last executing test programs:

1m29.187459066s ago: executing program 0 (id=1933):
socket(0x400000000010, 0x3, 0x0)
socket(0x10, 0x2, 0x0) (async)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @private0, 0x1, 0x80, 0xfffffffc, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0xffff}}, 0x14)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'bridge0\x00', {}, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) (async)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)

1m28.505618893s ago: executing program 0 (id=1938):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfffc, 0x0, 0x8000000000000001, 0x4}, &(0x7f00000000c0)=0x18)

1m28.257004951s ago: executing program 0 (id=1941):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)

1m28.111566319s ago: executing program 0 (id=1943):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 7:* r'], 0xa)

1m27.609940344s ago: executing program 0 (id=1945):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c081)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000008000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1m26.338734132s ago: executing program 0 (id=1953):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000002740)=""/4107, 0x100b}, {&(0x7f0000000280)=""/104, 0x68}], 0x5}, 0x43}], 0x1, 0x100, 0x0)

1m10.70182107s ago: executing program 32 (id=1953):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000002740)=""/4107, 0x100b}, {&(0x7f0000000280)=""/104, 0x68}], 0x5}, 0x43}], 0x1, 0x100, 0x0)

3.543916486s ago: executing program 2 (id=2209):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000100)=0x18c42369)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a00000409000100735ef91b5fcf68da69000540000000020900020073797a310000000008000a40fffffffc0800034000000010140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="34000000100039042abd70000300000000000000", @ANYRES32=r1, @ANYBLOB="00000000d1100100140016801000eb800c000500fcffffff02000000"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000100)=0x18c42369) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a00000409000100735ef91b5fcf68da69000540000000020900020073797a310000000008000a40fffffffc0800034000000010140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="34000000100039042abd70000300000000000000", @ANYRES32=r1, @ANYBLOB="00000000d1100100140016801000eb800c000500fcffffff02000000"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) (async)

3.012379884s ago: executing program 2 (id=2217):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884)

2.802957578s ago: executing program 5 (id=2219):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r1 = socket(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20)

2.643897223s ago: executing program 5 (id=2221):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000100000000000000000010ff020000000000000000000000000001"], 0x340a)

2.457203524s ago: executing program 2 (id=2223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012000d00010076736f636b6d6f6e00000000"], 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000130005000000000000000000000000000000000000000000010000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000540)=0x14)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000}}]}, &(0x7f0000000480)='GPL\x00', 0xcba, 0x18, &(0x7f00000004c0)=""/24, 0x41000, 0x60, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x5, 0x200, 0xfa}, 0x10, 0x118b4, r4, 0x7, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[{0x2, 0x3, 0xa, 0xa}, {0x1, 0x1, 0x3, 0x1}, {0x0, 0x5, 0x8, 0x4}, {0x2, 0x3, 0x10, 0xa}, {0x4, 0x5, 0xc, 0x8}, {0x0, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x10, 0x2}], 0x10, 0x40}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110005000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0)
setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080), 0x4)

1.92840015s ago: executing program 1 (id=2224):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x8, 0x2000}}, 0x1c}}, 0x4000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000)

1.896845786s ago: executing program 3 (id=2225):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'bridge_slave_1\x00', {0xb2}, 0x7}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'bridge_slave_1\x00', {0xb2}, 0x7})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffff3500000000000000002e"], 0x0, 0x46}, 0x28)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}, [@FRA_FLOW={0x8, 0xb, 0xfff}]}, 0x24}}, 0x40)
r5 = accept4$x25(r0, &(0x7f0000000540), &(0x7f00000006c0)=0x12, 0x0)
ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xe, 'ipvlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x49c, 0x65, 0x400, 0x30bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x470, 0x2, [@TCA_BPF_ACT={0x46c, 0x1, [@m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x10000000, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1007, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x22c, 0x13, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x61, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859be254b2d4f6101cf6d6cb72c6b46912ecba41a2c8ffffff0000859fd68154d7171a2ca3415ec78dc8ff85b058dae9f1d49e86778595"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10"}}]}, {0x127, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1800})
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
r9 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
epoll_pwait(r9, &(0x7f0000000680)=[{}], 0x1, 0x4857, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014})
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0xd, 0x0, 0x2, 0xc3c, 0x5, 0xe9, 0x9}}]}}]}, 0x44}}, 0x0)
write$tun(r2, &(0x7f0000000500)=ANY=[], 0x20)

1.855388258s ago: executing program 1 (id=2226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf25680000000800", @ANYRES32=r2, @ANYBLOB="1400c7"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1.718618333s ago: executing program 4 (id=2227):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0x8}}}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x148, 0x14, 0x200, 0x70bd2d, 0x25dfdbfb, {0xde342ee0f9b57ba, 0x39}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "f34096577523370a1c3eed31ac53633f6d9ad8559335c5b157aaf3c0cfa99ade0133abe45355cc554f754588faf739bf53133ceeb78de30c21b034920705f515123bcf402f0569e4f2a87910f96f7eb538976cfa6ab822d58bab4639"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "7a0220e850138e26e92dc9c54710d7b59aad7f156509818786e59d81de2c451b30c29b4c2b812929c813e030e2b13e0a84f5a7e0cc8c714938acbbc55428b9d8470ec9f77e3a97c8b5dd10c724a670e94ac7c49b2d457b637baf96f42c7d5a003e4c2356cb56f068967529afa4ed34cbea8c4aaf549266f8529e11428a1ade4f1bb103eaceeb9dffee6f2d88e58e8cbd23534d7405646f7c8f56112d33c208d420ba8c20545e1824bccff96722b5b6b3d9e5e2f15d4a9dea0d53508a34d35078e3b38d04e3cc139b9695bc47f6ee77"}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0080}, 0x40000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'tunl0\x00', <r4=>0x0, 0x0, 0x20, 0x3, 0x2a5, {{0x2b, 0x4, 0x3, 0x1, 0xac, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010100, {[@generic={0x7, 0x6, "ebe71c25"}, @generic={0x94, 0xa, "43c0af29d6450edd"}, @cipso={0x86, 0x59, 0x1, [{0x5, 0x5, "b71ec8"}, {0x1, 0xe, "ee2c4cebb90a40eccf631465"}, {0x0, 0x12, "96b8bb9aa2bd79dc02fbb3b756d4ead8"}, {0x0, 0xa, "ae4a5f998b7097d6"}, {0x5, 0x5, "ead2cf"}, {0x1, 0xd, "6d13833502d2dbf37e50e6"}, {0x0, 0xb, "25f8b6330b4f667eba"}, {0x5, 0x7, "f5c800bc67"}]}, @noop, @end, @lsrr={0x83, 0x13, 0x4b, [@remote, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x87, 0x0, 0x3, [0x10]}, @timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0x9, [{@multicast1, 0x4}]}]}}}}})
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0x114, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}}, [@iptfs_dont_frag={0x4}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in6=@mcast1}}, @mark={0xc, 0x15, {0x350759, 0x101}}, @iptfs_drop_time={0x8, 0x24, 0xfffffff8}, @offload={0xc, 0x1c, {r4, 0x5e1f24ac166eb7b9}}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @iptfs_init_delay={0x8, 0x27, 0xbd8}]}, 0x114}}, 0x0)

1.714935312s ago: executing program 1 (id=2228):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@fallback=r3, r3, 0x2f, 0x2024, 0x4}, 0x20)
bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r0, 0x4)
close(r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000300"/18, @ANYRES32=r6, @ANYBLOB="31000e00800000000802110000010802110000010802110000000000000000000000000064000000710701000101ffe3cf399496447c7b9e740701000000080026006c09000008000c006400000008000d00a2a40000"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

1.599516611s ago: executing program 5 (id=2229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x8, @void}, 0x10)

1.599117186s ago: executing program 4 (id=2230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)}], 0x1}, 0x0)

1.527045425s ago: executing program 3 (id=2231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6015690900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be0800633f8018"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0)

1.503441829s ago: executing program 2 (id=2232):
setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010101, @private}}}], 0x20}, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r3, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0))
write$ppp(r3, &(0x7f00000002c0)="03c277d359e5", 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)

1.408415912s ago: executing program 4 (id=2233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async)

1.30822509s ago: executing program 1 (id=2234):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b0, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x190, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbfef694}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ff21d48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39fc12e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48e008ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37320e6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x527b3fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bbf1aac}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4442a132}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2ab243}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe64e2b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d79bc38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x419cc9ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77bc7d72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f8fc26e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681f61d8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6959e92e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30198c82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e03ba5e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22b66863}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b714a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4413780d}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c000)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x0, [0x1, 0x7, 0xffff]}, &(0x7f0000000600)=0x44)
ioctl$sock_ifreq(r9, 0x8923, &(0x7f0000000680)={'bridge0\x00', @ifru_settings={0x2, 0x8, @sync=&(0x7f0000000640)={0x9, 0x3, 0x8}}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)={0x2a0, 0x22, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x10a}, @nested={0x8, 0x21, 0x0, 0x1, [@nested={0x4, 0x132}]}, @generic="03400ddf42ea0010a08104302d042cbc6a235a3cc58bf35387e06fbb9bab58785b151b2e91f3582537c2d6f40851e0ae348aed38f2e264a59c3a6865987552f9b8f0a6e0a261c6e2dcd7424ef4585ceabd4e31279b4dfe37b49c5f82086f6cf1f47a509977dd8fd594c91f27f1fad53c9e377e9624975d682ff649fb40c575", @nested={0xae, 0x19, 0x0, 0x1, [@typed={0xc, 0x9f, 0x0, 0x0, @u64=0xa}, @generic="b136199f362c1fbbfa6b1e4493c33dc72855b7e4503e1c37446a7ee7c6d436a305308b885463ae401627e2c974d1133cab2e77a360202f5a2ed22179ae9f71552d7cbbc032c76e0ca9d6b695411d8a6ac8c52fbdbedec8f32c5e3d0e3e6177a7a22060341cee8be37275", @nested={0x4, 0x15e}, @typed={0x8, 0x104, 0x0, 0x0, @uid=r11}, @typed={0xc, 0x84, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x5a}, @typed={0x4, 0x7}]}, @generic="4054edd295459079dac0b16359639627e613e83737dc0f8541995a6411041c0231bcd136dadcc6568f04705656662fdb001778006ddf30847cc2986168be7ffddd162fe3142d3f3dcbde9166e7fdacaf5f039ae3907fb9be7633a2c75ff9f88eb69e7d6a7423685c90075086c5c8a6d7e719fcfc1ea15de023cd487373f8a2d9573a786f669dca52a64b050b6143eabb71267aeb148dd832d3ec8bda0d65390c", @nested={0x18, 0xb2, 0x0, 0x1, [@nested={0x4, 0x15b}, @nested={0x4, 0x101}, @typed={0x6, 0xb8, 0x0, 0x0, @str='&\x00'}, @nested={0x4, 0xa4}]}, @nested={0x10, 0x14c, 0x0, 0x1, [@nested={0x4, 0x110}, @nested={0x4, 0x48}, @nested={0x4, 0x94}]}, @typed={0x4, 0x96}, @typed={0x88, 0xfd, 0x0, 0x0, @binary="18b3432bb8502ff385d33a5fcfc5fcf664d1a6ffa6b990ec0dca8c07227e51ff3798e755a3943b7f5ed95d287f03415092245c13709948ca2446d803fee3bfbf3fbc214b67f76b4d7e5a7e7cd30ec721f0bcf1e761d152374090e2df240879842cc3b215d91dc2b960363bd36e57d7d68d60c4f12ad19909435fe5a014de02632e3a2d94"}]}, 0x2a0}], 0x1, 0x0, 0x0, 0x4000000}, 0x9000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000b40)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000b80)='syzkaller\x00', 0x9, 0xd6, &(0x7f0000000bc0)=""/214, 0x41000, 0x1a, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x3, 0x5, 0xf, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x3, 0x5, 0x0, 0x2}]}, 0x94)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e80), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r12, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8005)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c085}, 0x4000040)
bind$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x4e24, 0x4, @loopback, 0x289}, 0x1c)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0)
write$nci(r13, &(0x7f0000001180)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x5, {0x1, 0x3, 0x3, 0x4}}, 0x7)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000011c0)={<r15=>0x0, 0x3, 0x4, 0x6943, 0x2, 0x9b}, &(0x7f0000001200)=0x14)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000001240)={r15, 0x8, 0xd}, 0x8)
ioctl$XFS_IOC_FSGEOMETRY_V4(r13, 0x8070587c, &(0x7f0000001280))
r16 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_buf(r16, 0x29, 0x6, &(0x7f0000001300)=""/71, &(0x7f0000001380)=0x47)
socket$nl_route(0x10, 0x3, 0x0)

1.243555555s ago: executing program 4 (id=2235):
unshare(0x600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB="2e00010030000000f50edc384cf325a8c1971e6b59cec152844fa9f04015ea89e62a93f1611d3d4211e8651a28babc6d300de045b2817e5319fb512fd10a0b4795a6d58380846f659ec58d09a9cd1b2a8af743201d7251f9c86b70f6bf3e52ecf53b66287295179a38a645644d8b2e46b5d3751fb859e8e8c5e66150fa78ed6e78c35020d5fd3d5af4aec898bb631447712ebdf1fee3e6352433f7a386274a920b9bf9a849bcbec7e785fa31ac0580157ab44ca1262ed04779d6bb19b63bc6e71639d8606c52f371b7a1cf65ef85a5e62ef2cecb1b91ea325a68045eadeddc8b34b4f216ca0cdfffd65f8ea3b09c5a96976eecb128bf8c8716e675226c7b0c10b0c85b264f14a67a7b6168a859691eb7279dfbb9035a5f53994516fa96b9e1dc38d40b0ef67fe1a8b39d8afa8e0ca9c0aa3acff7adb28fef4277", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

1.148501257s ago: executing program 3 (id=2236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f00000086c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10ff0000f500e906000000000002070000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)

