last executing test programs:

6.586739478s ago: executing program 1 (id=3715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x210}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x3, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.105379613s ago: executing program 1 (id=3718):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x2030}, &(0x7f0000000380)=0x8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x10, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'syztnl0\x00', <r3=>0x0, 0x2f, 0x9, 0x2, 0x4, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x8000, 0x40, 0x475, 0x4}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000840)=ANY=[@ANYBLOB='\f\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="c40102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000034000400d400050101000100d5f59f05010000000300031d08000000008001c30600000001000081010000000a000801070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000001003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040004000b0effffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400faffffff080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="5802028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES64, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="bc0002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000010000000000000000000500030005000000090004006861736800000000080001008f623efcbbc14f2eb7cd8ad53278c55c82525fba2d9bc464f748b5a39a9a25e09fc2bcb634bc5627f5cafb866e0e", @ANYRES32=0x0, @ANYBLOB="78010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r3, @ANYBLOB="90091852ebd19555281e92e112ca5dbbbe209b80c47b828eec110927277ed95340f3ba2c50f00b0aebbfa9b7cda7adc66e66765e8451c358df81b6f752e472019c1963e07020b2ffffb3614d"], 0x90c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008841)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
close(r2)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmmsg$inet(r2, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="a83b9a870bd595ba8c1b2dd8083aa359f4d8446f3bbfc4395f8c0c2ed552be82378da316a8f12eae576b7c96bdf9a40ad9b01bd111d9b7d67dc68d91c059a7f61fdf560c4a8c95914f0cf79b763ccaf8b9188d0015370f3be774da7706636ee91ed8d796cd2677ca325f385e7963ca20d6e5c14465ccbb23557298517d4ca7c1c3d922cd9c5530a8ef1f6b704a90d30d51463c0477da86341363", @ANYBLOB="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", @ANYRESHEX=r2], 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44891}, 0x44)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x4000004)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x400, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)="24d00db0d1b14c", 0x7}, {&(0x7f00000001c0)="9ae45e8ad297d6cb58e3f54bc4dc947ddbbee0301e36eb26e0775870bb5ac3e22ba4b1c7bd38005af30663627bbc218c96bd636c39cc40904ecb5b21d4bcfefd2f87254f0aea8b0eae420c105dad55925b84cf8646a83d056b8c730bd5859702d772133dfa8557f5e5767dad07d9faae4c1ccb23db8e6250b67f31ce2eeddec264c2d2bfc7762466fd9ea0fa4e5e942b5f3416cd", 0x94}, {&(0x7f0000000480)="82617e08c80dc959118fafed026f9c644c9bb6d4244c524ef7da6aa60b6b9f2cb7054175edd692b4fd5087343497730c67bc71625518b5af992cff7a72754f1146b2f70f61a3271c7ca653c20836b7a19abe4844ff23648d2f3bdb1a87d5cf29ad4cb5eae54bf770832e0cf263e37cfe937345ed143e349ce7248cb74ba1e0d9b7b4b86891568757f291a81ac014d0af857b5f49d9a251971278baed930ff10fd0591524220488666bd1", 0xaa}, {&(0x7f0000000280)="195f76bd199e0206bf7f51b4e1cc35f4fe5988229443d6d6ef46c2cf1c42e26ddce4084a59bc847a372ba2f3ddcf7a791d9967e0f31a506d74c792eba2fdc1b7", 0x40}, {&(0x7f0000000540)="7312789734dfad98ea86821db2e520c80a5ba7d98c4691637f592ef93715be0f2bdc5b1c50c7156d5fe804672528c9ed73df3b2396604f0f1b6121a25e1cf4bc6f52a6d37fbec34125cd4ea25113ae5aa9c70f4004aa0a10d283b5108a53922cc5e81b10ff5a66dc4b977a49f175cc6ab04fce4f0539c6a1caae54b111fc9f523284cd", 0x83}, {&(0x7f0000000600)="7b1ef39a5872c159d2369df74a1432b838948173b1fa291ba8384b2548ba62fce18153329eb25c7d125f3b8149b45d1b75b0ce89215d415bd459689d8b705974962825f0456f47473d30836eeb504f0cd713ec984057078bd525e105898f9bb384c39d8efd7200a3c70ae8c1b12c40d4fb0ece988e9738b21df35ae6577dcb2a965428a9066afa83362cd23f6d996bf1deaac772acd1289c702e774d67b836399b23bf0329b43fdf52c47ab84f67f1d65f1745d1fb4162ab7fbed2ea5ce92a705bfe5b382d447eec7e4572ef8474016c9c85a5e7a00d69c8381458", 0xdb}, {&(0x7f0000000300)="8f623f356f0699833c10", 0xa}, {&(0x7f0000000700)="43f1e31ec8b3786bfa857db98eda19056724f29c5887bd7c34545f1cb029575873f9bbf7318f786f7acf8d0a34653af20e59a02ce768d2c080ee246f782defea4335a95d89195d27a6f4a6e8141fac1d83c548d8c2a9a5eba9a3a833118581a61e8870bb51e41a5631e3a953c346d1a3c85b008e84a8bf38784f8bf9e8658cd9996e1be6230a765446a8bd87d1", 0x8d}], 0x8)

5.00891145s ago: executing program 3 (id=3728):
syz_emit_ethernet(0xce, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x98, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x5e, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x26}, [@routing={0x0, 0xc, 0x2, 0x81, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xce, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x98, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x5e, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x26}, [@routing={0x0, 0xc, 0x2, 0x81, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}]}}}}}}}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x75, 0x18, &(0x7f0000000040)="db501a6ae25f693e39e578872591463d6a6bb92a98dc5d72ea41abe13aeacd726d6aeca5a2b37dd9b0e892e59d8c95fde7d68e4697c98f998603f1aeaad5834a5f76c467eeecdab4094cb133791f3040e47cdc08063a9e5b81be8e1c51ccec70ed815072f4e123cd63c11ed44f81310e5d8a283d77", &(0x7f00000000c0)=""/24, 0x5, 0x0, 0x96, 0xde, &(0x7f0000000100)="bdc4f6eae36829c6c9474ad314fdc8eb1be71a6322a7e9fb13d07d88ee4a9a10b22fbd7004b2faa1946ab93e882d02ce33a83d93f26c8b2629d8af628d680ae06761ec51fffe80ce018770b624fc1a42b91dd0d3cd8b7d5f70e1f147aac5cc9798e56b993d652f1c19000000000000000458b4c30e0ea31304c82f95e89ab371b41e58b933aaa4392090fdd8977cf9329da93b1af9cb", &(0x7f00000001c0)="cd8605da60480fe38fb978e4d1ac8e95e313f66e1f862007b36605b23f9279d53c78e97279baf1733b10e454a6bb01389d95820c8500b1a654e363aecd45c42947e96ed180f96402fc111d7967afff813a4bb0809d4ce076f23021e3ce2ba187d6d6b31989988a6652108ab78b71f95d824c07f9a10c445af4655641dc6a774cf11b4c5b9ae1ee7960069b064c6f36575505b1f587c0eb194ec5c3fa3bbf0dc090dafe0f443f0445112e1aaafc9a49e4281f1d621355c3cf73254a35dffd5da99dbfd695668928814c27bef4e527c84f5d900a439a8e9f36be8759821f70", 0x4, 0x0, 0x3}, 0x50)

