last executing test programs:

3.406704911s ago: executing program 3 (id=1722):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

3.278542128s ago: executing program 3 (id=1725):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x10}}, @TCA_BASIC_ACT={0x4}]}}]}, 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25152001c8", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x4000040)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r6], 0x58}}, 0x0)

2.698708635s ago: executing program 3 (id=1733):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000800006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "088200", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x12f, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x26, 0x121, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10d, 0x0, @opaque="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"}}}}}, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
accept4(r6, 0x0, 0x0, 0x800) (async)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff6734", 0xb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
connect$llc(r7, &(0x7f0000000040)={0x1a, 0x323, 0x5, 0x4, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r3, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r3, 0x4)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r8, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r8, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160)

2.134706047s ago: executing program 4 (id=1743):
r0 = socket$kcm(0xa, 0x3, 0x11) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x100}) (async)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) (async)
getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd75c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80108907, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110be000000000095"], &(0x7f0000000480)='GPL\x00', 0xfffffffc, 0xaea06085ce237a9e}, 0x90)

1.801695364s ago: executing program 3 (id=1751):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

1.474839144s ago: executing program 4 (id=1757):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="9000000000010108000000000000000000000007100004800c00038005000100f9a23eb46c000e80060003400000000006000340000300002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000006432f4f5560000aa060003400002000006000340000200001400018008000100e00000020800020000000000060003"], 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x8010)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="500000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="291101008180040008000a00", @ANYRES32=r3, @ANYBLOB="28001215d7263c00767863616e00000018000295ee00010000000000", @ANYRES32=r3, @ANYBLOB="0001040020020000"], 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r6, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r6, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f0000000600)=0xe8)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
socket$unix(0x1, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
close(0x3)

1.474108s ago: executing program 3 (id=1758):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
r4 = epoll_create1(0x0)
epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d0000000206000005"], 0x1d}}, 0x240cc8c0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{}, [@TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0xfff, 0x401, 0x52}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf4}}, 0x0) (async)
ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000140)={<r6=>r2, &(0x7f0000000040)='netem\x00', 0x181, &(0x7f0000000080)={@_ha_fsid={[0x10f, 0xde8]}, {0x40, 0x3, 0x0, 0x7}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffff6})
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x240408a1)

1.341516054s ago: executing program 1 (id=1759):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r2=>r1, &(0x7f0000000040)='$##${$\x00', 0x80101, &(0x7f0000000080)={@align=0x4, {0x100, 0x9, 0x8, 0xfffffffffffffffa}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x9})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc804}, 0x24000880) (async)
r3 = accept$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
recvmmsg(r3, &(0x7f0000001400)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000600)=""/2, 0x2}, {&(0x7f0000000640)=""/82, 0x52}], 0x5}, 0x34}, {{&(0x7f0000000740)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/152, 0x98}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000900)=""/22, 0x16}, {&(0x7f0000000940)=""/32, 0x20}, {&(0x7f0000000980)=""/9, 0x9}, {&(0x7f00000009c0)=""/64, 0x40}, {&(0x7f0000000a00)=""/189, 0xbd}, {&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/178, 0xb2}], 0x9, &(0x7f0000000cc0)=""/151, 0x97}, 0x33}, {{&(0x7f0000000d80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)=""/97, 0x61}, {&(0x7f0000000e80)=""/31, 0x1f}], 0x2, &(0x7f0000000f00)}, 0x3ff}, {{&(0x7f0000000f40)=@qipcrtr, 0x80, &(0x7f0000001300)=[{&(0x7f0000000fc0)=""/194, 0xc2}, {&(0x7f00000010c0)=""/76, 0x4c}, {&(0x7f0000001140)=""/56, 0x38}, {&(0x7f0000001180)=""/168, 0xa8}, {&(0x7f0000001240)=""/138, 0x8a}], 0x5, &(0x7f0000001380)=""/127, 0x7f}, 0x400}], 0x4, 0x40010020, &(0x7f0000001500)={0x0, 0x3938700}) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x60, 0x1410, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc00}, 0x40805) (async)
sendto$phonet(r2, &(0x7f0000001680)="196a80cd8ea76f6c85f6c1dc5b2d841deaec1c9b2e00f4ba162f320d2ed2280fc2c233bf07a8edc2cc245eec24a54d30224ed41d1da10430fe7d2a9dc5e0bded068f889ed2b9b2d31216731515e506dc4a2795401cc3a565d5d4193471817389d3ef686a6836f9cce56a46823859cefd2d2145430de9c3d927c14f9d118df4301fbcf6d7caa72b2e", 0x88, 0x80, &(0x7f0000001740)={0x23, 0x7, 0x20, 0x5}, 0x10)
r5 = gettid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001780)=r5)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000017c0)={0x3, 0x2, 0xc6, 0x4, 0x4}) (async)
r6 = accept4(r4, &(0x7f0000001800)=@caif=@dgm, &(0x7f0000001880)=0x80, 0x80000)
getsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f00000018c0), &(0x7f0000001900)=0x4) (async)
close(r3)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001940), 0x1) (async)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001dc0)={{}, {0x4}, 0x15, 0x0, 0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)="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", 0x1a5, 0x0, &(0x7f0000001bc0)={0x2, 0x13e, {0x1, 0xc, 0x71, "41da8df1057cb51fc6897dfb51e601e44818c558a7b9b196c726acd626482902f568ab388fa25088aa4ef2f6a273497fe5d92b1a27346b4a8c9c2da8f9002b195ec4abc4b8f06fcfbf172e6032a82645d3f140835004779f36a4d97d57ee48980fd9fcb1c8411a890cd7989e46a250f6b7", 0xc0, "73fde90688e7d30e6db60b28379a7d7b4f455fba8aa5e41fd4c4854348f9794be555b41f7455cbbe8491b35036cc3b1ac0c791fd2c07b82de71c27f087965d44c39aef80ac1419f0f93249d11ccbb7c74cbd5676fed061b08b57564c856887c734847b3149c8b265c5776234bab3ecd47b5d684cb31b97369be91a99f407959c353c72c32111a26d861f4beeb18a3cecc9a6fb3e2e31dd3038fc755e2c5ddbc362a22f09b041deba9ace7a5e7c0aa2a6fb7dd6f5ac6f4b8d0ef48bca0d30a74f"}, 0x9c, "f5002f9aa7ca44cc9df2da37bb8ee3116df2b95b687fd2b6c316d752f9db900b6b3b39c58bf3ccf23acbf7ccf8f07162205e735ea8e0397e900c088f771d33fd9354ddddb542e821671212a0ae796ce2ffce658937aa670e239bd462b9d25e7cbe3299169b81089e3819bf424b5a56de42fda65d97b4927325792f7b8d6e59c38fc6be80cd5c3f1790157f186ee0cf15768636d0057d49a08698b6e6"}, 0x1e6}) (async)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000001e40)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001e80)=0x28) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001f00), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xbc, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa799}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4609}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bfe4617}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c162521}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cdf45af}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x450c}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f917782}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe34f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bd0a8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd538}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1734f602}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x797d790d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16d}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x400c0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4054) (async)
recvmsg(r2, &(0x7f0000003280)={&(0x7f00000021c0)=@phonet, 0x80, &(0x7f0000003240)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1}, 0x102) (async)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003300), r6)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x3c, r9, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0xc080) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmsg$AUDIT_USER(r2, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)={0x98, 0x3ed, 0x1, 0x70bd2a, 0x25dfdbff, "36060de7f250373f32c4dad9249dd6c471de54ac49818ee79603e8c5e20d91cddc37391f4683e0644b5b33f23b30903588b0d2818be7ede6c534bd5ef8f2eb67f34371e61327e4823d8458aebc95eb352e6b9210e26ee0f42b2c5e89190159338e2ee23c1beb0e57bdca88ba1f33c8420998e24ef35a265a843c102fb0762410def56ff335e0ca03", ["", "", "", "", "", "", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x40000000}, 0x4081) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x10200010}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4)

1.280945418s ago: executing program 2 (id=1760):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000ff0300000000000056486f6daeee8e392b7c4a71505eeeddb19766603337000000000400"/56, @ANYRES32=r0, @ANYBLOB="0000000000080000850000001f0000009500000000ff0f000000000000b5c798a864029acc71bc37e6afcea8188d7d41617990d1c29300d3f19234fa66bb74d0efa972d6465f1dc033ba8dc205244ec792ebec"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket(0x11, 0x3, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x13, r1, 0x247ea000) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000140)="01154e00010000112233445588fbca010001160c", 0x22, 0x44011, &(0x7f0000000040)={0x11, 0x0, r3, 0x0, 0x0, 0x0}, 0x14) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xffffffff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}, {&(0x7f0000000080)="a8279f33d92be75d09da6fd759b3d1b4954a3714ebf55fc8f556d104", 0x1c}, {&(0x7f0000000280)="d0fa281c8b08bc09b27a86e7a9ab516ce8e36c79169fb4e734f42dbeded80facbffebb075c348727dedff268e72dac0e49223f952b438f85b25bf7d1a804ee82e5a07d73de2373b235bac5441cf2b5646c7fdb5abe0e9d7225ea9282242613fd7f439136", 0x64}, {&(0x7f0000000300)="28c51afa5026ec084a97e679a4107eddb97eb00ca797e2a8548b78b59c63773b8f02c41fb341cae17f59f5e2d065afb1f15a07d31a55bf406885b4dfe9b511a7bcc4e1efa5ee56f8aa701c95ecd41510c8ff1458552c6753fbffc20fa71469f9220e225380d16f8dcf58abc3b12697d64a76ba32b86e72fbd18c93dda5387afd2f81d0ecccb89c5a88e29e48c8bd7c39922f3d3b782bf20644d08325c67b74fc5e01af9cfce2bab44fb21b8326fdd4366048920a3242c5fa804e3ca1c78fcbc705130274e7abea8631e8fa6628fdce", 0xcf}, {&(0x7f0000000400)="f42a41189f08a29c78babc222eb44b0ba88b7bde2e2fd9c875a8f2aab2c15568c2c92bf4f234dcc6417623503e19d2642d0ec4f77a01009c6d554a91c26aa12a475d67acb8cae103e9060599d5b706d6f4580b078679ec73e36a4cabe5a8c55c93450c413d842c9ed2a57e613cc8a4bda85823e7af66cb02f8f7a53f659d168a202972e59319b0edbc22b8f9d1e5e6044842603aaecb3a074d11d1e046555059270940bf819d703b0bf8a3d8c5841d6045096c892c9dbdbcb1f6739788a1a92aa2424e8efe64233902ff2f5dff", 0xcd}], 0x5}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000001340)={&(0x7f0000000580)=@xdp={0x2c, 0xe, r3, 0x3a}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000006c0)="51842e9299937111434b9062445c3969966bc54122d856163cbbe505d42090f5a111413f5dac2b43a4768e2cdd5d5c4a8612451b5717900831c70407da22ec38d1c7ae5a61fb4a588a0a39503b7996d723390fbb6481727fe8a8b73cab5ec8e59dfb638cbeffa25ffd746612ee49a52f3eced2d436e201fb317400a1494dcc5434d36932229e7ea2a7d0121c9c1523f74bfb495463dec08fc1afb8aa8eec1d0829cfe19b9d6bfa08efdd6159ef1cf760bccf763a1d09955bf1e132eb5a851c898fcd9fc90b9b3d991c2d", 0xca}, {&(0x7f00000007c0)="57470e9295971c6941d9102255d086b48c2dc5bf3896916287e8a52b53cc2de422b8e93c67e37e4a36aab578d4f88737b3f3adcb44c7410ab9aaa7e90e9109e3092343680e40df890d2bfab2ec7633a592eb37cebaa4c841523556fbca240d14def97026176663991636a895b09642879ca41928ed6567d7243176565031", 0x7e}, {&(0x7f0000000840)="789fdad0839c94f84066681b63c9d109b679bac6131f55fe839b35af415fa1aef995565a324a3c8da7baed7ab6c78c7e1b67", 0x32}, {&(0x7f0000000880)="c4676add67b7a545ef4bbb2412b452939cedaf6183c9f597a40789b12a1e0dfaa1c9155dd9790930d55ad38276d03ed2241bceb32263593f2f1ff02bec6a1b5c66916678b4f2cf6254c3bd85132b807819f66f283b480bbbc4b3faa143ba78a42c4b3799e79e848655f704ea1ba370cffdf195bfbf308feadd1dbe659aec931aa067c07fc68bd0e9716283be94aec2aae51d680d345ec834c56a4236edd88b80dd7a", 0xa2}, {&(0x7f0000000940)="3f1777907bd73873e1a4fa73b71597a31ee06de58b4f4f254c564fcb2d0839ba46f5df0977b3ca78a65e007b39b98922a71b29ce7ec5fcc92309621d2f060984b1f87ea7260b734de5800836f8ac15bf571ab4167f31a39aa6989a90f767d04c317ca69425e8c9a17a", 0x69}, {&(0x7f00000009c0)="dcf7730e2fbbad201137f3f5da62acf5973708eb8e0246d31e9e61d5632ec95f233c9546823046db3323b9207134ca9123bd2eb197c96b2e78c41f6abb3cf092489261a929f370aba19011b9e695b39bb77412d00c5a2758d9d6f2ed3e03cd080b0bc75a97562f1441150d14eb840c6d69eb9dae9c91e9dafa141f226962cd37aafd1b70a8bebc44f77e0c4d614d8bb5815a022962d250b21cb251c8836fa7ea1e5445b4bf0f9e2b1ca89cf7ab77355dfba0bbc2f7ea0e520743388b8c30d59a01d8bdb28e3f7d17bd6b6195bd6e9f0b35e461733038240dd8a20865d764e9eb2a5b00bb70282c233a1243410889494a882e02118a7b27c9f4", 0xf9}, {&(0x7f0000000fc0)="b10cfb34a72e0f65fdc7bf2d30ca02f18fdf6f311e0e6ec95e60a15b5289d6cec55efe41edd89d7007f1cc17ddd4181c9b774e1e5da6d8caf5c38fe7892cb80f7aa47e071ecb781c2b4e91f7ad942ce1a95e0157fd25fa184f6fe2bb67c5a3c50b7a31a04b18f8dbc5a4fe2fe28b0010fa39a5971d68e54064c72b89e8c48bdd52bda8273b1d0e0107dcc108ca2601893ec6c85f9d22b20e3f0a1280017c9137ceda668125a9964a341e9603acbef50b41279cf321b73ce3394565953007c43f687b7527f3ba5feb52", 0xc9}, {&(0x7f00000010c0)="116dde241fa7d13c5a809e488377b0df9a7bff0f576753bd744218bf3c64fd8f500e8fe0f058416320bdc540", 0x2c}, {&(0x7f0000001100)="a7fb728524e603fc01601fd121f2f861b318439eee1f01d7293ce1e8565bdcd136e1fb43a8508f5ba9eba83016e4882f20214f53fad8287b2e47f75c4f698598f2235022fd9da4ad46ca736630e4aad90f192cc65ea71535756eee18aa98d1e3b7e07635a6ea0357dd4f70332ad4fc8ff4f35bbb7d28b86fc9d7530386de0b781ccd4360643ec398c8d3b3ae6771aba25faca1e4fd111d4fcce56acea6ca730b3acde990bdc62f5911f2ffccdc01afb6b411133578cc8175", 0xb8}], 0x9, &(0x7f0000001280)=[{0xb8, 0x138, 0x2, "ab3d1cafc474e8de139168fc7d3bbcc34030904886ecde7b3a75f0470740bca75da6c9615ce31dd418766b7b928d171a41a1d7135098435fb8657184507113d5509769309c1c60f7a11be2c80b004a68f751cf2b1ef59bd901f9937795d8f38ea142900016ef9b908d4c1b614e099507c229b52b5ec114a68948b3cd7796a9d30466922b86e6ee3574cd84f1ac0c74ce88baf5786ba349dca37e54167257ff1481e267c4865934"}], 0xb8}, 0x0)

