last executing test programs:

1.328792001s ago: executing program 3 (id=15481):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0xe00}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f48", 0x36}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979", 0x19}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.328314252s ago: executing program 2 (id=15482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000980)={0x3d8, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xfbfb}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x36e, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5943}, @broadcast, @device_a, @initial, {0x6, 0x6}}, 0x800, 0x3e, @random=0x7, @val={0x1, 0x4, [{0x2}, {0x0, 0x1}, {0x6}, {0x48, 0x1}]}, @void, [{0xdd, 0x57, "96e0bec4aba96a311e8cea900bfe1274374ca84b25bd3eb9bd361ef06a88bbca62e5e844d329149124aeb292731d262ab8dd4a649379cc52a8a226e595297b0212d6e7a34b69d82b2b706d897977e8f02c1af92c31d195"}, {0xdd, 0xe0, "4d38d1c2205b3832f2cc2c4fdf1d5942ac0463661bcfa924ad0b64ff42ae110b6e0810a15e7b2f2b297f8235cb425f7cb9c648c8626ec49646e3d1efea410d8fcd91b904f2e866ced2e583edd72464b209a6246d2104fc6172e1f37de0829aa18fdc055491c856d1a21818489c899d37a8728fbd763673946e5463dee785d1cc367063c9d5bcdef7d87363b6fddff71ca9602173dc3927a3a94546a5dd1a6620302f84ffe249f280701e881cc6a3efaa39676054423d6343a8491702d50456a405b6fa006c775deb35e4460fabdf8fa7797d947643746639ffe7f8c8e4d0ba47"}, {0xdd, 0xe, "7aafb2666e5f0a28f5bcf7c6e78f"}, {0xdd, 0x6a, "99ec6440b3a36c7c66461345398c614703253ccfd1dffc0596c23c76b0aaff9bc7bfdb8298972dd041d350b87805b7a7aa2070299f65f682bb5c246057657565a56bbb86a8fcd69ab0fcdcf868d769e81b55d43e3f75f3ffe0f06eff7133f9e498d308a7c73ac150157e"}, {0xdd, 0xaa, "c33486e8a7dcbf1d56cf5c6614721ebbedcbc5b03523837994aeb3cb77cd501ac90ff196922bf3da9f0d44e3ee6cb063129fee21e4605a463e6211c404b9814a0f14c73f0e70227fa45eaa04c59bfbf56ad4e082abf550282ebec381cf821223477ade641d41ed93e23ce9e4c5a855b956e6a211fbd547d13cb31d22545def8521e405872e356776cdff2c8ccec77d0307691f06fa8f240f6c20a0533e5387474ad8bc3930cd22045f4d"}, {0xdd, 0x46, "d2fdd6448b74bc3bbb66ebc6127067628e59e9849e10b481bb00000000000000000000000000a58bec61f96d49b19ee78237e496cc6515a8f55e5b6fb0b68ddeafaf6cd197d8"}, {0xdd, 0x99, "c66cc041616581034aeb22ddd162febb8e33dfc2d564fe4a45ec8ff168b842a22af466afc6db6d4a81e14f51d94770cd6b704788fc13c0bc3843f51a3fd005fa73f38aa06d6fc0d66ffb29505591cc8acb8155110a7720e127cc8e2a41df614c03fbca95f62af38717639172605a2871d6ab8ef785f1bfe2cdbd1692d787b2323fca2c393628b6c2276e7d35cc3b70e30472223f2c9e662bd7"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x5}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0)

1.320256666s ago: executing program 2 (id=15485):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b114b000000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b114b000000000006000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x8, [@union={0x8, 0xa, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x2, 0x5}, {0xe}, {0x6, 0x0, 0x800}, {0x7, 0x5}, {0x4, 0x0, 0x7}, {0x2, 0x1, 0xfffffffb}, {0x3, 0x5, 0x7ff}, {0xf, 0x5, 0x4}, {0x10, 0x4, 0x8}, {0x7, 0x5, 0x7fff}]}, @const={0x5}]}, {0x0, [0x5f, 0x61, 0x5f, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/152, 0xb0, 0x98, 0x1, 0x5}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00')
socket(0x2a, 0x2, 0x0) (async)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0xffffffff, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x1, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x20000005, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x1000027b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x6, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x4}, 0x10)
close(r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6, <r9=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r7}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x24, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x14, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0xfffffff8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x600000}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x24, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x14, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0xfffffff8, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x600000}, 0x94)

1.316699186s ago: executing program 2 (id=15489):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r1, &(0x7f0000000140)="c69e2f7e0fa0bcad91a445d59ab2441779abae46ad4fad5ff49f4191dc09886434e10eabcc08699a9fb886af46f86720dc59581211cba2e24f344d3c943078f1760f1a377dd5bf591965fcfda1956f60a044a899573b1bbbc56730f0135018096b82d1d6ebb398576a2098ca4d870a444573df06cd4513cdec7bb88c94ddbcc1cee0c7814ee9d5d110c09ee5ccab47b7921a1c1e1428d8ded54a6cde2c51b6a993ef8ffcc79ec9bd45b021a1ca48cc2ad28d700648ed0a696b559f991d903e4a171df53d6537fbada05c17491b83e81a836611b5252e8f490a453bc3108c85267b2e10", &(0x7f0000000d00)=""/4096}, 0x20)

1.316098707s ago: executing program 3 (id=15490):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x8}, 0x8)

1.227363102s ago: executing program 2 (id=15492):
socket$kcm(0xa, 0x3, 0x87) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x19, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) (async)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100100000001009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT], &(0x7f0000000d40)='syzkaller\x00', 0xcd8f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x800) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x31, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
ioctl(r7, 0x8b32, &(0x7f0000000040)) (async)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f00000000c0)={0x3, 'wg0\x00', {0x3}, 0x1}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
clock_gettime(0x0, &(0x7f0000000680)={<r10=>0x0, <r11=>0x0})
pselect6(0x40, &(0x7f00000005c0)={0x9f5f, 0x12000000, 0x7, 0x9, 0x3, 0x8, 0x200, 0x5}, &(0x7f0000000600)={0x7ff000000, 0x1, 0x2, 0x9f, 0x8, 0x78d, 0xd}, &(0x7f0000000640)={0xd, 0xfffffffffffffffb, 0x0, 0x1df8613d, 0x2, 0x7f, 0x2, 0x4}, &(0x7f00000006c0)={r10, r11+60000000}, &(0x7f0000000740)={&(0x7f0000000700)={[0xd]}, 0x8})

1.219115356s ago: executing program 3 (id=15494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1}, 0x60)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0)

1.088364307s ago: executing program 1 (id=15497):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.087982687s ago: executing program 0 (id=15498):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x444, 0x15, 0x300, 0x70bd26, 0x25dfdbfe, {0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "6253c271922a83e868a5d3ffc4e2eec2eada702ff291d4c690dd05c1425b4cfc8c3cc869118cb428e88fc63c84d297ac89b80ca2881c94a8b1"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "69e7e5d96064c005f64019e58f46bf3e40425880c91cbffd1075bc892475600d7f355e8cd32030fc7356668f1dc27c58b5dd731e0059ba75817a2572031e16cfde4a0d0a55cf2bf5e7bb253b503ce151ced424bcf262a9d0d085790691a27cfd7ceace0739052dd80913a68c79b5afb6f035eadd74d6eb240ff3ad4fe1b62adcbfafc238e0b7ebf45089d8d5454d3757dabf4b502cf680cbb097ea49096f168fe6a8fcc2ba05c5c401127447237bfa59f8d4eabc5a0f434c2e52f4588afa37ba866b1660c7ca8561e620814015a58a93c67880ffc0d1c3d6f081b47b6d927a97190a"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "d2bf969520ffe3f324e989096dbde6071a25ab62727d51ba3f7789bde40913a273cdbbfc4ddd63c294548428342ad1aad3458f0efda571a7d5228bd443de281d637d2a134b20101e2d5845b7ffb3b3c7e6b3688cfcfd181f763149e2b23c92ccc7d469307c8bd45c7b63340c73b9c1"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "007ad839210d51521c9ab38db90d9e2e10306236fca7d8d476bb54666d1df61ab29bcde3014339afd470f083f1d167eae184ac91cf1220d958757aa22f3c50a2c5d0c1275bd21f68e05d770ac273264e"}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "91a49a317138e6465dee6d1aef84ccb222bf3b63d49dd5950a33ab89d6007e955bfb22dcdbdc326f75dcbc486f7afbe53ddba5099f594381eda61e309053fff20b0d0daedc2f842142c57af98e3e20bf9fdb1191e630c69477a760aa05f748b8513ede28b9db22923f1cc3059d25e817f5bb5faeb91279188ed3e0943492af93bac7d5b3efad4082eb55a76d0cab6921aec88c67dbb07679a511ce94c4a82e3dec6aced03b7ed9c4cceffc6e3d4360"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "e260955a22103fba1a91a1d66e121aaa29494331148e1db09795897af805732eaacdfc3bb9970b50aa562043936949f26aa963d58601b162f79fd967f0044e5d35c76b8c8c84179f954b18c48211b02efc84c905c8ca749bd56e7ce996d1733a85df72bf139e240b256faa26f8aa6072c84b2477c15d884985c2b67612e6172c65b507b4c31313222fc64b11335b71ba37448c8b5dbcae173950c1ac11d2d1b0eea3cc44bdbfd3f16228dd19ae1e5dc038251f1f71de1b"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "c43f0fda5c62a8e4a756cb16a5e7d8c67e359e3bc6f586214d78ad"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "4485af43d5a2eb389a91f534738e6caf9482015cd8ec226289d43c32ec22f57e70430839d511aa53bf0392c88971bf42de92fc716e930093b714dda566e4b597307d27535c8e5224ad4b08dc4c882eaccd5ae11359f838d2b68281f439d280263610c6d4d9e0615b5e2dc52cab4d20b1a6940c00a4bc8d075c50c0a29d6be11cc53de70923f816f92dab987d4751605225d9a7a2d68d72ae6b070d68a959fa699be36499b30f59450a1a1897"}]}, 0x444}, 0x1, 0x0, 0x0, 0x4000000}, 0x44081)
write$cgroup_int(r1, &(0x7f0000000140)=0xffffffffffffffff, 0x12)
write$cgroup_subtree(r1, 0x0, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

1.080347751s ago: executing program 2 (id=15499):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = accept$inet6(r1, 0x0, &(0x7f0000000180))
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x1b, @empty, 0x8}, 0x1c)
sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0600000000000000feffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="04fb000001000000040000800801000020df31e638248a88"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xff00)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x30, 0x100, 0x2, 0x3, 0x7ff, 0x1, 0x1}})

1.029532842s ago: executing program 0 (id=15500):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r1, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

968.41082ms ago: executing program 1 (id=15501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101001000005e1affd5020000000900010073797a3000000000080002400000009f2e000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32b2312860fdce85e6110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x400c001)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4, 0xfffffffd}, 0x1c)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r3=>r0, 0xd, 0x6, 0x1})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdaa, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="096a05ae00e70f97534b39e3ad9a08e8686f151670fb1ed7cdb59d71fe1cf27e2bfd473fa9041caea625", @ANYRES16=r6, @ANYRESOCT=r5], 0x34}}, 0x4044894)
sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x8, 0x70bd2a, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES8, @ANYBLOB="00000000000000001c0012800b00010c5f114f06fb255c1603e9972f381b1591000c00028007000200e0000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8c085)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x7, 0x31, "181c143e7e0f2c1fab3d7be7f7134ce8abd709ed9b316018b6daa57b92ad443c4acfdfc9b86e6d554aabbbcf837e3f805a"}})
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe}]}, 0x38}}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="88010000", @ANYRES16=r9, @ANYBLOB="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"], 0x188}}, 0x4)
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000500)=0x3, 0x4)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'wlan1\x00', {0x2, 0x0, @dev}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NILFS_IOCTL_GET_VINFO(r11, 0xc0186e86, &(0x7f0000000640)={&(0x7f0000000680)=[{0x327, 0x2, 0xfffffffffffffffc}, {0x0, 0x9, 0x5, 0x4}], 0x2, 0x20, 0x3, 0x1})

872.848928ms ago: executing program 3 (id=15502):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x84, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0xc081)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5baa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa882}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54d8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x40040) (async)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5baa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa882}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54d8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
syz_emit_ethernet(0x29a, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x25c, 0x3a, 0xff, @private1, @mcast2, {[@dstopts={0x32}, @dstopts={0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x1, [0x400000009a]}}]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x66}, @dstopts={0x2, 0x1a, '\x00', [@generic={0x5, 0xce, "2341874f614f880376d279a6007fce2eb9504f6368549b1e990069e6581e5e6e18a6617943e2334d2ae67c4041e58869f63d38da5df153a0ffc599fe54fb3cad5ee0e3e3d1e56bbaeb7f384bf917abb4a18e3b1eb8829a707e75273e9f1a5f9459dd94ef40c96292029c123995ce3e60ef2182cdfd6c46d5f98c55f1c9a11b2474505418090f0f6468fcf010e7e5663b5064b0e5f311cc24fe2befaf36d2e78154e6ae5e49fcd0060f9ecb6ed5653e6e2225d2ad66d737fd80276b49d51cd446ec81d164f3ac8fb09a2c923726da"}]}, @hopopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @routing={0x84, 0x4, 0x0, 0x9, 0x0, [@private0, @private1]}, @dstopts={0x3c, 0x1d, '\x00', [@generic={0x9, 0xc6, "67e4a37c0b68e7686a8e7ac07c6c49523bc07b6830865a4dc9cf756cbba723dec80a1fc97a390f4214cf1f1e95e91c4eabd37c3dc9e1c3ea9a6a1cf247074922657fbe3fe965194256f2326fea954e3544d98cf928486b84a646a8dca81d0e22de4e801af6e1b66648174ec3f62289acea1d8141bfe9560fdecc51fff6001367f2ddf9ba0c1ad99c8e5862cf50928f8bec7b89c155cf6e57b0cc511a28d5fb8e66827177af4bf22e8fd31f726fe69df26e92ce473a83ed28f9c346123c8590ac680e3a92f310"}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @local}]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x29a, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @empty, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x25c, 0x3a, 0xff, @private1, @mcast2, {[@dstopts={0x32}, @dstopts={0x32, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x1, [0x400000009a]}}]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x66}, @dstopts={0x2, 0x1a, '\x00', [@generic={0x5, 0xce, "2341874f614f880376d279a6007fce2eb9504f6368549b1e990069e6581e5e6e18a6617943e2334d2ae67c4041e58869f63d38da5df153a0ffc599fe54fb3cad5ee0e3e3d1e56bbaeb7f384bf917abb4a18e3b1eb8829a707e75273e9f1a5f9459dd94ef40c96292029c123995ce3e60ef2182cdfd6c46d5f98c55f1c9a11b2474505418090f0f6468fcf010e7e5663b5064b0e5f311cc24fe2befaf36d2e78154e6ae5e49fcd0060f9ecb6ed5653e6e2225d2ad66d737fd80276b49d51cd446ec81d164f3ac8fb09a2c923726da"}]}, @hopopts={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @routing={0x84, 0x4, 0x0, 0x9, 0x0, [@private0, @private1]}, @dstopts={0x3c, 0x1d, '\x00', [@generic={0x9, 0xc6, "67e4a37c0b68e7686a8e7ac07c6c49523bc07b6830865a4dc9cf756cbba723dec80a1fc97a390f4214cf1f1e95e91c4eabd37c3dc9e1c3ea9a6a1cf247074922657fbe3fe965194256f2326fea954e3544d98cf928486b84a646a8dca81d0e22de4e801af6e1b66648174ec3f62289acea1d8141bfe9560fdecc51fff6001367f2ddf9ba0c1ad99c8e5862cf50928f8bec7b89c155cf6e57b0cc511a28d5fb8e66827177af4bf22e8fd31f726fe69df26e92ce473a83ed28f9c346123c8590ac680e3a92f310"}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @local}]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0)

815.939293ms ago: executing program 1 (id=15504):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x8}, 0x8)

732.875189ms ago: executing program 4 (id=15505):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464", 0xd}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

683.826473ms ago: executing program 3 (id=15506):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000700)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0xbd}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

682.987001ms ago: executing program 0 (id=15507):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x1}}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0xe, 0x8}, {0x0, 0xf}, {0xb, 0x17}]}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x9, 0x3, 0x4}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000100)=""/210, 0x7c, 0xd2, 0x1, 0x3, 0x10000, @value=r4}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', <r5=>0x0})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@mcast1, r5}, 0x14)

682.571206ms ago: executing program 1 (id=15508):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async)
write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[], 0xfe33) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000)

571.638474ms ago: executing program 4 (id=15509):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480060001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}}, 0x80)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xfffffffffffffc24, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

561.021523ms ago: executing program 1 (id=15510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