4.912741809s ago: executing program 3 (id=3730):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x1, 0xfffffffc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'D\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xff6f, {[@generic={0x2, 0x2}, @md5sig={0x13, 0x12, "a4d40e239c6e5d57f8d88441b8183a4a"}]}}}}}}}}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x90646, 0x1600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', <r10=>0x0})
bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r10, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "247bab23204d2dbab46bdcdd1aceefb9"})
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r11)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRESOCT=r10, @ANYRES32=r10, @ANYBLOB="0a0001"], 0x48}}, 0x0)

4.139304536s ago: executing program 4 (id=3732):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x53b, 0x70bd26, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffff7fc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.908883042s ago: executing program 4 (id=3734):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'perf_event'}]}, 0x11)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r4 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r6, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffcec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)

3.767601021s ago: executing program 3 (id=3736):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffff"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x800000, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, r2}, 0x43, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "555390508bff2b9e63477a98784ca217bae7ae597ea6ea5b806fcd257ce7cb9e0346b0e1ec5064937df2a6f9dd768ae61274d13f2ddf486eaacfb6af356771b9"}, 0x10}, 0x2, 0x0, 0x0, 0x844}, 0x4000855)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)=0x1)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

3.641157489s ago: executing program 0 (id=3737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80, 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd0a, 0x25dfdbf7, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@delchain={0x484, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {0xb, 0xfff2}, {0xe, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xd3c, 0xf3, 0x1ff, 0x1, 0x1, 0xccc, 0x0, 0x400, 0xfffffca7, 0x1, 0x0, 0x996, 0x10, 0x83d, 0x4e0e, 0x10, 0x5, 0x9, 0x0, 0x3, 0x4, 0x7, 0x6d12bee8, 0x10, 0xffff, 0x7, 0x7, 0x2, 0x7, 0x80000001, 0x80, 0x4af, 0x9, 0x5, 0x4, 0xfff, 0x1d45, 0x0, 0x9, 0xffff0000, 0x8, 0x7fffffff, 0x9, 0x2, 0x7c, 0x1, 0x1, 0x7f3, 0x800, 0x7f, 0x6, 0x5a2, 0x0, 0x2, 0x100, 0x3, 0x7, 0x1, 0x8, 0x3, 0xe, 0x6, 0x511b, 0xe, 0x10001, 0x40, 0xfffffff9, 0x5, 0x4, 0x40, 0x8, 0x0, 0x6, 0x449e, 0x7, 0x8, 0x1d, 0x5, 0xc1b, 0x5, 0x4, 0xcb3, 0xe5d, 0x0, 0x10, 0x3, 0x9, 0x95, 0x2, 0x7f00, 0xffff0000, 0x5, 0xfffff4b4, 0x8d, 0x9d11, 0x3aa6, 0x6, 0xd33, 0x0, 0x0, 0x7, 0x0, 0x7, 0x2604, 0x21, 0x4, 0x400, 0x2, 0xfc6f, 0xffffff10, 0x4, 0x8, 0x10, 0x6, 0x200000, 0xffffffff, 0xffffffff, 0x2, 0x2d, 0x7, 0x4, 0x1000, 0x9, 0x2, 0x5, 0xcb81, 0x5, 0x3, 0x3, 0x0, 0x0, 0xfff, 0x4, 0x9, 0x5, 0x10000, 0xe, 0x0, 0x3, 0x0, 0x5, 0x4b, 0x3, 0xb80, 0x0, 0x85, 0x7, 0x5, 0xc, 0x1, 0x400, 0x9, 0x80000000, 0x4, 0x1, 0x1b8000, 0x10, 0x0, 0xff, 0x627, 0x5, 0x6, 0x3ff, 0x0, 0xc, 0x4, 0x29, 0x4, 0x1000000, 0x1, 0x5, 0x8, 0x8, 0x1, 0x3ff, 0x4, 0x2, 0xffffffff, 0x2, 0x4, 0x5, 0xffffffff, 0x4, 0x3, 0x10, 0x7, 0x8, 0x9, 0x85, 0x33, 0x4, 0x93b, 0x7fffffff, 0xffff, 0x10001, 0xff, 0x7a, 0x8, 0x7, 0x5a12, 0xf, 0x7, 0x6, 0xa, 0x4, 0x569, 0x80, 0x7fffffff, 0xfffffffd, 0x9, 0x0, 0x10001, 0x38, 0x1c8a, 0x3, 0x3, 0x11, 0x0, 0xa, 0x100, 0x9, 0x7fffffff, 0x10000, 0x800, 0x8, 0x8, 0x7, 0x5, 0x6, 0x8, 0x1, 0x20, 0x0, 0x3, 0xf12, 0x80000001, 0x100, 0x8000, 0x8, 0x8, 0x9, 0x3000, 0xfa9, 0x8000, 0x9e9e, 0x952, 0x3, 0x5, 0x7, 0x0, 0x8, 0x9, 0x2, 0x18e, 0x40]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffc883}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xd9}]}, 0x484}, 0x1, 0x0, 0x0, 0x4}, 0x24000004)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c0018800800014000000004080003400000000308fe01400000000a240001801400018008000100e000000108000200e00000010c000280050001000000000000001640"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.640573959s ago: executing program 4 (id=3738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r3, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
sendmmsg(r2, &(0x7f0000002080)=[{{&(0x7f0000000240)=@isdn={0x22, 0x8b, 0x3, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="2d03849a48f975912b3661b386491428577483a673b2c3149f2ddbdb71ec0e856ab600632d4496cbb65821b5780dc558938a5535eae52981bfadae54e9cf38ae324f3e1749b4236998680b6d8928c34cc890e66073558c129a7163f4f5", 0x5d}, {&(0x7f0000000400)="2e20061a3967983f2a8736cd05d66a0c15c5d4a291ba915d128e1c32307204e6220e66b4378680dd49ddab6be604de6061b3619644d47fe507267f74feb62e7a36cdd8056b7608b4a317a9da92b5d141e7e2c0900484f6249c004424f5286b9010526ce1ddaf28e1390e9878785ae3cf0434fcbb5fa363a05938766071be24fd62e530518a4ad42c0a316681f3cb51fcd0b63e636cd52972bbdac8f439679ccd06ca2692b916ceb94db01190df0461c2012a24186ba8adb61a2ce91abfa514885e153574dc24caa8d4972fd9b8a41b6486e0378e42ef7b9da777f97e96e7340e30002b4d48de55c29acc18b920b043346c075f8eb94e16", 