last executing test programs:

6m0.794521405s ago: executing program 2 (id=4620):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000003c00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x800) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x85, 0x0, &(0x7f00000004c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001dc0)={'vcan0\x00', <r6=>0x0})
sendmmsg$sock(r4, &(0x7f0000005dc0)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="a11947fafd301e8d1972b823e6bab5527a6cd64b833a4e1fc97a819a69e4ebeb620860b1e8496fd6afbdb6fe31980a3fc90a7f7b06f6a1d57a28724ee0f06d3077314aa80c9d892daa3804959790dac9fda2c8c87ddd4150c55b5e4ce5926693820be0f0e004758a0dab6a54a58d685cc5f1fdbdec658bb54f7ddbfe5cae63337a0b272e39ea54d36a9b43851136aa09871a66bea0467ca30aa352c3c6d530b2d279ae5e28246e", 0xa7}, {&(0x7f00000002c0)="0e7a74bf04e1ff2c12d0aba6", 0xc}, {&(0x7f0000000300)="d0101e0c232738fb8d2e163a05b6bdaf808d48370e916c324b092bc310dc6923d96b66e097de2d249fb35f421da84d96dcd108616249c6817e095a2f43e37bd0e4abd6047dbd6e17857cf8431ab345d7bcf27ee4b2bf98d7bc5c02bd958b5a8d01c39cea6dc3682dc1d8ea77830bf89d531c8099db5846e53c2070954c599d7f11a5c32a", 0x84}, {&(0x7f00000003c0)="3494672be68661d93ca3ba9a9cba4f1a6c276844aa3792177c6f9271e11558bb6ae4febeaca9a97621dbf91bbf517621475bb4e5865fc6a843f1f2d701a618d1ae77f48a00c04feac326cfe4937c99706589ea757e05f035ca8edef8bdf7d98f531653086492cd06e8deb1", 0x6b}, {&(0x7f0000000440)="154a336c5d9644829468207f7888b293941271abbf54db22f1a39ce0bce5993534b8f83484f7a972d86499c5fe2c9720d608ab1cb86f8fbc9d3fcdc7aaab8131e533453ca1ac62965d4861296107f51e1613bbef1d39d50d81f8274cb4e710bc4dba62c61962c2a909d631c0d5f8e53a5dd8a2cd5801a047c4df32ae0e90a6194f4479a121898fc5e6367c0112f288f99caf96af08af1a281a9eed3a1ff7", 0x9e}], 0x5, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xc3}}, @timestamping={{0x14}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x78}}, {{&(0x7f0000000640)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000006c0)="0c9d2ef5357566faf024700be5e1dc2ef3fb81a296c9133574b0d501ac10a2af31f71207329b6dcf24758897c1d6311cdfd1e6a6e39262462b9692d2329855135d3e9aba0ca1138ad41e161bf059036f69acba67d7402178df1894fc68aec31f62bde1fe464200dc4b106342295d2212db59c50c60a7e31f8a7180b1e4c0adf49acad1d0de9e556fa3d5c7fa001540cdbfc8e0a94206c8386bc10b37f5484790dd54fc5066b956", 0xa7}, {&(0x7f0000000780)="0777a78f24acf91b117cb1e7b8", 0xd}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="b0f763df14480ef1f6c29e12718a49d2e2cc3a83b55e6720fe83462087757197652cf6629f61f3254dc3a18a834082b6fe3b23709cee483c117587f47675efd08f902172e265ceff2eca3e22aa5ede9ae680b09881295e83333e9fe6f92f613bae73d39b3210897534429b64ae083206585732ca9826ebc23cd37bb3b667e2ad99e63d7f9ebc8b68d15f8bff5c2c4881b41e0e1f25ff3c8fea84178d0bf8def1df972e4b2de2b321d9122e1d00c63abc886204e179921e96587662b8c3f7e647e2355f1c71bbeca04417751bee889ad8c056c4a8", 0xd4}, {&(0x7f00000018c0)="9ff4981a69ebce", 0x7}, {&(0x7f0000001900)="087325de0ea5fa7db682e4fd62f74e4a3e8519c9b1088b66e9c665c57df2874c89e5ea3241e8526f27eae8ff744b99298bb156fdc8b5d62bf45861b9b67a368b92f10e558fd246041c5d8a0fca477d774c68ae3e931b0e1ed0f4d8084d613d743ecaf8d1219a03813deef7732039c1ccaf3e553ebcf60e21c035d01b8dd38662332ba02121a1251456ceb7698982775320b54a40670a03de14fdc7a6e0526b7c35e0b05933cbeef4315d631b777ecd2458ec232409aa9807c3c3", 0xba}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="4ad2a59ff9ea6eae051886c9c7abb291d888f9a0873ece130ad095a58fccb9a85975e51f023bcdcd657b790fc57230252335b566addc8f0a9f501343a21d715b804f3c4f791c6cc5b17d550c67f23f2d432d60a3b53756c08ae310ea38ab5548072ee4fde7264c44917c13994a6ee7b4178869d6cc982d", 0x77}], 0x8, &(0x7f0000001b00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xffffffc0}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x35}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xf0}}, {{&(0x7f0000001c00)=@can, 0x80, &(0x7f0000000140)=[{&(0x7f0000001c80)="aeedd0c0d2a75b655fb6539db6e1ff89429fa95a77562ddb21e8a34a8355ac348d57c7809e8108289751a79fa57c9fa16fdc647b26d4d80a470e5d45cbcf89f308d96346e66efddb13a6b528e3", 0x4d}], 0x1, &(0x7f0000001d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}}, {{&(0x7f0000001e00)=@can={0x1d, r6}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e80)="62a2d372f215aeef969ead3f8b24d29069a0753c8b08", 0x16}], 0x1, &(0x7f0000001f00)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}, {{&(0x7f0000001f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x8, @empty, 0x10001}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002000)="36b10224ce606c83450d8cac76e8d252c70a002889a7fe337853532698c516351e7569878c1b5424d9e129228c5dd59ceb4844ac0b70d1cf46bc07e48620745899340cf9c1e8c743ac28bb59a7ce6a660b8f7198779e39a5f119527399f512cb14be9c9b", 0x64}, {&(0x7f0000005fc0)="012a9a981601fcd16276d9e0c905766f2490747c05569b38a3577adbafb323142ddb870e76155ff0421259f08b7c41d6f9b9aafeac33a95fc096640386c7dc1d8a1d71b2359a26ffc09c1d630e3f6e26fab70c09630950fa9debaa5f5530e28126ea1a39844c74a3de9d8c2d3208abb2e94be33e2059047db0b77452c99aa602", 0x80}, {&(0x7f0000002100)="95ae2255f209913a32f34c6e81e8fa2de5614cba14de8ea669ad2fe136cdf9b39c73df7f241aad3ddfe721b686b9c8d689a045c057b906df926afe55402b593c17a023f6bfa2287347c8fb22a22215b1497bea950509755295357e4a1bd3af57041cb29d0ce7d5a439ba5ebac7eb09f2d92639724aeb8149e6d7ae58", 0x7c}, {&(0x7f0000002180)="2fb2a33e36eafc84454cee395739", 0xe}, {&(0x7f00000021c0)="6d4071665b87b51390c1c88eb80fcdebebd33231bc2047a1fd305be8b06bf55b268f7e3ef642e9b1ff6d2a1eb0b35d35d0d2853ef16e1ddc30d210bbe5f7ed63572133763aa675c400b7dc3dea44a804f91a19345354c2501d1a605adff4379889b8212409c7ef78af3b3e13702b8994fb71014b7789c71a17263c8dbcb1410d1a42edae79c599fbdaa830d87788d9d66d6daf3713e6b5ea35c4f087b84636e75a814a057457d2fa26885e3d34047c6f20c9abc552a8d71a138b90c1c21d70f41cc975bb2d7985df703c2c77571e8a21f29c9d8af66845c1dec134f583448c124c4a9578014398d8c807", 0xea}, {&(0x7f00000022c0)="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", 0x1000}], 0x6}}, {{&(0x7f0000003340)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000003980)=[{&(0x7f00000033c0)="21180a080a54016415d798f30584e51006b84236e5fc9b460534b4063004c15b1245ce57359d7877dd601f0be1d98e90bc8b0c09dcc4c6ffafd62ea65dd12e9640b64effc358b0bd2e3e342b59914d8f48730db6b3bf5dc7123c17702d3e836ffc07bc9fe56c1045", 0x68}, {&(0x7f0000003440)="83bdd9c9", 0x4}, {&(0x7f0000003480)="2b9bd2a311379f64e4e77af1eac5cf3379ed8592886b2f714196780a9def68517ef609f6d7978e310995799def42d8e48dc93ffb0b2664e35d88fe7fed8aa103046ae6176b91d79de1268a81a922b94e11a3897c10db86ddb3948ff12cad759d16683c1ad9316af13f35772d99a446d4a8e2c0e75d2db02909532c0999e748aabb53a253394350f0a5e297ac2130ef55ad4cdd42026cd372b9a34eec50aecd094b57666b3a240074718ea806e86901c48fa9a61c66faefe361dc25c7d7709cff8b43cd7debdc", 0xc6}, {&(0x7f0000003580)="73299a3ecb23fed4c5e20b3b476525fe1215539fa1f6827ddcdf4b09d760ce828511ae00802128d7e9c9e00b2b350309acc6fa1cd05a231407b78db6931ae4069c4ac8d4ab98a8d3429c3a006b8b847a58aeedaf80377012d21409dfb724999023307798b1659c55e0f3b656c6fb82277c1de17aafebc9ff87fbb3bf8a94d855b292", 0x82}, {&(0x7f0000003640)="e84a1d95d1ec21cb36c53cdbcf096ba819f5830d059671a6b28ce1b0c0d899e0062b8c5693355dcb9a1acc2d88d924945dd63ea593746d1965bca7ec91984a55a0200415077ad695746037ec786a7ba25fd3366b6a7359b0a9658e5da5fefdf1bc8b48dcdf00d87ee9a88c5f507c23b842d2e9ae69d437b27b64b266d6a9cbb17aa6ea52a5f228dde7461b0b75c36d9d812ee9248a777d02d7c2e00e5fc5bcc0b9018b8830e0b01eaff8c18709f7be0638635fbde565271160e90a39b087562f16297a49a5300593f439efe876d8599136a5b2b0076339b042b92bd82add84ef368670d52bc4c6", 0xe7}, {&(0x7f0000003740)="c4eab47d07e024735309a0507e680313f355baa15177b6a868e4f30bf8fe28985b128c5b7019ad13e5f039e223c0301aacb6ccb9cf3adb93e209a08d01a017f42259ba5dc802328421954d6acdecfca4b046cb781bfc78ea", 0x58}, {&(0x7f00000037c0)="9f9bd1fdc345a66b7e22eb59a48aeb2d730bae325687c26d218c35f07176c0e87a4fe08d5cf91e4fd1ac738ed2f484f6b831437028dd038dea216a8ceab4aa95c702e8dc85b7df706f91135c35f98da6df3679cd8c29b3b896f35df32e7ac6668ce4507591662efab07389ca0458f1f46b05b09321866a8df260bfcbc80d06da4c6016f4c1c62f0187f8f22fa26c48c6900c2e4176ad1882b4a47c8f0a6b94bc42", 0xa1}, {&(0x7f0000003880)="40cc412bc97e7b72b4625021359c26db78ded698b5fe2809fc5c1de9ac7cb36c0cc0b950d771ab9acbaf2072a99f12e22f34a5db610609c18156812a394eaf45aa735aa47c3907abed66f61280442639a81753d1530f2d9f8765154ca331c86f2420cd27452707c578729b30602a2faa5275d7d931650b35763a5cd74f3e42736f3156cbd8c9a62a747f7b565920016c6f0db9f7e9b2b29e1b2987ba5483cc5d3c5566ddb17e7f40cb90481f02e068a484714878bac53234604b01077d74aada0479a11d343853302a9ae43ac03c8db604ee0b2df8a2", 0xd6}], 0x8}}, {{&(0x7f0000003a00)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003a80)="da11ffdc7ba7289cd9cc3972991af4123aef6df4755d8222dcef5225ab782ef50c39458261b74f2b06e78a377cfd3c9331d1544b1e9dffe8cd56bc378c68ba428210bddc9d76467040a60687d515145450773d934cd217ab7e34f23caf74315de463ea916871829d37296c708d1bc391bbd88e3b7efe", 0x76}, {&(0x7f0000003b00)="d93434a0f2900665ca0c34dc627adb6f78bcdeaf2e5c66a7285f53c805650233494a131f1a66733ffb0f6e5c2026fe0f9b13a53a0d7d200858fa38f68fc9c717bfebe437c0b176f2874180700e8220dff8adf76ae14831e7bbd4dd2bea2addc79aa61ed6bf4c7975132ba70061c6e6c3a96929c4a6ea825f89a0caeab0223eddd96c30020997d8f0240f5a1736220ec1081b378d465f0c3dddfadb613386990c6be096a892a79af170683b819e103ab8cf4c4653263f9582f08aba13c7e549db7970543cd4ef30fe3681e76ca5078dda2d", 0xd1}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="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", 0x1000}], 0x4, &(0x7f0000004c80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000004cc0)=@ll={0x11, 0xf7, 0x0, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000004d40)="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", 0x1000}], 0x1, &(0x7f0000005d80)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x30}}], 0x8, 0x8000) (async, rerun: 32)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000000)={<r7=>0xffffffffffffffff}) (rerun: 32)
openat$cgroup_ro(r7, &(0x7f0000006040)='freezer.self_freezing\x00', 0x0, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

5m58.572971543s ago: executing program 2 (id=4625):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) (async)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000006c0), &(0x7f0000000740)=0x80) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async)
syz_emit_ethernet(0xc3, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "9ee54763f3"}}}}}, 0x0) (async)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4)
recvmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x30}, 0x400000}], 0x1, 0x20010060, 0x0) (async)
ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x48})

5m58.394499096s ago: executing program 2 (id=4628):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfc, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0xffffffff, 0x10000, 0x34}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xbf7}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x400000000000116, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5m58.221690578s ago: executing program 2 (id=4634):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}}, 0x0)
write(r0, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)

5m58.010447133s ago: executing program 2 (id=4637):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x2, {0x2, 0x0, 0x3}, {0x1, 0xf0, 0x4}, 0x1, 0xff}, {0x2, 0x3, {0x0, 0x1, 0x2}, {0x2}, 0x2, 0xff}, {0x3, 0x2, {0x0, 0xf0}, {0x0, 0x0, 0x4}, 0xff, 0xfe}, {0x1, 0x0, {0x2, 0x5504f44d0307592a, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0x2}, {0x2, 0x0, {0x1, 0xff, 0x1}, {0x1, 0xf0, 0x4}}], 0xa0)
accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0xb851e30f7896b3b1) (async)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0xb851e30f7896b3b1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, 0x0, 0x400c807)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x5, r5, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'macsec0\x00', @broadcast})
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x0, 0x1, {0xa, 0x4e20, 0xffffffff, @local, 0xffffdc9d}}}, 0x3a) (async)
connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x0, 0x1, {0xa, 0x4e20, 0xffffffff, @local, 0xffffdc9d}}}, 0x3a)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f7b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab08}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeacf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7c3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1699617a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f7b}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab08}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeacf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7c3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1699617a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x8c, 0x7, 0x1, 0x0, "b64a752e26e02a0d7fa206098a770bfbbbd39f0ba216887cb70fad615fb62747ffd5a2de6ec653f89246986dfcfc8051d3ecb2486c8fb3ed0eb8704ce251bd24f84f8f27580423eaff35ec5bb5d775abd7d62d183d39bbcab70e485cd326450c7776e9430b8d14a0353ebb024de14c910d48c738fcafa1bfb0225f30d88e80f926e13fadba349303"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELSETELEM={0x3a4, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34c, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x86, 0x6, 0x1, 0x0, "9db1ac295749c9766b21f8f31ae09aaf8bba661754e04b2cc38315eb88eeea9f218c1ebfc1cf897afba5c64a1eb182f77f208d0a2f2c429c275373c86833d9a39109a4115a5de8c70c6657d4a8d03563f6c228469cf9d5619ed58a1576572e73ad2f911546285000b8f8073ca6e999b41d1ecc1a1964acf7276e233120c886ae1b23"}, @NFTA_SET_ELEM_EXPR={0x80, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_INFO={0xe, 0x3, "c7638d2e47e104e3c7ec"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}]}}}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffeffffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffb80}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x6d, 0x1, "ea880ad01487a9179a05e0df70137285aaa76ab34e00d86caa38727a32b93a453301b2d76547423ab766f4b6bd16fde584a9d1a44dd3f0a2ce7c1fc0e515cd7849718fbc8cf7ce050332733afc5897f3add6f8d937c59066e371dbc0df25b9b0dcc26301cface7a901"}, @NFTA_DATA_VALUE={0xb0, 0x1, "21c0fa7b0ef9c452d6df29d10a9577ad0b1a691626ca52efea16e3cfeb32700e4e89fc424e313a883a735f8607cb7b59df289291066d08c7361d0459f888a456865ee8642544779623a82ed9814b5ec28d3e614bc7a52ef189f1cc7fa83a18004cd44b3186041bdef109941660c3b862701d300505d51c01b1f4173fa28741f9d067eb85e1b61334df46d52e9a0bda5ecca0029142923f0d8777ef5949af26ba9ae90b1514ff41ca453fed79"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50c}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000c00)="ad751a60ea71a6d7cc33cdc528be89ef4710acbd3a8ce7403c39fc8631f47a6bf9fdfdbca5bfca63b1d76f87634eef9ec30a646816e60a4df8c781702befc4d4937dffd2c2d42ac8643dfa0c8032ab003ce6709645172066c8294bfce0421f24a05282a0cbece6e981f4d39bebb509672fa0af49c51bb0ddb5181529236c6ff2311fb34835dfe628") (async)
ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000c00)="ad751a60ea71a6d7cc33cdc528be89ef4710acbd3a8ce7403c39fc8631f47a6bf9fdfdbca5bfca63b1d76f87634eef9ec30a646816e60a4df8c781702befc4d4937dffd2c2d42ac8643dfa0c8032ab003ce6709645172066c8294bfce0421f24a05282a0cbece6e981f4d39bebb509672fa0af49c51bb0ddb5181529236c6ff2311fb34835dfe628")
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000cc0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x371c}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x27bd}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000d80)='GPL\x00', 0x299, 0x49, &(0x7f0000000dc0)=""/73, 0x41100, 0x30, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2cf9a, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000e80)=[{0x1, 0x4, 0x3, 0xa}, {0x3, 0x1, 0xe, 0x3}, {0x0, 0x2, 0x5, 0x6}, {0x5, 0x2, 0x6, 0x9}, {0x5, 0x1, 0xd, 0xc}, {0x4, 0x4, 0xf, 0x4}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@fallback=r0, 0x20, 0x0, 0xa9aa, &(0x7f0000000fc0)=[0x0], 0x1, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@fallback=<r11=>r0, 0x20, 0x0, 0xa9aa, &(0x7f0000000fc0)=[0x0], 0x1, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0], <r12=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001100)={@fallback=r4, r10, 0x2a, 0x2014, 0x0, @value, @void, @void, @void, r12}, 0x20)
sendmmsg(r7, &(0x7f0000001140), 0x0, 0x40c8891)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000011c0)={'veth0_to_bridge\x00', &(0x7f0000001180)=@ethtool_stats={0x1d, 0x2, [0xffffffffffffff80, 0x2]}})
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x3, 0xffffffff, 0x0, 0x20000, r6, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x6}, 0x50) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x3, 0xffffffff, 0x0, 0x20000, r6, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x6}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000001200)="f8dafe8924f15c62c512b1d2bf47472a57a5b62e288e0e146d17991f44595dc8dcb9b7646552ddd177a30b05ae8ad3c064805a177725e25cccc28d1453536f59a9db2f690c8ebd8202515ea8bb372f6c19fbb53fabe9edcd0caa66f09f95b36e9f04baa7d8dde193c914faf5506f1914bc2442eaa46e5cc20f55bb11bf2128e29e312ac506215ae36b2f499475eb397b3cde530b951e80cb06e01f1fdeaf84105dd2f088ae22a1b60206cb5a3fc52964a9eb277e0592dbff93cf223fd4990d8e90d2645bb9ac21af77f4550d082764acecf76b5c48eb04d6670898f2c920cca3f5d0d1b2495b7954e48e2b055f951e61b7d7", &(0x7f0000001300)=""/214, &(0x7f0000001400)="8580195c6c094ab88b403e5bbad6706cd19b394ee9b3f13279bfe2df62a8b2494417a58fedcf6ec8895f5fa4742276229b7ba1b9c2b045a34950e3751ecbe499de4b8bcb06e978077bf1bb29c73e635b", &(0x7f0000001480), 0x9, r13}, 0x38)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$gtp(&(0x7f00000015c0), r11)
sendmsg$GTP_CMD_NEWPDP(r14, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x50, r15, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x804f}, 0x40000)
setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f0000001700)={0xffffffffffffffff, 0x1, 0xf, r5, 0x6}, 0xc)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001740)=0x1)