543.13459ms ago: executing program 3 (id=15511):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x5)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'tunl0\x00', <r3=>0x0, 0x20, 0x7c1, 0x42, 0x9, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x66, 0x0, 0x5, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x3, "bb"}, @rr={0x7, 0x13, 0xc5, [@local, @multicast2, @private=0xa010101, @multicast1]}]}}}}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0, <r9=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x5d, &(0x7f00000003c0)=""/93, 0x41100, 0x3, '\x00', r3, @fallback=0x2e, r4, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x9, 0x4, 0x6}, 0x10, r6, 0xffffffffffffffff, 0x6, &(0x7f00000000c0)=[r7, 0xffffffffffffffff, r8, r9], &(0x7f0000000780)=[{0x4, 0x3, 0x1, 0x2}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x4, 0x8, 0x1}, {0x4, 0x6, 0xc, 0x7}, {0x5, 0x4, 0xa, 0x8}, {0x0, 0x2, 0x10, 0x9}], 0x10, 0x1}, 0x94) (async)
sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (async)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000)

518.233451ms ago: executing program 0 (id=15512):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)

423.654488ms ago: executing program 1 (id=15513):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket(0x8, 0x3, 0x3)
ioctl$sock_netrom_SIOCADDRT(r0, 0x61d8, 0x0)
close(0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0xa4, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x18, r4, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800b6dbbac2d8ad50386e22d4476b4ab59808c2c71b8fcfdd97dfd36014505ed49d964aa97ab8f6c9175333b4ac04877dc3e7", @ANYRESDEC=r3, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000004c0), &(0x7f00000001c0)=r6}, 0x20)
write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x113)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)

423.260582ms ago: executing program 4 (id=15514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c004000090a010400000000000000000a0000040900010073797a3100000000080005400000000c0900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d100000000001100010000000000000000000100000a"], 0xa4}}, 0x40)

407.018915ms ago: executing program 0 (id=15515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="adc734370000000008000a00", @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

350.753745ms ago: executing program 4 (id=15516):
syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x80) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r0, 0x3, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40)

136.02913ms ago: executing program 4 (id=15517):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4(r2, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f00000000c0)) (async)
getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f00000000c0))

132.445955ms ago: executing program 2 (id=15518):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00')
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x8, 0x3, 0x3)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x30042, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x11, 0x1, 0x7ffffffc)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xfffffff0}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x79}, @TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x7c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x0, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x4c804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x20bbfb2b, 0xf2, 0x45ff, 0x9, 0xfffffffc, 0xb5, 0x10001, 0x2, 0x81}}}}]}, 0x58}}, 0x180c0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002064e0000000000000000000000000014000780080008000000000008000640000000000500010006000000050005000200000005000400d58853350900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)

100.503314ms ago: executing program 4 (id=15519):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000ac0)={&(0x7f0000000100), 0xc, &(0x7f0000000a80)={&(0x7f00000004c0)={0x5a8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb276}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}, @NFTA_SET_DESC={0x4ec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_DESC_CONCAT={0xd0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x74c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x83a1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x124b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa41}]}]}, @NFTA_SET_DESC_CONCAT={0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ca}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5cd8b30}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff9bca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x59}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x66}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10100000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xace6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbf8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x108f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbeaf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x60a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45c3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, 0x5a8}}, 0x840)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000a7c000000090a010200000000000000000000000008000a40000000000900020073797a32000000000900010073797a30000000000900010073797a31000000003c0009800b0001007670726f787900002c000280080003400000000c080003400000000108000140000000020800014000000000080001400000000114000000100001000000000000000000fb83000a"], 0xa4}}, 0x0)

0s ago: executing program 0 (id=15520):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
r0 = socket(0x15, 0x5, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/172, &(0x7f0000000180)=0xac)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

kernel console output (not intermixed with test programs):

