] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 50572 - 0
[  662.133191][T11690] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 50572 - 0
[  662.805787][T26986] netlink: 'syz.2.5539': attribute type 11 has an invalid length.
[  662.812325][T26986] netlink: 'syz.2.5539': attribute type 4 has an invalid length.
[  662.815846][T26986] __nla_validate_parse: 18 callbacks suppressed
[  662.815860][T26986] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.5539'.
[  662.827956][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'.
[  662.982493][T27001] 0X: left promiscuous mode
[  662.986583][T27001] 8021q: adding VLAN 0 to HW filter on device 60X
[  663.004751][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'.
[  663.015499][T27007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'.
[  663.050780][T27001] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  663.056582][T27001] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  663.063681][T27001] veth1_vlan: left promiscuous mode
[  663.067549][T27001] veth0_vlan: left promiscuous mode
[  663.073180][T27001] veth0_vlan: entered promiscuous mode
[  663.085071][T27001] veth1_vlan: entered promiscuous mode
[  663.094460][T27001] veth0_macvtap: left promiscuous mode
[  663.111603][T27001] veth0_macvtap: entered promiscuous mode
[  663.130485][T27001] 8021q: adding VLAN 0 to HW filter on device bond1
[  663.136484][T27001] 8021q: adding VLAN 0 to HW filter on device bond2
[  663.140655][T27001] 8021q: adding VLAN 0 to HW filter on device bond3
[  663.143567][T27001] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  663.151865][T13261] lo speed is unknown, defaulting to 1000
[  663.155497][T13261] sy2: Port: 1 Link ACTIVE
[  663.158273][T27010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5548'.
[  663.174154][ T5683] syz0: Port: 1 Link ACTIVE
[  663.175886][ T7067] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.179992][ T7067] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.185892][ T7067] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.190973][ T7067] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.200353][ T7067] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.211659][ T7067] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.223588][ T7067] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.233365][ T7067] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.271961][T27013] bond73: entered allmulticast mode
[  663.291000][T27013] macvlan4: entered promiscuous mode
[  663.294287][T27013] macvlan4: entered allmulticast mode
[  663.298389][T27013] bond73: entered promiscuous mode
[  663.305295][T27013] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  663.321911][T27013] bond73: left promiscuous mode
[  663.420572][T27029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5552'.
[  663.429990][T27030] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  663.432887][T27030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.437501][T27029] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5552'.
[  663.463846][T27033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5553'.
[  663.562708][T27041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5556'.
[  663.659011][T27044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5557'.
[  663.903898][T27060] bond87 (unregistering): Released all slaves
[  664.044147][T27065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  664.047254][T27065] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  664.245231][T27076] xt_hashlimit: size too large, truncated to 1048576
[  664.302590][T27078] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  664.670362][T27095] netlink: 'syz.1.5572': attribute type 39 has an invalid length.
[  665.543372][T27086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  665.548129][T27093] netlink: 'syz.1.5572': attribute type 1 has an invalid length.
[  665.551758][T27094] netlink: 'syz.2.5571': attribute type 2 has an invalid length.
[  665.554659][T27094] netlink: 'syz.2.5571': attribute type 2 has an invalid length.
[  665.753391][T27128] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  665.755773][T27128] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  665.800484][T27124] veth0_macvtap: Caught tx_queue_len zero misconfig
[  665.864479][T27125] lo speed is unknown, defaulting to 1000
[  666.479515][   T56] block nbd10: Receive control failed (result -32)
[  666.496902][T26675] block nbd10: NBD_DISCONNECT
[  666.501807][T26675] block nbd10: Send disconnect failed -32
[  666.513735][T26675] block nbd10: shutting down sockets
[  666.808631][T27210] netlink: 'syz.1.5601': attribute type 1 has an invalid length.
[  666.843004][T27210] netlink: 'syz.1.5601': attribute type 10 has an invalid length.
[  667.105647][T27253] netlink: 'syz.1.5607': attribute type 2 has an invalid length.
[  667.927135][T27265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.930586][T27197] __nla_validate_parse: 44 callbacks suppressed
[  667.930597][T27197] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5600'.
[  668.050138][T27283] netlink: 'syz.0.5612': attribute type 1 has an invalid length.
[  668.133317][T27290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'.
[  668.145335][T27289] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5611'.
[  668.186522][T27292] bond57: (slave veth39): Releasing active interface
[  668.195617][T27292] bond59: (slave bridge30): Releasing active interface
[  668.206629][T27292] bond62: (slave bond63): Releasing backup interface
[  668.210268][T27292] bond63: left promiscuous mode
[  668.382745][T27306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5616'.
[  668.448208][T27308] bond65 (unregistering): Released all slaves
[  668.485886][T27302] lo speed is unknown, defaulting to 1000
[  668.550252][T27312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.683677][T27324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5622'.
[  668.695041][T27324] netlink: 'syz.1.5622': attribute type 1 has an invalid length.
[  668.787193][T27329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5624'.
[  668.884898][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5625'.
[  668.892586][T27332] netlink: 'syz.1.5625': attribute type 9 has an invalid length.