1.154599117s ago: executing program 3 (id=1762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x6080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
connect$tipc(r6, &(0x7f0000000000), 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d00000002000000040000000300000000000000", @ANYRES32=r4, @ANYBLOB="fe00000000000000000000000000000000000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000001008000240000000091800018008000100667764000c00028008000140000000090900010073797a30"], 0xf0}}, 0x0)

1.111448715s ago: executing program 1 (id=1763):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', <r1=>0x0, 0x2b, 0xff, 0x6, 0xf5, 0x40, @private0, @mcast1, 0x8, 0x40, 0x40, 0xc3}})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, r1}, 0x14)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x7, 0x4)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000240)="d04a", &(0x7f0000000280)=@udp=r3, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x41, 0x0, "82a244d7cb9ab3e97d8bdc4a3faac7eec286f465d9dd072a226c5e57af7f22a15461ed3e16486cb05637de0a3969e41ff6c74bf1e6b2df9cacd177439258905758d5c1698f90d94dc0e4dc21632901ff"}, 0xd8)
pipe(&(0x7f00000004c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000500))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0x76, 0xaf, &(0x7f0000000540)="abcd08a21710dfcb1c2e76ee7b428146c34028cde2f71fc592251820dd56f464e2e5e620a1f61c6692e1a7fb7bf1404e7ae0cd988e4f472b330c4ca0f1c1d17a6c6e51b574db600993bd1a93b386dd2ab0a6424aaee17808d4a142f3245f8f6bb4d288c10a3730f245939dea72449cd2957b74a44e01", &(0x7f00000005c0)=""/175, 0x78, 0x0, 0x5f, 0x9f, &(0x7f0000000680)="421fb868628198612d167249f8997a0ae151d5f1f56854890766b4e944cfc7c702ac127aa177aa425e5bf0b16fb2f18efaef46909c245746b6ec25c77df17e69ffca0f65265321b51f2a99f129644edfc5e3b2f0f4c4e1a4474d8220c3236b", &(0x7f0000000700)="616168237fe973679db622076e9ef451c9cdba27ab338e7653a787bfdda7ca85ee04bdf43ed9c8e5a8967d5d706c4b50da08f1d03cdba86658464c10da53acfe5100e8591f6cfa125e5ec87b439b09fff4ba24443971c08910361a8cfe49b56105dc8307c24a9f82783bb219e4791d95a42d682088333711981b2ed36945569642352c10c31b61eb1f128f678feca50ef3ec9357e2a05363b9373ea36de84d", 0x7, 0x0, 0xffff}, 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r8, r8, 0xe, 0x0, @void}, 0x10)
pipe(&(0x7f0000000880)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket(0x5, 0x2, 0x3ff)
setsockopt$RXRPC_SECURITY_KEY(r12, 0x110, 0x1, &(0x7f00000008c0)='syz_tun\x00', 0x8)
close(r5)
sendmsg$nl_route(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@mpls_getroute={0x28, 0x1a, 0x4, 0x70bd26, 0x25dfdbfb, {0x1c, 0x14, 0x10, 0x7, 0xfd, 0x2, 0x0, 0x0, 0x3000}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x9, 0x7f, r1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x40008)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000b40)={r12, 0x9e, 0x9, 0x81})
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000b80)='ipvlan0\x00', 0x10)
close(r7)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000bc0)=0x7068, 0x4)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000c00))
getsockopt$IP6T_SO_GET_INFO(r12, 0x29, 0x40, &(0x7f0000000c40)={'raw\x00', 0x0, [0x9, 0x800, 0x2, 0x1]}, &(0x7f0000000cc0)=0x54)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000d00))

1.039810517s ago: executing program 0 (id=1764):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x1000}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xb7}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0x3d}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xfffffffffffffe10}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48)
r1 = socket(0x1, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000f15500010026bd7000ffdbdf250700fb31", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r1, 0x2}, 0x20)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000240)=""/139, 0x0, 0x1d}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x20000)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r5, 0x0)
sendmsg(r3, &(0x7f0000000b40)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x2, 0x1, 0x1, {0xa, 0x4e22, 0x6, @private1, 0x5}}}, 0x80, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.029702494s ago: executing program 4 (id=1765):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000028000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

1.007658682s ago: executing program 2 (id=1766):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r3, &(0x7f0000000080)="582c25c058028e57579df7966697d9ced8f6", 0xffffff81, 0x400c0c0, &(0x7f0000000240)={0x2, 0x0, @remote, 0x4}, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x9}, 0x2}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x9}, 0x2})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000380)={0x8, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) (async)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000380)={0x8, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

855.313819ms ago: executing program 4 (id=1767):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x2000c810)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x325)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x2000c810) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8a41, 0x0) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async)
ioctl$TUNSETLINK(r7, 0x400454cd, 0x325) (async)

835.979883ms ago: executing program 0 (id=1768):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

832.394774ms ago: executing program 1 (id=1769):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rm\x00'}, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffc18e250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$pppoe(0x18, 0x1, 0x0)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10040)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x405c805}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

768.024478ms ago: executing program 2 (id=1770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x5, 0x4}, 0x2c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffffffffffee8, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000300)=0x8, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x400ce0, 0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000)

664.8602ms ago: executing program 0 (id=1771):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c"], 0xa4}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4], 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

551.057268ms ago: executing program 1 (id=1772):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000064c0)=0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

374.541573ms ago: executing program 0 (id=1773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r2=>r0, 0x1, 0x800, 0x9})
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0x20000, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4)
r5 = socket(0x2, 0x3, 0x3)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e2}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
r8 = socket$rds(0x15, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x19205100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r9, @ANYBLOB="0004d9f778518253009e28bd7000fedbdf25430000000c00990007000000710000000c00580067000000000000000c0058001e000000000000000c00580007000000000000000c0058000f000000000000000c00580019000000000000000c00580058000000000000000c00580063000000000000000c00580000000000000000000c0058006400000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x10008010}, 0x4000000)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x7, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000b53ae3448c3abcfe4000020093"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0)

348.160816ms ago: executing program 4 (id=1774):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000060000000000800000", @ANYRESHEX, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x4048040)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a320000000038000400200001000a004e2300000009fe8000000000000000000000000000bb0100000014000200c78bd60218a0ac7e"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x101, 0x1ff}, 0x90)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r4, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)

299.559977ms ago: executing program 1 (id=1775):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x9, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x3, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0xc2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x0, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x9, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "3540caaff814befd"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c014)

240.020024ms ago: executing program 2 (id=1776):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="00000090ffffff0018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

232.300304ms ago: executing program 0 (id=1777):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b700002e000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

190.391586ms ago: executing program 2 (id=1778):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r0], 0x50}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

103.462538ms ago: executing program 4 (id=1779):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

15.950465ms ago: executing program 2 (id=1780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)

15.422979ms ago: executing program 1 (id=1781):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x4d)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000780)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
shutdown(r3, 0x0)
recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r4, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000800)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840)=<r6=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
r8 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000a00)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0c00be000400000000000000080024000000002400"], 0x154}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="e7670000"], 0xd0, 0xc0}, 0x8011)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r11=>0x0})
r12 = socket$unix(0x1, 0x5, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r15=>0x0})
r16 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r16, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r16, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r14, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r11}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_BROADCAST={0xfffffffffffffe74, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x0)
r17 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r17, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000a01040000000000000000010000030900010073797a300000000078000000140a040200000000000000000000000808000341000000090900010073797a31000000000900010073797a3000000000080006400e0000feffffff040c0006400000000000000003080003400000000a08000340000000070c00064000000000000000015c000000060a050000000000000000000100000908000b4000000000340004803000018008000100636d700024000280080001400000000d080002400000000010000380090001007d14a0b0fe0000000900010073797a3000000000140000001100010000000000000000000000000a00"/268], 0x11c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