Setting the MTU to 1532 would solve the problem.
[ 1264.118616][T16547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1264.286530][T16665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14215'.
[ 1264.297985][T16547] hsr_slave_0: entered promiscuous mode
[ 1264.304841][T16547] hsr_slave_1: entered promiscuous mode
[ 1264.322102][T16547] debugfs: 'hsr0' already exists in 'hsr'
[ 1264.328003][T16547] Cannot create hsr debugfs directory
[ 1264.528883][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14217'.
[ 1264.762415][T28252] Bluetooth: hci1: command tx timeout
[ 1264.848471][T16700] validate_nla: 125 callbacks suppressed
[ 1264.848489][T16700] netlink: 'syz.3.14224': attribute type 1 has an invalid length.
[ 1264.905008][T16700] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[ 1265.042116][T16711] syzkaller1: entered promiscuous mode
[ 1265.073755][T16711] syzkaller1: entered allmulticast mode
[ 1266.769628][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14228'.
[ 1266.779425][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14228'.
[ 1266.788931][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14228'.
[ 1266.842227][T28252] Bluetooth: hci1: command tx timeout
[ 1266.897390][T16723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14231'.
[ 1266.956314][T16730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14232'.
[ 1267.174560][T16749] FAULT_INJECTION: forcing a failure.
[ 1267.174560][T16749] name failslab, interval 1, probability 0, space 0, times 0
[ 1267.218488][T16749] CPU: 1 UID: 0 PID: 16749 Comm: syz.1.14237 Not tainted syzkaller #0 PREEMPT(full) 
[ 1267.218512][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1267.218522][T16749] Call Trace:
[ 1267.218530][T16749]  <TASK>
[ 1267.218539][T16749]  dump_stack_lvl+0xe8/0x150
[ 1267.218574][T16749]  should_fail_ex+0x412/0x560
[ 1267.218606][T16749]  should_failslab+0xa8/0x100
[ 1267.218627][T16749]  ? skb_clone+0x212/0x3a0
[ 1267.218650][T16749]  kmem_cache_alloc_noprof+0x87/0x650
[ 1267.218669][T16749]  ? sk_filter_trim_cap+0x1e1/0xd90
[ 1267.218707][T16749]  skb_clone+0x212/0x3a0
[ 1267.218733][T16749]  __netlink_deliver_tap+0x404/0x850
[ 1267.218764][T16749]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1267.218784][T16749]  netlink_deliver_tap+0x19c/0x1b0
[ 1267.218804][T16749]  netlink_dump+0x926/0xe80
[ 1267.218833][T16749]  ? __pfx_netlink_dump+0x10/0x10
[ 1267.218848][T16749]  ? __netlink_lookup+0x7e4/0x8b0
[ 1267.218883][T16749]  ? netlink_lookup+0x30/0x200
[ 1267.218900][T16749]  ? netlink_lookup+0x30/0x200
[ 1267.218914][T16749]  ? netlink_lookup+0x30/0x200
[ 1267.218935][T16749]  __netlink_dump_start+0x5cb/0x7e0
[ 1267.218962][T16749]  unix_diag_handler_dump+0x1b6/0x940
[ 1267.218997][T16749]  ? __pfx_unix_diag_handler_dump+0x10/0x10
[ 1267.219020][T16749]  ? __pfx_unix_diag_dump+0x10/0x10
[ 1267.219044][T16749]  ? sock_diag_lock_handler+0x19/0x290
[ 1267.219062][T16749]  ? sock_diag_lock_handler+0x19/0x290
[ 1267.219086][T16749]  sock_diag_rcv_msg+0x4cc/0x600
[ 1267.219109][T16749]  netlink_rcv_skb+0x232/0x4b0
[ 1267.219128][T16749]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[ 1267.219148][T16749]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1267.219178][T16749]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1267.219205][T16749]  netlink_unicast+0x80f/0x9b0
[ 1267.219240][T16749]  ? __pfx_netlink_unicast+0x10/0x10
[ 1267.219267][T16749]  ? netlink_sendmsg+0x650/0xb40
[ 1267.219284][T16749]  ? skb_put+0x11b/0x210
[ 1267.219308][T16749]  netlink_sendmsg+0x813/0xb40
[ 1267.219337][T16749]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1267.219359][T16749]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1267.219389][T16749]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1267.219413][T16749]  ____sys_sendmsg+0x972/0x9f0
[ 1267.219445][T16749]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1267.219477][T16749]  ? import_iovec+0x73/0xa0
[ 1267.219502][T16749]  ___sys_sendmsg+0x2a5/0x360
[ 1267.219531][T16749]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1267.219588][T16749]  ? __fget_files+0x2a/0x420
[ 1267.219605][T16749]  ? __fget_files+0x3a0/0x420
[ 1267.219632][T16749]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1267.219658][T16749]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1267.219697][T16749]  ? __pfx_ksys_write+0x10/0x10
[ 1267.219730][T16749]  do_syscall_64+0x14d/0xf80
[ 1267.219752][T16749]  ? trace_irq_disable+0x3b/0x150
[ 1267.219768][T16749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.219787][T16749]  ? clear_bhb_loop+0x40/0x90
[ 1267.219810][T16749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.219827][T16749] RIP: 0033:0x7f9d6d79c819
[ 1267.219846][T16749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1267.219861][T16749] RSP: 002b:00007f9d6e61b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1267.219880][T16749] RAX: ffffffffffffffda RBX: 00007f9d6da16090 RCX: 00007f9d6d79c819
[ 1267.219893][T16749] RDX: 0000000000000000 RSI: 00002000000039c0 RDI: 0000000000000005
[ 1267.219905][T16749] RBP: 00007f9d6e61b090 R08: 0000000000000000 R09: 0000000000000000
[ 1267.219916][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1267.219927][T16749] R13: 00007f9d6da16128 R14: 00007f9d6da16090 R15: 00007ffcb4138b18
[ 1267.219957][T16749]  </TASK>
[ 1267.243047][T16547] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1267.308958][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14238'.
[ 1267.599943][T16547] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1267.620041][T16547] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1267.635154][T16547] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1267.725091][T16547] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1267.746891][T16547] 8021q: adding VLAN 0 to HW filter on device team0
[ 1267.763145][T17567] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1267.770408][T17567] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1267.789148][T17567] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1267.796501][T17567] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1268.118504][T16547] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1268.434932][T16803] FAULT_INJECTION: forcing a failure.
[ 1268.434932][T16803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1268.472988][T16803] CPU: 1 UID: 0 PID: 16803 Comm: syz.3.14249 Not tainted syzkaller #0 PREEMPT(full) 
[ 1268.473013][T16803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1268.473023][T16803] Call Trace:
[ 1268.473030][T16803]  <TASK>
[ 1268.473037][T16803]  dump_stack_lvl+0xe8/0x150
[ 1268.473065][T16803]  should_fail_ex+0x412/0x560
[ 1268.473094][T16803]  _copy_to_user+0x31/0xb0
[ 1268.473117][T16803]  simple_read_from_buffer+0xe1/0x170
[ 1268.473144][T16803]  proc_fail_nth_read+0x1bb/0x230
[ 1268.473170][T16803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1268.473196][T16803]  ? rw_verify_area+0x2a6/0x4d0
[ 1268.473214][T16803]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1268.473241][T16803]  vfs_read+0x20c/0xa70
[ 1268.473260][T16803]  ? fdget_pos+0x246/0x320
[ 1268.473279][T16803]  ? __pfx___mutex_lock+0x10/0x10
[ 1268.473302][T16803]  ? __pfx_vfs_read+0x10/0x10
[ 1268.473324][T16803]  ? __fget_files+0x2a/0x420
[ 1268.473343][T16803]  ? __fget_files+0x3a0/0x420
[ 1268.473355][T16803]  ? __fget_files+0x2a/0x420
[ 1268.473375][T16803]  ksys_read+0x150/0x270
[ 1268.473397][T16803]  ? __pfx_ksys_read+0x10/0x10
[ 1268.473415][T16803]  ? __pfx_sock_ioctl+0x10/0x10
[ 1268.473448][T16803]  do_syscall_64+0x14d/0xf80
[ 1268.473469][T16803]  ? trace_irq_disable+0x3b/0x150
[ 1268.473486][T16803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.473502][T16803]  ? clear_bhb_loop+0x40/0x90
[ 1268.473523][T16803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.473540][T16803] RIP: 0033:0x7f924795d04e
[ 1268.473557][T16803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1268.473571][T16803] RSP: 002b:00007f9245bedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1268.473589][T16803] RAX: ffffffffffffffda RBX: 00007f9245bee6c0 RCX: 00007f924795d04e
[ 1268.473611][T16803] RDX: 000000000000000f RSI: 00007f9245bee0a0 RDI: 0000000000000003
[ 1268.473620][T16803] RBP: 00007f9245bee090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.473630][T16803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.473641][T16803] R13: 00007f9247c16038 R14: 00007f9247c15fa0 R15: 00007ffd7107def8
[ 1268.473672][T16803]  </TASK>
[ 1268.745837][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14252'.
[ 1268.816480][T16814] syzkaller1: entered promiscuous mode
[ 1268.840852][T16814] syzkaller1: entered allmulticast mode
[ 1268.902911][T16547] veth0_vlan: entered promiscuous mode
[ 1268.915528][T16547] veth1_vlan: entered promiscuous mode
[ 1268.926255][T28252] Bluetooth: hci1: command tx timeout
[ 1268.936616][T16814] syzkaller1: left promiscuous mode
[ 1268.952337][T16814] syzkaller1: left allmulticast mode
[ 1269.028711][T16547] veth0_macvtap: entered promiscuous mode
[ 1269.044206][T16547] veth1_macvtap: entered promiscuous mode
[ 1269.095439][T16547] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1269.119233][T16547] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1269.175777][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14259'.
[ 1269.198976][T17567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.220090][T17567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.250325][T17567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.256013][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14259'.
[ 1269.322109][T17563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1269.466412][T17563] bridge_slave_1: left allmulticast mode
[ 1269.495424][T17563] bridge_slave_1: left promiscuous mode
[ 1269.515598][T16851] netlink: 'syz.3.14268': attribute type 10 has an invalid length.
[ 1269.517882][T17563] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1269.556748][T17563] bridge_slave_0: left allmulticast mode
[ 1269.565320][T17563] bridge_slave_0: left promiscuous mode
[ 1269.575496][T17563] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1269.647151][T16858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14270'.
[ 1269.755388][T17563] bond4 (unregistering): (slave ip6gretap1): Releasing active interface
[ 1269.768371][T17563] ip6gretap1 (unregistering): left allmulticast mode
[ 1269.807111][T17563] bond2 (unregistering): (slave vti0): Releasing backup interface
[ 1269.821507][T17563] vti0 (unregistering): left promiscuous mode
[ 1269.827719][T17563] vti0 (unregistering): left allmulticast mode
[ 1269.888731][T17563] dvmrp0 (unregistering): left allmulticast mode
[ 1270.155924][T17563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1270.165792][T17563] bond_slave_0: left allmulticast mode
[ 1270.175915][T17563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1270.185365][T17563] bond_slave_1: left allmulticast mode
[ 1270.191264][T17563] bond0 (unregistering): Released all slaves
[ 1270.205704][T17563] bond1 (unregistering): Released all slaves
[ 1270.217864][T17563] bond2 (unregistering): left allmulticast mode
[ 1270.225228][T17563] bond2 (unregistering): Released all slaves
[ 1270.242897][T17563] bond3 (unregistering): Released all slaves
[ 1270.256092][T17563] bond4 (unregistering): Released all slaves
[ 1270.273194][T17564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.312162][T17564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1270.357265][T17587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1270.378543][T17587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1270.455673][T17563] �9: left promiscuous mode
[ 1270.547748][T16880] bond0: entered promiscuous mode
[ 1270.571537][T16880] bond_slave_0: entered promiscuous mode
[ 1270.597349][T16880] bond_slave_1: entered promiscuous mode
[ 1270.606961][T16880] batadv0: entered promiscuous mode
[ 1270.614863][T16880] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1270.644840][T16880] hsr2: entered promiscuous mode
[ 1270.656786][T16880] hsr2: entered allmulticast mode
[ 1270.664081][T16880] 8021q: adding VLAN 0 to HW filter on device hsr2
[ 1270.673486][T16880] bond0: left promiscuous mode
[ 1270.678264][T16880] bond_slave_0: left promiscuous mode
[ 1270.685674][T16880] bond_slave_1: left promiscuous mode
[ 1270.692923][T16880] batadv0: left promiscuous mode
[ 1270.707077][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14181'.
[ 1270.717171][T17563] tipc: Disabling bearer <eth:wg1>
[ 1270.725070][T17563] tipc: Left network mode
[ 1270.798936][T16896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1270.898540][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14280'.
[ 1270.989727][T16905] netlink: 'syz.2.14282': attribute type 142 has an invalid length.
[ 1271.405744][T16929] netlink: 'syz.2.14290': attribute type 32 has an invalid length.
[ 1271.428724][T16932] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14288'.
[ 1271.451244][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14290'.
[ 1271.492890][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14288'.
[ 1271.554583][T16929] bond9: Setting coupled_control to off (0)
[ 1271.576622][T16940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1271.716579][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14292'.
[ 1271.728702][T16933] syzkaller1: entered promiscuous mode
[ 1271.756957][T16933] syzkaller1: entered allmulticast mode
[ 1271.833029][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14294'.
[ 1271.955783][T16952] erspan0: entered promiscuous mode
[ 1271.975704][T16952] macvtap2: entered promiscuous mode
[ 1271.989380][T16952] macvtap2: entered allmulticast mode
[ 1272.009426][T16952] erspan0: entered allmulticast mode
[ 1272.153938][T17563] hsr_slave_0: left promiscuous mode
[ 1272.182190][T17563] hsr_slave_1: left promiscuous mode
[ 1272.193944][T17563] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1272.357400][T16982] FAULT_INJECTION: forcing a failure.
[ 1272.357400][T16982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1272.384985][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.3.14302 Not tainted syzkaller #0 PREEMPT(full) 
[ 1272.385011][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1272.385022][T16982] Call Trace:
[ 1272.385030][T16982]  <TASK>
[ 1272.385038][T16982]  dump_stack_lvl+0xe8/0x150
[ 1272.385068][T16982]  should_fail_ex+0x412/0x560
[ 1272.385101][T16982]  _copy_to_user+0x31/0xb0
[ 1272.385125][T16982]  simple_read_from_buffer+0xe1/0x170
[ 1272.385157][T16982]  proc_fail_nth_read+0x1bb/0x230
[ 1272.385186][T16982]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1272.385215][T16982]  ? rw_verify_area+0x2a6/0x4d0
[ 1272.385235][T16982]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1272.385263][T16982]  vfs_read+0x20c/0xa70
[ 1272.385281][T16982]  ? fdget_pos+0x246/0x320
[ 1272.385302][T16982]  ? __pfx___mutex_lock+0x10/0x10
[ 1272.385327][T16982]  ? __pfx_vfs_read+0x10/0x10
[ 1272.385347][T16982]  ? __fget_files+0x2a/0x420
[ 1272.385366][T16982]  ? __fget_files+0x3a0/0x420
[ 1272.385380][T16982]  ? __fget_files+0x2a/0x420
[ 1272.385405][T16982]  ksys_read+0x150/0x270
[ 1272.385427][T16982]  ? __pfx_ksys_read+0x10/0x10
[ 1272.385466][T16982]  do_syscall_64+0x14d/0xf80
[ 1272.385492][T16982]  ? trace_irq_disable+0x3b/0x150
[ 1272.385508][T16982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.385527][T16982]  ? clear_bhb_loop+0x40/0x90
[ 1272.385549][T16982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1272.385567][T16982] RIP: 0033:0x7f924795d04e
[ 1272.385586][T16982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1272.385600][T16982] RSP: 002b:00007f9245bccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1272.385625][T16982] RAX: ffffffffffffffda RBX: 00007f9245bcd6c0 RCX: 00007f924795d04e
[ 1272.385638][T16982] RDX: 000000000000000f RSI: 00007f9245bcd0a0 RDI: 0000000000000005
[ 1272.385650][T16982] RBP: 00007f9245bcd090 R08: 0000000000000000 R09: 0000000000000000
[ 1272.385662][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1272.385673][T16982] R13: 00007f9247c16128 R14: 00007f9247c16090 R15: 00007ffd7107def8
[ 1272.385703][T16982]  </TASK>
[ 1272.775518][T16989] netlink: 'syz.2.14305': attribute type 1 has an invalid length.
[ 1272.786091][T17563] team0 (unregistering): Port device team_slave_1 removed
[ 1272.816906][T17563] team0 (unregistering): Port device team_slave_0 removed
[ 1272.832480][T17563] veth0_to_team (unregistering): left allmulticast mode
[ 1273.041440][T16963] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1274.735357][T16995] syzkaller1: entered promiscuous mode
[ 1274.740863][T16995] syzkaller1: entered allmulticast mode
[ 1274.917623][T17017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14312'.
[ 1275.178700][T17563] IPVS: stop unused estimator thread 0...
[ 1275.190693][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14318'.
[ 1275.276632][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14318'.
[ 1275.291903][T17038] bond0: entered promiscuous mode
[ 1275.312015][T17038] bond_slave_0: entered promiscuous mode
[ 1275.334167][T17038] bond_slave_1: entered promiscuous mode
[ 1275.355845][T17038] batadv0: entered promiscuous mode
[ 1275.372518][T17038] debugfs: 'hsr1' already exists in 'hsr'
[ 1275.392458][T17038] Cannot create hsr debugfs directory
[ 1275.400329][T17038] hsr1: entered promiscuous mode
[ 1275.417160][T17038] hsr1: entered allmulticast mode
[ 1275.423546][T17038] bond0: entered allmulticast mode
[ 1275.428841][T17038] bond_slave_0: entered allmulticast mode
[ 1275.435171][T17038] bond_slave_1: entered allmulticast mode
[ 1275.441818][T17038] batadv0: entered allmulticast mode
[ 1275.453892][T17038] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1275.462547][T17038] bond0: left promiscuous mode
[ 1275.467696][T17038] bond_slave_0: left promiscuous mode
[ 1275.474979][T17038] bond_slave_1: left promiscuous mode
[ 1275.484826][T17038] batadv0: left promiscuous mode
[ 1275.704500][T17062] netlink: 'syz.4.14328': attribute type 10 has an invalid length.
[ 1275.732017][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1275.746260][T17062] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1275.761636][T17063] syzkaller1: entered promiscuous mode
[ 1275.767135][T17063] syzkaller1: entered allmulticast mode
[ 1275.858133][T17076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14332'.
[ 1276.020740][T17084] netlink: 'syz.4.14335': attribute type 8 has an invalid length.
[ 1276.068738][T17587] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1276.069996][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14337'.
[ 1276.111887][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14337'.
[ 1276.128719][T17587] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1276.165761][T17096] bond0: entered promiscuous mode
[ 1276.180467][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14339'.
[ 1276.200037][T17096] bond_slave_0: entered promiscuous mode
[ 1276.215797][T17096] bond_slave_1: entered promiscuous mode
[ 1276.229744][T17096] batadv0: entered promiscuous mode
[ 1276.238818][T17096] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1276.251678][T17096] hsr2: entered promiscuous mode
[ 1276.256837][T17096] hsr2: entered allmulticast mode
[ 1276.259781][T17106] netlink: 'syz.4.14342': attribute type 1 has an invalid length.
[ 1276.272243][T17096] 8021q: adding VLAN 0 to HW filter on device hsr2
[ 1276.282247][T17096] bond0: left promiscuous mode
[ 1276.287102][T17096] bond_slave_0: left promiscuous mode
[ 1276.294826][T17096] bond_slave_1: left promiscuous mode
[ 1276.304574][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14343'.
[ 1276.313837][T17096] batadv0: left promiscuous mode
[ 1276.327911][T17587] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1276.333460][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14342'.
[ 1276.364400][T17587] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1276.385288][T17110] netdevsim netdevsim2: Direct firmware load for 0 failed with error -2
[ 1276.397257][T17106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14342'.
[ 1276.412941][T17110] netdevsim netdevsim2: Falling back to sysfs fallback for: 0
[ 1276.448154][T17113] netlink: 'syz.0.14345': attribute type 1 has an invalid length.
[ 1276.477052][T17114] netlink: 'syz.1.14344': attribute type 1 has an invalid length.
[ 1276.656828][T17123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1276.660493][T17124] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[ 1276.797597][T28252] block nbd2: Receive control failed (result -32)
[ 1276.929793][T17130] syzkaller1: entered promiscuous mode
[ 1276.935573][T17130] syzkaller1: entered allmulticast mode