[  669.020152][T27344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  669.122135][T27353] 8021q: adding VLAN 0 to HW filter on device bond74
[  669.130951][T27353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.135838][T27353] bond74: (slave batadv0): making interface the new active one
[  669.139023][T27353] bond74: (slave batadv0): Enslaving as an active interface with an up link
[  669.219930][T27361] 8021q: VLANs not supported on tunl0
[  669.325807][T27377] xt_hashlimit: size too large, truncated to 1048576
[  669.341387][T27377] xt_CT: You must specify a L4 protocol and not use inversions on it
[  669.475262][T27387] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  669.478520][T27387] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5640'.
[  669.524207][T27390] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  669.526951][T27390] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  669.693052][T27398] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  669.710887][T27398] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5642'.
[  669.828713][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5648'.
[  669.917191][T27427] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  670.014321][T27441] validate_nla: 1 callbacks suppressed
[  670.014332][T27441] netlink: 'syz.1.5654': attribute type 1 has an invalid length.
[  670.019965][T27416] lo speed is unknown, defaulting to 1000
[  670.094583][T27449] bond70: entered allmulticast mode
[  670.926013][T27448] bond70: left allmulticast mode
[  671.020006][T27475] lo speed is unknown, defaulting to 1000
[  671.039774][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.052804][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.080027][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.086583][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.093595][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.102574][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.110945][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.117851][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.124591][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.130611][T27488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.163176][T27489] netlink: 'syz.0.5661': attribute type 1 has an invalid length.
[  671.206473][T27489] 8021q: adding VLAN 0 to HW filter on device bond66
[  671.295609][T27504] netlink: 'syz.1.5665': attribute type 1 has an invalid length.
[  671.384948][T27508] netlink: 'syz.1.5666': attribute type 1 has an invalid length.
[  671.422947][T27512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  671.621187][T27533] SET target dimension over the limit!
[  671.740547][T27545] netlink: 'syz.1.5671': attribute type 11 has an invalid length.
[  671.743067][T27545] netlink: 'syz.1.5671': attribute type 5 has an invalid length.
[  671.789069][T27549] netlink: 'syz.1.5674': attribute type 2 has an invalid length.
[  671.791796][T27549] netlink: 'syz.1.5674': attribute type 8 has an invalid length.
[  671.901042][T27557] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  671.911250][T27557] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  672.191162][T27587] bond70: entered allmulticast mode
[  672.194517][T27586] bond70: left allmulticast mode
[  672.275187][T27594] netlink: 'syz.1.5688': attribute type 1 has an invalid length.
[  672.312801][T27597] veth0_virt_wifi: left allmulticast mode
[  672.314876][T27597] veth0_virt_wifi: left promiscuous mode
[  672.316938][T27597] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  672.513108][T27601] netlink: 'syz.1.5690': attribute type 4 has an invalid length.
[  672.537131][T27601] bond87: option mode: invalid value (254)
[  672.541628][T27601] bond87 (unregistering): Released all slaves
[  675.820793][T27617] kthread_run failed with err -4
[  675.915884][T27634] __nla_validate_parse: 15 callbacks suppressed
[  675.915908][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5698'.
[  675.984546][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5700'.
[  676.060873][T27642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'.
[  676.091241][T27642] bond87 (unregistering): Released all slaves
[  676.253922][T27659] Cannot find set identified by id 3 to match
[  676.371448][T27669] netlink: 'syz.0.5708': attribute type 13 has an invalid length.
[  676.378770][T27669] netlink: 'syz.0.5708': attribute type 17 has an invalid length.
[  676.479547][T27666] 1{X: left allmulticast mode
[  676.502673][T27669] 1{X: left promiscuous mode
[  676.527867][T27669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.561226][T27669] veth1_macvtap: left promiscuous mode
[  676.565408][T27669] veth1_macvtap: entered promiscuous mode
[  676.571894][T27669] geneve1: left promiscuous mode
[  676.578129][T27669] net_ratelimit: 24 callbacks suppressed
[  676.578140][T27669] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  676.596686][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 50572 - 0
[  676.632118][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 50572 - 0
[  676.638308][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 50572 - 0
[  676.645112][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 50572 - 0
[  676.708793][T27678] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  676.857084][T27691] netlink: 'syz.1.5715': attribute type 1 has an invalid length.
[  676.870993][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5714'.
[  676.873743][T27691] 8021q: adding VLAN 0 to HW filter on device bond87
[  676.874580][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5714'.
[  676.880829][T27690] netlink: 58 bytes leftover after parsing attributes in process `syz.2.5714'.
[  676.933270][T27690] netlink: 'syz.2.5714': attribute type 61 has an invalid length.
[  676.994472][T27697] netlink: 'syz.2.5716': attribute type 1 has an invalid length.
[  677.043005][T27697] 8021q: adding VLAN 0 to HW filter on device bond75
[  677.060801][T27699] vlan0: entered promiscuous mode
[  677.062592][T27699] bond75: entered promiscuous mode
[  677.064343][T27699] vlan0: entered allmulticast mode
[  677.065950][T27699] bond75: entered allmulticast mode
[  677.098780][T27701] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  677.192502][T27707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5719'.
[  677.243858][T27710] netlink: 'syz.2.5720': attribute type 1 has an invalid length.