0s ago: executing program 0 (id=1782):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000200))
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
getpeername(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000002c0)=0x80)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x7830c3240c0dc35e, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x90)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x90, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0xfffffffffffffe02, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x90}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts.
[  240.735821][ T5636] cgroup: Unknown subsys name 'net'
[  240.844869][ T5636] cgroup: Unknown subsys name 'cpuset'
[  240.854531][ T5636] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  242.241290][ T5636] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  244.334762][ T5652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.354159][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.365175][ T5657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.373888][ T5657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.384163][ T5657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.384988][ T5657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.386293][ T5657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.411771][ T5663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.413218][ T5663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.414574][ T5663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.419173][ T5668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.419506][ T5668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.422344][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.422455][ T4935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.427679][ T5663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.428614][ T5663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.430957][ T5663] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.437130][ T5668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.447760][ T5663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.450904][ T5663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.451901][ T5663] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.459164][ T5663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.463569][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.464610][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.465226][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.158825][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.159003][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.159147][ T5653] bridge_slave_0: entered allmulticast mode
[  246.160950][ T5653] bridge_slave_0: entered promiscuous mode
[  246.205702][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.211734][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.211931][ T5653] bridge_slave_1: entered allmulticast mode
[  246.213646][ T5653] bridge_slave_1: entered promiscuous mode
[  246.274415][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.274781][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.275637][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.276006][ T5654] bridge_slave_0: entered allmulticast mode
[  246.279008][ T5654] bridge_slave_0: entered promiscuous mode
[  246.325623][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.325887][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.325983][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.326093][ T5654] bridge_slave_1: entered allmulticast mode
[  246.327940][ T5654] bridge_slave_1: entered promiscuous mode
[  246.348726][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.349091][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.349236][ T5661] bridge_slave_0: entered allmulticast mode
[  246.351103][ T5661] bridge_slave_0: entered promiscuous mode
[  246.355924][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.356078][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.356204][ T5661] bridge_slave_1: entered allmulticast mode
[  246.358208][ T5661] bridge_slave_1: entered promiscuous mode
[  246.450325][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.486257][ T5653] team0: Port device team_slave_0 added
[  246.489705][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.502669][ T5668] Bluetooth: hci2: command tx timeout
[  246.502674][ T5665] Bluetooth: hci4: command tx timeout
[  246.502835][ T5665] Bluetooth: hci1: command tx timeout
[  246.502844][ T5668] Bluetooth: hci0: command tx timeout
[  246.508045][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.508497][ T5657] Bluetooth: hci3: command tx timeout
[  246.524965][ T5653] team0: Port device team_slave_1 added
[  246.553526][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.553730][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.553885][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.554001][ T5660] bridge_slave_0: entered allmulticast mode
[  246.555975][ T5660] bridge_slave_0: entered promiscuous mode
[  246.588830][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.588929][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.589056][ T5651] bridge_slave_0: entered allmulticast mode
[  246.590879][ T5651] bridge_slave_0: entered promiscuous mode
[  246.609429][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.609528][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.609887][ T5660] bridge_slave_1: entered allmulticast mode
[  246.613141][ T5660] bridge_slave_1: entered promiscuous mode
[  246.631819][ T5654] team0: Port device team_slave_0 added
[  246.634889][ T5654] team0: Port device team_slave_1 added
[  246.635068][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.635159][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.635320][ T5651] bridge_slave_1: entered allmulticast mode
[  246.637276][ T5651] bridge_slave_1: entered promiscuous mode
[  246.687012][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.687064][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.687100][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.723426][ T5661] team0: Port device team_slave_0 added
[  246.742085][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.742123][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.742148][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.754967][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.788140][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.791119][ T5661] team0: Port device team_slave_1 added
[  246.831357][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.841183][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.841217][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.841238][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.843899][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.843913][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.843935][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.846880][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.861878][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.861895][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.861916][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.891881][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.891897][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.891919][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.912762][ T5651] team0: Port device team_slave_0 added
[  246.965573][ T5653] hsr_slave_0: entered promiscuous mode
[  246.968226][ T5653] hsr_slave_1: entered promiscuous mode
[  247.001786][ T5651] team0: Port device team_slave_1 added
[  247.064059][ T5654] hsr_slave_0: entered promiscuous mode
[  247.070755][ T5654] hsr_slave_1: entered promiscuous mode
[  247.072171][ T5654] debugfs: 'hsr0' already exists in 'hsr'
[  247.072271][ T5654] Cannot create hsr debugfs directory
[  247.092676][ T5660] team0: Port device team_slave_0 added
[  247.114128][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.114171][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.114204][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.134468][ T5660] team0: Port device team_slave_1 added
[  247.156555][ T5661] hsr_slave_0: entered promiscuous mode
[  247.157527][ T5661] hsr_slave_1: entered promiscuous mode
[  247.158369][ T5661] debugfs: 'hsr0' already exists in 'hsr'
[  247.158385][ T5661] Cannot create hsr debugfs directory
[  247.202922][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.202949][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.203397][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.277325][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.277367][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.277724][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.308804][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.308821][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  247.308852][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.399072][ T5651] hsr_slave_0: entered promiscuous mode
[  247.405804][ T5651] hsr_slave_1: entered promiscuous mode
[  247.412174][ T5651] debugfs: 'hsr0' already exists in 'hsr'
[  247.412642][ T5651] Cannot create hsr debugfs directory
[  247.536302][ T5660] hsr_slave_0: entered promiscuous mode
[  247.537277][ T5660] hsr_slave_1: entered promiscuous mode
[  247.537952][ T5660] debugfs: 'hsr0' already exists in 'hsr'
[  247.537969][ T5660] Cannot create hsr debugfs directory
[  247.836445][ T5653] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  247.848436][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.850693][ T5653] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  247.860066][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  247.874223][ T5653] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  247.883816][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  247.884767][ T5653] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  247.897369][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  247.986454][ T5654] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  247.996166][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.997084][ T5654] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.007984][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  248.020619][ T5654] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.033104][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  248.040677][ T5654] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  248.049867][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  248.126218][ T5661] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  248.135840][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  248.136680][ T5661] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  248.147092][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  248.165495][ T5661] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  248.175145][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  248.195906][ T5661] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  248.205153][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  248.304384][ T5651] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  248.315250][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  248.326167][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.336609][ T5651] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  248.346427][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  248.368375][ T5651] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  248.377774][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  248.378655][ T5651] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  248.389303][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  248.429180][ T5653] 8021q: adding VLAN 0 to HW filter on device team0
[  248.464807][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.464973][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.507243][ T5660] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  248.516299][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  248.520193][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.520309][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.539578][ T5660] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  248.549757][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  248.557443][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.572388][ T5660] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  248.582645][ T5668] Bluetooth: hci3: command tx timeout
[  248.582691][ T5668] Bluetooth: hci1: command tx timeout
[  248.582724][ T5668] Bluetooth: hci2: command tx timeout
[  248.582748][ T5668] Bluetooth: hci4: command tx timeout
[  248.582933][ T5657] Bluetooth: hci0: command tx timeout
[  248.583472][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  248.585151][ T5660] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  248.595267][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  248.676869][ T5654] 8021q: adding VLAN 0 to HW filter on device team0
[  248.696877][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.697087][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.703633][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.704147][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.756906][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.858968][ T5661] 8021q: adding VLAN 0 to HW filter on device team0
[  248.886452][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.930686][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.930788][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.943438][ T5654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.963106][ T5651] 8021q: adding VLAN 0 to HW filter on device team0
[  248.994509][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.994617][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.996649][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.996796][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.027579][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.027692][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.170916][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.244691][ T5660] 8021q: adding VLAN 0 to HW filter on device team0
[  249.307757][ T4010] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.307873][ T4010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.367681][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.367795][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.637303][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.900252][ T5653] veth0_vlan: entered promiscuous mode
[  249.952719][ T5653] veth1_vlan: entered promiscuous mode
[  249.967400][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.166016][ T5653] veth0_macvtap: entered promiscuous mode
[  250.167746][ T5654] veth0_vlan: entered promiscuous mode
[  250.191300][ T5653] veth1_macvtap: entered promiscuous mode
[  250.224207][ T5654] veth1_vlan: entered promiscuous mode
[  250.284384][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.329989][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.407580][ T1006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.407825][ T1006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.407875][ T1006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.418795][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.420330][ T5654] veth0_macvtap: entered promiscuous mode
[  250.433269][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.438313][ T5654] veth1_macvtap: entered promiscuous mode
[  250.541872][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.599252][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.621552][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.655830][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.662479][   T52] Bluetooth: hci4: command tx timeout
[  250.662511][   T52] Bluetooth: hci2: command tx timeout
[  250.662531][   T52] Bluetooth: hci1: command tx timeout
[  250.662551][   T52] Bluetooth: hci3: command tx timeout
[  250.662724][ T5657] Bluetooth: hci0: command tx timeout
[  250.705078][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.705130][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.777135][ T5661] veth0_vlan: entered promiscuous mode
[  250.850059][ T5661] veth1_vlan: entered promiscuous mode
[  250.850210][ T4010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.850226][ T4010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.946973][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.947007][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.976473][ T5653] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  251.079078][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.088192][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.092148][   T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.092470][   T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.120145][ T5660] veth0_vlan: entered promiscuous mode
[  251.132584][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.134355][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.182558][ T5661] veth0_macvtap: entered promiscuous mode
[  251.229913][ T5661] veth1_macvtap: entered promiscuous mode
[  251.250073][ T5660] veth1_vlan: entered promiscuous mode
[  251.294347][ T5651] veth0_vlan: entered promiscuous mode
[  251.399273][ T5651] veth1_vlan: entered promiscuous mode
[  251.417803][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.455877][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.488381][ T5848] syz_tun: entered allmulticast mode
[  251.501661][ T4010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.501726][ T4010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.501753][ T4010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.501782][ T4010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.505751][ T5848] lo: entered allmulticast mode
[  251.575252][ T5660] veth0_macvtap: entered promiscuous mode
[  251.589392][ T5848] mroute: pending queue full, dropping entries
[  251.628213][ T5660] veth1_macvtap: entered promiscuous mode
[  251.634316][ T5847] syz_tun: left allmulticast mode
[  251.660748][ T5651] veth0_macvtap: entered promiscuous mode
[  251.685572][ T5651] veth1_macvtap: entered promiscuous mode
[  251.762471][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.795393][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.815566][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.827289][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.862059][ T1006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.862658][ T1006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.862692][ T1006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.862720][ T1006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.951892][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.051891][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.063784][ T4010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.064089][ T4010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.075905][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  252.075929][ T5841] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  252.149689][ T5862] Illegal XDP return value 4294967289 on prog  (id 4) dev N/A, expect packet loss!