[ 1277.132007][T17145] bond0: entered promiscuous mode
[ 1277.138978][T17145] bond_slave_0: entered promiscuous mode
[ 1277.151975][T17145] bond_slave_1: entered promiscuous mode
[ 1277.157961][T17145] batadv0: entered promiscuous mode
[ 1277.175042][T17145] bond0: left promiscuous mode
[ 1277.181590][T17145] bond_slave_0: left promiscuous mode
[ 1277.190213][T17145] bond_slave_1: left promiscuous mode
[ 1277.199959][T17145] batadv0: left promiscuous mode
[ 1277.225149][T17146] bridge_slave_1: default FDB implementation only supports local addresses
[ 1277.597773][T17180] syzkaller1: entered promiscuous mode
[ 1277.672766][T17180] syzkaller1: entered allmulticast mode
[ 1277.693170][T17186] hsr_slave_1: left promiscuous mode
[ 1277.783678][T17184] lo speed is unknown, defaulting to 1000
[ 1277.928177][T17196] netlink: 'syz.0.14371': attribute type 1 has an invalid length.
[ 1277.938451][T17199] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004
[ 1278.100400][T17188] lo speed is unknown, defaulting to 1000
[ 1278.110245][T17184] wg1 speed is unknown, defaulting to 1000
[ 1278.187081][T17216] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1278.616335][T17188] wg1 speed is unknown, defaulting to 1000
[ 1279.081962][T17246] syzkaller0: entered promiscuous mode
[ 1279.097659][T17246] syzkaller0: entered allmulticast mode
[ 1279.390668][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1279.406890][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1279.415426][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1279.423683][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1279.437910][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1281.308583][T17259] lo speed is unknown, defaulting to 1000
[ 1281.391463][T17268] __nla_validate_parse: 16 callbacks suppressed
[ 1281.391484][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14391'.
[ 1281.482148][ T5830] Bluetooth: hci5: command tx timeout
[ 1281.714891][T17259] wg1 speed is unknown, defaulting to 1000
[ 1281.878998][T17285] lo speed is unknown, defaulting to 1000
[ 1281.932177][T17288] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.14398'.
[ 1281.958288][T17288] bridge_slave_1: default FDB implementation only supports local addresses
[ 1282.216681][T17299] xt_l2tp: wrong L2TP version: 0
[ 1282.241731][T17299] netlink: 'syz.0.14402': attribute type 21 has an invalid length.
[ 1282.470437][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14406'.
[ 1282.501397][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14406'.
[ 1282.809372][T17259] chnl_net:caif_netlink_parms(): no params data found
[ 1282.859417][T17332] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1282.914266][T17332] bond2 (unregistering): Released all slaves
[ 1283.098791][T17259] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1283.121246][T17259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.128709][T17259] bridge_slave_0: entered allmulticast mode
[ 1283.141798][T17259] bridge_slave_0: entered promiscuous mode
[ 1283.150776][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14418'.
[ 1283.151704][T17259] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1283.168177][T17259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1283.177844][T17259] bridge_slave_1: entered allmulticast mode
[ 1283.187706][T17259] bridge_slave_1: entered promiscuous mode
[ 1283.218494][T17364] : renamed from hsr0 (while UP)
[ 1283.306478][T17259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1283.347143][T17259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1283.428130][T17259] team0: Port device team_slave_0 added
[ 1283.443786][T17259] team0: Port device team_slave_1 added
[ 1283.449991][T17375] netlink: 294 bytes leftover after parsing attributes in process `syz.1.14422'.
[ 1283.487631][T17259] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1283.494605][T17375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1283.495182][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.544784][T17259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1283.563101][ T5830] Bluetooth: hci5: command tx timeout
[ 1283.618270][T17381] openvswitch: netlink: IP tunnel dst address not specified
[ 1283.643180][T17259] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.664841][T17259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1283.709906][T17259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1283.797936][T17259] hsr_slave_0: entered promiscuous mode
[ 1283.813490][T17259] hsr_slave_1: entered promiscuous mode
[ 1283.822374][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14429'.
[ 1283.823517][T17259] debugfs: 'hsr0' already exists in 'hsr'
[ 1283.838139][T17259] Cannot create hsr debugfs directory
[ 1283.852498][T17390] bond0: entered promiscuous mode
[ 1283.857962][T17390] bond_slave_0: entered promiscuous mode
[ 1283.864886][T17390] bond_slave_1: entered promiscuous mode
[ 1283.872470][T17390] batadv0: entered promiscuous mode
[ 1283.880670][T17390] bond0: left promiscuous mode
[ 1283.888009][T17390] bond_slave_0: left promiscuous mode
[ 1283.894311][T17390] bond_slave_1: left promiscuous mode
[ 1283.899822][T17390] batadv0: left promiscuous mode
[ 1284.058398][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14433'.
[ 1284.124062][T17406] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14435'.
[ 1284.137083][T17406] 8021q: VLANs not supported on gre0
[ 1284.160371][T17410] netlink: 264 bytes leftover after parsing attributes in process `syz.1.14436'.
[ 1284.306115][T17259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1284.319349][T17259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.425560][T17259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1284.436175][T17259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.569378][T17259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1284.581689][T17259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.664492][T17259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1284.677088][T17259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1284.786266][T17587] bridge_slave_1: left allmulticast mode
[ 1284.793649][T17587] bridge_slave_1: left promiscuous mode
[ 1284.799756][T17587] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1284.832792][T17587] bridge_slave_0: left allmulticast mode
[ 1284.838458][T17587] bridge_slave_0: left promiscuous mode
[ 1284.844606][T17587] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1285.041917][T17587] bond6 (unregistering): (slave vti0): Releasing backup interface
[ 1285.049871][T17587] vti0 (unregistering): left promiscuous mode
[ 1285.069963][T17587] erspan0 (unregistering): left allmulticast mode
[ 1285.124972][T17587] bond7 (unregistering): (slave geneve2): Releasing active interface
[ 1285.377412][T17587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1285.388037][T17587] bond_slave_0: left allmulticast mode
[ 1285.395892][T17587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1285.407970][T17587] bond_slave_1: left allmulticast mode
[ 1285.415794][T17587] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1285.424617][T17587] mac80211_hwsim hwsim76 wlan1: left allmulticast mode
[ 1285.432107][T17587] bond0 (unregistering): Released all slaves
[ 1285.442128][T17587] bond1 (unregistering): Released all slaves
[ 1285.456643][T17587] bond2 (unregistering): Released all slaves
[ 1285.470579][T17587] bond3 (unregistering): Released all slaves
[ 1285.487986][T17587] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1285.498316][T17587] bond4 (unregistering): Released all slaves
[ 1285.516425][T17587] bond5 (unregistering): (slave lo): Releasing backup interface
[ 1285.525261][T17587] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1285.537782][T17587] bond5 (unregistering): Released all slaves
[ 1285.551013][T17587] bond6 (unregistering): Released all slaves
[ 1285.565760][T17587] bond7 (unregistering): Released all slaves
[ 1285.579972][T17587] bond8 (unregistering): (slave veth5): Releasing backup interface
[ 1285.589930][T17587] bond8 (unregistering): Released all slaves
[ 1285.609276][T17587] bond9 (unregistering): Released all slaves
[ 1285.642047][ T5830] Bluetooth: hci5: command tx timeout
[ 1285.751312][T17587] : left promiscuous mode
[ 1285.802414][T17587] tipc: Disabling bearer <udp:syz2>
[ 1285.809999][T17587] tipc: Left network mode
[ 1286.296035][T17587] hsr_slave_0: left promiscuous mode
[ 1286.302246][T17587] hsr_slave_1: left promiscuous mode
[ 1286.308200][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1286.316409][T17587] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1286.325475][T17587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1286.333682][T17587] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1286.348438][T17587] veth1_vlan: left allmulticast mode
[ 1286.354174][T17587] veth1_macvtap: left promiscuous mode
[ 1286.359658][T17587] veth0_macvtap: left promiscuous mode
[ 1286.366784][T17587] veth1_vlan: left promiscuous mode
[ 1286.372139][T17587] veth0_vlan: left promiscuous mode
[ 1286.589890][T17587] team0 (unregistering): Port device team_slave_1 removed
[ 1286.605016][T17587] team0 (unregistering): Port device team_slave_0 removed
[ 1287.251678][T17415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1287.293937][T17259] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1287.373687][T17259] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1287.408841][T17259] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1287.445571][T17449] bond0: entered promiscuous mode
[ 1287.452453][T17449] bond_slave_0: entered promiscuous mode
[ 1287.463749][T17451] Cannot find del_set index 4 as target
[ 1287.468193][T17449] bond_slave_1: entered promiscuous mode
[ 1287.480833][T17449] batadv0: entered promiscuous mode
[ 1287.499137][T17449] bond0: left promiscuous mode
[ 1287.504789][T17449] bond_slave_0: left promiscuous mode
[ 1287.515813][T17449] bond_slave_1: left promiscuous mode
[ 1287.521930][T17449] batadv0: left promiscuous mode
[ 1287.541461][T17259] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1287.560310][T17453] batadv_slave_0: entered promiscuous mode
[ 1287.574244][T17452] batadv_slave_0: left promiscuous mode
[ 1287.725148][ T5830] Bluetooth: hci5: command tx timeout
[ 1287.830537][T17259] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1287.888302][T17259] 8021q: adding VLAN 0 to HW filter on device team0
[ 1287.902211][T17577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.909413][T17577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1287.927053][T17565] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.934262][T17565] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1287.957777][T17481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14454'.
[ 1288.167060][T17494] Cannot find del_set index 4 as target
[ 1288.435088][T17259] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1288.570127][T17259] veth0_vlan: entered promiscuous mode
[ 1288.600126][T17259] veth1_vlan: entered promiscuous mode
[ 1288.663410][T17259] veth0_macvtap: entered promiscuous mode
[ 1288.674562][T17259] veth1_macvtap: entered promiscuous mode
[ 1288.732801][T17259] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1288.760844][T17259] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1288.811883][T17577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.823836][T17565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.858111][T17565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1288.901837][T17565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1289.029125][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14475'.
[ 1289.106324][T17554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14475'.
[ 1289.178501][T17567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1289.216962][T17567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1289.228245][T17577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1289.261250][T17577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1289.380397][T17576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14476'.
[ 1289.578967][T17596] netlink: 'syz.4.14482': attribute type 1 has an invalid length.
[ 1289.590206][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14482'.
[ 1289.653050][T17601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14483'.
[ 1289.665332][T17601] netlink: 'syz.2.14483': attribute type 7 has an invalid length.
[ 1289.674008][T17601] netlink: 'syz.2.14483': attribute type 8 has an invalid length.
[ 1289.684221][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14483'.
[ 1289.714068][T17601] syzkaller1: entered promiscuous mode
[ 1289.719742][T17601] syzkaller1: entered allmulticast mode
[ 1289.919043][T17612] syzkaller0: entered promiscuous mode
[ 1289.931674][T17612] syzkaller0: entered allmulticast mode
[ 1290.051285][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14490'.
[ 1290.835199][T17641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14495'.
[ 1290.938498][T17642] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14495'.
[ 1291.696949][T17641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.704498][T17641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.741729][T17642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1291.749031][T17642] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1291.756564][T17642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1291.763752][T17642] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1291.805901][T17642] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.813219][T17642] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.313632][T17683] netlink: 'syz.1.14508': attribute type 2 has an invalid length.
[ 1292.375622][T17685] veth3: entered allmulticast mode
[ 1293.113151][T28252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1293.125683][T28252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1293.134482][T28252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1293.150536][T28252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1293.159317][T28252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1293.243717][T17718] lo speed is unknown, defaulting to 1000
[ 1293.513357][ T8387] syz_tun (unregistering): left allmulticast mode
[ 1293.537073][ T8387] syz_tun (unregistering): left promiscuous mode
[ 1293.568805][T17731] ip6gre0: Master is either lo or non-ether device
[ 1293.665185][T17740] __nla_validate_parse: 6 callbacks suppressed
[ 1293.665204][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14527'.
[ 1293.685103][T17718] wg1 speed is unknown, defaulting to 1000
[ 1293.732335][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14528'.
[ 1294.025282][T17754] FAULT_INJECTION: forcing a failure.
[ 1294.025282][T17754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1294.061065][T17754] CPU: 0 UID: 0 PID: 17754 Comm: syz.0.14530 Not tainted syzkaller #0 PREEMPT(full) 
[ 1294.061092][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1294.061103][T17754] Call Trace:
[ 1294.061111][T17754]  <TASK>
[ 1294.061119][T17754]  dump_stack_lvl+0xe8/0x150
[ 1294.061150][T17754]  should_fail_ex+0x412/0x560
[ 1294.061186][T17754]  _copy_from_user+0x2d/0xb0
[ 1294.061209][T17754]  __copy_msghdr+0x3c5/0x5b0
[ 1294.061237][T17754]  ___sys_sendmsg+0x213/0x360
[ 1294.061265][T17754]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1294.061293][T17754]  ? kstrtouint+0x6e/0xe0
[ 1294.061342][T17754]  ? __fget_files+0x2a/0x420
[ 1294.061358][T17754]  ? __fget_files+0x3a0/0x420
[ 1294.061385][T17754]  __sys_sendmmsg+0x27c/0x4e0
[ 1294.061413][T17754]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1294.061433][T17754]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1294.061481][T17754]  ? ksys_write+0x242/0x270
[ 1294.061504][T17754]  ? __pfx_ksys_write+0x10/0x10
[ 1294.061530][T17754]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1294.061555][T17754]  do_syscall_64+0x14d/0xf80
[ 1294.061577][T17754]  ? trace_irq_disable+0x3b/0x150
[ 1294.061593][T17754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.061611][T17754]  ? clear_bhb_loop+0x40/0x90
[ 1294.061634][T17754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.061652][T17754] RIP: 0033:0x7ff982f9c819
[ 1294.061669][T17754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1294.061685][T17754] RSP: 002b:00007ff9811ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1294.061704][T17754] RAX: ffffffffffffffda RBX: 00007ff983215fa0 RCX: 00007ff982f9c819
[ 1294.061718][T17754] RDX: 0000000000000001 RSI: 0000200000002840 RDI: 0000000000000003
[ 1294.061729][T17754] RBP: 00007ff9811ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1294.061740][T17754] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[ 1294.061750][T17754] R13: 00007ff983216038 R14: 00007ff983215fa0 R15: 00007ffee5690a98
[ 1294.061782][T17754]  </TASK>
[ 1294.772642][T17779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14535'.
[ 1294.779432][T17718] chnl_net:caif_netlink_parms(): no params data found
[ 1294.938569][T17782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14539'.
[ 1295.061590][T17797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14542'.
[ 1295.147964][T17802] GUP no longer grows the stack in syz.1.14545 (17802): 200000003000-20000000a000 (200000001000)
[ 1295.159397][T17802] CPU: 1 UID: 0 PID: 17802 Comm: syz.1.14545 Not tainted syzkaller #0 PREEMPT(full) 
[ 1295.159424][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1295.159438][T17802] Call Trace:
[ 1295.159446][T17802]  <TASK>
[ 1295.159454][T17802]  dump_stack_lvl+0xe8/0x150
[ 1295.159490][T17802]  __get_user_pages+0x2453/0x29d0
[ 1295.159520][T17802]  ? __lock_acquire+0x6b5/0x2cf0
[ 1295.159561][T17802]  ? __gup_longterm_locked+0xc4e/0x1630
[ 1295.159586][T17802]  ? down_read_killable+0x1bb/0x340
[ 1295.159616][T17802]  __gup_longterm_locked+0xdcf/0x1630
[ 1295.159668][T17802]  gup_fast_fallback+0x1d82/0x22e0
[ 1295.159726][T17802]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 1295.159758][T17802]  ? is_valid_gup_args+0x11f/0x200
[ 1295.159789][T17802]  ? get_user_pages_fast+0x4d/0xb0
[ 1295.159819][T17802]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[ 1295.159845][T17802]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1295.159881][T17802]  iov_iter_get_pages2+0x5e/0xa0
[ 1295.159905][T17802]  __se_sys_vmsplice+0x7b3/0x1490
[ 1295.159942][T17802]  ? __pfx___se_sys_vmsplice+0x10/0x10
[ 1295.159965][T17802]  ? __pfx_futex_wake+0x10/0x10
[ 1295.160005][T17802]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1295.160088][T17802]  do_syscall_64+0x14d/0xf80
[ 1295.160112][T17802]  ? trace_irq_disable+0x3b/0x150
[ 1295.160129][T17802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.160149][T17802]  ? clear_bhb_loop+0x40/0x90
[ 1295.160175][T17802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.160196][T17802] RIP: 0033:0x7f9d6d79c819
[ 1295.160214][T17802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1295.160230][T17802] RSP: 002b:00007f9d6e63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1295.160250][T17802] RAX: ffffffffffffffda RBX: 00007f9d6da15fa0 RCX: 00007f9d6d79c819
[ 1295.160264][T17802] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1295.160276][T17802] RBP: 00007f9d6d832c91 R08: 0000000000000000 R09: 0000000000000000
[ 1295.160289][T17802] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1295.160302][T17802] R13: 00007f9d6da16038 R14: 00007f9d6da15fa0 R15: 00007ffcb4138b18
[ 1295.160334][T17802]  </TASK>
[ 1295.162343][T17562] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.262266][T17809] Cannot find add_set index 0 as target
[ 1295.269257][ T5830] Bluetooth: hci0: command tx timeout
[ 1295.301889][T17807] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14545'.
[ 1295.306515][T17562] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.458696][T17567] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.486911][T17567] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.505423][T17718] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1295.521364][T17718] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1295.528810][T17718] bridge_slave_0: entered allmulticast mode
[ 1295.567117][T17718] bridge_slave_0: entered promiscuous mode
[ 1295.604433][T17562] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.618494][T17562] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.654133][T17718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1295.665290][T17718] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1295.681637][T17718] bridge_slave_1: entered allmulticast mode
[ 1295.699577][T17718] bridge_slave_1: entered promiscuous mode