[  677.260293][T27710] 8021q: adding VLAN 0 to HW filter on device bond76
[  677.278539][T27710] vlan6: entered promiscuous mode
[  677.280442][T27710] bond76: entered promiscuous mode
[  677.282179][T27710] vlan6: entered allmulticast mode
[  677.285014][T27710] bond76: entered allmulticast mode
[  677.300939][T27710] bond76: (slave bridge0): making interface the new active one
[  677.303362][T27710] bridge0: entered promiscuous mode
[  677.305206][T27710] bridge0: entered allmulticast mode
[  677.307797][T27710] bond76: (slave bridge0): Enslaving as an active interface with an up link
[  677.323494][T27711] bond76: (slave bridge38): Enslaving as an active interface with a down link
[  677.351400][T27714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5721'.
[  677.500735][T27724] netlink: 'syz.2.5726': attribute type 1 has an invalid length.
[  677.503288][T27724] netlink: 'syz.2.5726': attribute type 11 has an invalid length.
[  677.506450][T27724] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5726'.
[  677.566779][T27730] netlink: 'syz.2.5728': attribute type 1 has an invalid length.
[  677.594081][T27730] 8021q: adding VLAN 0 to HW filter on device bond77
[  677.657869][T27730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5728'.
[  678.018512][T27763] netlink: 'syz.1.5736': attribute type 3 has an invalid length.
[  678.048450][T27762] bond88: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  678.055297][T27762] bond88 (unregistering): Released all slaves
[  678.190929][ T5476] bond76: (slave bridge0): link status definitely down, disabling slave
[  678.200469][ T5476] bridge0: left promiscuous mode
[  678.210033][ T5476] bridge0: left allmulticast mode
[  678.214879][ T5476] bond76: now running without any active interface!
[  678.384702][T27779] syzkaller1: entered promiscuous mode
[  678.387087][T27779] syzkaller1: entered allmulticast mode
[  678.737557][T27803] bond78: entered promiscuous mode
[  678.743814][T27803] 8021q: adding VLAN 0 to HW filter on device bond78
[  678.752793][T27803] bridge0: Device is already in use.
[  678.861372][T27813] bond67: entered allmulticast mode
[  678.899804][T27817] xt_hashlimit: size too large, truncated to 1048576
[  678.958619][T27820] xt_hashlimit: size too large, truncated to 1048576
[  679.121423][T27826] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  679.126386][T27826] pim6reg1: entered promiscuous mode
[  679.128712][T27826] pim6reg1: entered allmulticast mode
[  679.764154][T27839] nbd11: detected capacity change from 0 to 63
[  679.772405][   T55] block nbd11: Receive control failed (result -32)
[  679.778246][ T8199] block nbd11: Receive control failed (result -32)
[  679.778511][T27824] block nbd11: Send control failed (result -32)
[  679.787423][T27824] block nbd11: Request send failed, requeueing
[  679.807873][   T98] block nbd11: Dead connection, failed to find a fallback
[  679.815037][   T98] block nbd11: shutting down sockets
[  679.817715][   T98] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.824245][   T98] Buffer I/O error on dev nbd11, logical block 0, async page read
[  679.830076][T27824] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.836901][T27824] Buffer I/O error on dev nbd11, logical block 1, async page read
[  679.840346][T27824] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.843396][T27824] Buffer I/O error on dev nbd11, logical block 2, async page read
[  679.847317][T27824] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.868440][T27824] Buffer I/O error on dev nbd11, logical block 3, async page read
[  679.871462][T27851] No such timeout policy "syz1"
[  679.878096][T27824] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.889690][T27824] Buffer I/O error on dev nbd11, logical block 0, async page read
[  679.893634][T27824] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.908573][T27824] Buffer I/O error on dev nbd11, logical block 1, async page read
[  679.915280][T27824] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.919080][T27824] Buffer I/O error on dev nbd11, logical block 2, async page read
[  679.922606][T27824] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.926970][T27824] Buffer I/O error on dev nbd11, logical block 3, async page read
[  679.931101][T27824] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.934884][T27824] Buffer I/O error on dev nbd11, logical block 0, async page read
[  679.938539][T27824] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  679.943097][T27824] Buffer I/O error on dev nbd11, logical block 1, async page read
[  679.959259][T27824] ldm_validate_partition_table(): Disk read failed.
[  679.967357][T27824] Dev nbd11: unable to read RDB block 0
[  679.974026][T27824]  nbd11: unable to read partition table
[  679.986156][T27824] ldm_validate_partition_table(): Disk read failed.
[  679.993785][T27824] Dev nbd11: unable to read RDB block 0
[  680.000496][T27824]  nbd11: unable to read partition table
[  697.390985][T27872] syzkaller1: entered promiscuous mode
[  697.393045][T27872] syzkaller1: entered allmulticast mode
[  697.396105][T27873] validate_nla: 4 callbacks suppressed
[  697.396115][T27873] netlink: 'syz.2.5768': attribute type 1 has an invalid length.
[  697.497253][T27887] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  697.502419][T27887] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  697.838583][T27906] __nla_validate_parse: 13 callbacks suppressed
[  697.838602][T27906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5775'.
[  697.846276][T27906] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  697.897158][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5776'.