1.061668741s ago: executing program 5 (id=2237):
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x903a61f8729cd62a, 0x1})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@broadcast}, {@private}, {@private}]}})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={<r1=>r0, &(0x7f00000000c0)='sit0\x00', 0x80000, &(0x7f0000000100)={@align=0x1000, {0x4, 0x2, 0x800, 0x1ff}}, 0x1ff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xfffffffa})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @multicast2, 0x1a, 0x17}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x4, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "678dbc72d989a80e"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40090)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x64e5a7fcb20e3920}, 0x1000)
sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv4_delroute={0x48, 0x19, 0x2, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x14, 0x1, 0x3, 0x0, 0xfe, 0x3, 0x2200}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_TABLE={0x8, 0xf, 0x200}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x35, r2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0xf0d59f839a83f7ce)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000680)=0x3, 0x4)
recvmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f00000006c0)=@ieee802154, 0x80, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, &(0x7f0000001780)=""/254, 0xfe}, 0x2}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/62, 0x3e}, {&(0x7f0000001940)=""/241, 0xf1}, {&(0x7f0000001a40)=""/127, 0x7f}, {&(0x7f0000001ac0)=""/25, 0x19}, {&(0x7f0000001b00)=""/193, 0xc1}], 0x5, &(0x7f0000001c80)=""/195, 0xc3}, 0x8}, {{&(0x7f0000001d80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000001e00)=""/130, 0x82}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/94, 0x5e}, {&(0x7f0000002f40)=""/245, 0xf5}, {&(0x7f0000003040)=""/62, 0x3e}, {&(0x7f0000003080)=""/222, 0xde}, {&(0x7f0000003180)=""/231, 0xe7}, {&(0x7f0000003280)=""/145, 0x91}, {&(0x7f0000003340)=""/231, 0xe7}], 0x9, &(0x7f0000003500)=""/215, 0xd7}, 0x10001}, {{&(0x7f0000003600)=@x25={0x9, @remote}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003680)=""/199, 0xc7}, {&(0x7f0000003780)=""/14, 0xe}], 0x2, &(0x7f0000003800)=""/157, 0x9d}, 0x4}, {{&(0x7f00000038c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/172, 0xac}], 0x3, &(0x7f0000005a40)=""/233, 0xe9}, 0x200}, {{&(0x7f0000005b40)=@alg, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005bc0)=""/38, 0x26}, {&(0x7f0000005c00)=""/83, 0x53}, {&(0x7f0000005c80)=""/24, 0x18}, {&(0x7f0000005cc0)=""/192, 0xc0}, {&(0x7f0000005d80)=""/28, 0x1c}, {&(0x7f0000005dc0)=""/189, 0xbd}], 0x6, &(0x7f0000005f00)=""/140, 0x8c}, 0x8}], 0x6, 0x2000, &(0x7f0000006140)={0x0, 0x989680})
r6 = accept$packet(r1, &(0x7f0000006180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000061c0)=0x14)
clock_gettime(0x0, &(0x7f0000007380)={<r8=>0x0, <r9=>0x0})
recvmmsg(r6, &(0x7f0000007200)=[{{&(0x7f0000006200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006300)=[{&(0x7f0000006280)=""/81, 0x51}], 0x1, &(0x7f0000006340)=""/151, 0x97}, 0x7fff}, {{&(0x7f0000006400)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006480)=""/50, 0x32}, {&(0x7f00000064c0)=""/248, 0xf8}, {&(0x7f00000065c0)=""/56, 0x38}, {&(0x7f0000006600)=""/116, 0x74}, {&(0x7f0000006680)=""/240, 0xf0}, {&(0x7f0000006780)=""/43, 0x2b}, {&(0x7f00000067c0)=""/35, 0x23}], 0x7, &(0x7f0000006880)=""/133, 0x85}, 0x8}, {{&(0x7f0000006940)=@caif=@dgm, 0x80, &(0x7f0000006c80)=[{&(0x7f00000069c0)=""/128, 0x80}, {&(0x7f0000006a40)=""/249, 0xf9}, {&(0x7f0000006b40)=""/37, 0x25}, {&(0x7f0000006b80)=""/242, 0xf2}], 0x4, &(0x7f0000006cc0)=""/74, 0x4a}}, {{&(0x7f0000006d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000006dc0)=""/3, 0x3}, {&(0x7f0000006e00)=""/9, 0x9}], 0x2, &(0x7f0000006e80)=""/169, 0xa9}, 0x4e4}, {{&(0x7f0000006f40)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006fc0)=""/74, 0x4a}, {&(0x7f0000007040)=""/59, 0x3b}, {&(0x7f0000007080)=""/50, 0x32}], 0x3}, 0xb82b}, {{0x0, 0x0, &(0x7f00000071c0)=[{&(0x7f0000007100)=""/58, 0x3a}, {&(0x7f0000007140)=""/124, 0x7c}], 0x2}, 0x7f70}], 0x6, 0x40000000, &(0x7f00000073c0)={r8, r9+60000000})
r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r11, 0x800442d2, 0xfffffffffffffffe)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000007480)={'sit0\x00', &(0x7f0000007400)={@multicast1, 0x1, 0x0, 0x70, 0x0, [{@multicast1}, {@remote}, {@broadcast}, {@remote}, {@loopback}, {@empty}, {@remote}]}})
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f00000074c0)=0x4, 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f0000007500))
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007880)=@bpf_tracing={0x1a, 0x23, &(0x7f0000007540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x0, 0x2, 0xa, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x46}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000007680)='GPL\x00', 0x1000, 0x59, &(0x7f00000076c0)=""/89, 0x41100, 0x30, '\x00', r7, 0x1a, r1, 0x8, &(0x7f0000007740)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000007780)={0x5, 0xc, 0x6, 0x9}, 0x10, 0x1ae7c, r1, 0x6, &(0x7f00000077c0)=[r1, r1, r6], &(0x7f0000007800)=[{0x2, 0x1, 0xa, 0x5}, {0x1, 0x5, 0xc, 0x8}, {0x2, 0x1, 0x7, 0x4}, {0x0, 0x3, 0x5, 0xf}, {0x3, 0x4, 0x8}, {0x3, 0x2, 0x6, 0x6}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000007b40)={r12, 0x0, 0x83, 0x55, &(0x7f0000007940)="61addd7057f85d382001cbc0f4cf0f0bf649dcd4e2ab5f9395c07bd00fe336505413e1f01fbf83bd869f5885e7aa1cad5a3818e0acecbb328760d499ba4cb8e9e8f9311481e82b33d42d566ea119bea26b63e455af3869f7e8cce4a6701fdee3611d84307646fc1bd9176a51b94dc119e2a0335a976b7e624664a2d7f748dcac6fa096", &(0x7f0000007a00)=""/85, 0x4, 0x0, 0x7c, 0x26, &(0x7f0000007a80)="1a34b6ec0f5a9802746e9d6c22cc591da58eefdee1fd59e047ecb3276a4af3cc3888a7e8027bbe65bee402420b36464ff572584fab43fe0209cefd3f17eb39225ec6906653f9c41313b867e5d16040b9db7f86f89b3c8599783ba231597bb7f082e1d1f953132437439c7d86154d45880970b01643ff25ed124befcf", &(0x7f0000007b00)="d57a955f945d7f34315bed66ea70488223ee655f22588c5275ba2cdca66a618a563adfb4abb5", 0x1, 0x0, 0x7}, 0x50)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007bc0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000007c40)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000007d40)={&(0x7f0000007c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007d00)={&(0x7f0000007c80)={0x5c, r13, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd3ed}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5d3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xaeb8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44010)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000007d80)=@req3={0x6, 0x4433acfd, 0x7, 0x4, 0xeb, 0xc851, 0x10000}, 0x1c)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000007dc0), 0x240100, 0x0)
ioctl$SIOCSIFHWADDR(r15, 0x8924, &(0x7f0000007e00)={'veth0\x00', @multicast})

1.026071564s ago: executing program 1 (id=2238):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000080))
r3 = socket(0x5, 0x4, 0xfffffff4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={<r5=>r4, 0x8, 0x7, 0x5})
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f00000000c0)={0x1ff, [0xec5, 0x2], 0x6}, 0x10)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000001040)={0x0, @in6={{0xa, 0x4e23, 0x442869fb, @loopback, 0x1ff}}, 0x1, 0xc, 0x9c31, 0x937, 0x6}, &(0x7f0000001100)=0x98)

828.453577ms ago: executing program 2 (id=2239):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000200000000000000000010ff020000000000000000000000000001"], 0x340a)

784.387648ms ago: executing program 3 (id=2240):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x120}}, 0x0)
clock_gettime(0x0, &(0x7f00000001c0)={<r1=>0x0, <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x110, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "4f85b03deb5d27614a1a7e9bba315e4c7aaf3f480cf8597fa9a7661f96692bfad981976f2df7eeade6aef007f5370f7e93ef9359763c760e6899156af239bad51984754853072e325d283685b65558076244f72df41e7e658d160ba1d46723c9d3384f45e4fe0e1de01d375453fdd7b2b6d54971708da06c419d949b7d9df91a419a86d649c2ec6e1850bfb39900746f53d36f9c5667dcad33cf82fb3027da6389113d9b837faf3b436ba9d245e7767bf0eb2b51c1988f9469330b57a0a937743e7a7f8db9a6ba2dba5d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10}}, 0x194}}, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200)={r1, r2/1000+10000}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00'})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

708.582141ms ago: executing program 5 (id=2241):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x2000004)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x1, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001dc0)={0xa, 0x4e23, 0x3, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffd, 0x30, @mcast1, @mcast1, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x0, 0x1000002}})
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000580)={0x4, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88)

448.373079ms ago: executing program 4 (id=2242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc80a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

369.870415ms ago: executing program 3 (id=2243):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)}], 0x1}, 0x0)

241.354709ms ago: executing program 2 (id=2244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x118}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

152.269579ms ago: executing program 4 (id=2245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005260000720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203021a00200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140200100000000000000000000000000012001000000000000000000000000000220e620e60030000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677"], 0x64) (async)
recvfrom$inet6(r3, &(0x7f0000000800)=""/100, 0x64, 0x0, 0x0, 0x0) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001400)={{<r4=>0xffffffffffffffff, &(0x7f0000000000)='\xfe*.\'G\'\x1d-%!}\x00', 0x80c00, &(0x7f0000000080)={@align=0x6, {0x5, 0x0, 0x4, 0xe}}, 0xd, &(0x7f00000000c0), &(0x7f0000000180)=0x80000000}, {[0x3, 0xc1, 0x3, 0x8]}, 0x7, 0x1000, &(0x7f0000000400)=""/4096})
write$nci(r4, &(0x7f0000001480)=ANY=[@ANYBLOB="4f0007e106a0496948b5aa58f60fffb96bad94a1471fc8e1b6958d13ff79c61d0654cc8036d48b04e4a051fa0bbf39c1740b808856b72529d96247b65fd73c9aaef3079727d5ff8553c1726423b8017f02145266a1fec3ea97826adf9f835122cf5ca354db813d9a46ec990d8284b78c6c6631239e33e92c88934be241ba"], 0x7e) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200))

148.025306ms ago: executing program 3 (id=2246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000090603000000000000000000050000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (fail_nth: 1)

71.440992ms ago: executing program 5 (id=2247):
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @private1, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)