5m57.822546951s ago: executing program 2 (id=4640):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x641800, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x41)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/net\x00')
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r5, @ANYRESOCT=r4], 0x32600)
r6 = socket$kcm(0xa, 0x2, 0x0)
pwritev(r6, 0x0, 0x0, 0x9, 0xbb)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
pread64(r4, &(0x7f0000000b40)=""/4096, 0x1000, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x60133000)
r7 = socket(0x14, 0x2, 0x4)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x61d0, &(0x7f0000000480))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

5m42.648418897s ago: executing program 32 (id=4640):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x641800, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x41)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/net\x00')
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r5, @ANYRESOCT=r4], 0x32600)
r6 = socket$kcm(0xa, 0x2, 0x0)
pwritev(r6, 0x0, 0x0, 0x9, 0xbb)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
pread64(r4, &(0x7f0000000b40)=""/4096, 0x1000, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x60133000)
r7 = socket(0x14, 0x2, 0x4)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x61d0, &(0x7f0000000480))
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)

3.569417354s ago: executing program 1 (id=8118):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x3e9, 0x20, 0x70bd26, 0x25dfdbfc, {0x17, 0x1, 0x2, 0xffffffffffffffff, 0x9, 0xb, 0x80, 0x6, 0x0, 0x2, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

3.453815738s ago: executing program 1 (id=8122):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)

3.385218072s ago: executing program 0 (id=8124):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000880)={0x0, 0x0})

3.385142954s ago: executing program 5 (id=8125):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50)

3.296382387s ago: executing program 0 (id=8126):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400010000000000fddbdf25e000000200000000000000000000ffe1000000000000000000000000000000000000008992ea2b000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x80)

3.153304214s ago: executing program 1 (id=8129):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

3.153027145s ago: executing program 5 (id=8130):
socket(0x2, 0xa, 0x300)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0)

3.152959785s ago: executing program 3 (id=8131):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4)

3.130808801s ago: executing program 0 (id=8133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3.012637239s ago: executing program 3 (id=8134):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

3.012484201s ago: executing program 4 (id=8135):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x400003, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0xf}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)

2.985332435s ago: executing program 0 (id=8136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0xfffffffe, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0xffffffffffffffff}, {0x0, 0x6, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "3cf86190273b8c7bc1de9a5dbf640a3710cd12"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084)

2.885390493s ago: executing program 3 (id=8137):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

2.784706338s ago: executing program 4 (id=8138):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r0, 0x409, 0x8003, 0x0, 0x0)

2.770057111s ago: executing program 0 (id=8139):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x8, 0x0, 0xee00}, {@in6=@remote, 0x4d2, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@private2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

2.723799091s ago: executing program 5 (id=8140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'lo\x00', {0x3}, 0x9766})

2.665077831s ago: executing program 3 (id=8141):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0xf)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x40004)
recvmmsg(r4, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000007c0)=""/42, 0x2a}, {&(0x7f0000001900)=""/4109, 0x100d}], 0x2}, 0x9}], 0x1, 0x10122, 0x0)

2.649034303s ago: executing program 4 (id=8142):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0)

2.595068878s ago: executing program 0 (id=8143):
unshare(0x60000600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

2.525396384s ago: executing program 4 (id=8144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=@newlink={0x64, 0x10, 0x1, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x434, 0x4880}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x80000001, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40844}, 0x60040010)

2.492141047s ago: executing program 5 (id=8145):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0801000000000000290000"], 0x108}}], 0x2, 0xc040)

2.416598673s ago: executing program 5 (id=8146):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000bc0)=@ethtool_rxnfc={0x0, 0x8, 0x0, {0xc, @sctp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1, 0x4e20, 0x4e23, 0x4}, {0x0, @broadcast, 0xe96, 0xff, [0xcac, 0x3]}, @tcp_ip4_spec={@empty, @local, 0x4e21, 0x3, 0xd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x8, 0x7fff, [0x4, 0x4]}, 0x3, 0x3}}})

2.186115964s ago: executing program 1 (id=8147):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x64, 0x10, 0x401, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x81cc}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}]}}}, @IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

210.506466ms ago: executing program 1 (id=8148):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0xa, 0x4f26, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0xc}, 0x1c, 0x0}}], 0x1, 0x200880c4)
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0x6, 0x4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x14000000)

191.419232ms ago: executing program 5 (id=8149):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x0)

191.266603ms ago: executing program 4 (id=8150):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

113.784377ms ago: executing program 3 (id=8151):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))

336.376µs ago: executing program 3 (id=8152):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000feffff7f0200000800040001000000", 0x24)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)

104.195µs ago: executing program 1 (id=8153):
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf253fdd000000000000fbffffffff060000090000000500000099dd000005000000fe", @ANYRESDEC], 0xae}, 0x1, 0x0, 0x0, 0x22004014}, 0x8044894)

0s ago: executing program 4 (id=8154):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000008c0)={r1, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10)

kernel console output (not intermixed with test programs):