[  697.962801][T27915] bridge42: entered promiscuous mode
[  697.964540][T27915] bridge42: entered allmulticast mode
[  698.064271][T27914] lo speed is unknown, defaulting to 1000
[  698.102908][T27926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5780'.
[  698.577428][T27949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5785'.
[  698.612141][T27952] netlink: 'syz.2.5786': attribute type 1 has an invalid length.
[  698.651415][T27952] 8021q: adding VLAN 0 to HW filter on device bond79
[  698.662270][T27952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5786'.
[  698.670724][T27952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5786'.
[  698.675091][T27952] netlink: 'syz.2.5786': attribute type 10 has an invalid length.
[  698.678444][T27952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5786'.
[  698.684257][T27952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'.
[  698.710443][T27952] bond80: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  698.715327][T27952] bond80 (unregistering): Released all slaves
[  699.024996][T27974] syzkaller1: entered promiscuous mode
[  699.026899][T27974] syzkaller1: entered allmulticast mode
[  699.054682][T27974] gre0: left promiscuous mode
[  699.056993][T27974] gre0: left allmulticast mode
[  699.062255][T27974] 0X: left allmulticast mode
[  699.068378][T27974] veth0_macvtap: left allmulticast mode
[  699.076049][T27974] tipc: Resetting bearer <eth:syzkaller0>
[  699.080109][T27974] syzkaller0: left promiscuous mode
[  699.081938][T27974] syzkaller0: left allmulticast mode
[  699.115480][T27974] vlan1: left allmulticast mode
[  699.122460][T27974] erspan0: left allmulticast mode
[  699.127274][T27980] xt_hashlimit: size too large, truncated to 1048576
[  699.127968][T27974] geneve7: left promiscuous mode
[  699.135343][T27974] bond46: left promiscuous mode
[  699.139132][T27974] bond46: left allmulticast mode
[  699.145608][T27974] ip6gre2: left promiscuous mode
[  699.147711][T27974] ip6gre2: left allmulticast mode
[  699.155294][T27974] bond47: left promiscuous mode
[  699.157221][T27974] ipvlan0: left allmulticast mode
[  699.159517][T27974] ipvlan1: left allmulticast mode
[  699.161514][T27974] bond47: left allmulticast mode
[  699.165042][T27974] bond52: left promiscuous mode
[  699.167055][T27974] bond52: left allmulticast mode
[  699.177999][T27974] bridge26: left promiscuous mode
[  699.180672][T27974] bridge26: left allmulticast mode
[  699.182534][T27974] vxcan1: left allmulticast mode
[  699.184664][T27974] ip6tnl8: left allmulticast mode
[  699.188467][T27974] bridge31: left promiscuous mode
[  699.197855][T27974] bridge31: left allmulticast mode
[  699.200277][T27974] bridge32: left promiscuous mode
[  699.201876][T27974] bridge32: left allmulticast mode
[  699.204008][T27974] macsec2: left promiscuous mode
[  699.206041][T27974] bridge33: left promiscuous mode
[  699.208617][T27974] bond63: left promiscuous mode
[  699.210931][T27974] bond63: left allmulticast mode
[  699.215096][T27974] bond67: left promiscuous mode
[  699.217262][T27974] bond69: left promiscuous mode
[  699.220460][T27974] bond69: left allmulticast mode
[  699.224029][T27974] bond72: left promiscuous mode
[  699.225703][T27974] bridge37: left promiscuous mode
[  699.227379][T27974] bond72: left allmulticast mode
[  699.228914][T27974] bridge37: left allmulticast mode
[  699.240740][T27974] macvtap0: left promiscuous mode
[  699.242643][T27974] macvtap0: left allmulticast mode
[  699.251473][T27974] gretap0: left allmulticast mode
[  699.255226][T27974] gretap0: left promiscuous mode
[  699.258549][T27974] macvtap2: left promiscuous mode
[  699.260916][T27974] macvtap2: left allmulticast mode
[  699.267999][T27974] veth131: left promiscuous mode
[  699.273874][T27974] vti0: left promiscuous mode
[  699.276260][T27974] vti0: left allmulticast mode
[  699.278095][T27974] bond73: left allmulticast mode
[  699.297141][T27974] vlan0: left promiscuous mode
[  699.302238][T27974] bond75: left promiscuous mode
[  699.304197][T27974] vlan0: left allmulticast mode
[  699.306151][T27974] bond75: left allmulticast mode
[  699.324312][T27974] vlan6: left promiscuous mode
[  699.335715][T27974] bond76: left promiscuous mode
[  699.338149][T27974] vlan6: left allmulticast mode
[  699.340814][T27974] bond76: left allmulticast mode
[  699.380204][T27974] bond78: left promiscuous mode
[  699.386883][T27974] syzkaller1: left promiscuous mode
[  699.390613][T27974] syzkaller1: left allmulticast mode
[  699.410608][T27978] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  699.413756][T27979] ip6gre0: Caught tx_queue_len zero misconfig
[  699.420059][T27978] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  699.421857][T27979] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  699.582876][T27993] netlink: 'syz.1.5795': attribute type 1 has an invalid length.
[  699.601994][T27993] 8021q: adding VLAN 0 to HW filter on device bond88
[  699.619435][T27993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5795'.
