last executing test programs:

11.363891545s ago: executing program 4 (id=3835):
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
connect$l2tp6(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x28}, 0xfc40)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x48800)
r3 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r5=>0x0, 0x40, 0x10, 0x4, 0x5, {{0xd, 0x4, 0x2, 0x1, 0x34, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0xf, [{@rand_addr=0x64010100, 0xa}, {@empty, 0xffff}, {@multicast1, 0x8}]}]}}}}})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xc}, r5}, 0x14)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000e8000000000018110000", @ANYBLOB="80c0766ac738730cbb030499c59fb274c9cb46c24587fec73a557972234d291eb769489ad2315325bd90a3b9f0aa346439f55829cd28387b091428d6ea57c5430a22da2fa4451edd8c0abaabd3f6f03808ebb1628bfd55c0b3809e6a162dc42bf42d7ef272708dedfc5c3b311387041c0159f323cd86198f24d64d055ff6746117e3e076ac0d9ac9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xce, r7}, 0x38)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x280000b, 0x11, 0xffffffffffffffff, 0x2000)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, 0x0, [@default, @bcast, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
unshare(0x62040200)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000700)=0xffffffffffffffff, 0x8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4)

9.438499913s ago: executing program 1 (id=3839):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x4, 0x7, 0x101, 0x7, 0x7ff, 0x4, 0x2000800000000007, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd09, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x2c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000000a0605000000000000000000000000000900020073797a30000000000500010007000000040007"], 0x2c}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.392927958s ago: executing program 1 (id=3844):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9346baecd6ed7d98e83b9f34450e542aa7c04115aceaf72e463b16414839702f3b22251051058623f03d0dfb3d50489fa66509d56746843ba05b80369d1532c58da5a7e52ddbf1a24c0774801d8955f0f8b498f94bbcef62ff67b376ce4853e6748a83400c104bf2058ac3c10129cf6bc9dafe0000000001000000d12f786bb8ebcfe33e405572f1d474cf39c988ff0a29f3573580a4a612", @ANYBLOB="6a77a4", @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
close(0x3) (async)
close(0x3)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5)
setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000019180)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="b106d8e6da1a56dbbc6559cba83ab4188b858542ce191eb1300fe05f2a4a515ea418214eed0c9edec2b8bee7f454be00c3bccb3926e9fc9b4693700ecd", 0x3d}], 0x1}}], 0x1, 0xc044)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="04000000000014bdd3bba1a36c616e300000000000000000000000080004000e040000800ebc975375c71c001680180001621d000a011affffff001000000100000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0)

5.290888858s ago: executing program 4 (id=3857):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000099430481d56a70e5eb000000000900000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x200000006c832, r5, 0x80000)
splice(r6, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

4.474370546s ago: executing program 1 (id=3865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb86e333fe51d0059}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000300012800c0001006d6163766c616e0020000280100005800800040000000000000000000a000400aaaaaaaa"], 0x50}, 0x1, 0x0, 0x0, 0x20000881}, 0x40d0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@socket3={{0x28}, 0x2}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x7, {0x8}}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffff06000000000000009500000000f5ff00"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x15, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffcc5}, 0x22)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4004050)
shutdown(0xffffffffffffffff, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.24314546s ago: executing program 2 (id=3868):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x2000000)
r2 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000"], 0xa)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)

4.234285458s ago: executing program 1 (id=3869):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000040)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
unshare(0x10000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="10d36e0e199194d2"], 0x3c}, 0x1, 0x0, 0x0, 0x8051}, 0x6c880)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="fffffffffffffff8000000000000000085000000280000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRESHEX=r0, @ANYBLOB="3c5d96b744f28aa25a6f4a1a39e1f4ec59ba340f7a39d3f9f9cc2a5926d25340ca25515e20a0357f0f4174de35b5a64b87fbca57293a6139a9f914a4f53ec616c335ca063c25e5fbe4e7df5b68867e64f221c12ac0593bea02ae0001d644a06e0d0c7a65c3b525ba2c5e88365b69bc6e435fe4ca36ffabafeb63ae4523b272bb954bcc5c1281516e40939b5a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640))
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000140)={0x7, 'gre0\x00', {0x3}, 0x1})

3.743277258s ago: executing program 2 (id=3870):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
unshare(0x20000400)
socketpair(0x6, 0x1, 0x80, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000150000003d3600000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000050000c3ac73cf2cb4d596685f399d007c4294dee19024ba16df2b84087c833f295765bd2f2f5d6a2d62f0631aa1740861449edbead1079cb76d7ef5097ed609107b83132d0a815ed2973cb73ebb2df65799fccfb6beaf7b8734dcc1b2b3b47a24753e81057a016b24ed6fddd8b0b29706821c49f6d08dc39e03b3f3b9f9002e706de38220cdb1e2c1ff0495ed100119dad4c07f20d3cf2eebf120df52e41b55abd997546117f30fbc5bac7087fd3745cdcd9b829064da7d66bf5ba4be87048c85c6e603aaaf014ff01c43c4c247fb1995d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), 0x0}, 0x20)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007500000095"], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0xf0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000002000)=ANY=[@ANYBLOB="b40000000000000079104800000000001500000000000000950000000000000064a4713c632dee78dcdedc2dd03a79b25e129cf901332998131817427671b18e5a21536b8067c9b908d8d923e45efeab0ed09e42a8f0698163fcf16ed614f7b6d78bdf23ceb6026ff46bba78ad988171b6750d64c99ec5668fd520eaa9acbf8f796935a87d33c41257380de521185cda62b36ced8a65b7b3afc9e59f730953dacc2da2cc2233d91576ed3dc9b36a7f951fe75d3dec0d3da4544cc7d823569ecdf7cb152990c9b6b08d8e913ca0f56dbf66f446c2108f01c845baa1954d9586791f2d42d4c8ff12d0652991"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x6e, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xce, &(0x7f0000000000)=""/206, 0x0, 0x0, '\x00', r8, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x82, 0x0, 0x0)

3.190056138s ago: executing program 2 (id=3873):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006ebc"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.978457888s ago: executing program 2 (id=3876):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)=""/166, &(0x7f0000000440)=0xa6)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x3c, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x11, 0x1, 0x0, 0x0, @str='l24)\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000001c0))
recvmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)=""/9, 0x9}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4082, 0xff2}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000028c0)=""/153, 0x99}, {&(0x7f0000002980)=""/219, 0xdb}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000640)=""/141, 0x8d}], 0x9}, 0x4}], 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)

2.501646963s ago: executing program 0 (id=3878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006a00d9"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)={0x54, r2, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x29, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x4, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}]}, 0x54}}, 0x4014080)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffb}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x4)

2.428616284s ago: executing program 2 (id=3879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x400c010)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x24000000)

2.338384063s ago: executing program 0 (id=3881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x97}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}}, 0x40000d4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x0)
r8 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0)
ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000280)={0x4d, 0x7e, 0xc, 0xc, 0xffff, 0x102})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="940000002000010c00000000000000000a1400000000000000000000140003006c6f000000000000000000000000000014000200fe8000000000000000000000000000aa1400020020010000000000000000000000000000140001"], 0x94}}, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r11, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1fb)
bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x3, 0x2}, 0x6)
r13 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000000180)={r11, r12})
sendmmsg$inet(r13, &(0x7f0000010380)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)="81f2", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000400)="a7", 0x1}], 0x1}}], 0x2, 0x40)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010)

2.172150044s ago: executing program 3 (id=3882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x20000040)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r3 = accept(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000000)=0x80)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000030701040000000000000000020000004c00078008000140000000030800010000000208000140000000030800014000007fff080002400000020d034c2a539f44f8000800014000000000080002400000000308000240000000080c000340000000000000000000"], 0x6c}}, 0x8040)
accept4(r3, &(0x7f0000000280)=@pppoe, &(0x7f0000000300)=0x80, 0x0)

2.16458161s ago: executing program 2 (id=3883):
listen(0xffffffffffffffff, 0x8) (async)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x4, @private2, 0x7fd}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x280400d5) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40), <r2=>0x0, 0x1b, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000a80)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x40, 0x61, 0x11, 0x92, 0xb700}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc801}, 0x20008804) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00')
unshare(0x6a040000) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f0000000040)=0x8, 0x4)
r7 = socket(0x8, 0x3, 0x0) (async)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000180)) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xdc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60f92d1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5e22e8}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xecd78b0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3878c5aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2635dfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20194b03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x14, [0x3ff, 0x6910ba3, 0x7, 0x5, 0x10, 0xf], 0x0, &(0x7f00000000c0), &(0x7f0000000040)=""/20}, &(0x7f0000000200)=0x78) (async)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xe1, 0x62, &(0x7f0000000100)=""/98, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x9}, 0x10, 0x36dc, r3, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x8, 0x5}, {0x4, 0x3, 0x6}, {0x2, 0x1, 0xe, 0x2}, {0x3, 0x5, 0x6, 0xc}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb94}, @alu={0x7, 0x0, 0x0, 0xb, 0x0, 0x150, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0xcb, &(0x7f0000000800)=""/203, 0x0, 0x57, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94)

1.779153581s ago: executing program 4 (id=3884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r1 = socket$netlink(0x10, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000011c0), &(0x7f0000000540)=0xc)

1.771787711s ago: executing program 3 (id=3885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x29, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101480, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
close(0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4044)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r9, 0x5, 0x70bd28, 0x30000, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r7, 0x8b1a, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.423435428s ago: executing program 4 (id=3886):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

1.373932448s ago: executing program 0 (id=3887):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000000b0102000000000600000000000000080003601b0600000000000000e601006e730f6e6574e40008000100"], 0x30}}, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_ifreq(r4, 0x891e, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0xda, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x40, 0x1, 0x0, 0x1, 0x7, 0x3, 0x1ba5, 0x6, 0x9, 0x8001, 0x3, 0xe6c4, 0x10000, 0x3, 0x3, 0xa971, 0x7f, 0x5, 0x2, 0x8, 0x1, 0x5, 0x8, 0x9, 0xa4, 0x5, 0x5, 0x6, 0xe72, 0x1, 0x0, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x3, 0xd, 0x113, 0x8, 0xd, 0x9, 0x401, 0xffff, 0x6, 0x4, 0x2a9a, 0xfffffff9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x1, 0x100, 0x9, 0x3fc000, 0x5, 0x8, 0x7, 0x40, 0x6, 0xfffff81c, 0x4, 0x2, 0xb9c7, 0x40, 0x400, 0x3, 0x2, 0x6c85, 0x88a, 0x3, 0xffff, 0x7, 0xb4c5, 0x4, 0x4, 0x4, 0x4, 0x2, 0xbe42, 0x5, 0x6, 0x7, 0x71, 0x4, 0x2, 0x6, 0xbd, 0x7, 0xfffffdc4, 0x2, 0xc, 0x0, 0x4, 0x2, 0xd0, 0x10, 0x0, 0x19, 0x5, 0x9, 0x8, 0xfffffffa, 0xfffffffc, 0x9c3b, 0x81, 0x7, 0x5, 0xffff, 0xfffffff9, 0x9, 0x6b, 0x7, 0x1, 0x9, 0xff, 0x9, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x5, 0x7, 0xc, 0x2, 0x4, 0x5bb, 0x7, 0x3, 0x679, 0x7, 0x2, 0x5, 0x0, 0xd, 0x10000, 0x7fffffff, 0x5, 0x81, 0x342, 0x2, 0x6, 0x10, 0x6a, 0xd7, 0x10001, 0xcf5, 0xfffffffc, 0x9, 0x2, 0x3, 0x2bd621da, 0xe8, 0x9, 0xa, 0x8, 0x8, 0x5, 0x4, 0x629, 0x0, 0x7a409af, 0xff, 0x8, 0x4, 0x9, 0xe, 0x73b052b9, 0x6, 0x10, 0x3, 0xa, 0x0, 0x1, 0x5a, 0xfff, 0x0, 0x1c, 0xe7a7, 0xfffffffa, 0x6, 0x3, 0xa, 0xfff, 0x2, 0x2, 0x29e, 0x5, 0x47f, 0x0, 0x8, 0x4, 0x9b8, 0x7fff, 0x8, 0xffff, 0x10000, 0x400, 0x0, 0x0, 0xffffff39, 0x5, 0x6a80, 0x10001, 0x4, 0x3, 0x8000, 0x1, 0x2, 0x8, 0xd, 0xce2, 0xffffffe1, 0x3, 0x7, 0x2, 0x4, 0x0, 0x4, 0x492d, 0x80, 0x9, 0x6, 0xd, 0x0, 0x6, 0x2, 0x0, 0xafd7, 0xe, 0x0, 0x9, 0x3c115f2c, 0x2, 0x5, 0x3, 0x1, 0x419, 0x2, 0x9, 0xfffffffd, 0x0, 0x9, 0x2, 0x3, 0x1, 0x101, 0x1, 0x1, 0x3fffc, 0x2626, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x6, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x9, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r13, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r12, 0x1, 0xd8, 0x6, @remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)