ering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.477882][T29647] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  702.691160][T29647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.735186][T29647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.759025][T29647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  702.827425][T29829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6468'.
[  702.908684][T29647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.929540][T29647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.948496][T29647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  702.965211][T29831] netlink: 'syz.4.6469': attribute type 1 has an invalid length.
[  702.971419][ T5835] Bluetooth: hci0: command tx timeout
[  703.180407][T29841] x_tables: duplicate underflow at hook 4
[  703.191888][T29843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6474'.
[  703.221490][T29647] bond0: (slave netdevsim0): Releasing backup interface
[  703.282014][T29647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  703.297967][T29647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.330804][T29647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  703.356678][T29850] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6475'.
[  703.529621][T29862] IPVS: set_ctl: invalid protocol: 2 172.20.20.63:20000
[  703.556309][T29863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6479'.
[  703.566943][T29863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  703.646828][T29647] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  703.691412][T29647] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  703.713171][T29647] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  703.726555][T29647] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  703.795437][T29881] netlink: 'syz.4.6482': attribute type 29 has an invalid length.
[  703.954619][T29887] xt_l2tp: v2 doesn't support IP mode
[  703.970786][T29647] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.983051][T29887] netlink: 'syz.4.6485': attribute type 1 has an invalid length.
[  703.984219][T29888] netlink: 'syz.4.6485': attribute type 1 has an invalid length.
[  704.013951][T29887] netlink: 7975 bytes leftover after parsing attributes in process `syz.4.6485'.
[  704.043656][T29647] 8021q: adding VLAN 0 to HW filter on device team0
[  704.058373][T12167] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.065605][T12167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  704.102352][T29888] netlink: 7975 bytes leftover after parsing attributes in process `syz.4.6485'.
[  704.120004][T29847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  704.137262][T12167] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.144515][T12167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  704.565985][T29647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.624873][T29647] veth0_vlan: entered promiscuous mode
[  704.640536][T29647] veth1_vlan: entered promiscuous mode
[  704.687542][T29647] veth0_macvtap: entered promiscuous mode
[  704.701711][T29647] veth1_macvtap: entered promiscuous mode
[  704.727268][T29647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  704.750345][T29647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.770634][T29916] syzkaller1: entered promiscuous mode
[  704.776222][T29916] syzkaller1: entered allmulticast mode
[  704.792929][T12167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.806211][T12167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.836792][T12167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.846290][T12167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.987367][T29007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.004015][T29007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.049387][ T5835] Bluetooth: hci0: command tx timeout
[  705.078401][T12166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.087477][T12166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.660608][T29953] sock: sock_set_timeout: `syz.3.6506' (pid 29953) tries to set negative timeout
[  706.435348][T29982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.759439][T29993] netlink: 'syz.5.6519': attribute type 1 has an invalid length.
[  706.831376][T29990] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  706.854490][T29990] bond2: (slave lo): Enslaving as an active interface with an up link
[  706.866427][T29998] __nla_validate_parse: 5 callbacks suppressed
[  706.866447][T29998] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6517'.
[  706.876635][T29990] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  706.904279][T29997] bond9: entered promiscuous mode
[  706.918777][T29997] bond9: entered allmulticast mode
[  706.926143][T29997] 8021q: adding VLAN 0 to HW filter on device bond9
[  706.952511][T29993] bridge5: entered promiscuous mode
[  706.965727][T29993] bridge5: entered allmulticast mode
[  706.974702][T29993] bond9: (slave bridge5): Enslaving as a backup interface with an up link
[  707.019694][T28994] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  707.186603][T28991] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  707.207892][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms
[  707.216290][    C1] lec:lec_tx_timeout: lec0
[  707.431357][T30013] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6524'.
[  707.454589][T30022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6525'.
[  707.801548][T30031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  707.986029][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6529'.
[  708.037142][T30035] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6529'.
[  708.048147][T30035] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6529'.
[  708.351916][T30053] delete_channel: no stack
[  708.402759][T30064] IPVS: sh: FWM 3 0x00000003 - no destination available
[  708.472401][T30066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6536'.
[  708.541570][T30066] syz.0.6536: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  708.559472][T30066] CPU: 0 UID: 0 PID: 30066 Comm: syz.0.6536 Not tainted syzkaller #0 PREEMPT(full) 
[  708.559502][T30066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  708.559516][T30066] Call Trace:
[  708.559523][T30066]  <TASK>
[  708.559533][T30066]  dump_stack_lvl+0xe8/0x150
[  708.559570][T30066]  warn_alloc+0x249/0x340
[  708.559597][T30066]  ? stack_trace_save+0xa9/0x100
[  708.559624][T30066]  ? __pfx_warn_alloc+0x10/0x10
[  708.559658][T30066]  ? kasan_save_track+0x4f/0x80
[  708.559681][T30066]  ? kasan_save_track+0x3e/0x80
[  708.559702][T30066]  ? __kasan_kmalloc+0x93/0xb0
[  708.559724][T30066]  ? __kmalloc_cache_noprof+0x31c/0x660
[  708.559748][T30066]  ? xskq_create+0x56/0x170
[  708.559772][T30066]  ? xsk_setsockopt+0x54c/0x990
[  708.559792][T30066]  ? do_sock_setsockopt+0x17c/0x1b0
[  708.559816][T30066]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  708.559840][T30066]  ? do_syscall_64+0x14d/0xf80
[  708.559871][T30066]  __vmalloc_node_range_noprof+0x132/0x1730
[  708.559931][T30066]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  708.559964][T30066]  ? __kasan_kmalloc+0x93/0xb0
[  708.559996][T30066]  vmalloc_user_noprof+0xad/0xe0
[  708.560021][T30066]  ? xskq_create+0xbf/0x170
[  708.560044][T30066]  xskq_create+0xbf/0x170
[  708.560072][T30066]  xsk_init_queue+0x8a/0xe0
[  708.560098][T30066]  xsk_setsockopt+0x54c/0x990
[  708.560124][T30066]  ? __pfx_xsk_setsockopt+0x10/0x10
[  708.560147][T30066]  ? __pfx_aa_sk_perm+0x10/0x10
[  708.560183][T30066]  ? aa_sock_opt_perm+0xff/0x1a0
[  708.560219][T30066]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  708.560244][T30066]  ? __pfx_xsk_setsockopt+0x10/0x10
[  708.560266][T30066]  do_sock_setsockopt+0x17c/0x1b0
[  708.560297][T30066]  __x64_sys_setsockopt+0x13d/0x1b0
[  708.560327][T30066]  do_syscall_64+0x14d/0xf80
[  708.560351][T30066]  ? trace_irq_disable+0x3b/0x150
[  708.560369][T30066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.560391][T30066]  ? clear_bhb_loop+0x40/0x90
[  708.560427][T30066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.560449][T30066] RIP: 0033:0x7f478e19c819
[  708.560472][T30066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.560491][T30066] RSP: 002b:00007f478f080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  708.560515][T30066] RAX: ffffffffffffffda RBX: 00007f478e415fa0 RCX: 00007f478e19c819
[  708.560532][T30066] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  708.560545][T30066] RBP: 00007f478e232c91 R08: 0000000000000004 R09: 0000000000000000
[  708.560557][T30066] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  708.560570][T30066] R13: 00007f478e416038 R14: 00007f478e415fa0 R15: 00007fff42b580a8
[  708.560605][T30066]  </TASK>
[  708.560935][T30066] Mem-Info:
[  708.690528][T30073] netlink: 'syz.3.6540': attribute type 1 has an invalid length.
[  708.690555][T30073] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6540'.
[  708.789794][T26973] Bluetooth: hci1: command 0x0401 tx timeout
[  708.933169][T30081] netlink: 'syz.3.6542': attribute type 10 has an invalid length.
[  708.942781][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6541'.
[  708.963848][T30081] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.972726][T30066] active_anon:6179 inactive_anon:0 isolated_anon:0
[  708.972726][T30066]  active_file:3077 inactive_file:40186 isolated_file:0
[  708.972726][T30066]  unevictable:768 dirty:58 writeback:0
[  708.972726][T30066]  slab_reclaimable:14019 slab_unreclaimable:141504
[  708.972726][T30066]  mapped:29207 shmem:1379 pagetables:3508
[  708.972726][T30066]  sec_pagetables:0 bounce:0
[  708.972726][T30066]  kernel_misc_reclaimable:0
[  708.972726][T30066]  free:1252796 free_pcp:27796 free_cma:0
[  708.979695][T30081] bridge_slave_1: left allmulticast mode
[  709.026154][T30081] bridge_slave_1: left promiscuous mode
[  709.032760][T30081] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.049703][T30077] openvswitch: netlink: IP tunnel dst address not specified
[  709.062378][T30081] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  709.078227][T30066] Node 0 active_anon:24716kB inactive_anon:0kB active_file:12308kB inactive_file:160544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:30812kB dirty:232kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16828kB pagetables:13916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  709.139002][T30066] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  709.216965][T30066] Node 0 DMA free:11216kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB
[  709.284518][T30066] lowmem_reserve[]: 0 2492 2493 2493 2493
[  709.291088][T30066] Node 0 DMA32 free:1304700kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24732kB inactive_anon:0kB active_file:12308kB inactive_file:160544kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:51760kB local_pcp:31036kB free_cma:0kB
[  709.326270][T30091] netlink: 'syz.4.6543': attribute type 4 has an invalid length.
[  709.335135][T30066] lowmem_reserve[]: 0 0 0 0 0
[  709.340887][T30066] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  709.373040][T30066] lowmem_reserve[]: 0 0 0 0 0
[  709.383425][T30066] Node 1 Normal free:3697620kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57408kB local_pcp:27688kB free_cma:0kB
[  709.439591][T30066] lowmem_reserve[]: 0 0 0 0 0
[  709.444519][T30066] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11216kB
[  709.488759][T30066] Node 0 DMA32: 3990*4kB (UM) 5858*8kB (UME) 3772*16kB (UME) 272*32kB (UME) 66*64kB (UME) 381*128kB (UME) 880*256kB (UM) 594*512kB (UME) 373*1024kB (UME) 102*2048kB (UM) 0*4096kB = 1305128kB
[  709.523207][T30066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  709.523580][T30090] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.542918][T30090] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.551980][T30094] delete_channel: no stack
[  709.556763][T30094] delete_channel: no stack
[  709.573424][T30066] Node 1 Normal: 11*4kB (U) 23*8kB (UM) 19*16kB (UM) 6*32kB (UM) 14*64kB (UM) 13*128kB (UM) 13*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 13*2048kB (U) 891*4096kB (UM) = 3697620kB
[  709.610818][T30066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  709.637072][T30066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  709.651995][T30066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  709.664191][T30066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  709.677216][T30066] 44640 total pagecache pages
[  709.684385][T30066] 0 pages in swap cache
[  709.694061][T30066] Free swap  = 124996kB
[  709.699064][T30066] Total swap = 124996kB
[  709.746539][T30090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.756255][T30066] 2097051 pages RAM
[  709.761640][T30066] 0 pages HighMem/MovableOnly
[  709.766381][T30066] 427062 pages reserved
[  709.775237][T30066] 0 pages cma reserved
[  709.777582][T30090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.945073][T12167] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.969925][T12167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.989241][T12167] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.016578][T12167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.044848][T12167] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.061968][T12167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.103354][T12167] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.117482][T12167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.207090][T30119] xt_cgroup: path and classid specified
[  710.428929][T30127] netlink: 'syz.0.6556': attribute type 29 has an invalid length.
[  710.444735][T30127] netlink: 'syz.0.6556': attribute type 29 has an invalid length.
[  710.460741][T30127] netlink: 'syz.0.6556': attribute type 32 has an invalid length.
[  710.554414][T30135] 8021q: VLANs not supported on ip_vti0
[  711.246441][T30173] netlink: 'syz.3.6574': attribute type 1 has an invalid length.
[  711.542182][T30195] netlink: 'syz.5.6580': attribute type 1 has an invalid length.
[  711.602571][T30195] 8021q: adding VLAN 0 to HW filter on device bond10
[  711.634477][T30197] bond10: (slave geneve2): making interface the new active one
[  711.645542][T30197] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  711.768338][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  712.423570][T30209] __nla_validate_parse: 8 callbacks suppressed
[  712.423592][T30209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6583'.
[  712.554735][T30209] netlink: 294 bytes leftover after parsing attributes in process `syz.5.6583'.
[  712.565649][T30209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.578830][T30209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6583'.
[  712.609294][T30219] netlink: 'syz.1.6586': attribute type 13 has an invalid length.
[  712.774832][T30223] netlink: 'syz.0.6588': attribute type 29 has an invalid length.
[  712.783515][T30223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6588'.
[  712.795414][T30225] netlink: 'syz.4.6591': attribute type 11 has an invalid length.
[  712.813555][T30225] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.6591'.
[  712.831568][T30227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6589'.
[  712.879765][T30223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  713.001140][T30241] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6595'.
[  713.023384][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6595'.
[  713.171457][T30246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'.
[  713.176087][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6597'.
[  713.392257][T30234] vxcan1 speed is unknown, defaulting to 1000
[  713.830373][T30283] validate_nla: 5 callbacks suppressed
[  713.830395][T30283] netlink: 'syz.0.6604': attribute type 4 has an invalid length.
[  713.872639][T30283] netlink: 'syz.0.6604': attribute type 4 has an invalid length.
[  714.143011][T30234] wlan1 speed is unknown, defaulting to 1000
[  714.251743][T30305] netlink: 'syz.3.6611': attribute type 1 has an invalid length.
[  714.277066][T30305] netlink: 'syz.3.6611': attribute type 10 has an invalid length.
[  714.304003][T30305] team0: Device vxcan1 is of different type
[  714.345663][T30308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  714.502462][T30316] netlink: 'syz.0.6615': attribute type 1 has an invalid length.
[  714.943205][T30331] syzkaller0: entered promiscuous mode
[  714.954443][T30331] syzkaller0: entered allmulticast mode
[  714.971376][T30331] netlink: 'syz.4.6619': attribute type 4 has an invalid length.
[  715.562929][T30355] SET target dimension over the limit!
[  716.661427][T30410] delete_channel: no stack
[  716.674684][T30407] delete_channel: no stack
[  716.815944][T30415] netlink: 'syz.3.6646': attribute type 1 has an invalid length.
[  716.825278][T30415] netlink: 'syz.3.6646': attribute type 7 has an invalid length.
[  716.833643][T30415] netlink: 'syz.3.6646': attribute type 8 has an invalid length.
[  716.890993][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  717.567355][T30450] __nla_validate_parse: 25 callbacks suppressed
[  717.567378][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6659'.
[  717.589868][T30450] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6659'.
[  717.732749][T30460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6660'.
[  717.789356][T30460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6660'.
[  717.831308][T30462] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  717.845212][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'.
[  717.845212][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'.
[  717.984894][T30478] IPv6: NLM_F_CREATE should be specified when creating new route
[  718.026594][T30466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'.
[  718.246652][T30488] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6669'.
[  718.351302][T30490] syzkaller1: entered promiscuous mode
[  718.371000][T30490] syzkaller1: entered allmulticast mode
[  718.841023][T30520] tipc: Started in network mode
[  718.859077][T30520] tipc: Node identity 62aba9c61749, cluster identity 4711
[  718.866751][T30520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  718.882913][T30519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6683'.
[  718.914586][T30520] +
: renamed from syzkaller0
[  718.921790][T30523] netlink: 'syz.5.6684': attribute type 63 has an invalid length.
[  718.941938][T30520] tipc: Disabling bearer <eth:syzkaller0>
[  718.957100][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6682'.
[  718.999986][T30526] openvswitch: netlink: Flow actions attr not present in new flow.
[  719.265710][T30546] netlink: 'syz.0.6688': attribute type 3 has an invalid length.
[  719.415928][T30559] netlink: 'syz.0.6690': attribute type 1 has an invalid length.
[  719.455305][T30559] bond1: entered promiscuous mode
[  719.461507][T30559] 8021q: adding VLAN 0 to HW filter on device bond1
[  719.482106][T30561] bond1: (slave bridge4): making interface the new active one
[  719.491032][T30561] bridge4: entered promiscuous mode
[  719.497723][T30561] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  719.520645][T30559] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  719.534830][T30559] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  719.853345][T30575] netlink: 'syz.0.6694': attribute type 33 has an invalid length.
[  719.886875][T30575] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  719.899783][T30575] bond2 (unregistering): Released all slaves
[  721.598390][T30516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.620865][T30544] netlink: 'syz.5.6687': attribute type 1 has an invalid length.
[  721.947246][T30589] block nbd3: Unsupported socket: should be TCP or UNIX.
[  722.734907][T30633] netlink: 'syz.3.6708': attribute type 5 has an invalid length.
[  722.807113][T30637] xt_hashlimit: size too large, truncated to 1048576
[  722.885772][T30643] : renamed from hsr0
[  722.904917][T30643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.092030][ T5835] Bluetooth: hci3: command 0x041b tx timeout
[  725.011868][T30605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  725.238007][T30657] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  725.247488][T30657] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  725.271863][T30654] __nla_validate_parse: 9 callbacks suppressed
[  725.271886][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6714'.
[  725.292062][T30654] netlink: 'syz.3.6714': attribute type 7 has an invalid length.
[  725.303976][T30654] netlink: 'syz.3.6714': attribute type 8 has an invalid length.
[  725.329692][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6714'.