[  699.772258][T28004] netlink: 'syz.2.5799': attribute type 1 has an invalid length.
[  699.775336][T28004] netlink: 'syz.2.5799': attribute type 3 has an invalid length.
[  699.778458][T28004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5799'.
[  700.046261][T28018] x_tables: duplicate underflow at hook 4
[  700.063833][T28018] netlink: 'syz.2.5804': attribute type 29 has an invalid length.
[  700.073651][T28018] netlink: 'syz.2.5804': attribute type 29 has an invalid length.
[  700.154178][T28033] syzkaller0: entered promiscuous mode
[  700.156570][T28033] syzkaller0: entered allmulticast mode
[  700.816563][T28061] sctp: [Deprecated]: syz.1.5813 (pid 28061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  700.816563][T28061] Use struct sctp_sack_info instead
[  700.822475][T28061] sctp: [Deprecated]: syz.1.5813 (pid 28061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  700.822475][T28061] Use struct sctp_sack_info instead
[  701.497525][T28083] syzkaller0: left promiscuous mode
[  701.499235][T28083] syzkaller0: left allmulticast mode
[  702.110668][T28116] netlink: 'syz.0.5830': attribute type 2 has an invalid length.
[  702.113539][T28116] netlink: 'syz.0.5830': attribute type 8 has an invalid length.
[  702.245096][T28121] xt_hashlimit: size too large, truncated to 1048576
[  702.246106][T28120] xt_hashlimit: size too large, truncated to 1048576
[  702.514071][T28142] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002
[  702.573672][T28141] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  703.423487][T28164] __nla_validate_parse: 16 callbacks suppressed
[  703.423506][T28164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5843'.
[  703.430383][T28164] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  703.459971][T28165] bond89: option packets_per_slave: invalid value (812935539)
[  703.462695][T28165] bond89: option packets_per_slave: allowed values 0 - 65535
[  703.468463][T28165] bond89 (unregistering): Released all slaves
[  703.477857][T28169] validate_nla: 2 callbacks suppressed
[  703.477874][T28169] netlink: 'syz.2.5844': attribute type 4 has an invalid length.
[  703.490894][T28169] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5844'.
[  703.495731][T28169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5844'.
[  703.593368][T28173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5846'.
[  703.716196][T28188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  703.725274][T13261] lo speed is unknown, defaulting to 1000
[  703.725706][T28193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5852'.
[  703.727276][T13261] sy2: Port: 1 Link DOWN
[  703.888078][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5857'.
[  703.959020][T28213] netlink: 'syz.2.5858': attribute type 2 has an invalid length.
[  704.111523][T28220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5860'.
[  704.161976][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5861'.
[  704.168274][T28224] openvswitch: : Dropping previously announced user features
[  704.176058][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5861'.
[  704.183611][T28224] openvswitch: : Dropping previously announced user features
[  704.242919][T28229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5862'.
[  704.429882][T28240] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  704.555763][T28255] netlink: 'syz.2.5870': attribute type 9 has an invalid length.
[  704.724743][T28261] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  704.732014][T11865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  704.736412][T11865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.746641][T28264] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.795745][T28264] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.837950][T28272] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  704.854982][T28264] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.908808][T28264] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.040778][ T6072] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.056831][ T6072] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.068260][ T6072] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.078719][ T6072] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.245246][T28299] xt_ecn: cannot match TCP bits for non-tcp packets
[  705.785547][T28331] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  705.788437][T28331] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  705.851845][T28330] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  705.855508][T28330] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  705.920279][T28341] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  705.923168][T28341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.120373][T28350] 1{X: entered promiscuous mode
[  706.141402][T28350] vlan0: entered promiscuous mode
[  706.188947][T28340] lo speed is unknown, defaulting to 1000
[  706.626948][T28356] xt_hl: Unknown TTL match mode: 237
[  706.850765][T28364] syzkaller0: entered promiscuous mode
[  706.853818][T28364] syzkaller0: entered allmulticast mode
[  707.052791][T28366] netlink: 'syz.0.5895': attribute type 1 has an invalid length.
[  707.082243][T16646] wlan1: Trigger new scan to find an IBSS to join
[  707.175930][T28381] netlink: 'syz.2.5900': attribute type 1 has an invalid length.
[  707.385824][T28391] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.435369][T28441] bond89 (unregistering): Released all slaves
[  708.825680][T28469] bridge0: port 1(vlan0) entered blocking state
[  708.828368][T28469] bridge0: port 1(vlan0) entered disabled state
[  708.832314][T28469] vlan0: entered allmulticast mode
[  708.834176][T28469] geneve0: entered allmulticast mode
[  708.837678][T28469] vlan0: entered promiscuous mode
[  708.840656][T28469] geneve0: entered promiscuous mode
[  708.876997][T28452] __nla_validate_parse: 21 callbacks suppressed
[  708.877017][T28452] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5912'.
[  709.128720][T28492] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5923'.
[  709.215056][T28495] bond69: option packets_per_slave: invalid value (434966770)
[  709.218086][T28495] bond69: option packets_per_slave: allowed values 0 - 65535
[  709.222561][T28495] bond69 (unregistering): Released all slaves
[  709.335588][T28503] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5926'.