[  252.159478][ T5841] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  252.159498][ T5841] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  252.223221][ T5841] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  252.223271][ T5841] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  252.278970][ T5841] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  252.279064][ T5841] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  252.317687][ T5841] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  252.317732][ T5841] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  252.567384][ T4010] IPVS: starting estimator thread 0...
[  252.670345][ T5880] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET)
[  252.677759][ T5882] IPVS: using max 31 ests per chain, 74400 per kthread
[  252.771692][ T5880] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  252.787478][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.787514][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.887780][ T4010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.887820][ T4010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.960212][ T4010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.960258][ T4010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.021006][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.021054][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.117300][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.117340][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.124597][ T5898] lo: entered promiscuous mode
[  253.133098][ T5898] netlink: 'syz.2.12': attribute type 2 has an invalid length.
[  253.133119][ T5898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.267195][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.267246][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.610019][ T5916] tipc: Failed to obtain node identity
[  253.610070][ T5916] tipc: Enabling of bearer <ib:macvtap0> rejected, failed to enable media
[  253.796628][ T5922] Zero length message leads to an empty skb
[  254.381668][ T5958] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[  254.715258][ T5980] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.23'.
[  254.726833][ T5980] veth0_to_bond: default FDB implementation only supports local addresses
[  255.086054][ T5986] syzkaller0: entered promiscuous mode
[  255.086095][ T5986] syzkaller0: entered allmulticast mode
[  255.472226][ T6017] netlink: 9 bytes leftover after parsing attributes in process `syz.1.32'.
[  255.489375][ T6017] netlink: 9 bytes leftover after parsing attributes in process `syz.1.32'.
[  255.870636][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.873363][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  257.075505][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'.
[  257.121953][ T6049] netlink: 'syz.4.37': attribute type 1 has an invalid length.
[  257.181829][ T6059] netlink: 'syz.0.41': attribute type 3 has an invalid length.
[  257.181873][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'.
[  257.190843][ T6060] openvswitch: netlink: Flow key attr not present in new flow.
[  257.197905][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[  257.225396][ T6049] block nbd296: server does not support multiple connections per device.
[  257.308064][ T5662] block nbd296: shutting down sockets
[  257.732732][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[  259.669828][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.47'.
[  259.994332][ T6127] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  260.028395][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'.
[  260.153213][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'.
[  260.187866][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.530282][ T6071] infiniband syz0: set active
[  260.530325][ T6071] infiniband syz0: added team_slave_1
[  260.599612][ T6071] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  260.638891][ T6071] infiniband syz0: Couldn't open port 1
[  260.646031][ T6071] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  260.646069][ T6071] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  260.646104][ T6071] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  260.702426][ T6157] netlink: 'syz.2.61': attribute type 12 has an invalid length.
[  260.702467][ T6157] netlink: 'syz.2.61': attribute type 29 has an invalid length.
[  260.702676][ T6157] netlink: 148 bytes leftover after parsing attributes in process `syz.2.61'.
[  260.702701][ T6157] netlink: 'syz.2.61': attribute type 1 has an invalid length.
[  260.702711][ T6157] netlink: 'syz.2.61': attribute type 2 has an invalid length.
[  260.702722][ T6157] netlink: 11 bytes leftover after parsing attributes in process `syz.2.61'.
[  260.954749][ T6071] RDS/IB: syz0: added
[  260.955245][ T6071] smc: adding ib device syz0 with port count 1
[  260.962195][ T6071] smc:    ib device syz0 port 1 has no pnetid
[  261.507493][ T6200] xt_CT: No such helper "netbios-ns"
[  262.171238][ T6236] block nbd0: not configured, cannot reconfigure
[  262.238647][ T6239] block nbd0: not configured, cannot reconfigure
[  262.365376][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'.
[  262.654067][ T6256] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[  262.654111][ T6256] netlink: 232 bytes leftover after parsing attributes in process `syz.1.82'.
[  262.654124][ T6256] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[  262.694012][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.838587][ T6266] warning: `syz.0.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  262.851749][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.868615][ T6265] tipc: Started in network mode
[  262.868657][ T6265] tipc: Node identity c6a4c7274f42, cluster identity 4711
[  262.868954][ T6265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.884495][ T6265] syzkaller0: entered promiscuous mode
[  262.884516][ T6265] syzkaller0: entered allmulticast mode
[  262.921158][ T6265] tipc: Resetting bearer <eth:syzkaller0>
[  262.954492][ T6263] tipc: Resetting bearer <eth:syzkaller0>
[  262.983385][ T6263] tipc: Disabling bearer <eth:syzkaller0>
[  263.599184][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.627501][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.652943][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.702065][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.766947][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.806800][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.831336][ T6303] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[  263.841038][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.865993][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.889994][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  263.914352][ T6298] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  264.029540][ T6319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.100'.
[  264.226868][ T6322] netlink: 'syz.2.101': attribute type 4 has an invalid length.
[  264.269145][ T6326] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  264.279807][ T6326] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  264.475530][ T6328] Cannot find add_set index 0 as target
[  264.489998][ T6335] macvlan0: entered promiscuous mode
[  264.589972][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.590061][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.599921][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.604753][ T6322] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  264.604782][ T6322] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  264.604814][ T6322] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  264.710262][ T6322] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  264.803460][ T6322] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  264.952185][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.962121][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.970676][ T6322] hsr0 speed is unknown, defaulting to 1000
[  264.991323][ T6322] hsr0 speed is unknown, defaulting to 1000
[  265.015772][ T6322] hsr0 speed is unknown, defaulting to 1000
[  265.112811][ T6363] x_tables: duplicate underflow at hook 1
[  265.128693][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'.
[  265.128776][ T6363] netlink: 11 bytes leftover after parsing attributes in process `syz.1.113'.
[  265.148205][ T6361] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[  265.158860][ T6361] syz_tun: entered promiscuous mode
[  265.189279][ T6361] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  265.419841][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'.
[  265.455385][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'.
[  265.620337][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[  265.647319][ T6377] netlink: 'syz.4.119': attribute type 2 has an invalid length.
[  265.719611][ T6388] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[  265.743184][ T6388] team0: Device vxcan1 is of different type
[  266.062498][ T6404] Bluetooth: MGMT ver 1.23
[  266.416174][ T6417] sctp: [Deprecated]: syz.0.134 (pid 6417) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.416174][ T6417] Use struct sctp_sack_info instead
[  266.759014][ T6427] Bluetooth: MGMT ver 1.23
[  266.847615][ T6435] rdma_rxe: rxe_newlink: failed to add lo
[  266.859843][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[  266.925879][   T30] audit: type=1800 audit(1788554540.800:2): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="memory.events" dev="tmpfs" ino=136 res=0 errno=0
[  266.929454][   T30] audit: type=1804 audit(1788554540.800:3): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.142" name="/newroot/23/memory.events" dev="tmpfs" ino=136 res=1 errno=0
[  267.166014][ T6451] netlink: 'syz.3.147': attribute type 1 has an invalid length.
[  267.213097][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1
[  267.218986][ T6451] netlink: zone id is out of range
[  267.220047][ T6451] netlink: zone id is out of range
[  267.220429][ T6451] netlink: zone id is out of range
[  267.220437][ T6451] netlink: zone id is out of range
[  267.220709][ T6451] netlink: zone id is out of range
[  267.240021][ T6451] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  267.384271][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'.
[  267.454846][ T6458] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  267.472456][ T6466] netlink: 'syz.3.151': attribute type 30 has an invalid length.
[  267.750627][ T6481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.044332][ T6503] sctp: [Deprecated]: syz.3.159 (pid 6503) Use of int in max_burst socket option deprecated.
[  268.044332][ T6503] Use struct sctp_assoc_value instead
[  268.070159][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[  268.139970][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[  268.214294][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[  268.529381][ T6530] sctp: [Deprecated]: syz.1.166 (pid 6530) Use of int in max_burst socket option deprecated.
[  268.529381][ T6530] Use struct sctp_assoc_value instead
[  268.615374][ T6534] sctp: [Deprecated]: syz.1.166 (pid 6534) Use of int in max_burst socket option deprecated.
[  268.615374][ T6534] Use struct sctp_assoc_value instead
[  269.021394][ T6556] syzkaller0: entered promiscuous mode
[  269.021768][ T6556] syzkaller0: entered allmulticast mode
[  269.084199][ T6556] tipc: Started in network mode
[  269.084260][ T6556] tipc: Node identity eae475901d9d, cluster identity 4711
[  269.084516][ T6556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.107911][ T6553] tipc: Resetting bearer <eth:syzkaller0>
[  269.169967][ T6553] tipc: Disabling bearer <eth:syzkaller0>
[  269.214536][ T6563] nft_compat: unsupported protocol 1
[  269.510309][ T6577] x_tables: duplicate underflow at hook 3
[  269.816763][ T6597] netlink: 'syz.1.183': attribute type 2 has an invalid length.
[  270.107913][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.210686][ T6616] __nla_validate_parse: 80 callbacks suppressed
[  270.210737][ T6616] netlink: 524 bytes leftover after parsing attributes in process `syz.0.192'.
[  270.376480][ T6622] netlink: 'syz.1.193': attribute type 21 has an invalid length.
[  270.430518][ T6627] netlink: 'syz.1.193': attribute type 21 has an invalid length.
[  270.727896][ T6649] netlink: ct family unspecified
[  270.752692][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'.
[  270.769602][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'.
[  270.923423][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[  270.998617][ T6660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.067646][ T6664] team0: No ports can be present during mode change
[  271.302989][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'.
[  271.477202][ T6682] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[  271.589874][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[  271.589924][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[  271.673284][ T6700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.212'.
[  272.067563][ T6714] ipvlan1: entered promiscuous mode
[  272.074372][ T6714] ipvlan1: entered allmulticast mode
[  272.080058][ T6714] veth0_vlan: entered allmulticast mode
[  272.434787][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'.
[  272.928751][ T6768] netlink: 156 bytes leftover after parsing attributes in process `syz.4.229'.
[  273.065846][ T6776] netlink: 'syz.3.232': attribute type 2 has an invalid length.
[  273.085860][ T6776] sctp: [Deprecated]: syz.3.232 (pid 6776) Use of int in max_burst socket option deprecated.
[  273.085860][ T6776] Use struct sctp_assoc_value instead
[  273.139510][ T6777] netlink: 'syz.4.230': attribute type 1 has an invalid length.
[  273.195081][ T6777] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.214305][ T6773] bond1: (slave geneve2): making interface the new active one
[  273.225590][ T6773] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  273.437635][ T6787] bridge1: entered promiscuous mode
[  273.437713][ T6787] bridge1: entered allmulticast mode
[  273.554282][ T6791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.590066][ T6794] netlink: 'syz.2.238': attribute type 8 has an invalid length.
[  273.598373][ T6794] sch_fq: defrate 0 ignored.
[  274.199729][ T6828] netlink: 'syz.2.250': attribute type 13 has an invalid length.
[  274.199775][ T6828] netlink: 'syz.2.250': attribute type 58 has an invalid length.
[  274.625457][ T6850] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  274.675853][ T6848] Bluetooth: ISO socket layer initialized
[  275.317333][ T6876] __nla_validate_parse: 6 callbacks suppressed
[  275.324942][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  275.337758][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  275.348468][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  275.358577][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  275.367954][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  276.173063][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.279'.
[  276.191962][ T6918] netlink: zone id is out of range
[  276.192012][ T6918] netlink: zone id is out of range
[  276.192046][ T6918] netlink: zone id is out of range
[  276.192056][ T6918] netlink: zone id is out of range
[  276.192080][ T6918] netlink: zone id is out of range
[  276.192119][ T6918] netlink: zone id is out of range
[  276.244654][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888034f07000: rx timeout, send abort
[  276.660492][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[  276.718731][   T50] IPVS: starting estimator thread 0...
[  276.718777][ T6954] IPVS: ip_vs_edit_dest(): server weight less than zero
[  276.745570][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888034f07000: abort rx timeout. Force session deactivation
[  276.796287][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  276.827321][ T6955] IPVS: using max 32 ests per chain, 76800 per kthread
[  276.829128][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'.
[  276.835546][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.837151][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.878919][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'.
[  277.978508][ T6980] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[  278.358405][ T7005] veth1_macvtap: left promiscuous mode
[  278.369302][ T7005] macsec0: entered promiscuous mode
[  278.476477][ T7012] netlink: 'syz.0.305': attribute type 5 has an invalid length.
[  278.634789][ T7014] openvswitch: netlink: Missing key (keys=40, expected=100)
[  278.744456][ T7020] ip_tables: iptables: counters copy to user failed while replacing table
[  278.782927][ T7022] vlan2: entered promiscuous mode
[  278.782973][ T7022] bridge0: entered promiscuous mode
[  278.861646][ T7025] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  278.862572][ T7026] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  279.789425][ T7075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.179391][ T7093] syzkaller1: entered promiscuous mode
[  280.191204][ T7093] syzkaller1: entered allmulticast mode
[  280.212112][ T7093] netlink: Conntrack attr has 1 unknown bytes
[  280.331306][ T7105] syzkaller0: entered promiscuous mode
[  280.331357][ T7105] syzkaller0: entered allmulticast mode
[  280.391756][ T7111] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[  280.463493][ T7111] bond1: Unable to set up delay as MII monitoring is disabled
[  280.475555][ T7111] bond1 (unregistering): Released all slaves
[  280.545642][ T7119] __nla_validate_parse: 13 callbacks suppressed
[  280.546417][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'.
[  280.546727][ T7122] netlink: 'syz.3.333': attribute type 4 has an invalid length.
[  280.655174][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'.
[  280.957893][ T7142] netlink: 'syz.2.339': attribute type 28 has an invalid length.
[  280.965828][ T7142] netlink: 'syz.2.339': attribute type 3 has an invalid length.
[  280.971515][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.339'.
[  283.448088][ T7117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.621071][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'.
[  283.656264][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'.