[ 1295.778736][T17562] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.808422][T17562] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.840447][T17718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1295.877086][T17718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1295.919881][T17562] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.941189][T17562] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.992175][T17718] team0: Port device team_slave_0 added
[ 1296.005840][T17718] team0: Port device team_slave_1 added
[ 1296.022818][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14559'.
[ 1296.038703][T17839] syzkaller1: entered promiscuous mode
[ 1296.047921][T17839] syzkaller1: entered allmulticast mode
[ 1296.199161][T17718] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1296.228768][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.237605][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14562'.
[ 1296.289938][T17718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1296.290195][T17857] No such timeout policy "syz0"
[ 1296.304306][T17718] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1296.321407][T17856] No such timeout policy "syz0"
[ 1296.351159][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.393578][T17862] netlink: 'syz.1.14565': attribute type 1 has an invalid length.
[ 1296.425046][T17718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1296.553402][T17718] hsr_slave_0: entered promiscuous mode
[ 1296.566643][T17718] hsr_slave_1: entered promiscuous mode
[ 1296.583219][T17718] debugfs: 'hsr0' already exists in 'hsr'
[ 1296.589059][T17718] Cannot create hsr debugfs directory
[ 1296.660209][T17864] syzkaller0: entered promiscuous mode
[ 1296.670454][T17864] syzkaller0: entered allmulticast mode
[ 1296.813741][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14569'.
[ 1296.945308][T17887] bridge_slave_1: left allmulticast mode
[ 1296.958441][T17887] bridge_slave_1: left promiscuous mode
[ 1296.974108][T17887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1296.987462][T17887] bridge_slave_0: left allmulticast mode
[ 1296.994307][T17887] bridge_slave_0: left promiscuous mode
[ 1297.000168][T17887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.084026][T17903] netlink: 'syz.0.14570': attribute type 4 has an invalid length.
[ 1297.321216][ T5830] Bluetooth: hci0: command tx timeout
[ 1299.090726][T17562] ip6gretap0 (unregistering): left promiscuous mode
[ 1299.135178][T17562] bond4 (unregistering): (slave ip6erspan0): Releasing active interface
[ 1299.403364][ T5830] Bluetooth: hci0: command tx timeout
[ 1299.445391][T17562] bond7 (unregistering): (slave bridge4): Releasing backup interface
[ 1299.454072][T17562] bridge4 (unregistering): left promiscuous mode
[ 1299.724291][T17562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1299.734263][T17562] bond_slave_0: left allmulticast mode
[ 1299.741741][T17562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1299.751694][T17562] bond_slave_1: left allmulticast mode
[ 1299.758252][T17562] bond0 (unregistering): Released all slaves
[ 1299.772522][T17562] bond1 (unregistering): Released all slaves
[ 1299.786285][T17562] bond2 (unregistering): (slave vcan1): Releasing backup interface
[ 1299.794454][T17562] vcan1: left promiscuous mode
[ 1299.800527][T17562] bond2 (unregistering): Released all slaves
[ 1299.818400][T17562] bond3 (unregistering): Released all slaves
[ 1299.831809][T17562] bond4 (unregistering): Released all slaves
[ 1299.844971][T17562] bond5 (unregistering): Released all slaves
[ 1299.864462][T17562] bond6 (unregistering): Released all slaves
[ 1299.882515][T17562] bond7 (unregistering): Released all slaves
[ 1299.900700][T17562] bond8 (unregistering): Released all slaves
[ 1300.083811][T17899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1300.095311][T17899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1300.128489][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[ 1300.206988][T17924] sit1: entered promiscuous mode
[ 1300.222722][T17924] sit1: entered allmulticast mode
[ 1300.276508][T17562] tipc: Left network mode
[ 1300.281110][T17563] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1300.290229][T17563] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.546130][T17563] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1300.556122][T17563] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.570463][T17943] PKCS7: Unknown OID: [4] (bad)
[ 1300.576178][T17563] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1300.585908][T17943] PKCS7: Only support pkcs7_signedData type
[ 1300.601478][T17563] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1300.893998][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14588'.
[ 1301.482821][ T5830] Bluetooth: hci0: command tx timeout
[ 1302.474376][T18050] netlink: 'syz.2.14610': attribute type 1 has an invalid length.
[ 1302.640314][T18050] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1302.698833][T17562] hsr_slave_0: left promiscuous mode
[ 1302.724773][T17562] hsr_slave_1: left promiscuous mode
[ 1302.743322][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1302.762937][T17562] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1302.793990][T17562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1302.820846][T17562] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1302.824067][T18080] Cannot find del_set index 4 as target
[ 1302.854347][T17562] veth1_macvtap: left promiscuous mode
[ 1302.868029][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14616'.
[ 1302.868457][T17562] veth0_macvtap: left promiscuous mode
[ 1302.884755][T17562] veth1_vlan: left allmulticast mode
[ 1302.894575][T17562] veth1_vlan: left promiscuous mode
[ 1302.900100][T17562] veth0_vlan: left promiscuous mode
[ 1302.949032][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14617'.
[ 1302.962673][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14617'.
[ 1303.254995][T17562] macvlan1 (unregistering): left allmulticast mode
[ 1303.605902][T17562] team0 (unregistering): Port device team_slave_1 removed
[ 1303.647251][T17562] team0 (unregistering): Port device team_slave_0 removed
[ 1303.795602][T18059] bond1: (slave veth0_to_bond): making interface the new active one
[ 1303.805279][T18059] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1303.917746][T17718] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1303.967595][T17718] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1304.002180][T17718] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1304.057075][T17718] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1304.089739][T18134] netlink: 'syz.2.14623': attribute type 2 has an invalid length.
[ 1304.268990][T18150] vcan0: entered allmulticast mode
[ 1304.397524][T17718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1304.524938][T17718] 8021q: adding VLAN 0 to HW filter on device team0
[ 1304.543274][T17562] IPVS: stop unused estimator thread 0...
[ 1304.575244][T17564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1304.582411][T17564] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1304.686554][T17561] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1304.693780][T17561] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1304.850289][T17718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1304.891666][T17718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1305.014989][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14641'.
[ 1305.055410][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14641'.
[ 1305.090784][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14641'.
[ 1305.326093][T18214] dvmrp0: entered allmulticast mode
[ 1305.383485][T17718] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1305.528753][T18229] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1305.546420][T17718] veth0_vlan: entered promiscuous mode
[ 1305.579649][T17718] veth1_vlan: entered promiscuous mode
[ 1305.644218][T17718] veth0_macvtap: entered promiscuous mode
[ 1305.671762][T17718] veth1_macvtap: entered promiscuous mode
[ 1305.719541][T17718] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1305.756529][T17718] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1305.804235][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms
[ 1305.812409][    C1] lec:lec_tx_timeout: lec0
[ 1305.864048][T17562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.918930][T17562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.940834][T17562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.960047][T17562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.427156][T18253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14652'.
[ 1306.542046][ T6130] lec:lec_start_xmit: lec0:No lecd attached
[ 1308.255032][T18208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1308.332279][T17562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1308.345545][T17562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1308.424328][T17567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1308.449071][T17567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1308.514578][T18299] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.14656'.
[ 1308.584061][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.593790][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.608651][T18307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14658'.
[ 1308.614947][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.619756][T18309] netlink: 'syz.3.14519': attribute type 29 has an invalid length.
[ 1308.656270][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.680148][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.696758][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.707184][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14657'.
[ 1308.727588][T18313] netlink: 'syz.2.14660': attribute type 1 has an invalid length.
[ 1308.734643][T18315] netlink: 'syz.4.14661': attribute type 11 has an invalid length.
[ 1308.736081][T18313] netlink: 'syz.2.14660': attribute type 1 has an invalid length.
[ 1308.798979][T18313] tipc: Started in network mode
[ 1308.812927][T18313] tipc: Node identity ac14140f, cluster identity 4711
[ 1308.819994][T18313] tipc: New replicast peer: 255.255.255.255
[ 1308.832503][T18313] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1308.914297][T18322] netlink: 'syz.4.14664': attribute type 10 has an invalid length.
[ 1309.154387][T18333] macvlan0: entered promiscuous mode
[ 1309.166011][T18337] netlink: 'syz.3.14670': attribute type 7 has an invalid length.
[ 1309.222886][T28252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1309.234492][T28252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1309.244192][T28252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1309.256296][T28252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1309.263994][T28252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1309.312969][T18343] lo speed is unknown, defaulting to 1000
[ 1309.523131][T18343] wg1 speed is unknown, defaulting to 1000
[ 1309.971035][T19469] tipc: Node number set to 2886997007
[ 1310.058621][T18375] netlink: 'syz.2.14678': attribute type 1 has an invalid length.
[ 1310.119932][T18373] 0·: renamed from hsr_slave_1 (while UP)
[ 1310.128914][T18373] 0·: entered allmulticast mode
[ 1310.135331][T18373] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[ 1310.165478][T18375] bond2: (slave ip6gretap1): making interface the new active one
[ 1310.174452][T18375] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1310.183836][T18375] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1310.191890][T18375] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1310.548268][T18396] syzkaller0: entered promiscuous mode
[ 1310.554353][T18396] syzkaller0: entered allmulticast mode
[ 1311.329855][T28252] Bluetooth: hci2: command tx timeout
[ 1311.804281][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[ 1311.812336][    C1] lec:lec_tx_timeout: lec0
[ 1312.342303][T18343] chnl_net:caif_netlink_parms(): no params data found
[ 1312.566497][T18414] __nla_validate_parse: 38 callbacks suppressed
[ 1312.566518][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14691'.
[ 1312.766144][T18437] netlink: 'syz.2.14696': attribute type 10 has an invalid length.
[ 1312.777969][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1312.786706][T18437] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1312.828037][T18343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1312.835680][T18343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1312.844334][T18343] bridge_slave_0: entered allmulticast mode
[ 1312.852686][T18343] bridge_slave_0: entered promiscuous mode
[ 1312.865879][T18433] netlink: 'syz.3.14695': attribute type 9 has an invalid length.
[ 1312.919751][T18343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1312.947904][T18343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.951802][T18444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14697'.
[ 1312.965760][T18343] bridge_slave_1: entered allmulticast mode
[ 1312.996343][T18343] bridge_slave_1: entered promiscuous mode
[ 1313.401750][T28252] Bluetooth: hci2: command tx timeout
[ 1313.437085][T17579] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 1313.446543][T17579] bridge1 (unregistering): left promiscuous mode
[ 1313.596991][T17579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1313.606562][T17579] bond_slave_0: left allmulticast mode
[ 1313.614489][T17579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1313.624337][T17579] bond_slave_1: left allmulticast mode
[ 1313.630750][T17579] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[ 1313.645706][T17579] bridge_slave_1: left allmulticast mode
[ 1313.652327][T17579] bond0 (unregistering): Released all slaves
[ 1313.662549][T17579] bond1 (unregistering): Released all slaves
[ 1313.676732][T17579] bond2 (unregistering): Released all slaves
[ 1313.689178][T17579] bond3 (unregistering): Released all slaves
[ 1313.705091][T17579] bond4 (unregistering): Released all slaves
[ 1313.748099][T18343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1313.783626][T18465] gre1: entered promiscuous mode
[ 1313.788614][T18465] gre1: entered allmulticast mode
[ 1313.924318][T18343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1313.969370][T17579] tipc: Disabling bearer <udp:syz1>
[ 1313.988097][T17579] tipc: Left network mode
[ 1314.238963][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14706'.
[ 1314.262570][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14707'.
[ 1314.265829][T18343] team0: Port device team_slave_0 added
[ 1314.294439][T18343] team0: Port device team_slave_1 added
[ 1314.325589][T18489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1314.353038][T18489] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1314.491564][T18343] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1314.510416][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1314.562982][T18343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1314.575925][T18343] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1314.583025][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1314.622504][T18343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1314.933986][T18343] hsr_slave_0: entered promiscuous mode
[ 1314.950487][T18343] hsr_slave_1: entered promiscuous mode
[ 1314.962162][T18343] debugfs: 'hsr0' already exists in 'hsr'
[ 1314.963182][T18525] FAULT_INJECTION: forcing a failure.
[ 1314.963182][T18525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1314.972099][T18343] Cannot create hsr debugfs directory
[ 1315.025669][T18525] CPU: 0 UID: 0 PID: 18525 Comm: syz.4.14715 Not tainted syzkaller #0 PREEMPT(full) 
[ 1315.025694][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1315.025706][T18525] Call Trace:
[ 1315.025713][T18525]  <TASK>
[ 1315.025721][T18525]  dump_stack_lvl+0xe8/0x150
[ 1315.025751][T18525]  should_fail_ex+0x412/0x560
[ 1315.025781][T18525]  _copy_from_user+0x2d/0xb0
[ 1315.025802][T18525]  nr_rt_ioctl+0x933/0xf90
[ 1315.025835][T18525]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1315.025855][T18525]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1315.025892][T18525]  ? apparmor_capable+0x126/0x170
[ 1315.025920][T18525]  ? capable+0x88/0xe0
[ 1315.025943][T18525]  ? nr_ioctl+0x1b1/0x3b0
[ 1315.025964][T18525]  sock_do_ioctl+0x101/0x320
[ 1315.025992][T18525]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1315.026014][T18525]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1315.026053][T18525]  sock_ioctl+0x5c6/0x7f0
[ 1315.026075][T18525]  ? __pfx_sock_ioctl+0x10/0x10
[ 1315.026094][T18525]  ? __fget_files+0x2a/0x420
[ 1315.026106][T18525]  ? __fget_files+0x3a0/0x420
[ 1315.026118][T18525]  ? __fget_files+0x2a/0x420
[ 1315.026131][T18525]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1315.026152][T18525]  ? __pfx_sock_ioctl+0x10/0x10
[ 1315.026168][T18525]  __se_sys_ioctl+0xfc/0x170
[ 1315.026191][T18525]  do_syscall_64+0x14d/0xf80
[ 1315.026210][T18525]  ? trace_irq_disable+0x3b/0x150
[ 1315.026225][T18525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1315.026242][T18525]  ? clear_bhb_loop+0x40/0x90
[ 1315.026264][T18525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1315.026282][T18525] RIP: 0033:0x7f4d96b9c819
[ 1315.026299][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1315.026313][T18525] RSP: 002b:00007f4d97a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1315.026332][T18525] RAX: ffffffffffffffda RBX: 00007f4d96e15fa0 RCX: 00007f4d96b9c819
[ 1315.026350][T18525] RDX: 0000200000000100 RSI: 000000000000890c RDI: 0000000000000004
[ 1315.026361][T18525] RBP: 00007f4d97a7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1315.026372][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1315.026383][T18525] R13: 00007f4d96e16038 R14: 00007f4d96e15fa0 R15: 00007fff37aec9a8
[ 1315.026412][T18525]  </TASK>
[ 1315.497560][T28252] Bluetooth: hci2: command tx timeout
[ 1315.931474][T18561] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14726'.
[ 1315.988697][T18561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14726'.
[ 1316.064149][T18563] bond0: entered promiscuous mode
[ 1316.079429][T18563] bond_slave_0: entered promiscuous mode
[ 1316.101246][T18563] bond_slave_1: entered promiscuous mode
[ 1316.109390][T18563] batadv0: entered promiscuous mode
[ 1316.138345][T18563] bond0: left promiscuous mode
[ 1316.143605][T18563] bond_slave_0: left promiscuous mode
[ 1316.149197][T18563] bond_slave_1: left promiscuous mode
[ 1316.155874][T18563] batadv0: left promiscuous mode
[ 1316.175459][T18565] macvtap1: entered allmulticast mode
[ 1316.181091][T18565] veth0_macvtap: entered allmulticast mode
[ 1316.203810][T18560] syzkaller0: entered promiscuous mode
[ 1316.211096][T18560] syzkaller0: entered allmulticast mode
[ 1316.240704][T17579] hsr_slave_0: left promiscuous mode
[ 1316.253664][T17579] hsr_slave_1: left promiscuous mode
[ 1316.266057][T17579] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1316.287788][T17579] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1316.510170][T17579] team0 (unregistering): Port device team_slave_1 removed
[ 1316.690326][T18560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1316.700579][T18552] tipc: Resetting bearer <eth:syzkaller0>
[ 1316.738850][T18552] tipc: Disabling bearer <eth:syzkaller0>
[ 1317.022898][T18597] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14738'.
[ 1317.048580][T18597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14738'.
[ 1317.165231][T18604] openvswitch: netlink: Invalid VLAN frame
[ 1317.333624][T18609] IPVS: length: 8 != 1152
[ 1317.341178][T18610] IPVS: length: 8 != 1152
[ 1317.460311][T18343] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1317.463842][T17579] IPVS: stop unused estimator thread 0...
[ 1317.535307][T18343] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1317.562369][T28252] Bluetooth: hci2: command tx timeout
[ 1317.572634][T18343] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1317.573516][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14745'.
[ 1317.597263][T18343] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1317.735504][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14748'.
[ 1317.906757][T18644] veth3: entered allmulticast mode
[ 1317.950306][T18649] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.14749'.
[ 1318.047320][T18653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[ 1318.145428][T18343] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1318.185196][T18343] 8021q: adding VLAN 0 to HW filter on device team0
[ 1318.193303][T18658] netlink: 'syz.1.14752': attribute type 83 has an invalid length.