0s ago: executing program 1 (id=2248):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000000380)={@multicast, @random="74eca04e0fb0", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x9, 0xb4, 0x68, 0x0, 0x0, 0x3a, 0x0, @empty, @multicast1, {[@end, @rr={0x7, 0x3, 0xec}]}}, {0x4e24, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "68a44e9390e1b96305ef26836b3c9c1f8bc4d9ac60291b70ea627f6d1ab003fc", "74e698bda2c0e37d6aa18509fb05244cfe09bb7850b8e68d829d874bcaa5ca80473dcdcedf1ed699c1829499c671ffab", "96eb7b93133209d1007ac68d9b619a8cf87b4fa609d02c370f25e196", {"d2ff302bdb9f67a0f9db7e7bac1aee6f", "225cabb19adca44b3620cdf9f3b2af33"}}}}}}}, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008001d0000000005000000", 0x29}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x88, 0xffe, 0x1ff, 0x42000}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   98.226612][ T6384] netlink: 'syz.4.180': attribute type 4 has an invalid length.
[   98.335723][ T6384] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   98.719368][ T6414] netlink: 'syz.1.190': attribute type 21 has an invalid length.
[   98.856962][ T6428] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.896392][ T6428] xt_SECMARK: invalid mode: 9
[   98.910563][ T6430] validate_nla: 1 callbacks suppressed
[   98.910580][ T6430] netlink: 'syz.4.193': attribute type 10 has an invalid length.
[   99.429198][ T6452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.491713][ T6455] ip_tables: iptables: counters copy to user failed while replacing table
[   99.629107][ T6461] sctp: [Deprecated]: syz.1.204 (pid 6461) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.629107][ T6461] Use struct sctp_sack_info instead
[  100.486158][ T6502] team0: Device gtp0 is of different type
[  100.623317][ T6496] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  100.697003][ T6496] bond1 (unregistering): Released all slaves
[  100.915532][ T6528] netlink: 'syz.3.225': attribute type 1 has an invalid length.
[  100.925483][ T6527] netlink: 'syz.3.225': attribute type 1 has an invalid length.
[  101.051892][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.130656][ T6537] netlink: 'syz.1.227': attribute type 16 has an invalid length.
[  101.174450][ T6531] bond1: (slave geneve2): making interface the new active one
[  101.187380][ T6537] netlink: 'syz.1.227': attribute type 2 has an invalid length.
[  101.207127][ T6531] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  101.219381][ T6537] __nla_validate_parse: 18 callbacks suppressed
[  101.219399][ T6537] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.227'.
[  101.222283][ T6539] netlink: 'syz.4.229': attribute type 4 has an invalid length.
[  101.313323][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[  101.434580][ T6554] sctp: [Deprecated]: syz.4.232 (pid 6554) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.434580][ T6554] Use struct sctp_sack_info instead
[  101.524363][ T6555] netlink: 'syz.3.231': attribute type 32 has an invalid length.
[  101.540995][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[  101.541096][ T6552] netlink: 'syz.3.231': attribute type 32 has an invalid length.
[  101.607638][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[  101.654392][ T6555] bond2: option coupled_control: invalid value (63)
[  101.664142][ T6555] bond2 (unregistering): Released all slaves
[  101.702262][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.856179][ T6573] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[  101.874599][ T6552] bond2: option coupled_control: invalid value (63)
[  101.882856][ T6552] bond2 (unregistering): Released all slaves
[  101.917333][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  101.929510][ T6573] bond1: entered promiscuous mode
[  101.940910][ T6573] bond1: entered allmulticast mode
[  101.947620][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.975044][ T6573] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[  102.009492][ T6570] bond1 (unregistering): Released all slaves
[  102.046729][ T6581] netlink: NAT attribute has 4 unknown bytes
[  102.067994][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.080804][ T6583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.238'.
[  102.087856][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'.
[  102.549433][ T6605] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.640420][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'.
[  102.808996][   T12] IPVS: starting estimator thread 0...
[  102.878617][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'.
[  102.922634][ T6619] IPVS: using max 32 ests per chain, 76800 per kthread
[  102.948299][ T6625] tipc: Can't bind to reserved service type 1
[  102.962953][ T6627] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes.
[  103.098835][ T6632] sctp: [Deprecated]: syz.3.255 (pid 6632) Use of int in maxseg socket option.
[  103.098835][ T6632] Use struct sctp_assoc_value instead
[  103.156160][ T6637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.257'.
[  103.417319][ T6652] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.429216][ T6653] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.491289][ T6655] syzkaller1: entered promiscuous mode
[  103.497559][ T6655] syzkaller1: entered allmulticast mode
[  103.564906][ T6658] gretap0: entered promiscuous mode
[  103.575436][ T6658] 0ªî{X¹¦: renamed from gretap0
[  103.584099][ T6658] 0ªî{X¹¦: left promiscuous mode
[  103.594042][ T6658] 0ªî{X¹¦: entered allmulticast mode
[  103.619650][ T6658] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  104.130782][ T6691] validate_nla: 2 callbacks suppressed
[  104.130801][ T6691] netlink: 'syz.3.273': attribute type 9 has an invalid length.
[  104.363152][ T6704] netlink: 'syz.4.277': attribute type 12 has an invalid length.
[  104.841405][ T6732] erspan0: entered promiscuous mode
[  105.076337][ T6748] Bluetooth: hci0: unsupported parameter 5134
[  105.091248][ T6748] Bluetooth: hci0: unsupported parameter 8192
[  105.137679][ T6748] Bluetooth: hci0: unsupported parameter 5134
[  105.204146][ T6748] Bluetooth: hci0: unsupported parameter 8192
[  105.278416][ T6757] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  105.634029][ T6780] bridge_slave_1: left allmulticast mode
[  105.652125][ T6780] bridge_slave_1: left promiscuous mode
[  105.661303][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.676155][ T6780] bridge_slave_0: left allmulticast mode
[  105.692979][ T6780] bridge_slave_0: left promiscuous mode
[  105.724477][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.841554][ T6787] syzkaller1: entered promiscuous mode
[  105.857808][ T6787] syzkaller1: entered allmulticast mode
[  106.127676][ T6802] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§%
[  106.395675][ T6820] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  106.411458][ T6819] syzkaller0: entered promiscuous mode
[  106.418972][ T6819] syzkaller0: entered allmulticast mode
[  106.509755][ T6827] __nla_validate_parse: 18 callbacks suppressed
[  106.509773][ T6827] netlink: 92 bytes leftover after parsing attributes in process `syz.0.308'.
[  106.630280][ T6830] openvswitch: netlink: IPv6 tunnel dst address is zero
[  106.862807][ T6848] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  107.046857][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.081754][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.108401][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.133515][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.173538][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.174970][ T6871] syzkaller0: entered promiscuous mode
[  107.191618][ T6871] syzkaller0: entered allmulticast mode
[  107.195915][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.225759][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.247660][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.268000][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.289226][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.308397][ T6864] openvswitch: netlink: nsh attr 109 is out of range max 3
[  107.775992][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'.
[  107.800705][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'.
[  107.804230][ T6909] Bluetooth: hci0: unsupported parameter 5135
[  107.830340][ T6909] Bluetooth: hci0: unsupported parameter 8192
[  107.836620][ T6909] Bluetooth: hci0: unsupported parameter 5135
[  107.845469][ T6909] Bluetooth: hci0: unsupported parameter 8192
[  108.025837][ T6915] syzkaller0: entered promiscuous mode
[  108.038248][ T6915] syzkaller0: entered allmulticast mode
[  108.048414][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[  108.123024][ T6925] netlink: 'syz.0.336': attribute type 4 has an invalid length.
[  108.140999][ T6925] netlink: 17 bytes leftover after parsing attributes in process `syz.0.336'.
[  108.217659][ T6929] netlink: 'syz.0.336': attribute type 4 has an invalid length.
[  108.262759][ T6925] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.336'.
[  108.299536][ T6929] netlink: 17 bytes leftover after parsing attributes in process `syz.0.336'.
[  108.608921][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'.
[  108.695736][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'.
[  108.748549][ T6958] xt_ecn: cannot match TCP bits for non-tcp packets
[  108.942912][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'.
[  109.006974][ T6968] bond1: Removing last arp target with arp_interval on
[  109.387415][ T6985] syzkaller0: entered promiscuous mode
[  109.397832][ T6985] syzkaller0: entered allmulticast mode
[  109.792262][ T7012] netlink: 'syz.4.358': attribute type 10 has an invalid length.
[  109.827006][ T7012] team0: Port device vlan0 added
[  110.255624][ T7030] syzkaller0: entered promiscuous mode
[  110.259384][ T7037] netlink: 'syz.4.367': attribute type 3 has an invalid length.
[  110.268454][ T7030] syzkaller0: entered allmulticast mode
[  110.616318][ T7055] netlink: 'syz.1.373': attribute type 1 has an invalid length.
[  111.056542][ T7080] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[  111.156646][ T7088] netlink: 'syz.4.383': attribute type 15 has an invalid length.
[  111.170318][ T7080] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.186894][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.205890][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.232974][ T7083] bond2: (slave batadv_slave_0): Enslaving as a backup interface with an up link
[  111.305741][ T7064] netlink: 'syz.0.374': attribute type 1 has an invalid length.
[  111.344100][ T7064] nbd: error processing sock list
[  111.508594][ T7084] syzkaller0: entered promiscuous mode
[  111.523042][ T7084] syzkaller0: entered allmulticast mode
[  111.652148][ T7111] netlink: 'syz.1.387': attribute type 1 has an invalid length.
[  112.917860][ T7115] __nla_validate_parse: 8 callbacks suppressed
[  112.917890][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'.
[  112.934419][ T7111] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  113.001537][ T7129] ipt_REJECT: TCP_RESET invalid for non-tcp
[  113.025115][ T7128] Cannot find set identified by id 65534 to match
[  113.176453][ T7139] netlink: 'syz.3.394': attribute type 4 has an invalid length.
[  113.361607][ T7143] vlan2: entered promiscuous mode
[  113.374313][ T7143] bridge0: entered promiscuous mode
[  113.414453][ T7143] vlan2: entered allmulticast mode
[  113.450377][ T7155] Driver unsupported XDP return value 0 on prog  (id 63) dev N/A, expect packet loss!
[  113.454923][ T7143] bridge0: entered allmulticast mode
[  113.720494][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'.
[  113.773725][ T7170] smc: net device lo applied user defined pnetid SYZ0
[  113.799641][ T7170] smc: smcd device lo applied user defined pnetid SYZ0
[  114.212282][ T7173] syzkaller0: entered promiscuous mode
[  114.234058][ T7173] syzkaller0: entered allmulticast mode
[  114.341658][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'.
[  114.374599][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'.
[  114.397423][ T7196] net_ratelimit: 57 callbacks suppressed
[  114.397439][ T7196] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  114.442726][ T7198] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  115.753639][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'.
[  116.037653][ T7230] netlink: 'syz.3.418': attribute type 1 has an invalid length.
[  116.165842][ T7230] 8021q: adding VLAN 0 to HW filter on device bond2
[  116.407634][ T7268] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  116.607317][ T7274] syzkaller0: entered promiscuous mode
[  116.633372][ T7274] syzkaller0: entered allmulticast mode
[  116.651762][ T7283] wg0 speed is unknown, defaulting to 1000
[  116.693652][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'.
[  116.724022][ T7283] wg0 speed is unknown, defaulting to 1000
[  116.741867][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'.
[  116.757291][ T7283] wg0 speed is unknown, defaulting to 1000
[  116.768969][ T7279] openvswitch: netlink: Key type 8455 is out of range max 32
[  116.797672][ T7283] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  116.827205][ T7283] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  116.849635][ T7293] xt_limit: Overflow, try lower: 536871034/127
[  116.856979][ T7283] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  116.901123][ T7283] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.959798][ T7283] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  117.117774][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'.
[  117.141441][ T7283] wg0 speed is unknown, defaulting to 1000
[  117.171769][ T7283] wg0 speed is unknown, defaulting to 1000
[  117.201694][ T7283] wg0 speed is unknown, defaulting to 1000
[  117.215063][ T7304] syzkaller0: entered promiscuous mode
[  117.221497][ T7304] syzkaller0: entered allmulticast mode
[  117.229689][ T7283] wg0 speed is unknown, defaulting to 1000
[  117.357674][ T7283] wg0 speed is unknown, defaulting to 1000
[  117.428631][ T7316] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  117.446240][ T7316] bond2: option packets_per_slave: allowed values 0 - 65535
[  117.481161][ T7316] bond2 (unregistering): Released all slaves
[  117.494247][ T7320] netlink: 'syz.0.442': attribute type 58 has an invalid length.
[  117.550287][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'.
[  117.600520][ T7326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'.
[  117.969892][ T7364] __nla_validate_parse: 2 callbacks suppressed
[  117.969909][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'.
[  117.970475][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'.
[  117.996925][ T7359] bridge0: port 3(veth0) entered blocking state
[  118.005218][ T7359] bridge0: port 3(veth0) entered disabled state
[  118.017157][ T7359] veth0: entered allmulticast mode
[  118.038139][ T7359] veth0: entered promiscuous mode
[  118.059097][ T7359] bridge0: port 3(veth0) entered blocking state
[  118.065565][ T7359] bridge0: port 3(veth0) entered forwarding state
[  118.075459][ T7368] ip_tables: iptables: counters copy to user failed while replacing table
[  118.085124][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'.
[  118.097242][ T7369] ip_tables: iptables: counters copy to user failed while replacing table
[  118.467197][ T7385] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  118.476652][ T7385] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  120.233951][ T7423] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[  120.278389][ T7423] netlink: 200 bytes leftover after parsing attributes in process `syz.1.470'.
[  120.498322][ T7433] netlink: 264 bytes leftover after parsing attributes in process `syz.3.474'.
[  120.517403][ T7433] unsupported nlmsg_type 40
[  120.639554][ T7448] IPv4: Oversized IP packet from 127.202.26.0
[  120.686255][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'.
[  120.704061][ T7448] netlink: 96 bytes leftover after parsing attributes in process `syz.3.479'.
[  120.727531][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'.
[  120.993200][ T7462] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.162306][ T7466] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  121.203003][ T7466] bond2 (unregistering): Released all slaves
[  121.271040][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.487'.
[  121.432268][ T7487] netlink: 'syz.2.491': attribute type 2 has an invalid length.
[  121.462777][ T7493] netlink: 72 bytes leftover after parsing attributes in process `syz.1.493'.
[  121.507847][ T7492] pim6reg: entered allmulticast mode
[  121.931933][ T7521] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[  122.185210][ T7532] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  122.211232][ T7537] netlink: 'syz.0.508': attribute type 3 has an invalid length.
[  122.595582][ T7563] netlink: 'syz.0.516': attribute type 2 has an invalid length.
[  122.619387][ T7557] bridge1: entered promiscuous mode
[  122.650566][ T7557] bridge1: entered allmulticast mode
[  122.698226][ T7563] bridge0: port 3(vlan2) entered blocking state
[  122.713498][ T7563] bridge0: port 3(vlan2) entered disabled state
[  122.720447][ T7563] vlan2: entered allmulticast mode
[  122.739481][ T7563] geneve0: entered allmulticast mode
[  122.751059][ T7563] vlan2: entered promiscuous mode
[  122.789868][ T7563] geneve0: entered promiscuous mode
[  123.118829][ T7590] netlink: 'syz.2.525': attribute type 1 has an invalid length.
[  123.147948][ T7587] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  123.257341][ T7590] __nla_validate_parse: 10 callbacks suppressed
[  123.257360][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'.
[  123.334438][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.525'.
[  123.376701][ T7604] netlink: 'syz.4.529': attribute type 1 has an invalid length.
[  123.582248][ T7616] netlink: 'syz.3.531': attribute type 1 has an invalid length.
[  123.601510][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'.
[  123.627573][ T7620] netlink: 'syz.0.532': attribute type 21 has an invalid length.
[  123.647548][ T7604] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.655417][ T7620] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.675083][ T7620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.683480][ T7620] IPv6: NLM_F_CREATE should be set when creating new route
[  123.690822][ T7620] IPv6: NLM_F_CREATE should be set when creating new route
[  123.698094][ T7620] IPv6: NLM_F_CREATE should be set when creating new route
[  123.927070][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'.
[  124.041529][ T7639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.536'.
[  124.057798][ T7638] netlink: 'syz.4.535': attribute type 2 has an invalid length.
[  124.214756][ T7639] bond3 (unregistering): Released all slaves
[  124.272563][ T7662] netlink: 256 bytes leftover after parsing attributes in process `syz.0.540'.
[  124.281801][ T7662] netlink: 'syz.0.540': attribute type 9 has an invalid length.
[  124.291675][ T7663] netlink: 256 bytes leftover after parsing attributes in process `syz.0.540'.
[  124.833398][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'.
[  125.657085][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[  125.815283][ T7733] openvswitch: netlink: Duplicate or invalid key (type 0).
[  126.336372][ T7758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.562'.
[  126.391893][ T7751] : entered promiscuous mode
[  128.494638][ T7878] siw: device registration error -23
[  128.508327][ T7875] validate_nla: 4 callbacks suppressed
[  128.508342][ T7875] netlink: 'syz.4.593': attribute type 1 has an invalid length.
[  128.571069][ T7878] netlink: 'syz.0.592': attribute type 2 has an invalid length.
[  128.711625][ T7890] netlink: 'syz.0.596': attribute type 11 has an invalid length.
[  128.719881][ T7890] netlink: 'syz.0.596': attribute type 11 has an invalid length.
[  128.728908][ T7890] __nla_validate_parse: 9 callbacks suppressed
[  128.728937][ T7890] netlink: 228 bytes leftover after parsing attributes in process `syz.0.596'.