0xf7}, {&(0x7f0000000500)="25ef4f8e5ab772a8bbe527cb60dfd05f873d4c68c5e6ec7eae9b29818a6855a092466f43c70048f9ac91556ca5cd6ba822913653809bf786297e42059afe6cb6f25064c162aedc3dda72e96b76ca8eee2ecb46bd2ba412d59accf255485acf499df98248b44a2dd89dfaf1bf6da0c98d6d46ce93547baf7b5acfb81805a1049a9f095145e41f1de92be6d8af45283c475311f5f96f26aaa130421cbe3c1dc6d5071344fd584d", 0xa6}], 0x3, &(0x7f0000000300)=[{0x40, 0xff, 0xe02d, "35ab50a2bd27b0df2b158462e6e4115ca6671fbb46053c4e34f1bcaf011daad43901705b9a5463cd3d1c9f9b4ef0c5"}], 0x40}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, &(0x7f0000001a00)=[{0x108, 0x119, 0x1, "4ac062af31d6871074921f0fb32fc7822242ddc60d98b006784d1555c288e7d7f6e1152cd6a5651d3b874cd1b4a0b2b63084f852fb503194aa524bad4136cdcd7d9bbcca3f79d7d4720c88d633f612ab16ad98707363df1b24c1999717a374d3a8bffddd081736ea1cd52c123723fc9a277f38f0e9fdb55a87577ab16be20158850b4d514385e999565b19a2dc64ec241803198599f8163b86c1b1aff0ac06e955cf9822b7423dd8a5272e97904be25cb00194017430f96038459c70ecfff9a0c4f9b5794a684e2c35bdc1d3388441294032453cbe62155c19f0e944260f3bb209f85f3e9e82b3c8ca7fa45652e2a22c558f02422f4b9631"}, {0xe8, 0x107, 0x87e, "d5a865e90c01afa7685756548e9c3d32e868404f9223d737fff40220f3fb0caa8c2ab689ac23f2077e17dcd9a5ed911bb023469fbeb9d6b820cb436f1cd06829bff7820ccc8519315986950f5050e9360d193df5c6c53f61282703519b48f1c3aca2692522433a7f8f2d9f47fb8f152f3fcdeaf8a04a5c7a295e5cd3cb601b475707d60f3183ac39778af8f1639f5b38aca37793b39ecd02b389e840042f6b5f140d44ce2feab6c9713ad77ccb6916da68c0a61f7801128d4fc5653c9ae3d3a3859a1a5145d25ef34cb7162815388b211731eb758e83e8"}, {0x28, 0xff, 0x9, "caecf5790071c7a090ff8f2cd81998580298b258c1a15f44"}, {0x60, 0x107, 0xa, "bcf35345b2a9d7e73e686058645f9b3c461983df56d2fa68be5c9ae2d473c45188e0102c60f51afa5b9a3886e63f9f23d18c9b97a330eaf97a065a55f944919bd62913e6c10e886945753305fb36d8"}, {0x90, 0x114, 0x5, "100ab088478e30604d8124c1fbd824dd6a2e5351aea729f11ecd8ae5cf274e905bd530a7c0e1ef527e6dc7c0a9f34de677a28c6088d0af84991d5c107f9ec40896043fa57cbeb03eed64ad95aff04cdf69ee7a39f91deb4fb0bf447a236f3ec3f8bfed3caa52f087084e18ffd0bca43d991954bc1c4bdb6ae542da1d91"}, {0x58, 0x102, 0xed27, "2e61558973b21ab73b7805c2676723815c2765bb945c08714471fefc2cdf8fe1cb1e5b6c79ecb1295bdfc4e206440893ae2ddfd50f8015841b8ad1c3155ea095d974a3ce3f30"}], 0x360}}, {{&(0x7f0000001680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x4, 0x2, {0xa, 0x4e24, 0x1, @mcast2, 0xf6c}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001700)="64ecef4d75db495bebfaeb19b03bddca374f71a856544aa2469287de8cde268ed8b1fafb4b7dc6a7056394e6bcb84590d225d92fef53f57830b4ccec96a0c1d19f28b482433be55c3313d66965c62a4483f277732180995df36259a506b0383d29f81b7c4f1fc1f47ca1b2a8de834bdf14b9f45943c44025b3f5aa630e8ddb17829f029af927a045a57f47bcc73549b1bd94899c346765", 0x97}, {&(0x7f00000017c0)="804b6e95c793d1522084020881e6d968a7a43b667f15813a9818b2580b0b52166f4e148057bc1d74af3a052289f4a170d8bf550e1d4e4a163e9cc2bfa8d3fd3ad75846c699dc7393c8f3c95f9867c8", 0x4f}, {&(0x7f0000001840)="2e3a437548980f226c97", 0xa}, {&(0x7f0000001880)="11e0d7f8b8f127674d169ad36768c90a146f3af2c55a6457220b7c1d8ab1c2ca14a5355fdf9d3353aa018b5f91cc", 0x2e}, {&(0x7f00000018c0)="f9ab5fe9068c4a6d0e036d8fefc5a4314324c788d6a1fd4b118b584b33b95b37f9d47f44cea1a7afa9c9075fc6b620487277ff3e3acd12c323a97989479bb732a73d3d7f59ab6b3a4bf9f89baafb2a058b9f8d530d18b16d9816cb0fba7e67a899e78584f458288c508ae28858009227a409b7a05a271cebe8db4bdb91563e2ad9651a95e457efa782c744e3f8d3d31c0a910c47d7b36fc02c17867a18b4ff9ffce6f0a0e1e08dccf949576233", 0xad}, {&(0x7f0000001d80)="796fc494b3990dfa542c00705558c44a194046c0ff93fa5fe279b20ed9bcd707da20ca1b77eec73820187185966f11d34e79f04c740e7243b7fcddad85f94cf86f1599e5748dce7f21799d1077be392d3f7072a11ba91508d53e533bbf4cd43ef13a74cfd7", 0x65}, {&(0x7f0000001e00)="480acb99aa19e46da192d079bc1dbb61460a0907bf44d7c5d34c2e63dc328d96fc1ea551bbb1b10b", 0x28}], 0x7, &(0x7f0000001ec0)=[{0x40, 0x112, 0x17, "3e10341b640e315d65369676be42af5ebfec4857d3e3e03d8a9d876ac188eb3333942f8847559480dc0f94c6c7e4"}, {0x10, 0x103, 0x3}, {0x28, 0x104, 0x8001, "53d30d500a23d2e706d7757486c4e9145727eb6c6319"}, {0x78, 0x1, 0x332, "7f9067f371f8a7d988da2241a50d46702e97978993668fb2a7449587d60d53d1e51ae3e58133f4b3257fab16874931f8296051d2707c91e885812162fa48099282227ebd1f67a1266a25b7c424b733bfa30c1be43846e474f9118586360c7e8e3dddfb"}, {0x88, 0x103, 0x1, "b84420e2b14bb4a169eed92bc4449a4ac1a1246ad2fb1a7272d1ca5847ffc61188c73355991319a9561385c55640c00150105c1d1e10cb0bca14903c27e9701d22f0589e6b69a3266683e7e1a1e3b3d02e74e12b4f16f5d29d7be4222c07147456e8fd432aa616f48c7e04d486e090480bb0f7a13c"}, {0x20, 0x10a, 0x2, "5f6ffe3f489b041c6d9201027a"}], 0x198}}], 0x3, 0x880)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={<r7=>0x0, 0xf7}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r7}, &(0x7f00000002c0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x13, 0x0, &(0x7f0000001980)="7f964506c9f900000c00"/19, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f00000022c0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x108, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xf3, 0x8, "5cd20135f00317d463ef3d9acdc112b40528660dd44a6a4cac5a0f29d5c1f4c15e2ea5260738bcb381f378865571082301cdeb6cbc09ca76b79c111bd623a82e59982609c57134074a42b3a5edca4c26ba26d32af99989e3054b319552826c427d4c2b17ee1bffe5775261a3a3e11bc61aa45987b54841d9740c2e5c59de970d4a5afee3d916ba144994e87145953bbf934c874f6f74413914fd7414d7f38d9fc4acfa569ca6d800567ea315f370283bf97294a9be7b2125217c9d2e863259c978ba7e28b4d134c3bda875e45116ee6b166494c6e04be45c9bb8645f8d76338c22195bf4127ab8e6f9f8783adfd6f8"}]}, 0x108}, 0x1, 0x0, 0x0, 0x8004}, 0x10)