[  709.452524][T28513] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5928'.
[  709.457563][T28517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5929'.
[  709.712483][T28546] netlink: 'syz.1.5935': attribute type 1 has an invalid length.
[  709.730391][T28546] 8021q: adding VLAN 0 to HW filter on device bond89
[  709.766905][T28547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5935'.
[  709.854925][T28558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'.
[  710.046980][   T27] wlan1: Trigger new scan to find an IBSS to join
[  710.081005][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5944'.
[  710.125817][T28583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'.
[  710.228921][T28593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5945'.
[  710.364407][T28608] 
[  710.365481][T28608] ======================================================
[  710.368216][T28608] WARNING: possible circular locking dependency detected
[  710.371153][T28608] syzkaller #0 Not tainted
[  710.372920][T28608] ------------------------------------------------------
[  710.375571][T28608] syz.1.5951/28608 is trying to acquire lock:
[  710.378059][T28608] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.381996][T28608] 
[  710.381996][T28608] but task is already holding lock:
[  710.384809][T28608] ffff88819df86e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ip_setsockopt+0x1623/0x2ea0
[  710.388510][T28608] 
[  710.388510][T28608] which lock already depends on the new lock.
[  710.388510][T28608] 
[  710.392415][T28608] 
[  710.392415][T28608] the existing dependency chain (in reverse order) is:
[  710.395931][T28608] 
[  710.395931][T28608] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  710.399077][T28608]        lock_sock_nested+0x41/0x100
[  710.401195][T28608]        __inet6_bind+0x30c/0xf60
[  710.403198][T28608]        mptcp_bind+0x110/0x1d0
[  710.405164][T28608]        __sys_bind+0x2e3/0x410
[  710.407122][T28608]        __x64_sys_bind+0x7a/0x90
[  710.409104][T28608]        do_syscall_64+0x15f/0xf80
[  710.411133][T28608]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.413766][T28608] 
[  710.413766][T28608] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  710.416819][T28608]        lock_sock_nested+0x41/0x100
[  710.418878][T28608]        inet_shutdown+0x6a/0x390
[  710.420860][T28608]        nbd_mark_nsock_dead+0x2e9/0x560
[  710.423117][T28608]        recv_work+0x1c2e/0x1d40
[  710.425073][T28608]        process_scheduled_works+0xb5d/0x1860
[  710.427442][T28608]        worker_thread+0xa53/0xfc0
[  710.429309][T28608]        kthread+0x388/0x470
[  710.430823][T28608]        ret_from_fork+0x514/0xb70
[  710.432418][T28608]        ret_from_fork_asm+0x1a/0x30
[  710.434130][T28608] 
[  710.434130][T28608] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  710.436570][T28608]        __mutex_lock+0x1a3/0x1550
[  710.438332][T28608]        nbd_queue_rq+0x37b/0x1100
[  710.440044][T28608]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  710.441965][T28608]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  710.444125][T28608]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  710.446255][T28608]        blk_mq_run_hw_queue+0x348/0x4f0
[  710.448123][T28608]        blk_mq_dispatch_list+0xd16/0xe10
[  710.449949][T28608]        blk_mq_flush_plug_list+0x48d/0x570
[  710.452294][T28608]        __blk_flush_plug+0x3ed/0x4d0
[  710.454457][T28608]        __submit_bio+0x28d/0x580
[  710.456493][T28608]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  710.458505][T28608]        block_read_full_folio+0x599/0x830
[  710.460322][T28608]        filemap_read_folio+0x137/0x3b0
[  710.462048][T28608]        do_read_cache_folio+0x358/0x590
[  710.463806][T28608]        read_part_sector+0xb6/0x2b0
[  710.465433][T28608]        adfspart_check_ICS+0xb1/0x960
[  710.467136][T28608]        bdev_disk_changed+0x817/0x1770
[  710.468861][T28608]        blkdev_get_whole+0x380/0x510
[  710.470509][T28608]        bdev_open+0x31e/0xd30
[  710.471994][T28608]        blkdev_open+0x470/0x610
[  710.473515][T28608]        do_dentry_open+0x785/0x14e0
[  710.475160][T28608]        vfs_open+0x3b/0x340
[  710.476615][T28608]        path_openat+0x2e08/0x3860
[  710.478277][T28608]        do_file_open+0x23e/0x4a0
[  710.479854][T28608]        do_sys_openat2+0x113/0x200
[  710.481459][T28608]        __x64_sys_openat+0x138/0x170
[  710.483130][T28608]        do_syscall_64+0x15f/0xf80
[  710.484694][T28608]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.486676][T28608] 
[  710.486676][T28608] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  710.488912][T28608]        __mutex_lock+0x1a3/0x1550
[  710.490496][T28608]        nbd_queue_rq+0xc6/0x1100