[  128.771419][ T7883] bond2: (slave geneve2): making interface the new active one
[  128.812284][ T7883] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  128.863035][ T6891] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  128.895389][ T6891] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  128.931568][ T6891] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  128.974840][ T6891] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  129.234257][ T7920] netlink: 152 bytes leftover after parsing attributes in process `syz.2.602'.
[  129.742535][ T7941] netlink: 184 bytes leftover after parsing attributes in process `syz.4.608'.
[  129.806625][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'.
[  129.874497][ T7941] team0 (unregistering): Port device team_slave_0 removed
[  129.922248][ T7941] team0 (unregistering): Port device team_slave_1 removed
[  129.954052][ T7941] team0 (unregistering): Port device vlan0 removed
[  130.181004][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'.
[  130.305195][ T7962] syzkaller0: entered promiscuous mode
[  130.319037][ T7962] syzkaller0: entered allmulticast mode
[  130.465804][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  130.475028][ T7983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.787689][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'.
[  130.799289][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.4.624'.
[  131.491581][ T7999] netlink: 71 bytes leftover after parsing attributes in process `syz.3.626'.
[  131.922724][ T7986] geneve3: entered promiscuous mode
[  131.928641][ T7986] geneve3: entered allmulticast mode
[  132.112222][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  132.309467][ T8020] openvswitch: netlink: Flow key attr not present in new flow.
[  132.690738][ T8047] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  132.713129][ T5618] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  132.899793][ T8066] netlink: 'syz.3.645': attribute type 4 has an invalid length.
[  132.984965][ T8078] netlink: 'syz.1.648': attribute type 12 has an invalid length.
[  132.991202][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  133.065699][ T5717] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  133.875581][ T8121] __nla_validate_parse: 15 callbacks suppressed
[  133.875598][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'.
[  134.037875][ T8124] netlink: 'syz.3.664': attribute type 1 has an invalid length.
[  134.053476][ T8133] netlink: 'syz.3.664': attribute type 1 has an invalid length.
[  134.141315][ T8133] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  134.144137][ T8124] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  135.013502][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'.
[  135.473317][ T8168] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  135.499401][ T8195] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check.
[  135.649323][ T8199] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check.
[  135.679150][ T8228] netlink: 'syz.3.690': attribute type 13 has an invalid length.
[  135.806688][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.692'.
[  135.834206][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[  135.902819][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[  136.121745][ T8250] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  136.168491][ T8250] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  136.550409][ T8277] syzkaller0: entered promiscuous mode
[  136.590077][ T8277] syzkaller0: entered allmulticast mode
[  136.758373][ T8285] syzkaller0: entered promiscuous mode
[  136.792450][ T8285] syzkaller0: entered allmulticast mode
[  136.830431][ T8227] infiniband syz2: set active
[  136.855735][ T8227] infiniband syz2: added veth1_to_batadv
[  136.882880][ T8227] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  136.900503][ T8227] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  136.918168][ T8227] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  136.977730][ T8227] RDS/IB: syz2: added
[  136.998460][ T8227] smc: adding ib device syz2 with port count 1
[  137.019144][ T8227] smc:    ib device syz2 port 1 has no pnetid
[  137.439304][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.501619][ T8320] netlink: 'syz.3.717': attribute type 1 has an invalid length.
[  137.627283][ T8320] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.689273][ T8324] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  137.723277][ T8324] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  137.874540][ T8325] bond3: (slave gretap0): making interface the new active one
[  137.905150][ T8325] bond3: (slave gretap0): Enslaving as an active interface with an up link
[  138.219050][ T8350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.727'.
[  138.233765][ T8350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.727'.
[  138.254430][ T8342] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.460387][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.728'.
[  138.499870][ T8356] netlink: 'syz.0.730': attribute type 29 has an invalid length.
[  138.851077][ T8380] netlink: 232 bytes leftover after parsing attributes in process `syz.1.735'.
[  138.902264][ T8372] netlink: 'syz.3.733': attribute type 1 has an invalid length.
[  138.925944][ T8372] xt_addrtype: ipv6 does not support BROADCAST matching
[  139.332552][ T8395] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  139.349101][ T8395] bond3 (unregistering): Released all slaves
[  139.825042][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.746'.
[  139.989027][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'.
[  140.015977][ T8430] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  140.019106][ T8428] bridge0: port 4(batadv1) entered blocking state
[  140.035472][ T8428] bridge0: port 4(batadv1) entered disabled state
[  140.042056][ T8428] batadv1: entered allmulticast mode
[  140.049549][ T8428] batadv1: entered promiscuous mode
[  140.190369][ T8434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.751'.
[  140.254446][ T8434] netlink: 'syz.2.751': attribute type 1 has an invalid length.
[  140.268996][ T8434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.751'.
[  140.349057][ T8439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.753'.
[  140.370601][ T8444] C: renamed from lo (while UP)
[  140.396689][ T8444] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.524816][ T3327] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  140.535092][ T3327] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  140.539483][ T8450] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes.
[  141.034837][ T8488] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[  141.047251][ T8488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.375695][ T8493] syzkaller0: entered promiscuous mode
[  141.381271][ T8493] syzkaller0: entered allmulticast mode
[  141.428763][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'.
[  141.437806][ T8494] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  142.230750][ T8508] wg2: Caught tx_queue_len zero misconfig
[  143.739365][ T8467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.123217][ T8520] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  144.157202][ T8520] bond3 (unregistering): Released all slaves
[  144.511576][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'.
[  144.661045][ T8549] syzkaller1: entered promiscuous mode
[  144.676453][ T8549] syzkaller1: entered allmulticast mode
[  145.075020][ T8577] Bluetooth: MGMT ver 1.23
[  145.144024][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  145.161710][ T8579] ieee802154 phy0 wpan0: encryption failed: -22
[  145.208420][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  145.685324][ T8608] netlink: 'syz.4.806': attribute type 1 has an invalid length.
[  145.691517][ T8607] dvmrp0: left allmulticast mode
[  145.734899][ T8612] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  145.806668][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'.
[  145.933793][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.809'.
[  146.093422][ T8631] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  146.107044][ T8631] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  146.310668][ T8644] netlink: 'syz.4.817': attribute type 4 has an invalid length.
[  146.337446][ T8645] tap0: tun_chr_ioctl cmd 2148553947
[  146.352150][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'.
[  146.372021][ T8647] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  146.452008][ T8651] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  146.474889][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'.
[  146.500195][ T8658] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.821'.
[  146.511540][ T8658] openvswitch: netlink: Message has 512 unknown bytes.
[  146.539388][ T8650] nbd: device at index 64 is going down
[  146.709424][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.821'.
[  146.727080][ T8666] netlink: 'syz.4.823': attribute type 13 has an invalid length.
[  146.877555][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  146.883307][ T8674] openvswitch: netlink: IP tunnel dst address not specified
[  146.951561][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  146.967514][ T5626] udevd[5626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  147.141307][ T8689] netlink: 'syz.0.830': attribute type 21 has an invalid length.
[  147.189635][ T8692] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.831'.
[  147.512654][ T8711] netlink: 'syz.4.837': attribute type 8 has an invalid length.
[  147.637816][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  147.729383][ T8704] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.875925][ T6886] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.305364][ T8744] bridge0: port 4(syz_tun) entered blocking state
[  148.313439][ T8744] bridge0: port 4(syz_tun) entered disabled state
[  148.321874][ T8744] syz_tun: entered allmulticast mode
[  148.330426][ T8744] syz_tun: entered promiscuous mode
[  148.337149][ T8744] bridge0: port 4(syz_tun) entered blocking state
[  148.344675][ T8744] bridge0: port 4(syz_tun) entered forwarding state
[  148.392546][ T3327] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.404960][ T3327] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.434833][ T3327] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.510196][ T8745] xt_hashlimit: size too large, truncated to 1048576
[  148.954494][ T8766] netlink: 'syz.1.853': attribute type 2 has an invalid length.
[  148.966644][ T8766] netlink: 'syz.1.853': attribute type 2 has an invalid length.
[  148.998542][ T8766] netlink: 'syz.1.853': attribute type 2 has an invalid length.
[  149.416369][ T8790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.482806][ T8790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.761615][ T8814] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  149.933834][ T8823] team0: Caught tx_queue_len zero misconfig
[  150.094242][ T8833] xfrm1: entered allmulticast mode
[  150.129762][ T8837] No such timeout policy "syz0"
[  152.700946][ T8810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  152.716297][ T8832] validate_nla: 1 callbacks suppressed
[  152.716314][ T8832] netlink: 'syz.0.871': attribute type 2 has an invalid length.
[  152.742087][ T8832] __nla_validate_parse: 7 callbacks suppressed
[  152.742102][ T8832] netlink: 244 bytes leftover after parsing attributes in process `syz.0.871'.
[  152.958320][   T30] audit: type=1804 audit(1787829962.435:3): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.876" name="/newroot/179/cgroup.controllers" dev="tmpfs" ino=926 res=1 errno=0
[  152.991694][ T8856] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  152.991694][ T8856] Please contact the netfilter-devel mailing list or update your nftables rules.
[  153.010055][   T30] audit: type=1800 audit(1787829962.455:4): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.876" name="cgroup.controllers" dev="tmpfs" ino=926 res=0 errno=0
[  153.194337][ T8866] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  153.233760][ T8868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.392802][ T8877] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  153.460359][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  153.515155][ T8879] nbd1: detected capacity change from 0 to 63
[  153.538901][ T5609] block nbd1: Receive control failed (result -32)
[  153.540660][ T1611] block nbd1: Send control failed (result -32)
[  153.557584][ T1611] block nbd1: Request send failed, requeueing
[  153.568644][ T1611] block nbd1: Dead connection, failed to find a fallback
[  153.577247][ T1611] block nbd1: shutting down sockets
[  153.583666][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.593548][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read
[  153.601490][ T1611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.611477][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read
[  153.619696][ T1611] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.636355][ T1611] Buffer I/O error on dev nbd1, logical block 2, async page read
[  153.644576][ T1611] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.654864][ T1611] Buffer I/O error on dev nbd1, logical block 3, async page read
[  153.665466][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  153.680721][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read
[  153.688605][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read
[  153.696486][ T1611] Buffer I/O error on dev nbd1, logical block 2, async page read
[  153.705276][ T1611] Buffer I/O error on dev nbd1, logical block 3, async page read
[  153.713245][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.722790][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read
[  153.730680][ T1611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  153.742428][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read
[  153.750644][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  153.760469][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  153.772485][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  153.784919][ T5626] ldm_validate_partition_table(): Disk read failed.
[  153.799110][ T5626] Dev nbd1: unable to read RDB block 0
[  153.806204][ T5626]  nbd1: unable to read partition table
[  153.825631][ T5626] ldm_validate_partition_table(): Disk read failed.
[  153.833885][ T5626] Dev nbd1: unable to read RDB block 0
[  153.841339][ T5626]  nbd1: unable to read partition table
[  153.848419][ T8896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.889'.
[  153.906696][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'.
[  153.979379][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'.
[  154.033715][ T8905] lo speed is unknown, defaulting to 1000
[  154.059702][ T8907] dummy0: Caught tx_queue_len zero misconfig
[  154.115509][ T8905] lo speed is unknown, defaulting to 1000
[  154.161337][ T8913] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  154.201087][ T8913] batman_adv: batadv0: Adding interface: gretap1
[  154.224693][ T8913] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  154.271015][ T8920] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  154.280138][ T8913] batman_adv: batadv0: Interface activated: gretap1
[  154.288274][ T8905] lo speed is unknown, defaulting to 1000
[  154.305386][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.897'.
[  154.358741][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.897'.
[  154.411418][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'.
[  154.459945][ T8926] lo: entered promiscuous mode
[  154.496179][ T8926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.676213][ T8927] netlink: 'syz.1.899': attribute type 2 has an invalid length.
[  154.712626][ T8927] netlink: 100 bytes leftover after parsing attributes in process `syz.1.899'.
[  154.730695][ T8932] netlink: 88 bytes leftover after parsing attributes in process `syz.1.899'.
[  155.019021][ T8949] openvswitch: netlink: Multiple metadata blocks provided
[  155.032737][ T8905] infiniband syz1: set active
[  155.038632][ T8905] infiniband syz1: added lo
[  155.047286][ T8905] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  155.052989][ T8905] infiniband syz1: Couldn't open port 1
[  155.084583][ T8943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.087076][ T8905] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  155.111736][ T8905] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  155.129731][ T8905] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  155.199544][ T8905] RDS/IB: syz1: added
[  155.200468][ T5741] lo speed is unknown, defaulting to 1000
[  155.215241][ T8905] smc: adding ib device syz1 with port count 1
[  155.236818][ T8905] smc:    ib device syz1 port 1 has no pnetid
[  155.248325][ T8953] gre1: entered promiscuous mode
[  155.257793][ T8953] gre1: entered allmulticast mode
[  155.347557][ T5741] lo speed is unknown, defaulting to 1000
[  155.357563][ T8905] lo speed is unknown, defaulting to 1000
[  155.460187][ T8943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.654622][ T8972] netlink: 'syz.3.912': attribute type 12 has an invalid length.
[  155.937288][ T8943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.981443][ T8990] netlink: 'syz.3.917': attribute type 2 has an invalid length.
[  156.005145][ T8905] lo speed is unknown, defaulting to 1000
[  156.149645][ T8943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.234659][ T8987] syzkaller0: entered promiscuous mode
[  156.251756][ T8987] syzkaller0: entered allmulticast mode
[  156.273063][ T8979] syzkaller1: entered promiscuous mode
[  156.279628][ T8979] syzkaller1: entered allmulticast mode
[  156.680660][ T9004] sit1: entered promiscuous mode
[  156.709395][ T9004] sit1: entered allmulticast mode
[  156.719915][ T8905] lo speed is unknown, defaulting to 1000
[  156.840910][ T9007] syzkaller0: entered promiscuous mode
[  156.857848][ T9007] syzkaller0: entered allmulticast mode
[  156.936293][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.370700][ T8905] lo speed is unknown, defaulting to 1000
[  158.383805][ T7354] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.412969][ T7354] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.456476][ T7354] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.536336][ T9030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  158.820593][ T5609] block nbd2: Receive control failed (result -32)
[  158.876619][ T9044] lo: Caught tx_queue_len zero misconfig
[  158.932533][ T9046] __nla_validate_parse: 12 callbacks suppressed
[  158.932550][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'.
[  159.100663][ T8905] lo speed is unknown, defaulting to 1000
[  159.331045][ T9061] netlink: 'syz.3.937': attribute type 9 has an invalid length.
[  159.748679][ T9088] netlink: 'syz.3.946': attribute type 2 has an invalid length.
[  160.127688][ T9112] ip_tables: iptables: counters copy to user failed while replacing table
[  160.298031][ T9120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.956'.
[  160.313394][ T9120] tipc: Invalid UDP bearer configuration
[  160.313445][ T9120] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  160.363456][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.956'.
[  160.460918][ T9130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.960'.
[  160.491495][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'.
[  161.038925][ T9165] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  161.746503][ T9205] netlink: 14 bytes leftover after parsing attributes in process `syz.2.983'.
[  161.880326][ T9215] netlink: 'syz.4.986': attribute type 15 has an invalid length.
[  161.909864][ T9215] netlink: 'syz.4.986': attribute type 17 has an invalid length.
[  161.933823][ T9215] lo: left promiscuous mode
[  162.003016][ T5798] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  162.135002][ T9215] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  162.157099][ T9215] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  162.191780][ T9215] bridge1: left promiscuous mode