1.148549775s ago: executing program 4 (id=3888):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000180), 0x0, 0x40000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80, 0xfffffffc, 0xfffffffc, 0x24b}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e20, 0x2, @loopback, 0x1}, 0x1, {[0xe606, 0x200, 0x8, 0x2, 0xfffff801, 0x5, 0x2, 0x8]}}, 0x5c)
socket$inet(0x2b, 0x801, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002000)="f2352b4a4bfddbd7cdc53ccbad9ba76dd85298732fad682275b19f45c73a2eccc02cfa7a2441b0578ac589f08d4f97ae6b954484cb398207c11171670388548b7af7fb3a6ecc74c0aded0af8ab201cf8de7bc9bf7feff21c82576a8364a8463056b87b95ad94fb550d0b6705350a46bf3ac4b81b2c59f48d5dec7c822b73088703f495ded0fb1ba4a1d95210a189e7f505c31c70633e598c534064c625c70a75af619cddbf3e45402fb97d65e5e27651572165d29b772f8c8e77483d25d64794979cc935e5ac6291be478e4a52135078c073eb6de40545ca9239199489d1df7edc2a0f148cd7d0e0146f956aa9e687e25e2dc0e6bdb2a887d3af88314872d34eb7c6ba35abe161bca4fb99a359df0aa3459570d9d85a4fde439afcae809fd32332e8f1edc2f4815b3be21413d97a2d3056c6f1d3260ea5863c7bd1c756633cad5dd0767411e5501ba6fff86d35581cd77946155d19cc9306bef4fbc3d4646c0a4a40440884c05724d82740f2d0d486517946cdc776fcf2bcd8fe78dbbeb09c1b43ccd8f2f851f00ee62036b5a8294277ffffb6033daed66606756cb6a2782182aaf21ab132f32cb60f9542414370cda3fbbf19fe954c18f7e9012fddfcd394c92923ed129021db7b1175882be2b0af196da2aede97ce36018575bfd519fff0644506b18048fc88a9d7e12d943d5c3f5dbd86aa5005b2181584ce7a298b898cc45cce4dda510414c2c3de542f2b1d312b74275a7f73c414bd9bf8d7d71175c3686ac6f0625eaf2f40ddadae7b0fb28d0e94766e6edd494141eb44a6051ead7d7f1a23242a06f722735e9cdc0fde03f5d7e3ec9c3fc9996163932faa6524e21d0e0ca491605bf5a460ccfac0a95e7bd1455ce3b374b6ede3cdd6786c082dfea0467e73c1f20926547d8261ee052a565e08b08751a42c7a58b11f5887393efcb5bc6efb3a24d0b26f8354116e17d7be7100fd73b19aa02410ae0e7a19a7e989a1235c7655c69290a12502500764e74293cf8de13f1a6b85ae39678ef7b39feb38b30e03807fd9b372d8dbd886605e01f5f527617615bfa189dbe93ca7535b48d1eebf59646a8f4bf248ce01345f0c01dbe3e5c2a1e9518191a3390b1b790673b2c8c83d5c3f2cd556d2042a432aea62ed84db5533d467a379c17af642374dee306938a38bfa46ae2956b181ae50eca690dcacdb09e1ddaf7ef523e7ce2482b252ad9e9d2147212b56055f2cd303452e8662a37d7e6abbabd3e7fbc9a94048319f042d4ed0756937481fafea8c46825a2ef70d6f46e700aead90f9532945696604bbd827fc638a7c96ffb017c5bc915ad42f03845853f164b92d7750d4427c43c9bb40427c365bf848e9d54f6de97b70db1b692a3ecbc3854c7a247a2cc514835ed69c66d4386c5b9395599d44a0dde16237b2c407be2eaf1a794e478f28d980839fe84212a808eb5899712c7eebc428eccdaed957fab6a842db49fddf3033a1ca0506d3d5310a2dfca318c237fe2ab68c1f6b771cf40e63d6db48c4ff5c29dac7338a8dd67bd1f04c51a3a78b7f938c4ceef0e3f490ac5fc3ae252bab3ada786aedaafab55ae6f17242d47717fa42b3ddc7d4f81d950b36e9f1fe3704e4780896f02893dfdc19eaebb194a944b8f3d640337a9bbdaebeab79346456f0aaf300da491a32994dde23210c2dd56307485f3ee7a87466c6fdece0292e5b7de99faf69e0d494e4b44895c4852838f933bd4e88269ef4b632243fc61e6142589be81cb75a8e2b1c47f21703cedb1380561c738c0e5eed0b01b3c50db2eee0d7829d929dd132ece9d8719d336e8abc5e66e64a80811299ddb3cc199a67138bd46774654c494303a0ea8a58cd442c5061c673c77158e645ee40b6b96764311075d6e962699b23ecf7f5a7803bb1b4ce255e5e1ed0ef9401a2951d5acb358d4bfae6c8657b0c47554d84dc9fa791b05a8bb73bb65b50b04be307dc7895ac4ef0f01d6df57ca6053138496a6109ed1b4261ee47668d71465c68477f92ac65a8d6e192a7233f79d70595045ce8012ab613a7dc5084dc8624241476fd5d1944f4fbfae6b99b0cdc84cabc88f153f13f55015ec21725110d5e52fea05f1c7dbf4ed17842655d52b6756f6a206a6c5f7509ed88daf61614c4c9d5121df59fa8fc220558e9bc202f64355a50957d49c4becab39d69dc71c2a1558b40db3c2acbabbe5fffdbaab006c1c38fd039ac15026fb6817450d85080b67382ce6370d7d2f1be5816764ad19e0dbebb7d5b9c494ec10276b153b84c9a1c5f2aab26a5c1fa8af843f7ffdee1beb831a7aaab8176f43d620b36be0fb43229e59f4f042c1e7af18f8f8abf5906bb6224857ded34d81cad6e85ee1bd4fa14e81e212546ad413d51b21a9f8bc90e9a18ff1cd83937cce44f0d3356741ef412305ccb9642641f962755614d8155bb718780da7ffb686f9fedbc0bf53c9a9762e1d5a15fc7beda44f07659e6d7cbad153aa13e2f188a4acd1269938a6b18a590cc51321d29cbe4a1c3ccf9987cdbd0602ff66322f14017acd6d1860ca149fb07d7d99c204d815e72f319489d3d18455296363a40887101aff4e3b893bc2932d6a5b57ac2f478723363b20e1c5c6c8faa0fe18fc9c17b73a6ae053faf32e9d6e0fcfbc9bc3020aafc3ca2d9f84ee5551dcd0948021cc4d92f854657a9de4a5e62d0520f5b77c41bdd08c83673ab245bfd762d858ad95cfa63a741f155fe86ca5fa1a813c634a69c3c4dbee45cd87d3d9537d41617ccc7e9f3f120d878fdaa99fd2f19a2b2f5940302719a071a1fda9a005985aa4f72e10bb14681e1198937b00c21d363e15b73fd1bedddad296331173e67120debca29c7c85f32d8482d3e581f5c970985afab37b076e94a25318f581f68d2e7377a11cc0e57d673d6e901b85785530ada204e5a5ca0d2cb6cc63c55d78ca2952412a1739ec8f5780bb4622a52b1e835da9fa4eec1fec65cfaf81a7ce84b141f9a2c61d7e83d513be91273815374e4f3adbf61246fc8b35d286b53183b15574c5f3a7ae568c6f03f43d4c0a7f7725949243f479084eee44533548e501f26602348088cc68b93893d864cfba51171f8fce9fab02fec22005867a0cf25d71d5d256e627df55d3fc46f371424175af4627f3cbc8dc173ec3517d757de68512fd7c34d336b8840647dd0c629d30cc4e6f9d4ae7b915cfc41d60ba07290f21331a7515116338fab8a72ccc8fd5d46ff5c883753990b67197b7ad163113bd8701f786f42bc7b8f86bda93fbf4426a1887c3368299b9aa8f364b923f52ba5723fd85fd205438fed4718abc808075e9f36ac2e015de3ede5631421db4fd6627864f3ef184d65ea72002a9150c8139eab483a7e32486510039ab436eab8c4e3d4b04ad707e4eed60dfa414fc0fe71675af014b17899e098ecd9820f8d7d5c1a133e2dac99d29540f78567a678025c8665f5d5a02217c07bc02a3da2a69af3dba6b4f201c1bd656d56def161af8b5176af22d2e619568f0c7a32ff18bcbe1d6a41e5633d659c0096bd46b944dff521b54139a33e323b124e4991099af17bea84d183f16b83ae0a75f4043e322b09273cef94bb446d85f7b270dd696ecfa4453bf27ed3729f031a82ff593953f2ce0dab39078ac12b65d6bf7d0121c5c35e99df26fb0d2683db0ba74bef7445d2ad2cdcb294133c402d7940abda25c5d52b3a1e9c0648b919cc87aab64596ec6a088d2f82d4fbfc74c7f89c9be8e974b782586bbd131b22b6ad5a321f5b71280dd4b97c3a590455b227324832aecc0cbc873bc73ee693aad68a3a5437b4cefa1a42df866cc527628638778301f54bc4a1701cd96fb10af53b4f799863fd7c788cb90d742f1b99e6ae801e89dd1f914e8a1bde6ab1c5791e4553d1757541223f5c907fc461b43ead61a4e4911aac2bff77338472d56799c7863bc7d9d9dd1a46213d779096437bee557e5f3a611704979acbd94c140cf2e1b3cf03ec0fafa1d9a5e3c95d95e6e053af5c91dbf5eb8e502b4aad75fc68de4e0f5fd05f00e27ef18ced32a6a30cf5e2d5ff6d67a38cc580e6443d1fefe33b648d576109ec354df18ed388811df98f800db3d8eec331bf67507b4466a0a14d6b3f3143872259922934fba8faf33a47834c514703268414951d39792bbc12b8d65af5b71f904b5a9415c3e5dafeeb159408b97720b84bd6a949f1a558eb60b43fafec22e9842b869c8cb40ec821aa2f3d3ea1607d3317346731509ce12579f2a1ca9c572c831f6f524dfb82395bc677f1b826ecbd4ef750b0bcb8aa93028e61d77ff7e5db168252a301d4b9e968aa07bcde47b68704177fc1e114181e4588443dabbaecb6185378b422ec42896ee6f30b3842dc7d1f0fc85e98c24d0b42f92446f0b0f24f22ae2f6d464cffeeafa0a7118921ae1af0097d706d7772042995787990df74616be2bff18a0d812cb4aa28a8e98509d2e756a31c96d40e7afff16b2e832735d747fd85b2365e267d6e2b6279d016f1c188441e5588cddacff50161ca5f57f893f39ac9e64249162cc0cf4ef904d43662fab5112fbf4fe181e147a52f608f642e654e3840b2d720282de75c2906a788bdd26ea03e1fe41fccdb3dcce5ea98d380d8a43f413beacdd73b29cfa5c9fde58ada502b2bd988c3c120ee714d7cf37a23711cf26af39c3e175829f1e80ff77ae6d06146f4141ead299a729f430b58e0198580900c7aee884839de6ff2beca43cad5aaa102d00156f44ee805395f09b752be414e25ee1787afbf80a686ead4410cfb4eaea7a0cabfd55548672e4d51fb88f70b509eade5070847a483cdf7ef1ad679707a5abd63599538a68bdb78ec711882882f49ff6031a461e0451a8b15032ac2d54db0fce3d423e64d7972d8a175f1a30735ab43ba747edbebe336c9ccbe9c20b81baf2b7f69050ffb33dc5065dd229847a79f0248d0fe7a70c7b2e2387d276024b689bcf63ec1ca7a529c5b4a2fab166597d539c7de130722c11937319cf904ed3a5d7bb51689eaf3ff299a801d75d534e541eebe63c1ad35837907f414326f48c63c5b99f42a770c69a0d432e1ff1257fed2a823e6cfd4cab0dde46cd51331b9e8c15c17d0aec22c7f398f15f7c7e945fceffe523ab1bac5dabe5f4cc6064a0ef20bdd99aa8a3e2058267dd0af578e4ef2b07b5ab3277f5d04467503d9ff9f77cc31b2c6034c918be22f88e4a53229f1249c46ffedc87c2bb2c31e556990274be6c70b4d6b749d852635cb7d6526d9f24394fdfcd183c48d5f039386bb65fa2077a322b5bf9d14546474153e2e2a7fdfaaa5bdacab1eb038a41c615938c4783c633e7311c3d0f0e69f4ada1710c424e5d7ece7e374acec2cf423b24c0bb8ef35ba20a21497d41468ec20702fc48f94cdd37ca691e1d65939ed04fed0e3172be764a490cf4044085264e4086b227981a88978137cc12211d43670485cf0b36db3951db6c8efc20ca1b09a76b7ecaeb871fb23ab2aee0cd791d1483774a0d2181570d678c1145aa02b1357b2da7038233c79e6a71cb102b42f08671df7b680b9d54206cf29844e9a1fa0109f551d5e802f8347203b0e3d2a007ea0faccae7bdccbf4f49d9cf33bb1826411ccd5a828d27670d5df93fd2af5440b110a0c8a60748799e45fbcd127cb2cbbac548f0fb2714bbe248829bd074298225c633015a79af93a67091742e4c43c131d09d372ba4da885639ea5b524b035012a60de41d39a7296d3d0bb075af9659eccc4273daebf25e0fedb179373bff89eb6ed2fcce447af7dfffc1096f1d28c15", 0x1000)
sendmsg$can_raw(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000204e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801)
socket$packet(0x11, 0x2, 0x300)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=<r5=>0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32, @ANYBLOB="029000000080040008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e21, 0x8001, @mcast2, 0x8}, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1, {[0x4, 0x741, 0x80000003, 0x6, 0xc45, 0x6bd, 0x1, 0x9]}}, 0x5c)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=r5, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES16=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0)

1.052294468s ago: executing program 1 (id=3889):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x3000000}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

984.340275ms ago: executing program 3 (id=3890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
write$cgroup_int(r2, &(0x7f0000000080), 0x12) (async)
write$cgroup_devices(r2, 0x0, 0x8) (async)
unshare(0x6020480) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)

914.133962ms ago: executing program 4 (id=3891):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000190001002cbd7000000000001c140000fe03800100"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)

803.587219ms ago: executing program 0 (id=3892):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a2ba3da5760", 0x26}], 0x2}, 0x20008b88) (async)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a2ba3da5760", 0x26}], 0x2}, 0x20008b88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x3c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x3c}}, 0x18)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r3, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r3, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4044040)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r0, &(0x7f0000000480)="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", &(0x7f0000000100)=@tcp=r5}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f0000000040))
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000002"], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) (async)
getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) (async)
ioctl$NS_GET_PARENT(r8, 0xb702, 0x0)

692.279656ms ago: executing program 0 (id=3893):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
close(r4) (async, rerun: 32)
ppoll(&(0x7f000000c040)=[{r5, 0x2391}], 0x1, 0x0, &(0x7f000000c240), 0x8) (rerun: 32)

548.896824ms ago: executing program 3 (id=3894):
socketpair$unix(0x1, 0xd, 0x0, &(0x7f0000000400))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x7}, 0x80, 0x0}}], 0x1, 0x48094)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

319.569638ms ago: executing program 3 (id=3895):
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRESDEC=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4001) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4)

183.05567ms ago: executing program 0 (id=3896):
socket$netlink(0x10, 0x3, 0x4)
unshare(0x2c060000)
unshare(0x2c020400)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x80800)

68.836339ms ago: executing program 3 (id=3897):
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000fae20200703aba"])
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'sit0\x00', @random="000b6e89f424"})
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x2c020400)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
bind$ax25(r6, 0x0, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x170, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x23}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "b958996f057c838b388b40d3ca20c30c10b8d55f378fb3f95fc3f7b0d058cea354dc"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8a5c4977b01aeee33af87839bdfe4dcae3b67619db4b43534e1f48"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e547302e4a2f7bc398289f250ef5745d82cdf9b"}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7da6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x409}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000881)
r8 = socket$kcm(0x29, 0x7, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
vmsplice(r0, &(0x7f0000000200), 0x0, 0x8)
r11 = socket(0x28, 0x1, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc1})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

0s ago: executing program 1 (id=3898):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2f, "67856f081d9fc303c68bf9098547cc93f2810444f3dd504caa9e071d33306b55cfcf22c90300"/47}})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xfffd, 0x2}, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r13, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x8080)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)

kernel console output (not intermixed with test programs):