[  725.622989][T30676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6719'.
[  725.766292][T30685] netlink: 'syz.3.6725': attribute type 33 has an invalid length.
[  725.780140][T30685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6725'.
[  725.823879][T30690] netlink: 'syz.1.6727': attribute type 10 has an invalid length.
[  726.391002][T30712] syzkaller0: entered promiscuous mode
[  726.396542][T30712] syzkaller0: entered allmulticast mode
[  726.720406][T30734] netlink: 'syz.5.6741': attribute type 10 has an invalid length.
[  728.660233][T30734] team0: Port device dummy0 added
[  728.704371][T30738] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode
[  728.733040][T30748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  728.776428][T30752] netlink: 'syz.1.6745': attribute type 11 has an invalid length.
[  728.785740][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6745'.
[  728.824314][T30752] netlink: 'syz.1.6745': attribute type 11 has an invalid length.
[  728.833186][T28994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  728.854673][T28994] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  728.874173][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6745'.
[  728.885580][T28994] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  728.895425][T28994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  729.025640][T30766] netlink: 'syz.0.6748': attribute type 1 has an invalid length.
[  729.092544][T30769] netlink: 'syz.0.6748': attribute type 1 has an invalid length.
[  729.164116][T30766] 8021q: adding VLAN 0 to HW filter on device bond2
[  729.195063][T30757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.206392][T30771] debugfs: 'KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼ÚÞlS·œ-!' already exists in 'ieee80211'
[  729.405913][T30784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6754'.
[  729.423340][T30784] netlink: 'syz.5.6754': attribute type 7 has an invalid length.
[  729.432311][T30784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6754'.
[  729.615023][T30794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6755'.
[  729.945111][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'.
[  730.306739][T30842] validate_nla: 1 callbacks suppressed
[  730.306763][T30842] netlink: 'syz.5.6771': attribute type 21 has an invalid length.
[  730.322240][T30842] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6771'.
[  730.497437][T30846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6772'.
[  730.635668][T30858] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.6777'.
[  730.679222][T30858] netlink: Conntrack attr has 4 unknown bytes
[  730.800103][T30866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  730.944154][T28992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.953726][T28992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.162546][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6788'.
[  731.359924][T30905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  731.402501][T30904] syzkaller0: entered promiscuous mode
[  731.433058][T30904] syzkaller0: entered allmulticast mode
[  731.541062][T30910] syzkaller0: entered promiscuous mode
[  731.552756][T30910] syzkaller0: entered allmulticast mode
[  731.893413][T30933] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6802'.
[  731.918705][T30933] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6802'.
[  731.930449][T30933] netlink: 'syz.1.6802': attribute type 6 has an invalid length.
[  731.949054][T30933] netlink: 'syz.1.6802': attribute type 5 has an invalid length.
[  731.957056][T30933] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6802'.
[  732.111046][T30946] tipc: Enabled bearer <udp:syz2>, priority 10
[  732.127636][T30946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6805'.
[  732.174616][T30899] tipc: Disabling bearer <eth:syzkaller0>
[  732.212534][T30957] netlink: 'syz.3.6808': attribute type 1 has an invalid length.
[  732.341898][T30957] 8021q: adding VLAN 0 to HW filter on device bond1
[  732.382150][T30964] netlink: 'syz.1.6812': attribute type 1 has an invalid length.
[  732.403183][T30961] bond1: (slave geneve2): making interface the new active one
[  732.415659][T30961] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  732.470276][T30969] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6811'.
[  732.492854][T30964] 8021q: adding VLAN 0 to HW filter on device bond3
[  732.537368][T30970] 8021q: adding VLAN 0 to HW filter on device bond3
[  732.566779][T30970] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  732.580144][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6811'.
[  732.621375][T30970] bond3: (slave vcan0): Error -95 calling set_mac_address
[  732.678924][T30973] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  732.690981][T30973] gretap2: entered promiscuous mode
[  732.696339][T30973] gretap2: entered allmulticast mode
[  732.705310][T30967] syzkaller0: entered promiscuous mode
[  732.739364][T30967] syzkaller0: entered allmulticast mode
[  732.780153][T30981] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  732.954405][T30992] syzkaller1: entered promiscuous mode
[  732.966034][T30992] syzkaller1: entered allmulticast mode
[  733.395488][T31017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.438475][ T5928] tipc: Node number set to 1977788870
[  733.705759][T31037] netlink: 'syz.1.6832': attribute type 13 has an invalid length.
[  733.736400][T31037] netlink: 'syz.1.6832': attribute type 13 has an invalid length.
[  733.830913][T31038] syzkaller0: entered promiscuous mode
[  733.836478][T31038] syzkaller0: entered allmulticast mode
[  733.882649][T31038] 0: reclassify loop, rule prio 0, protocol 800
[  733.910026][T31038] tc_dump_action: action bad kind
[  734.216330][T31066] netlink: 'syz.3.6845': attribute type 1 has an invalid length.
[  734.236659][T31066] netlink: 'syz.3.6845': attribute type 1 has an invalid length.
[  734.267844][T31066] netlink: 'syz.3.6845': attribute type 8 has an invalid length.
[  734.543627][T31080] : entered promiscuous mode
[  734.700859][T31095] Bluetooth: MGMT ver 1.23
[  734.799750][T31099] syzkaller0: entered promiscuous mode
[  734.805578][T31099] syzkaller0: entered allmulticast mode
[  735.035991][T31110] syz_tun: entered allmulticast mode
[  735.084009][T31114] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  735.102192][T31106] syz_tun: left allmulticast mode
[  735.117689][T31114] macvtap0: entered promiscuous mode
[  735.136963][T31114] veth0_macvtap: left promiscuous mode
[  735.201037][T31114] macvtap0 (unregistering): left promiscuous mode
[  735.261164][T31119] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  735.312823][T31119] bond11 (unregistering): Released all slaves
[  735.390335][T31128] syzkaller0: entered promiscuous mode
[  735.405941][T31128] syzkaller0: entered allmulticast mode
[  735.555901][T31135] validate_nla: 2 callbacks suppressed
[  735.555936][T31135] netlink: 'syz.0.6868': attribute type 1 has an invalid length.
[  735.651815][T31135] 8021q: adding VLAN 0 to HW filter on device bond3
[  735.805136][T31150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  736.100873][T31165] netlink: 'syz.0.6876': attribute type 21 has an invalid length.
[  736.130894][T31165] __nla_validate_parse: 28 callbacks suppressed
[  736.130917][T31165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6876'.
[  736.221863][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6879'.
[  736.511903][T31194] netlink: 'syz.3.6885': attribute type 10 has an invalid length.
[  737.206040][T31194] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  737.279479][T31211] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6888'.
[  737.303973][T31209] netlink: 'syz.5.6889': attribute type 142 has an invalid length.
[  737.340817][T31209] netlink: 'syz.5.6889': attribute type 10 has an invalid length.
[  737.365136][T31209] netlink: 396 bytes leftover after parsing attributes in process `syz.5.6889'.
[  737.595810][T31219] netlink: 'syz.5.6893': attribute type 7 has an invalid length.
[  737.607600][T31217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6892'.
[  737.651101][T31217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6892'.
[  737.707023][T31217] macvlan2: entered allmulticast mode
[  737.738112][T31217] macsec0: entered allmulticast mode
[  737.845712][T31230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6898'.
[  737.884994][T31232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6899'.
[  738.174146][T31250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6904'.
[  738.237325][T31259] x_tables: duplicate underflow at hook 2
[  738.294925][T31258] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6904'.
[  738.307067][T31258] nbd: nbd64 already in use
[  738.660739][T31280] sctp: [Deprecated]: syz.0.6910 (pid 31280) Use of int in max_burst socket option.
[  738.660739][T31280] Use struct sctp_assoc_value instead
[  738.686700][T31263] udevd[31263]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  739.206850][T31309] xt_TCPMSS: Only works on TCP SYN packets
[  739.630639][T31328] syzkaller0: entered promiscuous mode
[  739.645657][T31328] syzkaller0: entered allmulticast mode
[  739.867029][T31343] netlink: 'syz.5.6928': attribute type 2 has an invalid length.
[  739.954368][T31343] : entered promiscuous mode
[  740.192260][T31358] syzkaller1: entered promiscuous mode
[  740.208825][T31358] syzkaller1: entered allmulticast mode
[  740.319731][T31367] netlink: 'syz.3.6933': attribute type 1 has an invalid length.
[  740.398592][T31368] geneve3: entered promiscuous mode
[  740.404029][T31368] geneve3: entered allmulticast mode
[  740.513401][T31367] 8021q: adding VLAN 0 to HW filter on device bond2
[  740.580877][T31367] bond2: (slave bridge1): making interface the new active one
[  740.601192][T31367] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  740.894086][T31390] nbd: device at index 64 is going down
[  740.897044][T31387] netlink: 'syz.5.6937': attribute type 9 has an invalid length.
[  740.910944][T31387] netlink: 'syz.5.6937': attribute type 11 has an invalid length.
[  740.952798][T31387] netlink: 'syz.5.6937': attribute type 12 has an invalid length.
[  741.124197][T31261] udevd[31261]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  741.205897][T31263] udevd[31263]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  741.234140][T31406] netlink: 'syz.5.6944': attribute type 2 has an invalid length.
[  741.311473][T31406] vþ: entered promiscuous mode
[  741.444821][T31413] netlink: 'syz.5.6944': attribute type 2 has an invalid length.
[  741.607452][T31420] __nla_validate_parse: 9 callbacks suppressed
[  741.607474][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6947'.
[  741.786325][T31426] netlink: 'syz.3.6951': attribute type 10 has an invalid length.
[  741.871821][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6951'.
[  741.912165][T31431] vlan2: entered allmulticast mode
[  741.917596][T31431] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode
[  742.359579][T31458] bridge0: port 2(gretap0) entered blocking state
[  742.366266][T31458] bridge0: port 2(gretap0) entered disabled state
[  742.375577][T31458] gretap0: entered allmulticast mode
[  742.384938][T31458] gretap0: entered promiscuous mode
[  742.394834][T31458] bridge0: port 2(gretap0) entered blocking state
[  742.401541][T31458] bridge0: port 2(gretap0) entered forwarding state
[  742.514846][T31466] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6963'.
[  742.589795][T31477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6962'.
[  742.639880][T31474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6962'.
[  742.674822][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6962'.
[  742.716223][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6962'.
[  742.771945][T31483] syzkaller0: entered promiscuous mode
[  742.777667][T31483] syzkaller0: entered allmulticast mode
[  745.108945][T31514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6973'.
[  745.171460][T31517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6975'.
[  745.354930][T31527] netlink: 'syz.1.6978': attribute type 10 has an invalid length.
[  745.376768][T31529] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  745.442821][T31534] netlink: 'syz.0.6981': attribute type 1 has an invalid length.
[  745.492427][T31534] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  745.996706][T31570] pim6reg1: entered promiscuous mode
[  746.028533][T31570] pim6reg1: entered allmulticast mode
[  746.183661][T31582] netlink: 'syz.5.7001': attribute type 1 has an invalid length.
[  746.251169][T31586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7002'.
[  746.434301][T31591] tipc: Failed to remove unknown binding: 66,0,0/1977788870:2870090519/2870090521
[  746.452560][T31591] tipc: Failed to remove unknown binding: 66,0,0/1977788870:2870090519/2870090520
[  746.473313][T31591] tipc: Failed to remove unknown binding: 66,0,0/1977788870:2870090519/2870090521
[  746.490735][T31591] tipc: Failed to remove unknown binding: 66,0,0/1977788870:2870090519/2870090520
[  746.506540][T31591] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  747.614432][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  747.625831][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  748.465984][T31578] __nla_validate_parse: 2 callbacks suppressed
[  748.466004][T31578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7000'.
[  748.493131][T31582] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  748.601252][  T152] bond0: (slave netdevsim0): link status definitely down, disabling slave
[  748.662847][  T152] bond0: (slave wlan1): link status definitely down, disabling slave
[  748.974637][T31631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7013'.
[  748.992753][T31631] bridge0: port 2(gretap0) entered disabled state
[  748.999642][T31631] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.057342][T31633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  749.066316][T31633] +
: renamed from syzkaller0
[  749.101764][T31633] tipc: Disabling bearer <eth:syzkaller0>
[  749.382204][T31657] netlink: 'syz.3.7021': attribute type 11 has an invalid length.
[  749.391747][T31657] netlink: 'syz.3.7021': attribute type 11 has an invalid length.
[  749.422762][T31657] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7021'.
[  749.651460][T31679] bond0: entered promiscuous mode
[  749.657209][T31679] bond_slave_0: entered promiscuous mode
[  749.663894][T31679] bond_slave_1: entered promiscuous mode
[  749.974951][T31706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7032'.
[  750.065095][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7034'.
[  750.097312][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7035'.
[  750.112616][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7034'.
[  750.313165][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'.
[  750.381999][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'.
[  750.396741][T31724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7039'.
[  750.636304][T31737] x_tables: duplicate underflow at hook 2
[  750.896730][T31759] netlink: 'syz.5.7048': attribute type 16 has an invalid length.
[  750.919379][T31759] netlink: 'syz.5.7048': attribute type 17 has an invalid length.
[  751.133022][T31759] 8021q: adding VLAN 0 to HW filter on device team0
[  751.170172][T31759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  752.016278][T31799] syzkaller0: entered promiscuous mode
[  752.024971][T31799] syzkaller0: entered allmulticast mode
[  752.095635][T31813] openvswitch: netlink: Multiple metadata blocks provided
[  753.212008][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  753.220099][    C1] lec:lec_tx_timeout: lec0
[  754.996963][T31811] vxcan1 speed is unknown, defaulting to 1000
[  755.004343][T31852] __nla_validate_parse: 11 callbacks suppressed
[  755.004365][T31852] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7072'.
[  755.021238][T31852] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7072'.
[  755.040222][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7072'.
[  755.394869][T31863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  755.441251][T31863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  755.755295][T31811] wlan1 speed is unknown, defaulting to 1000
[  755.808698][ T1109] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.839167][ T1109] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.924095][ T1109] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.951802][ T1109] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.002329][ T1109] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  756.024225][ T1109] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  756.159200][ T1109] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  756.177537][ T1109] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  756.322984][T31923] netlink: 'syz.3.7090': attribute type 10 has an invalid length.
[  756.345402][T31926] IPv6: addrconf: prefix option has invalid lifetime
[  756.352368][T31926] IPv6: addrconf: prefix option has invalid lifetime
[  756.379397][T31923] team0 (unregistering): Port device team_slave_0 removed
[  756.403682][T31923] team0 (unregistering): Port device team_slave_1 removed
[  756.626363][T31929] netlink: 'syz.1.7091': attribute type 16 has an invalid length.
[  756.651822][T31929] netlink: 'syz.1.7091': attribute type 17 has an invalid length.
[  756.669268][T31929] netlink: 'syz.1.7091': attribute type 5 has an invalid length.
[  756.769504][T31936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7094'.
[  756.987485][T31946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7097'.
[  757.144036][T31955] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  757.313242][T31958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7101'.
[  757.341675][T31965] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  757.365991][T31965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7103'.
[  757.395881][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7101'.
[  757.631257][T31988] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7110'.
[  757.684269][T31992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7111'.
[  757.713758][T31994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  757.846606][T32001] syzkaller0: entered promiscuous mode
[  757.863399][T32001] syzkaller0: entered allmulticast mode
[  757.998913][T32010] syzkaller0: entered promiscuous mode
[  758.004775][T32010] syzkaller0: entered allmulticast mode
[  758.040265][T32012] syzkaller1: entered promiscuous mode
[  758.046003][T32012] syzkaller1: entered allmulticast mode
[  759.080875][T32074] xt_hashlimit: size too large, truncated to 1048576
[  761.714694][T32043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  761.975836][T32111] netlink: 'syz.3.7137': attribute type 1 has an invalid length.
[  761.986396][T32111] netlink: 'syz.3.7137': attribute type 1 has an invalid length.
[  761.995659][T32111] netlink: 'syz.3.7137': attribute type 1 has an invalid length.
[  762.004895][T32111] netlink: 'syz.3.7137': attribute type 2 has an invalid length.
[  762.048740][T32111] __nla_validate_parse: 15 callbacks suppressed
[  762.048764][T32111] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7137'.
[  762.182104][T32113] netlink: 'syz.0.7141': attribute type 16 has an invalid length.
[  762.192041][T32113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7141'.
[  762.245805][T32128] nbd: illegal input index 2958377
[  762.252911][T32128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  762.281094][T32129] block nbd0: Unsupported socket: should be TCP or UNIX.
[  762.407446][T32136] netlink: 'syz.4.7145': attribute type 39 has an invalid length.
[  763.150132][T32158] syzkaller0: entered promiscuous mode
[  763.155895][T32158] syzkaller0: entered allmulticast mode
[  763.232126][T32170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7159'.
[  764.985609][ T7289] lec:lec_start_xmit: lec0:No lecd attached
[  766.996054][T26973] Bluetooth: hci0: link tx timeout
[  767.004942][T26973] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  767.179458][T32236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7180'.
[  768.307369][T32258] syzkaller1: entered promiscuous mode
[  768.314567][T32258] syzkaller1: entered allmulticast mode
[  768.474989][T32261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7184'.
[  768.485046][T32261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7184'.
[  768.603163][T32260] vxcan1 speed is unknown, defaulting to 1000
[  768.652679][T32189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.939633][T32272] netlink: 'syz.0.7189': attribute type 1 has an invalid length.