[  162.207421][ T9215] bridge1: left allmulticast mode
[  162.230930][ T9215] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.260860][ T9215] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.281059][ T9215] geneve3: left promiscuous mode
[  162.287227][ T9215] geneve3: left allmulticast mode
[  162.293457][ T9215] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check.
[  162.341012][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.348264][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.396466][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'.
[  162.397924][ T5798] wg0 speed is unknown, defaulting to 1000
[  162.535175][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'.
[  162.581087][ T9245] netlink: 216 bytes leftover after parsing attributes in process `syz.2.995'.
[  162.613426][ T5798] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  162.770830][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'.
[  162.820520][ T9266] xfrm1: entered promiscuous mode
[  162.840646][ T9266] xfrm1: entered allmulticast mode
[  163.089430][ T9281] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  163.154834][ T6877] IPVS: starting estimator thread 0...
[  163.193754][ T9281] bridge0: port 4(syz_tun) entered disabled state
[  163.266790][ T9286] IPVS: using max 28 ests per chain, 67200 per kthread
[  163.289643][ T9281] syz_tun (unregistering): left allmulticast mode
[  163.304472][ T9281] syz_tun (unregistering): left promiscuous mode
[  163.318172][ T9281] bridge0: port 4(syz_tun) entered disabled state
[  163.926168][ T9329] netlink: 'syz.2.1015': attribute type 10 has an invalid length.
[  163.941624][ T9335] netlink: Invalid conntrack helper
[  163.954894][ T9335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.005547][ T9326] geneve2: entered promiscuous mode
[  164.167528][ T9351] netlink: 'syz.0.1025': attribute type 1 has an invalid length.
[  164.355525][ T9370] __nla_validate_parse: 4 callbacks suppressed
[  164.355543][ T9370] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1029'.
[  164.367412][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'.
[  164.386372][ T9358] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1026'.
[  164.574162][ T9377] openvswitch: netlink: Message has 8 unknown bytes.
[  164.821828][ T9383] netlink: 'syz.0.1033': attribute type 16 has an invalid length.
[  164.847878][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1033'.
[  164.861118][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'.
[  164.957404][ T9364] erspan0: entered promiscuous mode
[  164.972258][ T9364] erspan0: entered allmulticast mode
[  165.275348][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'.
[  165.294562][ T9394] bond3: option min_links: invalid value (18446744073709551614)
[  165.318060][ T9394] bond3: option min_links: allowed values 0 - 2147483647
[  165.330060][ T9394] bond3 (unregistering): Released all slaves
[  165.513340][ T9413] ip6tnl0: Caught tx_queue_len zero misconfig
[  165.572102][ T9418] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  165.670650][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'.
[  165.775861][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'.
[  165.817100][ T9429] openvswitch: netlink: Flow key attr not present in new flow.
[  165.853382][ T9436] netlink: 'syz.4.1050': attribute type 64 has an invalid length.
[  165.977770][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  166.525016][ T9479] tipc: Started in network mode
[  166.530083][ T9479] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  166.539294][ T9479] tipc: Enabled bearer <eth:ipvlan1>, priority 10
[  166.908885][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  167.059926][ T9524] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved
[  167.097197][ T9523] netlink: 'syz.0.1075': attribute type 23 has an invalid length.
[  167.507925][ T9551] netlink: 'syz.3.1086': attribute type 33 has an invalid length.
[  167.628674][ T9551] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  167.721456][ T9569] IPv6: NLM_F_CREATE should be specified when creating new route
[  167.729812][ T9569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.737111][ T9569] IPv6: NLM_F_CREATE should be set when creating new route
[  167.744453][ T9569] IPv6: NLM_F_CREATE should be set when creating new route
[  167.760339][ T9551] bond5 (unregistering): Released all slaves
[  167.810196][   T24] tipc: Node number set to 10136234
[  168.063189][ T9584] netlink: 'syz.3.1095': attribute type 1 has an invalid length.
[  168.288292][ T9597] netlink: 'syz.4.1100': attribute type 1 has an invalid length.
[  168.524217][ T9616] gre2: entered promiscuous mode
[  168.591603][ T9626] gre2: entered promiscuous mode
[  168.770128][ T9639] xt_socket: unknown flags 0x50
[  168.948992][ T9647] netlink: 'syz.1.1112': attribute type 3 has an invalid length.
[  169.158907][ T9655] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  169.162209][ T9651] nbd: device at index 64 is going down
[  169.451663][ T6037] udevd[6037]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  169.488572][ T5626] udevd[5626]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  169.802217][ T9697] __nla_validate_parse: 74 callbacks suppressed
[  169.802234][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1128'.
[  169.891724][ T9697] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  169.892572][ T9700] xt_socket: unknown flags 0x50
[  170.405098][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'.
[  170.451933][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'.
[  170.874959][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'.
[  173.058160][ T9714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.260073][ T9773] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  173.529973][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'.
[  173.656481][ T9801] team0: entered promiscuous mode
[  173.662035][ T9801] team_slave_0: entered promiscuous mode
[  173.674837][ T9801] team_slave_1: entered promiscuous mode
[  174.003574][ T9833] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1165'.
[  174.087057][ T9838] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2
[  174.121644][ T9838] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ
[  174.268947][ T9848] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  174.400066][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'.
[  174.498667][ T9857] 8021q: adding VLAN 0 to HW filter on device bond4
[  174.506218][ T9860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1175'.
[  174.752045][ T9873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1182'.
[  174.776484][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'.
[  174.816058][ T9883] netlink: 'syz.2.1183': attribute type 1 has an invalid length.
[  174.897042][ T9885] openvswitch: netlink: Duplicate or invalid key (type 0).
[  175.093275][ T9891] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.097098][ T6883] IPVS: starting estimator thread 0...
[  175.214497][ T9897] IPVS: using max 29 ests per chain, 69600 per kthread
[  175.308015][ T9907] syzkaller0: entered promiscuous mode
[  175.324625][ T9907] syzkaller0: entered allmulticast mode
[  175.368063][ T9912] __nla_validate_parse: 3 callbacks suppressed
[  175.368077][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'.
[  175.410886][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'.
[  175.414594][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'.
[  175.421933][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'.
[  175.814710][ T9942] xt_hashlimit: size too large, truncated to 1048576
[  175.899142][ T9948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'.
[  175.953739][ T9955] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1204'.
[  175.997110][ T9955] 0ªX¹¦Dö»: renamed from 
30ªî{X¹¦ (while UP)
[  176.188513][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'.
[  176.274479][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  176.288284][ T9925] bond5 (unregistering): Released all slaves
[  176.323072][ T9961] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  176.629546][ T9987] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1216'.
[  176.973875][ T6890] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.015921][ T6890] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.202110][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'.
[  177.249524][T10022] dvmrp0: entered allmulticast mode
[  177.355871][T10028] vxcan0: tx address claim with dest, not broadcast
[  177.360447][T10025] bond_slave_0: entered promiscuous mode
[  177.375286][T10025] lo: Caught tx_queue_len zero misconfig
[  177.378129][T10031] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  177.476987][T10037] Bluetooth: hci0: unsupported parameter 5134
[  177.483810][T10037] Bluetooth: hci0: unsupported parameter 8192
[  177.489896][T10037] Bluetooth: hci0: unsupported parameter 5134
[  177.497230][T10037] Bluetooth: hci0: unsupported parameter 8192
[  179.674433][ T9991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.898731][T10054] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  180.021255][T10052] bond0: (slave bond_slave_0): Releasing backup interface
[  180.064098][T10052] bond_slave_0 (unregistering): left allmulticast mode
[  180.255160][T10057] hsr_slave_1 (unregistering): left promiscuous mode
[  180.298570][T10058] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  180.315559][T10058] bond3 (unregistering): Released all slaves
[  180.346324][T10071] veth0_macvtap: Caught tx_queue_len zero misconfig
[  180.491057][T10091] __nla_validate_parse: 7 callbacks suppressed
[  180.491074][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'.
[  180.585774][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'.
[  180.607348][T10098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1246'.
[  180.633426][T10098] netlink: 'syz.4.1246': attribute type 7 has an invalid length.
[  180.673101][T10098] netlink: 'syz.4.1246': attribute type 8 has an invalid length.
[  180.691398][T10104] Bluetooth: MGMT ver 1.23
[  180.710358][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  180.833340][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  180.874409][T10103] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  180.885346][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  180.907910][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  180.925624][T10109] netlink: 'syz.2.1250': attribute type 6 has an invalid length.
[  180.960574][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  180.963788][T10120] ip6gre1: entered allmulticast mode
[  181.009896][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  181.044741][T10112] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1251'.
[  181.092148][T10124] vlan2: entered promiscuous mode
[  181.100646][T10124] geneve1: entered promiscuous mode
[  181.106352][T10124] vlan2: entered allmulticast mode
[  181.111700][T10124] geneve1: entered allmulticast mode
[  181.235075][T10125] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  181.427012][T10132] geneve0: entered promiscuous mode
[  181.437363][T10132] geneve0: entered allmulticast mode
[  181.611971][T10144] bridge2: entered promiscuous mode
[  181.951677][T10158] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  182.259133][T10177] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  182.396317][T10176] syzkaller1: entered promiscuous mode
[  182.411936][T10176] syzkaller1: entered allmulticast mode
[  182.440844][T10176] syzkaller1: left promiscuous mode
[  182.463733][T10176] syzkaller1: left allmulticast mode
[  182.605337][T10200] kthread_run failed with err -4
[  182.793679][T10214] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  182.842247][T10218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  182.849597][T10218] IPv6: NLM_F_CREATE should be set when creating new route
[  182.909744][T10214] bond5: entered promiscuous mode
[  182.940460][T10214] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.057952][T10222] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.091129][T10222] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  183.122861][T10222] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  183.161809][T10222] bond5: (slave ip6gre2): making interface the new active one
[  183.180855][T10222] ip6gre2: entered promiscuous mode
[  183.190675][T10222] bond5: (slave ip6gre2): Enslaving as an active interface with an up link
[  183.415301][T10247] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  183.643780][T10257] C: Caught tx_queue_len zero misconfig
[  183.650317][T10256] netlink: 'syz.3.1286': attribute type 1 has an invalid length.
[  183.676579][T10257] openvswitch: netlink: IPv6 tunnel dst address is zero
[  183.811408][T10266] sctp: [Deprecated]: syz.1.1290 (pid 10266) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.811408][T10266] Use struct sctp_sack_info instead
[  183.917730][T10269] netlink: 'syz.1.1290': attribute type 8 has an invalid length.
[  184.022136][T10272] syzkaller1: entered promiscuous mode
[  184.043709][T10272] syzkaller1: entered allmulticast mode
[  184.071173][T10272] netlink: 'syz.4.1292': attribute type 2 has an invalid length.
[  184.268852][T10285] ip6tnl0: Caught tx_queue_len zero misconfig
[  184.421255][T10297] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  184.669684][T10299] ip6gre2: entered promiscuous mode
[  184.675374][T10299] ip6gre2: entered allmulticast mode
[  185.126698][T10341] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  186.936711][T10272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.946329][T10301] netlink: 'syz.2.1299': attribute type 1 has an invalid length.
[  186.961145][T10301] __nla_validate_parse: 44 callbacks suppressed
[  186.961163][T10301] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1299'.
[  187.160604][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'.
[  187.160764][T10363] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1316'.
[  187.194113][T10368] team0: Device gtp0 is of different type
[  187.200002][T10365] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1316'.
[  187.448703][T10383] netlink: 'syz.4.1324': attribute type 1 has an invalid length.
[  187.571222][T10383] 8021q: adding VLAN 0 to HW filter on device bond5
[  187.634764][T10387] bond5: (slave gretap1): making interface the new active one
[  187.668323][T10387] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  187.715885][T10396] gre0: entered promiscuous mode
[  187.865244][T10403] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  188.005791][T10410] macvtap1: entered promiscuous mode
[  188.020964][T10410] macvtap1: entered allmulticast mode
[  188.049392][T10410] veth1_vlan: entered allmulticast mode
[  188.071943][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.098218][T10413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.108050][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.119977][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.160473][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.211554][T10414] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1331'.
[  188.980218][T10466] macsec2: entered promiscuous mode
[  188.990790][T10466] macsec0: entered promiscuous mode
[  189.002010][T10466] macsec0: left promiscuous mode
[  189.009285][T10472] openvswitch: netlink: Multiple metadata blocks provided
[  189.158373][T10477] netlink: 'syz.1.1350': attribute type 1 has an invalid length.
[  189.334072][T10486] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  189.981013][T10531] tunl0: Caught tx_queue_len zero misconfig
[  190.220839][T10549] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  190.351280][T10554] veth0: Caught tx_queue_len zero misconfig
[  193.945062][T10615] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  194.172071][T10632] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  194.426286][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  194.441857][T10646] TC_ACT_REPEAT abuse ?
[  194.637753][T10651] netlink: 'syz.2.1394': attribute type 1 has an invalid length.
[  194.740943][T10668] __nla_validate_parse: 4 callbacks suppressed
[  194.740959][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1399'.
[  195.023981][T10684] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  195.117198][T10691] netlink: 'syz.0.1405': attribute type 1 has an invalid length.
[  195.146809][T10692] FAULT_INJECTION: forcing a failure.
[  195.146809][T10692] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  195.207319][T10692] CPU: 0 UID: 0 PID: 10692 Comm: syz.3.1402 Not tainted syzkaller #0 PREEMPT(full) 
[  195.207344][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  195.207362][T10692] Call Trace:
[  195.207369][T10692]  <TASK>
[  195.207380][T10692]  dump_stack_lvl+0xe8/0x150
[  195.207422][T10692]  should_fail_ex+0x410/0x560
[  195.207454][T10692]  _copy_from_iter+0x1d3/0x1660
[  195.207480][T10692]  ? skb_set_owner_w+0x263/0x3d0
[  195.207520][T10692]  ? __pfx__copy_from_iter+0x10/0x10
[  195.207554][T10692]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  195.207576][T10692]  skb_copy_datagram_from_iter+0xe6/0x720
[  195.207601][T10692]  ? skb_put+0x112/0x210
[  195.207627][T10692]  tun_get_user+0xc7f/0x44d0
[  195.207664][T10692]  ? aa_file_perm+0x18b/0x15f0
[  195.207686][T10692]  ? aa_file_perm+0x4ed/0x15f0
[  195.207704][T10692]  ? __pfx_tun_get_user+0x10/0x10
[  195.207728][T10692]  ? __lock_acquire+0x683/0x2cf0
[  195.207753][T10692]  ? kstrtoull+0x12f/0x1d0
[  195.207790][T10692]  ? ref_tracker_alloc+0x341/0x4b0
[  195.207805][T10692]  ? get_pid_task+0x20/0x1f0
[  195.207830][T10692]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  195.207850][T10692]  ? tun_get+0x1c/0x2f0
[  195.207872][T10692]  ? tun_get+0x1c/0x2f0
[  195.207908][T10692]  ? tun_get+0x1c/0x2f0
[  195.207930][T10692]  ? tun_get+0x1c/0x2f0
[  195.207955][T10692]  tun_chr_write_iter+0x113/0x200
[  195.207981][T10692]  vfs_write+0x612/0xba0
[  195.208012][T10692]  ? __pfx_vfs_write+0x10/0x10
[  195.208048][T10692]  ? __fget_files+0x2a/0x420
[  195.208079][T10692]  ksys_write+0x150/0x270
[  195.208107][T10692]  ? __pfx_ksys_write+0x10/0x10
[  195.208142][T10692]  do_syscall_64+0x166/0x520
[  195.208165][T10692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.208187][T10692]  ? clear_bhb_loop+0x70/0xc0
[  195.208209][T10692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.208226][T10692] RIP: 0033:0x7f07d839e0d9
[  195.208251][T10692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.208265][T10692] RSP: 002b:00007f07d9197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  195.208292][T10692] RAX: ffffffffffffffda RBX: 00007f07d8626090 RCX: 00007f07d839e0d9
[  195.208304][T10692] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004
[  195.208316][T10692] RBP: 00007f07d9197090 R08: 0000000000000000 R09: 0000000000000000
[  195.208327][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.208337][T10692] R13: 00007f07d8626128 R14: 00007f07d8626090 R15: 00007ffd53f39f88
[  195.208367][T10692]  </TASK>
[  195.265028][T10691] 8021q: adding VLAN 0 to HW filter on device bond3
[  195.572252][T10709] TC_ACT_REPEAT abuse ?
[  195.954406][T10733] macvlan0: entered promiscuous mode
[  196.188638][T10742] bond6: option all_slaves_active: invalid value (222)
[  196.199000][T10742] bond6 (unregistering): Released all slaves
[  196.493393][T10767] netlink: 'syz.0.1428': attribute type 75 has an invalid length.
[  196.610200][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'.
[  196.732077][T10786] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  196.911961][T10801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1438'.
[  196.921269][T10801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1438'.
[  197.004200][T10811] netlink: 'syz.4.1439': attribute type 1 has an invalid length.
[  197.078768][T10818] netlink: 'syz.3.1442': attribute type 8 has an invalid length.
[  197.120671][T10811] bond6: entered promiscuous mode
[  197.126696][T10811] 8021q: adding VLAN 0 to HW filter on device bond6