[  283.750541][ T7158] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[  283.869902][ T7159] bridge_slave_1: left allmulticast mode
[  283.869949][ T7159] bridge_slave_1: left promiscuous mode
[  283.871179][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.899441][ T7159] bridge_slave_0: left allmulticast mode
[  283.899486][ T7159] bridge_slave_0: left promiscuous mode
[  283.901453][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.117412][ T7166] tun0: tun_chr_ioctl cmd 1074025675
[  284.117457][ T7166] tun0: persist enabled
[  284.190879][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'.
[  284.298496][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.353'.
[  284.522768][ T7198] net_ratelimit: 1 callbacks suppressed
[  284.530290][ T7198] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  284.893189][ T7213] vlan2: entered allmulticast mode
[  284.893229][ T7213] bond0: entered allmulticast mode
[  284.893258][ T7213] bond_slave_0: entered allmulticast mode
[  284.893278][ T7213] bond_slave_1: entered allmulticast mode
[  284.970549][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'.
[  285.375846][ T7243] openvswitch: netlink: Flow actions attr not present in new flow.
[  285.476927][ T7244] netlink: 256 bytes leftover after parsing attributes in process `syz.2.373'.
[  285.538782][ T7265] netlink: 256 bytes leftover after parsing attributes in process `syz.2.373'.
[  285.629765][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'.
[  285.652694][ T7283] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  285.853451][ T7262] syzkaller0: entered promiscuous mode
[  285.861342][ T7262] syzkaller0: entered allmulticast mode
[  285.937939][ T7292] x_tables: duplicate underflow at hook 2
[  285.953557][ T7293] x_tables: duplicate underflow at hook 2
[  286.276471][   T30] audit: type=1800 audit(1788554560.150:4): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.382" name="memory.events" dev="tmpfs" ino=312 res=0 errno=0
[  286.305362][   T30] audit: type=1804 audit(1788554560.180:5): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.382" name="/newroot/58/memory.events" dev="tmpfs" ino=312 res=1 errno=0
[  286.581331][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'.
[  287.919292][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[  287.921199][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.922648][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.178255][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[  288.350422][  T751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.350652][  T751] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.373300][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.510125][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'.
[  288.510179][ T7354] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  288.593653][ T7360] netlink: 72 bytes leftover after parsing attributes in process `syz.4.399'.
[  288.609978][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'.
[  288.621664][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.641752][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  288.643586][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'.
[  288.686403][ T7364] xt_hashlimit: size too large, truncated to 1048576
[  288.712973][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'.
[  288.886293][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.948573][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'.
[  290.227716][ T7463] raw_sendmsg: syz.2.426 forgot to set AF_INET. Fix it!
[  290.339677][ T7469] IPv6: addrconf: prefix option has invalid lifetime
[  290.572782][ T7484] netlink: 'syz.4.432': attribute type 7 has an invalid length.
[  290.624638][ T7484] netlink: 'syz.4.432': attribute type 7 has an invalid length.
[  290.987061][ T7506] netlink: 'syz.1.437': attribute type 20 has an invalid length.
[  290.995019][ T7506] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.119597][ T7510] __nla_validate_parse: 1 callbacks suppressed
[  291.119644][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'.
[  291.127432][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[  291.138564][ T7512] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[  291.138585][ T7512] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.440'.
[  291.138610][ T7512] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.440'.
[  291.330731][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[  291.330791][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'.
[  291.691273][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[  291.745451][ T7547] hsr_slave_1 (unregistering): left promiscuous mode
[  291.952034][ T7558] –: renamed from vxcan1 (while UP)
[  292.261603][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.346711][ T7582] gre1: entered promiscuous mode
[  292.388707][ T7584] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  292.400692][ T7584] netlink: 'syz.1.465': attribute type 29 has an invalid length.
[  292.576984][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'.
[  292.611230][ T7598] pim6reg: entered allmulticast mode
[  292.623061][ T7588] veth1_to_hsr: mtu less than device minimum
[  292.978762][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.471'.
[  293.577519][ T7653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.486'.
[  293.646298][ T7659] tipc: Failed to obtain node identity
[  293.646363][ T7659] tipc: Enabling of bearer <ib:macvtap0> rejected, failed to enable media
[  293.648679][ T7659] netlink: 'syz.4.489': attribute type 8 has an invalid length.
[  294.180262][ T7698] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.252570][ T7702] netlink: 'syz.0.501': attribute type 3 has an invalid length.
[  294.267002][ T7702] openvswitch: netlink: Missing key (keys=40, expected=100)
[  294.299804][ T7702] netlink: 'syz.0.501': attribute type 14 has an invalid length.
[  294.353874][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.353942][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.353970][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  294.353996][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  294.400755][ T7710] block nbd0: not configured, cannot reconfigure
[  294.843210][ T7710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.205182][ T7746] netlink: 'syz.4.515': attribute type 1 has an invalid length.
[  295.216958][ T7746] bridge2: entered promiscuous mode
[  295.449240][ T7758] openvswitch: netlink: IP tunnel dst address not specified
[  295.856674][ T7774] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  295.857046][ T7774] gretap1: entered promiscuous mode
[  295.857063][ T7774] gretap1: entered allmulticast mode
[  295.889956][ T7779] IPv6: sit2: Disabled Multicast RS
[  295.896972][ T7779] sit2: entered allmulticast mode
[  295.990540][ T7792] syzkaller0: entered promiscuous mode
[  295.990586][ T7792] syzkaller0: entered allmulticast mode
[  296.004659][ T7793] tipc: Started in network mode
[  296.004687][ T7793] tipc: Node identity ea587375d5, cluster identity 4711
[  296.004990][ T7793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.007888][ T7794] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  296.074630][ T7791] tipc: Resetting bearer <eth:syzkaller0>
[  296.136612][ T7791] tipc: Disabling bearer <eth:syzkaller0>
[  296.185584][ T7800] __nla_validate_parse: 11 callbacks suppressed
[  296.185639][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'.
[  296.185654][ T7800] validate_nla: 1 callbacks suppressed
[  296.185663][ T7800] netlink: 'syz.2.531': attribute type 3 has an invalid length.
[  296.185675][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'.
[  296.185885][ T7800] netlink: 'syz.2.531': attribute type 3 has an invalid length.
[  296.257670][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.534'.
[  296.586655][ T7814] xt_CT: No such helper "netbios-ns"
[  296.766532][ T7814] xt_CT: No such helper "netbios-ns"
[  296.783134][   T30] audit: type=1804 audit(1788554570.660:6): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.543" name="/newroot/117/cgroup.controllers" dev="tmpfs" ino=608 res=1 errno=0
[  296.790441][   T30] audit: type=1800 audit(1788554570.660:7): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="cgroup.controllers" dev="tmpfs" ino=608 res=0 errno=0
[  296.903047][ T7814] xt_CT: No such helper "netbios-ns"
[  296.980175][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.991459][ T7814] xt_CT: No such helper "netbios-ns"
[  297.010669][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'.
[  297.109564][ T7814] xt_CT: No such helper "netbios-ns"
[  297.199088][ T7814] xt_CT: No such helper "netbios-ns"
[  297.327458][ T7851] sctp: [Deprecated]: syz.4.549 (pid 7851) Use of int in max_burst socket option deprecated.
[  297.327458][ T7851] Use struct sctp_assoc_value instead
[  297.438535][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'.
[  297.447741][ T7866] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  297.460064][ T7866] netlink: 152 bytes leftover after parsing attributes in process `syz.3.555'.
[  297.852711][ T7896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.871016][ T7897] netlink: 92 bytes leftover after parsing attributes in process `syz.4.563'.
[  297.904905][ T7896] ipt_ECN: cannot use operation on non-tcp rule
[  297.939551][ T7899] netlink: 92 bytes leftover after parsing attributes in process `syz.4.563'.
[  298.547379][ T7945] netlink: 'syz.1.575': attribute type 21 has an invalid length.
[  298.558723][ T7945] IPv6: NLM_F_CREATE should be specified when creating new route
[  298.675511][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[  298.733043][ T7951] hsr_slave_1 (unregistering): left promiscuous mode
[  299.039361][ T7971] netlink: 144 bytes leftover after parsing attributes in process `syz.2.584'.
[  299.052518][ T7955] syzkaller0: entered promiscuous mode
[  299.052553][ T7955] syzkaller0: entered allmulticast mode
[  299.072597][ T7972] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  299.083235][ T7972] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  299.902880][ T8008] netlink: 'syz.0.599': attribute type 5 has an invalid length.
[  299.989732][ T8012] netlink: 'syz.3.601': attribute type 6 has an invalid length.
[  300.016603][ T8012] netlink: 'syz.3.601': attribute type 6 has an invalid length.
[  300.040343][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.041043][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.041612][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.041643][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.264463][ T8024] bond0: entered promiscuous mode
[  300.264506][ T8024] bond_slave_0: entered promiscuous mode
[  300.274835][ T8024] bond_slave_1: entered promiscuous mode
[  300.282535][ T8024] batadv0: entered promiscuous mode
[  300.318206][ T8024] 8021q: adding VLAN 0 to HW filter on device hsr1
[  300.469268][ T8032] syzkaller1: entered promiscuous mode
[  300.469329][ T8032] syzkaller1: entered allmulticast mode
[  300.662224][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.699544][ T8044] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  300.715101][ T8043] netlink: 'syz.1.613': attribute type 12 has an invalid length.
[  301.015878][ T8060] dvmrp0: entered allmulticast mode
[  301.229015][ T8068] __nla_validate_parse: 5 callbacks suppressed
[  301.229068][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'.
[  301.253282][ T8068] ipvlan2: entered allmulticast mode
[  301.253327][ T8068] syz_tun: entered allmulticast mode
[  301.274380][ T8073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'.
[  301.284325][ T8073] netlink: 35 bytes leftover after parsing attributes in process `syz.1.624'.
[  301.293606][ T8073] netlink: 'syz.1.624': attribute type 5 has an invalid length.
[  301.303533][ T8073] netlink: 'syz.1.624': attribute type 6 has an invalid length.
[  301.303555][ T8073] netlink: 35 bytes leftover after parsing attributes in process `syz.1.624'.
[  301.482312][ T8083] openvswitch: netlink: Missing valid actions attribute.
[  301.831271][ T8105] xt_l2tp: missing protocol rule (udp|l2tpip)
[  302.064088][ T8112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.635'.
[  302.360108][ T8123] tipc: Enabled bearer <udp:syz2>, priority 10
[  302.617099][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.643'.
[  302.617160][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  303.332924][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'.
[  303.342261][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'.
[  303.358576][ T8169] erspan0: entered promiscuous mode
[  303.419099][ T8169] erspan0: left promiscuous mode
[  303.573463][ T5765] tipc: Node number set to 1062761333
[  303.812167][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'.
[  304.207611][ T8214] netlink: 'syz.0.666': attribute type 1 has an invalid length.
[  304.462795][ T8229] netlink: 'syz.3.671': attribute type 6 has an invalid length.
[  304.470741][ T8229] netlink: 'syz.3.671': attribute type 5 has an invalid length.
[  304.538332][ T8223] openvswitch: netlink: IP tunnel dst address not specified
[  304.848968][ T8241] syzkaller0: entered promiscuous mode
[  304.855677][ T8241] syzkaller0: entered allmulticast mode
[  304.986514][ T8251] macsec0: left promiscuous mode
[  305.446820][ T8279] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.596289][ T8281] xt_hashlimit: size too large, truncated to 1048576
[  305.877545][ T8310] netlink: 'syz.4.693': attribute type 3 has an invalid length.
[  305.888931][ T8310] netlink: 'syz.4.693': attribute type 3 has an invalid length.
[  306.135488][ T8324] netlink: 'syz.4.698': attribute type 1 has an invalid length.
[  306.218900][ T8324] bond2 (unregistering): Released all slaves
[  306.676105][ T8353] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  307.070195][ T8368] __nla_validate_parse: 14 callbacks suppressed
[  307.070466][ T8368] netlink: 240 bytes leftover after parsing attributes in process `syz.0.714'.
[  307.523747][ T8395] netlink: 'syz.1.723': attribute type 11 has an invalid length.
[  307.523792][ T8395] netlink: 64 bytes leftover after parsing attributes in process `syz.1.723'.
[  307.713734][ T8398] syzkaller1: entered promiscuous mode
[  307.713781][ T8398] syzkaller1: entered allmulticast mode
[  307.853564][ T8402] netlink: 'syz.1.726': attribute type 15 has an invalid length.
[  307.862504][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'.
[  307.903153][ T8295] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  307.912960][ T8304] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  307.933106][ T8304] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  307.933181][ T8304] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  308.068751][ T8409] openvswitch: netlink: Message has 8 unknown bytes.
[  308.169534][ T8422] macvlan0: entered allmulticast mode
[  308.172652][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'.
[  308.187068][ T8422] veth1_vlan: entered allmulticast mode
[  308.514135][ T8441] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:0
[  308.516984][ T8444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.741'.
[  308.554597][ T8446] netlink: 'syz.1.740': attribute type 3 has an invalid length.
[  308.810940][ T8459] ip6gre1: entered allmulticast mode
[  308.820167][ T8295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  309.020025][ T8472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.751'.
[  309.274402][ T8485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.757'.
[  309.323760][ T8487] netlink: 9 bytes leftover after parsing attributes in process `syz.3.756'.
[  309.344153][ T8487] 0·: renamed from hsr0 (while UP)
[  309.357461][ T8487] 0·: entered allmulticast mode
[  309.357490][ T8487] hsr_slave_0: entered allmulticast mode
[  309.357525][ T8487] hsr_slave_1: entered allmulticast mode
[  309.360103][ T8487] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  309.501031][ T8495] netlink: 'syz.0.759': attribute type 2 has an invalid length.
[  309.575309][ T8500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.762'.
[  309.656267][ T8501] netlink: 'syz.0.759': attribute type 2 has an invalid length.
[  309.836090][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'.
[  309.843112][ T8519] netlink: 'syz.4.765': attribute type 14 has an invalid length.
[  309.843132][ T8519] netlink: 'syz.4.765': attribute type 13 has an invalid length.
[  309.877039][ T8520] netlink: 'syz.1.766': attribute type 12 has an invalid length.
[  309.877066][ T8520] netlink: 'syz.1.766': attribute type 29 has an invalid length.
[  309.877100][ T8520] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  310.146055][ T8534] bridge: RTM_NEWNEIGH with invalid state 0x20
[  310.921608][ T5280] veth1_vlan: left promiscuous mode
[  311.359148][ T8612] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  311.381267][ T8613] team0 (unregistering): Port device team_slave_0 removed
[  311.408717][ T8613] team0 (unregistering): Port device team_slave_1 removed
[  311.473331][ T5765] syz0: Port: 1 Link DOWN
[  313.221977][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.527067][ T8564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.268370][ T8709] batadv_slave_1: entered promiscuous mode
[  314.550898][ T8708] batadv_slave_1: left promiscuous mode
[  315.545686][ T8304] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  316.024414][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  316.069430][ T8818] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  316.671692][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  317.119122][ T8840] validate_nla: 2 callbacks suppressed
[  317.119164][ T8840] netlink: 'syz.2.843': attribute type 13 has an invalid length.
[  317.304831][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  317.304910][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  317.544458][ T8847] __nla_validate_parse: 7 callbacks suppressed
[  317.551140][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  318.679865][ T8788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.899999][ T8862] 8021q: VLANs not supported on lo
[  319.107996][ T8878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.853'.
[  319.108043][ T8878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.853'.
[  319.108058][ T8878] netlink: 'syz.0.853': attribute type 5 has an invalid length.
[  319.108069][ T8878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.853'.
[  319.109017][ T8878] netlink: 100 bytes leftover after parsing attributes in process `syz.0.853'.
[  319.236616][ T8886] netlink: 112 bytes leftover after parsing attributes in process `syz.3.856'.
[  319.307384][ T8884] bond5: invalid ARP target 0.0.0.0 specified for addition
[  319.315034][ T8884] bond5: option arp_ip_target: invalid value (0)
[  319.327947][ T8884] bond5 (unregistering): Released all slaves