[ 1318.223215][T17562] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1318.230621][T17562] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1318.261082][   T29] audit: type=1800 audit(1775191172.353:9): pid=18661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14753" name="memory.events" dev="tmpfs" ino=353 res=0 errno=0
[ 1318.331105][T18663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14753'.
[ 1318.378389][T17564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1318.385767][T17564] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1318.647843][T18683] netlink: 'syz.2.14758': attribute type 1 has an invalid length.
[ 1318.829770][T18698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14762'.
[ 1318.839569][T18696] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.14761'.
[ 1319.314896][T18343] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1319.587534][T18343] veth0_vlan: entered promiscuous mode
[ 1319.617417][T18343] veth1_vlan: entered promiscuous mode
[ 1319.647973][T18742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14768'.
[ 1319.702891][T18752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14771'.
[ 1319.733249][T18752] netlink: 6 bytes leftover after parsing attributes in process `syz.3.14771'.
[ 1319.798705][T18343] veth0_macvtap: entered promiscuous mode
[ 1319.827999][T18343] veth1_macvtap: entered promiscuous mode
[ 1319.840136][T18754] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.14773'.
[ 1319.894009][T18343] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1319.957164][T18343] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1319.984822][T18765] Bluetooth: MGMT ver 1.23
[ 1320.005178][T17561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.044806][T17561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.134088][T17561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.156494][T17561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1320.317645][T17587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1320.347700][T17587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1320.457180][T17587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1320.475474][T17587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1320.509446][T18793] bond0: entered promiscuous mode
[ 1320.532659][T18793] bond_slave_0: entered promiscuous mode
[ 1320.557552][T18793] bond_slave_1: entered promiscuous mode
[ 1320.574498][T18793] batadv0: entered promiscuous mode
[ 1320.581789][T18793] hsr1: entered promiscuous mode
[ 1320.588327][T18793] hsr1: entered allmulticast mode
[ 1320.594817][T18793] bond0: entered allmulticast mode
[ 1320.602239][T18793] bond_slave_0: entered allmulticast mode
[ 1320.609659][T18793] bond_slave_1: entered allmulticast mode
[ 1320.617406][T18796] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1320.628705][T18793] batadv0: entered allmulticast mode
[ 1320.634839][T18793] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1320.647905][T18793] bond0: left promiscuous mode
[ 1320.653245][T18793] bond_slave_0: left promiscuous mode
[ 1320.658993][T18793] bond_slave_1: left promiscuous mode
[ 1320.665657][T18793] batadv0: left promiscuous mode
[ 1320.987379][T18820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1321.125756][T18833] xt_SECMARK: invalid mode: 9
[ 1321.595768][T18854] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1321.635164][T18854] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1321.644957][T18854] gretap1: entered promiscuous mode
[ 1321.659191][T18854] gretap1: entered allmulticast mode
[ 1321.837074][T18867] bridge0: port 1(batadv1) entered blocking state
[ 1321.844143][T18867] bridge0: port 1(batadv1) entered disabled state
[ 1321.853063][T18867] batadv1: entered allmulticast mode
[ 1321.860389][T18867] batadv1: entered promiscuous mode
[ 1322.067074][T18882] xt_SECMARK: invalid mode: 9
[ 1322.264260][T18893] openvswitch: netlink: IPv4 tun info is not correct
[ 1322.288744][T18891] xt_socket: unknown flags 0x50
[ 1322.331234][T17577] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[ 1322.340534][T17577] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[ 1322.401996][T18900] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1322.408492][T18900] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1322.426391][T18899] netlink: 'syz.4.14805': attribute type 1 has an invalid length.
[ 1322.448047][T18905] ip6t_srh: unknown srh invflags 4000
[ 1322.504119][T18899] bond2: entered promiscuous mode
[ 1322.571500][T18899] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1322.623441][T18916] syzkaller0: entered promiscuous mode
[ 1322.682835][T18916] syzkaller0: entered allmulticast mode
[ 1322.719359][T18899] bond2: (slave bridge3): making interface the new active one
[ 1322.727264][T18899] bridge3: entered promiscuous mode
[ 1322.734256][T18899] bond2: (slave bridge3): Enslaving as an active interface with an up link
[ 1322.744405][T18925] netlink: 'syz.0.14811': attribute type 10 has an invalid length.
[ 1322.768754][T18925] team0: Port device dummy0 added
[ 1322.917022][T18936] xt_SECMARK: invalid mode: 9
[ 1323.076047][T18941] __nla_validate_parse: 8 callbacks suppressed
[ 1323.076067][T18941] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.14816'.
[ 1323.155898][T18945] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14818'.
[ 1323.166731][T18945] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14818'.
[ 1323.327384][T18960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14821'.
[ 1323.443242][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14824'.
[ 1323.507012][T18974] netlink: 'syz.4.14825': attribute type 51 has an invalid length.
[ 1323.525524][T18968] netlink: 'syz.1.14824': attribute type 1 has an invalid length.
[ 1323.551229][T18971] netlink: 'syz.4.14825': attribute type 51 has an invalid length.
[ 1323.576941][T18968] bond6: entered promiscuous mode
[ 1323.611372][T18968] bond6: entered allmulticast mode
[ 1323.616797][T18968] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1323.651980][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1323.659582][T18974] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1323.699667][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14824'.
[ 1323.734988][T18974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1323.748363][T18985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14827'.
[ 1323.752356][T18974] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1323.795207][T18974] bond0: (slave batadv0): Releasing backup interface
[ 1323.869615][T18973] macvlan2: entered promiscuous mode
[ 1323.901047][T18973] macvlan2: entered allmulticast mode
[ 1323.913158][T18973] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1324.228412][T19009] openvswitch: netlink: ct_state flags 010000e0 unsupported
[ 1324.332985][T19019] bond0: entered promiscuous mode
[ 1324.340957][T19019] bond_slave_0: entered promiscuous mode
[ 1324.359751][T19019] bond_slave_1: entered promiscuous mode
[ 1324.368427][T19022] netlink: 'syz.3.14837': attribute type 1 has an invalid length.
[ 1324.378128][T19019] batadv0: entered promiscuous mode
[ 1324.387978][T19019] bond0: left promiscuous mode
[ 1324.393252][T19019] bond_slave_0: left promiscuous mode
[ 1324.399570][T19019] bond_slave_1: left promiscuous mode
[ 1324.405807][T19019] batadv0: left promiscuous mode
[ 1324.446878][T19012] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[ 1324.456385][T19024] syzkaller0: entered promiscuous mode
[ 1324.466063][T19024] syzkaller0: entered allmulticast mode
[ 1324.572559][T19022] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1324.589705][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14833'.
[ 1324.679782][T19048] digital: digital_start_poll: Unknown protocol
[ 1324.735458][T19022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14837'.
[ 1324.853589][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14841'.
[ 1325.137826][T19070] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1325.490172][T19095] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1325.592001][T19107] netlink: 'syz.1.14856': attribute type 1 has an invalid length.
[ 1325.604645][T19107] netlink: 'syz.1.14856': attribute type 2 has an invalid length.
[ 1325.614238][T19107] netlink: 'syz.1.14856': attribute type 1 has an invalid length.
[ 1325.683223][T19110] syzkaller1: entered promiscuous mode
[ 1325.689074][T19110] syzkaller1: entered allmulticast mode
[ 1325.763509][T19115] macvlan0: entered promiscuous mode
[ 1325.867399][T19124] batadv_slave_0: entered promiscuous mode
[ 1325.933823][T19126] syzkaller1: entered promiscuous mode
[ 1325.939350][T19126] syzkaller1: entered allmulticast mode
[ 1326.005014][T19136] bond2: entered promiscuous mode
[ 1326.013653][T19136] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1326.021115][T19124] batadv_slave_0: left promiscuous mode
[ 1326.237158][T16207] bond0: (slave bond_slave_0): interface is now down
[ 1326.246237][T16207] bond0: (slave bond_slave_1): interface is now down
[ 1326.261709][T16207] bond0: (slave batadv0): interface is now down
[ 1326.267358][T19161] "syz.3.14875" (19161) uses obsolete ecb(arc4) skcipher
[ 1326.282115][T19162] "syz.3.14875" (19162) uses obsolete ecb(arc4) skcipher
[ 1326.302164][T16207] bond0: now running without any active interface!
[ 1326.382148][T19469] IPVS: starting estimator thread 0...
[ 1326.456681][T19172] gretap0: entered promiscuous mode
[ 1326.464117][T19172] gretap0: left promiscuous mode
[ 1326.491852][T19169] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1326.516565][T19179] syzkaller1: entered promiscuous mode
[ 1326.553671][T19179] syzkaller1: entered allmulticast mode
[ 1326.635877][T19187] Bluetooth: MGMT ver 1.23
[ 1326.644848][T19187] Bluetooth: hci1: too big key_count value 32778
[ 1326.755068][T19193] netlink: 'syz.0.14882': attribute type 1 has an invalid length.
[ 1326.765879][T19193] netlink: 'syz.0.14882': attribute type 1 has an invalid length.
[ 1326.784756][T19193] netlink: 'syz.0.14882': attribute type 8 has an invalid length.
[ 1327.495677][T19223] syzkaller0: entered promiscuous mode
[ 1327.505251][T19223] syzkaller0: entered allmulticast mode
[ 1327.517698][T19232] syzkaller1: entered promiscuous mode
[ 1327.523734][T19232] syzkaller1: entered allmulticast mode
[ 1327.855629][T19247] nbd: must specify at least one socket
[ 1328.025887][T19266] bond0: entered promiscuous mode
[ 1328.031228][T19266] bond_slave_0: entered promiscuous mode
[ 1328.031674][T19178] udevd[19178]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1328.037123][T19266] bond_slave_1: entered promiscuous mode
[ 1328.084023][T19271] __nla_validate_parse: 12 callbacks suppressed
[ 1328.084040][T19271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14904'.
[ 1328.084252][T19266] batadv0: entered promiscuous mode
[ 1328.106705][T19266] hsr1: entered promiscuous mode
[ 1328.111956][T19266] hsr1: entered allmulticast mode
[ 1328.118011][T19266] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1328.126704][T19266] bond0: left promiscuous mode
[ 1328.132983][T19266] bond_slave_0: left promiscuous mode
[ 1328.138512][T19266] bond_slave_1: left promiscuous mode
[ 1328.147628][T19266] batadv0: left promiscuous mode
[ 1328.319218][T19280] FAULT_INJECTION: forcing a failure.
[ 1328.319218][T19280] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.369277][T19280] CPU: 1 UID: 0 PID: 19280 Comm: syz.1.14906 Not tainted syzkaller #0 PREEMPT(full) 
[ 1328.369302][T19280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1328.369314][T19280] Call Trace:
[ 1328.369321][T19280]  <TASK>
[ 1328.369330][T19280]  dump_stack_lvl+0xe8/0x150
[ 1328.369359][T19280]  should_fail_ex+0x412/0x560
[ 1328.369392][T19280]  should_failslab+0xa8/0x100
[ 1328.369418][T19280]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1328.369441][T19280]  ? __alloc_skb+0x1d0/0x7d0
[ 1328.369459][T19280]  ? __local_bh_enable_ip+0xd0/0x130
[ 1328.369488][T19280]  __alloc_skb+0x1d0/0x7d0
[ 1328.369507][T19280]  ? netlink_ack_tlv_len+0x6c/0x210
[ 1328.369527][T19280]  netlink_ack+0x146/0xa50
[ 1328.369543][T19280]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1328.369565][T19280]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1328.369589][T19280]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1328.369612][T19280]  ? __lock_acquire+0x6b5/0x2cf0
[ 1328.369647][T19280]  netlink_rcv_skb+0x2b6/0x4b0
[ 1328.369666][T19280]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1328.369691][T19280]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1328.369727][T19280]  ? down_read+0x272/0x2e0
[ 1328.369749][T19280]  ? genl_rcv+0xd/0x40
[ 1328.369773][T19280]  genl_rcv+0x28/0x40
[ 1328.369794][T19280]  netlink_unicast+0x80f/0x9b0
[ 1328.369829][T19280]  ? __pfx_netlink_unicast+0x10/0x10
[ 1328.369854][T19280]  ? netlink_sendmsg+0x650/0xb40
[ 1328.369871][T19280]  ? skb_put+0x11b/0x210
[ 1328.369891][T19280]  netlink_sendmsg+0x813/0xb40
[ 1328.369916][T19280]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1328.369938][T19280]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1328.369966][T19280]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1328.369989][T19280]  ____sys_sendmsg+0x972/0x9f0
[ 1328.370019][T19280]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1328.370049][T19280]  ? import_iovec+0x73/0xa0
[ 1328.370073][T19280]  ___sys_sendmsg+0x2a5/0x360
[ 1328.370102][T19280]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1328.370158][T19280]  ? __fget_files+0x2a/0x420
[ 1328.370174][T19280]  ? __fget_files+0x3a0/0x420
[ 1328.370200][T19280]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1328.370226][T19280]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1328.370258][T19280]  ? __pfx_ksys_write+0x10/0x10
[ 1328.370295][T19280]  do_syscall_64+0x14d/0xf80
[ 1328.370317][T19280]  ? trace_irq_disable+0x3b/0x150
[ 1328.370334][T19280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.370352][T19280]  ? clear_bhb_loop+0x40/0x90
[ 1328.370374][T19280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.370392][T19280] RIP: 0033:0x7f9d6d79c819
[ 1328.370409][T19280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1328.370424][T19280] RSP: 002b:00007f9d6e63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1328.370443][T19280] RAX: ffffffffffffffda RBX: 00007f9d6da15fa0 RCX: 00007f9d6d79c819
[ 1328.370456][T19280] RDX: 0000000024008054 RSI: 0000200000001300 RDI: 0000000000000004
[ 1328.370468][T19280] RBP: 00007f9d6e63c090 R08: 0000000000000000 R09: 0000000000000000
[ 1328.370479][T19280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1328.370490][T19280] R13: 00007f9d6da16038 R14: 00007f9d6da15fa0 R15: 00007ffcb4138b18
[ 1328.370520][T19280]  </TASK>
[ 1328.745144][T19284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14909'.
[ 1328.825558][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.839117][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.848620][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.857946][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.888855][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.907077][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.925526][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1328.953012][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14912'.
[ 1329.164029][T19312] openvswitch: netlink: Key type 346 is out of range max 32
[ 1329.259120][T19316] validate_nla: 1 callbacks suppressed
[ 1329.259139][T19316] netlink: 'syz.4.14919': attribute type 12 has an invalid length.
[ 1329.687009][T19341] x_tables: duplicate underflow at hook 2
[ 1329.762009][T19346] netlink: 'syz.0.14928': attribute type 1 has an invalid length.
[ 1329.864859][T19353] bond1: (slave gretap1): making interface the new active one
[ 1329.874150][T19353] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1330.110036][T19365] FAULT_INJECTION: forcing a failure.
[ 1330.110036][T19365] name failslab, interval 1, probability 0, space 0, times 0
[ 1330.157881][T19365] CPU: 0 UID: 0 PID: 19365 Comm: syz.0.14934 Not tainted syzkaller #0 PREEMPT(full) 
[ 1330.157907][T19365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1330.157918][T19365] Call Trace:
[ 1330.157926][T19365]  <TASK>
[ 1330.157935][T19365]  dump_stack_lvl+0xe8/0x150
[ 1330.157965][T19365]  should_fail_ex+0x412/0x560
[ 1330.157997][T19365]  should_failslab+0xa8/0x100
[ 1330.158020][T19365]  ? skb_clone+0x212/0x3a0
[ 1330.158043][T19365]  kmem_cache_alloc_noprof+0x87/0x650
[ 1330.158080][T19365]  skb_clone+0x212/0x3a0
[ 1330.158106][T19365]  __netlink_deliver_tap+0x404/0x850
[ 1330.158137][T19365]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1330.158158][T19365]  netlink_deliver_tap+0x19c/0x1b0
[ 1330.158177][T19365]  netlink_sendskb+0x68/0x140
[ 1330.158205][T19365]  netlink_unicast+0x3a3/0x9b0
[ 1330.158239][T19365]  ? __pfx_netlink_unicast+0x10/0x10
[ 1330.158273][T19365]  netlink_rcv_skb+0x2b6/0x4b0
[ 1330.158293][T19365]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1330.158317][T19365]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1330.158352][T19365]  ? down_read+0x272/0x2e0
[ 1330.158374][T19365]  ? genl_rcv+0xd/0x40
[ 1330.158397][T19365]  genl_rcv+0x28/0x40
[ 1330.158418][T19365]  netlink_unicast+0x80f/0x9b0
[ 1330.158451][T19365]  ? __pfx_netlink_unicast+0x10/0x10
[ 1330.158478][T19365]  ? netlink_sendmsg+0x650/0xb40
[ 1330.158495][T19365]  ? skb_put+0x11b/0x210
[ 1330.158518][T19365]  netlink_sendmsg+0x813/0xb40
[ 1330.158546][T19365]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1330.158574][T19365]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1330.158602][T19365]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1330.158626][T19365]  ____sys_sendmsg+0x972/0x9f0
[ 1330.158657][T19365]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1330.158688][T19365]  ? import_iovec+0x73/0xa0
[ 1330.158713][T19365]  ___sys_sendmsg+0x2a5/0x360
[ 1330.158741][T19365]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1330.158799][T19365]  ? __fget_files+0x2a/0x420
[ 1330.158814][T19365]  ? __fget_files+0x3a0/0x420
[ 1330.158841][T19365]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1330.158866][T19365]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1330.158898][T19365]  ? __pfx_ksys_write+0x10/0x10
[ 1330.158930][T19365]  do_syscall_64+0x14d/0xf80
[ 1330.158951][T19365]  ? trace_irq_disable+0x3b/0x150
[ 1330.158967][T19365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1330.158985][T19365]  ? clear_bhb_loop+0x40/0x90
[ 1330.159007][T19365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1330.159024][T19365] RIP: 0033:0x7f769819c819
[ 1330.159041][T19365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1330.159056][T19365] RSP: 002b:00007f7699131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1330.159080][T19365] RAX: ffffffffffffffda RBX: 00007f7698415fa0 RCX: 00007f769819c819
[ 1330.159093][T19365] RDX: 0000000024008054 RSI: 0000200000001300 RDI: 0000000000000004
[ 1330.159105][T19365] RBP: 00007f7699131090 R08: 0000000000000000 R09: 0000000000000000
[ 1330.159116][T19365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1330.159127][T19365] R13: 00007f7698416038 R14: 00007f7698415fa0 R15: 00007ffe053d13a8
[ 1330.159157][T19365]  </TASK>
[ 1330.945772][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1330.956399][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1330.965130][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1330.975234][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1330.984333][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1331.061775][T19385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1331.087243][T19384] lo speed is unknown, defaulting to 1000
[ 1331.334211][T19398] syzkaller0: entered promiscuous mode
[ 1331.340203][T19398] syzkaller0: entered allmulticast mode
[ 1331.352623][T19402] FAULT_INJECTION: forcing a failure.
[ 1331.352623][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1331.376140][T19402] CPU: 0 UID: 0 PID: 19402 Comm: syz.2.14947 Not tainted syzkaller #0 PREEMPT(full) 
[ 1331.376164][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1331.376174][T19402] Call Trace:
[ 1331.376182][T19402]  <TASK>
[ 1331.376191][T19402]  dump_stack_lvl+0xe8/0x150
[ 1331.376227][T19402]  should_fail_ex+0x412/0x560
[ 1331.376259][T19402]  _copy_from_user+0x2d/0xb0
[ 1331.376282][T19402]  kstrtouint_from_user+0xd6/0x180
[ 1331.376311][T19402]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1331.376353][T19402]  proc_fail_nth_write+0x8e/0x210
[ 1331.376380][T19402]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1331.376412][T19402]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1331.376440][T19402]  vfs_write+0x29a/0xb90
[ 1331.376470][T19402]  ? __pfx_vfs_write+0x10/0x10
[ 1331.376493][T19402]  ? __fget_files+0x2a/0x420
[ 1331.376515][T19402]  ? __fget_files+0x3a0/0x420
[ 1331.376531][T19402]  ? __fget_files+0x2a/0x420