[  197.234068][T10823] 8021q: adding VLAN 0 to HW filter on device bond6
[  197.271938][T10823] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  197.309465][T10835] Bluetooth: hci0: unsupported parameter 5135
[  197.321520][T10823] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  197.327298][T10835] Bluetooth: hci0: unsupported parameter 8192
[  197.338596][T10835] Bluetooth: hci0: unsupported parameter 5135
[  197.349186][T10835] Bluetooth: hci0: unsupported parameter 8192
[  197.355481][T10823] bond6: (slave ip6gre2): making interface the new active one
[  197.361042][T10835] Bluetooth: hci0: unsupported parameter 5135
[  197.369787][T10835] Bluetooth: hci0: unsupported parameter 8192
[  197.374964][T10823] ip6gre2: entered promiscuous mode
[  197.376593][T10835] Bluetooth: hci0: unsupported parameter 5135
[  197.389143][T10835] Bluetooth: hci0: unsupported parameter 8192
[  197.407162][T10823] bond6: (slave ip6gre2): Enslaving as an active interface with an up link
[  197.438388][T10832] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1445'.
[  197.477860][T10833] syzkaller0: entered promiscuous mode
[  197.499179][T10840] netlink: 'syz.3.1447': attribute type 2 has an invalid length.
[  197.528462][T10833] syzkaller0: entered allmulticast mode
[  197.554608][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1447'.
[  197.572819][T10842] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  197.791096][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  197.986827][T10855] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1450'.
[  198.238262][T10872] wg0 speed is unknown, defaulting to 1000
[  198.544776][T10883] bond4: (slave vlan1): Device is not bonding slave
[  198.551594][T10883] bond4: option active_slave: invalid value (vlan1)
[  198.560202][T10883] bond4 (unregistering): Released all slaves
[  198.619457][T10888] netlink: 'syz.4.1458': attribute type 7 has an invalid length.
[  198.658390][T10888] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1458'.
[  198.696823][T10887] xt_hashlimit: size too large, truncated to 1048576
[  198.955590][T10911] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  199.016487][T10911] netlink: 'syz.2.1463': attribute type 2 has an invalid length.
[  199.037221][T10911] netlink: 'syz.2.1463': attribute type 2 has an invalid length.
[  199.065930][T10911] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1463'.
[  199.133352][T10920] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002
[  199.631818][T10945] netlink: 'syz.1.1471': attribute type 11 has an invalid length.
[  199.801230][T10961] netlink: 'syz.4.1475': attribute type 1 has an invalid length.
[  199.877983][T10963] x_tables: duplicate underflow at hook 2
[  199.976965][T10961] bond7: entered promiscuous mode
[  200.004693][T10961] 8021q: adding VLAN 0 to HW filter on device bond7
[  200.114250][T10977] bond8: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  200.127606][T10977] bond8 (unregistering): Released all slaves
[  200.238991][T10988] vlan3: entered allmulticast mode
[  200.264827][T10988] bond0: entered allmulticast mode
[  200.275057][T10988] bond_slave_0: entered allmulticast mode
[  200.302418][T10988] bond_slave_1: entered allmulticast mode
[  200.506213][T11010] netlink: 'syz.2.1487': attribute type 11 has an invalid length.
[  200.542656][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'.
[  200.913652][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'.
[  201.273728][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'.
[  201.486352][T11064] bridge0: port 3(veth0) entered disabled state
[  201.493381][T11064] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.501040][T11064] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.548021][T11073] bridge0: port 3(veth0) entered blocking state
[  201.554558][T11073] bridge0: port 3(veth0) entered forwarding state
[  201.562073][T11073] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.569285][T11073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.576811][T11073] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.584040][T11073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.598536][T11073] bridge0: entered promiscuous mode
[  201.605916][T11073] bridge0: entered allmulticast mode
[  201.623159][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  201.632999][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  201.635484][ T5622] Bluetooth: hci3: command 0x0406 tx timeout
[  201.813445][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'.
[  201.822016][T11081] 0: reclassify loop, rule prio 0, protocol 03
[  201.966971][T11088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.999898][T11093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.431365][T11121] xt_TPROXY: Can be used only with -p tcp or -p udp
[  202.572282][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1524'.
[  202.636681][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1525'.
[  202.669166][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1525'.
[  202.697976][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1525'.
[  202.710263][T11136] sctp: [Deprecated]: syz.0.1527 (pid 11136) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.710263][T11136] Use struct sctp_sack_info instead
[  202.748762][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'.
[  202.765738][T11142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1530'.
[  203.467622][T11192] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  203.538172][T11193] bridge4: entered promiscuous mode
[  203.549297][T11193] bridge4: entered allmulticast mode
[  203.552962][ T5609] Bluetooth: hci4: command 0x0405 tx timeout
[  203.571909][T11191] syzkaller0: entered promiscuous mode
[  203.579962][T11191] syzkaller0: entered allmulticast mode
[  203.750467][T11204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.936288][T11212] openvswitch: netlink: Key 6 has unexpected len 1 expected 2
[  203.954535][T11220] netlink: 'syz.4.1553': attribute type 30 has an invalid length.
[  203.979933][T11220] netlink: 'syz.4.1553': attribute type 30 has an invalid length.
[  204.181661][T11239] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  204.374672][T11249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  204.473136][T11253] openvswitch: netlink: Flow actions attr not present in new flow.
[  204.790026][T11274] netlink: 'syz.4.1570': attribute type 30 has an invalid length.
[  205.166473][T11299] openvswitch: netlink: Flow key attr not present in new flow.
[  205.343622][T11318] IPVS: length: 8 != 1152
[  205.404110][T11316] 8021q: adding VLAN 0 to HW filter on device bond4
[  205.525336][T11331] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  205.883762][T11349] __nla_validate_parse: 18 callbacks suppressed
[  205.883780][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1593'.
[  206.089652][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  206.131734][T11369] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  206.227386][T11379] netlink: 'syz.3.1603': attribute type 1 has an invalid length.
[  206.239080][T11379] netlink: 'syz.3.1603': attribute type 3 has an invalid length.
[  206.248179][T11379] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1603'.
[  206.258569][T11379] NCSI netlink: No device for ifindex 813332851
[  206.270825][T11383] netlink: 'syz.2.1602': attribute type 32 has an invalid length.
[  206.295712][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'.
[  206.324578][T11383] bond4: option coupled_control: invalid value (192)
[  206.335163][T11383] bond4 (unregistering): Released all slaves
[  206.490809][T11388] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  206.507452][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'.
[  206.784662][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'.
[  206.860550][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'.
[  207.040158][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'.
[  207.057115][T11410] bond0: entered promiscuous mode
[  207.079766][T11410] bond_slave_0: entered promiscuous mode
[  207.161285][T11410] bond_slave_1: entered promiscuous mode
[  207.221627][T11410] batadv0: entered promiscuous mode
[  207.249475][T11410] 8021q: adding VLAN 0 to HW filter on device hsr1
[  207.279927][T11410] bond0: left promiscuous mode
[  207.290948][T11410] bond_slave_0: left promiscuous mode
[  207.307782][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'.
[  207.320635][T11410] bond_slave_1: left promiscuous mode
[  207.351301][T11410] batadv0: left promiscuous mode
[  207.440102][T11418] macvlan3: entered promiscuous mode
[  207.467738][T11418] macvlan3: entered allmulticast mode
[  207.499259][T11418] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  207.576305][T11421] hsr_slave_1 (unregistering): left promiscuous mode
[  207.667086][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'.
[  208.298286][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.342241][T11451] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.757169][T11463] netlink: 'syz.1.1628': attribute type 2 has an invalid length.
[  208.786813][T11468] xt_l2tp: wrong L2TP version: 0
[  209.918612][T11500] netlink: 'syz.0.1639': attribute type 21 has an invalid length.
[  211.092249][T11513] __nla_validate_parse: 3 callbacks suppressed
[  211.092270][T11513] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1641'.
[  211.608251][T11520] tipc: Started in network mode
[  211.679826][T11520] tipc: Node identity , cluster identity 4711
[  211.825682][T11520] tipc: Failed to set node id, please configure manually
[  212.070874][T11520] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  212.343670][T11524] netlink: 'syz.0.1645': attribute type 58 has an invalid length.
[  212.409713][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'.
[  212.632808][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'.
[  213.964954][T11560] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1656'.
[  214.247231][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'.
[  214.623559][T11575] bond5: option xmit_hash_policy: invalid value (64)
[  214.767126][T11575] bond5 (unregistering): Released all slaves
[  214.913214][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  215.565881][T11589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.989982][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'.
[  216.046092][T11600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1662'.
[  216.168792][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1661'.
[  217.132615][T11597] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  217.525981][T11615] veth0: entered promiscuous mode
[  217.651510][T11620] veth0: left promiscuous mode
[  217.960001][T11635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1668'.
[  217.985202][T11635] tipc: Invalid UDP bearer configuration
[  217.985254][T11635] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  218.054871][T11645] netlink: 'syz.2.1668': attribute type 9 has an invalid length.
[  218.167180][T11648] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1672'.
[  218.183234][T11635] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1668'.
[  218.462828][ T6446] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.820061][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'.
[  218.956056][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'.
[  219.058537][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'.
[  219.606221][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'.
[  219.959011][T11694] syzkaller1: entered promiscuous mode
[  219.989656][T11694] syzkaller1: entered allmulticast mode
[  220.288590][T11710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1689'.
[  220.384731][T11710] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1689'.
[  220.788446][T11699] syzkaller0: entered promiscuous mode
[  220.891248][T11699] syzkaller0: entered allmulticast mode
[  221.231110][T11728] netlink: 'syz.4.1694': attribute type 1 has an invalid length.
[  221.513760][T11732] netlink: 'syz.3.1695': attribute type 11 has an invalid length.
[  230.979173][T11762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.014665][T11762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.070135][T11762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.127660][T11762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.360842][T11787] xt_hashlimit: size too large, truncated to 1048576
[  234.898947][T11826] __nla_validate_parse: 1 callbacks suppressed
[  234.898964][T11826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1722'.
[  234.980649][T11829] Bluetooth: hci0: Opcode 0x080f failed: -22
[  235.020574][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'.
[  235.556207][T11847] netlink: 'syz.3.1726': attribute type 11 has an invalid length.
[  236.024151][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'.
[  236.069159][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1729'.
[  236.078011][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1727'.
[  236.165274][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'.
[  236.254935][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1730'.
[  236.414581][T11871] netlink: 'syz.0.1732': attribute type 21 has an invalid length.
[  236.497777][T11871] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1732'.
[  236.554095][T11862] wg0 speed is unknown, defaulting to 1000
[  236.555419][T11875] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  236.614731][T11875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1733'.
[  237.288875][T11887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1737'.
[  237.460193][T11896] veth0: entered promiscuous mode
[  237.537847][T11891] veth0: left promiscuous mode
[  239.126615][T11862] lo speed is unknown, defaulting to 1000
[  239.963597][T11941] __nla_validate_parse: 2 callbacks suppressed
[  239.963616][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'.
[  240.511139][T11950] bond4: entered promiscuous mode
[  240.586712][T11950] bond4: entered allmulticast mode
[  240.942602][T11959] netlink: 'syz.0.1752': attribute type 2 has an invalid length.
[  241.469899][T11967] SET target dimension over the limit!
[  242.059871][T11955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.832107][T11983] netlink: 'syz.2.1759': attribute type 21 has an invalid length.
[  242.934895][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  243.127230][T11989] block nbd3: Unsupported socket: should be TCP or UNIX.
[  243.177567][T11955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.843968][T11983] netlink: 'syz.2.1759': attribute type 6 has an invalid length.
[  243.872341][T11983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1759'.
[  244.059375][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  244.148324][T11997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.815674][T11955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.430175][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'.
[  246.190774][T12027] netlink: 'syz.0.1767': attribute type 4 has an invalid length.
[  246.432867][ T6444] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.678177][T12036] netlink: 'syz.0.1767': attribute type 4 has an invalid length.
[  246.957282][T12033] pimreg: entered allmulticast mode
[  247.196269][ T6890] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.228531][ T6444] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.270075][ T6444] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.341081][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'.
[  249.701016][T12078] bridge0: Caught tx_queue_len zero misconfig
[  250.199141][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'.
[  250.279488][T12101] veth1: Caught tx_queue_len zero misconfig
[  251.277168][T12122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1790'.
[  251.493028][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'.
[  251.644157][T12129] bond0: Caught tx_queue_len zero misconfig
[  251.980149][T12142] netlink: 'syz.2.1795': attribute type 1 has an invalid length.
[  252.052160][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1798'.
[  252.088960][T12146] IPv6: NLM_F_CREATE should be specified when creating new route
[  252.117870][T12142] veth3: entered promiscuous mode
[  252.132500][T12142] veth3: entered allmulticast mode
[  252.141697][T12146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  252.149056][T12146] IPv6: NLM_F_CREATE should be set when creating new route
[  252.156342][T12146] IPv6: NLM_F_CREATE should be set when creating new route
[  252.751238][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'.
[  253.135355][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  253.613497][T12180] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  253.746408][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  254.727317][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  255.268808][T12209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.865497][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  256.017955][T12225] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  256.243760][T12225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1815'.
[  256.278795][T12233] netlink: 'syz.3.1817': attribute type 21 has an invalid length.
[  256.442780][T12233] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1817'.
[  256.757448][T12233] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1817'.
[  257.190730][T12244] bond4: Unable to set up delay as MII monitoring is disabled
[  257.331628][T12244] bond4 (unregistering): Released all slaves
[  257.576183][T12261] pim6reg: entered allmulticast mode
[  257.728976][T12262] pim6reg: left allmulticast mode
[  259.129928][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'.
[  260.848308][T12308] siw: device registration error -23
[  262.856411][T12353] netlink: 'syz.4.1853': attribute type 1 has an invalid length.
[  263.116410][T12353] 8021q: adding VLAN 0 to HW filter on device bond9
[  263.136885][T12363] netlink: 'syz.0.1856': attribute type 1 has an invalid length.
[  263.223674][T12358] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1855'.
[  263.596136][T12363] 8021q: adding VLAN 0 to HW filter on device bond4
[  264.165533][T12385] netlink: 'syz.3.1861': attribute type 6 has an invalid length.
[  264.365682][T12387] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1860'.
[  264.475153][T12393] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1862'.
[  264.550695][T12393] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1862'.
[  264.968837][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  265.539233][T12393] 8021q: adding VLAN 0 to HW filter on device team1
[  265.691149][T12407] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  266.985637][T12418] wg0: Caught tx_queue_len zero misconfig
[  267.319597][T12428] nft_compat: unsupported protocol 0
[  267.531511][T12435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1870'.
[  267.575028][T12437] ksmbd: Unknown IPC event: 1, ignore.
[  267.871683][T12440] bridge0: port 2(bridge_slave_1) entered listening state
[  267.921419][T12450] ip_tables: iptables: counters copy to user failed while replacing table
[  268.010220][T12440] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.319813][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'.
[  268.343654][T12455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.404452][T12457] sctp: [Deprecated]: syz.1.1879 (pid 12457) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.404452][T12457] Use struct sctp_sack_info instead
[  269.274753][T12469] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  269.823538][T12474] 8021q: VLANs not supported on xfrm0
[  269.842259][T12472] Timeout policy `syz0' can only be used by L3 protocol number 64507
[  270.158114][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.323227][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.351496][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.446008][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.579331][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.675980][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'.