[  319.626784][ T8855] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.841132][ T8907] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  319.850276][ T8904] xt_LOG: level 8 >= 8
[  320.060246][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'.
[  320.060294][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.060516][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'.
[  320.060529][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.060746][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'.
[  320.060758][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.060954][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'.
[  320.060966][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.061170][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.061369][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.081798][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  320.082067][ T8914] openvswitch: netlink: Flow key attr not present in new flow.
[  321.092319][ T8957] netlink: 'syz.4.875': attribute type 5 has an invalid length.
[  321.781923][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.402378][ T9036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.418759][ T9034] tipc: Disabling bearer <eth:syzkaller0>
[  322.555057][ T9046] vlan2: entered promiscuous mode
[  322.560296][ T9046] geneve1: entered promiscuous mode
[  322.566228][ T9046] vlan2: entered allmulticast mode
[  322.571545][ T9046] geneve1: entered allmulticast mode
[  322.572214][ T9048] lo: entered promiscuous mode
[  322.583538][ T9048] lo: left promiscuous mode
[  322.635052][ T9050] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[  322.731738][ T9055] __nla_validate_parse: 44 callbacks suppressed
[  322.731782][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'.
[  322.752659][ T9055] veth0_macvtap: left promiscuous mode
[  323.283377][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.283418][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.297889][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.297911][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.314625][ T8295] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  323.314667][ T8295] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  323.314696][ T8295] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  323.314726][ T8295] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  323.374850][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.374890][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.376840][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.376860][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'.
[  323.654115][ T9099] net_ratelimit: 29 callbacks suppressed
[  323.656083][ T9099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.677484][ T9104] xt_REDIRECT: bad MAP_IPS.
[  323.686428][ T9104] xt_policy: output policy not valid in PREROUTING and INPUT
[  323.724835][ T9103] bond2: peer notification delay (25) is not a multiple of miimon (517), value rounded to 0 ms
[  323.724895][ T9103] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  323.752487][ T9069] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  323.755451][ T9103] bond2 (unregistering): Released all slaves
[  323.841215][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  323.861009][ T9111] netlink: 'syz.0.915': attribute type 16 has an invalid length.
[  323.905307][ T9117] netlink: 'syz.0.915': attribute type 16 has an invalid length.
[  323.982773][ T9119] netlink: 'syz.3.916': attribute type 2 has an invalid length.
[  324.286078][ T9137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.560613][ T9146] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  324.847099][ T9158] bond0: invalid NS target ff00:: specified for addition
[  324.847151][ T9158] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  325.186724][ T8303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  325.186951][ T8303] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  325.212061][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  325.292492][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  325.303529][ T9175] syzkaller1: entered promiscuous mode
[  325.303585][ T9175] syzkaller1: entered allmulticast mode
[  325.570970][ T9178] vlan3: entered allmulticast mode
[  325.577014][ T9178] veth1_virt_wifi: entered allmulticast mode
[  326.024543][  T943] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  326.079119][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.645649][ T9267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.246566][ T9295] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  328.044934][ T9331] __nla_validate_parse: 12 callbacks suppressed
[  328.044979][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.972'.
[  328.188180][ T9339] netlink: 8500 bytes leftover after parsing attributes in process `syz.1.974'.
[  328.528580][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.976'.
[  328.681750][ T9354] veth1_to_bond: entered allmulticast mode
[  328.691649][ T9354] veth1_to_bond: entered promiscuous mode
[  328.838482][ T9353] veth1_to_bond: left promiscuous mode
[  328.839897][ T9353] veth1_to_bond: left allmulticast mode
[  329.126632][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'.
[  329.346819][ T9387] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  329.357220][ T9387] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  329.377581][ T9392] netlink: 'syz.3.986': attribute type 29 has an invalid length.
[  329.385655][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  329.396213][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'.
[  329.546986][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'.
[  329.549961][ T9398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.560397][ T9398] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  329.595910][ T9401] Bluetooth: hci0: invalid len left 17, exp >= 23
[  329.688877][ T9406] netlink: 'syz.3.993': attribute type 1 has an invalid length.
[  329.837239][ T9406] 8021q: adding VLAN 0 to HW filter on device bond2
[  329.881366][ T9406] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  330.016949][ T9414] bond2: (slave geneve2): making interface the new active one
[  330.050523][ T9414] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  330.097879][ T9428] bridge_slave_1: left allmulticast mode
[  330.097932][ T9428] bridge_slave_1: left promiscuous mode
[  330.098153][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.131063][ T9428] bridge_slave_0: left allmulticast mode
[  330.139548][ T9428] bridge_slave_0: left promiscuous mode
[  330.147796][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.454653][ T9455] netlink: 'syz.1.1005': attribute type 1 has an invalid length.
[  330.604023][ T9457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1006'.
[  330.604069][ T9457] openvswitch: netlink: Flow key attr not present in new flow.
[  330.606326][ T9457] sctp: [Deprecated]: syz.0.1006 (pid 9457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.606326][ T9457] Use struct sctp_sack_info instead
[  330.774054][ T5856] tipc: Node number set to 2313602855
[  331.008761][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'.
[  331.371594][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'.
[  331.772197][ T9529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.928358][ T9513] hsr0 speed is unknown, defaulting to 1000
[  332.471303][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'.
[  332.596752][ T5657] block nbd0: Receive control failed (result -107)
[  333.029846][ T9584] IPVS: Error joining to the multicast group
[  333.054453][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'.
[  333.409743][ T9598] openvswitch: netlink: Unknown key attributes 1
[  333.537451][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'.
[  333.547621][ T9607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.761118][ T9620] xt_hashlimit: size too large, truncated to 1048576
[  333.761343][ T9620] xt_hashlimit: max too large, truncated to 1048576
[  333.763869][ T9620] xt_hashlimit: invalid rate
[  333.768372][ T9620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.900529][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'.
[  333.910472][ T9627] netlink: 'syz.4.1049': attribute type 13 has an invalid length.
[  333.918705][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'.
[  333.928880][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'.
[  333.928911][ T9627] netlink: 'syz.4.1049': attribute type 13 has an invalid length.
[  333.928924][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'.
[  334.090915][ T9637] bridge_slave_1: left allmulticast mode
[  334.090967][ T9637] bridge_slave_1: left promiscuous mode
[  334.091195][ T9637] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.124865][ T9637] bridge_slave_0: left allmulticast mode
[  334.124916][ T9637] bridge_slave_0: left promiscuous mode
[  334.125163][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.283141][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'.
[  334.500380][ T9661] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1060'.
[  334.500479][ T9661] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1060'.
[  335.536491][ T9725] team0: Device veth1_macvtap failed to register rx_handler
[  335.561699][ T9725] netlink: 'syz.3.1074': attribute type 32 has an invalid length.
[  335.561747][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'.
[  335.587017][ T9728] openvswitch: netlink: Unknown nsh attribute 0
[  335.599188][ T9733] openvswitch: netlink: Unknown nsh attribute 0
[  335.608419][ T9725] bond3: option coupled_control: invalid value (84)
[  335.621068][ T9725] bond3 (unregistering): Released all slaves
[  337.907412][ T9685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  338.421616][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  338.523738][ T9781] sctp: [Deprecated]: syz.1.1090 (pid 9781) Use of int in max_burst socket option deprecated.
[  338.523738][ T9781] Use struct sctp_assoc_value instead
[  338.554858][ T9784] veth0: entered promiscuous mode
[  338.577615][ T9783] veth0: left promiscuous mode
[  339.000995][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1097'.
[  339.016795][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1097'.
[  339.061599][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  339.541954][ T9833] sctp: [Deprecated]: syz.0.1105 (pid 9833) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.541954][ T9833] Use struct sctp_sack_info instead
[  339.647452][ T9843] tap0: tun_chr_ioctl cmd 1074025676
[  339.647505][ T9843] tap0: owner set to 0
[  340.048299][ T9863] syzkaller0: entered promiscuous mode
[  340.048341][ T9863] syzkaller0: entered allmulticast mode
[  340.081710][ T9863] tipc: Started in network mode
[  340.081759][ T9863] tipc: Node identity 928a7931152, cluster identity 4711
[  340.104895][ T9863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.127654][ T5657] block nbd1: Receive control failed (result -32)
[  340.142122][ T9863] tipc: Resetting bearer <eth:syzkaller0>
[  340.288847][ T9864] netlink: 'syz.3.1112': attribute type 83 has an invalid length.
[  340.420849][ T9884] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  340.444270][ T9881] wireguard0: entered promiscuous mode
[  340.489738][ T9861] tipc: Resetting bearer <eth:syzkaller0>
[  340.540795][ T9861] tipc: Disabling bearer <eth:syzkaller0>
[  340.710002][ T9897] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1122'.
[  340.710056][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'.
[  340.710089][ T9897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1122'.
[  340.789900][ T9903] netlink: 'syz.0.1125': attribute type 3 has an invalid length.
[  340.809553][ T9903] netlink: 'syz.0.1125': attribute type 3 has an invalid length.
[  340.857980][ T9901] bridge0: entered promiscuous mode
[  340.976489][ T9911] 8021q: adding VLAN 0 to HW filter on device macsec2
[  341.017538][ T9912] openvswitch: netlink: Unknown key attributes 20
[  341.076908][ T9918] sch_fq: defrate 0 ignored.
[  341.500056][ T9953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'.
[  341.517122][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'.
[  341.845420][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'.
[  341.960415][ T9982] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1142'.
[  341.974455][ T9982] gretap0: entered promiscuous mode
[  342.067515][ T9987] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1143'.
[  342.067565][ T9987] openvswitch: netlink: Message has 4 unknown bytes.
[  342.329714][ T4010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.329763][ T4010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.594378][T10011] netlink: 'syz.1.1149': attribute type 4 has an invalid length.
[  342.640443][T10011] .`: renamed from bond0 (while UP)
[  342.706500][T10011] netlink: zone id is out of range
[  342.706538][T10011] netlink: zone id is out of range
[  342.706888][T10011] netlink: zone id is out of range
[  342.706898][T10011] netlink: zone id is out of range
[  342.706905][T10011] netlink: zone id is out of range
[  342.706911][T10011] netlink: zone id is out of range
[  342.706918][T10011] netlink: zone id is out of range
[  342.706925][T10011] netlink: zone id is out of range
[  342.713611][T10014] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  343.634101][T10057] netlink: 'syz.1.1163': attribute type 3 has an invalid length.
[  343.665189][T10063] netlink: 'syz.1.1163': attribute type 3 has an invalid length.
[  344.106287][T10087] gretap2: entered promiscuous mode
[  344.113065][T10087] batman_adv: batadv0: Adding interface: gretap2
[  344.113095][T10087] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  344.113118][T10087] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  344.199063][T10102] nbd: must specify an index to disconnect
[  344.453399][T10118] netlink: 'syz.0.1177': attribute type 12 has an invalid length.
[  344.600025][T10115] syzkaller0: entered promiscuous mode
[  344.600068][T10115] syzkaller0: entered allmulticast mode
[  344.868856][T10140] netlink: 'syz.3.1184': attribute type 1 has an invalid length.
[  344.868903][T10140] netlink: 'syz.3.1184': attribute type 2 has an invalid length.
[  345.227419][T10162] netlink: 'syz.2.1191': attribute type 16 has an invalid length.
[  345.227462][T10162] __nla_validate_parse: 5 callbacks suppressed
[  345.227562][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1191'.
[  345.297696][T10162] xt_TPROXY: Can be used only with -p tcp or -p udp
[  345.915869][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'.
[  345.960517][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'.
[  345.960568][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'.
[  345.986711][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'.
[  345.986757][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'.
[  346.032137][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  346.042764][T10196] netlink: 'syz.0.1205': attribute type 1 has an invalid length.
[  346.307129][T10204] xt_l2tp: invalid flags combination: 8
[  346.407464][T10214] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  346.570326][T10217] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1214'.
[  346.606865][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[  346.606904][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1213'.
[  346.808302][T10229] Cannot find add_set index 0 as target
[  346.826051][T10240] Cannot find add_set index 0 as target
[  346.860807][T10241] netlink: 'syz.4.1219': attribute type 3 has an invalid length.
[  346.884161][ T1006] IPVS: starting estimator thread 0...
[  346.973117][T10248] IPVS: using max 30 ests per chain, 72000 per kthread
[  347.311937][T10268] x_tables: unsorted entry at hook 2
[  347.825138][T10292] veth5: entered promiscuous mode
[  347.832701][T10292] veth5: entered allmulticast mode
[  348.549152][T10342] netlink: 'syz.0.1251': attribute type 2 has an invalid length.
[  348.671721][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  348.827855][T10359] macvtap0: entered allmulticast mode
[  348.833856][T10359] veth0_macvtap: entered allmulticast mode
[  348.948010][T10368] netlink: 'syz.0.1258': attribute type 2 has an invalid length.
[  349.210278][T10380] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  350.011905][T10428] net_ratelimit: 11 callbacks suppressed
[  350.017763][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.027471][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.036303][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.045339][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.054244][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.063186][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.071963][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.072233][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.072496][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.072750][T10428] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.084433][T10431] netlink: 'syz.4.1279': attribute type 1 has an invalid length.
[  350.084453][T10431] netlink: 'syz.4.1279': attribute type 2 has an invalid length.
[  350.129483][T10438] netlink: 'syz.4.1279': attribute type 1 has an invalid length.
[  350.137626][T10438] netlink: 'syz.4.1279': attribute type 2 has an invalid length.
[  350.252052][T10443] __nla_validate_parse: 34 callbacks suppressed
[  350.258505][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  350.274768][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  350.433408][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'.
[  350.519976][T10457] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  350.609537][T10464] x_tables: duplicate underflow at hook 1
[  350.630358][T10457] bond0: entered promiscuous mode
[  350.637605][T10457] bond0: entered allmulticast mode
[  350.643759][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.682854][T10459] erspan1: entered allmulticast mode
[  350.696903][T10459] bond0: (slave erspan1): making interface the new active one
[  350.705175][T10459] erspan1: entered promiscuous mode
[  350.713501][T10459] bond0: (slave erspan1): Enslaving as an active interface with an up link
[  350.728007][T10469] veth1_macvtap: left promiscuous mode
[  350.728056][T10469] macsec0: entered promiscuous mode
[  351.312726][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'.
[  351.379793][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  351.437527][T10499] netlink: 'syz.0.1295': attribute type 5 has an invalid length.
[  351.504226][T10503] FAULT_INJECTION: forcing a failure.
[  351.504226][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  351.522501][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) 