[  710.492084][T28608]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  710.493978][T28608]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  710.496072][T28608]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  710.498084][T28608]        blk_mq_run_hw_queue+0x348/0x4f0
[  710.499875][T28608]        blk_mq_dispatch_list+0xd16/0xe10
[  710.501635][T28608]        blk_mq_flush_plug_list+0x48d/0x570
[  710.503457][T28608]        __blk_flush_plug+0x3ed/0x4d0
[  710.505134][T28608]        __submit_bio+0x28d/0x580
[  710.506681][T28608]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  710.508695][T28608]        block_read_full_folio+0x599/0x830
[  710.510545][T28608]        filemap_read_folio+0x137/0x3b0
[  710.512379][T28608]        do_read_cache_folio+0x358/0x590
[  710.514157][T28608]        read_part_sector+0xb6/0x2b0
[  710.515860][T28608]        adfspart_check_ICS+0xb1/0x960
[  710.517574][T28608]        bdev_disk_changed+0x817/0x1770
[  710.519420][T28608]        blkdev_get_whole+0x380/0x510
[  710.521119][T28608]        bdev_open+0x31e/0xd30
[  710.522669][T28608]        blkdev_open+0x470/0x610
[  710.524275][T28608]        do_dentry_open+0x785/0x14e0
[  710.525956][T28608]        vfs_open+0x3b/0x340
[  710.527454][T28608]        path_openat+0x2e08/0x3860
[  710.529144][T28608]        do_file_open+0x23e/0x4a0
[  710.530809][T28608]        do_sys_openat2+0x113/0x200
[  710.532514][T28608]        __x64_sys_openat+0x138/0x170
[  710.534271][T28608]        do_syscall_64+0x15f/0xf80
[  710.535958][T28608]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.538118][T28608] 
[  710.538118][T28608] -> #3 (set->srcu){.+.+}-{0:0}:
[  710.540419][T28608]        __synchronize_srcu+0xca/0x300
[  710.542229][T28608]        elevator_switch+0x1e8/0x7a0
[  710.543997][T28608]        elevator_change+0x2cc/0x450
[  710.545719][T28608]        elevator_set_default+0x36c/0x430
[  710.547594][T28608]        blk_register_queue+0x3e9/0x4e0
[  710.549482][T28608]        __add_disk+0x677/0xd50
[  710.551055][T28608]        add_disk_fwnode+0xfb/0x480
[  710.552782][T28608]        nbd_dev_add+0x72c/0xb50
[  710.554373][T28608]        nbd_init+0x168/0x1f0
[  710.555934][T28608]        do_one_initcall+0x250/0x870
[  710.557678][T28608]        do_initcall_level+0x104/0x190
[  710.559483][T28608]        do_initcalls+0x59/0xa0
[  710.561092][T28608]        kernel_init_freeable+0x2a6/0x3e0
[  710.562974][T28608]        kernel_init+0x1d/0x1d0
[  710.564554][T28608]        ret_from_fork+0x514/0xb70
[  710.566211][T28608]        ret_from_fork_asm+0x1a/0x30
[  710.567938][T28608] 
[  710.567938][T28608] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  710.570522][T28608]        __mutex_lock+0x1a3/0x1550
[  710.572232][T28608]        elevator_change+0x1b3/0x450
[  710.574037][T28608]        elevator_set_none+0xb5/0x140
[  710.575890][T28608]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  710.577935][T28608]        nbd_start_device+0x17f/0xb10
[  710.579668][T28608]        nbd_genl_connect+0x165b/0x1cf0
[  710.581593][T28608]        genl_family_rcv_msg_doit+0x22a/0x330
[  710.583694][T28608]        genl_rcv_msg+0x61c/0x7a0
[  710.585372][T28608]        netlink_rcv_skb+0x232/0x4b0
[  710.587194][T28608]        genl_rcv+0x28/0x40
[  710.588783][T28608]        netlink_unicast+0x75c/0x8e0
[  710.590461][T28608]        netlink_sendmsg+0x813/0xb40
[  710.592183][T28608]        ____sys_sendmsg+0x972/0x9f0
[  710.593928][T28608]        ___sys_sendmsg+0x2a5/0x360
[  710.595610][T28608]        __x64_sys_sendmsg+0x1bd/0x2a0
[  710.597399][T28608]        do_syscall_64+0x15f/0xf80
[  710.599141][T28608]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.601235][T28608] 
[  710.601235][T28608] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  710.604003][T28608]        blk_alloc_queue+0x546/0x680
[  710.605691][T28608]        __blk_mq_alloc_disk+0x197/0x390
[  710.607447][T28608]        nbd_dev_add+0x499/0xb50
[  710.609211][T28608]        nbd_init+0x168/0x1f0
[  710.610699][T28608]        do_one_initcall+0x250/0x870
[  710.612433][T28608]        do_initcall_level+0x104/0x190
[  710.614161][T28608]        do_initcalls+0x59/0xa0
[  710.615749][T28608]        kernel_init_freeable+0x2a6/0x3e0
[  710.617557][T28608]        kernel_init+0x1d/0x1d0
[  710.619164][T28608]        ret_from_fork+0x514/0xb70
[  710.620749][T28608]        ret_from_fork_asm+0x1a/0x30
[  710.622377][T28608] 
[  710.622377][T28608] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  710.624645][T28608]        __lock_acquire+0x15a5/0x2cf0
[  710.626398][T28608]        lock_acquire+0x106/0x350
[  710.628005][T28608]        fs_reclaim_acquire+0x71/0x100