[  270.731748][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'.
[  270.987758][T12497] vlan3: entered promiscuous mode
[  271.053565][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'.
[  271.075643][T12497] geneve1: entered promiscuous mode
[  271.090876][T12497] vlan3: entered allmulticast mode
[  271.103374][T12497] geneve1: entered allmulticast mode
[  271.848309][T12509] tipc: Started in network mode
[  271.894482][T12509] tipc: Node identity fe8570686338, cluster identity 4711
[  271.959404][T12509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.132967][T12525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1898'.
[  272.611090][T12524] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  272.962911][   T29] tipc: Node number set to 2646437992
[  273.267942][T12534] netlink: 'syz.3.1901': attribute type 2 has an invalid length.
[  273.325046][T12534] __nla_validate_parse: 2 callbacks suppressed
[  273.325062][T12534] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1901'.
[  273.475116][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'.
[  273.519700][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1904'.
[  273.654278][T12547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'.
[  273.710095][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1902'.
[  273.736548][T12551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1905'.
[  273.831636][T12553] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1906'.
[  274.342198][T12570] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1909'.
[  276.505727][T12601] ip_tables: iptables: counters copy to user failed while replacing table
[  277.556841][T12623] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  277.790513][T12639] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1929'.
[  278.030186][T12614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.050579][T12636] bridge1: entered allmulticast mode
[  278.288909][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.329293][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'.
[  278.764737][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  278.826024][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  279.248982][T12678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.220937][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'.
[  280.381203][T12703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1946'.
[  280.828099][T12710] Bluetooth: ISO socket layer initialized
[  281.142077][T12693] 8021q: adding VLAN 0 to HW filter on device bond10
[  281.245769][T12703] bond10: entered allmulticast mode
[  282.137036][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.841389][T12732] netlink: zone id is out of range
[  282.849159][ T6444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.960372][T12737] netlink: Unknown nat attribute (0)
[  282.982346][T12737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.195006][T12732] netlink: zone id is out of range
[  283.372355][T12732] netlink: zone id is out of range
[  283.493376][T12732] netlink: zone id is out of range
[  283.580076][T12732] netlink: zone id is out of range
[  283.689679][T12732] netlink: zone id is out of range
[  284.176216][ T6446] IPVS: starting estimator thread 0...
[  284.303211][T12752] IPVS: using max 28 ests per chain, 67200 per kthread
[  285.525883][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.656324][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.221963][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'.
[  287.870456][ T6883] net_ratelimit: 10 callbacks suppressed
[  287.870481][ T6883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.905526][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.323384][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  288.769016][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  289.923597][ T5272] veth1_vlan: left promiscuous mode
[  290.032514][T12806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1975'.
[  290.132041][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'.
[  290.237337][T12806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1975'.
[  294.316335][T12853] raw_sendmsg: syz.2.1992 forgot to set AF_INET. Fix it!
[  295.229854][T12859] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  299.064403][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.079086][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.089503][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.098881][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.107894][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.052328][T12917] bridge0: port 1(syz_tun) entered blocking state
[  300.074902][T12917] bridge0: port 1(syz_tun) entered disabled state
[  300.095999][T12917] syz_tun: entered allmulticast mode
[  300.121852][T12917] syz_tun: entered promiscuous mode
[  300.267141][T12917] bridge0: port 1(syz_tun) entered blocking state
[  300.273747][T12917] bridge0: port 1(syz_tun) entered forwarding state
[  300.757226][T12898] wg0 speed is unknown, defaulting to 1000
[  301.239840][ T5609] Bluetooth: hci5: command tx timeout
[  303.165415][T12898] lo speed is unknown, defaulting to 1000
[  303.312880][ T5609] Bluetooth: hci5: command tx timeout
[  303.714246][T12964] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2027'.
[  305.383078][ T5609] Bluetooth: hci5: command tx timeout
[  305.770585][T12982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2034'.
[  306.357586][T12990] xt_TPROXY: Can be used only with -p tcp or -p udp
[  307.462577][ T5609] Bluetooth: hci5: command tx timeout
[  308.398499][T12999] wg0 speed is unknown, defaulting to 1000
[  311.781790][T12898] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.813263][T12898] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.835886][T12898] bridge_slave_0: entered allmulticast mode
[  311.867998][T12898] bridge_slave_0: entered promiscuous mode
[  311.924054][T12898] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.952921][T12898] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.982400][T12898] bridge_slave_1: entered allmulticast mode
[  312.025602][T12898] bridge_slave_1: entered promiscuous mode
[  312.099642][T12999] lo speed is unknown, defaulting to 1000
[  312.312243][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.416861][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.629873][T12898] team0: Port device team_slave_0 added
[  312.699760][T12898] team0: Port device team_slave_1 added
[  312.872075][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.889727][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  313.010950][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.087917][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.141627][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  313.290745][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.819567][T12898] hsr_slave_0: entered promiscuous mode
[  313.904943][T12898] hsr_slave_1: entered promiscuous mode
[  313.946844][T12898] debugfs: 'hsr0' already exists in 'hsr'
[  313.990594][T12898] Cannot create hsr debugfs directory
[  315.050905][T13074] veth1_to_bond: entered allmulticast mode
[  315.178415][T13073] veth1_to_bond: left allmulticast mode
[  315.441093][T13016] Cannot find add_set index 0 as target
[  317.307509][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  318.220988][T12898] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  318.731406][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  318.827878][T12898] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  318.916377][T13097] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2067'.
[  318.964001][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  319.028261][T12898] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  319.445091][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  319.694190][T12898] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  319.928336][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  321.735573][T12718] Set syz1 is full, maxelem 65536 reached
[  322.083626][T12898] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.348966][T12898] 8021q: adding VLAN 0 to HW filter on device team0
[  322.453620][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.460828][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.606477][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.613909][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.732211][T13131] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2079'.
[  323.417937][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'.
[  323.486685][T13135] SET target dimension over the limit!
[  324.434356][ T6446] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.844437][T13162] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  324.933433][ T3327] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.187172][ T6446] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.499175][T13188] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20004
[  325.587273][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'.
[  325.696649][T13183] syz_tun: entered allmulticast mode
[  325.718239][T13178] nbd: socks must be embedded in a SOCK_ITEM attr
[  325.727009][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'.
[  325.790893][T13184] dvmrp8: entered allmulticast mode
[  325.875976][ T6446] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.935034][T13182] syzkaller1: entered promiscuous mode
[  325.973160][T13182] syzkaller1: entered allmulticast mode
[  326.082676][T13184] syz_tun: left allmulticast mode
[  326.805665][T13208] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  326.857582][ T6446] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.217495][T13217] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  327.983080][ T1041] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.044679][T13231] netlink: 'syz.2.2101': attribute type 2 has an invalid length.
[  328.056826][ T6884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.214494][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.256608][ T1041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.413615][T13236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2103'.
[  328.625826][ T6446] vlan2: left allmulticast mode
[  328.630900][ T6446] geneve0: left allmulticast mode
[  328.750524][ T6446] vlan2: left promiscuous mode
[  328.806614][ T6446] geneve0: left promiscuous mode
[  328.821875][T13243] netlink: 'syz.3.2105': attribute type 3 has an invalid length.
[  328.839204][ T6446] bridge0: port 3(vlan2) entered disabled state
[  328.862224][T13243] netlink: 'syz.3.2105': attribute type 4 has an invalid length.
[  328.881905][T13243] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.2105'.
[  329.054057][ T6446] bridge_slave_1: left allmulticast mode
[  329.062670][ T6446] bridge_slave_1: left promiscuous mode
[  329.076246][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.322062][ T6446] bridge_slave_0: left allmulticast mode
[  329.370717][ T6446] bridge_slave_0: left promiscuous mode
[  329.420142][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.519250][ T6446] dvmrp0: left allmulticast mode
[  329.530621][ T6446] pimreg: left allmulticast mode
[  333.663454][ T6446] bond1 (unregistering): (slave geneve2): Releasing active interface
[  334.692791][ T6446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.712866][ T6446] bond_slave_0: left allmulticast mode
[  334.906596][ T6446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.926275][ T6446] bond_slave_1: left allmulticast mode
[  335.006618][ T6446] bond0 (unregistering): Released all slaves
[  335.092028][ T6446] bond1 (unregistering): Released all slaves
[  335.190289][ T6446] bond2 (unregistering): Released all slaves
[  335.292181][ T6446] bond3 (unregistering): Released all slaves
[  335.384285][ T6446] bond4 (unregistering): Released all slaves
[  335.449367][T13247] gretap0: entered promiscuous mode
[  335.467766][T13247] vlan3: entered promiscuous mode
[  335.842500][ T6883] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  335.894997][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  336.142363][ T6446] tipc: Disabling bearer <eth:ipvlan1>
[  336.223777][T13282] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2111'.
[  336.347076][ T6446] tipc: Left network mode
[  336.386342][T13288] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2112'.
[  336.901042][T13305] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  338.160531][T12898] veth0_vlan: entered promiscuous mode
[  338.390905][T12898] veth1_vlan: entered promiscuous mode
[  339.126394][T13336] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  339.285815][T13339] bridge3: entered promiscuous mode
[  339.639906][T13339] bridge3: entered allmulticast mode
[  339.710995][T13339] team0: Port device bridge3 added
[  339.866916][ T5625] Bluetooth: hci4: command 0x0405 tx timeout
[  340.414210][T13363] netlink: 'syz.4.2127': attribute type 11 has an invalid length.
[  340.450951][T12898] veth0_macvtap: entered promiscuous mode
[  340.521820][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  340.530673][T13369] ip_tables: iptables: counters copy to user failed while replacing table
[  340.662687][T13368] erspan1: entered allmulticast mode
[  341.146524][T12898] veth1_macvtap: entered promiscuous mode
[  341.250976][T13372] gre0: entered promiscuous mode
[  341.438056][T13369] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.463977][T13372] gre0: entered allmulticast mode
[  341.885549][T13377] tipc: Started in network mode
[  341.914846][T13377] tipc: Node identity , cluster identity 4711
[  341.969258][T13377] tipc: Failed to set node id, please configure manually
[  342.052156][T13377] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  342.217454][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.767765][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.115556][ T6444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.242503][ T6444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.463287][ T6444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.666687][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  343.684451][ T1041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.838540][T13410] netlink: 'syz.2.2136': attribute type 10 has an invalid length.
[  343.920793][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'.
[  344.425706][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'.
[  344.439421][  T559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.498459][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'.
[  344.516207][  T559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.669244][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'.
[  344.932120][ T6884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.974853][ T6884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.083936][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2140'.
[  345.382412][ T5609] Bluetooth: hci5: command tx timeout
[  345.914812][T13444] netlink: 'syz.2.2144': attribute type 2 has an invalid length.
[  345.961921][T13444] netlink: 'syz.2.2144': attribute type 2 has an invalid length.
[  346.061845][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2144'.
[  346.194659][ T6446] hsr_slave_0: left promiscuous mode
[  346.417932][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.453415][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.510471][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.561505][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.732110][ T6446] veth1_macvtap: left promiscuous mode
[  346.796667][ T6446] veth0_macvtap: left promiscuous mode
[  346.823173][ T6446] veth1_vlan: left promiscuous mode
[  346.841278][ T6446] veth0_vlan: left promiscuous mode
[  347.840346][T13471] xt_connbytes: Forcing CT accounting to be enabled
[  348.023263][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  348.355958][T13471] xt_CT: You must specify a L4 protocol and not use inversions on it
[  352.366139][ T6446] team0 (unregistering): Port device team_slave_1 removed
[  352.585392][ T6446] team0 (unregistering): Port device team_slave_0 removed
[  354.898541][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  355.180980][T13461] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.349015][T13478] x_tables: unsorted entry at hook 3
[  355.412105][T13461] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.817374][T13461] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.515280][T13461] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.708807][T13499] netlink: 'syz.5.2155': attribute type 1 has an invalid length.
[  356.717374][T13500] netlink: 'syz.5.2155': attribute type 1 has an invalid length.
[  356.807169][T13501] x_tables: duplicate underflow at hook 2
[  357.653228][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'.
[  357.780660][ T6446] IPVS: stop unused estimator thread 0...
[  358.087430][ T3327] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.180267][ T3327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.289279][T13525] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  358.301587][ T3327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.344273][T13531] netlink: 'syz.4.2162': attribute type 4 has an invalid length.
[  358.472710][ T6884] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.886182][T13546] FAULT_INJECTION: forcing a failure.
[  358.886182][T13546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.212299][T13546] CPU: 1 UID: 0 PID: 13546 Comm: syz.3.2166 Not tainted syzkaller #0 PREEMPT(full) 
[  359.212338][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  359.212365][T13546] Call Trace:
[  359.212430][T13546]  <TASK>
[  359.212495][T13546]  dump_stack_lvl+0xe8/0x150
[  359.212672][T13546]  should_fail_ex+0x410/0x560
[  359.212773][T13546]  _copy_from_iter+0x1d3/0x1660
[  359.212831][T13546]  ? kmem_cache_alloc_node_noprof+0x1c1/0x620
[  359.212918][T13546]  ? rcu_is_watching+0x16/0xb0
[  359.212959][T13546]  ? trace_kmem_cache_alloc+0x29/0xe0
[  359.212983][T13546]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  359.213003][T13546]  ? __pfx__copy_from_iter+0x10/0x10
[  359.213028][T13546]  ? __alloc_skb+0x27a/0x7a0
[  359.213117][T13546]  ? __alloc_skb+0x27a/0x7a0
[  359.213147][T13546]  ? netlink_sendmsg+0x650/0xb40
[  359.213213][T13546]  ? skb_put+0x112/0x210
[  359.213248][T13546]  netlink_sendmsg+0x6c0/0xb40
[  359.213277][T13546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.213301][T13546]  ? aa_sock_msg_perm+0xf6/0x1c0
[  359.213399][T13546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.213417][T13546]  sock_sendmsg_nosec+0x13a/0x180
[  359.213468][T13546]  ____sys_sendmsg+0x54e/0x850
[  359.213526][T13546]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.213563][T13546]  ? import_iovec+0x73/0xa0
[  359.213610][T13546]  ___sys_sendmsg+0x2a5/0x360
[  359.213636][T13546]  ? __lock_acquire+0x683/0x2cf0
[  359.213679][T13546]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.213742][T13546]  ? __fget_files+0x2a/0x420
[  359.213777][T13546]  ? __fget_files+0x3a2/0x420
[  359.213812][T13546]  __x64_sys_sendmsg+0x1b1/0x290
[  359.213843][T13546]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.213892][T13546]  do_syscall_64+0x166/0x520
[  359.213981][T13546]  ? trace_irq_disable+0x3b/0x140
[  359.214017][T13546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.214051][T13546]  ? clear_bhb_loop+0x70/0xc0
[  359.214074][T13546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.214093][T13546] RIP: 0033:0x7f07d839e0d9
[  359.214118][T13546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.214135][T13546] RSP: 002b:00007f07d91b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.214186][T13546] RAX: ffffffffffffffda RBX: 00007f07d8625fa0 RCX: 00007f07d839e0d9
[  359.214200][T13546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  359.214212][T13546] RBP: 00007f07d91b8090 R08: 0000000000000000 R09: 0000000000000000
[  359.214232][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.214243][T13546] R13: 00007f07d8626038 R14: 00007f07d8625fa0 R15: 00007ffd53f39f88