unnel: ip6gretap0 xmit: Local address not yet configured!
[  318.918382][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'.
[  318.938677][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2419'.
[  319.213764][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'.
[  319.234682][ T3809] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  319.244209][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'.
[  319.259808][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'.
[  319.454652][ T6481] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  319.473253][ T6481] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  319.474789][T15457] sctp: [Deprecated]: syz.1.2427 (pid 15457) Use of int in maxseg socket option.
[  319.474789][T15457] Use struct sctp_assoc_value instead
[  319.481886][T13765] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  319.675491][T13765] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  319.747207][T15476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.771866][T15475] tipc: Resetting bearer <eth:syzkaller0>
[  319.819605][T15475] tipc: Disabling bearer <eth:syzkaller0>
[  320.012586][T15484] lo speed is unknown, defaulting to 1000
[  320.085472][T13765] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  320.177857][T15497] ªªªªªª: renamed from wg2
[  320.206770][T15500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.235565][T15500] syzkaller0: entered promiscuous mode
[  320.241117][T15500] syzkaller0: entered allmulticast mode
[  320.253678][T15505] sctp: [Deprecated]: syz.0.2445 (pid 15505) Use of int in max_burst socket option.
[  320.253678][T15505] Use struct sctp_assoc_value instead
[  320.289122][ T6357] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.297677][ T6357] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.440297][T15510] validate_nla: 3 callbacks suppressed
[  320.440316][T15510] netlink: 'syz.4.2446': attribute type 3 has an invalid length.
[  320.499922][T15499] tipc: Resetting bearer <eth:syzkaller0>
[  320.580045][T15499] tipc: Disabling bearer <eth:syzkaller0>
[  320.612081][T15515] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  320.622541][T15515] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  320.665134][T15515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  320.799938][T15489] netlink: 'syz.2.2440': attribute type 13 has an invalid length.
[  320.829294][T15489] gretap0: refused to change device tx_queue_len
[  320.840466][T15489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  320.946125][T15484] lo speed is unknown, defaulting to 1000
[  321.366569][T15553] macsec0: entered allmulticast mode
[  321.676749][T15566] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  321.877328][T15578] netlink: 'syz.2.2467': attribute type 142 has an invalid length.
[  322.237547][T15610] netlink: 'syz.3.2474': attribute type 10 has an invalid length.
[  322.281821][T15612] netlink: 'syz.3.2474': attribute type 10 has an invalid length.
[  322.575308][T15630] netlink: 'syz.3.2480': attribute type 10 has an invalid length.
[  322.606532][T15630] dummy0: entered promiscuous mode
[  322.613129][T15630] team0: Port device dummy0 added
[  322.629267][T15632] netlink: 'syz.4.2481': attribute type 1 has an invalid length.
[  322.649391][T15632] __nla_validate_parse: 14 callbacks suppressed
[  322.649412][T15632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2481'.
[  322.671553][T15632] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2481'.
[  322.684066][T15632] netlink: 'syz.4.2481': attribute type 1 has an invalid length.
[  322.694396][T15632] netlink: 'syz.4.2481': attribute type 8 has an invalid length.
[  322.710607][T15630] netpci0: tun_chr_ioctl cmd 1074025678
[  322.717596][T15630] netpci0: group set to 0
[  322.728114][T15630] netlink: 'syz.3.2480': attribute type 10 has an invalid length.
[  322.749655][T15632] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2481'.
[  322.852692][T15630] dummy0: left promiscuous mode
[  322.891455][T15630] team0: Port device dummy0 removed
[  322.918622][T15630] dummy0: entered promiscuous mode
[  322.937290][T15630] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  323.726511][    C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  323.726528][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  324.605245][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  324.812661][T15675] bridge_slave_1: left allmulticast mode
[  324.826384][T15675] bridge_slave_1: left promiscuous mode
[  324.832467][T15675] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.890718][T15675] bridge_slave_1: entered promiscuous mode
[  324.906245][T15675] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  324.927653][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'.
[  325.001883][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2492'.
[  325.039031][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2492'.
[  325.748238][  T994] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  325.777096][  T994] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  325.806411][T15701] xt_ecn: cannot match TCP bits for non-tcp packets
[  325.813138][  T994] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  325.824791][T15704] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  325.831782][   T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  325.973571][T15709] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2500'.
[  326.121647][T15718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2502'.
[  326.134828][T15719] netlink: 'syz.3.2503': attribute type 2 has an invalid length.
[  326.142988][T15719] netlink: 'syz.3.2503': attribute type 8 has an invalid length.
[  326.154769][T15719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2503'.
[  326.164566][T15720] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2502'.
[  326.490880][T15729] bond19 (unregistering): Released all slaves
[  326.677822][T15744] netlink: 'syz.3.2510': attribute type 1 has an invalid length.
[  326.740136][T15736] lo speed is unknown, defaulting to 1000
[  327.137711][T15752] lo speed is unknown, defaulting to 1000
[  327.143933][T15736] lo speed is unknown, defaulting to 1000
[  327.709593][T15752] lo speed is unknown, defaulting to 1000
[  328.244557][T15780] __nla_validate_parse: 5 callbacks suppressed
[  328.244580][T15780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2518'.
[  328.418788][T15781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2518'.
[  328.494250][T15780] bond6: left promiscuous mode
[  328.553466][ T3809] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.595906][ T3809] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.633909][ T3809] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.675252][ T3809] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  328.731072][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'.
[  328.756084][T15793] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2522'.
[  328.874532][T15790] ipvlan1: renamed from dummy0 (while UP)
[  328.920354][T15797] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2521'.
[  328.933734][T15794] lo speed is unknown, defaulting to 1000
[  329.279483][T15794] lo speed is unknown, defaulting to 1000
[  329.652697][T15825] xt_cgroup: invalid path, errno=-2
[  329.769808][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2527'.
[  329.947400][T15836] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.992818][T15835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  330.419209][T15836] syzkaller0: entered promiscuous mode
[  330.424845][T15836] syzkaller0: entered allmulticast mode
[  331.171625][T15872] IPv6: Can't replace route, no match found
[  332.605534][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  332.768384][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2540'.
[  332.821181][T15897] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2544'.
[  332.862850][T15885] gretap0: entered promiscuous mode
[  332.912017][T15885] debugfs: 'hsr0' already exists in 'hsr'
[  332.925568][T15885] Cannot create hsr debugfs directory
[  332.936247][T15885] hsr0: entered promiscuous mode
[  333.176225][T15918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2548'.
[  333.226533][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  333.245232][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.432928][T15936] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2549'.
[  333.510219][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'.
[  333.612148][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'.
[  333.657784][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'.
[  333.747481][T15948] batadv2: entered promiscuous mode
[  333.829148][T15954] netlink: 'syz.0.2554': attribute type 7 has an invalid length.
[  334.176311][T15966] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2557'.
[  334.248283][T15974] syzkaller0: entered promiscuous mode
[  334.253866][T15974] syzkaller0: entered allmulticast mode
[  334.326516][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'.
[  334.353961][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2560'.
[  334.508129][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2562'.
[  334.647777][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'.
[  334.779700][T16010] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  334.890640][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2571'.
[  334.984617][T16022] batadv_slave_0: entered promiscuous mode
[  335.000944][T16014] batadv_slave_0: left promiscuous mode
[  335.648966][T16062] netlink: 'syz.1.2583': attribute type 10 has an invalid length.
[  335.991381][  T994] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  336.004561][  T994] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.016060][  T994] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.026334][  T994] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.039270][T16079] pimreg: entered allmulticast mode
[  336.327980][T16084] Cannot find del_set index 4 as target
[  336.999250][T16120] ip6gre2: entered promiscuous mode
[  337.004544][T16120] ip6gre2: entered allmulticast mode
[  337.638550][T16148] xt_HMARK: spi-set and port-set can't be combined
[  338.215643][T16174] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  338.377719][T16191] 8021q: VLANs not supported on ip_vti0
[  338.698992][T16211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.714833][T16209] netlink: 'syz.2.2617': attribute type 13 has an invalid length.
[  339.243776][T16209] batadv0: left promiscuous mode
[  339.445817][T16218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.470018][T16219] syzkaller0: entered promiscuous mode
[  339.478118][T16219] syzkaller0: entered allmulticast mode
[  339.540821][T16209] tipc: Disabling bearer <eth:syzkaller0>
[  339.588881][T16224] tipc: Resetting bearer <eth:syzkaller0>
[  339.602122][T16241] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.624561][T16224] tipc: Disabling bearer <eth:syzkaller0>
[  339.697344][T16243] netem: change failed
[  339.714358][T16243] __nla_validate_parse: 14 callbacks suppressed
[  339.714378][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'.
[  339.834456][T16255] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2624'.
[  339.929084][T16254] pim6reg: entered allmulticast mode
[  339.955715][T16254] pim6reg: left allmulticast mode
[  340.243841][T16279] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2629'.
[  340.284086][T16279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2629'.
[  340.384659][T16289] netlink: 'syz.2.2631': attribute type 4 has an invalid length.
[  340.747902][T16303] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  340.781972][T16307] netlink: 'syz.0.2637': attribute type 6 has an invalid length.
[  341.006621][T16314] lo speed is unknown, defaulting to 1000
[  341.389740][T16314] lo speed is unknown, defaulting to 1000
[  342.499680][T16369] netlink: zone id is out of range
[  342.512143][T16369] netlink: zone id is out of range
[  342.523489][T16369] netlink: zone id is out of range
[  342.549905][T16369] netlink: zone id is out of range
[  342.570092][T16369] netlink: zone id is out of range
[  342.592305][T16369] netlink: zone id is out of range
[  342.603595][T16369] netlink: zone id is out of range
[  342.614775][T16369] netlink: zone id is out of range
[  342.631447][T16369] netlink: zone id is out of range
[  342.644345][T16369] netlink: zone id is out of range
[  342.882192][T16382] netlink: 'syz.3.2651': attribute type 4 has an invalid length.
[  342.912813][T16379] netlink: 'syz.3.2651': attribute type 4 has an invalid length.
[  342.924844][T16380] ªªªªªª: renamed from wg2
[  342.932641][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'.
[  343.193356][T16393] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2654'.
[  343.216251][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2654'.
[  343.256894][T16393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2654'.
[  343.266771][T16389] lo speed is unknown, defaulting to 1000
[  343.337127][T16400] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2656'.
[  343.469004][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'.
[  343.939011][T16389] lo speed is unknown, defaulting to 1000
[  344.481203][T16453] netlink: 'syz.2.2667': attribute type 21 has an invalid length.
[  344.531795][T16453] netlink: 'syz.2.2667': attribute type 4 has an invalid length.
[  344.717645][T16461] netlink: 'syz.2.2670': attribute type 1 has an invalid length.
[  345.044368][T16466] lo speed is unknown, defaulting to 1000
[  345.121837][T16472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.220378][T16468] syzkaller0: entered promiscuous mode
[  345.240593][T16468] syzkaller0: entered allmulticast mode
[  345.363343][T16468] tipc: Resetting bearer <eth:syzkaller0>
[  345.798932][T16464] tipc: Resetting bearer <eth:syzkaller0>
[  345.867153][T16464] tipc: Disabling bearer <eth:syzkaller0>
[  345.897865][T16466] lo speed is unknown, defaulting to 1000
[  345.903822][T16479] lo speed is unknown, defaulting to 1000
[  346.010128][T16518] netlink: 'syz.2.2683': attribute type 10 has an invalid length.
[  346.097720][T16520] x_tables: duplicate underflow at hook 3
[  346.476547][T16479] lo speed is unknown, defaulting to 1000
[  347.074424][T16540] __nla_validate_parse: 8 callbacks suppressed
[  347.074445][T16540] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2687'.
[  347.406772][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'.
[  347.448432][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'.
[  348.008493][T16603] netlink: 'syz.0.2702': attribute type 1 has an invalid length.
[  348.171777][T16614] netlink: 'syz.1.2704': attribute type 1 has an invalid length.
[  348.249013][T16614] bond10: entered promiscuous mode
[  348.256198][T16614] 8021q: adding VLAN 0 to HW filter on device bond10
[  348.366270][T16614] 8021q: adding VLAN 0 to HW filter on device bond11
[  348.393310][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2705'.
[  348.407127][T16614] bond10: (slave bond11): making interface the new active one
[  348.462576][T16614] bond11: entered promiscuous mode
[  348.495446][T16614] bond10: (slave bond11): Enslaving as an active interface with an up link
[  348.535708][T16633] netlink: 'syz.4.2696': attribute type 1 has an invalid length.
[  348.569473][T16633] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.2696'.
[  348.637268][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  348.648608][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  348.657070][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  348.666153][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  348.681019][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  348.743223][T16634] lo speed is unknown, defaulting to 1000
[  348.755267][T16584] netlink: 'syz.4.2696': attribute type 1 has an invalid length.
[  348.814014][T16584] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.2696'.
[  348.936161][T16643] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  348.991444][T16643] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  349.229929][T16658] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  349.233760][T16655] syzkaller0: entered promiscuous mode
[  349.246237][T16655] syzkaller0: entered allmulticast mode
[  349.468156][T16634] lo speed is unknown, defaulting to 1000
[  349.474862][T16668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2715'.
[  349.885239][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  350.063457][T16634] chnl_net:caif_netlink_parms(): no params data found
[  350.072117][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  350.099463][T16683] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002
[  350.205352][T16685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.279910][T16689] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  350.460051][T16702] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2722'.
[  350.589540][T16634] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.597123][T16634] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.604596][T16634] bridge_slave_0: entered allmulticast mode
[  350.612489][T16634] bridge_slave_0: entered promiscuous mode
[  350.623146][T16634] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.630542][T16634] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.651839][T16634] bridge_slave_1: entered allmulticast mode
[  350.667294][T16634] bridge_slave_1: entered promiscuous mode
[  350.767438][ T5845] Bluetooth: hci5: command tx timeout
[  350.792284][T16717] netlink: 'syz.0.2725': attribute type 2 has an invalid length.
[  351.165233][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.490444][ T3562] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  351.637356][ T3562] bond4 (unregistering): (slave bridge4): Releasing active interface
[  351.909224][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.919529][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.929878][ T3562] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  351.940746][ T3562] bond0 (unregistering): Released all slaves
[  352.046842][ T3562] bond1 (unregistering): Released all slaves
[  352.148793][ T3562] bond2 (unregistering): Released all slaves
[  352.246881][ T3562] bond3 (unregistering): Released all slaves
[  352.262869][ T3562] bond4 (unregistering): Released all slaves
[  352.277052][ T3562] bond5 (unregistering): Released all slaves
[  352.293675][ T3562] bond6 (unregistering): Released all slaves
[  352.310583][ T3562] bond7 (unregistering): Released all slaves
[  352.326769][ T3562] bond8 (unregistering): Released all slaves
[  352.341489][ T3562] bond9 (unregistering): Released all slaves
[  352.356488][ T3562] bond10 (unregistering): Released all slaves
[  352.371646][ T3562] bond11 (unregistering): Released all slaves
[  352.387609][ T3562] bond12 (unregistering): Released all slaves
[  352.407029][ T3562] bond13 (unregistering): Released all slaves
[  352.422326][ T3562] bond14 (unregistering): Released all slaves
[  352.437809][ T3562] bond15 (unregistering): Released all slaves
[  352.454164][ T3562] bond16 (unregistering): Released all slaves
[  352.558764][ T3562] bond17 (unregistering): Released all slaves
[  352.659322][ T3562] bond18 (unregistering): Released all slaves
[  352.845387][ T5845] Bluetooth: hci5: command tx timeout
[  352.896369][ T3562] mÿ5nè‹Ò: left promiscuous mode
[  353.038589][T16634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.102022][T16634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.127896][ T3562] tipc: Disabling bearer <udp:syz0>
[  353.165592][ T3562] tipc: Left network mode
[  353.272464][T16634] team0: Port device team_slave_0 added
[  353.326480][T16634] team0: Port device team_slave_1 added
[  353.376222][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2747'.
[  353.455905][T16634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.462919][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.556043][T16634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.767131][T16634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.774152][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.828842][T16634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.154440][T16634] hsr_slave_0: entered promiscuous mode
[  354.162948][T16634] hsr_slave_1: entered promiscuous mode
[  354.169835][T16634] debugfs: 'hsr0' already exists in 'hsr'
[  354.176409][T16634] Cannot create hsr debugfs directory
[  354.204556][T16807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2762'.
[  354.386490][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'.
[  354.929063][ T5845] Bluetooth: hci5: command tx timeout
[  355.459231][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.468967][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.567698][ T3562] team0 (unregistering): Port device batadv1 removed