[  710.629883][T28608]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.632087][T28608]        ip_set_mcast_msfilter+0xd2/0x3f0
[  710.634074][T28608]        do_ip_setsockopt+0x1a27/0x2ea0
[  710.635827][T28608]        ip_setsockopt+0x66/0x110
[  710.637402][T28608]        smc_setsockopt+0x249/0xac0
[  710.639019][T28608]        do_sock_setsockopt+0x17c/0x1b0
[  710.640704][T28608]        __x64_sys_setsockopt+0x13d/0x1b0
[  710.642462][T28608]        do_syscall_64+0x15f/0xf80
[  710.644204][T28608]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.646235][T28608] 
[  710.646235][T28608] other info that might help us debug this:
[  710.646235][T28608] 
[  710.649534][T28608] Chain exists of:
[  710.649534][T28608]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  710.649534][T28608] 
[  710.653933][T28608]  Possible unsafe locking scenario:
[  710.653933][T28608] 
[  710.656436][T28608]        CPU0                    CPU1
[  710.658586][T28608]        ----                    ----
[  710.660697][T28608]   lock(k-sk_lock-AF_INET6);
[  710.662549][T28608]                                lock(sk_lock-AF_INET6);
[  710.664768][T28608]                                lock(k-sk_lock-AF_INET6);
[  710.666953][T28608]   lock(fs_reclaim);
[  710.668261][T28608] 
[  710.668261][T28608]  *** DEADLOCK ***
[  710.668261][T28608] 
[  710.670912][T28608] 3 locks held by syz.1.5951/28608:
[  710.672552][T28608]  #0: ffff88810ca61828 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x18e/0xac0
[  710.676049][T28608]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0
[  710.679681][T28608]  #2: ffff88819df86e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ip_setsockopt+0x1623/0x2ea0
[  710.683074][T28608] 
[  710.683074][T28608] stack backtrace:
[  710.685034][T28608] CPU: 0 UID: 0 PID: 28608 Comm: syz.1.5951 Not tainted syzkaller #0 PREEMPT(full) 
[  710.685048][T28608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  710.685056][T28608] Call Trace:
[  710.685062][T28608]  <TASK>
[  710.685069][T28608]  dump_stack_lvl+0xe8/0x150
[  710.685086][T28608]  print_circular_bug+0x2e1/0x300
[  710.685101][T28608]  check_noncircular+0x12e/0x150
[  710.685114][T28608]  __lock_acquire+0x15a5/0x2cf0
[  710.685126][T28608]  ? lockdep_unlock+0x5d/0xd0
[  710.685134][T28608]  ? __lock_acquire+0x146e/0x2cf0
[  710.685144][T28608]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.685157][T28608]  lock_acquire+0x106/0x350
[  710.685165][T28608]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.685179][T28608]  fs_reclaim_acquire+0x71/0x100
[  710.685190][T28608]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.685201][T28608]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  710.685212][T28608]  ? do_ip_setsockopt+0x1a27/0x2ea0
[  710.685223][T28608]  ip_set_mcast_msfilter+0xd2/0x3f0
[  710.685232][T28608]  ? __local_bh_enable_ip+0xd0/0x130
[  710.685243][T28608]  do_ip_setsockopt+0x1a27/0x2ea0
[  710.685253][T28608]  ? __mutex_lock+0x319/0x1550
[  710.685269][T28608]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  710.685278][T28608]  ? __lock_acquire+0x6b5/0x2cf0
[  710.685287][T28608]  ? smc_setsockopt+0x18e/0xac0
[  710.685300][T28608]  ? __pfx___mutex_lock+0x10/0x10
[  710.685315][T28608]  ip_setsockopt+0x66/0x110
[  710.685323][T28608]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  710.685333][T28608]  smc_setsockopt+0x249/0xac0
[  710.685345][T28608]  ? __pfx_smc_setsockopt+0x10/0x10
[  710.685354][T28608]  ? aa_sock_opt_perm+0xff/0x1a0
[  710.685369][T28608]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  710.685386][T28608]  ? __pfx_smc_setsockopt+0x10/0x10
[  710.685405][T28608]  do_sock_setsockopt+0x17c/0x1b0
[  710.685427][T28608]  __x64_sys_setsockopt+0x13d/0x1b0
[  710.685447][T28608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.685463][T28608]  do_syscall_64+0x15f/0xf80
[  710.685485][T28608]  ? trace_irq_disable+0x3b/0x140
[  710.685510][T28608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.685525][T28608] RIP: 0033:0x7fec78f9cdd9
[  710.685537][T28608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.685546][T28608] RSP: 002b:00007fec79e49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  710.685556][T28608] RAX: ffffffffffffffda RBX: 00007fec79215fa0 RCX: 00007fec78f9cdd9
[  710.685562][T28608] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003
[  710.685568][T28608] RBP: 00007fec79032d69 R08: 0000000000000090 R09: 0000000000000000
[  710.685574][T28608] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000
[  710.685580][T28608] R13: 00007fec79216038 R14: 00007fec79215fa0 R15: 00007ffe48e9e088
[  710.685590][T28608]  </TASK>
[  713.002857][   T27] wlan1: Trigger new scan to find an IBSS to join
[  713.879969][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