[  351.522529][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  351.522546][T10503] Call Trace:
[  351.522634][T10503]  <TASK>
[  351.522708][T10503]  dump_stack_lvl+0xe8/0x150
[  351.522924][T10503]  should_fail_ex+0x410/0x560
[  351.523025][T10503]  _copy_to_user+0x31/0xb0
[  351.523082][T10503]  simple_read_from_buffer+0xe1/0x170
[  351.523135][T10503]  proc_fail_nth_read+0x1bb/0x230
[  351.523171][T10503]  ? common_file_perm+0x20e/0x2b0
[  351.523296][T10503]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  351.523324][T10503]  ? rw_verify_area+0x24a/0x4c0
[  351.523360][T10503]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  351.523384][T10503]  vfs_read+0x213/0xa80
[  351.523414][T10503]  ? __pfx___mutex_lock+0x10/0x10
[  351.523513][T10503]  ? __pfx_vfs_read+0x10/0x10
[  351.523537][T10503]  ? __fget_files+0x2a/0x420
[  351.523564][T10503]  ? __fget_files+0x3a2/0x420
[  351.523586][T10503]  ? __fget_files+0x2a/0x420
[  351.523617][T10503]  ksys_read+0x150/0x270
[  351.523644][T10503]  ? __pfx_ksys_read+0x10/0x10
[  351.523680][T10503]  do_syscall_64+0x166/0x520
[  351.523758][T10503]  ? trace_irq_disable+0x3b/0x140
[  351.523796][T10503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.523835][T10503]  ? clear_bhb_loop+0x70/0xc0
[  351.523856][T10503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.523872][T10503] RIP: 0033:0x7f7bed75e98e
[  351.523945][T10503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  351.523958][T10503] RSP: 002b:00007f7bee732fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  351.524016][T10503] RAX: ffffffffffffffda RBX: 00007f7bee7336c0 RCX: 00007f7bed75e98e
[  351.524027][T10503] RDX: 000000000000000f RSI: 00007f7bee7330a0 RDI: 0000000000000004
[  351.524037][T10503] RBP: 00007f7bee733090 R08: 0000000000000000 R09: 0000000000000000
[  351.524048][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.524058][T10503] R13: 00007f7beda26038 R14: 00007f7beda25fa0 R15: 00007ffcbc5f3ab8
[  351.524086][T10503]  </TASK>
[  351.653330][T10505] netlink: 'syz.3.1300': attribute type 1 has an invalid length.
[  351.787969][T10505] bond3: entered promiscuous mode
[  351.795267][T10505] 8021q: adding VLAN 0 to HW filter on device bond3
[  351.882618][T10507] bond3: (slave bridge0): making interface the new active one
[  351.882663][T10507] bridge0: entered promiscuous mode
[  351.890594][T10507] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  351.917760][T10511] tc_dump_action: action bad kind
[  352.086181][T10520] syzkaller0: entered promiscuous mode
[  352.086239][T10520] syzkaller0: entered allmulticast mode
[  352.165733][T10520] tipc: Started in network mode
[  352.165790][T10520] tipc: Node identity 763890599cf9, cluster identity 4711
[  352.179500][T10520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.244096][T10519] tipc: Resetting bearer <eth:syzkaller0>
[  352.296464][T10519] tipc: Disabling bearer <eth:syzkaller0>
[  352.491691][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'.
[  352.543642][T10534] syzkaller0: entered promiscuous mode
[  352.543690][T10534] syzkaller0: entered allmulticast mode
[  352.849072][   T30] audit: type=1800 audit(1788554626.720:8): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856752][   T30] audit: type=1800 audit(1788554626.720:9): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856799][   T30] audit: type=1800 audit(1788554626.720:10): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856833][   T30] audit: type=1800 audit(1788554626.720:11): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856866][   T30] audit: type=1800 audit(1788554626.720:12): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856898][   T30] audit: type=1800 audit(1788554626.720:13): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.856931][   T30] audit: type=1800 audit(1788554626.720:14): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.864759][   T30] audit: type=1800 audit(1788554626.720:15): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.871026][   T30] audit: type=1800 audit(1788554626.720:16): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  352.871071][   T30] audit: type=1800 audit(1788554626.720:17): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0
[  355.062320][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  355.201924][T10569] bridge0: entered promiscuous mode
[  355.201952][T10569] bridge0: entered allmulticast mode
[  355.203331][T10574] syzkaller1: entered promiscuous mode
[  355.203350][T10574] syzkaller1: entered allmulticast mode
[  355.577241][T10608] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1326'.
[  355.730220][T10623] syzkaller0: entered promiscuous mode
[  355.737955][T10623] syzkaller0: entered allmulticast mode
[  355.996610][T10636] ieee802154 phy0 wpan0: encryption failed: -22
[  356.270261][T10645] veth1_vlan: left allmulticast mode
[  356.386793][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'.
[  356.386832][T10645] tc_dump_action: action bad kind
[  356.798489][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'.
[  356.829446][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'.
[  356.831317][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'.
[  356.999848][T10691] net_ratelimit: 24 callbacks suppressed
[  357.005949][T10691] netlink: Invalid conntrack helper
[  357.012626][T10691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.126404][T10686] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1354'.
[  357.249146][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1360'.
[  357.979401][T10743] netlink: 'syz.4.1367': attribute type 1 has an invalid length.
[  358.034411][T10754] netlink: 'syz.1.1372': attribute type 11 has an invalid length.
[  358.034458][T10754] netlink: 'syz.1.1372': attribute type 4 has an invalid length.
[  358.034483][T10754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1372'.
[  358.128879][T10748] bond2: (slave gretap1): making interface the new active one
[  358.149875][T10748] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  358.251517][T10748] syz.4.1367 (10748) used greatest stack depth: 19168 bytes left
[  358.347457][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'.
[  358.378580][T10768] ip6gre2: entered allmulticast mode
[  358.504333][T10774] netlink: 'syz.3.1380': attribute type 21 has an invalid length.
[  358.551627][T10774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1380'.
[  358.656371][T10786] openvswitch: netlink: Message has 512 unknown bytes.
[  358.831755][T10794] netlink: 'syz.3.1386': attribute type 1 has an invalid length.
[  359.035666][T10794] bond4: entered promiscuous mode
[  359.037326][T10794] 8021q: adding VLAN 0 to HW filter on device bond4
[  359.174633][T10803] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  359.296915][T10817] netlink: 'syz.2.1395': attribute type 6 has an invalid length.
[  359.306898][T10817] netlink: 'syz.2.1395': attribute type 5 has an invalid length.
[  359.332687][T10818] netlink: 'syz.2.1395': attribute type 6 has an invalid length.
[  359.340593][T10818] netlink: 'syz.2.1395': attribute type 5 has an invalid length.
[  359.533121][T10831] policy can only be matched on NF_INET_PRE_ROUTING
[  359.533422][T10831] unable to load match
[  360.068163][T10864] netlink: 'syz.1.1404': attribute type 21 has an invalid length.
[  360.068201][T10864] netlink: 'syz.1.1404': attribute type 22 has an invalid length.
[  360.445624][T10889] wg1: entered promiscuous mode
[  360.445662][T10889] wg1: entered allmulticast mode
[  360.748083][T10909] __nla_validate_parse: 16 callbacks suppressed
[  360.748137][T10909] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1417'.
[  360.774900][T10913] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1418'.
[  360.838112][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'.
[  361.310384][T10947] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1424'.
[  361.310428][T10947] openvswitch: netlink: Flow actions attr not present in new flow.
[  361.429761][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'.
[  361.833497][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'.
[  361.833545][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1432'.
[  361.933812][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'.
[  362.355446][T11003] ipvlan1: left promiscuous mode
[  362.361131][T11003] ipvlan1: left allmulticast mode
[  362.361177][T11003] veth0_vlan: left allmulticast mode
[  362.376292][T11003] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  362.800070][T11020] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  362.927646][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'.
[  362.942281][T11024] vlan0: entered promiscuous mode
[  362.942493][T11024] vlan0: entered allmulticast mode
[  362.942507][T11024] veth0_vlan: entered allmulticast mode
[  362.997454][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  363.275140][T11047] sctp: [Deprecated]: syz.4.1458 (pid 11047) Use of int in maxseg socket option.
[  363.275140][T11047] Use struct sctp_assoc_value instead
[  363.601322][T11056] netlink: Conntrack attr has 1 unknown bytes
[  363.608047][T11056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.839173][T11060] syzkaller0: entered promiscuous mode
[  363.846158][T11060] syzkaller0: entered allmulticast mode
[  364.272997][T11084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.275160][T11082] syzkaller0: entered promiscuous mode
[  364.275178][T11082] syzkaller0: entered allmulticast mode
[  364.407213][T11082] tipc: Resetting bearer <eth:syzkaller0>
[  364.711556][T11110] blkio.reset_stats is deprecated
[  364.731295][T11110] Bluetooth: hci0: unsupported parameter 5161
[  364.731346][T11110] Bluetooth: hci0: unsupported parameter 8192
[  364.743689][T11110] Bluetooth: hci0: unsupported parameter 5161
[  364.743709][T11110] Bluetooth: hci0: unsupported parameter 8192
[  364.816748][T11115] Unsupported ieee802154 address type: 0
[  365.106422][T11080] tipc: Resetting bearer <eth:syzkaller0>
[  365.155549][T11080] tipc: Disabling bearer <eth:syzkaller0>
[  365.669942][T11161] 
: renamed from bond0 (while UP)
[  365.692673][T11163] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  365.698278][T11163] validate_nla: 3 callbacks suppressed
[  365.698296][T11163] netlink: 'syz.3.1499': attribute type 4 has an invalid length.
[  365.699740][T11163] netlink: 'syz.3.1499': attribute type 4 has an invalid length.
[  365.755661][T11165] __nla_validate_parse: 27 callbacks suppressed
[  365.755703][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.777690][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.791311][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.810119][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.824424][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.838456][T11169] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  365.838495][T11169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1501'.
[  365.839979][T11170] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  365.839995][T11170] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1501'.
[  365.866257][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.894161][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  365.906586][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'.
[  366.040246][T11178] xt_check_match_common: 16 callbacks suppressed
[  366.040400][T11178] x_tables: ip6_tables: mh match: only valid for protocol 135
[  366.099916][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.122154][T11181] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  366.138739][T11181] bond0 (unregistering): Released all slaves
[  366.596815][T11199] Bluetooth: MGMT ver 1.23
[  366.596882][T11199] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  366.710426][T11198] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  366.718939][T11198] gretap3: entered promiscuous mode
[  366.718961][T11198] gretap3: entered allmulticast mode
[  366.816153][T11216] netlink: 'syz.2.1513': attribute type 1 has an invalid length.
[  367.088404][T11235] 
€: renamed from veth0_to_batadv (while UP)
[  367.210246][T11243] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  367.695341][T11267] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  367.695495][T11267] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  367.721715][T11267] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  367.795479][T11267] bond1: entered promiscuous mode
[  367.795563][T11267] bond1: entered allmulticast mode
[  367.795921][T11267] 8021q: adding VLAN 0 to HW filter on device bond1
[  367.856890][   T13] IPVS: starting estimator thread 0...
[  367.878351][T11279] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  367.890774][T11278] erspan1: entered allmulticast mode
[  367.909479][T11278] bond1: (slave erspan1): making interface the new active one
[  367.909531][T11278] erspan1: entered promiscuous mode
[  367.940337][T11278] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  367.952156][T11284] IPVS: using max 36 ests per chain, 86400 per kthread
[  368.096557][T11297] ªªªªª»: renamed from bond_slave_0 (while UP)
[  368.198317][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198374][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198395][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198413][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198431][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198451][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198472][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198493][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198514][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198545][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198565][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198583][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198601][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198622][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198643][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198663][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198684][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198705][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198726][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198746][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198766][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198787][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198808][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198829][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198849][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198869][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198890][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198910][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198931][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198952][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198972][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.198993][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199014][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199034][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199055][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199075][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199096][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199117][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199138][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199158][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199179][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199199][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199220][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199241][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199262][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199282][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199302][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199323][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199343][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199364][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199385][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199405][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199440][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199462][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199483][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199502][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199529][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199550][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199571][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199591][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199612][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199632][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199653][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199674][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.199695][T11305] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000
[  368.251907][T11307] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  368.799893][T11336] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  369.437724][T11375] netlink: 'syz.0.1545': attribute type 9 has an invalid length.
[  369.664507][T11382] team0 (unregistering): Port device team_slave_0 removed
[  369.701974][T11382] team0 (unregistering): Port device team_slave_1 removed
[  370.546946][T11402] syzkaller1: entered promiscuous mode
[  370.552861][T11402] syzkaller1: entered allmulticast mode
[  370.887647][T11446] veth0_macvtap: entered allmulticast mode
[  370.897650][T11446] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  371.002530][T11456] unsupported nlmsg_type 40
[  371.003303][T11450] __nla_validate_parse: 19 callbacks suppressed
[  371.003318][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1562'.
[  371.049399][T11445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1562'.
[  371.313796][T11474] netlink: 'syz.0.1568': attribute type 23 has an invalid length.
[  371.513542][T11481] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1570'.
[  371.560112][T11484] ieee802154 phy0 wpan0: encryption failed: -22
[  371.596188][T11487] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  371.778778][T11495] xt_l2tp: v2 doesn't support IP mode
[  371.897780][T11502] netlink: 'syz.4.1578': attribute type 32 has an invalid length.
[  371.919279][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'.
[  372.036566][T11502] bond0: option coupled_control: invalid value (192)
[  372.046792][T11502] bond0 (unregistering): Released all slaves
[  372.095662][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'.
[  372.169172][T11463] hsr0 speed is unknown, defaulting to 1000
[  372.272280][T11517] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  372.349491][T11507] bond5: option fail_over_mac: invalid value (16)