[  355.597519][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2785'.
[  356.087229][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  356.134526][ T3562] team0 (unregistering): Port device team_slave_0 removed
[  356.486266][T16874] bridge10: entered promiscuous mode
[  356.815379][T16634] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.844862][T16634] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.893135][T16634] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.928846][T16634] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.008726][ T5845] Bluetooth: hci5: command tx timeout
[  357.037099][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.083000][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.209212][T16634] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.252944][T16634] 8021q: adding VLAN 0 to HW filter on device team0
[  357.277700][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.285059][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.331716][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.339089][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.421182][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'.
[  357.450607][T16923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'.
[  357.919518][T16634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.974594][T16950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2807'.
[  358.079366][T16634] veth0_vlan: entered promiscuous mode
[  358.117777][T16634] veth1_vlan: entered promiscuous mode
[  358.195320][T16634] veth0_macvtap: entered promiscuous mode
[  358.222955][T16634] veth1_macvtap: entered promiscuous mode
[  358.277173][T16634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.294570][T16634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.347288][ T6481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.369817][ T6481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.405599][ T6481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.463022][T16970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2815'.
[  358.473596][ T6481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.610437][ T3562] IPVS: stop unused estimator thread 0...
[  358.825508][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.833494][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.983734][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.006009][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.255379][T17007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2828'.
[  359.404549][T17014] netlink: 'syz.2.2706': attribute type 1 has an invalid length.
[  359.412592][T17014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2706'.
[  359.772923][T17037] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  360.416966][T17078] tipc: Failed to remove unknown binding: 66,1,1/3046831135:471019073/471019075
[  360.446352][T17078] tipc: Failed to remove unknown binding: 66,1,1/3046831135:471019073/471019075
[  360.456309][T17078] tipc: Failed to remove unknown binding: 66,1,1/3046831135:471019073/471019075
[  360.492329][   T30] audit: type=1804 audit(1769370821.008:4): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2854" name="cgroup.controllers" dev="tmpfs" ino=2932 res=1 errno=0
[  360.526050][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'.
[  360.552497][T17076] syzkaller0: entered promiscuous mode
[  360.559261][T17076] syzkaller0: entered allmulticast mode
[  360.564977][   T30] audit: type=1800 audit(1769370821.008:5): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2854" name="cgroup.controllers" dev="tmpfs" ino=2932 res=0 errno=0
[  360.644182][   T30] audit: type=1800 audit(1769370821.008:6): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2854" name="cgroup.controllers" dev="tmpfs" ino=2932 res=0 errno=0
[  361.000385][T17104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2859'.
[  362.974286][T17142] netlink: 'syz.3.2867': attribute type 2 has an invalid length.
[  362.983090][T17142] netlink: 'syz.3.2867': attribute type 15 has an invalid length.
[  363.004265][T17142] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.2867'.
[  363.252184][T17157] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  363.299030][T17157] syzkaller0: entered promiscuous mode
[  363.304568][T17157] syzkaller0: entered allmulticast mode
[  363.350481][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'.
[  363.371126][T17164] net_ratelimit: 46 callbacks suppressed
[  363.371143][T17164] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  363.443588][T17157] tipc: Resetting bearer <eth:syzkaller0>
[  363.471094][T17157] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  363.584484][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'.
[  363.641166][T17168] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  363.686708][T17168] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  363.712261][T17168] bond9: (slave vxcan1): making interface the new active one
[  363.722057][T17168] bond9: (slave vxcan1): Enslaving as an active interface with an up link
[  363.740407][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'.
[  363.969682][T17157] bond9 (unregistering): (slave vxcan1): Releasing backup interface
[  364.007379][T17157] bond9 (unregistering): Released all slaves
[  364.112307][T17156] tipc: Resetting bearer <eth:syzkaller0>
[  364.187773][T17156] tipc: Disabling bearer <eth:syzkaller0>
[  364.575788][T17239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2890'.
[  364.710030][T17247] IPVS: set_ctl: invalid protocol: 98 172.20.20.63:20000
[  364.754741][T17243] syzkaller0: entered promiscuous mode
[  364.774649][T17243] syzkaller0: entered allmulticast mode
[  364.795461][T17250] IPVS: set_ctl: invalid protocol: 98 172.20.20.63:20000
[  364.803533][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'.
[  365.950308][T17290] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2899'.
[  367.307012][T17290] 0ªî{X¹¦: renamed from gretap0
[  367.317571][T17290] 0ªî{X¹¦: entered allmulticast mode
[  367.333329][T17290] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  367.502129][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'.
[  367.553254][T17302] netlink: 'syz.0.2901': attribute type 4 has an invalid length.
[  367.802856][T17325] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.2909'.
[  367.824733][T17325] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.2909'.
[  367.892397][T17332] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.2909'.
[  367.904747][T17332] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.2909'.
[  368.258256][T17355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.294084][T17356] syzkaller0: entered promiscuous mode
[  368.315054][T17356] syzkaller0: entered allmulticast mode
[  368.391236][T17356] tipc: Resetting bearer <eth:syzkaller0>
[  368.447576][T17356] tipc: Disabling bearer <eth:syzkaller0>
[  368.535529][T17370] syzkaller0: entered promiscuous mode
[  368.541343][T17370] syzkaller0: entered allmulticast mode
[  368.713582][T17377] tap0: tun_chr_ioctl cmd 1074025676
[  368.722167][T17377] tap0: owner set to 0
[  369.098759][T17402] netlink: 'syz.1.2927': attribute type 13 has an invalid length.
[  369.135268][T17402] netlink: 'syz.1.2927': attribute type 17 has an invalid length.
[  369.158905][T17402] netlink: 'syz.1.2927': attribute type 13 has an invalid length.
[  369.169590][T17401] veth0: entered promiscuous mode
[  369.177114][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'.
[  369.190667][T17402] netlink: 'syz.1.2927': attribute type 17 has an invalid length.
[  369.301289][T17399] veth0: left promiscuous mode
[  369.492683][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2931'.
[  369.525126][T17424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2931'.
[  369.553245][T17430] netlink: 'syz.0.2931': attribute type 1 has an invalid length.
[  369.786861][T17435] bond9: (slave bridge5): Enslaving as a backup interface with an up link
[  369.956898][T17414] netlink: 'syz.2.2929': attribute type 10 has an invalid length.
[  370.097389][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'.
[  370.192389][T17456] lo speed is unknown, defaulting to 1000
[  370.201796][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'.
[  370.210868][T17455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.230798][T17455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.308412][T17463] netlink: 'syz.2.2939': attribute type 10 has an invalid length.
[  370.342379][T17464] netlink: 'syz.2.2939': attribute type 10 has an invalid length.
[  370.453360][T17464] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  370.497864][T17463] bond0: (slave dummy0): Releasing backup interface
[  370.526156][T17463] team0: Port device dummy0 added
[  370.571664][T17469] bond7: entered promiscuous mode
[  370.576936][T17469] bond7: entered allmulticast mode
[  370.582640][T17469] 8021q: adding VLAN 0 to HW filter on device bond7
[  370.798938][T17456] lo speed is unknown, defaulting to 1000
[  370.851130][T17492] netlink: 'syz.4.2944': attribute type 21 has an invalid length.
[  370.929241][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'.
[  370.968559][T17492] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2944'.
[  371.013549][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'.
[  371.054303][T17496] ¾x9ÿ: renamed from bridge_slave_0
[  371.676057][T17522] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:3
[  371.746530][T17511] lo speed is unknown, defaulting to 1000
[  371.763130][T17534] netlink: 'syz.3.2956': attribute type 11 has an invalid length.
[  372.076513][T17542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2959'.
[  372.256088][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'.
[  372.971498][T17577] validate_nla: 2 callbacks suppressed
[  372.971519][T17577] netlink: 'syz.3.2966': attribute type 3 has an invalid length.
[  372.980836][T17511] lo speed is unknown, defaulting to 1000
[  372.996134][T17565] lo speed is unknown, defaulting to 1000
[  373.629438][T17601] xt_nfacct: accounting object `syz0' does not exist
[  373.768792][T17566] lo speed is unknown, defaulting to 1000
[  374.286321][T17566] lo speed is unknown, defaulting to 1000
[  374.334085][T17565] lo speed is unknown, defaulting to 1000
[  374.693297][T17636] __nla_validate_parse: 5 callbacks suppressed
[  374.693317][T17636] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2976'.
[  374.975251][T17650] netlink: 'syz.3.2978': attribute type 2 has an invalid length.
[  375.020212][T17650] netlink: 'syz.3.2978': attribute type 2 has an invalid length.
[  375.258405][T17658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.493383][T17670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2986'.
[  375.634118][T17673] netlink: 'syz.4.2987': attribute type 1 has an invalid length.
[  375.654023][T17673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2987'.
[  375.738093][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'.
[  375.873562][T17682] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  376.036754][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'.
[  376.962909][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.975455][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.984879][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.993137][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.001176][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.201860][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'.
[  377.222015][T17732] lo speed is unknown, defaulting to 1000
[  377.292213][T17748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3004'.
[  377.436761][ T6520] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  377.810435][T17732] lo speed is unknown, defaulting to 1000
[  377.969117][T17792] netlink: 'syz.1.3011': attribute type 4 has an invalid length.
[  378.055227][   T24] lo speed is unknown, defaulting to 1000
[  378.079464][   T24] syz0: Port: 1 Link DOWN
[  378.094900][T17788] netlink: 'syz.0.3009': attribute type 13 has an invalid length.
[  378.103623][   T24] lo speed is unknown, defaulting to 1000
[  378.406781][T17807] netlink: 'syz.4.3013': attribute type 10 has an invalid length.
[  378.798614][   T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.864806][   T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.893887][   T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.923994][ T6481] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  378.993931][T17732] chnl_net:caif_netlink_parms(): no params data found
[  379.004914][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3016'.
[  379.085868][ T5845] Bluetooth: hci2: command tx timeout
[  379.157484][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'.
[  379.192743][T17829] openvswitch: netlink: Flow key attr not present in new flow.
[  379.350286][T17732] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.357642][T17732] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.385850][T17732] bridge_slave_0: entered allmulticast mode
[  379.420137][T17732] bridge_slave_0: entered promiscuous mode
[  379.429270][T17732] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.436673][T17732] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.444122][T17732] bridge_slave_1: entered allmulticast mode
[  379.452423][T17732] bridge_slave_1: entered promiscuous mode
[  379.542328][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.628043][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.678703][T17852] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3024'.
[  379.734811][T17846] netlink: 'syz.4.3022': attribute type 11 has an invalid length.
[  379.771808][T17732] team0: Port device team_slave_0 added
[  379.848457][T17732] team0: Port device team_slave_1 added
[  379.996449][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.025745][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.119282][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.405667][T17893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3032'.
[  380.418241][T17873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3029'.
[  380.428775][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.449189][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.494035][T17895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3032'.
[  380.531011][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.591107][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'.
[  380.615081][T17898] netlink: 'syz.1.3033': attribute type 30 has an invalid length.
[  380.627757][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'.
[  380.730596][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'.
[  380.749992][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'.
[  380.762831][T17732] hsr_slave_0: entered promiscuous mode
[  380.771840][T17898] netlink: 'syz.1.3033': attribute type 30 has an invalid length.
[  380.783482][T17732] hsr_slave_1: entered promiscuous mode
[  380.806100][T17732] debugfs: 'hsr0' already exists in 'hsr'
[  380.817579][T17732] Cannot create hsr debugfs directory
[  381.054122][T17920] netlink: 'syz.4.3038': attribute type 12 has an invalid length.
[  381.083369][T17920] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3038'.
[  381.114264][T17923] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3040'.
[  381.160898][T17923] netlink: 'syz.2.3040': attribute type 2 has an invalid length.
[  381.170863][ T5845] Bluetooth: hci2: command tx timeout
[  381.249506][T17927] netlink: 'syz.2.3040': attribute type 1 has an invalid length.
[  381.778504][ T5845] block nbd0: Receive control failed (result -32)
[  381.820499][T17949] lo speed is unknown, defaulting to 1000
[  381.826595][T17732] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  381.917156][T17732] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  382.700608][T17732] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  382.736890][T17732] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  382.782503][T17975] lo speed is unknown, defaulting to 1000
[  382.790962][T17949] lo speed is unknown, defaulting to 1000
[  383.209427][T17732] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.245388][ T5845] Bluetooth: hci2: command tx timeout
[  383.263282][T17732] 8021q: adding VLAN 0 to HW filter on device team0
[  383.278763][  T194] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.286034][  T194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.327832][T17975] lo speed is unknown, defaulting to 1000
[  383.346511][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.353839][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.739324][T18017] team0: left promiscuous mode
[  383.744182][T18017] team_slave_0: left promiscuous mode
[  383.777788][T18017] team_slave_1: left promiscuous mode
[  383.783449][T18017] geneve0: left promiscuous mode
[  383.822055][T18017] bond3: left promiscuous mode
[  383.859921][T18017] geneve3: left promiscuous mode
[  383.865751][T18017] gtp0: left promiscuous mode
[  383.870699][T18017] bond7: left promiscuous mode
[  383.906150][T18017] bond8: left promiscuous mode
[  384.540334][T17732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.739952][T17732] veth0_vlan: entered promiscuous mode
[  384.790762][T17732] veth1_vlan: entered promiscuous mode
[  384.822259][T18068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3063'.
[  384.906958][T17732] veth0_macvtap: entered promiscuous mode
[  384.942445][T17732] veth1_macvtap: entered promiscuous mode
[  384.991143][T18074] bond0: option downdelay: invalid value (18446744073709551607)
[  385.023997][T18074] bond0: option downdelay: allowed values 0 - 2147483647
[  385.083023][T17732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.152095][T17732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.240350][  T994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.259222][  T994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.288603][  T994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.321755][  T994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.335938][ T5845] Bluetooth: hci2: command tx timeout
[  385.421804][T18099] 8021q: adding VLAN 0 to HW filter on device bond11
[  385.726383][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.736008][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  386.268273][T18151] syzkaller1: entered promiscuous mode
[  386.274019][T18151] syzkaller1: entered allmulticast mode
[  386.294221][  T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.317890][  T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.525419][ T6481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.561608][ T6481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.710962][T18161] __nla_validate_parse: 3 callbacks suppressed
[  386.710985][T18161] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3078'.
[  386.772288][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3078'.
[  387.081311][T18185] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  387.356587][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.366938][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.378021][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.391085][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.401250][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.508707][T18198] 0: reclassify loop, rule prio 0, protocol 800
[  387.559933][T18199] lo speed is unknown, defaulting to 1000
[  387.580032][T18209] x_tables: duplicate underflow at hook 1
[  387.580032][T18206] x_tables: duplicate underflow at hook 1
[  387.732717][ T5837] syz_tun (unregistering): left promiscuous mode
[  387.821895][T18215] netlink: 'syz.0.3091': attribute type 5 has an invalid length.
[  387.854167][   T30] audit: type=1107 audit(1769370848.358:7): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  387.861626][T18215] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3091'.
[  388.022455][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'.
[  388.072674][T18227] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3095'.
[  388.119424][T18227] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3095'.
[  388.478149][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'.
[  388.487456][T18199] lo speed is unknown, defaulting to 1000
[  388.615972][T18245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.625296][T18250] syzkaller0: entered promiscuous mode
[  388.639834][T18250] syzkaller0: entered allmulticast mode
[  388.698865][T18245] tipc: Resetting bearer <eth:syzkaller0>
[  388.814862][T18254] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.822667][T18254] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.952310][T18254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.970618][T18254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.168378][T18244] tipc: Resetting bearer <eth:syzkaller0>
[  389.204306][T18244] tipc: Disabling bearer <eth:syzkaller0>