3.511814714s ago: executing program 0 (id=3739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r0}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000700)=0x2000000, &(0x7f0000000740), 0x2}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x4, 0xffffffff, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x2)
ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000340)={0x0, r5, r0, 0xff, 0x9, '\x00', {0x0, 0x895f, 0x5, 0x3, 0xa, 0xffff26f9, 0x8d, 0xca41, {0x7, 0xffffffff}, {0x80, 0x9}, {0xc69e, 0xff}, 0x7fffffff, 0xffffffdb, 0x45a, 0x4, 0x1ff, 0x1cae, 0x1, 0xfffa, 0x3, 0x4, '\x00', 0x8, 0x1, 0x0, 0x7ff}})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, 0x96646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x8000}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48604}, 0x8080)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x1}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0)

3.362775942s ago: executing program 4 (id=3740):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020207500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)

3.249151086s ago: executing program 0 (id=3741):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) (async)

3.205848543s ago: executing program 0 (id=3742):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079101800000000001ea00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$isdn(0x22, 0x3, 0x4)
sendto$isdn(r0, &(0x7f0000000080)={0x0, 0x8, "5c70a07b5814f079ee4092f1902ec25f457b9a7ab19a20b2433a15a6f8837bacefaf30214011d869e12397cdefae7b1996228749c1983eb9eec2948150d6a5421c1ecc61f9912b07f9b8bfc100b901ac28c99c1acc3446afaf2d2d8c7e084e25769cb9764fcf5eca9a14621e26380e5c161b9f789c35c95b3ffab28e4f1b992aab905b2d2193319f0f53d4200ad70134f976bc1bb60bde3c55f3901887940a28500bc560cc298c98afb2fc4c62d53c4747f5d87f62d780412feb486f44feca0307"}, 0xc9, 0x800, &(0x7f0000000180)={0x22, 0xf, 0x5, 0xb, 0x2}, 0x6)

3.176613612s ago: executing program 4 (id=3743):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYRES32=r0, @ANYRES64=r4, @ANYBLOB="7400028038000100"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0xf, 0x3, 0x3a)
sendmsg$unix(r7, &(0x7f0000003880)={&(0x7f0000003340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003700)="2913c776", 0x4}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB='\x00'/16], 0x10, 0x8084}, 0x4040)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r8, @ANYRES16=r12, @ANYRES32=r13, @ANYRES64=r11, @ANYRESOCT=r12, @ANYRESDEC=r10, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=<r17=>0x0)
sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r17], 0x1c}}, 0x0)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf2512000000080015a7c0000000a3a3150000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880)
ioctl(r5, 0x8b2a, &(0x7f0000000040))

3.001054127s ago: executing program 3 (id=3744):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b40)={<r3=>0x0, "d60136be7bc207570e26932ab126d3a8"})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000480)={<r4=>r3, 0x1, 0x751b})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2810)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030400000000fe22ffff00000000", @ANYRES32=r7, @ANYBLOB="46060800000000001c00128009000100626f6e64000000000c0002800800030000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040)

2.999335532s ago: executing program 0 (id=3745):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x300, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
recvmmsg(r1, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x38, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0xf3, 0x0, 0x1, [@generic, @nested={0x18, 0x124, 0x0, 0x1, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}]}]}]}]}, 0x38}}, 0x40080)

2.755943846s ago: executing program 3 (id=3746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRES16=r2], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000a80)=""/8, 0x8}], 0x2}, 0x3}], 0x1, 0x2000, 0x0)
recvmmsg(r3, &(0x7f0000000300), 0x0, 0x10102, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'rose0\x00', &(0x7f0000000240)=@ethtool_stats={0x1d, 0xd, [0x8807, 0x0, 0x10000000009, 0x10000d1, 0x6595, 0x1, 0x5, 0x1, 0xf, 0xf, 0x28cc, 0x6a0, 0x4]}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r2], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
clock_gettime(0x7, &(0x7f0000000300)={<r7=>0x0, <r8=>0x0})
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000540)={r4, r4, 0x8d9, 0x0, &(0x7f0000000500), 0x6, 0x10, 0xac, 0x5, 0x101, 0x0, 0x7, 'syz0\x00'})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYRES16=r11, @ANYBLOB="0d000000c9a3155513b131cf000004000180"], 0x18}}, 0x10)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x4000009, 0xffffffff, {{0x7, 0x4, 0x3, 0x2b, 0x1c, 0x67, 0x0, 0xf7, 0x29, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x8, 0xe3f1d214d2a8f2c7, [{0x2, 0x2}]}]}}}}})
write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={r7, r8/1000+60000}, 0x10)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, &(0x7f0000002340))
bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc)
read(0xffffffffffffffff, &(0x7f00000000c0)=""/24, 0x18)
socketpair(0x10, 0x3, 0x58, &(0x7f0000000000))

2.385405454s ago: executing program 2 (id=3747):
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000690000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xfe8, &(0x7f0000001e00)=""/4072}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.884620066s ago: executing program 2 (id=3748):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xfffffffe}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

1.794596614s ago: executing program 0 (id=3749):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = socket$inet6(0xa, 0x800, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10200021001c0000000000000000000000080000000000000000"], 0x30}}], 0x1, 0xc080)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = socket(0x11, 0x2, 0x100001)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="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", 0x184}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x80, 0x0, 0xfffffffffffffde0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.722892013s ago: executing program 2 (id=3750):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203ffffff0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xadb5, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10)
close(0x3)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x6, 0x8106, @void}, "134a3185f7b1806ddfe808783210947f8bd182344a7e976d7d870d0969cd71fb"}}}}}}}, 0x52)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'pim6reg\x00'})

953.16162ms ago: executing program 2 (id=3751):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r1=>0x0, 0x4, 0x42, 0x4, 0xffffff82, 0x1, @mcast2, @empty, 0x720, 0x8000, 0xb, 0x7}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x80000000, 0xf8c, 0x6, 0x8424, 0x1, 0x8, '\x00', r1, r0, 0x5, 0x1, 0x3, 0x3, @value=r2}, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000480), &(0x7f0000000280)=@udp=r4, 0x1}, 0x20)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@generic={0x91, 0x1, 0x1, 0x17}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="080000000083e9e2b4a76013a500000200000000000000000000000000000800000000000000000000003c4324a1b6148fe75d889200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/144], 0x90)

783.25314ms ago: executing program 1 (id=3752):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac00000021000100000000000000000000000000000000000000ffffac1414aaff01000000000000000000000000000100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000003000000500011", @ANYRES32=r0], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

766.055554ms ago: executing program 2 (id=3753):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000002000000ff0f000007", @ANYRESHEX=0x0, @ANYRES64=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x2000000}, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
close(0x4)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0xffffff08, &(0x7f0000000100)={0x0, 0xfffffece}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4004000)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffe0, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'})
pipe(&(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
close(r12)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x48)
splice(r10, 0x0, r12, 0x0, 0x3000, 0x100000000000000d)