[  769.030844][T32274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7189'.
[  769.054867][T26973] Bluetooth: hci0: command 0x0406 tx timeout
[  769.119105][T32272] bond4: entered promiscuous mode
[  769.124987][T32272] 8021q: adding VLAN 0 to HW filter on device bond4
[  769.176737][T32272] bond4: (slave bridge5): making interface the new active one
[  769.185589][T32272] bridge5: entered promiscuous mode
[  769.193382][T32272] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  769.207010][T32274] bond4: entered allmulticast mode
[  769.245576][T32274] bridge5: entered allmulticast mode
[  769.266425][T32260] wlan1 speed is unknown, defaulting to 1000
[  770.007262][T32320] netlink: 'syz.5.7206': attribute type 1 has an invalid length.
[  770.247847][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms
[  770.255977][    C1] lec:lec_tx_timeout: lec0
[  770.405790][T32322] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  770.437804][T32322] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  770.502735][T32322] bond11: (slave vxcan3): making interface the new active one
[  770.528821][T32322] bond11: (slave vxcan3): Enslaving as an active interface with an up link
[  770.780629][T32338] syzkaller0: entered promiscuous mode
[  770.786348][T32338] syzkaller0: entered allmulticast mode
[  770.890335][T32355] netlink: 216 bytes leftover after parsing attributes in process `syz.5.7213'.
[  771.190627][T32372] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  771.199557][T32372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.197147][T32372] bond0: entered promiscuous mode
[  773.203065][T32372] bond_slave_0: entered promiscuous mode
[  773.213399][T32372] bond_slave_1: entered promiscuous mode
[  773.219449][T32372] bridge_slave_1: entered promiscuous mode
[  773.225474][T32372] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  773.235639][T32372] mac80211_hwsim hwsim76 wlan1: entered promiscuous mode
[  773.251284][T32372] batadv0: entered promiscuous mode
[  773.264327][T32372] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  773.275370][T32372] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  773.286985][T32372] hsr1: entered promiscuous mode
[  773.294177][T32372] hsr1: entered allmulticast mode
[  773.299996][T32372] bond0: entered allmulticast mode
[  773.305180][T32372] bond_slave_0: entered allmulticast mode
[  773.312780][T32372] bond_slave_1: entered allmulticast mode
[  773.319658][T32372] bridge_slave_1: entered allmulticast mode
[  773.325714][T32372] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  773.334346][T32372] mac80211_hwsim hwsim76 wlan1: entered allmulticast mode
[  773.342581][T32372] batadv0: entered allmulticast mode
[  773.357716][T32372] 8021q: adding VLAN 0 to HW filter on device hsr1
[  773.381012][T32372] bond0: left promiscuous mode
[  773.385866][T32372] bond_slave_0: left promiscuous mode
[  773.393897][T32372] bond_slave_1: left promiscuous mode
[  773.400964][T32372] bridge_slave_1: left promiscuous mode
[  773.406806][T32372] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  773.417461][T32372] mac80211_hwsim hwsim76 wlan1: left promiscuous mode
[  773.428659][T32372] batadv0: left promiscuous mode
[  773.465182][T32378] ¾x9ÿ: renamed from bridge_slave_0
[  773.695629][T32390] netlink: 'syz.1.7220': attribute type 3 has an invalid length.
[  774.156676][T32418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7230'.
[  774.430005][T32428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7232'.
[  774.620147][T32430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7233'.
[  774.639138][T32430] team0 (unregistering): Port device team_slave_1 removed
[  774.685775][T32427] vxcan1 speed is unknown, defaulting to 1000
[  774.724255][T32429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  775.050710][T32450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7235'.
[  775.087253][T32427] wlan1 speed is unknown, defaulting to 1000
[  775.366243][T32466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7240'.
[  775.492616][T32471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7239'.
[  775.520692][T32466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7240'.
[  775.735993][T32483] ref_ctr_offset mismatch. inode: 0x19a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6
[  775.766413][T32481] syzkaller0: entered promiscuous mode
[  775.783297][T32481] syzkaller0: entered allmulticast mode
[  775.980916][T32495] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7246'.
[  776.118018][T32498] netlink: 'syz.4.7247': attribute type 3 has an invalid length.
[  776.251801][T32507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.265400][T32507] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7250'.
[  776.283334][T32507] netlink: Conntrack attr has 4 unknown bytes
[  776.385984][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7251'.
[  776.831205][T32537] netlink: 'syz.5.7260': attribute type 3 has an invalid length.
[  776.865918][T32540] lo: entered allmulticast mode
[  776.871984][T32540] tunl0: entered allmulticast mode
[  776.880589][T32540] gre0: entered allmulticast mode
[  776.897597][T32540] gretap0: entered allmulticast mode
[  776.921010][T32541] netlink: 'syz.1.7261': attribute type 1 has an invalid length.
[  776.943356][T32540] erspan0: entered allmulticast mode
[  776.980353][T32540] ip_vti0: entered allmulticast mode
[  777.020702][T32540] ip6_vti0: entered allmulticast mode
[  777.040725][T32540] sit0: entered allmulticast mode
[  777.073975][T32540] ip6tnl0: entered allmulticast mode
[  777.102700][T32540] ip6gre0: entered allmulticast mode
[  777.112953][T32540] syz_tun: entered allmulticast mode
[  777.122574][T32540] ip6gretap0: entered allmulticast mode
[  777.134099][T32540] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.141759][T32540] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.151133][T32540] bridge0: entered allmulticast mode
[  777.163682][T32540] bond0: entered allmulticast mode
[  777.169622][T32540] bond_slave_0: entered allmulticast mode
[  777.175414][T32540] bond_slave_1: entered allmulticast mode
[  777.184713][T32540] team0: entered allmulticast mode
[  777.191374][T32540] team_slave_0: entered allmulticast mode
[  777.197416][T32540] team_slave_1: entered allmulticast mode
[  777.213487][T32540] dummy0: entered allmulticast mode
[  777.222843][T32540] nlmon0: entered allmulticast mode
[  777.230859][T32540] caif0: entered allmulticast mode
[  777.236352][T32540] batadv0: entered allmulticast mode
[  777.245638][T32540] vxcan0: entered allmulticast mode
[  777.253330][T32540] vxcan1: entered allmulticast mode
[  777.261860][T32540] veth0: entered allmulticast mode
[  777.270772][T32540] veth1: entered allmulticast mode
[  777.281091][T32540] wg0: entered allmulticast mode
[  777.289954][T32540] wg1: entered allmulticast mode
[  777.297651][T32540] wg2: entered allmulticast mode
[  777.306675][T32540] veth0_to_bridge: entered allmulticast mode
[  777.322377][T32540] veth1_to_bridge: entered allmulticast mode
[  777.334409][T32540] veth0_to_bond: entered allmulticast mode
[  777.344856][T32540] veth1_to_bond: entered allmulticast mode
[  777.354906][T32540] veth0_to_team: entered allmulticast mode
[  777.365926][T32540] veth1_to_team: entered allmulticast mode
[  777.377605][T32540] veth0_to_batadv: entered allmulticast mode
[  777.387005][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.394851][T32540] batadv_slave_0: entered allmulticast mode
[  777.407021][T32540] veth1_to_batadv: entered allmulticast mode
[  777.416333][T32540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  777.426867][T32540] batadv_slave_1: entered allmulticast mode
[  777.440303][T32540] xfrm0: entered allmulticast mode
[  777.449661][T32540] veth0_to_hsr: entered allmulticast mode
[  777.459135][T32540] hsr_slave_0: entered allmulticast mode
[  777.466507][T32540] veth1_to_hsr: entered allmulticast mode
[  777.475361][T32540] hsr_slave_1: entered allmulticast mode
[  777.484385][T32540] hsr0: entered allmulticast mode
[  777.493300][T32540] veth1_virt_wifi: entered allmulticast mode
[  777.503106][T32540] veth0_virt_wifi: entered allmulticast mode
[  777.513670][T32540] virt_wifi0: entered allmulticast mode
[  777.523096][T32540] veth0_vlan: entered allmulticast mode
[  777.538803][T32540] vlan0: entered allmulticast mode
[  777.545570][T32540] vlan1: entered allmulticast mode
[  777.555508][T32540] macvlan0: entered allmulticast mode
[  777.564210][T32540] macvlan1: entered allmulticast mode
[  777.573320][T32540] ipvlan0: entered allmulticast mode
[  777.580433][T32540] ipvlan1: entered allmulticast mode
[  777.590134][T32540] veth1_macvtap: entered allmulticast mode
[  777.600122][T32540] veth0_macvtap: entered allmulticast mode
[  777.616082][T32540] macvtap0: entered allmulticast mode
[  777.626896][T32540] macsec0: entered allmulticast mode
[  777.639214][T32540] geneve0: entered allmulticast mode
[  777.652154][T32540] geneve1: entered allmulticast mode
[  777.660975][T32540] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  777.670716][T32540] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  777.680348][T32540] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  777.710502][T32540] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  777.722344][T32540] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  777.742353][T32540] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode
[  777.753983][T32540] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode
[  777.764097][T32540] bond1: entered allmulticast mode
[  777.780808][T32540] vlan2: left promiscuous mode
[  777.785997][T32540] bridge0: left promiscuous mode
[  777.791374][T32540] vlan2: entered allmulticast mode
[  777.797146][T32540] ip6tnl1: entered allmulticast mode
[  777.804435][T32540] veth2: entered allmulticast mode
[  777.810667][T32540] veth3: entered allmulticast mode
[  777.822303][T32540] macvtap1: left promiscuous mode
[  777.830012][T32540] mac80211_hwsim hwsim71 wlan2: entered allmulticast mode
[  777.838969][T32540] bond2: entered allmulticast mode
[  777.844450][T32540] veth4: entered allmulticast mode
[  777.851210][T32540] veth5: entered allmulticast mode
[  777.862005][T32540] syztnl0: entered allmulticast mode
[  777.870189][T32540] @: entered allmulticast mode
[  777.876922][T32540] mac80211_hwsim hwsim80 wlan3: entered allmulticast mode
[  777.885932][T32540] ;: entered allmulticast mode
[  777.894065][T32540] bond3: entered allmulticast mode
[  777.900890][T32540] bridge1: entered allmulticast mode
[  777.910366][T32540] bridge2: entered allmulticast mode
[  777.950690][T31238] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  777.968636][T31238] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  777.999454][T31238] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  778.014483][T31238] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.034520][T31238] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  778.053979][T31238] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.160524][T31238] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  778.214152][T31238] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.397464][T32590] netlink: 'syz.4.7273': attribute type 3 has an invalid length.
[  778.450507][T32594] No such timeout policy "syz0"
[  778.875957][T32622] netlink: 'syz.3.7288': attribute type 3 has an invalid length.
[  779.393837][T32651] netlink: 'syz.5.7302': attribute type 3 has an invalid length.
[  779.506456][T32662] __nla_validate_parse: 8 callbacks suppressed
[  779.506474][T32662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7305'.
[  780.024617][T32688] netlink: 'syz.1.7314': attribute type 3 has an invalid length.
[  780.146241][T32692] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7316'.
[  780.278968][T32694] nft_compat: unsupported protocol 0
[  780.286410][T32696] netlink: 294 bytes leftover after parsing attributes in process `syz.4.7316'.
[  780.309041][T32696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  780.410709][T26973] Bluetooth: hci2: command 0x0405 tx timeout
[  780.491437][T32704] FAULT_INJECTION: forcing a failure.
[  780.491437][T32704] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  780.534219][T32704] CPU: 1 UID: 0 PID: 32704 Comm: syz.0.7319 Not tainted syzkaller #0 PREEMPT(full) 
[  780.534250][T32704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  780.534266][T32704] Call Trace:
[  780.534275][T32704]  <TASK>
[  780.534286][T32704]  dump_stack_lvl+0xe8/0x150
[  780.534321][T32704]  should_fail_ex+0x412/0x560
[  780.534361][T32704]  _copy_to_user+0x31/0xb0
[  780.534390][T32704]  simple_read_from_buffer+0xe1/0x170
[  780.534427][T32704]  proc_fail_nth_read+0x1bb/0x230
[  780.534469][T32704]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  780.534508][T32704]  ? rw_verify_area+0x2a6/0x4d0
[  780.534532][T32704]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  780.534567][T32704]  vfs_read+0x20c/0xa70
[  780.534590][T32704]  ? fdget_pos+0x246/0x320
[  780.534615][T32704]  ? __pfx___mutex_lock+0x10/0x10
[  780.534650][T32704]  ? __pfx_vfs_read+0x10/0x10
[  780.534677][T32704]  ? __fget_files+0x2a/0x420
[  780.534702][T32704]  ? __fget_files+0x3a0/0x420
[  780.534720][T32704]  ? __fget_files+0x2a/0x420
[  780.534748][T32704]  ksys_read+0x150/0x270
[  780.534776][T32704]  ? __pfx_ksys_read+0x10/0x10
[  780.534812][T32704]  do_syscall_64+0x14d/0xf80
[  780.534840][T32704]  ? trace_irq_disable+0x3b/0x150
[  780.534858][T32704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.534881][T32704]  ? clear_bhb_loop+0x40/0x90
[  780.534920][T32704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.534940][T32704] RIP: 0033:0x7f478e15d04e
[  780.534961][T32704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  780.534981][T32704] RSP: 002b:00007f478f07ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  780.535004][T32704] RAX: ffffffffffffffda RBX: 00007f478f0806c0 RCX: 00007f478e15d04e
[  780.535020][T32704] RDX: 000000000000000f RSI: 00007f478f0800a0 RDI: 0000000000000003
[  780.535037][T32704] RBP: 00007f478f080090 R08: 0000000000000000 R09: 0000000000000000
[  780.535051][T32704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  780.535064][T32704] R13: 00007f478e416038 R14: 00007f478e415fa0 R15: 00007fff42b580a8
[  780.535099][T32704]  </TASK>
[  780.755200][T32710] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  781.117495][T32739] netlink: 'syz.3.7328': attribute type 1 has an invalid length.
[  781.239790][T32739] 8021q: adding VLAN 0 to HW filter on device bond3
[  781.266013][T32742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7330'.
[  781.276421][T32742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7330'.
[  781.334127][T32739] vlan3: entered allmulticast mode
[  781.367052][T32739] bond3: entered allmulticast mode
[  781.420523][T32739] netlink: 'syz.3.7328': attribute type 6 has an invalid length.
[  781.479585][T32745] bond3: (slave gretap1): making interface the new active one
[  781.487437][T32745] gretap1: entered allmulticast mode
[  781.496823][T32745] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  781.544568][T32756] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7332'.
[  781.735751][T32767] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7336'.
[  781.753214][  T301] netlink: 'syz.1.7337': attribute type 1 has an invalid length.
[  781.762150][T32765] netlink: 'syz.3.7335': attribute type 14 has an invalid length.
[  781.770573][  T301] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7337'.
[  781.800805][  T300] netlink: 'syz.3.7335': attribute type 14 has an invalid length.
[  781.819014][T32765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7335'.
[  781.848898][  T300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7335'.
[  781.889923][T32765] netlink: 'syz.3.7335': attribute type 14 has an invalid length.
[  781.889928][T31237] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  781.890092][T31237] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  782.084260][  T300] netlink: 'syz.3.7335': attribute type 14 has an invalid length.
[  782.105541][T31237] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  782.168764][T31237] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  782.349489][  T324] netlink: 'syz.4.7341': attribute type 25 has an invalid length.
[  783.158009][  T374] syzkaller0: entered promiscuous mode
[  783.194165][T12166] tipc: Subscription rejected, illegal request
[  783.198107][  T374] syzkaller0: entered allmulticast mode
[  783.287114][  T380] openvswitch: netlink: IP tunnel dst address not specified
[  783.483688][  T396] netlink: 'syz.1.7365': attribute type 1 has an invalid length.
[  783.517350][  T396] netlink: 'syz.1.7365': attribute type 1 has an invalid length.
[  783.526871][  T396] netlink: 'syz.1.7365': attribute type 1 has an invalid length.
[  784.279133][  T441] ksmbd: Unknown IPC event: 8, ignore.
[  784.551122][  T457] x_tables: unsorted underflow at hook 2
[  784.697508][  T463] bond4: option fail_over_mac: invalid value (16)
[  784.724135][  T463] bond4 (unregistering): Released all slaves
[  784.954924][  T478] __nla_validate_parse: 6 callbacks suppressed
[  784.954947][  T478] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7389'.
[  785.193579][  T493] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7393'.
[  785.928968][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  786.112617][  T534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7407'.
[  786.284879][  T536] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  787.832913][  T528] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7406'.
[  787.859513][  T532] validate_nla: 64 callbacks suppressed
[  787.859538][  T532] netlink: 'syz.5.7407': attribute type 4 has an invalid length.
[  787.942726][  T543] openvswitch: netlink: Missing valid actions attribute.
[  787.950766][  T543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  788.165408][  T565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7413'.
[  788.203055][T28994] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  788.655704][  T592] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  788.672947][  T592] bond5 (unregistering): Released all slaves
[  791.065142][  T551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  791.317320][  T647] xt_TPROXY: Can be used only with -p tcp or -p udp
[  791.404054][  T656] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7436'.
[  791.416915][  T660] x_tables: duplicate underflow at hook 2
[  791.440244][  T659] xt_cgroup: path and classid specified
[  791.464924][  T656] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  791.610094][  T667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7441'.
[  791.824602][  T680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7446'.
[  791.896887][  T681] nbd: must specify at least one socket
[  791.931846][  T688] nbd: must specify at least one socket
[  792.625095][  T727] netlink: 'syz.5.7456': attribute type 1 has an invalid length.
[  792.673023][  T727] 8021q: adding VLAN 0 to HW filter on device bond12
[  792.741928][  T727] vlan4: entered allmulticast mode
[  792.747224][  T727] bond12: entered allmulticast mode
[  792.786605][  T727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7456'.
[  792.884986][  T731] bond12: (slave gretap3): making interface the new active one
[  792.909729][  T731] gretap3: entered allmulticast mode
[  792.931471][  T731] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  793.148572][  T748] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7464'.
[  793.715711][  T781] 8021q: adding VLAN 0 to HW filter on device team0
[  793.734590][  T781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  794.156223][  T814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7488'.
[  794.335046][  T817] syzkaller0: entered promiscuous mode
[  794.350242][  T817] syzkaller0: entered allmulticast mode
[  795.902975][  T888] netlink: 'syz.4.7520': attribute type 3 has an invalid length.
[  796.542091][  T917] tap0: tun_chr_ioctl cmd 1074025673
[  796.575503][  T917] tap0: tun_chr_ioctl cmd 1074025678
[  796.592335][  T917] tap0: group set to 780
[  796.960717][  T947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7539'.
[  797.290730][  T975] netlink: 'syz.3.7547': attribute type 39 has an invalid length.
[  797.308768][  T971] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7545'.
[  797.639914][  T989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7550'.
[  797.649918][  T989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7550'.
[  797.727320][  T995] netlink: 'syz.3.7551': attribute type 30 has an invalid length.