[  389.223441][T18265] pimreg: tun_chr_ioctl cmd 1074812117
[  389.230507][  T994] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.258703][T18266] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  389.324601][  T994] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.420495][  T994] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.453517][  T994] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.467849][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3107'.
[  389.497340][ T5845] Bluetooth: hci4: command tx timeout
[  389.631622][T18291] syzkaller1: tun_chr_ioctl cmd 1074025677
[  389.647981][T18291] syzkaller1: linktype set to 780
[  389.926568][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'.
[  390.075652][T18199] chnl_net:caif_netlink_parms(): no params data found
[  390.214643][   T36] dummy0: left allmulticast mode
[  390.226921][   T36] dummy0: left promiscuous mode
[  390.241095][   T36] bridge0: port 3(dummy0) entered disabled state
[  390.296356][   T36] bridge_slave_1: left allmulticast mode
[  390.307178][   T36] bridge_slave_1: left promiscuous mode
[  390.329429][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.350507][   T36] bridge_slave_0: left allmulticast mode
[  390.362360][   T36] bridge_slave_0: left promiscuous mode
[  390.376641][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.525802][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'.
[  390.647713][   T36] ip6gretap0 (unregistering): left promiscuous mode
[  390.702501][   T36] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  390.727792][   T36] ip6gretap1 (unregistering): left allmulticast mode
[  390.762218][T18341] unsupported nlmsg_type 40
[  390.945302][   T36] bond2 (unregistering): (slave gretap2): Releasing active interface
[  391.018311][   T36] dvmrp0 (unregistering): left allmulticast mode
[  391.575236][ T5845] Bluetooth: hci4: command tx timeout
[  391.813812][   T36] bond1 (unregistering): Released all slaves
[  391.910616][   T36] bond0 (unregistering): Released all slaves
[  392.011190][   T36] bond2 (unregistering): Released all slaves
[  392.107575][   T36] bond3 (unregistering): Released all slaves
[  392.207832][   T36] bond4 (unregistering): Released all slaves
[  392.221788][   T36] bond5 (unregistering): Released all slaves
[  392.316087][   T36] bond6 (unregistering): Released all slaves
[  392.412769][   T36] bond7 (unregistering): Released all slaves
[  392.443866][T18332] __nla_validate_parse: 1 callbacks suppressed
[  392.443885][T18332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3117'.
[  392.601372][T18199] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.611239][T18199] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.618960][T18199] bridge_slave_0: entered allmulticast mode
[  392.628801][T18199] bridge_slave_0: entered promiscuous mode
[  392.636791][   T36] : left promiscuous mode
[  392.676830][T18199] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.684016][T18199] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.707291][T18199] bridge_slave_1: entered allmulticast mode
[  392.717347][T18199] bridge_slave_1: entered promiscuous mode
[  392.724619][   T36] tipc: Left network mode
[  392.761167][T18360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'.
[  392.765915][T18357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3123'.
[  392.813003][T18356] lo speed is unknown, defaulting to 1000
[  392.823528][   T36] IPVS: stopping backup sync thread 7773 ...
[  392.909174][T18364] netlink: 'syz.3.3125': attribute type 1 has an invalid length.
[  392.968209][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3123'.
[  393.062129][T18199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.091515][T18354] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3123'.
[  393.126421][T18356] lo speed is unknown, defaulting to 1000
[  393.164173][T18199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.291362][T18365] bridge1: entered allmulticast mode
[  393.400931][T18199] team0: Port device team_slave_0 added
[  393.430359][T18199] team0: Port device team_slave_1 added
[  393.523832][T18382] netlink: 'syz.3.3128': attribute type 6 has an invalid length.
[  393.644557][T18199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.651559][ T5845] Bluetooth: hci4: command tx timeout
[  393.660914][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.689315][T18388] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3129'.
[  393.707481][T18389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3131'.
[  393.731629][T18199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.785635][T18199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.803126][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.845856][T18199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.304162][T18199] hsr_slave_0: entered promiscuous mode
[  394.323397][T18199] hsr_slave_1: entered promiscuous mode
[  394.353013][T18199] debugfs: 'hsr0' already exists in 'hsr'
[  394.377897][T18199] Cannot create hsr debugfs directory
[  394.619262][T18422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3140'.
[  394.667009][T18398] netlink: 'syz.0.3134': attribute type 1 has an invalid length.
[  394.787324][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'.
[  394.808375][T18405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.828036][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3140'.
[  395.078590][T18436] netlink: 'syz.1.3143': attribute type 10 has an invalid length.
[  395.362066][T18443] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  395.429016][   T36] hsr_slave_0: left promiscuous mode
[  395.446887][   T36] hsr_slave_1: left promiscuous mode
[  395.454049][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.470918][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.731590][ T5845] Bluetooth: hci4: command tx timeout
[  396.792945][T18480] netlink: 'syz.2.3155': attribute type 1 has an invalid length.
[  396.922659][T18481] lo speed is unknown, defaulting to 1000
[  396.976632][T18490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.573567][   T36] IPVS: stop unused estimator thread 0...
[  397.769705][T18527] __nla_validate_parse: 2 callbacks suppressed
[  397.769725][T18527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3164'.
[  398.063973][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'.
[  398.092329][T18541] syz_tun: entered allmulticast mode
[  398.169247][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3167'.
[  398.197010][T18538] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  398.207213][T18538] syzkaller0: entered promiscuous mode
[  398.212847][T18538] syzkaller0: entered allmulticast mode
[  398.269955][T18546] syz_tun (unregistering): left allmulticast mode
[  398.318795][T18557] netlink: 'syz.1.3169': attribute type 2 has an invalid length.
[  398.421344][T18559] netlink: 5680 bytes leftover after parsing attributes in process `syz.1.3170'.
[  398.530752][T18564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3166'.
[  398.999134][T18199] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  399.114932][T18199] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  399.151348][T18199] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  399.247987][T18199] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  399.309383][T18589] netlink: 210280 bytes leftover after parsing attributes in process `syz.3.3177'.
[  399.357940][T18589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3177'.
[  399.382147][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'.
[  399.571319][T18199] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.683161][T18199] 8021q: adding VLAN 0 to HW filter on device team0
[  399.757770][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.765147][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.940844][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.948134][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.371599][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'.
[  400.461352][T18628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  400.492797][T18650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3186'.
[  400.563318][T18650] netlink: 'syz.2.3186': attribute type 9 has an invalid length.
[  400.661535][T18650] netlink: 'syz.2.3186': attribute type 7 has an invalid length.
[  400.759847][T18650] netlink: 'syz.2.3186': attribute type 8 has an invalid length.
[  400.858148][T18199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.986416][T18674] FAULT_INJECTION: forcing a failure.
[  400.986416][T18674] name failslab, interval 1, probability 0, space 0, times 1
[  400.989117][T18668] bridge_slave_1: entered promiscuous mode
[  401.017328][ T6481] bond0: (slave bridge_slave_1): interface is now down
[  401.028655][T18668] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  401.038374][ T6520] bond0: (slave bridge_slave_1): interface is now down
[  401.045584][T18674] CPU: 1 UID: 0 PID: 18674 Comm: syz.3.3193 Not tainted syzkaller #0 PREEMPT(full) 
[  401.045610][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  401.045632][T18674] Call Trace:
[  401.045640][T18674]  <TASK>
[  401.045648][T18674]  dump_stack_lvl+0xe8/0x150
[  401.045682][T18674]  should_fail_ex+0x412/0x560
[  401.045718][T18674]  should_failslab+0xa8/0x100
[  401.045745][T18674]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  401.045777][T18674]  ? __alloc_skb+0x186/0x7d0
[  401.045808][T18674]  ? __alloc_skb+0x1d0/0x7d0
[  401.045835][T18674]  ? __local_bh_enable_ip+0xd0/0x130
[  401.045863][T18674]  __alloc_skb+0x1d0/0x7d0
[  401.045894][T18674]  ? netlink_ack_tlv_len+0x6c/0x210
[  401.045923][T18674]  netlink_ack+0x146/0xa50
[  401.045967][T18674]  netlink_rcv_skb+0x2b6/0x4b0
[  401.045993][T18674]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  401.046018][T18674]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.046056][T18674]  ? bpf_lsm_capable+0x9/0x20
[  401.046080][T18674]  ? security_capable+0x7e/0x2c0
[  401.046113][T18674]  nfnetlink_rcv+0x2c0/0x27b0
[  401.046145][T18674]  ? is_bpf_text_address+0x292/0x2b0
[  401.046176][T18674]  ? is_bpf_text_address+0x26/0x2b0
[  401.046209][T18674]  ? kernel_text_address+0xa5/0xe0
[  401.046239][T18674]  ? __kernel_text_address+0xd/0x30
[  401.046266][T18674]  ? unwind_get_return_address+0x4d/0x90
[  401.046295][T18674]  ? __lock_acquire+0x6b5/0x2cf0
[  401.046321][T18674]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  401.046343][T18674]  ? stack_trace_save+0xa9/0x100
[  401.046377][T18674]  ? __lock_acquire+0x6b5/0x2cf0
[  401.046405][T18674]  ? __lock_acquire+0x6b5/0x2cf0
[  401.046435][T18674]  ? __netlink_lookup+0xc6/0x8b0
[  401.046472][T18674]  ? netlink_deliver_tap+0x2e/0x1b0
[  401.046496][T18674]  ? netlink_deliver_tap+0x2e/0x1b0
[  401.046537][T18674]  ? netlink_deliver_tap+0x2e/0x1b0
[  401.046570][T18674]  netlink_unicast+0x80f/0x9b0
[  401.046601][T18674]  ? __pfx_netlink_unicast+0x10/0x10
[  401.046625][T18674]  ? netlink_sendmsg+0x650/0xb40
[  401.046647][T18674]  ? skb_put+0x11b/0x210
[  401.046671][T18674]  netlink_sendmsg+0x813/0xb40
[  401.046704][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.046732][T18674]  ? aa_file_perm+0x12d/0x1630
[  401.046761][T18674]  ? aa_sock_msg_perm+0xf1/0x1b0
[  401.046792][T18674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  401.046810][T18674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.046836][T18674]  __sock_sendmsg+0x21c/0x270
[  401.046866][T18674]  ____sys_sendmsg+0x4d7/0x810
[  401.046888][T18674]  ? __might_fault+0xaf/0x130
[  401.046925][T18674]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.046956][T18674]  ? import_iovec+0x73/0xa0
[  401.046983][T18674]  ___sys_sendmsg+0x2a5/0x360
[  401.047003][T18674]  ? __lock_acquire+0x6b5/0x2cf0
[  401.047029][T18674]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.047088][T18674]  ? __fget_files+0x2a/0x420
[  401.047113][T18674]  ? __fget_files+0x3a0/0x420
[  401.047149][T18674]  __x64_sys_sendmsg+0x1bd/0x2a0
[  401.047174][T18674]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  401.047207][T18674]  ? __pfx_ksys_write+0x10/0x10
[  401.047239][T18674]  do_syscall_64+0xe2/0xf80
[  401.047258][T18674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.047278][T18674]  ? trace_irq_disable+0x37/0x100
[  401.047305][T18674]  ? clear_bhb_loop+0x60/0xb0
[  401.047329][T18674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.047357][T18674] RIP: 0033:0x7f505239acb9
[  401.047377][T18674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.047395][T18674] RSP: 002b:00007f505333a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.047416][T18674] RAX: ffffffffffffffda RBX: 00007f5052615fa0 RCX: 00007f505239acb9
[  401.047431][T18674] RDX: 00000000040040c2 RSI: 0000200000000240 RDI: 0000000000000003
[  401.047444][T18674] RBP: 00007f505333a090 R08: 0000000000000000 R09: 0000000000000000
[  401.047457][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.047469][T18674] R13: 00007f5052616038 R14: 00007f5052615fa0 R15: 00007fffdfbc3118
[  401.047502][T18674]  </TASK>
[  401.466204][ T6520] bond0: (slave bridge_slave_1): interface is now down
[  401.495240][   T36] bond0: (slave bridge_slave_1): interface is now down
[  401.525075][   T36] bond0: (slave bridge_slave_1): interface is now down
[  401.537005][T18680] netlink: 'syz.2.3194': attribute type 3 has an invalid length.
[  401.576416][   T36] bond0: (slave bridge_slave_1): interface is now down
[  401.595138][   T37] bond0: (slave bridge_slave_1): interface is now down
[  401.615523][   T36] bond0: (slave bridge_slave_1): interface is now down
[  401.622844][   T36] bond0: now running without any active interface!
[  402.152707][T18199] veth0_vlan: entered promiscuous mode
[  402.193713][T18199] veth1_vlan: entered promiscuous mode
[  402.323965][T18199] veth0_macvtap: entered promiscuous mode
[  402.389439][T18199] veth1_macvtap: entered promiscuous mode
[  402.442111][T18199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.769967][T18716] pim6reg: entered allmulticast mode
[  402.986896][T18199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.022551][T18712] pim6reg: left allmulticast mode
[  403.126352][ T6476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.165631][ T6476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.194333][ T6476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.250110][ T6476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.434530][T18761] __nla_validate_parse: 5 callbacks suppressed
[  403.434559][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  403.472669][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.498647][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.601754][T18763] bond0: (slave bridge_slave_1): Releasing backup interface
[  403.645624][T18763] bridge_slave_1: left promiscuous mode
[  403.701735][T18763] bond0: (slave bond_slave_0): Releasing backup interface
[  403.715615][T18775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3213'.
[  403.738121][T18763] bond_slave_0: left promiscuous mode
[  403.780247][T18763] bond0: (slave bond_slave_1): Releasing backup interface
[  403.814207][T18763] bond_slave_1: left promiscuous mode
[  403.849062][T18763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.875206][T18763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.891863][T18763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  403.946321][T18766] pim6reg: entered allmulticast mode
[  403.980122][T18761] pim6reg: left allmulticast mode
[  404.065271][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.098651][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.361588][T18786] syzkaller0: entered promiscuous mode
[  404.367453][T18786] syzkaller0: entered allmulticast mode
[  404.387576][T18797] netlink: 'syz.1.3216': attribute type 39 has an invalid length.
[  404.449192][T18796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3081'.
[  404.462969][T18802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3216'.
[  405.003882][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  405.014048][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  405.022637][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  405.031630][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  405.041825][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  406.887906][T18813] lo speed is unknown, defaulting to 1000
[  407.035913][T18834] ªªªªªª: renamed from wg2
[  407.166509][ T5845] Bluetooth: hci1: command tx timeout
[  407.214440][T18843] netlink: 'syz.2.3224': attribute type 1 has an invalid length.
[  407.349221][T18843] 8021q: adding VLAN 0 to HW filter on device bond1
[  407.506245][T18843] bond1: (slave gretap1): making interface the new active one
[  407.542440][T18843] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  407.662082][T18851] lo speed is unknown, defaulting to 1000
[  408.309059][T18813] chnl_net:caif_netlink_parms(): no params data found
[  408.674329][T18813] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.688083][T18813] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.696317][T18813] bridge_slave_0: entered allmulticast mode
[  408.704263][T18813] bridge_slave_0: entered promiscuous mode
[  408.728454][T18813] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.736601][T18813] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.743885][T18813] bridge_slave_1: entered allmulticast mode
[  408.771413][T18921] netlink: 'syz.2.3240': attribute type 1 has an invalid length.
[  408.781430][T18813] bridge_slave_1: entered promiscuous mode
[  408.842799][T18909] lo speed is unknown, defaulting to 1000
[  408.857149][T18921] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  409.024753][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.093721][T18931] dummy0: entered promiscuous mode
[  409.114627][T18931] dummy0: entered allmulticast mode
[  409.134827][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.184514][T18931] netlink: 'syz.2.3241': attribute type 1 has an invalid length.
[  409.207531][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'.
[  409.247721][ T5845] Bluetooth: hci1: command tx timeout
[  409.309740][T18813] team0: Port device team_slave_0 added
[  409.352286][T18813] team0: Port device team_slave_1 added
[  409.513893][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.526283][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.557223][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.618001][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.635096][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  409.716505][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.913901][T18813] hsr_slave_0: entered promiscuous mode
[  409.921264][T18813] hsr_slave_1: entered promiscuous mode
[  409.928033][T18813] debugfs: 'hsr0' already exists in 'hsr'
[  409.933987][T18813] Cannot create hsr debugfs directory
[  410.122803][T18962] lo speed is unknown, defaulting to 1000
[  410.479315][T18977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3251'.
[  410.867845][T18991] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3255'.
[  411.130650][T19005] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  411.173248][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.187032][T19001] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3258'.
[  411.206200][T19001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3258'.
[  411.327159][ T5845] Bluetooth: hci1: command tx timeout
[  411.383574][T19009] tipc: Started in network mode
[  411.399989][T19009] tipc: Node identity 7243c4b6c12f, cluster identity 4711
[  411.419696][T19009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.539533][T19014] syzkaller0: entered promiscuous mode
[  411.549034][T19014] syzkaller0: entered allmulticast mode
[  411.564284][T19014] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3261'.
[  411.598074][T19016] lo speed is unknown, defaulting to 1000
[  411.672864][T19009] tipc: Resetting bearer <eth:syzkaller0>
[  411.798824][T19008] tipc: Resetting bearer <eth:syzkaller0>
[  411.859322][T19008] tipc: Disabling bearer <eth:syzkaller0>
[  411.980470][T19033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3266'.
[  412.020913][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'.
[  412.032097][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'.
[  412.053222][T18813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  412.081073][T18813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  412.148332][T19038] netlink: 'syz.4.3267': attribute type 1 has an invalid length.
[  412.156415][T18813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  412.166082][T19038] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3267'.
[  412.219226][T18813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  412.257904][T19044] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  412.488023][T19064] netlink: 'syz.3.3271': attribute type 6 has an invalid length.