600.445174ms ago: executing program 2 (id=3754):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b543000000000067ed80ffe90b9eb04bd399ff54a689008d2e4a000000be80a9360000000016ead6763b67224e625d94685fabdc621375f88499258f870fc87bbc63e32dcd99f10f7c94abccf9581e253fab9d44b67ed5b8c7567bcb14d877f814542557bd3376a8d976b7282933489563cb3fc1092eba"], 0x14}}, 0x0)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x4000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x80}}, 0x1c)
r3 = socket(0x2d, 0x2, 0x0)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$nfc_llcp(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000540)="e0db", 0x2}, {&(0x7f0000000600)="cd96f50d47387f9f8e3b5f1ceada2c4f1efbb88a93b26a3eeda32a346d890091fd8160f2", 0x24}, {0x0}], 0x3, 0x0, 0x0, 0x44840}, 0x4004001)
sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000002200020028bd7000fddbdf25022020030d00000201000000c548ef1b78df7bb5da851dedd6cc1d3a42e9f3634fd74f145552c66490d59b68"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200007000000fbdbdf25010000000000000001410000002000170000000e000007836574683a6261746164765f736c61766d5f303bbf"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r13)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r14 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)

598.782515ms ago: executing program 1 (id=3755):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r2, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8)

266.6144ms ago: executing program 1 (id=3756):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
unshare(0x20000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
unshare(0x20000000) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000000000000000000000010500030080ff00000900020073797a31"], 0x64}}, 0x4800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async)
close(r4) (async)
socket(0x18, 0x1, 0x1) (async)
sendfile(r4, r2, 0x0, 0xf03a0005)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve1\x00'})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) (async)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x80000001, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) (async)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async)
listen(r0, 0xda90) (async)
accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x0)

55.215844ms ago: executing program 3 (id=3757):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)

947.856µs ago: executing program 1 (id=3758):
pipe(&(0x7f0000000200)) (async)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @remote}, 0x1c)
listen(r2, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x3c, &(0x7f0000000180)="d47a7860", 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600040040014060000000000000000000000400000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000490780007"], 0x0)
vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000500)}, {&(0x7f0000000580)="f92ba6414e4a097dc478670cd864e5512ffe6efa2151c8536a7b95e76230cc6f483d928c4a74baf24ee483ae547628b4f03370dd81ed00d05e6dbf759cbec003032f3d1db31c3387b13229afa7fce9ec792be83958422ef70c02c5b4a3e960562df94d368fe2a68d509c33306129462dbc3395b2801b1f230675ba03cf1d", 0x7e}, {&(0x7f0000000600)}], 0x3, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc000000000000000000000000000000000000000000000007001900000000000a"], 0xd8}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2, 0x80805, 0x0) (async)
socket(0x2, 0x80805, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="130000004300010a"], 0x18}}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="130000004300010a"], 0x18}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3) (async)
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780060005"], 0x38}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780060005"], 0x38}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r11, @ANYBLOB="040026bd7000fedbdf2509000000a0000280040004000800020003000000080002003f0000002c000380080001000001000008000100ca0000010800020000000000080001000700000008000100000060000800020005000000040004000800010005000000040004003c0003800800010040000000080001000700000008000100040000000800010002000000080002000600000008000200cf8fea43080002000000002008000200090000002c000980080002004000000008000100ffffff7f0800020008000000080002009d0400000800020005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4003}, 0x24000001)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000001340)='\ra,', 0x3}], 0x1)

0s ago: executing program 4 (id=3759):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}], 0x1)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010000040000ded81a4b10000000"], 0x14}}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x25, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000008100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/132, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000f6ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x31, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x3, 0x5, 0x686}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r3], &(0x7f0000000680)=[{0x1, 0x2, 0x2, 0x5}, {0x0, 0x4, 0x10000, 0xc}, {0x5, 0x4, 0xf, 0x2}], 0x10, 0x10000}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000780)={r2, r3})
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x89, 0x0, &(0x7f0000000080)=0x18)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@tos={{0x28}, {0x5, 0x4, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x7, 0x6}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0xff000000, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e24, 0x4e22, 0x4e22, 0x7, 0xc41b, 0x5, 0x241, 0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x50)
ioctl$XFS_IOC_SET_RESBLKS(r8, 0xc0105872, &(0x7f0000000400)={0x7, 0x7})

kernel console output (not intermixed with test programs):