[  797.772903][  T998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  797.785855][  T991] netlink: 'syz.1.7553': attribute type 1 has an invalid length.
[  797.839578][ T1001] netlink: 'syz.1.7553': attribute type 58 has an invalid length.
[  797.847517][ T1001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7553'.
[  797.876433][ T1000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7554'.
[  798.023412][ T1000] bond5: entered promiscuous mode
[  798.064310][ T1000] 8021q: adding VLAN 0 to HW filter on device bond5
[  798.125724][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7554'.
[  798.231034][ T1003] bridge3: entered promiscuous mode
[  798.239755][ T1003] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  798.269990][ T1012] macvlan3: entered promiscuous mode
[  798.275660][ T1012] macvlan3: entered allmulticast mode
[  798.283234][ T1012] bond5: (slave macvlan3): Error -98 calling set_mac_address
[  798.495695][ T1032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7560'.
[  798.535965][ T1035] syz_tun: refused to change device tx_queue_len
[  798.595516][ T1040] sctp: [Deprecated]: syz.5.7563 (pid 1040) Use of struct sctp_assoc_value in delayed_ack socket option.
[  798.595516][ T1040] Use struct sctp_sack_info instead
[  798.669582][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7561'.
[  798.679725][ T1039] sctp: [Deprecated]: syz.5.7563 (pid 1039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  798.679725][ T1039] Use struct sctp_sack_info instead
[  798.704545][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7563'.
[  799.238743][ T1071] netlink: 'syz.5.7570': attribute type 10 has an invalid length.
[  799.405718][ T1087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  799.427435][ T1091] netlink: 'syz.1.7575': attribute type 1 has an invalid length.
[  799.446797][ T1091] netlink: 'syz.1.7575': attribute type 11 has an invalid length.
[  799.607037][ T1065] vxcan1 speed is unknown, defaulting to 1000
[  800.211179][ T1111] syzkaller0: entered promiscuous mode
[  800.221528][ T1111] syzkaller0: entered allmulticast mode
[  800.236103][ T1122] netlink: 'syz.0.7588': attribute type 3 has an invalid length.
[  800.267989][ T1065] wlan1 speed is unknown, defaulting to 1000
[  800.372719][ T1116] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  802.787407][ T1150] __nla_validate_parse: 4 callbacks suppressed
[  802.787431][ T1150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7594'.
[  802.851467][ T1154] xt_ecn: cannot match TCP bits for non-tcp packets
[  803.001349][ T1168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7596'.
[  803.089210][ T1170] netlink: 'syz.1.7599': attribute type 58 has an invalid length.
[  803.099212][ T1170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7599'.
[  803.114790][ T1172] syzkaller0: entered promiscuous mode
[  803.123687][ T1172] syzkaller0: entered allmulticast mode
[  803.217644][ T1177] netlink: 'syz.4.7600': attribute type 3 has an invalid length.
[  803.249523][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7601'.
[  803.430942][   T29] audit: type=1107 audit(1775237988.262:7): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  803.822995][ T1203] FAULT_INJECTION: forcing a failure.
[  803.822995][ T1203] name failslab, interval 1, probability 0, space 0, times 1
[  803.857417][ T1203] CPU: 1 UID: 0 PID: 1203 Comm: syz.0.7608 Not tainted syzkaller #0 PREEMPT(full) 
[  803.857448][ T1203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  803.857463][ T1203] Call Trace:
[  803.857472][ T1203]  <TASK>
[  803.857482][ T1203]  dump_stack_lvl+0xe8/0x150
[  803.857520][ T1203]  should_fail_ex+0x412/0x560
[  803.857607][ T1203]  should_failslab+0xa8/0x100
[  803.857638][ T1203]  __kmalloc_cache_noprof+0x88/0x660
[  803.857665][ T1203]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  803.857700][ T1203]  tcp_sendmsg_fastopen+0x1de/0x5e0
[  803.857739][ T1203]  tcp_sendmsg_locked+0x4bb2/0x5490
[  803.857770][ T1203]  ? aa_file_perm+0x192/0x15e0
[  803.857916][ T1203]  ? tcp_sendmsg_locked+0x291/0x5490
[  803.857947][ T1203]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  803.857984][ T1203]  ? __lock_acquire+0x6b5/0x2cf0
[  803.858023][ T1203]  ? __lock_acquire+0x6b5/0x2cf0
[  803.858079][ T1203]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  803.858116][ T1203]  ? tcp_sendmsg+0x21/0x50
[  803.858147][ T1203]  ? __local_bh_enable_ip+0xd0/0x130
[  803.858176][ T1203]  ? __pfx_inet6_sendmsg+0x10/0x10
[  803.858209][ T1203]  tcp_sendmsg+0x2f/0x50
[  803.858239][ T1203]  __sys_sendto+0x4a3/0x710
[  803.858268][ T1203]  ? __pfx___sys_sendto+0x10/0x10
[  803.858290][ T1203]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  803.858334][ T1203]  ? __fget_files+0x3a0/0x420
[  803.858366][ T1203]  ? ksys_write+0x242/0x270
[  803.858392][ T1203]  ? __pfx_ksys_write+0x10/0x10
[  803.858420][ T1203]  __x64_sys_sendto+0xde/0x100
[  803.858449][ T1203]  do_syscall_64+0x14d/0xf80
[  803.858474][ T1203]  ? trace_irq_disable+0x3b/0x150
[  803.858493][ T1203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.858514][ T1203]  ? clear_bhb_loop+0x40/0x90
[  803.858539][ T1203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.858560][ T1203] RIP: 0033:0x7f478e19c819
[  803.858582][ T1203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  803.858601][ T1203] RSP: 002b:00007f478f080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  803.858624][ T1203] RAX: ffffffffffffffda RBX: 00007f478e415fa0 RCX: 00007f478e19c819
[  803.858639][ T1203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  803.858651][ T1203] RBP: 00007f478f080090 R08: 0000200000000100 R09: 000000000000001c
[  803.858664][ T1203] R10: fffffefffbfbbfbe R11: 0000000000000246 R12: 0000000000000001
[  803.858678][ T1203] R13: 00007f478e416038 R14: 00007f478e415fa0 R15: 00007fff42b580a8
[  803.858714][ T1203]  </TASK>
[  804.108612][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  804.222012][ T1207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  804.273991][ T1216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7612'.
[  804.408890][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7612'.
[  804.491491][ T1227] netlink: 'syz.3.7615': attribute type 1 has an invalid length.
[  804.777110][ T1243] FAULT_INJECTION: forcing a failure.
[  804.777110][ T1243] name failslab, interval 1, probability 0, space 0, times 0
[  804.790603][ T1243] CPU: 0 UID: 0 PID: 1243 Comm: syz.0.7621 Not tainted syzkaller #0 PREEMPT(full) 
[  804.790632][ T1243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  804.790646][ T1243] Call Trace:
[  804.790658][ T1243]  <TASK>
[  804.790669][ T1243]  dump_stack_lvl+0xe8/0x150
[  804.790706][ T1243]  should_fail_ex+0x412/0x560
[  804.790746][ T1243]  should_failslab+0xa8/0x100
[  804.790773][ T1243]  ? dst_alloc+0x105/0x170
[  804.790803][ T1243]  kmem_cache_alloc_noprof+0x87/0x650
[  804.790832][ T1243]  ? __pfx_ip6_dst_gc+0x10/0x10
[  804.790864][ T1243]  dst_alloc+0x105/0x170
[  804.790899][ T1243]  ip6_pol_route+0xafb/0x13d0
[  804.790920][ T1243]  ? ip6_pol_route+0x160/0x13d0
[  804.790946][ T1243]  ? __pfx_ip6_pol_route+0x10/0x10
[  804.790965][ T1243]  ? __lock_acquire+0x6b5/0x2cf0
[  804.791012][ T1243]  fib6_rule_action+0x265/0xc00
[  804.791042][ T1243]  ? __pfx_fib6_rule_action+0x10/0x10
[  804.791069][ T1243]  ? __lock_acquire+0x6b5/0x2cf0
[  804.791098][ T1243]  ? fib6_rule_match+0x79a/0xa80
[  804.791118][ T1243]  ? __pfx_fib6_rule_action+0x10/0x10
[  804.791142][ T1243]  fib_rules_lookup+0x768/0xea0
[  804.791169][ T1243]  ? fib_rules_lookup+0x9b/0xea0
[  804.791195][ T1243]  ? __pfx_fib_rules_lookup+0x10/0x10
[  804.791214][ T1243]  ? l3mdev_update_flow+0x29/0x640
[  804.791238][ T1243]  ? l3mdev_update_flow+0x4d1/0x640
[  804.791266][ T1243]  fib6_rule_lookup+0x1a0/0x730
[  804.791284][ T1243]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  804.791302][ T1243]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  804.791324][ T1243]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  804.791355][ T1243]  ip6_route_output_flags+0x364/0x5d0
[  804.791373][ T1243]  ? ip6_route_output_flags+0x2e/0x5d0
[  804.791393][ T1243]  ip6_dst_lookup_tail+0x2ae/0x15a0
[  804.791417][ T1243]  ? __kernel_text_address+0xd/0x30
[  804.791445][ T1243]  ? unwind_get_return_address+0x4d/0x90
[  804.791477][ T1243]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  804.791505][ T1243]  ? stack_trace_save+0xa9/0x100
[  804.791523][ T1243]  ? __pfx_stack_trace_save+0x10/0x10
[  804.791548][ T1243]  ip6_dst_lookup_flow+0x47/0xe0
[  804.791572][ T1243]  tcp_v6_connect+0xcec/0x1b10
[  804.791598][ T1243]  ? __kmalloc_cache_noprof+0x31c/0x660
[  804.791616][ T1243]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  804.791638][ T1243]  ? tcp_sendmsg_locked+0x4bb2/0x5490
[  804.791675][ T1243]  ? __pfx_tcp_v6_connect+0x10/0x10
[  804.791714][ T1243]  __inet_stream_connect+0x25a/0xdd0
[  804.791749][ T1243]  ? __pfx___inet_stream_connect+0x10/0x10
[  804.791774][ T1243]  ? __kasan_kmalloc+0x93/0xb0
[  804.791796][ T1243]  ? __kmalloc_cache_noprof+0x31c/0x660
[  804.791817][ T1243]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[  804.791838][ T1243]  ? __kmalloc_cache_noprof+0x15b/0x660
[  804.791862][ T1243]  tcp_sendmsg_fastopen+0x3a7/0x5e0
[  804.791892][ T1243]  tcp_sendmsg_locked+0x4bb2/0x5490
[  804.791920][ T1243]  ? aa_file_perm+0x192/0x15e0
[  804.791937][ T1243]  ? tcp_sendmsg_locked+0x291/0x5490
[  804.791959][ T1243]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  804.791989][ T1243]  ? __lock_acquire+0x6b5/0x2cf0
[  804.792023][ T1243]  ? __lock_acquire+0x6b5/0x2cf0
[  804.792070][ T1243]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  804.792100][ T1243]  ? tcp_sendmsg+0x21/0x50
[  804.792126][ T1243]  ? __local_bh_enable_ip+0xd0/0x130
[  804.792150][ T1243]  ? __pfx_inet6_sendmsg+0x10/0x10
[  804.792176][ T1243]  tcp_sendmsg+0x2f/0x50
[  804.792200][ T1243]  __sys_sendto+0x4a3/0x710
[  804.792223][ T1243]  ? __pfx___sys_sendto+0x10/0x10
[  804.792240][ T1243]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  804.792276][ T1243]  ? __fget_files+0x3a0/0x420
[  804.792301][ T1243]  ? ksys_write+0x242/0x270
[  804.792323][ T1243]  ? __pfx_ksys_write+0x10/0x10
[  804.792348][ T1243]  __x64_sys_sendto+0xde/0x100
[  804.792371][ T1243]  do_syscall_64+0x14d/0xf80
[  804.792392][ T1243]  ? trace_irq_disable+0x3b/0x150
[  804.792407][ T1243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.792431][ T1243]  ? clear_bhb_loop+0x40/0x90
[  804.792453][ T1243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.792470][ T1243] RIP: 0033:0x7f478e19c819
[  804.792489][ T1243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.792503][ T1243] RSP: 002b:00007f478f080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  804.792522][ T1243] RAX: ffffffffffffffda RBX: 00007f478e415fa0 RCX: 00007f478e19c819
[  804.792535][ T1243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  804.792545][ T1243] RBP: 00007f478f080090 R08: 0000200000000100 R09: 000000000000001c
[  804.792557][ T1243] R10: fffffefffbfbbfbe R11: 0000000000000246 R12: 0000000000000001
[  804.792568][ T1243] R13: 00007f478e416038 R14: 00007f478e415fa0 R15: 00007fff42b580a8
[  804.792597][ T1243]  </TASK>
[  805.342892][ T1251] openvswitch: netlink: Message has 216 unknown bytes.
[  805.469473][ T1267] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  805.494303][ T1261] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  805.524877][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7627'.
[  805.535295][ T1269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7628'.
[  805.567033][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7627'.
[  805.584449][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7628'.
[  805.613066][ T1270] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  805.650318][ T1278] netlink: 'syz.1.7628': attribute type 4 has an invalid length.
[  806.027631][ T1312] IPv6: NLM_F_CREATE should be specified when creating new route
[  806.070635][ T1311] FAULT_INJECTION: forcing a failure.
[  806.070635][ T1311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  806.151013][ T1311] CPU: 1 UID: 0 PID: 1311 Comm: syz.3.7636 Not tainted syzkaller #0 PREEMPT(full) 
[  806.151044][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  806.151058][ T1311] Call Trace:
[  806.151067][ T1311]  <TASK>
[  806.151077][ T1311]  dump_stack_lvl+0xe8/0x150
[  806.151113][ T1311]  should_fail_ex+0x412/0x560
[  806.151151][ T1311]  _copy_from_user+0x2d/0xb0
[  806.151179][ T1311]  kstrtouint_from_user+0xd6/0x180
[  806.151216][ T1311]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  806.151267][ T1311]  proc_fail_nth_write+0x8e/0x210
[  806.151300][ T1311]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  806.151338][ T1311]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  806.151370][ T1311]  vfs_write+0x29a/0xb90
[  806.151405][ T1311]  ? __pfx_vfs_write+0x10/0x10
[  806.151431][ T1311]  ? __fget_files+0x2a/0x420
[  806.151457][ T1311]  ? __fget_files+0x3a0/0x420
[  806.151475][ T1311]  ? __fget_files+0x2a/0x420
[  806.151503][ T1311]  ksys_write+0x150/0x270
[  806.151540][ T1311]  ? __pfx_ksys_write+0x10/0x10
[  806.151578][ T1311]  do_syscall_64+0x14d/0xf80
[  806.151605][ T1311]  ? trace_irq_disable+0x3b/0x150
[  806.151624][ T1311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.151647][ T1311]  ? clear_bhb_loop+0x40/0x90
[  806.151675][ T1311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  806.151697][ T1311] RIP: 0033:0x7fe2a375d04e
[  806.151717][ T1311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  806.151736][ T1311] RSP: 002b:00007fe2a4687fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  806.151759][ T1311] RAX: ffffffffffffffda RBX: 00007fe2a46886c0 RCX: 00007fe2a375d04e
[  806.151775][ T1311] RDX: 0000000000000001 RSI: 00007fe2a46880a0 RDI: 0000000000000004
[  806.151788][ T1311] RBP: 00007fe2a4688090 R08: 0000000000000000 R09: 0000000000000000
[  806.151801][ T1311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  806.151813][ T1311] R13: 00007fe2a3a16038 R14: 00007fe2a3a15fa0 R15: 00007ffd72e202a8
[  806.151848][ T1311]  </TASK>
[  806.619399][ T1337] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  806.630239][ T1337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  806.979719][ T1360] netlink: 'syz.0.7649': attribute type 1 has an invalid length.
[  806.987594][ T1360] netlink: 'syz.0.7649': attribute type 2 has an invalid length.
[  807.005044][ T1361] netlink: 'syz.4.7650': attribute type 10 has an invalid length.
[  807.013736][ T1361] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  807.023397][ T1361] batman_adv: batadv0: Adding interface: netdevsim0
[  807.031643][ T1360] netlink: 'syz.0.7649': attribute type 1 has an invalid length.
[  807.040453][ T1361] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.068937][ T1361] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  807.166733][ T1365] sctp: [Deprecated]: syz.0.7652 (pid 1365) Use of int in maxseg socket option.
[  807.166733][ T1365] Use struct sctp_assoc_value instead
[  807.320046][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  807.633718][ T1390] netlink: 'syz.5.7662': attribute type 5 has an invalid length.
[  807.888318][ T1403] __nla_validate_parse: 6 callbacks suppressed
[  807.888381][ T1403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7668'.
[  807.909039][ T1403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7668'.
[  808.856032][ T1449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7689'.
[  808.982421][ T1460] xt_hashlimit: size too large, truncated to 1048576
[  809.049402][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  809.061447][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  809.074416][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  809.268768][ T1466] 8021q: adding VLAN 0 to HW filter on device bond0
[  809.301270][ T1466] netlink: 'syz.4.7693': attribute type 1 has an invalid length.
[  809.316859][ T1466] netlink: 'syz.4.7693': attribute type 2 has an invalid length.
[  809.368986][ T1468] syzkaller0: entered promiscuous mode
[  809.375885][ T1468] syzkaller0: entered allmulticast mode
[  809.555582][ T1478] syzkaller0: entered promiscuous mode
[  809.568460][ T1478] syzkaller0: entered allmulticast mode
[  809.585690][ T1484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  809.713127][ T1490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7702'.
[  809.757201][ T1493] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  809.966000][ T1505] xt_hashlimit: size too large, truncated to 1048576
[  810.049678][ T1510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  810.466847][ T1530] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.477000][ T1530] 8021q: adding VLAN 0 to HW filter on device team0
[  810.505640][ T1530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  810.663832][ T1535] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  810.881147][ T1548] xt_hashlimit: size too large, truncated to 1048576
[  810.915633][ T1552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  811.684205][ T1585] netlink: 79 bytes leftover after parsing attributes in process `syz.3.7743'.
[  812.141584][ T1618] netlink: 'syz.4.7754': attribute type 4 has an invalid length.
[  812.822735][ T1662] FAULT_INJECTION: forcing a failure.
[  812.822735][ T1662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  812.868562][ T1662] CPU: 0 UID: 0 PID: 1662 Comm: syz.1.7775 Not tainted syzkaller #0 PREEMPT(full) 
[  812.868593][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  812.868606][ T1662] Call Trace:
[  812.868615][ T1662]  <TASK>
[  812.868625][ T1662]  dump_stack_lvl+0xe8/0x150
[  812.868662][ T1662]  should_fail_ex+0x412/0x560
[  812.868701][ T1662]  _copy_from_user+0x2d/0xb0
[  812.868729][ T1662]  __sys_sendto+0x2b0/0x710
[  812.868758][ T1662]  ? __pfx___sys_sendto+0x10/0x10
[  812.868780][ T1662]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  812.868823][ T1662]  ? __fget_files+0x3a0/0x420
[  812.868854][ T1662]  ? ksys_write+0x242/0x270
[  812.868882][ T1662]  ? __pfx_ksys_write+0x10/0x10
[  812.868912][ T1662]  __x64_sys_sendto+0xde/0x100
[  812.868941][ T1662]  do_syscall_64+0x14d/0xf80
[  812.868979][ T1662]  ? trace_irq_disable+0x3b/0x150
[  812.868998][ T1662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.869020][ T1662]  ? clear_bhb_loop+0x40/0x90
[  812.869047][ T1662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  812.869073][ T1662] RIP: 0033:0x7f98a459c819
[  812.869093][ T1662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.869112][ T1662] RSP: 002b:00007f98a5503028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  812.869134][ T1662] RAX: ffffffffffffffda RBX: 00007f98a4815fa0 RCX: 00007f98a459c819
[  812.869151][ T1662] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000003
[  812.869164][ T1662] RBP: 00007f98a5503090 R08: 0000200000000280 R09: 000000000000001c
[  812.869179][ T1662] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  812.869192][ T1662] R13: 00007f98a4816038 R14: 00007f98a4815fa0 R15: 00007fff1657d7e8
[  812.869227][ T1662]  </TASK>
[  813.314096][ T1685] netlink: 404 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.324791][ T1685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.336997][ T1685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.358385][ T1685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.421083][ T1685] netlink: 'syz.1.7782': attribute type 12 has an invalid length.
[  813.445942][ T1688] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  813.451393][ T1685] netlink: 'syz.1.7782': attribute type 29 has an invalid length.
[  813.467383][ T1685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.480119][ T1685] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7782'.
[  813.490678][ T1687] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  813.523706][ T1695] syzkaller1: entered promiscuous mode
[  813.532485][ T1695] syzkaller1: entered allmulticast mode
[  813.622151][ T1701] FAULT_INJECTION: forcing a failure.
[  813.622151][ T1701] name failslab, interval 1, probability 0, space 0, times 0
[  813.635323][ T1701] CPU: 1 UID: 0 PID: 1701 Comm: syz.1.7789 Not tainted syzkaller #0 PREEMPT(full) 
[  813.635349][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  813.635361][ T1701] Call Trace:
[  813.635371][ T1701]  <TASK>
[  813.635380][ T1701]  dump_stack_lvl+0xe8/0x150
[  813.635410][ T1701]  should_fail_ex+0x412/0x560
[  813.635443][ T1701]  should_failslab+0xa8/0x100
[  813.635468][ T1701]  ? dst_alloc+0x105/0x170
[  813.635493][ T1701]  kmem_cache_alloc_noprof+0x87/0x650
[  813.635517][ T1701]  ? __pfx_ip6_dst_gc+0x10/0x10