[  412.515539][T19063] netlink: 'syz.3.3271': attribute type 6 has an invalid length.
[  412.554115][T19065] netlink: 'syz.3.3271': attribute type 6 has an invalid length.
[  412.785467][T18813] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.860896][T18813] 8021q: adding VLAN 0 to HW filter on device team0
[  412.889060][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.896316][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.950943][T19093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.960068][T19093] batadv_slave_0: entered promiscuous mode
[  413.048159][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.055407][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.296497][ T6510] IPVS: starting estimator thread 0...
[  413.405937][T19106] IPVS: using max 32 ests per chain, 76800 per kthread
[  413.417184][ T5845] Bluetooth: hci1: command tx timeout
[  415.127113][T19127] __nla_validate_parse: 6 callbacks suppressed
[  415.127135][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'.
[  415.143835][T19127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3282'.
[  415.153194][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'.
[  415.163394][T19127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3282'.
[  415.223090][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  415.299046][T19134] FAULT_INJECTION: forcing a failure.
[  415.299046][T19134] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  415.345701][T19134] CPU: 1 UID: 0 PID: 19134 Comm: syz.3.3284 Not tainted syzkaller #0 PREEMPT(full) 
[  415.345729][T19134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  415.345742][T19134] Call Trace:
[  415.345750][T19134]  <TASK>
[  415.345758][T19134]  dump_stack_lvl+0xe8/0x150
[  415.345790][T19134]  should_fail_ex+0x412/0x560
[  415.345824][T19134]  _copy_from_user+0x2d/0xb0
[  415.345848][T19134]  ____sys_sendmsg+0x2fd/0x810
[  415.345870][T19134]  ? __might_fault+0xaf/0x130
[  415.345908][T19134]  ? __pfx_____sys_sendmsg+0x10/0x10
[  415.345940][T19134]  ? import_iovec+0x73/0xa0
[  415.345967][T19134]  ___sys_sendmsg+0x2a5/0x360
[  415.345986][T19134]  ? __lock_acquire+0x6b5/0x2cf0
[  415.346013][T19134]  ? __pfx____sys_sendmsg+0x10/0x10
[  415.346068][T19134]  ? __fget_files+0x2a/0x420
[  415.346094][T19134]  ? __fget_files+0x3a0/0x420
[  415.346129][T19134]  __x64_sys_sendmsg+0x1bd/0x2a0
[  415.346154][T19134]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  415.346185][T19134]  ? __pfx_ksys_write+0x10/0x10
[  415.346218][T19134]  do_syscall_64+0xe2/0xf80
[  415.346238][T19134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.346257][T19134]  ? trace_irq_disable+0x37/0x100
[  415.346284][T19134]  ? clear_bhb_loop+0x60/0xb0
[  415.346309][T19134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.346328][T19134] RIP: 0033:0x7f505239acb9
[  415.346345][T19134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.346362][T19134] RSP: 002b:00007f505333a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.346383][T19134] RAX: ffffffffffffffda RBX: 00007f5052615fa0 RCX: 00007f505239acb9
[  415.346397][T19134] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  415.346410][T19134] RBP: 00007f505333a090 R08: 0000000000000000 R09: 0000000000000000
[  415.346422][T19134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.346441][T19134] R13: 00007f5052616038 R14: 00007f5052615fa0 R15: 00007fffdfbc3118
[  415.346474][T19134]  </TASK>
[  415.611941][T18813] veth0_vlan: entered promiscuous mode
[  415.625538][T18813] veth1_vlan: entered promiscuous mode
[  415.657169][T18813] veth0_macvtap: entered promiscuous mode
[  415.667650][T18813] veth1_macvtap: entered promiscuous mode
[  415.689775][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.724127][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.772821][ T3562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.829157][ T3562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.839891][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'.
[  415.861288][ T3562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.891060][ T3562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.238180][ T6478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.267215][ T6478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.387830][T19165] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3292'.
[  416.413707][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.453789][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.487170][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.732341][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'.
[  416.763069][T19182] syzkaller1: entered allmulticast mode
[  416.963519][T19195] FAULT_INJECTION: forcing a failure.
[  416.963519][T19195] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  416.998159][T19195] CPU: 1 UID: 0 PID: 19195 Comm: syz.0.3297 Not tainted syzkaller #0 PREEMPT(full) 
[  416.998189][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  416.998203][T19195] Call Trace:
[  416.998211][T19195]  <TASK>
[  416.998219][T19195]  dump_stack_lvl+0xe8/0x150
[  416.998251][T19195]  should_fail_ex+0x412/0x560
[  416.998287][T19195]  _copy_to_user+0x31/0xb0
[  416.998311][T19195]  simple_read_from_buffer+0xe1/0x170
[  416.998340][T19195]  proc_fail_nth_read+0x1bb/0x230
[  416.998366][T19195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.998391][T19195]  ? rw_verify_area+0x2a6/0x4d0
[  416.998423][T19195]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  416.998446][T19195]  vfs_read+0x20c/0xa70
[  416.998462][T19195]  ? fdget_pos+0x246/0x320
[  416.998493][T19195]  ? __pfx___mutex_lock+0x10/0x10
[  416.998516][T19195]  ? __pfx_vfs_read+0x10/0x10
[  416.998537][T19195]  ? __fget_files+0x2a/0x420
[  416.998566][T19195]  ? __fget_files+0x3a0/0x420
[  416.998589][T19195]  ? __fget_files+0x2a/0x420
[  416.998623][T19195]  ksys_read+0x150/0x270
[  416.998645][T19195]  ? __pfx_ksys_read+0x10/0x10
[  416.998678][T19195]  do_syscall_64+0xe2/0xf80
[  416.998698][T19195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.998718][T19195]  ? trace_irq_disable+0x37/0x100
[  416.998745][T19195]  ? clear_bhb_loop+0x60/0xb0
[  416.998770][T19195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.998790][T19195] RIP: 0033:0x7fcc0f35b58e
[  416.998810][T19195] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  416.998828][T19195] RSP: 002b:00007fcc102fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  416.998847][T19195] RAX: ffffffffffffffda RBX: 00007fcc102ff6c0 RCX: 00007fcc0f35b58e
[  416.998859][T19195] RDX: 000000000000000f RSI: 00007fcc102ff0a0 RDI: 0000000000000004
[  416.998870][T19195] RBP: 00007fcc102ff090 R08: 0000000000000000 R09: 0000000000000000
[  416.998879][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.998889][T19195] R13: 00007fcc0f616038 R14: 00007fcc0f615fa0 R15: 00007ffed978d2c8
[  416.998916][T19195]  </TASK>
[  417.435937][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.446694][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.456244][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.466543][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.474344][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.590754][T19205] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  417.771927][T19201] lo speed is unknown, defaulting to 1000
[  418.457469][T19241] netlink: 'syz.0.3305': attribute type 2 has an invalid length.
[  418.491296][T19241] netlink: 'syz.0.3305': attribute type 1 has an invalid length.
[  418.531186][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'.
[  418.724724][T19254] netlink: 'syz.4.3308': attribute type 3 has an invalid length.
[  418.733043][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'.
[  419.139235][T19278] No such timeout policy "syz1"
[  419.183738][T19279] lo speed is unknown, defaulting to 1000
[  419.256750][T19201] chnl_net:caif_netlink_parms(): no params data found
[  419.394108][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'.
[  419.567259][ T5844] Bluetooth: hci0: command tx timeout
[  419.676882][T19273] syzkaller0: entered promiscuous mode
[  419.685172][T19273] syzkaller0: entered allmulticast mode
[  419.710161][T19300] tipc: Started in network mode
[  419.741036][T19300] tipc: Node identity 36157fe85fab, cluster identity 4711
[  419.748705][T19300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.798802][T19308] netlink: 'syz.0.3318': attribute type 3 has an invalid length.
[  419.807143][T19308] netlink: 'syz.0.3318': attribute type 1 has an invalid length.
[  419.901788][T19201] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.915353][T19201] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.928551][T19201] bridge_slave_0: entered allmulticast mode
[  419.942539][T19201] bridge_slave_0: entered promiscuous mode
[  419.956154][T19201] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.998476][T19201] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.023818][T19201] bridge_slave_1: entered allmulticast mode
[  420.075921][T19201] bridge_slave_1: entered promiscuous mode
[  420.115399][T19270] tipc: Resetting bearer <eth:syzkaller0>
[  420.237853][T19270] tipc: Disabling bearer <eth:syzkaller0>
[  420.399171][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.468497][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.633078][T19338] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.640901][T19338] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.669464][T19201] team0: Port device team_slave_0 added
[  420.719933][T19201] team0: Port device team_slave_1 added
[  420.741567][T19338] netlink: 'syz.0.3324': attribute type 1 has an invalid length.
[  420.812342][T19340] batman_adv: batadv0: Adding interface: geneve2
[  420.821286][T19340] batman_adv: batadv0: Interface activated: geneve2
[  420.902514][ T3809] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.069235][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.076601][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.103906][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.187334][ T3809] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.197414][ T3809] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.218640][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.232141][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.280250][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.316948][ T3809] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.451586][T19201] hsr_slave_0: entered promiscuous mode
[  421.466395][T19201] hsr_slave_1: entered promiscuous mode
[  421.472940][T19201] debugfs: 'hsr0' already exists in 'hsr'
[  421.494759][T19201] Cannot create hsr debugfs directory
[  421.506542][T19365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.521744][T19361] syzkaller0: entered promiscuous mode
[  421.530080][T19361] syzkaller0: entered allmulticast mode
[  421.639114][T19361] tipc: Resetting bearer <eth:syzkaller0>
[  421.645294][ T5844] Bluetooth: hci0: command tx timeout
[  421.661844][T19360] tipc: Resetting bearer <eth:syzkaller0>
[  421.710529][T19360] tipc: Disabling bearer <eth:syzkaller0>
[  422.044366][T19201] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.058475][T19201] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  422.068606][T19201] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.080175][T19201] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  422.162285][T19201] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.184746][T19201] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  422.209352][T19201] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.227832][T19201] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  422.307171][T19201] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.327460][T19201] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  422.372794][T19201] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.403073][T19201] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  422.523870][T19396] netlink: 'syz.2.3333': attribute type 21 has an invalid length.
[  422.560517][T19201] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.592291][T19201] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  422.622781][T19201] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.650908][T19201] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  422.695490][T19396] __nla_validate_parse: 3 callbacks suppressed
[  422.695510][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  422.751396][T19407] lo speed is unknown, defaulting to 1000
[  423.000443][T19423] ipvlan0: entered promiscuous mode
[  423.006853][T19421] ipvlan0: left promiscuous mode
[  423.288403][T19428] blkio.reset_stats is deprecated
[  423.432990][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3344'.
[  423.477902][T19436] syzkaller0: entered promiscuous mode
[  423.483453][T19436] syzkaller0: entered allmulticast mode
[  423.524763][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3344'.
[  423.637471][T19445] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  423.644893][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  423.725314][ T5844] Bluetooth: hci0: command tx timeout
[  424.491276][T19201] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  424.531282][T19201] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  424.641843][T19201] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  424.705427][T19201] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  424.841828][T19488] xt_hashlimit: max too large, truncated to 1048576
[  425.123865][T19481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.150675][T19481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.387511][ T3562] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.418758][ T3562] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.441425][ T3562] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.462032][ T3562] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.580874][T19521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  425.748441][T19201] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.809827][ T5844] Bluetooth: hci0: command tx timeout
[  425.927420][T19537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3368'.
[  425.958099][T19201] 8021q: adding VLAN 0 to HW filter on device team0
[  425.977450][T19537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3368'.
[  426.017955][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.025205][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.081761][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.089017][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.152663][T19542] tipc: Started in network mode
[  426.192607][T19542] tipc: Node identity ac14148f, cluster identity 4711
[  426.219429][T19542] tipc: Enabled bearer <udp:syz2>, priority 10
[  426.380133][T19542] lo speed is unknown, defaulting to 1000
[  426.481583][T19567] syzkaller1: entered promiscuous mode
[  426.508476][T19567] syzkaller1: entered allmulticast mode
[  426.648490][T19571] netlink: 'syz.4.3374': attribute type 11 has an invalid length.
[  426.894351][T19580] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3376'.
[  427.390519][T13765] tipc: Node number set to 2886997135
[  427.474225][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'.
[  427.556495][T19596] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.564255][T19596] bridge_slave_1: left allmulticast mode
[  427.579389][T19596] bridge_slave_1: left promiscuous mode
[  427.588909][T19596] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.604017][T19596] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  427.643516][T19201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.893921][T19201] veth0_vlan: entered promiscuous mode
[  427.896758][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  427.911762][T19607] syzkaller1: entered promiscuous mode
[  427.941989][T19607] syzkaller1: entered allmulticast mode
[  428.003278][T19201] veth1_vlan: entered promiscuous mode
[  428.144821][T19612] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3385'.
[  428.294827][T19201] veth0_macvtap: entered promiscuous mode
[  428.324795][T19619] netlink: 'syz.4.3388': attribute type 21 has an invalid length.
[  428.338068][T19201] veth1_macvtap: entered promiscuous mode
[  428.377376][T19619] netlink: 'syz.4.3388': attribute type 1 has an invalid length.
[  428.395143][T19619] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3388'.
[  428.460734][T19201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.509758][T19201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.558766][ T3562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.592522][ T3562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.617915][ T3562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.639195][ T3562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.892716][T19639] lo speed is unknown, defaulting to 1000
[  429.016748][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.068126][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.214170][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.251976][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.856560][T19659] lo speed is unknown, defaulting to 1000
[  430.167187][T19679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3395'.
[  430.261109][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'.
[  430.567624][T19699] sctp: [Deprecated]: syz.3.3399 (pid 19699) Use of int in max_burst socket option.
[  430.567624][T19699] Use struct sctp_assoc_value instead
[  430.602405][T19695] lo speed is unknown, defaulting to 1000
[  431.048655][T19717] gretap2: entered promiscuous mode
[  431.055181][T19717] batman_adv: batadv0: Adding interface: gretap2
[  431.061582][T19717] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  431.082017][T19717] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  431.317807][T19722] netlink: 'syz.1.3404': attribute type 12 has an invalid length.
[  431.384859][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'.
[  431.653380][T19735] syzkaller0: entered promiscuous mode
[  431.673923][T19735] syzkaller0: entered allmulticast mode
[  431.987550][T19750] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3410'.
[  432.294076][T19767] netlink: 'syz.4.3413': attribute type 1 has an invalid length.
[  432.396642][T19767] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3413'.
[  432.548262][T19775] batadv_slave_0: entered promiscuous mode
[  432.576698][T19774] batadv_slave_0: left promiscuous mode
[  432.743898][T19784] Bluetooth: MGMT ver 1.23
[  432.748419][T19778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3416'.
[  432.748442][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'.
[  433.052244][T19800] lo speed is unknown, defaulting to 1000
[  433.202173][T19804] syzkaller0: entered promiscuous mode
[  433.216727][T19804] syzkaller0: entered allmulticast mode
[  433.230163][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3425'.
[  433.482496][T19827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3428'.
[  435.215987][T19844] netlink: 'syz.2.3432': attribute type 5 has an invalid length.
[  435.299127][T19844] ip6erspan0: entered promiscuous mode
[  435.804112][T19854] lo speed is unknown, defaulting to 1000
[  436.173666][T19880] syzkaller0: entered promiscuous mode
[  436.221079][T19880] syzkaller0: entered allmulticast mode
[  436.268924][T19885] netlink: 'syz.3.3440': attribute type 1 has an invalid length.
[  436.341071][T19885] bond1: entered promiscuous mode
[  436.346822][T19885] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.501529][T19897] geneve2: entered promiscuous mode
[  436.506984][T19897] geneve2: entered allmulticast mode
[  436.755118][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'.
[  436.786891][T19917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'.
[  437.112336][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3447'.
[  437.174605][T19932] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3447'.
[  437.333662][T19936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'.
[  437.810456][T19957] netlink: 'syz.2.3455': attribute type 1 has an invalid length.
[  437.912023][T19957] bond2: entered promiscuous mode
[  437.920505][T19957] 8021q: adding VLAN 0 to HW filter on device bond2
[  437.975583][T19966] netlink: 'syz.3.3457': attribute type 9 has an invalid length.
[  437.996926][T19970] netlink: 'syz.0.3458': attribute type 6 has an invalid length.
[  438.030895][T19966] netlink: 'syz.3.3457': attribute type 11 has an invalid length.
[  438.083085][T19966] netlink: 'syz.3.3457': attribute type 12 has an invalid length.
[  438.124856][T19966] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3457'.
[  438.504182][T19995] 8021q: adding VLAN 0 to HW filter on device bond2
[  438.542582][T20001] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3466'.