 in process `syz.1.2511'.
[  577.320972][T15654] dummy0: entered promiscuous mode
[  577.335415][T15654] bond0: (slave dummy0): Releasing backup interface
[  577.371125][T15654] bridge0: port 1(dummy0) entered blocking state
[  577.379146][T15654] bridge0: port 1(dummy0) entered disabled state
[  577.386346][T15654] dummy0: entered allmulticast mode
[  577.466268][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'.
[  577.489325][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'.
[  577.503233][T15661] netlink: 'syz.0.2514': attribute type 6 has an invalid length.
[  577.526728][T15664] syzkaller0: entered promiscuous mode
[  577.535417][T15661] netlink: 'syz.0.2514': attribute type 5 has an invalid length.
[  577.553582][T15664] syzkaller0: entered allmulticast mode
[  577.562586][T15664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  577.583444][T15661] netlink: 'syz.0.2514': attribute type 6 has an invalid length.
[  577.592895][T15661] netlink: 'syz.0.2514': attribute type 5 has an invalid length.
[  577.603344][T15662] tipc: Resetting bearer <eth:syzkaller0>
[  577.917356][T15662] tipc: Disabling bearer <eth:syzkaller0>
[  578.089621][T15680] __nla_validate_parse: 3 callbacks suppressed
[  578.089639][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'.
[  578.222102][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.222102][T15693] Use struct sctp_assoc_value instead
[  578.254305][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.254305][T15693] Use struct sctp_assoc_value instead
[  578.327874][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.327874][T15693] Use struct sctp_assoc_value instead
[  578.356041][T15704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2528'.
[  578.383614][T15692] batadv0 speed is unknown, defaulting to 1000
[  578.385579][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.385579][T15693] Use struct sctp_assoc_value instead
[  578.410495][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.410495][T15693] Use struct sctp_assoc_value instead
[  578.431868][T15707] netlink: 'syz.0.2529': attribute type 4 has an invalid length.
[  578.451716][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.451716][T15693] Use struct sctp_assoc_value instead
[  578.469803][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.469803][T15693] Use struct sctp_assoc_value instead
[  578.486562][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.486562][T15693] Use struct sctp_assoc_value instead
[  578.503003][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.503003][T15693] Use struct sctp_assoc_value instead
[  578.504848][T15712] netlink: 'syz.1.2530': attribute type 3 has an invalid length.
[  578.536221][T15693] sctp: [Deprecated]: syz.2.2525 (pid 15693) Use of int in max_burst socket option deprecated.
[  578.536221][T15693] Use struct sctp_assoc_value instead
[  578.702416][T15721] syzkaller0: entered promiscuous mode
[  578.708018][T15721] syzkaller0: entered allmulticast mode
[  578.717015][T15721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.743153][T15717] tipc: Resetting bearer <eth:syzkaller0>
[  578.779543][T15717] tipc: Disabling bearer <eth:syzkaller0>
[  578.892423][T15692] lo speed is unknown, defaulting to 1000
[  578.901098][T15692] wg1 speed is unknown, defaulting to 1000
[  578.948682][T15734] netlink: 'syz.0.2536': attribute type 6 has an invalid length.
[  579.011941][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2537'.
[  579.264823][T15756] batadv0: entered promiscuous mode
[  579.270433][T15756] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  579.300456][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'.
[  579.300894][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'.
[  579.333247][T15761] netlink: 620 bytes leftover after parsing attributes in process `syz.0.2545'.
[  579.377068][T15692] lo speed is unknown, defaulting to 1000
[  579.434533][T15763] netlink: zone id is out of range
[  579.434553][T15756] netlink: zone id is out of range
[  579.462929][T15763] netlink: zone id is out of range
[  579.491990][T15763] netlink: zone id is out of range
[  579.503305][T15756] netlink: zone id is out of range
[  579.508432][T15756] netlink: zone id is out of range
[  579.533236][T15763] netlink: zone id is out of range
[  579.536237][T15769] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  579.538355][T15763] netlink: zone id is out of range
[  579.538365][T15763] netlink: zone id is out of range
[  579.579356][T15773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'.
[  579.641286][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'.
[  579.682462][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'.
[  580.386239][T15832] netlink: 'syz.1.2561': attribute type 1 has an invalid length.
[  580.631185][T15832] 8021q: adding VLAN 0 to HW filter on device bond15
[  581.057224][T15867] netlink: 'syz.4.2569': attribute type 1 has an invalid length.
[  581.652050][T15902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2579'.
[  581.844994][T15921] sock: sock_timestamping_bind_phc: sock not bind to device
[  582.637760][T15990] batadv0 speed is unknown, defaulting to 1000
[  582.714113][ T6566] bond9: (slave bridge0): link status definitely down, disabling slave
[  582.724946][ T6566] bond9: now running without any active interface!
[  583.272888][T16021] __nla_validate_parse: 6 callbacks suppressed
[  583.272906][T16021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2613'.
[  583.329938][T15990] lo speed is unknown, defaulting to 1000
[  583.337183][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2613'.
[  583.347432][T16015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2613'.
[  583.354838][T15990] wg1 speed is unknown, defaulting to 1000
[  583.968876][T15990] lo speed is unknown, defaulting to 1000
[  584.157288][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'.
[  584.224087][T16074] macvtap1: entered promiscuous mode
[  584.229469][T16074] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  584.250528][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.292856][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.315622][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.332397][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.341978][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.403630][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'.
[  584.470438][T16094] validate_nla: 1 callbacks suppressed
[  584.470456][T16094] netlink: 'syz.4.2634': attribute type 1 has an invalid length.
[  584.969499][T16120] can: request_module (can-proto-3) failed.
[  585.190328][T16100] syzkaller0: entered promiscuous mode
[  585.196373][T16100] syzkaller0: entered allmulticast mode
[  585.203596][T16112] batadv0 speed is unknown, defaulting to 1000
[  586.620398][T16112] lo speed is unknown, defaulting to 1000
[  586.629134][T16133] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  586.644027][T16112] wg1 speed is unknown, defaulting to 1000
[  586.715931][T16133] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  586.801090][T16133] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  586.868565][T16133] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  586.934980][T16145] syzkaller0: entered promiscuous mode
[  586.953657][T16145] syzkaller0: entered allmulticast mode
[  586.976011][T16112] lo speed is unknown, defaulting to 1000
[  586.995456][T16145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  587.014193][T16143] tipc: Resetting bearer <eth:syzkaller0>
[  587.048746][T16143] tipc: Disabling bearer <eth:syzkaller0>
[  587.183865][ T6601] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  587.231197][ T6566] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  587.261135][ T6566] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  587.281518][ T6566] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  587.300508][T16150] netlink: 'syz.4.2646': attribute type 30 has an invalid length.
[  587.326088][T16150] netlink: 'syz.4.2646': attribute type 30 has an invalid length.
[  587.392489][T16155] batadv0 speed is unknown, defaulting to 1000
[  587.821328][T16155] lo speed is unknown, defaulting to 1000
[  587.829252][T16155] wg1 speed is unknown, defaulting to 1000
[  587.986765][T16155] lo speed is unknown, defaulting to 1000
[  588.094969][T16162] siw: device registration error -23
[  588.925500][T16210] __nla_validate_parse: 8 callbacks suppressed
[  588.925516][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2661'.
[  589.783090][T16250] lo: Caught tx_queue_len zero misconfig
[  589.860191][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'.
[  589.909613][T16239] net_ratelimit: 277 callbacks suppressed
[  589.909657][T16239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  589.943252][T16259] netlink: 'syz.3.2672': attribute type 1 has an invalid length.
[  589.960722][T16221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2665'.
[  589.996258][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2672'.
[  590.040473][T16259] 8021q: adding VLAN 0 to HW filter on device bond11