[  813.635543][ T1701]  dst_alloc+0x105/0x170
[  813.635571][ T1701]  ip6_pol_route+0xafb/0x13d0
[  813.635587][ T1701]  ? ip6_pol_route+0x160/0x13d0
[  813.635608][ T1701]  ? __pfx_ip6_pol_route+0x10/0x10
[  813.635623][ T1701]  ? __lock_acquire+0x6b5/0x2cf0
[  813.635666][ T1701]  fib6_rule_action+0x265/0xc00
[  813.635691][ T1701]  ? __pfx_fib6_rule_action+0x10/0x10
[  813.635714][ T1701]  ? fib6_rule_match+0x79a/0xa80
[  813.635731][ T1701]  ? __pfx_fib6_rule_action+0x10/0x10
[  813.635751][ T1701]  fib_rules_lookup+0x768/0xea0
[  813.635774][ T1701]  ? fib_rules_lookup+0x9b/0xea0
[  813.635799][ T1701]  ? __pfx_fib_rules_lookup+0x10/0x10
[  813.635818][ T1701]  ? l3mdev_update_flow+0x29/0x640
[  813.635843][ T1701]  ? l3mdev_update_flow+0x4d1/0x640
[  813.635870][ T1701]  fib6_rule_lookup+0x1a0/0x730
[  813.635888][ T1701]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  813.635907][ T1701]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  813.635923][ T1701]  ? ip6_addr_string+0x259/0x300
[  813.635947][ T1701]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  813.635979][ T1701]  ip6_route_output_flags+0x364/0x5d0
[  813.635996][ T1701]  ? ip6_route_output_flags+0x2e/0x5d0
[  813.636016][ T1701]  ip6_dst_lookup_tail+0x1c3/0x15a0
[  813.636049][ T1701]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  813.636069][ T1701]  ? sk_dst_check+0x25/0x480
[  813.636091][ T1701]  ? sk_dst_check+0x25/0x480
[  813.636111][ T1701]  ? sk_dst_check+0x25/0x480
[  813.636125][ T1701]  ? sk_dst_check+0x30e/0x480
[  813.636145][ T1701]  ip6_sk_dst_lookup_flow+0x72b/0x9c0
[  813.636167][ T1701]  ? udpv6_sendmsg+0x180e/0x2560
[  813.636191][ T1701]  udpv6_sendmsg+0x19f0/0x2560
[  813.636218][ T1701]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  813.636245][ T1701]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  813.636289][ T1701]  ? inet_send_prepare+0x1b9/0x270
[  813.636314][ T1701]  ? inet_send_prepare+0x1b9/0x270
[  813.636339][ T1701]  ? inet_send_prepare+0x1b9/0x270
[  813.636360][ T1701]  ? __local_bh_enable_ip+0xd0/0x130
[  813.636383][ T1701]  ? inet_send_prepare+0x1b9/0x270
[  813.636405][ T1701]  ? __pfx_inet6_sendmsg+0x10/0x10
[  813.636432][ T1701]  ? inet6_sendmsg+0xe4/0x120
[  813.636455][ T1701]  ? __pfx_inet6_sendmsg+0x10/0x10
[  813.636481][ T1701]  __sys_sendto+0x4a3/0x710
[  813.636504][ T1701]  ? __pfx___sys_sendto+0x10/0x10
[  813.636522][ T1701]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  813.636557][ T1701]  ? __fget_files+0x3a0/0x420
[  813.636583][ T1701]  ? ksys_write+0x242/0x270
[  813.636605][ T1701]  ? __pfx_ksys_write+0x10/0x10
[  813.636629][ T1701]  __x64_sys_sendto+0xde/0x100
[  813.636660][ T1701]  do_syscall_64+0x14d/0xf80
[  813.636683][ T1701]  ? trace_irq_disable+0x3b/0x150
[  813.636698][ T1701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.636716][ T1701]  ? clear_bhb_loop+0x40/0x90
[  813.636738][ T1701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.636756][ T1701] RIP: 0033:0x7f98a459c819
[  813.636774][ T1701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.636789][ T1701] RSP: 002b:00007f98a5503028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  813.636808][ T1701] RAX: ffffffffffffffda RBX: 00007f98a4815fa0 RCX: 00007f98a459c819
[  813.636821][ T1701] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000003
[  813.636831][ T1701] RBP: 00007f98a5503090 R08: 0000200000000280 R09: 000000000000001c
[  813.636843][ T1701] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[  813.636853][ T1701] R13: 00007f98a4816038 R14: 00007f98a4815fa0 R15: 00007fff1657d7e8
[  813.636882][ T1701]  </TASK>
[  814.116321][   T29] audit: type=1800 audit(1775237998.942:8): pid=1707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7791" name="memory.events" dev="tmpfs" ino=1759 res=0 errno=0
[  814.181357][   T29] audit: type=1804 audit(1775237998.982:9): pid=1707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7791" name="/newroot/343/memory.events" dev="tmpfs" ino=1759 res=1 errno=0
[  814.258592][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms
[  814.266870][    C1] lec:lec_tx_timeout: lec0
[  814.387246][T31238] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  814.652617][ T1738] netlink: 'syz.4.7800': attribute type 32 has an invalid length.
[  814.684472][ T1738] bond6: option coupled_control: invalid value (15)
[  814.695230][ T1738] bond6 (unregistering): Released all slaves
[  814.747184][ T1742] pim6reg1: entered promiscuous mode
[  814.766271][ T1742] pim6reg1: entered allmulticast mode
[  815.114976][ T1762] IPVS: Error connecting to the multicast addr
[  815.131154][ T1757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7803'.
[  815.924534][ T1779] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7809'.
[  816.969002][T26973] Bluetooth: hci0: command 0x0406 tx timeout
[  817.296244][ T1713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  817.456395][ T1781] xt_policy: output policy not valid in PREROUTING and INPUT
[  817.509108][ T1787] xt_HMARK: spi-set and port-set can't be combined
[  817.532729][ T1787] netlink: 'syz.3.7813': attribute type 1 has an invalid length.
[  817.548495][ T1787] netlink: 'syz.3.7813': attribute type 2 has an invalid length.
[  817.584153][ T1787] netlink: 'syz.3.7813': attribute type 1 has an invalid length.
[  817.662452][ T1797] set match dimension is over the limit!
[  817.674835][ T1797] netlink: 'syz.5.7815': attribute type 1 has an invalid length.
[  817.718974][ T1797] 8021q: adding VLAN 0 to HW filter on device bond13
[  817.846244][ T1797] bond13: (slave veth9): Enslaving as an active interface with a down link
[  817.910972][ T1802] bond13: (slave veth11): Enslaving as an active interface with a down link
[  817.928956][ T1802] netlink: 'syz.5.7815': attribute type 1 has an invalid length.
[  817.991765][ T1802] netlink: 'syz.5.7815': attribute type 2 has an invalid length.
[  818.002089][ T1809] syzkaller0: entered promiscuous mode
[  818.007642][ T1809] syzkaller0: entered allmulticast mode
[  818.073607][ T1818] netlink: 'syz.4.7820': attribute type 3 has an invalid length.
[  818.234389][ T1826] openvswitch: netlink: Invalid VLAN frame
[  818.276822][ T1829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7825'.
[  818.425543][ T1840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7829'.
[  818.477689][ T1840] macvlan3: entered allmulticast mode
[  818.492691][ T1840] hsr0: entered allmulticast mode
[  818.504703][ T1840] hsr_slave_0: entered allmulticast mode
[  818.522816][ T1840] hsr_slave_1: entered allmulticast mode
[  818.640692][ T1851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7831'.
[  818.755473][ T1855] gtp0: entered promiscuous mode
[  818.773120][ T1855] gtp0: entered allmulticast mode
[  819.154351][ T1883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  819.342427][ T1894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7843'.
[  819.373604][T31238] bridge_slave_1: left allmulticast mode
[  819.380435][T31238] bridge_slave_1: left promiscuous mode
[  819.397452][T31238] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.416692][T31238] bridge_slave_0: left allmulticast mode
[  819.425588][T31238] bridge_slave_0: left promiscuous mode
[  819.437480][T31238] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.837407][T31238] bond6 (unregistering): (slave geneve5): Releasing active interface
[  819.889833][T31238] bond1 (unregistering): (slave geneve2): Releasing active interface
[  819.991081][ T1921] netlink: 'syz.3.7850': attribute type 3 has an invalid length.
[  820.205224][T31238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  820.217393][T31238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  820.229945][T31238] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  820.240716][T31238] bond0 (unregistering): Released all slaves
[  820.260379][T31238] bond1 (unregistering): Released all slaves
[  820.275867][T31238] bond2 (unregistering): Released all slaves
[  820.294071][T31238] bond3 (unregistering): Released all slaves
[  820.313307][T31238] bond4 (unregistering): Released all slaves
[  820.342031][T31238] bond5 (unregistering): Released all slaves
[  820.371096][T31238] bond6 (unregistering): Released all slaves
[  820.389413][T31238] bond7 (unregistering): Released all slaves
[  820.404487][T31238] bond8 (unregistering): Released all slaves
[  820.621037][T31238] : left promiscuous mode
[  820.761357][T31238] tipc: Left network mode
[  820.914147][ T1945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.924027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.948353][ T1945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.957906][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.966770][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.975871][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.453876][T31238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  822.478462][T31238] batman_adv: batadv0: Removing interface: batadv_slave_0
[  822.495870][T31238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  822.504388][T31238] batman_adv: batadv0: Removing interface: batadv_slave_1
[  822.530683][T31238] veth0_macvtap: left promiscuous mode
[  822.536614][T31238] batadv_slave_1: left promiscuous mode
[  822.564375][T31238] veth1_macvtap: left promiscuous mode
[  822.582404][T31238] veth1_vlan: left promiscuous mode
[  822.598669][T31238] veth0_vlan: left promiscuous mode
[  823.106504][   T35] smc: removing ib device syz1
[  823.481600][T14070] syz1: Port: 1 Link DOWN
[  823.505615][ T2038] ipvlan2: entered promiscuous mode
[  823.652206][ T2041] xt_connbytes: Forcing CT accounting to be enabled
[  823.981502][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'.
[  824.020519][ T2055] netlink: 'syz.4.7898': attribute type 2 has an invalid length.
[  824.046223][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'.
[  824.057434][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'.
[  824.087257][ T2055] netlink: 'syz.4.7898': attribute type 2 has an invalid length.
[  824.107642][ T2061] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  824.113535][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'.
[  824.855533][T26973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  824.871292][T26973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  824.880678][T26973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  824.898925][T26973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  824.906836][T26973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  826.023522][ T2086] xt_hashlimit: size too large, truncated to 1048576
[  826.212518][ T2091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.240939][ T2091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.271034][ T2091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.332912][ T2090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.348647][ T2090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.579242][ T2078] vxcan1 speed is unknown, defaulting to 1000
[  826.589925][ T2099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.599890][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.968195][T26973] Bluetooth: hci4: command tx timeout
[  827.299891][ T2127] netlink: 'syz.1.7925': attribute type 64 has an invalid length.
[  827.309422][ T2127] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7925'.
[  828.050219][ T2078] wlan1 speed is unknown, defaulting to 1000
[  828.108722][ T2104] siw: device registration error -23
[  828.271371][T31238] IPVS: stop unused estimator thread 0...
[  828.291434][ T2152] bridge0: port 3(syz_tun) entered blocking state
[  828.319002][ T2152] bridge0: port 3(syz_tun) entered disabled state
[  828.357451][ T2152] syz_tun: entered allmulticast mode
[  828.388400][ T2152] syz_tun: entered promiscuous mode
[  828.440620][ T2152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7934'.
[  828.794108][ T2181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7938'.
[  828.952788][T31237] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 34405 - 0
[  829.050877][T26973] Bluetooth: hci4: command tx timeout
[  829.105752][ T1109] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 34405 - 0
[  829.149659][ T2078] chnl_net:caif_netlink_parms(): no params data found
[  829.217198][  T152] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 34405 - 0
[  829.372792][ T2205] smc: net device team0 applied user defined pnetid SYZ2
[  829.432109][ T1109] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 34405 - 0
[  829.624641][ T2227] netlink: 408 bytes leftover after parsing attributes in process `syz.0.7952'.
[  829.755850][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7954'.
[  830.007431][T31238] bridge_slave_1: left allmulticast mode
[  830.013872][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.030556][T31238] bridge_slave_1: left promiscuous mode
[  830.036818][T31238] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.449061][T31238] bond12 (unregistering): (slave gretap3): Releasing active interface
[  830.457657][T31238] gretap3 (unregistering): left allmulticast mode
[  830.514428][T31238] bond10 (unregistering): (slave geneve2): Releasing active interface
[  830.589208][T31238] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  830.913289][T31238] bond9 (unregistering): (slave bridge5): Removing an active aggregator
[  830.924323][T31238] bond9 (unregistering): (slave bridge5): Releasing backup interface
[  830.934468][T31238] bridge5 (unregistering): left promiscuous mode
[  830.942950][T31238] bridge5 (unregistering): left allmulticast mode
[  831.008100][T31238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  831.020169][T31238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  831.033507][T31238] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  831.045527][T31238] bond0 (unregistering): Released all slaves
[  831.063317][T31238] bond1 (unregistering): Released all slaves
[  831.083991][T31238] bond2 (unregistering): Released all slaves
[  831.105642][T31238] bond3 (unregistering): Released all slaves
[  831.127924][T26973] Bluetooth: hci4: command tx timeout
[  831.136770][T31238] bond4 (unregistering): Released all slaves
[  831.167343][T31238] bond5 (unregistering): Released all slaves
[  831.191234][T31238] bond6 (unregistering): (slave veth5): Releasing active interface
[  831.210952][T31238] bond6 (unregistering): Released all slaves
[  831.230122][T31238] bond7 (unregistering): Released all slaves
[  831.250779][T31238] bond8 (unregistering): Released all slaves
[  831.275609][T31238] bond9 (unregistering): Released all slaves
[  831.303836][T31238] bond10 (unregistering): Released all slaves
[  831.324624][T31238] bond11 (unregistering): (slave vxcan3): Releasing backup interface
[  831.342858][T31238] bond11 (unregistering): Released all slaves
[  831.370498][T31238] bond12 (unregistering): Released all slaves
[  831.391501][T31238] bond13 (unregistering): (slave veth9): Releasing active interface
[  831.415768][T31238] bond13 (unregistering): (slave veth11): Releasing active interface
[  831.426819][T31238] bond13 (unregistering): Released all slaves
[  831.532553][ T7289] lec:lec_start_xmit: lec0:No lecd attached
[  831.608957][ T2078] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.618051][ T2078] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.656398][ T2078] bridge_slave_0: entered allmulticast mode
[  831.692875][ T2251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7957'.
[  831.703991][ T2078] bridge_slave_0: entered promiscuous mode
[  831.742869][ T2078] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.743516][ T2257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7957'.
[  831.761304][ T2078] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.769894][ T2078] bridge_slave_1: entered allmulticast mode
[  831.783424][ T2078] bridge_slave_1: entered promiscuous mode
[  831.804088][T31238] : left promiscuous mode
[  831.923392][ T2260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7960'.
[  831.965673][T31238] vþ: left promiscuous mode
[  832.022649][ T2260] ip6gre1: entered promiscuous mode
[  832.055283][ T2078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.110670][ T2078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.185688][ T2268] ipt_ECN: cannot use operation on non-tcp rule
[  832.204564][T31238] tipc: Disabling bearer <eth:macvtap0>
[  832.229866][T31238] tipc: Left network mode
[  832.337534][ T2078] team0: Port device team_slave_0 added
[  832.505235][ T2078] team0: Port device team_slave_1 added
[  832.764162][ T2078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.787845][ T2078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.839140][ T2078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.853583][ T2078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.861247][ T2078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.894257][ T2078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.169720][ T2078] hsr_slave_0: entered promiscuous mode
[  833.176829][ T2078] hsr_slave_1: entered promiscuous mode
[  833.199147][ T2078] debugfs: 'hsr0' already exists in 'hsr'
[  833.214763][ T2078] Cannot create hsr debugfs directory
[  833.224158][T26973] Bluetooth: hci4: command tx timeout
[  833.536965][ T2332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7976'.
[  833.550300][ T2327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  833.791923][ T1109] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  834.243898][ T2078] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 34405 - 0
[  834.353366][ T2078] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34405 - 0
[  834.486067][ T2078] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34405 - 0
[  834.587418][ T2346] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  834.609275][ T2078] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34405 - 0
[  834.629817][ T2346] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  834.675898][ T2387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.695463][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.706824][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.738378][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.786061][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.796250][ T2346] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  834.810122][ T2346] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  834.823853][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.875519][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.890191][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.900575][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.913188][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7988'.
[  834.978982][ T2346] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  834.989546][ T2346] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  835.025459][ T2346] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  835.063351][ T2346] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  835.154499][ T2346] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  835.164889][ T2346] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  835.698180][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.707618][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.718389][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.728903][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.737532][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.748063][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.757247][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.766296][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.780137][ T2424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.672717][ T2338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  836.689178][ T2078] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  836.715454][ T2078] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  836.812765][ T2078] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  836.847490][ T2078] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  837.190659][ T2078] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.207774][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms
[  837.215853][    C1] lec:lec_tx_timeout: lec0
[  837.269876][ T2078] 8021q: adding VLAN 0 to HW filter on device team0
[  837.307119][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.314409][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.365890][T29007] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.373240][T29007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.556663][T31238] hsr_slave_0: left promiscuous mode