[ 1331.376557][T19402]  ksys_write+0x150/0x270
[ 1331.376580][T19402]  ? __pfx_ksys_write+0x10/0x10
[ 1331.376612][T19402]  do_syscall_64+0x14d/0xf80
[ 1331.376635][T19402]  ? trace_irq_disable+0x3b/0x150
[ 1331.376652][T19402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.376671][T19402]  ? clear_bhb_loop+0x40/0x90
[ 1331.376692][T19402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.376710][T19402] RIP: 0033:0x7fbb65b5d04e
[ 1331.376731][T19402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1331.376746][T19402] RSP: 002b:00007fbb63dedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1331.376765][T19402] RAX: ffffffffffffffda RBX: 00007fbb63dee6c0 RCX: 00007fbb65b5d04e
[ 1331.376779][T19402] RDX: 0000000000000001 RSI: 00007fbb63dee0a0 RDI: 0000000000000005
[ 1331.376790][T19402] RBP: 00007fbb63dee090 R08: 0000000000000000 R09: 0000000000000000
[ 1331.376801][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1331.376812][T19402] R13: 00007fbb65e16038 R14: 00007fbb65e15fa0 R15: 00007ffcba596028
[ 1331.376853][T19402]  </TASK>
[ 1331.394898][T19384] wg1 speed is unknown, defaulting to 1000
[ 1331.709177][T19415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1331.871621][T19420] netlink: 'syz.4.14953': attribute type 13 has an invalid length.
[ 1333.081301][T28252] Bluetooth: hci3: command tx timeout
[ 1333.276253][T17562] bond0: (slave bond_slave_0): interface is now down
[ 1333.300988][T17562] bond0: (slave bond_slave_1): interface is now down
[ 1333.318785][T17562] bond0: now running without any active interface!
[ 1333.534590][T19433] __nla_validate_parse: 37 callbacks suppressed
[ 1333.534613][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14959'.
[ 1333.581162][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14959'.
[ 1333.823741][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14966'.
[ 1333.841239][T19453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14966'.
[ 1333.905524][T19453] geneve2: entered promiscuous mode
[ 1333.915078][T19453] geneve2: entered allmulticast mode
[ 1334.026918][T19384] chnl_net:caif_netlink_parms(): no params data found
[ 1334.150253][T19465] IPv6: sit1: Disabled Multicast RS
[ 1334.161162][T19472] netlink: 'syz.2.14970': attribute type 1 has an invalid length.
[ 1334.192479][T19472] netlink: 'syz.2.14970': attribute type 1 has an invalid length.
[ 1334.201975][T19475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14972'.
[ 1334.224375][T19472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14970'.
[ 1334.231015][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14972'.
[ 1334.308825][T19384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1334.323800][T19384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.331976][T19384] bridge_slave_0: entered allmulticast mode
[ 1334.339731][T19384] bridge_slave_0: entered promiscuous mode
[ 1334.350182][T19384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1334.357576][T19384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1334.366524][T19384] bridge_slave_1: entered allmulticast mode
[ 1334.374923][T19384] bridge_slave_1: entered promiscuous mode
[ 1334.469295][T19384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1334.517371][T19384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1334.593377][T19488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1334.624710][T19384] team0: Port device team_slave_0 added
[ 1334.659420][T19384] team0: Port device team_slave_1 added
[ 1334.775873][T19384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1334.788044][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1334.820679][T19384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1334.909277][T19384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1334.941209][T19384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.008353][T19384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1335.038978][T19497] bond0: entered promiscuous mode
[ 1335.051148][T19497] bond_slave_0: entered promiscuous mode
[ 1335.064465][T19500] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1335.074438][T19497] bond_slave_1: entered promiscuous mode
[ 1335.093133][T19497] batadv0: entered promiscuous mode
[ 1335.112284][T19497] hsr1: entered promiscuous mode
[ 1335.129701][T19497] hsr1: entered allmulticast mode
[ 1335.135950][T19497] bond0: entered allmulticast mode
[ 1335.157230][T19497] bond_slave_0: entered allmulticast mode
[ 1335.162727][T28252] Bluetooth: hci3: command tx timeout
[ 1335.169465][T19497] bond_slave_1: entered allmulticast mode
[ 1335.176967][T19497] batadv0: entered allmulticast mode
[ 1335.201911][T19497] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1335.215066][T19497] bond0: left promiscuous mode
[ 1335.227958][T19497] bond_slave_0: left promiscuous mode
[ 1335.235131][T19497] bond_slave_1: left promiscuous mode
[ 1335.254250][T19497] batadv0: left promiscuous mode
[ 1335.480263][T19384] hsr_slave_0: entered promiscuous mode
[ 1335.493548][T19384] hsr_slave_1: entered promiscuous mode
[ 1335.500275][T19384] debugfs: 'hsr0' already exists in 'hsr'
[ 1335.506443][T19384] Cannot create hsr debugfs directory
[ 1335.651943][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14984'.
[ 1335.720163][T19519] macvlan0: left promiscuous mode
[ 1335.738467][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14984'.
[ 1335.750823][T19548] netlink: 'syz.4.14986': attribute type 10 has an invalid length.
[ 1335.840324][T19548] veth0_vlan: left promiscuous mode
[ 1335.867184][T19548] veth0_vlan: entered promiscuous mode
[ 1335.915370][T19548] team0: Device veth0_vlan failed to register rx_handler
[ 1336.056886][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14988'.
[ 1336.138794][T19564] netlink: 'syz.2.14990': attribute type 1 has an invalid length.
[ 1336.316652][T19572] xt_SECMARK: invalid mode: 9
[ 1336.334553][T19384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.352284][T19384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.551562][T19384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.574686][T19384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.605779][T19573] syzkaller1: entered promiscuous mode
[ 1336.615512][T19573] syzkaller1: entered allmulticast mode
[ 1336.702503][T19587] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1336.860108][T19384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.885567][T19384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.939869][T19600] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1336.970063][T19604] openvswitch: netlink: IPv4 tun info is not correct
[ 1336.981487][T19600] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1336.999043][T19600] gretap2: entered promiscuous mode
[ 1337.009668][T19600] gretap2: entered allmulticast mode
[ 1337.241293][T28252] Bluetooth: hci3: command tx timeout
[ 1337.334319][T19384] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1337.368979][T19384] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1337.417755][T19384] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1337.430206][T19384] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1337.562596][T19384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1337.662747][T19384] 8021q: adding VLAN 0 to HW filter on device team0
[ 1337.684100][T18118] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1337.691226][T18118] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1337.713058][T18118] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1337.720200][T18118] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1338.204399][T19384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1338.311877][T19384] veth0_vlan: entered promiscuous mode
[ 1338.354533][T19384] veth1_vlan: entered promiscuous mode
[ 1338.462853][T19384] veth0_macvtap: entered promiscuous mode
[ 1338.485948][T19384] veth1_macvtap: entered promiscuous mode
[ 1338.574912][T19384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1338.599110][T19384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1338.627773][T18118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.661540][T18118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.670378][T18118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.706825][T18118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.809667][T19664] lo speed is unknown, defaulting to 1000
[ 1338.908742][T18118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1338.947096][T18118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.124225][T19533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1339.141567][T19533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.175092][T19664] wg1 speed is unknown, defaulting to 1000
[ 1339.321932][T28252] Bluetooth: hci3: command tx timeout
[ 1339.539934][T19702] __nla_validate_parse: 10 callbacks suppressed
[ 1339.539955][T19702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1339.556397][T19702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1339.629853][T19709] xt_SECMARK: invalid mode: 9
[ 1339.639453][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15028'.
[ 1339.777421][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15034'.
[ 1340.026474][T19730] netlink: 'syz.0.15038': attribute type 1 has an invalid length.
[ 1340.191451][T19535] bond0: (slave bond_slave_0): interface is now down
[ 1340.217075][T19535] bond0: (slave bond_slave_1): interface is now down
[ 1340.254723][T19535] bond0: now running without any active interface!
[ 1340.502752][T19747] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15046'.
[ 1340.535014][T19750] netlink: 'syz.2.15047': attribute type 10 has an invalid length.
[ 1340.554939][T19757] netlink: 80 bytes leftover after parsing attributes in process `syz.3.15046'.
[ 1340.608022][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15048'.
[ 1340.618594][T19751] lo speed is unknown, defaulting to 1000
[ 1340.696405][ T5939] IPVS: starting estimator thread 0...
[ 1340.776684][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15050'.
[ 1340.793941][T19772] IPVS: length: 24 != 55320
[ 1340.802447][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15052'.
[ 1340.812485][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15052'.
[ 1340.821433][T19764] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1340.856784][T19534] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.881317][T19534] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.903683][T19534] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1340.939305][T19534] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1341.019553][T19751] wg1 speed is unknown, defaulting to 1000
[ 1341.066030][T19778] vcan1: entered promiscuous mode
[ 1341.078748][T19778] vcan1: entered allmulticast mode
[ 1341.130408][T19784] syzkaller0: entered promiscuous mode
[ 1341.140097][T19784] syzkaller0: entered allmulticast mode
[ 1341.423494][T19799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1341.447048][T19799] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1341.756496][T19813] openvswitch: netlink: Flow key attr not present in new flow.
[ 1341.786324][T19818] syzkaller1: entered promiscuous mode
[ 1341.794147][T19818] syzkaller1: entered allmulticast mode
[ 1341.892340][T19820] netlink: 'syz.2.15068': attribute type 10 has an invalid length.
[ 1341.920438][T19820] dummy0: entered promiscuous mode
[ 1341.951511][T19820] bridge0: port 3(dummy0) entered blocking state
[ 1341.982382][T19820] bridge0: port 3(dummy0) entered disabled state
[ 1342.009834][T19820] dummy0: entered allmulticast mode
[ 1342.030044][T19827] x_tables: duplicate entry at hook 3
[ 1342.109440][T19820] macsec1: entered promiscuous mode
[ 1342.115165][T19820] bridge0: entered promiscuous mode
[ 1342.122146][T19820] macsec1: entered allmulticast mode
[ 1342.127462][T19820] bridge0: entered allmulticast mode
[ 1342.156885][T19820] bridge0: port 4(macsec1) entered blocking state
[ 1342.174128][T19820] bridge0: port 4(macsec1) entered disabled state
[ 1342.194855][T19820] bridge0: left allmulticast mode
[ 1342.200181][T19820] bridge0: left promiscuous mode
[ 1342.234957][T19829] bond0: entered promiscuous mode
[ 1342.240012][T19829] bond_slave_0: entered promiscuous mode
[ 1342.283613][T19829] bond_slave_1: entered promiscuous mode
[ 1342.290470][T19829] batadv0: entered promiscuous mode
[ 1342.311231][T19829] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1342.332262][T19829] hsr1: entered promiscuous mode
[ 1342.337275][T19829] hsr1: entered allmulticast mode
[ 1342.342989][T19829] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1342.358649][T19829] bond0: left promiscuous mode
[ 1342.363860][T19829] bond_slave_0: left promiscuous mode
[ 1342.369468][T19829] bond_slave_1: left promiscuous mode
[ 1342.378341][T19829] batadv0: left promiscuous mode
[ 1342.598613][T19860] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1342.614936][T19861] xt_SECMARK: invalid mode: 9
[ 1342.637760][T19534] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1342.659219][T19534] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1342.691016][T19531] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1342.751964][T19535] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1342.819427][T19873] netlink: 'syz.0.15083': attribute type 83 has an invalid length.
[ 1342.862912][T19877] netlink: 'syz.0.15083': attribute type 83 has an invalid length.
[ 1342.997914][T19887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1343.005682][T19887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1343.092144][T19889] vlan2: entered promiscuous mode
[ 1343.097222][T19889] bridge0: entered promiscuous mode
[ 1343.250104][T19901] xt_SECMARK: invalid mode: 9
[ 1343.584501][T19919] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1343.589038][T19924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1343.738625][T19934] bond0: entered promiscuous mode
[ 1343.744661][T19934] bond_slave_0: entered promiscuous mode
[ 1343.750551][T19934] bond_slave_1: entered promiscuous mode
[ 1343.759647][T19934] batadv0: entered promiscuous mode
[ 1343.771548][T19934] hsr1: entered promiscuous mode
[ 1343.776532][T19934] hsr1: entered allmulticast mode
[ 1343.786258][T19934] bond0: entered allmulticast mode
[ 1343.794840][T19934] bond_slave_0: entered allmulticast mode
[ 1343.800787][T19934] bond_slave_1: entered allmulticast mode
[ 1343.807029][T19934] batadv0: entered allmulticast mode
[ 1343.812889][T19934] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1343.821207][T19934] bond0: left promiscuous mode
[ 1343.826094][T19934] bond_slave_0: left promiscuous mode
[ 1343.831808][T19934] bond_slave_1: left promiscuous mode
[ 1343.838195][T19934] batadv0: left promiscuous mode
[ 1343.850224][T19939] ±ÿ: renamed from team_slave_1 (while UP)
[ 1344.007824][T19946] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes.
[ 1344.028260][T19944] syzkaller0: entered promiscuous mode
[ 1344.037755][T19944] syzkaller0: entered allmulticast mode
[ 1344.573829][T19988] delete_channel: no stack
[ 1344.585746][T19989] netlink: 'syz.3.15122': attribute type 4 has an invalid length.
[ 1344.594784][T19990] Bluetooth: MGMT ver 1.23
[ 1344.797864][T19987] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1344.805609][T19987] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.126905][T19987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1345.133119][T20001] __nla_validate_parse: 18 callbacks suppressed
[ 1345.133137][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15125'.
[ 1345.258349][T19533] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.272348][T19984] delete_channel: no stack
[ 1345.277689][T19533] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.288577][T19533] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.325733][T19533] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.738575][  T903] IPVS: starting estimator thread 0...
[ 1345.763870][T20030] vlan2: entered allmulticast mode
[ 1345.769145][T20030] bridge0: entered allmulticast mode
[ 1345.782836][T20030] bridge0: port 3(vlan2) entered blocking state
[ 1345.803829][T20030] bridge0: port 3(vlan2) entered disabled state
[ 1345.852008][T20036] IPVS: using max 42 ests per chain, 100800 per kthread
[ 1345.859596][T20044] vcan1: entered promiscuous mode
[ 1345.868672][T20044] vcan1: entered allmulticast mode
[ 1345.873752][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15140'.
[ 1346.168143][T20060] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.15144'.
[ 1346.298321][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15148'.
[ 1346.308549][T20069] xt_SECMARK: invalid mode: 9
[ 1346.316918][T20071] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15149'.
[ 1346.336902][T20071] netlink: 'syz.3.15149': attribute type 3 has an invalid length.
[ 1346.344166][T20072] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15148'.
[ 1346.554152][T20086] netlink: 9216 bytes leftover after parsing attributes in process `syz.3.15155'.
[ 1346.650081][T20096] lo speed is unknown, defaulting to 1000
[ 1346.663344][T20098] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.15158'.
[ 1346.996452][T20096] wg1 speed is unknown, defaulting to 1000
[ 1347.316955][T20132] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.15172'.
[ 1347.328308][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15171'.
[ 1347.558071][T20144] bond0: entered promiscuous mode
[ 1347.563587][T20144] bond_slave_0: entered promiscuous mode
[ 1347.570767][T20144] bond_slave_1: entered promiscuous mode
[ 1347.605837][T20144] batadv0: entered promiscuous mode
[ 1347.615991][T20144] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1347.627976][T20144] hsr1: entered promiscuous mode
[ 1347.634495][T20144] hsr1: entered allmulticast mode
[ 1347.640299][T20144] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1347.659623][T20144] bond0: left promiscuous mode
[ 1347.669727][T20144] bond_slave_0: left promiscuous mode
[ 1347.678839][T20144] bond_slave_1: left promiscuous mode
[ 1347.692898][T20144] batadv0: left promiscuous mode
[ 1347.863626][T20160] batadv_slave_0: entered promiscuous mode
[ 1347.967468][T20164] syzkaller0: entered promiscuous mode
[ 1347.976547][T20164] syzkaller0: entered allmulticast mode
[ 1348.018905][T20159] batadv_slave_0: left promiscuous mode
[ 1348.484259][T20189] bond0: entered promiscuous mode
[ 1348.494491][T20189] bond_slave_0: entered promiscuous mode
[ 1348.494521][T20195] netlink: 'syz.0.15191': attribute type 2 has an invalid length.
[ 1348.502192][T20189] bond_slave_1: entered promiscuous mode
[ 1348.517807][T20189] batadv0: entered promiscuous mode
[ 1348.541211][T20189] bond0: left promiscuous mode
[ 1348.546018][T20189] bond_slave_0: left promiscuous mode
[ 1348.554808][T20189] bond_slave_1: left promiscuous mode
[ 1348.560788][T20189] batadv0: left promiscuous mode
[ 1348.831331][T20216] netlink: 'syz.0.15199': attribute type 1 has an invalid length.
[ 1348.925858][T20216] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1348.995657][T20223] bond2: (slave veth3): Enslaving as an active interface with a down link
[ 1349.020577][T20216] team0: Port device dummy0 removed
[ 1349.059185][T20216] bond2: (slave dummy0): making interface the new active one
[ 1349.078308][T20216] dummy0: entered promiscuous mode
[ 1349.085242][T20216] bond2: (slave dummy0): Enslaving as an active interface with an up link
[ 1349.098677][T20223] bond2: (slave dummy0): Releasing active interface
[ 1349.113953][T20223] dummy0 (unregistering): left promiscuous mode
[ 1349.132930][T20216] netlink: 'syz.0.15199': attribute type 3 has an invalid length.
[ 1349.474317][T20261] netlink: 'syz.4.15216': attribute type 21 has an invalid length.
[ 1349.503519][T20261] netlink: 'syz.4.15216': attribute type 6 has an invalid length.
[ 1349.545559][T20265] xt_hashlimit: size too large, truncated to 1048576
[ 1349.717653][T20282] xt_hashlimit: overflow, rate too high: 0
[ 1350.148800][T20306] bond0: entered promiscuous mode
[ 1350.155240][T20306] bond_slave_0: entered promiscuous mode
[ 1350.164828][T20306] bond_slave_1: entered promiscuous mode
[ 1350.170768][T20306] batadv0: entered promiscuous mode
[ 1350.193264][T20306] bond0: left promiscuous mode
[ 1350.198341][T20306] bond_slave_0: left promiscuous mode
[ 1350.200081][T20308] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1350.206400][T20306] bond_slave_1: left promiscuous mode
[ 1350.224612][T20306] batadv0: left promiscuous mode
[ 1350.347656][T20316] lo speed is unknown, defaulting to 1000
[ 1350.427844][T20319] __nla_validate_parse: 15 callbacks suppressed
[ 1350.427891][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15231'.
[ 1350.490374][T20319] macvlan0: left promiscuous mode
[ 1350.502168][T20322] netlink: 'syz.4.15232': attribute type 13 has an invalid length.