[  438.859844][T20019] tap0: tun_chr_ioctl cmd 2148553947
[  438.886375][T20022] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  438.911107][T20019] tap0: tun_chr_ioctl cmd 2147767521
[  438.937526][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3470'.
[  438.968787][T20019] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.033362][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'.
[  439.089840][T20019] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.106103][T20019] batman_adv: batadv0: Interface deactivated: geneve2
[  439.114458][T20019] batman_adv: batadv0: Removing interface: geneve2
[  439.142174][T20019] batman_adv: batadv0: Removing interface: gretap2
[  439.233310][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'.
[  439.323566][T20045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.346160][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.365423][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.427279][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.469046][T20045] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.498480][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3476'.
[  439.780192][T20072] sctp: [Deprecated]: syz.0.3480 (pid 20072) Use of int in max_burst socket option deprecated.
[  439.780192][T20072] Use struct sctp_assoc_value instead
[  440.020900][T13764] IPVS: starting estimator thread 0...
[  440.145070][T20092] IPVS: using max 26 ests per chain, 62400 per kthread
[  440.499175][T20101] lo speed is unknown, defaulting to 1000
[  441.649845][T20139] bond0: entered promiscuous mode
[  441.658773][T20142] netlink: 'syz.3.3492': attribute type 39 has an invalid length.
[  441.667419][T20139] bond_slave_0: entered promiscuous mode
[  441.673337][T20139] bond_slave_1: entered promiscuous mode
[  441.730636][T20139] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  441.758120][T20139] bond0: left promiscuous mode
[  441.762971][T20139] bond_slave_0: left promiscuous mode
[  441.780424][T20139] bond_slave_1: left promiscuous mode
[  441.949313][T20146] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  442.428476][T20160] team0 (unregistering): Port device team_slave_0 removed
[  442.484862][T20160] team0 (unregistering): Port device team_slave_1 removed
[  442.543663][T20160] team0 (unregistering): Port device dummy0 removed
[  442.628546][T20169] gretap2: entered promiscuous mode
[  443.153392][T20180] lo speed is unknown, defaulting to 1000
[  443.721836][T20232] vlan2: entered promiscuous mode
[  443.736198][T20232] geneve1: entered promiscuous mode
[  443.754632][T20232] vlan2: entered allmulticast mode
[  443.787802][T20232] geneve1: entered allmulticast mode
[  444.044307][T20243] lo speed is unknown, defaulting to 1000
[  445.336332][T20290] __nla_validate_parse: 11 callbacks suppressed
[  445.336356][T20290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3522'.
[  445.417176][T20297] xt_connbytes: Forcing CT accounting to be enabled
[  445.480092][T20300] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  446.070110][T20329] gretap1: entered promiscuous mode
[  446.147491][T20329] vlan2: entered allmulticast mode
[  446.168564][T20329] veth0_to_bond: entered allmulticast mode
[  446.783851][T20366] netlink: 'syz.2.3535': attribute type 1 has an invalid length.
[  446.840413][T20366] bond3: entered promiscuous mode
[  446.846293][T20366] 8021q: adding VLAN 0 to HW filter on device bond3
[  446.913422][T20366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  446.920800][T20366] IPv6: NLM_F_CREATE should be set when creating new route
[  446.928134][T20366] IPv6: NLM_F_CREATE should be set when creating new route
[  446.955977][T20376] 8021q: adding VLAN 0 to HW filter on device bond3
[  446.963188][T20376] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  446.976631][T20376] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  446.981847][T20366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.020898][T20376] bond3: (slave wireguard0): making interface the new active one
[  447.054617][T20376] wireguard0: entered promiscuous mode
[  447.110307][T20376] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  447.196790][T20366] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[  447.233554][T20366] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[  447.432045][T20408] netlink: 'syz.0.3542': attribute type 4 has an invalid length.
[  447.455477][T20406] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004
[  447.460657][T20408] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3542'.
[  447.818951][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'.
[  447.828082][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'.
[  448.049559][T20390] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.057397][T20390] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.558913][T20390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.606352][T20390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.125698][T20390] geneve2: left promiscuous mode
[  449.130856][T20390] geneve2: left allmulticast mode
[  449.136612][T20390] gretap1: left promiscuous mode
[  449.141779][T20390] vlan2: left allmulticast mode
[  449.149481][T20390] veth0_to_bond: left allmulticast mode
[  449.197565][T20403] vlan2: left promiscuous mode
[  449.206495][T20403] geneve1: left promiscuous mode
[  449.213095][T20403] vlan2: left allmulticast mode
[  449.218420][T20403] geneve1: left allmulticast mode
[  449.381667][ T6476] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.418331][ T6476] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.464565][ T6476] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.490821][ T6476] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.710634][T20463] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3552'.
[  450.154259][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3555'.
[  450.306975][T20485] 8021q: adding VLAN 0 to HW filter on device bond3
[  450.317247][T20489] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.340529][T20489] bond3: (slave bond0): Enslaving as an active interface with an up link
[  450.616088][T20503] FAULT_INJECTION: forcing a failure.
[  450.616088][T20503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.652798][T20503] CPU: 0 UID: 0 PID: 20503 Comm: syz.0.3557 Not tainted syzkaller #0 PREEMPT(full) 
[  450.652827][T20503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  450.652840][T20503] Call Trace:
[  450.652849][T20503]  <TASK>
[  450.652857][T20503]  dump_stack_lvl+0xe8/0x150
[  450.652889][T20503]  should_fail_ex+0x412/0x560
[  450.652925][T20503]  _copy_from_iter+0x1d3/0x1670
[  450.652957][T20503]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  450.652990][T20503]  ? policy_nodemask+0x27c/0x710
[  450.653015][T20503]  ? __pfx__copy_from_iter+0x10/0x10
[  450.653052][T20503]  ? set_page_refcounted+0xa0/0x1e0
[  450.653076][T20503]  ? page_copy_sane+0x4e/0x270
[  450.653098][T20503]  copy_page_from_iter+0xdd/0x170
[  450.653122][T20503]  tun_get_user+0x1d4b/0x3dd0
[  450.653146][T20503]  ? tun_get_user+0x6ff/0x3dd0
[  450.653188][T20503]  ? aa_file_perm+0x440/0x1630
[  450.653220][T20503]  ? __pfx_tun_get_user+0x10/0x10
[  450.653254][T20503]  ? __lock_acquire+0x6b5/0x2cf0
[  450.653290][T20503]  ? ref_tracker_alloc+0x363/0x4d0
[  450.653324][T20503]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  450.653357][T20503]  ? tun_get+0x1c/0x2f0
[  450.653381][T20503]  ? tun_get+0x1c/0x2f0
[  450.653411][T20503]  ? tun_get+0x1c/0x2f0
[  450.653434][T20503]  ? tun_get+0x1c/0x2f0
[  450.653462][T20503]  tun_chr_write_iter+0x113/0x200
[  450.653488][T20503]  vfs_write+0x61d/0xb90
[  450.653517][T20503]  ? __pfx_vfs_write+0x10/0x10
[  450.653547][T20503]  ? __fget_files+0x2a/0x420
[  450.653582][T20503]  ksys_write+0x150/0x270
[  450.653605][T20503]  ? __pfx_ksys_write+0x10/0x10
[  450.653637][T20503]  do_syscall_64+0xe2/0xf80
[  450.653658][T20503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.653677][T20503]  ? trace_irq_disable+0x37/0x100
[  450.653708][T20503]  ? clear_bhb_loop+0x60/0xb0
[  450.653733][T20503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.653754][T20503] RIP: 0033:0x7fcc0f35b58e
[  450.653772][T20503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  450.653790][T20503] RSP: 002b:00007fcc102fefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  450.653813][T20503] RAX: ffffffffffffffda RBX: 00007fcc102ff6c0 RCX: 00007fcc0f35b58e
[  450.653827][T20503] RDX: 0000000000000042 RSI: 0000200000000300 RDI: 00000000000000c8
[  450.653840][T20503] RBP: 00007fcc102ff090 R08: 0000000000000000 R09: 0000000000000000
[  450.653852][T20503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.653864][T20503] R13: 00007fcc0f616038 R14: 00007fcc0f615fa0 R15: 00007ffed978d2c8
[  450.653898][T20503]  </TASK>
[  451.043887][T20491] bond3 (unregistering): (slave bond0): Releasing backup interface
[  451.055450][T20491] bond3 (unregistering): Released all slaves
[  451.159677][T20497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  451.217333][T20516] mÿ5nè‹Ò: entered promiscuous mode
[  451.269095][T20513] syzkaller1: entered promiscuous mode
[  451.285615][T20513] syzkaller1: entered allmulticast mode
[  451.299680][T20521] IPVS: set_ctl: invalid protocol: 171 172.20.20.187:20002
[  451.745740][T20544] netlink: 'syz.3.3567': attribute type 1 has an invalid length.
[  451.908057][T20553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3567'.
[  452.384799][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'.
[  452.571628][T20586] netlink: 'syz.0.3577': attribute type 1 has an invalid length.
[  452.593543][T20587] bridge3: entered promiscuous mode
[  452.595392][T20586] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3577'.
[  452.619947][T20587] bridge3: entered allmulticast mode
[  452.750443][T20590] netlink: 'syz.4.3575': attribute type 10 has an invalid length.
[  452.991866][T20605] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3581'.
[  453.239796][T20620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3585'.
[  453.370013][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'.
[  453.383127][T20633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.415799][T20631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3586'.
[  453.430830][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  453.747737][T20648] rdma_op ffff8880572171f0 conn xmit_rdma 0000000000000000
[  453.875915][T20656] netlink: 'syz.4.3591': attribute type 3 has an invalid length.
[  453.903717][T20656] xt_CT: You must specify a L4 protocol and not use inversions on it
[  454.104427][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'.
[  454.474318][T20660] lo speed is unknown, defaulting to 1000
[  454.987847][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3604'.
[  455.091861][T20721] batadv_slave_1: entered promiscuous mode
[  455.370656][T20705] batadv_slave_1: left promiscuous mode
[  455.485504][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  455.810773][T20743] lo speed is unknown, defaulting to 1000
[  456.744312][T20774] lo speed is unknown, defaulting to 1000
[  457.287486][T20794] __nla_validate_parse: 4 callbacks suppressed
[  457.287508][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3618'.
[  457.465015][T20794] ip6gre1: entered promiscuous mode
[  457.470591][T20794] ip6gre1: entered allmulticast mode
[  458.409440][T20848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3629'.
[  458.595472][T20860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3631'.
[  458.615186][T20863] netlink: 'syz.3.3632': attribute type 2 has an invalid length.
[  458.632650][T20863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3632'.
[  458.643172][T20864] netlink: 'syz.4.3633': attribute type 21 has an invalid length.
[  458.652010][T20864] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3633'.
[  458.672694][T20864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3633'.
[  458.809041][T20864] bond1: entered promiscuous mode
[  458.814158][T20864] bond1: entered allmulticast mode
[  458.858171][T20881] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3635'.
[  458.872877][T20864] 8021q: adding VLAN 0 to HW filter on device bond1
[  459.128274][T20897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3639'.
[  459.213709][T20903] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3640'.
[  459.610815][T20922] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20004
[  459.626608][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'.
[  459.681339][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  459.698212][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  459.727711][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  459.864085][T20934] pimreg: entered allmulticast mode
[  459.947614][T20930] pimreg: left allmulticast mode
[  460.024583][T20920] infiniband syz2: set down
[  460.029493][T20920] infiniband syz2: added ip6_vti0
[  460.049306][ T6512] ip6_vti0 speed is unknown, defaulting to 1000
[  460.054879][T20933] lo speed is unknown, defaulting to 1000
[  460.148411][T20920] RDS/IB: syz2: added
[  460.190467][T20920] smc: adding ib device syz2 with port count 1
[  460.205554][T20920] smc:    ib device syz2 port 1 has no pnetid
[  460.213151][T13767] ip6_vti0 speed is unknown, defaulting to 1000
[  460.235658][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  460.615725][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  460.831765][T20977] netlink: 'syz.2.3657': attribute type 10 has an invalid length.
[  460.875649][T20977] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  461.026481][T20982] netlink: 'syz.3.3659': attribute type 10 has an invalid length.
[  461.059654][T20982] 8021q: adding VLAN 0 to HW filter on device team0
[  461.093426][T20982] bond0: (slave team0): Enslaving as an active interface with an up link
[  461.233350][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  461.650736][T20933] ip6_vti0 speed is unknown, defaulting to 1000
[  461.958296][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  462.554647][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  462.579416][T21033] __nla_validate_parse: 7 callbacks suppressed
[  462.579435][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'.
[  462.717164][T21039] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  463.205860][T21060] block nbd3: not configured, cannot reconfigure
[  463.236650][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3671'.
[  463.260989][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'.
[  463.337665][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  463.532667][T21072] netlink: 'syz.3.3673': attribute type 1 has an invalid length.
[  463.558757][T21075] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  463.640658][T21081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3673'.
[  463.711780][T21072] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.729952][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3674'.
[  463.796460][T21077] bond3: (slave gretap3): making interface the new active one
[  463.810204][T21077] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  463.957735][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  464.065578][T21095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'.
[  464.086766][T21095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'.
[  464.468025][T21121] syzkaller1: entered promiscuous mode
[  464.480381][T21121] syzkaller1: entered allmulticast mode
[  464.579106][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  464.854226][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'.
[  465.141814][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  465.279676][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'.
[  465.406758][T21148] bridge5: port 1(veth5) entered blocking state
[  465.415780][T21148] bridge5: port 1(veth5) entered disabled state
[  465.422329][T21148] veth5: entered allmulticast mode
[  465.458365][T21148] veth5: entered promiscuous mode
[  465.469208][T21148] bridge5: port 1(veth5) entered blocking state
[  465.475677][T21148] bridge5: port 1(veth5) entered forwarding state
[  465.783773][T20920] ip6_vti0 speed is unknown, defaulting to 1000
[  465.986641][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3691'.
[  466.146399][ T6357] bridge5: port 1(veth5) entered disabled state
[  466.217964][T21159] lo speed is unknown, defaulting to 1000
[  467.017505][T21204] netlink: 'syz.3.3695': attribute type 1 has an invalid length.
[  467.240979][T21211] netlink: 'syz.1.3697': attribute type 3 has an invalid length.
[  467.286175][T21211] delete_channel: no stack
[  467.575477][T21218] netlink: 'syz.0.3699': attribute type 29 has an invalid length.
[  467.721132][T21223] lo speed is unknown, defaulting to 1000
[  468.635568][T21223] ip6_vti0 speed is unknown, defaulting to 1000
[  468.825485][T21266] __nla_validate_parse: 4 callbacks suppressed
[  468.825508][T21266] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3708'.
[  469.337820][T21282] lo speed is unknown, defaulting to 1000
[  470.039400][T21282] ip6_vti0 speed is unknown, defaulting to 1000
[  470.618847][T21329] tipc: Started in network mode
[  470.623794][T21329] tipc: Node identity fa93d0e812dc, cluster identity 4711
[  470.682995][T21329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.691095][T21331] syzkaller0: entered promiscuous mode
[  470.697838][T21331] syzkaller0: entered allmulticast mode
[  470.706015][T21324] lo speed is unknown, defaulting to 1000
[  470.852442][T21331] tipc: Resetting bearer <eth:syzkaller0>
[  470.896934][T21331] tipc: Disabling bearer <eth:syzkaller0>
[  471.469808][T21361] gretap4: entered allmulticast mode
[  471.560500][T21324] ip6_vti0 speed is unknown, defaulting to 1000
[  472.055542][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'.
[  472.281866][T21386] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.291705][T21386] 8021q: adding VLAN 0 to HW filter on device team0
[  472.347654][T21386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.421488][ T6512] ip6_vti0 speed is unknown, defaulting to 1000
[  472.442337][ T6512] syz2: Port: 1 Link ACTIVE
[  472.479905][T21397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.514767][ T5948] ip6_vti0 speed is unknown, defaulting to 1000
[  472.526316][T21392] syzkaller0: entered promiscuous mode
[  472.531841][T21392] syzkaller0: entered allmulticast mode
[  472.693698][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'.
[  472.758669][T21397] tipc: Resetting bearer <eth:syzkaller0>
[  472.780390][T21391] tipc: Resetting bearer <eth:syzkaller0>
[  472.866865][T21391] tipc: Disabling bearer <eth:syzkaller0>
[  473.241923][T21411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3737'.
[  473.349736][T21419] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:4
[  473.379376][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3738'.
[  473.399225][T21423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3740'.
[  473.420252][T21419] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3738'.
[  473.739639][T21430] syzkaller0: entered promiscuous mode
[  473.745501][T21430] syzkaller0: entered allmulticast mode
[  473.752780][T21438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3744'.
[  473.789406][T21438] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  473.926135][T21430] lo speed is unknown, defaulting to 1000
[  474.123853][T21454] netlink: 'syz.0.3749': attribute type 14 has an invalid length.
[  474.195210][T21454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3749'.
[  474.238925][T21454] bond0: option xmit_hash_policy: invalid value (8)
[  474.322178][T21464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3748'.
[  474.349983][T21430] ip6_vti0 speed is unknown, defaulting to 1000
[  474.616518][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'.
[  474.666411][T21473] netlink: zone id is out of range
[  474.688454][T21474] netlink: 'syz.1.3751': attribute type 3 has an invalid length.
[  474.724303][T21473] netlink: zone id is out of range
[  474.735842][T21474] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3751'.
[  474.748009][T21473] netlink: zone id is out of range
[  474.760001][T21473] netlink: zone id is out of range
[  474.783892][T21479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3751'.
[  474.793776][T21477] xt_policy: neither incoming nor outgoing policy selected
[  474.809851][T21473] netlink: zone id is out of range
[  474.832338][T21473] netlink: zone id is out of range
[  474.864858][T21473] netlink: zone id is out of range
[  474.875115][T21473] netlink: zone id is out of range
[  475.140728][T21491] netlink: 'syz.0.3757': attribute type 39 has an invalid length.
[  475.210629][T21500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3757'.
[  475.500204][T21515] sctp: [Deprecated]: syz.2.3761 (pid 21515) Use of int in max_burst socket option.
[  475.500204][T21515] Use struct sctp_assoc_value instead