[  837.574437][T31238] batman_adv: batadv0: Removing interface: batadv_slave_0
[  837.606731][T31238] batman_adv: batadv0: Removing interface: batadv_slave_1
[  837.693196][ T2513] netlink: 'syz.4.8005': attribute type 2 has an invalid length.
[  837.712568][ T2513] netlink: 'syz.4.8005': attribute type 2 has an invalid length.
[  838.366185][T31238] team0 (unregistering): Port device team_slave_1 removed
[  838.589611][T31238] team0 (unregistering): Port device dummy0 removed
[  838.643611][ T2537] netdevsim netdevsim1: Direct firmware load for 0 failed with error -2
[  838.656857][ T2537] netdevsim netdevsim1: Falling back to sysfs fallback for: 0
[  839.319532][ T2599] netlink: 'syz.0.8018': attribute type 1 has an invalid length.
[  839.489808][ T2599] bond5: entered promiscuous mode
[  839.551045][ T2599] 8021q: adding VLAN 0 to HW filter on device bond5
[  839.659512][ T2601] bond5: (slave bridge10): making interface the new active one
[  839.712193][ T2601] bridge10: entered promiscuous mode
[  839.723521][ T2601] bond5: (slave bridge10): Enslaving as an active interface with an up link
[  839.869895][ T2078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.882364][ T2633] net_ratelimit: 68 callbacks suppressed
[  839.882385][ T2633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  839.927454][T31238] IPVS: stop unused estimator thread 0...
[  840.709912][ T2697] __nla_validate_parse: 50 callbacks suppressed
[  840.709935][ T2697] netlink: 5172 bytes leftover after parsing attributes in process `syz.1.8032'.
[  841.183723][ T2078] veth0_vlan: entered promiscuous mode
[  841.315421][ T2727] netlink: 'syz.4.8039': attribute type 1 has an invalid length.
[  841.325250][ T2728] syzkaller1: entered promiscuous mode
[  841.331400][ T2728] syzkaller1: entered allmulticast mode
[  841.343739][ T2078] veth1_vlan: entered promiscuous mode
[  841.466513][ T2078] veth0_macvtap: entered promiscuous mode
[  841.474404][ T2736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8040'.
[  841.521675][ T2078] veth1_macvtap: entered promiscuous mode
[  841.627578][ T2744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8044'.
[  841.707311][ T2078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.784104][ T2078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.804392][ T3565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.837433][ T3565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.874219][ T3565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.918670][ T3565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.010815][ T2770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  842.530742][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.569925][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.695684][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.737335][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.039490][ T2828] FAULT_INJECTION: forcing a failure.
[  843.039490][ T2828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  843.071739][ T2828] CPU: 0 UID: 0 PID: 2828 Comm: syz.3.8057 Not tainted syzkaller #0 PREEMPT(full) 
[  843.071772][ T2828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  843.071787][ T2828] Call Trace:
[  843.071796][ T2828]  <TASK>
[  843.071806][ T2828]  dump_stack_lvl+0xe8/0x150
[  843.071843][ T2828]  should_fail_ex+0x412/0x560
[  843.071882][ T2828]  _copy_from_user+0x2d/0xb0
[  843.071910][ T2828]  ___sys_recvmsg+0x175/0x590
[  843.071946][ T2828]  ? __pfx____sys_recvmsg+0x10/0x10
[  843.071999][ T2828]  ? __fget_files+0x3a0/0x420
[  843.072032][ T2828]  do_recvmmsg+0x334/0x800
[  843.072075][ T2828]  ? __pfx_do_recvmmsg+0x10/0x10
[  843.072125][ T2828]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  843.072174][ T2828]  __x64_sys_recvmmsg+0x198/0x250
[  843.072206][ T2828]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  843.072248][ T2828]  do_syscall_64+0x14d/0xf80
[  843.072275][ T2828]  ? trace_irq_disable+0x3b/0x150
[  843.072295][ T2828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.072317][ T2828]  ? clear_bhb_loop+0x40/0x90
[  843.072344][ T2828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.072366][ T2828] RIP: 0033:0x7fe2a379c819
[  843.072386][ T2828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.072405][ T2828] RSP: 002b:00007fe2a4688028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  843.072428][ T2828] RAX: ffffffffffffffda RBX: 00007fe2a3a15fa0 RCX: 00007fe2a379c819
[  843.072444][ T2828] RDX: 0000000000000001 RSI: 0000200000004dc0 RDI: 0000000000000003
[  843.072458][ T2828] RBP: 00007fe2a4688090 R08: 0000000000000000 R09: 0000000000000000
[  843.072471][ T2828] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001
[  843.072484][ T2828] R13: 00007fe2a3a16038 R14: 00007fe2a3a15fa0 R15: 00007ffd72e202a8
[  843.072518][ T2828]  </TASK>
[  843.239177][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  843.592634][ T2841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8061'.
[  843.691322][ T2844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8062'.
[  844.118493][ T2881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8068'.
[  844.138900][ T2869] netlink: 648 bytes leftover after parsing attributes in process `syz.0.8067'.
[  844.174793][ T2874] netlink: 648 bytes leftover after parsing attributes in process `syz.0.8067'.
[  844.187014][ T2881] netlink: 'syz.4.8068': attribute type 21 has an invalid length.
[  844.215868][ T2881] netlink: 'syz.4.8068': attribute type 22 has an invalid length.
[  844.269891][ T2888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8068'.
[  844.319879][ T2881] netlink: 'syz.4.8068': attribute type 23 has an invalid length.
[  844.351680][ T2890] netlink: 'syz.4.8068': attribute type 3 has an invalid length.
[  844.361737][ T2881] netlink: 'syz.4.8068': attribute type 25 has an invalid length.
[  844.386303][ T2892] FAULT_INJECTION: forcing a failure.
[  844.386303][ T2892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  844.387481][ T2888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8068'.
[  844.438794][ T2892] CPU: 1 UID: 0 PID: 2892 Comm: syz.5.8070 Not tainted syzkaller #0 PREEMPT(full) 
[  844.438825][ T2892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  844.438839][ T2892] Call Trace:
[  844.438848][ T2892]  <TASK>
[  844.438857][ T2892]  dump_stack_lvl+0xe8/0x150
[  844.438892][ T2892]  should_fail_ex+0x412/0x560
[  844.438929][ T2892]  _copy_to_user+0x31/0xb0
[  844.438956][ T2892]  simple_read_from_buffer+0xe1/0x170
[  844.438994][ T2892]  proc_fail_nth_read+0x1bb/0x230
[  844.439028][ T2892]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  844.439194][ T2892]  ? rw_verify_area+0x2a6/0x4d0
[  844.439218][ T2892]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  844.439252][ T2892]  vfs_read+0x20c/0xa70
[  844.439274][ T2892]  ? fdget_pos+0x246/0x320
[  844.439299][ T2892]  ? __pfx_do_recvmmsg+0x10/0x10
[  844.439332][ T2892]  ? __pfx___mutex_lock+0x10/0x10
[  844.439361][ T2892]  ? __pfx_vfs_read+0x10/0x10
[  844.439388][ T2892]  ? __fget_files+0x2a/0x420
[  844.439412][ T2892]  ? __fget_files+0x3a0/0x420
[  844.439431][ T2892]  ? __fget_files+0x2a/0x420
[  844.439461][ T2892]  ksys_read+0x150/0x270
[  844.439487][ T2892]  ? __pfx_ksys_read+0x10/0x10
[  844.439523][ T2892]  do_syscall_64+0x14d/0xf80
[  844.439551][ T2892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.439573][ T2892]  ? clear_bhb_loop+0x40/0x90
[  844.439599][ T2892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.439622][ T2892] RIP: 0033:0x7f18b495d04e
[  844.439642][ T2892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  844.439659][ T2892] RSP: 002b:00007f18b5926fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  844.439682][ T2892] RAX: ffffffffffffffda RBX: 00007f18b59276c0 RCX: 00007f18b495d04e
[  844.439698][ T2892] RDX: 000000000000000f RSI: 00007f18b59270a0 RDI: 0000000000000004
[  844.439711][ T2892] RBP: 00007f18b5927090 R08: 0000000000000000 R09: 0000000000000000
[  844.439724][ T2892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  844.439737][ T2892] R13: 00007f18b4c16038 R14: 00007f18b4c15fa0 R15: 00007fff6bcdd098
[  844.439771][ T2892]  </TASK>
[  844.772928][ T2900] netlink: 'syz.0.8073': attribute type 1 has an invalid length.
[  844.844377][ T2902] netlink: 'syz.1.8074': attribute type 21 has an invalid length.
[  845.019246][ T2902] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  845.064485][ T2902] bond4 (unregistering): Released all slaves
[  845.225127][ T2928] netlink: 'syz.5.8081': attribute type 12 has an invalid length.
[  845.838012][ T2963] netlink: 'syz.0.8091': attribute type 1 has an invalid length.
[  845.845826][ T2963] netlink: 'syz.0.8091': attribute type 2 has an invalid length.
[  845.912298][ T2965] __nla_validate_parse: 1 callbacks suppressed
[  845.912320][ T2965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8092'.
[  845.955966][ T2968] netlink: 'syz.5.8093': attribute type 11 has an invalid length.
[  845.987179][ T2968] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8093'.
[  846.114377][ T2978] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8096'.
[  846.173911][ T2978] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8096'.
[  846.531145][ T3005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8107'.
[  846.572981][ T3005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8107'.
[  846.802973][ T3015] ip6erspan0: entered allmulticast mode
[  846.816397][ T3014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8109'.
[  846.981417][ T3014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8109'.
[  847.013738][ T3017] veth3: entered promiscuous mode
[  847.032126][ T3017] bond5: (slave veth3): Enslaving as an active interface with an up link
[  847.078584][ T3014] 8021q: adding VLAN 0 to HW filter on device bond5
[  847.265928][ T3040] netlink: 53 bytes leftover after parsing attributes in process `syz.4.8120'.
[  847.431444][ T3044] pimreg: tun_chr_ioctl cmd 2148553947
[  847.492749][ T3050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8125'.
[  848.217034][ T3083] syzkaller0: entered promiscuous mode
[  848.229797][ T3083] syzkaller0: entered allmulticast mode
[  848.236971][ T3085] 8021q: VLANs not supported on lo
[  848.268688][ T3094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.277454][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.511290][ T3090] vxcan1 speed is unknown, defaulting to 1000
[  850.824073][ T3115] batadv_slave_0: entered promiscuous mode
[  850.850513][ T3114] batadv_slave_0: left promiscuous mode
[  850.869290][ T3113] ------------[ cut here ]------------
[  850.872474][ T3118] validate_nla: 1 callbacks suppressed
[  850.872537][ T3118] netlink: 'syz.3.8152': attribute type 4 has an invalid length.
[  850.875220][ T3113] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  850.916921][ T3113] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.3.8152/3113
[  850.929727][ T3113] Modules linked in:
[  850.933844][ T3113] CPU: 0 UID: 0 PID: 3113 Comm: syz.3.8152 Not tainted syzkaller #0 PREEMPT(full) 
[  850.944246][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  850.955394][ T3113] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  850.962918][ T3113] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  850.983123][ T3113] RSP: 0018:ffffc90005a56eb0 EFLAGS: 00010246
[  850.989967][ T3113] RAX: dffffc0000000000 RBX: 1ffff11004ac7c4a RCX: 00000000ffffdfcd
[  850.998197][ T3113] RDX: ffffffff8bd474e0 RSI: ffffffff8bd4fe20 RDI: ffffffff9015d6d0
[  851.006493][ T3113] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  851.015118][ T3113] R10: ffff88802563e358 R11: 1ffff11004ac7c50 R12: ffff88802563e250
[  851.024314][ T3113] R13: 00000000ffffdfcd R14: 1ffff11004ac7c49 R15: 00000000ffffdfcc
[  851.033536][ T3113] FS:  00007fe2a46886c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
[  851.043997][ T3113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  851.052672][ T3113] CR2: 00007f98a464edd5 CR3: 00000000602ca000 CR4: 00000000003526f0
[  851.061863][ T3113] Call Trace:
[  851.065311][ T3113]  <TASK>
[  851.068969][ T3113]  reg_set_min_max+0x264/0x340
[  851.073910][ T3113]  check_cond_jmp_op+0x1dbb/0x31a0
[  851.080410][ T3113]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  851.085955][ T3113]  ? compute_scc_callchain+0x2f9/0x350
[  851.092354][ T3113]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  851.099221][ T3113]  do_check+0x7970/0x10610
[  851.103775][ T3113]  ? __pfx_do_check+0x10/0x10
[  851.109964][ T3113]  ? init_func_state+0x1ab2/0x28d0
[  851.115338][ T3113]  do_check_common+0x19c8/0x25b0
[  851.120995][ T3113]  bpf_check+0x5f3e/0x1ce00
[  851.125602][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.131559][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.136933][ T3113]  ? __mutex_trylock_common+0x158/0x260
[  851.142877][ T3113]  ? __pfx___mutex_trylock_common+0x10/0x10
[  851.150232][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.155251][ T3113]  ? css_rstat_updated+0x23a/0x530
[  851.161024][ T3113]  ? __pfx_css_rstat_updated+0x10/0x10
[  851.166559][ T3113]  ? pcpu_alloc_noprof+0xe8f/0x19c0
[  851.172467][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.177495][ T3113]  ? __pfx_bpf_check+0x10/0x10
[  851.183763][ T3113]  ? pcpu_memcg_post_alloc_hook+0x77/0x580
[  851.190283][ T3113]  ? pcpu_memcg_post_alloc_hook+0x44a/0x580
[  851.196350][ T3113]  ? ktime_get_with_offset+0x93/0x2a0
[  851.202385][ T3113]  ? ktime_get_with_offset+0x93/0x2a0
[  851.209063][ T3113]  ? __asan_memset+0x22/0x50
[  851.213859][ T3113]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  851.219778][ T3113]  ? security_bpf_prog_load+0x125/0x3c0
[  851.225586][ T3113]  bpf_prog_load+0x1484/0x1ae0
[  851.231112][ T3113]  ? __pfx_bpf_prog_load+0x10/0x10
[  851.236701][ T3113]  ? tomoyo_path_number_perm+0x219/0x630
[  851.243941][ T3113]  ? bpf_lsm_bpf+0x9/0x20
[  851.248986][ T3113]  ? security_bpf+0x7e/0x2d0
[  851.253682][ T3113]  __sys_bpf+0x618/0x950
[  851.258697][ T3113]  ? __pfx___sys_bpf+0x10/0x10
[  851.263544][ T3113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  851.270606][ T3113]  ? __pfx_kcov_ioctl+0x10/0x10
[  851.275649][ T3113]  __x64_sys_bpf+0x7c/0x90
[  851.280382][ T3113]  do_syscall_64+0x14d/0xf80
[  851.285127][ T3113]  ? trace_irq_disable+0x3b/0x150
[  851.291812][ T3113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.298888][ T3113]  ? clear_bhb_loop+0x40/0x90
[  851.303735][ T3113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.310403][ T3113] RIP: 0033:0x7fe2a379c819
[  851.314893][ T3113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.336272][ T3113] RSP: 002b:00007fe2a4688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  851.345947][ T3113] RAX: ffffffffffffffda RBX: 00007fe2a3a15fa0 RCX: 00007fe2a379c819
[  851.354804][ T3113] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  851.363835][ T3113] RBP: 00007fe2a3832c91 R08: 0000000000000000 R09: 0000000000000000
[  851.372462][ T3113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  851.381217][ T3113] R13: 00007fe2a3a16038 R14: 00007fe2a3a15fa0 R15: 00007ffd72e202a8
[  851.390249][ T3113]  </TASK>
[  851.393357][ T3113] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  851.400758][ T3113] CPU: 0 UID: 0 PID: 3113 Comm: syz.3.8152 Not tainted syzkaller #0 PREEMPT(full) 
[  851.410123][ T3113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  851.420214][ T3113] Call Trace:
[  851.423523][ T3113]  <TASK>
[  851.426481][ T3113]  vpanic+0x56c/0xa60
[  851.430527][ T3113]  ? __pfx__printk+0x10/0x10
[  851.435141][ T3113]  ? __pfx_vpanic+0x10/0x10
[  851.439673][ T3113]  ? is_bpf_text_address+0x292/0x2b0
[  851.445001][ T3113]  ? is_bpf_text_address+0x26/0x2b0
[  851.450240][ T3113]  panic+0xc5/0xd0
[  851.454008][ T3113]  ? __pfx_panic+0x10/0x10
[  851.458478][ T3113]  __warn+0x315/0x4f0
[  851.462514][ T3113]  ? reg_bounds_sanity_check+0x201/0xc30
[  851.468187][ T3113]  ? reg_bounds_sanity_check+0x201/0xc30
[  851.473860][ T3113]  __report_bug+0x29a/0x540
[  851.478565][ T3113]  ? __pfx_stack_trace_save+0x10/0x10
[  851.483962][ T3113]  ? reg_bounds_sanity_check+0x201/0xc30
[  851.489621][ T3113]  ? __pfx___report_bug+0x10/0x10
[  851.494678][ T3113]  ? check_cond_jmp_op+0x1c5b/0x31a0
[  851.499998][ T3113]  ? do_check+0x7970/0x10610
[  851.504666][ T3113]  ? do_check_common+0x19c8/0x25b0
[  851.509946][ T3113]  ? bpf_check+0x5f3e/0x1ce00
[  851.514704][ T3113]  ? bpf_prog_load+0x1484/0x1ae0
[  851.519679][ T3113]  ? __sys_bpf+0x618/0x950
[  851.524136][ T3113]  ? __x64_sys_bpf+0x7c/0x90
[  851.528764][ T3113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.534873][ T3113]  report_bug_entry+0x19a/0x290
[  851.539943][ T3113]  ? reg_bounds_sanity_check+0x3e6/0xc30
[  851.545801][ T3113]  ? reg_bounds_sanity_check+0x3eb/0xc30
[  851.551602][ T3113]  handle_bug+0xce/0x200
[  851.556073][ T3113]  exc_invalid_op+0x1a/0x50
[  851.560812][ T3113]  asm_exc_invalid_op+0x1a/0x20
[  851.565708][ T3113] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  851.572029][ T3113] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  851.591668][ T3113] RSP: 0018:ffffc90005a56eb0 EFLAGS: 00010246
[  851.597792][ T3113] RAX: dffffc0000000000 RBX: 1ffff11004ac7c4a RCX: 00000000ffffdfcd
[  851.605897][ T3113] RDX: ffffffff8bd474e0 RSI: ffffffff8bd4fe20 RDI: ffffffff9015d6d0
[  851.613928][ T3113] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  851.622131][ T3113] R10: ffff88802563e358 R11: 1ffff11004ac7c50 R12: ffff88802563e250
[  851.630249][ T3113] R13: 00000000ffffdfcd R14: 1ffff11004ac7c49 R15: 00000000ffffdfcc
[  851.638317][ T3113]  reg_set_min_max+0x264/0x340
[  851.643167][ T3113]  check_cond_jmp_op+0x1dbb/0x31a0
[  851.648378][ T3113]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  851.654193][ T3113]  ? compute_scc_callchain+0x2f9/0x350
[  851.659720][ T3113]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  851.665736][ T3113]  do_check+0x7970/0x10610
[  851.670233][ T3113]  ? __pfx_do_check+0x10/0x10
[  851.675024][ T3113]  ? init_func_state+0x1ab2/0x28d0
[  851.680170][ T3113]  do_check_common+0x19c8/0x25b0
[  851.685161][ T3113]  bpf_check+0x5f3e/0x1ce00
[  851.689788][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.694853][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.699886][ T3113]  ? __mutex_trylock_common+0x158/0x260
[  851.705491][ T3113]  ? __pfx___mutex_trylock_common+0x10/0x10
[  851.711520][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.716501][ T3113]  ? css_rstat_updated+0x23a/0x530
[  851.721638][ T3113]  ? __pfx_css_rstat_updated+0x10/0x10
[  851.727125][ T3113]  ? pcpu_alloc_noprof+0xe8f/0x19c0
[  851.732362][ T3113]  ? __lock_acquire+0x6b5/0x2cf0
[  851.737354][ T3113]  ? __pfx_bpf_check+0x10/0x10
[  851.742168][ T3113]  ? pcpu_memcg_post_alloc_hook+0x77/0x580
[  851.748063][ T3113]  ? pcpu_memcg_post_alloc_hook+0x44a/0x580
[  851.754016][ T3113]  ? ktime_get_with_offset+0x93/0x2a0
[  851.759426][ T3113]  ? ktime_get_with_offset+0x93/0x2a0
[  851.764829][ T3113]  ? __asan_memset+0x22/0x50
[  851.769443][ T3113]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  851.774676][ T3113]  ? security_bpf_prog_load+0x125/0x3c0
[  851.780265][ T3113]  bpf_prog_load+0x1484/0x1ae0
[  851.785071][ T3113]  ? __pfx_bpf_prog_load+0x10/0x10
[  851.790205][ T3113]  ? tomoyo_path_number_perm+0x219/0x630
[  851.795983][ T3113]  ? bpf_lsm_bpf+0x9/0x20
[  851.800350][ T3113]  ? security_bpf+0x7e/0x2d0
[  851.804979][ T3113]  __sys_bpf+0x618/0x950
[  851.809248][ T3113]  ? __pfx___sys_bpf+0x10/0x10
[  851.814047][ T3113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  851.820168][ T3113]  ? __pfx_kcov_ioctl+0x10/0x10
[  851.825148][ T3113]  __x64_sys_bpf+0x7c/0x90
[  851.829766][ T3113]  do_syscall_64+0x14d/0xf80
[  851.834385][ T3113]  ? trace_irq_disable+0x3b/0x150
[  851.839428][ T3113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.845800][ T3113]  ? clear_bhb_loop+0x40/0x90
[  851.850601][ T3113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.856644][ T3113] RIP: 0033:0x7fe2a379c819
[  851.861094][ T3113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.881172][ T3113] RSP: 002b:00007fe2a4688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  851.889618][ T3113] RAX: ffffffffffffffda RBX: 00007fe2a3a15fa0 RCX: 00007fe2a379c819
[  851.897702][ T3113] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  851.905711][ T3113] RBP: 00007fe2a3832c91 R08: 0000000000000000 R09: 0000000000000000
[  851.913710][ T3113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  851.921698][ T3113] R13: 00007fe2a3a16038 R14: 00007fe2a3a15fa0 R15: 00007ffd72e202a8
[  851.929721][ T3113]  </TASK>
[  851.933364][ T3113] Kernel Offset: disabled
[  851.937736][ T3113] Rebooting in 86400 seconds..