[ 1350.649094][T20329] netlink: 228 bytes leftover after parsing attributes in process `syz.3.15235'.
[ 1350.685763][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15235'.
[ 1350.747009][T20332] veth0: entered promiscuous mode
[ 1350.757805][T20333] veth0 (unregistering): left promiscuous mode
[ 1350.790140][T20316] wg1 speed is unknown, defaulting to 1000
[ 1350.984937][T20343] erspan0: entered promiscuous mode
[ 1351.024910][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15240'.
[ 1351.038700][T20344] erspan0: left promiscuous mode
[ 1351.054997][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15240'.
[ 1351.253826][T20359] batadv1: left allmulticast mode
[ 1351.260254][T20359] batadv1: left promiscuous mode
[ 1351.268054][T20359] bridge0: port 1(batadv1) entered disabled state
[ 1351.417746][T20367] netlink: 'syz.2.15245': attribute type 12 has an invalid length.
[ 1351.430133][T20365] syzkaller0: entered promiscuous mode
[ 1351.436365][T20365] syzkaller0: entered allmulticast mode
[ 1352.299371][T20393] netlink: 'syz.4.15259': attribute type 10 has an invalid length.
[ 1352.345219][T20393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15259'.
[ 1352.345462][T20395] syzkaller1: entered promiscuous mode
[ 1352.379903][T20395] syzkaller1: entered allmulticast mode
[ 1352.413781][T20403] netlink: 'syz.2.15257': attribute type 8 has an invalid length.
[ 1352.430752][T20400] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2
[ 1352.451513][T20400] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @
[ 1352.518318][T20405] netlink: 666 bytes leftover after parsing attributes in process `syz.4.15262'.
[ 1352.543092][T20405] ip6erspan1: entered allmulticast mode
[ 1352.573568][T20407] netlink: 9216 bytes leftover after parsing attributes in process `syz.2.15263'.
[ 1352.855271][T20431] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15271'.
[ 1352.872089][T20431] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1353.056942][T20447] syzkaller1: entered promiscuous mode
[ 1353.063072][T20447] syzkaller1: entered allmulticast mode
[ 1353.169464][T20452] netlink: 'syz.1.15277': attribute type 1 has an invalid length.
[ 1353.799528][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15281'.
[ 1353.826288][T20471] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1353.839944][T20471] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1353.851886][T20477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1353.872198][T20471] gretap2: entered promiscuous mode
[ 1353.877918][T20471] gretap2: entered allmulticast mode
[ 1353.910202][T20480] netlink: 'syz.4.15284': attribute type 1 has an invalid length.
[ 1353.951278][T20480] bond3: entered promiscuous mode
[ 1353.956595][T20480] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1354.264548][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.281675][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.311383][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.328282][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.362446][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.380818][T20512] netlink: 'syz.0.15294': attribute type 1 has an invalid length.
[ 1354.385835][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.422147][T19533] bond0: (slave bond_slave_0): interface is now down
[ 1354.451829][T20515] xt_SECMARK: invalid mode: 9
[ 1354.472819][T19533] bond0: (slave bond_slave_1): interface is now down
[ 1354.480832][T20508] bond3: (slave geneve2): making interface the new active one
[ 1354.492080][T20508] bond3: (slave geneve2): Enslaving as an active interface with an up link
[ 1354.522267][T18118] bond0: (slave bond_slave_0): interface is now down
[ 1354.529076][T18118] bond0: (slave bond_slave_1): interface is now down
[ 1354.543500][T19534] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1354.561178][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.567896][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.584165][T19533] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1354.608625][T20512] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1354.627602][T20522] netlink: 'syz.2.15298': attribute type 21 has an invalid length.
[ 1354.640011][T19533] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1354.649777][T19538] bond0: (slave bond_slave_0): interface is now down
[ 1354.657445][T19538] bond0: (slave bond_slave_1): interface is now down
[ 1354.664449][T19533] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1354.675819][T20522] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1354.701316][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.735817][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.755682][T20522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1354.767653][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.775281][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.817856][T19531] bond0: (slave bond_slave_0): interface is now down
[ 1354.831960][T19531] bond0: (slave bond_slave_1): interface is now down
[ 1354.864285][T19531] bond0: now running without any active interface!
[ 1354.928992][T20540] sctp: [Deprecated]: syz.4.15305 (pid 20540) Use of int in max_burst socket option deprecated.
[ 1354.928992][T20540] Use struct sctp_assoc_value instead
[ 1355.563027][T20579] netlink: 'syz.0.15321': attribute type 4 has an invalid length.
[ 1355.627829][T20579] __nla_validate_parse: 3 callbacks suppressed
[ 1355.627849][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15321'.
[ 1355.643719][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15321'.
[ 1356.432400][T20639] syzkaller1: entered promiscuous mode
[ 1356.451388][T20639] syzkaller1: entered allmulticast mode
[ 1356.563060][T20652] Unsupported ieee802154 address type: 0
[ 1356.676995][T20658] netlink: zone id is out of range
[ 1356.693015][T20658] netlink: zone id is out of range
[ 1356.698277][T20658] netlink: zone id is out of range
[ 1356.720049][T20658] netlink: zone id is out of range
[ 1356.729711][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15352'.
[ 1356.730118][T20658] netlink: zone id is out of range
[ 1356.786713][T20658] netlink: zone id is out of range
[ 1356.796743][T20658] netlink: zone id is out of range
[ 1356.810922][T20658] netlink: zone id is out of range
[ 1356.831263][T20658] netlink: zone id is out of range
[ 1356.889395][T20677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15355'.
[ 1357.020717][T20689] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.15357'.
[ 1357.044379][T20687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15359'.
[ 1357.151880][T20694] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15360'.
[ 1357.206376][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15360'.
[ 1357.234800][T20628] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1357.443296][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15367'.
[ 1357.446758][T20716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1357.538723][T20722] xt_SECMARK: invalid mode: 9
[ 1357.652341][T20732] netlink: 'syz.2.15374': attribute type 1 has an invalid length.
[ 1357.666193][T20732] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15374'.
[ 1357.697904][T20732] netlink: 'syz.2.15374': attribute type 1 has an invalid length.
[ 1357.709378][T20732] netlink: 'syz.2.15374': attribute type 8 has an invalid length.
[ 1357.952397][T20749] netlink: 'syz.2.15380': attribute type 1 has an invalid length.
[ 1358.042748][T20752] bond1: (slave veth0_to_bond): Releasing active interface
[ 1358.152948][T20749] netlink: 'syz.2.15380': attribute type 1 has an invalid length.
[ 1358.163760][T20749] netlink: 'syz.2.15380': attribute type 2 has an invalid length.
[ 1358.651252][T20792] syzkaller0: entered promiscuous mode
[ 1358.661171][T20792] syzkaller0: entered allmulticast mode
[ 1358.673904][T20792] IPVS: length: 8 != 1152
[ 1358.700173][T20795] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1359.046464][T20812] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1359.058005][T20812] bond3 (unregistering): Released all slaves
[ 1359.153994][T20820] bond0: entered promiscuous mode
[ 1359.169915][T20820] bond_slave_0: entered promiscuous mode
[ 1359.177579][T20820] bond_slave_1: entered promiscuous mode
[ 1359.187734][T20820] batadv0: entered promiscuous mode
[ 1359.195434][T20820] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1359.209103][T20820] hsr1: entered promiscuous mode
[ 1359.217229][T20820] hsr1: entered allmulticast mode
[ 1359.224739][T20820] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1359.252358][T20820] bond0: left promiscuous mode
[ 1359.262677][T20820] bond_slave_0: left promiscuous mode
[ 1359.269019][T20820] bond_slave_1: left promiscuous mode
[ 1359.282952][T20820] batadv0: left promiscuous mode
[ 1359.469191][T20835] syzkaller0: entered promiscuous mode
[ 1359.492492][T20835] syzkaller0: entered allmulticast mode
[ 1359.593513][T20845] validate_nla: 2 callbacks suppressed
[ 1359.593534][T20845] netlink: 'syz.2.15419': attribute type 9 has an invalid length.
[ 1359.611725][T20845] netlink: 'syz.2.15419': attribute type 6 has an invalid length.
[ 1359.761588][T20853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1359.823345][T20861] bond0: entered promiscuous mode
[ 1359.854090][T20861] bond_slave_0: entered promiscuous mode
[ 1359.885448][T20861] bond_slave_1: entered promiscuous mode
[ 1359.936860][T20861] batadv0: entered promiscuous mode
[ 1359.972931][T20861] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1360.022951][T20861] hsr1: entered promiscuous mode
[ 1360.038918][T20861] hsr1: entered allmulticast mode
[ 1360.060012][T20861] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1360.109467][T20861] bond0: left promiscuous mode
[ 1360.114581][T20861] bond_slave_0: left promiscuous mode
[ 1360.122515][T20861] bond_slave_1: left promiscuous mode
[ 1360.130100][T20861] batadv0: left promiscuous mode
[ 1360.289476][T19536] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.299866][T19536] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.309318][T19536] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.319293][T19536] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.398622][T20899] netlink: 'syz.2.15433': attribute type 2 has an invalid length.
[ 1360.488695][T20907] x_tables: duplicate underflow at hook 1
[ 1360.746922][T20925] __nla_validate_parse: 18 callbacks suppressed
[ 1360.746944][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15442'.
[ 1360.769194][T20925] netlink: 'syz.2.15442': attribute type 2 has an invalid length.
[ 1360.777825][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15442'.
[ 1361.546979][T20964] syzkaller0: entered promiscuous mode
[ 1361.573972][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[ 1361.574038][T20964] syzkaller0: entered allmulticast mode
[ 1361.608217][T20966] netlink: 'syz.3.15456': attribute type 4 has an invalid length.
[ 1361.703903][T20964] tc action pedit offset must be on 32 bit boundaries
[ 1361.994419][T20986] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1362.015682][T20986] bond1 (unregistering): Released all slaves
[ 1362.021334][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15465'.
[ 1362.041940][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15465'.
[ 1362.768702][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15483'.
[ 1362.809467][T21046] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1363.152985][T19538] bond0: (slave bond_slave_0): interface is now down
[ 1363.162944][T19538] bond0: (slave bond_slave_1): interface is now down
[ 1363.211492][T19538] bond0: now running without any active interface!
[ 1363.296575][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15494'.
[ 1363.416244][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15499'.
[ 1363.448192][T21084] netdevsim netdevsim2: Direct firmware load for 0 failed with error -2
[ 1363.466506][T21084] netdevsim netdevsim2: Falling back to sysfs fallback for: 0
[ 1363.478728][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15501'.
[ 1363.875853][T21117] net_ratelimit: 4 callbacks suppressed
[ 1363.875870][T21117] openvswitch: netlink: Missing valid actions attribute.
[ 1363.907477][T21117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1363.947566][T21125] netlink: 'syz.0.15512': attribute type 11 has an invalid length.
[ 1364.076657][T21135] bond0: entered promiscuous mode
[ 1364.092843][T21135] bond_slave_0: entered promiscuous mode
[ 1364.106530][T21135] bond_slave_1: entered promiscuous mode
[ 1364.126985][T21135] batadv0: entered promiscuous mode
[ 1364.149135][T21135] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1364.176791][T21135] hsr1: entered promiscuous mode
[ 1364.183195][T21135] hsr1: entered allmulticast mode
[ 1364.188798][T21135] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1364.198402][T21135] bond0: left promiscuous mode
[ 1364.244759][T21135] bond_slave_0: left promiscuous mode
[ 1364.250463][T21135] bond_slave_1: left promiscuous mode
[ 1364.262573][T21135] batadv0: left promiscuous mode
[ 1364.412101][T21151] ------------[ cut here ]------------
[ 1364.417631][T21151] refcount_t: decrement hit 0; leaking memory.
[ 1364.424137][T21151] WARNING: lib/refcount.c:31 at refcount_warn_saturate+0x70/0x110, CPU#1: syz.1.15513/21151
[ 1364.434637][T21151] Modules linked in:
[ 1364.439112][T21151] CPU: 1 UID: 0 PID: 21151 Comm: syz.1.15513 Not tainted syzkaller #0 PREEMPT(full) 
[ 1364.449100][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1364.459332][T21151] RIP: 0010:refcount_warn_saturate+0x70/0x110
[ 1364.466202][T21151] Code: c6 40 33 f0 8e e8 a0 56 16 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 07 51 16 fd 48 8d 3d 50 2b 6d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 eb 50 16 fd 48
[ 1364.486970][T21151] RSP: 0018:ffffc90004ef7b48 EFLAGS: 00010283
[ 1364.494506][T21151] RAX: ffffffff84af63c9 RBX: 0000000000000004 RCX: 0000000000080000
[ 1364.496519][T21150] lo speed is unknown, defaulting to 1000
[ 1364.502538][T21151] RDX: ffffc90011451000 RSI: 0000000000000037 RDI: ffffffff901c8f20
[ 1364.502574][T21151] RBP: ffffc90004ef7ca0 R08: ffff88802d681e80 R09: 0000000000000005
[ 1364.502590][T21151] R10: 0000000000000004 R11: 0000000000000002 R12: f8f8f8f8f8f8f8f8
[ 1364.502603][T21151] R13: dffffc0000000000 R14: ffff88805a7a0668 R15: 0000000000000001
[ 1364.502619][T21151] FS:  00007f7c7da6e6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000
[ 1364.502636][T21151] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1364.502650][T21151] CR2: 00007f7c7da6dff8 CR3: 000000009b202000 CR4: 00000000003526f0
[ 1364.502667][T21151] Call Trace:
[ 1364.502676][T21151]  <TASK>
[ 1364.502687][T21151]  ref_tracker_free+0x6fc/0x840
[ 1364.502717][T21151]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1364.583711][T21151]  ? __pfx_locks_remove_file+0x10/0x10
[ 1364.589206][T21151]  ? ima_file_free+0x170/0x4e0
[ 1364.594106][T21151]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1364.599155][T21151]  ? lock_acquire+0xf0/0x2e0
[ 1364.604158][T21151]  ? vcc_release+0x54/0x580
[ 1364.608695][T21151]  mpoad_close+0x1fc/0x3e0
[ 1364.613212][T21151]  ? __pfx_mpoad_close+0x10/0x10
[ 1364.618179][T21151]  vcc_release+0x10f/0x580
[ 1364.622694][T21151]  sock_close+0xc3/0x240
[ 1364.626984][T21151]  ? __pfx_sock_close+0x10/0x10
[ 1364.632174][T21151]  __fput+0x44f/0xa70
[ 1364.636197][T21151]  fput_close_sync+0x11f/0x240
[ 1364.641056][T21151]  ? __pfx_fput_close_sync+0x10/0x10
[ 1364.646394][T21151]  __x64_sys_close+0x7e/0x110
[ 1364.651175][T21151]  do_syscall_64+0x14d/0xf80
[ 1364.655799][T21151]  ? trace_irq_disable+0x3b/0x150
[ 1364.661388][T21151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.667482][T21151]  ? clear_bhb_loop+0x40/0x90
[ 1364.672996][T21151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1364.678919][T21151] RIP: 0033:0x7f7c7cb9c819
[ 1364.684195][T21151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1364.704277][T21151] RSP: 002b:00007f7c7da6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1364.713055][T21151] RAX: ffffffffffffffda RBX: 00007f7c7ce16180 RCX: 00007f7c7cb9c819
[ 1364.721102][T21151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1364.729095][T21151] RBP: 00007f7c7cc32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1364.737383][T21151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1364.745453][T21151] R13: 00007f7c7ce16218 R14: 00007f7c7ce16180 R15: 00007ffc6b865318
[ 1364.753606][T21151]  </TASK>
[ 1364.756758][T21151] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1364.764055][T21151] CPU: 1 UID: 0 PID: 21151 Comm: syz.1.15513 Not tainted syzkaller #0 PREEMPT(full) 
[ 1364.773527][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1364.783592][T21151] Call Trace:
[ 1364.786958][T21151]  <TASK>
[ 1364.789881][T21151]  vpanic+0x56c/0xa60
[ 1364.793863][T21151]  ? __pfx__printk+0x10/0x10
[ 1364.798447][T21151]  ? __pfx_vpanic+0x10/0x10
[ 1364.803120][T21151]  ? is_bpf_text_address+0x292/0x2b0
[ 1364.808453][T21151]  ? is_bpf_text_address+0x26/0x2b0
[ 1364.813653][T21151]  panic+0xc5/0xd0
[ 1364.817372][T21151]  ? __pfx_panic+0x10/0x10
[ 1364.821854][T21151]  __warn+0x315/0x4f0
[ 1364.825944][T21151]  ? refcount_warn_saturate+0x70/0x110
[ 1364.831444][T21151]  ? refcount_warn_saturate+0x70/0x110
[ 1364.836914][T21151]  __report_bug+0x29a/0x540
[ 1364.841503][T21151]  ? stack_depot_save_flags+0x33/0x810
[ 1364.846962][T21151]  ? refcount_warn_saturate+0x70/0x110
[ 1364.852500][T21151]  ? __pfx___report_bug+0x10/0x10
[ 1364.857515][T21151]  ? kasan_save_free_info+0x46/0x50
[ 1364.862732][T21151]  report_bug_entry+0x19a/0x290
[ 1364.867580][T21151]  ? refcount_warn_saturate+0x70/0x110
[ 1364.873029][T21151]  ? refcount_warn_saturate+0x75/0x110
[ 1364.878484][T21151]  handle_bug+0xce/0x200
[ 1364.882772][T21151]  exc_invalid_op+0x1a/0x50
[ 1364.887279][T21151]  asm_exc_invalid_op+0x1a/0x20
[ 1364.892208][T21151] RIP: 0010:refcount_warn_saturate+0x70/0x110
[ 1364.898268][T21151] Code: c6 40 33 f0 8e e8 a0 56 16 fd 83 fb 01 7e 22 83 fb 02 74 39 83 fb 03 74 47 83 fb 04 75 68 e8 07 51 16 fd 48 8d 3d 50 2b 6d 0b <67> 48 0f b9 3a eb 66 85 db 74 3e 83 fb 01 75 4c e8 eb 50 16 fd 48
[ 1364.917952][T21151] RSP: 0018:ffffc90004ef7b48 EFLAGS: 00010283
[ 1364.924014][T21151] RAX: ffffffff84af63c9 RBX: 0000000000000004 RCX: 0000000000080000
[ 1364.931979][T21151] RDX: ffffc90011451000 RSI: 0000000000000037 RDI: ffffffff901c8f20
[ 1364.939937][T21151] RBP: ffffc90004ef7ca0 R08: ffff88802d681e80 R09: 0000000000000005
[ 1364.947897][T21151] R10: 0000000000000004 R11: 0000000000000002 R12: f8f8f8f8f8f8f8f8
[ 1364.955858][T21151] R13: dffffc0000000000 R14: ffff88805a7a0668 R15: 0000000000000001
[ 1364.963825][T21151]  ? refcount_warn_saturate+0x69/0x110
[ 1364.969286][T21151]  ? refcount_warn_saturate+0x69/0x110
[ 1364.974858][T21151]  ref_tracker_free+0x6fc/0x840
[ 1364.979702][T21151]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1364.985069][T21151]  ? __pfx_locks_remove_file+0x10/0x10
[ 1364.990528][T21151]  ? ima_file_free+0x170/0x4e0
[ 1364.995297][T21151]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1365.000311][T21151]  ? lock_acquire+0xf0/0x2e0
[ 1365.004986][T21151]  ? vcc_release+0x54/0x580
[ 1365.009489][T21151]  mpoad_close+0x1fc/0x3e0
[ 1365.013901][T21151]  ? __pfx_mpoad_close+0x10/0x10
[ 1365.018834][T21151]  vcc_release+0x10f/0x580
[ 1365.023332][T21151]  sock_close+0xc3/0x240
[ 1365.027593][T21151]  ? __pfx_sock_close+0x10/0x10
[ 1365.032474][T21151]  __fput+0x44f/0xa70
[ 1365.036478][T21151]  fput_close_sync+0x11f/0x240
[ 1365.041269][T21151]  ? __pfx_fput_close_sync+0x10/0x10
[ 1365.046582][T21151]  __x64_sys_close+0x7e/0x110
[ 1365.051269][T21151]  do_syscall_64+0x14d/0xf80
[ 1365.055871][T21151]  ? trace_irq_disable+0x3b/0x150
[ 1365.060990][T21151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.067139][T21151]  ? clear_bhb_loop+0x40/0x90
[ 1365.071811][T21151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.077693][T21151] RIP: 0033:0x7f7c7cb9c819
[ 1365.082100][T21151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1365.101719][T21151] RSP: 002b:00007f7c7da6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1365.110132][T21151] RAX: ffffffffffffffda RBX: 00007f7c7ce16180 RCX: 00007f7c7cb9c819
[ 1365.118092][T21151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1365.126136][T21151] RBP: 00007f7c7cc32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1365.134092][T21151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1365.142052][T21151] R13: 00007f7c7ce16218 R14: 00007f7c7ce16180 R15: 00007ffc6b865318
[ 1365.150200][T21151]  </TASK>
[ 1365.153692][T21151] Kernel Offset: disabled
[ 1365.158098][T21151] Rebooting in 86400 seconds..