[  372.364244][T11507] bond5 (unregistering): Released all slaves
[  373.238724][T11575] netlink: zone id is out of range
[  373.238762][T11575] netlink: zone id is out of range
[  373.238816][T11575] netlink: zone id is out of range
[  373.238822][T11575] netlink: zone id is out of range
[  373.238828][T11575] netlink: zone id is out of range
[  373.238876][T11575] netlink: zone id is out of range
[  373.238884][T11575] netlink: zone id is out of range
[  373.238901][T11575] netlink: zone id is out of range
[  373.238908][T11575] netlink: zone id is out of range
[  373.238924][T11575] netlink: zone id is out of range
[  373.934332][T11604] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003
[  373.969493][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'.
[  374.067403][T11604] 8021q: adding VLAN 0 to HW filter on device bond5
[  374.320085][T11622] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1611'.
[  374.364080][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'.
[  374.387553][T11630] netlink: 'syz.4.1612': attribute type 1 has an invalid length.
[  374.405700][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'.
[  374.406819][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'.
[  374.440445][T11643] netlink: 'syz.4.1612': attribute type 16 has an invalid length.
[  374.448763][T11643] netlink: 'syz.4.1612': attribute type 17 has an invalid length.
[  374.713733][T11643] veth1_vlan: entered allmulticast mode
[  374.720925][T11643] macvlan0: left allmulticast mode
[  374.720971][T11643] veth1_vlan: left allmulticast mode
[  374.768967][T11643] veth1_macvtap: entered promiscuous mode
[  374.772487][T11657] netlink: 'syz.3.1615': attribute type 4 has an invalid length.
[  374.787377][T11643] macsec0: left promiscuous mode
[  374.865257][T11643] bridge1: left promiscuous mode
[  374.865300][T11643] bridge1: left allmulticast mode
[  374.869406][T11643] vlan2: left allmulticast mode
[  374.869426][T11643] 
: left allmulticast mode
[  374.869437][T11643] ªªªªª»: left allmulticast mode
[  374.869451][T11643] bond_slave_1: left allmulticast mode
[  374.901670][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  374.950250][T11643] veth5: left promiscuous mode
[  374.950402][T11643] veth5: left allmulticast mode
[  374.972828][T11643] 8021q: adding VLAN 0 to HW filter on device bond2
[  374.988413][T11643] ip6gre2: left allmulticast mode
[  375.023766][T11326] syz0: Port: 1 Link ACTIVE
[  375.024429][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.024468][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.082224][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.085577][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.188261][T11670] erspan0: entered promiscuous mode
[  375.188305][T11670] erspan0: entered allmulticast mode
[  375.571001][T11685] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  375.571266][T11685] tipc: Enabled bearer <udp:syz0>, priority 10
[  375.770866][T11694] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  375.795233][T11694] geneve3: entered promiscuous mode
[  375.795283][T11694] geneve3: entered allmulticast mode
[  376.039451][T11701] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  376.074433][T11684] __nla_validate_parse: 6 callbacks suppressed
[  376.074484][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'.
[  376.170308][T11705] xt_CT: No such helper "pptp"
[  376.545112][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'.
[  376.672045][T11739] netlink: 'syz.0.1637': attribute type 11 has an invalid length.
[  376.886302][T11753] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1639'.
[  377.770395][T11802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1645'.
[  378.751018][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  379.802451][T11746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.945290][T11818] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1650'.
[  380.045554][T11824] No such timeout policy "s"
[  380.056548][T11824] net_ratelimit: 5 callbacks suppressed
[  380.062755][T11824] netlink: Failed to associated timeout policy 's'
[  380.070803][T11824] netlink: 'syz.2.1651': attribute type 1 has an invalid length.
[  380.139795][T11833] netlink: 'syz.3.1646': attribute type 1 has an invalid length.
[  380.247848][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[  380.252237][T11824] 8021q: adding VLAN 0 to HW filter on device bond6
[  380.277022][T11843] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1652'.
[  380.317770][T11843] xt_hashlimit: size too large, truncated to 1048576
[  380.331728][T11833] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.346634][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'.
[  380.354141][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[  380.354163][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'.
[  380.513816][T11821] netlink: 'syz.3.1646': attribute type 2 has an invalid length.
[  380.831791][T11861] hsr0: entered promiscuous mode
[  380.837054][T11861] hsr0: entered allmulticast mode
[  380.842525][T11861] hsr_slave_0: entered allmulticast mode
[  380.855508][T11324] hsr0 speed is unknown, defaulting to 1000
[  381.300428][T11891] sctp: [Deprecated]: syz.1.1663 (pid 11891) Use of struct sctp_assoc_value in delayed_ack socket option.
[  381.300428][T11891] Use struct sctp_sack_info instead
[  381.760717][T11920] RDS: rds_bind could not find a transport for fe80::1c, load rds_tcp or rds_rdma?
[  381.996516][T11925] netlink: 'syz.4.1672': attribute type 142 has an invalid length.
[  382.307871][T11944] __nla_validate_parse: 1 callbacks suppressed
[  382.307922][T11944] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1679'.
[  382.380629][T11955] IPVS: length: 225 != 8
[  382.547427][T11966] --map-set only usable from mangle table
[  382.575082][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'.
[  382.677680][T11969] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  382.677728][T11969] netlink: 'syz.1.1685': attribute type 2 has an invalid length.
[  382.723246][T11964] netlink: 'syz.0.1682': attribute type 2 has an invalid length.
[  382.861892][T11986] Bluetooth: hci0: unsupported parameter 5161
[  382.861928][T11986] Bluetooth: hci0: unsupported parameter 8192
[  382.861960][T11986] Bluetooth: hci0: unsupported parameter 5161
[  382.861974][T11986] Bluetooth: hci0: unsupported parameter 8192
[  383.140222][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1694'.
[  383.263132][T12009] xt_hashlimit: size too large, truncated to 1048576
[  383.374854][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.377842][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.379463][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.379799][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.380813][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.381205][T12011] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently!
[  383.583662][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'.
[  383.829298][T12030] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  383.928736][T12036] netlink: 'syz.0.1709': attribute type 29 has an invalid length.
[  383.944906][T12032] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  383.953764][T12032] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  384.123946][T12050] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1714'.
[  384.133574][T12050] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1714'.
[  384.136689][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1713'.
[  384.154662][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  384.213078][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'.
[  384.213121][T12042] openvswitch: netlink: Flow actions attr not present in new flow.
[  384.216450][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'.
[  384.868642][T12088] netlink: 'syz.2.1726': attribute type 3 has an invalid length.
[  384.907714][T12086] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  385.144848][T12098] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004
[  385.263954][T12104] dvmrp0: entered allmulticast mode
[  385.477232][T12117] netlink: 'syz.3.1733': attribute type 62 has an invalid length.
[  385.486177][T12109] netlink: 'syz.3.1733': attribute type 62 has an invalid length.
[  385.505021][T12119] macsec1: entered promiscuous mode
[  385.510666][T12119] macsec1: entered allmulticast mode
[  385.517363][T12119] bridge0: port 1(macsec1) entered blocking state
[  385.525091][T12119] bridge0: port 1(macsec1) entered disabled state
[  385.693631][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  385.693680][   T30] audit: type=1107 audit(1788554659.560:41): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  385.812708][T12133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.329082][T12166] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  386.375716][T12166] 8021q: adding VLAN 0 to HW filter on device bond3
[  386.417586][T12166] bond3: (slave veth5): Enslaving as an active interface with a down link
[  386.464743][T12166] 8021q: adding VLAN 0 to HW filter on device batadv1
[  386.475765][T12166] bond3: (slave batadv1): making interface the new active one
[  386.486786][T12166] batadv1: entered promiscuous mode
[  386.492728][T12166] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  386.672381][T12166] bond3: (slave veth7): Enslaving as an active interface with a down link
[  386.802951][T12181] bond3: (slave veth9): Enslaving as an active interface with a down link
[  386.932615][T11328] tipc: Node number set to 4151932304
[  387.307590][T12229] net_ratelimit: 1 callbacks suppressed
[  387.310348][T12229] openvswitch: netlink: IP tunnel TTL not specified.
[  387.383235][T12238] __nla_validate_parse: 8 callbacks suppressed
[  387.383289][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'.
[  387.453505][T12242] validate_nla: 2 callbacks suppressed
[  387.453553][T12242] netlink: 'syz.2.1770': attribute type 12 has an invalid length.
[  387.617175][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  387.648545][T12246] netlink: 'syz.1.1772': attribute type 1 has an invalid length.
[  387.648588][T12246] netlink: 'syz.1.1772': attribute type 2 has an invalid length.
[  387.877988][T12250] tipc: New replicast peer: 0.0.0.0
[  387.878932][T12250] tipc: Enabled bearer <udp:syz2>, priority 10
[  388.112522][T12265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1781'.
[ 
** replaying previous printk message **
[  388.148615][T12267] ------------[ cut here ]------------
[  388.148659][T12267] verifier bug: backtracking misuse
[  388.148696][T12267] WARNING: kernel/bpf/backtrack.c:819 at bpf_mark_chain_precision+0x5c90/0x7c20, CPU#1: syz.2.1780/12267
[  388.177358][T12267] Modules linked in:
[  388.181778][T12267] CPU: 1 UID: 0 PID: 12267 Comm: syz.2.1780 Not tainted syzkaller #0 PREEMPT(full) 
[  388.191628][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  388.196981][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1782'.
[  388.203706][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1782'.
[  388.207405][T12271] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1782'.
[  388.228754][T12267] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20
[  388.235480][T12267] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16
[  388.255514][T12267] RSP: 0018:ffffc9001b23f220 EFLAGS: 00010283
[  388.261715][T12267] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000
[  388.269749][T12267] RDX: ffffc9000dab9000 RSI: 000000000000452b RDI: ffffffff907e1490
[  388.278333][T12267] RBP: 0000000000000003 R08: ffff888032090000 R09: 0000000000000003
[  388.286762][T12267] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88802b8e0850
[  388.295234][T12267] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  388.303973][T12267] FS:  00007f7bee7336c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000
[  388.313899][T12267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  388.320526][T12267] CR2: 00007fd9a1f5e110 CR3: 0000000074922000 CR4: 00000000003526f0
[  388.328770][T12267] Call Trace:
[  388.332135][T12267]  <TASK>
[  388.335108][T12267]  ? update_loop_inline_state+0x22a/0x610
[  388.341065][T12267]  do_check_insn+0x12c6d/0x17d70
[  388.346655][T12267]  ? __pfx_do_check_insn+0x10/0x10
[  388.352136][T12267]  ? verbose+0x11d/0x1a0
[  388.356410][T12267]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  388.362428][T12267]  ? __pfx_verbose+0x10/0x10
[  388.367059][T12267]  ? bpf_vlog_reset+0x2aa/0x340
[  388.372111][T12267]  ? print_insn_state+0x106/0x170
[  388.377189][T12267]  do_check_common+0x3c19/0x5d30
[  388.382267][T12267]  ? __pfx_do_check_common+0x10/0x10
[  388.387619][T12267]  ? __pfx_verbose+0x10/0x10
[  388.392335][T12267]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  388.398185][T12267]  bpf_check+0x2639/0x2e10
[  388.403817][T12267]  ? ktime_get_with_offset+0x93/0x2d0
[  388.409268][T12267]  ? __pfx_bpf_check+0x10/0x10
[  388.414153][T12267]  ? bpf_obj_name_cpy+0x194/0x1e0
[  388.419224][T12267]  bpf_prog_load+0x14d6/0x1c20
[  388.424119][T12267]  ? __pfx_bpf_prog_load+0x10/0x10
[  388.429276][T12267]  __sys_bpf+0xd0d/0xd90
[  388.433660][T12267]  ? __pfx___sys_bpf+0x10/0x10
[  388.438462][T12267]  ? do_futex+0x3e7/0x4e0
[  388.443116][T12267]  ? rcu_is_watching+0x16/0xb0
[  388.447949][T12267]  __x64_sys_bpf+0xba/0xd0
[  388.452974][T12267]  do_syscall_64+0x166/0x520
[  388.457618][T12267]  ? trace_irq_disable+0x3b/0x140
[  388.462767][T12267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.468853][T12267]  ? clear_bhb_loop+0x70/0xc0
[  388.473620][T12267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.479552][T12267] RIP: 0033:0x7f7bed79e159
[  388.484180][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.504449][T12267] RSP: 002b:00007f7bee733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  388.513094][T12267] RAX: ffffffffffffffda RBX: 00007f7beda25fa0 RCX: 00007f7bed79e159
[  388.521085][T12267] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[  388.529186][T12267] RBP: 00007f7bed835024 R08: 0000000000000000 R09: 0000000000000000
[  388.537266][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.545323][T12267] R13: 00007f7beda26038 R14: 00007f7beda25fa0 R15: 00007ffcbc5f3ab8
[  388.553400][T12267]  </TASK>
[  388.556458][T12267] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  388.563768][T12267] CPU: 1 UID: 0 PID: 12267 Comm: syz.2.1780 Not tainted syzkaller #0 PREEMPT(full) 
[  388.573123][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  388.583171][T12267] Call Trace:
[  388.586445][T12267]  <TASK>
[  388.589371][T12267]  vpanic+0x56d/0xa60
[  388.593391][T12267]  ? __pfx__printk+0x10/0x10
[  388.597998][T12267]  ? __pfx_vpanic+0x10/0x10
[  388.602496][T12267]  ? is_bpf_text_address+0x292/0x2b0
[  388.607777][T12267]  ? is_bpf_text_address+0x26/0x2b0
[  388.612984][T12267]  panic+0xc5/0xd0
[  388.616735][T12267]  ? __pfx_panic+0x10/0x10
[  388.621206][T12267]  __warn+0x315/0x4c0
[  388.625230][T12267]  ? bpf_mark_chain_precision+0x5c90/0x7c20
[  388.631121][T12267]  ? bpf_mark_chain_precision+0x5c90/0x7c20
[  388.637028][T12267]  __report_bug+0x276/0x570
[  388.641696][T12267]  ? bpf_mark_chain_precision+0x5c90/0x7c20
[  388.647602][T12267]  ? __pfx___report_bug+0x10/0x10
[  388.652625][T12267]  ? number+0xc60/0xed0
[  388.656878][T12267]  ? __pfx_number+0x10/0x10
[  388.661378][T12267]  report_bug_entry+0x19b/0x290
[  388.666239][T12267]  ? bpf_mark_chain_precision+0x5c90/0x7c20
[  388.672140][T12267]  ? bpf_mark_chain_precision+0x5c95/0x7c20
[  388.678049][T12267]  handle_bug+0xce/0x200
[  388.682301][T12267]  exc_invalid_op+0x1a/0x50
[  388.686810][T12267]  asm_exc_invalid_op+0x1a/0x20
[  388.691658][T12267] RIP: 0010:bpf_mark_chain_precision+0x5c90/0x7c20
[  388.698157][T12267] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 16 ff ff ff 48 89 df e8 c1 7b 44 00 e9 09 ff ff ff e8 77 b2 d4 ff 48 8d 3d e0 0b 8b 0e <67> 48 0f b9 3a 48 8b 3c 24 48 81 c7 88 08 00 00 48 c7 c6 60 df 16
[  388.717770][T12267] RSP: 0018:ffffc9001b23f220 EFLAGS: 00010283
[  388.723844][T12267] RAX: ffffffff81f308a9 RBX: 0000000000000001 RCX: 0000000000080000
[  388.731814][T12267] RDX: ffffc9000dab9000 RSI: 000000000000452b RDI: ffffffff907e1490
[  388.739790][T12267] RBP: 0000000000000003 R08: ffff888032090000 R09: 0000000000000003
[  388.747761][T12267] R10: 0000000000000007 R11: 0000000000000002 R12: ffff88802b8e0850
[  388.755734][T12267] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000
[  388.763724][T12267]  ? bpf_mark_chain_precision+0x5c89/0x7c20
[  388.769687][T12267]  ? update_loop_inline_state+0x22a/0x610
[  388.775421][T12267]  do_check_insn+0x12c6d/0x17d70
[  388.780392][T12267]  ? __pfx_do_check_insn+0x10/0x10
[  388.785534][T12267]  ? verbose+0x11d/0x1a0
[  388.789814][T12267]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[  388.795719][T12267]  ? __pfx_verbose+0x10/0x10
[  388.800319][T12267]  ? bpf_vlog_reset+0x2aa/0x340
[  388.805178][T12267]  ? print_insn_state+0x106/0x170
[  388.810295][T12267]  do_check_common+0x3c19/0x5d30
[  388.815271][T12267]  ? __pfx_do_check_common+0x10/0x10
[  388.820574][T12267]  ? __pfx_verbose+0x10/0x10
[  388.825193][T12267]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[  388.831022][T12267]  bpf_check+0x2639/0x2e10
[  388.835478][T12267]  ? ktime_get_with_offset+0x93/0x2d0
[  388.840868][T12267]  ? __pfx_bpf_check+0x10/0x10
[  388.845636][T12267]  ? bpf_obj_name_cpy+0x194/0x1e0
[  388.850670][T12267]  bpf_prog_load+0x14d6/0x1c20
[  388.855445][T12267]  ? __pfx_bpf_prog_load+0x10/0x10
[  388.860574][T12267]  __sys_bpf+0xd0d/0xd90
[  388.864921][T12267]  ? __pfx___sys_bpf+0x10/0x10
[  388.869717][T12267]  ? do_futex+0x3e7/0x4e0
[  388.874080][T12267]  ? rcu_is_watching+0x16/0xb0
[  388.878851][T12267]  __x64_sys_bpf+0xba/0xd0
[  388.883269][T12267]  do_syscall_64+0x166/0x520
[  388.887864][T12267]  ? trace_irq_disable+0x3b/0x140
[  388.892897][T12267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.899059][T12267]  ? clear_bhb_loop+0x70/0xc0
[  388.903745][T12267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.909643][T12267] RIP: 0033:0x7f7bed79e159
[  388.914067][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.933697][T12267] RSP: 002b:00007f7bee733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  388.942133][T12267] RAX: ffffffffffffffda RBX: 00007f7beda25fa0 RCX: 00007f7bed79e159
[  388.950130][T12267] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005
[  388.958193][T12267] RBP: 00007f7bed835024 R08: 0000000000000000 R09: 0000000000000000
[  388.966173][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.974182][T12267] R13: 00007f7beda26038 R14: 00007f7beda25fa0 R15: 00007ffcbc5f3ab8
[  388.982201][T12267]  </TASK>
[  388.985509][T12267] Kernel Offset: disabled
[  388.989852][T12267] Rebooting in 86400 seconds..