[  590.057724][T16267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2675'.
[  590.066593][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2672'.
[  590.082157][T16267] netlink: 'syz.0.2675': attribute type 16 has an invalid length.
[  590.090716][T16253] bond11: entered allmulticast mode
[  590.106273][T16267] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  590.141898][T16253] bond0: (slave dummy0): Releasing backup interface
[  590.149960][T16253] dummy0: left promiscuous mode
[  590.159099][T16253] bond11: (slave dummy0): making interface the new active one
[  590.167241][T16253] dummy0: entered allmulticast mode
[  590.174431][T16253] bond11: (slave dummy0): Enslaving as an active interface with an up link
[  590.301678][T16276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.428011][T16286] netlink: 'syz.0.2680': attribute type 5 has an invalid length.
[  591.777197][T16199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  591.956000][T16294] sctp: [Deprecated]: syz.0.2681 (pid 16294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  591.956000][T16294] Use struct sctp_sack_info instead
[  591.976867][T16293] netlink: 'syz.2.2682': attribute type 16 has an invalid length.
[  591.984865][T16293] netlink: 'syz.2.2682': attribute type 17 has an invalid length.
[  592.001940][T16293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  592.056709][T16293] netlink: 'syz.2.2682': attribute type 1 has an invalid length.
[  592.268670][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'.
[  592.412724][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'.
[  592.438152][   T29] audit: type=1800 audit(1771392949.882:7): pid=16322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2690" name=EF7A815F9D9717443015EF114346A8DC6EE57F36A323 dev="tmpfs" ino=2931 res=0 errno=0
[  592.552270][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'.
[  592.563186][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'.
[  592.658582][T16333] syzkaller0: entered promiscuous mode
[  592.703062][T16333] syzkaller0: entered allmulticast mode
[  592.959589][T16348] batadv0 speed is unknown, defaulting to 1000
[  593.590095][T16370] batadv0 speed is unknown, defaulting to 1000
[  593.598380][T16348] lo speed is unknown, defaulting to 1000
[  593.643149][T16348] wg1 speed is unknown, defaulting to 1000
[  594.184811][T16370] lo speed is unknown, defaulting to 1000
[  594.233453][T16389] netlink: 'syz.3.2709': attribute type 4 has an invalid length.
[  594.269811][T16370] wg1 speed is unknown, defaulting to 1000
[  594.269811][T16348] lo speed is unknown, defaulting to 1000
[  594.335864][T16394] __nla_validate_parse: 6 callbacks suppressed
[  594.335881][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2709'.
[  594.353489][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2709'.
[  594.813576][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  594.822609][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'.
[  594.835387][T16405] netlink: 'syz.0.2711': attribute type 12 has an invalid length.
[  595.037574][T16370] lo speed is unknown, defaulting to 1000
[  595.597893][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'.
[  595.669105][T16451] netlink: 'syz.4.2721': attribute type 1 has an invalid length.
[  596.389583][T16475] sctp_setsockopt_maxburst: 23 callbacks suppressed
[  596.389602][T16475] sctp: [Deprecated]: syz.0.2726 (pid 16475) Use of int in max_burst socket option deprecated.
[  596.389602][T16475] Use struct sctp_assoc_value instead
[  597.323848][T16506] vlan5: entered allmulticast mode
[  597.339179][T16506] veth0_to_bond: entered allmulticast mode
[  597.402271][T16510] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  597.481108][T16508] batadv0 speed is unknown, defaulting to 1000
[  598.309763][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2734'.
[  598.345799][T16508] lo speed is unknown, defaulting to 1000
[  598.345801][T16528] batadv0 speed is unknown, defaulting to 1000
[  598.347498][T16508] wg1 speed is unknown, defaulting to 1000
[  598.771338][T16528] lo speed is unknown, defaulting to 1000
[  598.779972][T16508] lo speed is unknown, defaulting to 1000
[  598.794755][T16528] wg1 speed is unknown, defaulting to 1000
[  598.944603][T16569] batadv0 speed is unknown, defaulting to 1000
[  599.200466][T16528] lo speed is unknown, defaulting to 1000
[  599.287292][T16569] lo speed is unknown, defaulting to 1000
[  599.295706][T16569] wg1 speed is unknown, defaulting to 1000
[  599.554589][T16569] lo speed is unknown, defaulting to 1000
[  599.895543][T16583] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  599.910855][T16583] x_tables: unsorted underflow at hook 2
[  599.920157][T16583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'.
[  600.472611][T16593] x_tables: ip_tables: ah match: only valid for protocol 51
[  600.921266][T16600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2758'.
[  600.934084][T16600] syzkaller0: Caught tx_queue_len zero misconfig
[  601.140304][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2761'.
[  601.279969][T16612] IPVS: length: 164 != 24
[  601.284821][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2762'.
[  601.334306][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'.
[  601.558424][T16631] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  601.575017][T16631] netlink: 'syz.3.2768': attribute type 2 has an invalid length.
[  601.621622][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2770'.
[  601.669605][T16646] syzkaller1: entered promiscuous mode
[  601.680144][T16640] netlink: 'syz.0.2770': attribute type 7 has an invalid length.
[  601.682837][T16646] syzkaller1: entered allmulticast mode
[  601.693119][T16640] netlink: 'syz.0.2770': attribute type 8 has an invalid length.
[  601.711333][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'.
[  602.018053][T16663] batadv0 speed is unknown, defaulting to 1000
[  602.053848][T16668] netlink: 'syz.1.2778': attribute type 13 has an invalid length.
[  602.066542][T16668] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.2778'.
[  602.163676][T16674] openvswitch: netlink: IP tunnel dst address not specified
[  602.274020][T16678] netlink: 'syz.3.2781': attribute type 1 has an invalid length.
[  602.300081][T16663] lo speed is unknown, defaulting to 1000
[  602.302088][T16678] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2781'.
[  602.307969][T16663] wg1 speed is unknown, defaulting to 1000
[  602.333341][T16678] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2781'.
[  602.517247][T16684] bond16: Unable to set peer notification delay as MII monitoring is disabled
[  602.563879][T16684] bond16 (unregistering): Released all slaves
[  602.819044][T16663] lo speed is unknown, defaulting to 1000
[  603.017413][T16704] bond12: entered promiscuous mode
[  603.022602][T16704] bond12: entered allmulticast mode
[  603.028856][T16704] 8021q: adding VLAN 0 to HW filter on device bond12
[  603.039029][T16704] x_tables: duplicate underflow at hook 1
[  603.056474][T16707] x_tables: duplicate underflow at hook 1
[  603.107022][T16709] netlink: 'syz.3.2790': attribute type 2 has an invalid length.
[  603.123254][T16709] : entered promiscuous mode
[  603.596551][ T5866] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  603.608279][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  603.608301][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  603.608311][ T5866] Call Trace:
[  603.608317][ T5866]  <TASK>
[  603.608323][ T5866]  dump_stack_lvl+0xe8/0x150
[  603.608348][ T5866]  dump_header+0xd3/0x4c0
[  603.608364][ T5866]  oom_kill_process+0x3ab/0x970
[  603.608384][ T5866]  out_of_memory+0x106c/0x1410
[  603.608399][ T5866]  ? percpu_ref_put+0x19/0x180
[  603.608418][ T5866]  ? __pfx___mutex_lock+0x10/0x10
[  603.608442][ T5866]  ? __pfx_out_of_memory+0x10/0x10
[  603.608455][ T5866]  ? do_raw_spin_unlock+0xf5/0x210
[  603.608480][ T5866]  try_charge_memcg+0xc53/0x1560
[  603.608515][ T5866]  ? __pfx_try_charge_memcg+0x10/0x10
[  603.608530][ T5866]  ? xa_load+0x60/0x210
[  603.608552][ T5866]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  603.608572][ T5866]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  603.608594][ T5866]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  603.608614][ T5866]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  603.608634][ T5866]  __read_swap_cache_async+0x212/0x480
[  603.608655][ T5866]  swap_cluster_readahead+0x529/0x680
[  603.608676][ T5866]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  603.608699][ T5866]  ? page_table_check_set+0x148/0x610
[  603.608718][ T5866]  ? get_vma_policy+0x27b/0x3c0
[  603.608743][ T5866]  swapin_readahead+0x196/0xc50
[  603.608762][ T5866]  ? swap_table_get+0x1e/0x260
[  603.608783][ T5866]  ? __pfx_swapin_readahead+0x10/0x10
[  603.608809][ T5866]  ? swap_table_get+0x1e/0x260
[  603.608824][ T5866]  ? swap_table_get+0x1e/0x260
[  603.608838][ T5866]  ? swap_table_get+0x1e/0x260
[  603.608856][ T5866]  ? swap_table_get+0x216/0x260