[  359.214274][T13546]  </TASK>
[  360.350884][T13553] tipc: Started in network mode
[  360.405592][T13553] tipc: Node identity ac141441, cluster identity 4711
[  360.535636][T13553] tipc: Enabled bearer <udp:syz2>, priority 10
[  360.619908][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2171'.
[  360.674039][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[  361.350793][T13584] wg2: Caught tx_queue_len zero misconfig
[  361.533933][   T24] tipc: Node number set to 2886997057
[  361.570962][T13591] FAULT_INJECTION: forcing a failure.
[  361.570962][T13591] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.625045][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.2.2180 Not tainted syzkaller #0 PREEMPT(full) 
[  361.625072][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  361.625083][T13591] Call Trace:
[  361.625089][T13591]  <TASK>
[  361.625098][T13591]  dump_stack_lvl+0xe8/0x150
[  361.625129][T13591]  should_fail_ex+0x410/0x560
[  361.625162][T13591]  _copy_to_user+0x31/0xb0
[  361.625183][T13591]  simple_read_from_buffer+0xe1/0x170
[  361.625216][T13591]  proc_fail_nth_read+0x1bb/0x230
[  361.625281][T13591]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  361.625310][T13591]  ? rw_verify_area+0x24a/0x4c0
[  361.625344][T13591]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  361.625371][T13591]  vfs_read+0x213/0xa80
[  361.625402][T13591]  ? __pfx___mutex_lock+0x10/0x10
[  361.625521][T13591]  ? __pfx_vfs_read+0x10/0x10
[  361.625546][T13591]  ? __fget_files+0x2a/0x420
[  361.625574][T13591]  ? __fget_files+0x3a2/0x420
[  361.625596][T13591]  ? __fget_files+0x2a/0x420
[  361.625625][T13591]  ksys_read+0x150/0x270
[  361.625654][T13591]  ? __pfx_ksys_read+0x10/0x10
[  361.625692][T13591]  do_syscall_64+0x166/0x520
[  361.625714][T13591]  ? trace_irq_disable+0x3b/0x140
[  361.625738][T13591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.625758][T13591]  ? clear_bhb_loop+0x70/0xc0
[  361.625780][T13591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.625799][T13591] RIP: 0033:0x7f14a795e90e
[  361.625817][T13591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  361.625833][T13591] RSP: 002b:00007f14a88b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  361.625853][T13591] RAX: ffffffffffffffda RBX: 00007f14a88b46c0 RCX: 00007f14a795e90e
[  361.625867][T13591] RDX: 000000000000000f RSI: 00007f14a88b40a0 RDI: 0000000000000004
[  361.625879][T13591] RBP: 00007f14a88b4090 R08: 0000000000000000 R09: 0000000000000000
[  361.625891][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  361.625902][T13591] R13: 00007f14a7c26038 R14: 00007f14a7c25fa0 R15: 00007ffe87df3258
[  361.625934][T13591]  </TASK>
[  362.226608][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'.
[  362.250570][T13614] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  362.471576][T13623] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  362.548257][T13629] tls_set_device_offload_rx: netdev not found
[  362.582907][T13631] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.2192'.
[  362.866750][T13645] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2196'.
[  362.885242][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2196'.
[  363.087028][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'.
[  363.159813][T13656] openvswitch: netlink: IP tunnel dst address not specified
[  363.476685][T13663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2201'.
[  363.554624][T13665] sctp: [Deprecated]: syz.5.2203 (pid 13665) Use of int in maxseg socket option.
[  363.554624][T13665] Use struct sctp_assoc_value instead
[  363.668011][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2204'.
[  364.119121][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'.
[  364.168276][T13682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'.
[  364.362387][ T5798] lo speed is unknown, defaulting to 1000
[  364.394493][ T5798] syz1: Port: 1 Link DOWN
[  364.489851][ T5618] lo speed is unknown, defaulting to 1000
[  364.585964][T13699] netlink: 'syz.5.2212': attribute type 7 has an invalid length.
[  364.620720][T13699] netlink: 'syz.5.2212': attribute type 8 has an invalid length.
[  364.634645][T13708] bond0: Caught tx_queue_len zero misconfig
[  364.648111][T13703] netlink: 'syz.2.2217': attribute type 1 has an invalid length.
[  364.659874][T13708] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  364.825252][T13714] netlink: 'syz.5.2219': attribute type 1 has an invalid length.
[  365.070859][T13720] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  365.083723][T13721] xt_nat: multiple ranges no longer supported
[  365.101007][T13722] xt_nat: multiple ranges no longer supported
[  365.110130][T13725] FAULT_INJECTION: forcing a failure.
[  365.110130][T13725] name failslab, interval 1, probability 0, space 0, times 0
[  365.139095][T13721] netlink: 'syz.4.2220': attribute type 4 has an invalid length.
[  365.148316][T13725] CPU: 1 UID: 0 PID: 13725 Comm: syz.1.2222 Not tainted syzkaller #0 PREEMPT(full) 
[  365.148341][T13725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  365.148354][T13725] Call Trace:
[  365.148361][T13725]  <TASK>
[  365.148369][T13725]  dump_stack_lvl+0xe8/0x150
[  365.148402][T13725]  should_fail_ex+0x410/0x560
[  365.148436][T13725]  should_failslab+0xa8/0x100
[  365.148500][T13725]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  365.148523][T13725]  ? skb_clone+0x212/0x3a0
[  365.148550][T13725]  ? skb_clone+0x212/0x3a0
[  365.148575][T13725]  skb_clone+0x212/0x3a0
[  365.148597][T13725]  __netlink_deliver_tap+0x413/0x860
[  365.148629][T13725]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.148651][T13725]  netlink_deliver_tap+0x19c/0x1b0
[  365.148672][T13725]  netlink_sendskb+0x68/0x140
[  365.148767][T13725]  netlink_rcv_skb+0x2a4/0x4a0
[  365.148787][T13725]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  365.148869][T13725]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  365.148900][T13725]  ? bpf_lsm_capable+0x9/0x20
[  365.148936][T13725]  ? security_capable+0x7e/0x2c0
[  365.149030][T13725]  nfnetlink_rcv+0x2b9/0x28c0
[  365.149062][T13725]  ? __dev_queue_xmit+0x29b/0x3820
[  365.149117][T13725]  ? __local_bh_enable_ip+0xd6/0x140
[  365.149154][T13725]  ? lockdep_hardirqs_on+0x7b/0x110
[  365.149177][T13725]  ? __dev_queue_xmit+0x29b/0x3820
[  365.149194][T13725]  ? __local_bh_enable_ip+0xd6/0x140
[  365.149214][T13725]  ? __dev_queue_xmit+0x29b/0x3820
[  365.149232][T13725]  ? __dev_queue_xmit+0x1edc/0x3820
[  365.149249][T13725]  ? do_syscall_64+0x166/0x520
[  365.149269][T13725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.149301][T13725]  ? __dev_queue_xmit+0x29b/0x3820
[  365.149321][T13725]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  365.149355][T13725]  ? __pfx___dev_queue_xmit+0x10/0x10
[  365.149382][T13725]  ? ref_tracker_free+0x689/0x830
[  365.149436][T13725]  ? __pfx_ref_tracker_free+0x10/0x10
[  365.149463][T13725]  ? __skb_clone+0x449/0x6c0
[  365.149493][T13725]  ? skb_clone+0x246/0x3a0
[  365.149511][T13725]  ? __netlink_deliver_tap+0x811/0x860
[  365.149528][T13725]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.149560][T13725]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.149578][T13725]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.149601][T13725]  netlink_unicast+0x7bd/0x940
[  365.149640][T13725]  netlink_sendmsg+0x813/0xb40
[  365.149671][T13725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.149695][T13725]  ? aa_sock_msg_perm+0xf6/0x1c0
[  365.149730][T13725]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.149750][T13725]  sock_sendmsg_nosec+0x13a/0x180
[  365.149772][T13725]  ____sys_sendmsg+0x54e/0x850
[  365.149805][T13725]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.149840][T13725]  ? import_iovec+0x73/0xa0
[  365.149864][T13725]  ___sys_sendmsg+0x2a5/0x360
[  365.149891][T13725]  ? __lock_acquire+0x683/0x2cf0
[  365.149922][T13725]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.149985][T13725]  ? __fget_files+0x2a/0x420
[  365.150011][T13725]  ? __fget_files+0x3a2/0x420
[  365.150046][T13725]  __x64_sys_sendmsg+0x1b1/0x290
[  365.150077][T13725]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  365.150128][T13725]  do_syscall_64+0x166/0x520
[  365.150151][T13725]  ? trace_irq_disable+0x3b/0x140
[  365.150175][T13725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.150195][T13725]  ? clear_bhb_loop+0x70/0xc0
[  365.150218][T13725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.150237][T13725] RIP: 0033:0x7fb8dad9e0d9
[  365.150257][T13725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.150274][T13725] RSP: 002b:00007fb8dbc5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.150295][T13725] RAX: ffffffffffffffda RBX: 00007fb8db025fa0 RCX: 00007fb8dad9e0d9
[  365.150309][T13725] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  365.150322][T13725] RBP: 00007fb8dbc5f090 R08: 0000000000000000 R09: 0000000000000000
[  365.150334][T13725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.150346][T13725] R13: 00007fb8db026038 R14: 00007fb8db025fa0 R15: 00007ffe945721a8
[  365.150378][T13725]  </TASK>
[  365.560560][T13721] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2220'.
[  365.748150][T13721] .`: renamed from bond0 (while UP)
[  365.900745][T13740] netlink: 'syz.4.2227': attribute type 1 has an invalid length.
[  365.910390][T13740] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2227'.
[  366.915681][T13780] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  367.044876][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'.
[  367.494721][T13801] FAULT_INJECTION: forcing a failure.
[  367.494721][T13801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.570867][T13801] CPU: 1 UID: 0 PID: 13801 Comm: syz.3.2246 Not tainted syzkaller #0 PREEMPT(full) 
[  367.570893][T13801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  367.570903][T13801] Call Trace:
[  367.570910][T13801]  <TASK>
[  367.570917][T13801]  dump_stack_lvl+0xe8/0x150
[  367.570947][T13801]  should_fail_ex+0x410/0x560
[  367.570976][T13801]  _copy_from_user+0x2d/0xb0
[  367.570994][T13801]  ___sys_sendmsg+0x1c6/0x360
[  367.571017][T13801]  ? __lock_acquire+0x683/0x2cf0
[  367.571042][T13801]  ? __pfx____sys_sendmsg+0x10/0x10
[  367.571093][T13801]  ? __fget_files+0x2a/0x420
[  367.571114][T13801]  ? __fget_files+0x3a2/0x420
[  367.571142][T13801]  __x64_sys_sendmsg+0x1b1/0x290
[  367.571168][T13801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  367.571207][T13801]  do_syscall_64+0x166/0x520
[  367.571226][T13801]  ? trace_irq_disable+0x3b/0x140
[  367.571245][T13801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.571261][T13801]  ? clear_bhb_loop+0x70/0xc0
[  367.571281][T13801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.571297][T13801] RIP: 0033:0x7f07d839e0d9
[  367.571311][T13801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.571325][T13801] RSP: 002b:00007f07d91b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.571343][T13801] RAX: ffffffffffffffda RBX: 00007f07d8625fa0 RCX: 00007f07d839e0d9
[  367.571355][T13801] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  367.571372][T13801] RBP: 00007f07d91b8090 R08: 0000000000000000 R09: 0000000000000000
[  367.571382][T13801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.571392][T13801] R13: 00007f07d8626038 R14: 00007f07d8625fa0 R15: 00007ffd53f39f88
[  367.571417][T13801]  </TASK>
[  367.648977][    C0] ------------[ cut here ]------------
[  367.753514][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  367.763415][    C0] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: ksoftirqd/0/15
[  367.774112][    C0] Modules linked in:
[  367.778316][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  367.787683][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  367.797812][    C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  367.804146][    C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  367.823836][    C0] RSP: 0018:ffffc90000147478 EFLAGS: 00010246
[  367.829970][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  367.838037][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  367.846080][    C0] RBP: ffff888068510f40 R08: 0000000000000000 R09: 0000000000000000
[  367.854134][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888051e118e8
[  367.862124][    C0] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888068513258
[  367.870180][    C0] FS:  0000000000000000(0000) GS:ffff888124f21000(0000) knlGS:0000000000000000
[  367.879179][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  367.885842][    C0] CR2: 00007f00827556c8 CR3: 000000000e946000 CR4: 00000000003526f0
[  367.893870][    C0] Call Trace:
[  367.897180][    C0]  <TASK>
[  367.900161][    C0]  rate_control_send_low+0x1a7/0x7b0
[  367.905570][    C0]  rate_control_get_rate+0x20b/0x5d0
[  367.910888][    C0]  ieee80211_beacon_get_finish+0x385/0x6c0
[  367.916895][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  367.923274][    C0]  ? __ieee80211_beacon_add_tim+0x1204/0x1630
[  367.929378][    C0]  ? ieee80211_beacon_get_ap+0x8d4/0x20c0
[  367.935194][    C0]  ieee80211_beacon_get_ap+0x19d5/0x20c0
[  367.940877][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  367.946969][    C0]  ? lock_acquire+0x106/0x350
[  367.951673][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  367.957302][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  367.963024][    C0]  __ieee80211_beacon_get+0x1250/0x1920
[  367.968599][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  367.974247][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  367.979739][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  367.985909][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  367.990984][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  367.996737][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  368.004086][    C0]  __iterate_interfaces+0x2af/0x5a0
[  368.009382][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  368.015535][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  368.022797][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  368.028888][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  368.036021][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  368.041992][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  368.047299][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  368.053185][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  368.058425][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  368.063624][    C0]  handle_softirqs+0x226/0x860
[  368.068416][    C0]  ? run_ksoftirqd+0x36/0x60
[  368.073080][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  368.078126][    C0]  run_ksoftirqd+0x36/0x60
[  368.082627][    C0]  smpboot_thread_fn+0x565/0xa70
[  368.087601][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  368.092714][    C0]  kthread+0x38b/0x480
[  368.096813][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  368.102335][    C0]  ? __pfx_kthread+0x10/0x10
[  368.106956][    C0]  ret_from_fork+0x514/0xb70
[  368.111606][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  368.116802][    C0]  ? __switch_to+0xc89/0x1420
[  368.121514][    C0]  ? __pfx_kthread+0x10/0x10
[  368.126194][    C0]  ret_from_fork_asm+0x1a/0x30
[  368.131008][    C0]  </TASK>
[  368.134112][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  368.141403][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  368.150612][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  368.160682][    C0] Call Trace:
[  368.163976][    C0]  <TASK>
[  368.166928][    C0]  vpanic+0x56d/0xa60
[  368.170967][    C0]  ? __pfx__printk+0x10/0x10
[  368.175582][    C0]  ? __pfx_vpanic+0x10/0x10
[  368.180322][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  368.185642][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  368.190878][    C0]  panic+0xc5/0xd0
[  368.194633][    C0]  ? __pfx_panic+0x10/0x10
[  368.199088][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  368.204060][    C0]  __warn+0x315/0x4c0
[  368.208058][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  368.213715][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  368.219371][    C0]  __report_bug+0x276/0x570
[  368.224001][    C0]  ? __rate_control_send_low+0x60c/0x8a0
[  368.229666][    C0]  ? __pfx___report_bug+0x10/0x10
[  368.234718][    C0]  ? stack_trace_save+0xa9/0x100
[  368.239673][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  368.245068][    C0]  report_bug_entry+0x19b/0x290
[  368.249939][    C0]  ? __rate_control_send_low+0x638/0x8a0
[  368.255572][    C0]  ? __rate_control_send_low+0x63d/0x8a0
[  368.261200][    C0]  handle_bug+0xce/0x200
[  368.265482][    C0]  exc_invalid_op+0x1a/0x50
[  368.269984][    C0]  asm_exc_invalid_op+0x1a/0x20
[  368.274823][    C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  368.281055][    C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  368.300653][    C0] RSP: 0018:ffffc90000147478 EFLAGS: 00010246
[  368.306712][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  368.314669][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  368.322633][    C0] RBP: ffff888068510f40 R08: 0000000000000000 R09: 0000000000000000
[  368.330591][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888051e118e8
[  368.338549][    C0] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888068513258
[  368.346526][    C0]  ? __rate_control_send_low+0x600/0x8a0
[  368.352167][    C0]  rate_control_send_low+0x1a7/0x7b0
[  368.357448][    C0]  rate_control_get_rate+0x20b/0x5d0
[  368.362732][    C0]  ieee80211_beacon_get_finish+0x385/0x6c0
[  368.368572][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  368.375011][    C0]  ? __ieee80211_beacon_add_tim+0x1204/0x1630
[  368.381092][    C0]  ? ieee80211_beacon_get_ap+0x8d4/0x20c0
[  368.386820][    C0]  ieee80211_beacon_get_ap+0x19d5/0x20c0
[  368.392475][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  368.398478][    C0]  ? lock_acquire+0x106/0x350
[  368.403155][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  368.408701][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  368.414240][    C0]  __ieee80211_beacon_get+0x1250/0x1920
[  368.419781][    C0]  ? __ieee80211_beacon_get+0x36/0x1920
[  368.425328][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  368.430784][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  368.436843][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  368.441867][    C0]  mac80211_hwsim_beacon_tx+0x378/0x820
[  368.447416][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  368.454611][    C0]  __iterate_interfaces+0x2af/0x5a0
[  368.459802][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  368.465861][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  368.473055][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  368.479117][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  368.486136][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  368.491958][    C0]  mac80211_hwsim_beacon+0xaf/0x240
[  368.497182][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  368.503002][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  368.508212][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  368.513337][    C0]  handle_softirqs+0x226/0x860
[  368.518119][    C0]  ? run_ksoftirqd+0x36/0x60
[  368.522727][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  368.527754][    C0]  run_ksoftirqd+0x36/0x60
[  368.532181][    C0]  smpboot_thread_fn+0x565/0xa70
[  368.537145][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[  368.542207][    C0]  kthread+0x38b/0x480
[  368.546294][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  368.551762][    C0]  ? __pfx_kthread+0x10/0x10
[  368.556356][    C0]  ret_from_fork+0x514/0xb70
[  368.560950][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  368.566069][    C0]  ? __switch_to+0xc89/0x1420
[  368.570745][    C0]  ? __pfx_kthread+0x10/0x10
[  368.575336][    C0]  ret_from_fork_asm+0x1a/0x30
[  368.580115][    C0]  </TASK>
[  368.583291][    C0] Kernel Offset: disabled
[  368.587598][    C0] Rebooting in 86400 seconds..