[  475.524366][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'.
[  475.537303][T21515] sctp: [Deprecated]: syz.2.3761 (pid 21515) Use of int in max_burst socket option.
[  475.537303][T21515] Use struct sctp_assoc_value instead
[  475.618923][T21511] lo speed is unknown, defaulting to 1000
[  475.934505][T21532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.027901][T21534] netlink: 'syz.2.3766': attribute type 11 has an invalid length.
[  476.060536][T21534] netlink: 'syz.2.3766': attribute type 1 has an invalid length.
[  476.075624][T21534] netlink: 'syz.2.3766': attribute type 2 has an invalid length.
[  476.103823][T21534] netlink: 'syz.2.3766': attribute type 1 has an invalid length.
[  476.115510][T21534] netlink: 'syz.2.3766': attribute type 3 has an invalid length.
[  476.124133][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'.
[  476.255883][T21511] ip6_vti0 speed is unknown, defaulting to 1000
[  476.302393][T21551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3769'.
[  476.947207][T21571] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3775'.
[  477.743368][T21588] IPVS: Unknown mcast interface: team0
[  478.170331][T21608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.200862][T21608] syzkaller0: entered promiscuous mode
[  478.240629][T21608] syzkaller0: entered allmulticast mode
[  478.352096][T21611] m1Ie5nè‹: entered promiscuous mode
[  478.389388][T21612] tipc: Resetting bearer <eth:syzkaller0>
[  478.435463][T21604] tipc: Resetting bearer <eth:syzkaller0>
[  478.484324][T21619] netlink: 'syz.3.3785': attribute type 4 has an invalid length.
[  478.507127][T21604] tipc: Disabling bearer <eth:syzkaller0>
[  479.030500][T21634] netlink: 'syz.2.3790': attribute type 10 has an invalid length.
[  479.218407][T21647] bond0: (slave rose0): Error: Device can not be enslaved while up
[  479.352091][T21656] __nla_validate_parse: 3 callbacks suppressed
[  479.352114][T21656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3794'.
[  480.031573][T21693] netlink: 'syz.2.3804': attribute type 15 has an invalid length.
[  480.060876][T21693] : renamed from veth0_to_bond (while UP)
[  480.926665][T21749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3814'.
[  481.517007][T21774] geneve3: entered promiscuous mode
[  481.658883][T21785] net_ratelimit: 4 callbacks suppressed
[  481.658902][T21785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.711667][T21787] lo speed is unknown, defaulting to 1000
[  481.822029][T21791] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3825'.
[  481.831783][T21791] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3825'.
[  481.843454][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'.
[  481.859160][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'.
[  481.878676][T21791] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3825'.
[  481.901445][T21791] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3825'.
[  482.156633][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'.
[  482.539169][T21824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3829'.
[  482.561293][T21813] syzkaller0: entered promiscuous mode
[  482.567062][T21813] syzkaller0: entered allmulticast mode
[  482.582540][T21787] ip6_vti0 speed is unknown, defaulting to 1000
[  483.057960][T21840] netlink: 'syz.4.3835': attribute type 10 has an invalid length.
[  484.353309][T21823] lo speed is unknown, defaulting to 1000
[  484.377376][T21840] team0: Device ipvlan1 failed to register rx_handler
[  484.902408][T21844] lo speed is unknown, defaulting to 1000
[  485.207159][T21823] ip6_vti0 speed is unknown, defaulting to 1000
[  485.678193][T21844] ip6_vti0 speed is unknown, defaulting to 1000
[  486.182355][T21905] lo speed is unknown, defaulting to 1000
[  486.199180][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3845'.
[  486.730210][T21919] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3846'.
[  486.817407][T21905] ip6_vti0 speed is unknown, defaulting to 1000
[  487.552654][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'.
[  487.658203][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3848'.
[  488.185235][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  488.205148][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3850'.
[  488.357761][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'.
[  488.367986][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3850'.
[  488.395412][ T6476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.403690][ T6476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.453234][ T6476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.505138][ T6476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.272960][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'.
[  489.288274][T21987] netlink: 'syz.2.3858': attribute type 3 has an invalid length.
[  489.303901][T21988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'.
[  489.321388][T21987] bridge2: entered allmulticast mode
[  489.346085][T21988] netlink: 'syz.0.3859': attribute type 6 has an invalid length.
[  489.353877][T21988] netlink: 'syz.0.3859': attribute type 5 has an invalid length.
[  489.387595][T21988] netlink: 'syz.0.3859': attribute type 6 has an invalid length.
[  489.421519][T21988] netlink: 'syz.0.3859': attribute type 5 has an invalid length.
[  489.453394][T21992] siw: device registration error -23
[  489.478584][T21988] netlink: 'syz.0.3859': attribute type 6 has an invalid length.
[  489.503287][T21988] netlink: 'syz.0.3859': attribute type 5 has an invalid length.
[  489.571007][T21992] dummy0: left promiscuous mode
[  489.579725][T21992] dummy0: left allmulticast mode
[  489.598946][T21992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  489.650844][T21985] bridge2: left allmulticast mode
[  489.859695][T22008] tipc: Enabled bearer <eth:ipvlan1>, priority 17
[  489.897642][T22013] 8021q: VLANs not supported on ip_vti0
[  490.020302][T22015] netlink: 'syz.3.3864': attribute type 28 has an invalid length.
[  490.171701][T22031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.373379][T22042] lo speed is unknown, defaulting to 1000
[  490.753970][T22051] netlink: 'syz.2.3870': attribute type 39 has an invalid length.
[  491.093775][T22042] ip6_vti0 speed is unknown, defaulting to 1000
[  491.637534][T22087] netlink: 'syz.2.3876': attribute type 2 has an invalid length.
[  491.702247][T22087] l24): entered promiscuous mode
[  491.992469][T22094] __nla_validate_parse: 7 callbacks suppressed
[  491.992489][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3878'.
[  492.064379][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3880'.
[  492.204233][T22102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3881'.
[  492.389082][T22108] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3883'.
[  492.550311][T22111] lo speed is unknown, defaulting to 1000
[  493.110991][T22135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3887'.
[  493.170471][T22135] syzkaller0: entered promiscuous mode
[  493.185682][T22135] syzkaller0: entered allmulticast mode
[  493.228250][T22135] netlink: 174 bytes leftover after parsing attributes in process `syz.0.3887'.
[  493.363881][T22141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3888'.
[  493.379193][T22141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3888'.
[  493.422098][T22111] ip6_vti0 speed is unknown, defaulting to 1000
[  493.549420][T22151] team0: Port device dummy0 added
[  493.606355][T22151] team0: Port device dummy0 removed
[  493.620648][T22154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3891'.
[  493.652309][T22151] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  494.520395][T22191] ==================================================================
[  494.528620][T22191] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x16b/0x6b0
[  494.536826][T22191] Read of size 8 at addr ffff88807cde4d48 by task syz.3.3897/22191
[  494.544757][T22191] 
[  494.547128][T22191] CPU: 0 UID: 0 PID: 22191 Comm: syz.3.3897 Not tainted syzkaller #0 PREEMPT(full) 
[  494.547156][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  494.547170][T22191] Call Trace:
[  494.547180][T22191]  <TASK>
[  494.547188][T22191]  dump_stack_lvl+0xe8/0x150
[  494.547220][T22191]  print_report+0xba/0x230
[  494.547242][T22191]  ? cfusbl_device_notify+0x16b/0x6b0
[  494.547266][T22191]  kasan_report+0x117/0x150
[  494.547290][T22191]  ? net_generic+0x1e/0x240
[  494.547312][T22191]  ? cfusbl_device_notify+0x16b/0x6b0
[  494.547340][T22191]  cfusbl_device_notify+0x16b/0x6b0
[  494.547364][T22191]  ? net_generic+0x1e/0x240
[  494.547386][T22191]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  494.547412][T22191]  ? caif_device_notify+0x250/0xfc0
[  494.547443][T22191]  notifier_call_chain+0x19d/0x3a0
[  494.547475][T22191]  register_netdevice+0x1246/0x1ae0
[  494.547501][T22191]  ? __mutex_lock+0x5ac/0x1300
[  494.547530][T22191]  ? __pfx_register_netdevice+0x10/0x10
[  494.547554][T22191]  ? dev_addr_check+0x20/0x230
[  494.547580][T22191]  ? dev_addr_mod+0x354/0x520
[  494.547606][T22191]  register_netdev+0x40/0x60
[  494.547630][T22191]  bnep_add_connection+0x6e5/0xca0
[  494.547658][T22191]  ? __pfx_bnep_add_connection+0x10/0x10
[  494.547680][T22191]  ? __fget_files+0x3a0/0x420
[  494.547712][T22191]  do_bnep_sock_ioctl+0x40b/0x650
[  494.547735][T22191]  ? kasan_quarantine_put+0xbb/0x1f0
[  494.547756][T22191]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  494.547783][T22191]  ? tomoyo_path_number_perm+0x219/0x630
[  494.547819][T22191]  sock_do_ioctl+0x101/0x320
[  494.547847][T22191]  ? __pfx_sock_do_ioctl+0x10/0x10
[  494.547871][T22191]  ? do_futex+0x333/0x420
[  494.547902][T22191]  sock_ioctl+0x5c6/0x7f0
[  494.547927][T22191]  ? __pfx_sock_ioctl+0x10/0x10
[  494.547952][T22191]  ? __fget_files+0x2a/0x420
[  494.547976][T22191]  ? __fget_files+0x3a0/0x420
[  494.548000][T22191]  ? __fget_files+0x2a/0x420
[  494.548038][T22191]  ? bpf_lsm_file_ioctl+0x9/0x20
[  494.548059][T22191]  ? __pfx_sock_ioctl+0x10/0x10
[  494.548083][T22191]  __se_sys_ioctl+0xfc/0x170
[  494.548114][T22191]  do_syscall_64+0xe2/0xf80
[  494.548133][T22191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.548153][T22191]  ? trace_irq_disable+0x37/0x100
[  494.548181][T22191]  ? clear_bhb_loop+0x60/0xb0
[  494.548204][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.548226][T22191] RIP: 0033:0x7f505239acb9
[  494.548244][T22191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.548263][T22191] RSP: 002b:00007f505333a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  494.548287][T22191] RAX: ffffffffffffffda RBX: 00007f5052615fa0 RCX: 00007f505239acb9
[  494.548304][T22191] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000007
[  494.548318][T22191] RBP: 00007f5052408bf7 R08: 0000000000000000 R09: 0000000000000000
[  494.548331][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.548344][T22191] R13: 00007f5052616038 R14: 00007f5052615fa0 R15: 00007fffdfbc3118
[  494.548370][T22191]  </TASK>
[  494.548377][T22191] 
[  494.850836][T22191] Allocated by task 5845:
[  494.855181][T22191]  kasan_save_track+0x3e/0x80
[  494.859885][T22191]  __kasan_kmalloc+0x93/0xb0
[  494.864494][T22191]  __kmalloc_cache_noprof+0x3d1/0x6e0
[  494.869896][T22191]  __hci_conn_add+0x3c5/0x1b30
[  494.874701][T22191]  hci_conn_request_evt+0x5b1/0xc40
[  494.879931][T22191]  hci_event_packet+0x805/0x12c0
[  494.884903][T22191]  hci_rx_work+0x3ee/0x1030
[  494.889428][T22191]  process_scheduled_works+0xaec/0x17a0
[  494.894998][T22191]  worker_thread+0x89f/0xd90
[  494.899620][T22191]  kthread+0x726/0x8b0
[  494.903713][T22191]  ret_from_fork+0x51b/0xa40
[  494.908339][T22191]  ret_from_fork_asm+0x1a/0x30
[  494.913123][T22191] 
[  494.915459][T22191] Freed by task 22151:
[  494.919553][T22191]  kasan_save_track+0x3e/0x80
[  494.924264][T22191]  kasan_save_free_info+0x46/0x50
[  494.929318][T22191]  __kasan_slab_free+0x5c/0x80
[  494.934104][T22191]  kfree+0x1be/0x650
[  494.938025][T22191]  device_release+0x9e/0x1d0
[  494.942639][T22191]  kobject_put+0x228/0x560
[  494.947072][T22191]  hci_conn_del+0xc36/0x1230
[  494.951682][T22191]  hci_conn_hash_flush+0x191/0x260
[  494.956815][T22191]  hci_dev_close_sync+0x821/0x10e0
[  494.961956][T22191]  hci_dev_close+0x108/0x260
[  494.966568][T22191]  sock_do_ioctl+0x101/0x320
[  494.971358][T22191]  sock_ioctl+0x5c6/0x7f0
[  494.975709][T22191]  __se_sys_ioctl+0xfc/0x170
[  494.980328][T22191]  do_syscall_64+0xe2/0xf80
[  494.984937][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.990870][T22191] 
[  494.993209][T22191] Last potentially related work creation:
[  494.998937][T22191]  kasan_save_stack+0x3e/0x60
[  495.003638][T22191]  kasan_record_aux_stack+0xbd/0xd0
[  495.008904][T22191]  insert_work+0x3d/0x330
[  495.013258][T22191]  __queue_work+0xccf/0xf90
[  495.017784][T22191]  queue_delayed_work_on+0x11a/0x1d0
[  495.023097][T22191]  l2cap_chan_del+0x285/0x610
[  495.027788][T22191]  l2cap_conn_del+0x326/0x5b0
[  495.032486][T22191]  hci_conn_hash_flush+0x10d/0x260
[  495.037635][T22191]  hci_dev_close_sync+0x821/0x10e0
[  495.042784][T22191]  hci_dev_close+0x108/0x260
[  495.047398][T22191]  sock_do_ioctl+0x101/0x320
[  495.052023][T22191]  sock_ioctl+0x5c6/0x7f0
[  495.056385][T22191]  __se_sys_ioctl+0xfc/0x170
[  495.061004][T22191]  do_syscall_64+0xe2/0xf80
[  495.065556][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.071464][T22191] 
[  495.073801][T22191] The buggy address belongs to the object at ffff88807cde4000
[  495.073801][T22191]  which belongs to the cache kmalloc-8k of size 8192
[  495.087906][T22191] The buggy address is located 3400 bytes inside of
[  495.087906][T22191]  freed 8192-byte region [ffff88807cde4000, ffff88807cde6000)
[  495.101906][T22191] 
[  495.104260][T22191] The buggy address belongs to the physical page:
[  495.110705][T22191] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807cde0000 pfn:0x7cde0
[  495.120795][T22191] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  495.129397][T22191] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  495.137922][T22191] page_type: f5(slab)
[  495.141922][T22191] raw: 00fff00000000240 ffff88813ff27280 ffffea000146b810 ffffea000147a610
[  495.150527][T22191] raw: ffff88807cde0000 0000000000020001 00000000f5000000 0000000000000000
[  495.159131][T22191] head: 00fff00000000240 ffff88813ff27280 ffffea000146b810 ffffea000147a610
[  495.167842][T22191] head: ffff88807cde0000 0000000000020001 00000000f5000000 0000000000000000
[  495.176543][T22191] head: 00fff00000000003 ffffea0001f37801 00000000ffffffff 00000000ffffffff
[  495.185252][T22191] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  495.193940][T22191] page dumped because: kasan: bad access detected
[  495.200384][T22191] page_owner tracks the page as allocated
[  495.206115][T22191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 19182, tgid 19178 (syz.4.3294), ts 416682738323, free_ts 415111639102
[  495.226032][T22191]  post_alloc_hook+0x228/0x280
[  495.230848][T22191]  get_page_from_freelist+0x24dc/0x2580
[  495.236429][T22191]  __alloc_frozen_pages_noprof+0x18d/0x380
[  495.242442][T22191]  alloc_pages_mpol+0x232/0x4a0
[  495.247312][T22191]  allocate_slab+0x86/0x3a0
[  495.251842][T22191]  ___slab_alloc+0xd82/0x1760
[  495.256541][T22191]  __slab_alloc+0x65/0x100
[  495.260977][T22191]  __kvmalloc_node_noprof+0x673/0x8d0
[  495.266375][T22191]  tun_attach+0x891/0x1590
[  495.270817][T22191]  tun_net_init+0x309/0x3d0
[  495.275344][T22191]  register_netdevice+0x6b2/0x1ae0
[  495.280481][T22191]  tun_set_iff+0x844/0xf00
[  495.284923][T22191]  __tun_chr_ioctl+0x7bb/0x1e10
[  495.289812][T22191]  __se_sys_ioctl+0xfc/0x170
[  495.294433][T22191]  do_syscall_64+0xe2/0xf80
[  495.298955][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.304882][T22191] page last free pid 19099 tgid 19099 stack trace:
[  495.311399][T22191]  __free_frozen_pages+0xbb0/0xd10
[  495.316531][T22191]  __slab_free+0x2ce/0x320
[  495.320968][T22191]  qlist_free_all+0x97/0x100
[  495.325575][T22191]  kasan_quarantine_reduce+0x148/0x160
[  495.331058][T22191]  __kasan_slab_alloc+0x22/0x80
[  495.335953][T22191]  __kmalloc_cache_noprof+0x36f/0x6e0
[  495.341351][T22191]  kobject_uevent_env+0x28c/0x9e0
[  495.346398][T22191]  __kobject_del+0xd2/0x330
[  495.350927][T22191]  kobject_put+0x240/0x560
[  495.355371][T22191]  net_rx_queue_update_kobjects+0x695/0x740
[  495.361348][T22191]  netdev_unregister_kobject+0x113/0x450
[  495.367118][T22191]  unregister_netdevice_many_notify+0x1e0e/0x2370
[  495.373647][T22191]  unregister_netdevice_queue+0x31f/0x360
[  495.379386][T22191]  __tun_detach+0x6d9/0x15d0
[  495.384000][T22191]  tun_chr_close+0x10a/0x1c0
[  495.388610][T22191]  __fput+0x44f/0xa70
[  495.392688][T22191] 
[  495.395039][T22191] Memory state around the buggy address:
[  495.400693][T22191]  ffff88807cde4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  495.408779][T22191]  ffff88807cde4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  495.416864][T22191] >ffff88807cde4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  495.424945][T22191]                                               ^
[  495.431377][T22191]  ffff88807cde4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  495.439455][T22191]  ffff88807cde4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  495.447542][T22191] ==================================================================
[  495.492718][T22191] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  495.499995][T22191] CPU: 1 UID: 0 PID: 22191 Comm: syz.3.3897 Not tainted syzkaller #0 PREEMPT(full) 
[  495.509420][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  495.519531][T22191] Call Trace:
[  495.522853][T22191]  <TASK>
[  495.525822][T22191]  vpanic+0x1e0/0x670
[  495.529853][T22191]  panic+0xc5/0xd0
[  495.533618][T22191]  ? __pfx_panic+0x10/0x10
[  495.538081][T22191]  ? preempt_schedule_thunk+0x16/0x30
[  495.543499][T22191]  ? cfusbl_device_notify+0x16b/0x6b0
[  495.548936][T22191]  check_panic_on_warn+0x89/0xb0
[  495.553932][T22191]  ? cfusbl_device_notify+0x16b/0x6b0
[  495.559345][T22191]  end_report+0x6f/0x140
[  495.563641][T22191]  kasan_report+0x128/0x150
[  495.568194][T22191]  ? net_generic+0x1e/0x240
[  495.572757][T22191]  ? cfusbl_device_notify+0x16b/0x6b0
[  495.578191][T22191]  cfusbl_device_notify+0x16b/0x6b0
[  495.583444][T22191]  ? net_generic+0x1e/0x240
[  495.588006][T22191]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  495.593799][T22191]  ? caif_device_notify+0x250/0xfc0
[  495.599064][T22191]  notifier_call_chain+0x19d/0x3a0
[  495.604237][T22191]  register_netdevice+0x1246/0x1ae0
[  495.609511][T22191]  ? __mutex_lock+0x5ac/0x1300
[  495.614332][T22191]  ? __pfx_register_netdevice+0x10/0x10
[  495.619932][T22191]  ? dev_addr_check+0x20/0x230
[  495.624757][T22191]  ? dev_addr_mod+0x354/0x520
[  495.629492][T22191]  register_netdev+0x40/0x60
[  495.634115][T22191]  bnep_add_connection+0x6e5/0xca0
[  495.639270][T22191]  ? __pfx_bnep_add_connection+0x10/0x10
[  495.644935][T22191]  ? __fget_files+0x3a0/0x420
[  495.649654][T22191]  do_bnep_sock_ioctl+0x40b/0x650
[  495.654712][T22191]  ? kasan_quarantine_put+0xbb/0x1f0
[  495.660022][T22191]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  495.665597][T22191]  ? tomoyo_path_number_perm+0x219/0x630
[  495.671358][T22191]  sock_do_ioctl+0x101/0x320
[  495.675995][T22191]  ? __pfx_sock_do_ioctl+0x10/0x10
[  495.681144][T22191]  ? do_futex+0x333/0x420
[  495.685507][T22191]  sock_ioctl+0x5c6/0x7f0
[  495.689867][T22191]  ? __pfx_sock_ioctl+0x10/0x10
[  495.694743][T22191]  ? __fget_files+0x2a/0x420
[  495.699356][T22191]  ? __fget_files+0x3a0/0x420
[  495.704058][T22191]  ? __fget_files+0x2a/0x420
[  495.708677][T22191]  ? bpf_lsm_file_ioctl+0x9/0x20
[  495.713645][T22191]  ? __pfx_sock_ioctl+0x10/0x10
[  495.718522][T22191]  __se_sys_ioctl+0xfc/0x170
[  495.723146][T22191]  do_syscall_64+0xe2/0xf80
[  495.727670][T22191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.733781][T22191]  ? trace_irq_disable+0x37/0x100
[  495.738830][T22191]  ? clear_bhb_loop+0x60/0xb0
[  495.743540][T22191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.749469][T22191] RIP: 0033:0x7f505239acb9
[  495.753910][T22191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  495.773724][T22191] RSP: 002b:00007f505333a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  495.782199][T22191] RAX: ffffffffffffffda RBX: 00007f5052615fa0 RCX: 00007f505239acb9
[  495.790231][T22191] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000007
[  495.798235][T22191] RBP: 00007f5052408bf7 R08: 0000000000000000 R09: 0000000000000000
[  495.806420][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  495.814410][T22191] R13: 00007f5052616038 R14: 00007f5052615fa0 R15: 00007fffdfbc3118
[  495.822411][T22191]  </TASK>
[  495.826058][T22191] Kernel Offset: disabled
[  495.830412][T22191] Rebooting in 86400 seconds..