[  603.608875][ T5866]  ? swap_cache_get_folio+0x513/0x520
[  603.608899][ T5866]  do_swap_page+0x8ce/0x5e10
[  603.608933][ T5866]  ? __pte_offset_map+0x29/0x240
[  603.608953][ T5866]  ? __pte_offset_map+0x29/0x240
[  603.608971][ T5866]  ? do_swap_page+0x18b/0x5e10
[  603.608987][ T5866]  ? __pfx_do_swap_page+0x10/0x10
[  603.609005][ T5866]  ? __lock_acquire+0x6b5/0x2cf0
[  603.609023][ T5866]  ? __pfx_default_wake_function+0x10/0x10
[  603.609044][ T5866]  ? __pte_offset_map+0x1ae/0x240
[  603.609066][ T5866]  ? pte_offset_map_rw_nolock+0xea/0x160
[  603.609088][ T5866]  handle_mm_fault+0x12d2/0x32a0
[  603.609122][ T5866]  ? handle_mm_fault+0xee/0x32a0
[  603.609149][ T5866]  ? __pfx_handle_mm_fault+0x10/0x10
[  603.609165][ T5866]  ? lock_vma_under_rcu+0x45a/0x500
[  603.609213][ T5866]  do_user_addr_fault+0xa73/0x1360
[  603.609241][ T5866]  ? rcu_is_watching+0x15/0xb0
[  603.609261][ T5866]  ? trace_page_fault_user+0x84/0x1c0
[  603.609286][ T5866]  exc_page_fault+0x6a/0xc0
[  603.609309][ T5866]  asm_exc_page_fault+0x26/0x30
[  603.609325][ T5866] RIP: 0033:0x7f596b06a6b7
[  603.609342][ T5866] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 39 7c 24
[  603.609356][ T5866] RSP: 002b:00007ffcda56a890 EFLAGS: 00010206
[  603.609373][ T5866] RAX: 0000001b32a24000 RBX: 00000000000006fe RCX: 0000000000093378
[  603.609385][ T5866] RDX: 00000000078e3136 RSI: 00007ffcda56a920 RDI: 0000000000000001
[  603.609396][ T5866] RBP: 00007ffcda56a8cc R08: 7fffffffffffffff R09: 3fffffffffffffff
[  603.609408][ T5866] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  603.609420][ T5866] R13: 00000000000927c0 R14: 00000000000931f5 R15: 00007ffcda56a920
[  603.609451][ T5866]  </TASK>
[  603.609518][ T5866] memory: usage 307200kB, limit 307200kB, failcnt 752
[  603.962825][ T5866] memory+swap: usage 282660kB, limit 9007199254740988kB, failcnt 0
[  604.007548][ T5866] kmem: usage 281632kB, limit 9007199254740988kB, failcnt 0
[  604.043231][ T5866] Memory cgroup stats for /syz2:
[  604.043519][ T5866] cache 0
[  604.073161][ T5866] rss 24576
[  604.084372][ T5866] rss_huge 0
[  604.094141][ T5866] shmem 0
[  604.102562][ T5866] mapped_file 0
[  604.114206][ T5866] dirty 0
[  604.138457][ T5866] writeback 0
[  604.153614][ T5866] workingset_refault_anon 44
[  604.158211][ T5866] workingset_refault_file 1
[  604.198794][ T5866] swap 143360
[  604.202087][ T5866] swapcached 61440
[  604.227619][ T5866] pgpgin 71786
[  604.231128][ T5866] pgpgout 71768
[  604.245064][ T5866] pgfault 130707
[  604.253386][ T5866] pgmajfault 25
[  604.258788][ T5866] inactive_anon 0
[  604.262427][ T5866] active_anon 65536
[  604.264852][T16724] ipvlan0: entered promiscuous mode
[  604.283078][ T5866] inactive_file 0
[  604.286718][ T5866] active_file 0
[  604.290165][ T5866] unevictable 0
[  604.302928][ T5866] hierarchical_memory_limit 314572800
[  604.311774][ T5866] hierarchical_memsw_limit 9223372036854771712
[  604.323290][T16724] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  604.332620][T16724] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  604.353363][ T5866] total_cache 0
[  604.362944][ T5866] total_rss 24576
[  604.366583][ T5866] total_rss_huge 0
[  604.380466][ T5866] total_shmem 0
[  604.384116][ T5866] total_mapped_file 0
[  604.388126][ T5866] total_dirty 0
[  604.393792][ T5866] total_writeback 0
[  604.402032][ T5866] total_workingset_refault_anon 44
[  604.454262][ T5866] total_workingset_refault_file 1
[  604.463307][ T5866] total_swap 143360
[  604.469478][ T5866] total_swapcached 61440
[  604.489702][ T5866] total_pgpgin 71786
[  604.498304][ T5866] total_pgpgout 71768
[  604.511507][ T5866] total_pgfault 130748
[  604.524586][ T5866] total_pgmajfault 25
[  604.537436][ T5866] total_inactive_anon 0
[  604.550504][ T5866] total_active_anon 65536
[  604.567441][ T5866] total_inactive_file 0
[  604.580776][ T5866] total_active_file 0
[  604.593718][ T5866] total_unevictable 0
[  604.609292][ T5866] anon_cost 0
[  604.621410][ T5866] file_cost 0
[  604.631730][ T5866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2786,pid=16693,uid=0
[  604.654246][T16726] delete_channel: no stack
[  604.699318][ T5866] Memory cgroup out of memory: Killed process 16693 (syz.2.2786) total-vm:102284kB, anon-rss:1224kB, file-rss:22528kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  605.259357][T16768] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  605.307776][T16771] ip6gretap1: entered promiscuous mode
[  605.328044][T16771] bridge0: Device is already in use.
[  605.605581][T16787] __nla_validate_parse: 5 callbacks suppressed
[  605.605599][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2816'.
[  605.781763][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2818'.
[  606.044272][T16806] netlink: 'syz.4.2821': attribute type 1 has an invalid length.
[  606.617865][T16820] 0: reclassify loop, rule prio 0, protocol 800
[  606.764444][T16827] netlink: 'syz.0.2826': attribute type 1 has an invalid length.
[  606.840550][ T5141] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  606.850410][ T5141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  606.863941][ T5141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  606.877943][ T5141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  606.888497][ T5141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  607.005125][ T5862] Bluetooth: hci2: command 0x0406 tx timeout
[  607.011300][ T5860] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  607.123148][T16841] netlink: 'syz.4.2830': attribute type 1 has an invalid length.
[  607.154589][T16841] netlink: 'syz.4.2830': attribute type 3 has an invalid length.
[  607.179546][T16841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2830'.
[  607.293668][T16850] netlink: 'syz.4.2830': attribute type 1 has an invalid length.
[  608.363226][T16854] xt_TCPMSS: Only works on TCP SYN packets
[  608.388980][T16830] batadv0 speed is unknown, defaulting to 1000
[  608.687894][T16830] lo speed is unknown, defaulting to 1000
[  608.687966][T16871] batadv0 speed is unknown, defaulting to 1000
[  608.701536][T16830] wg1 speed is unknown, defaulting to 1000
[  608.735748][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2837'.
[  608.933446][ T5860] Bluetooth: hci5: command tx timeout
[  608.942642][T16871] lo speed is unknown, defaulting to 1000
[  608.955336][T16830] lo speed is unknown, defaulting to 1000
[  608.955431][T16871] wg1 speed is unknown, defaulting to 1000
[  609.189974][T16871] lo speed is unknown, defaulting to 1000
[  609.454903][T16830] chnl_net:caif_netlink_parms(): no params data found
[  609.633907][T16830] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.636359][T16889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2841'.
[  609.642679][T16830] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.658898][T16830] bridge_slave_0: entered allmulticast mode
[  609.666124][T16830] bridge_slave_0: entered promiscuous mode
[  609.682044][T16889] geneve3: entered promiscuous mode
[  609.688500][T16830] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.696185][T16830] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.703387][T16830] bridge_slave_1: entered allmulticast mode
[  609.710228][T16830] bridge_slave_1: entered promiscuous mode
[  609.726666][ T6569] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  609.735209][ T6569] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  609.776417][ T6569] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  609.846300][ T6568] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.862612][T16830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.926659][T16830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.151384][T16830] team0: Port device team_slave_0 added
[  610.204581][T16830] team0: Port device team_slave_1 added
[  610.230970][T16902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2843'.
[  610.322949][T16830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.329916][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.402802][T16830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.467162][T16830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.492849][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.528794][T16830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.601232][T16830] hsr_slave_0: entered promiscuous mode
[  610.613234][T16830] hsr_slave_1: entered promiscuous mode
[  610.729755][T16923] netlink: 'syz.0.2850': attribute type 9 has an invalid length.
[  610.750525][T16923] netlink: 'syz.0.2850': attribute type 7 has an invalid length.
[  610.769888][T16923] netlink: 'syz.0.2850': attribute type 8 has an invalid length.
[  610.914924][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'.
[  611.003423][ T5860] Bluetooth: hci5: command tx timeout
[  611.009903][T16944] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2858'.
[  611.126543][T16949] netlink: 'syz.3.2856': attribute type 11 has an invalid length.
[  611.417671][T16968] netlink: 'syz.2.2863': attribute type 1 has an invalid length.
[  611.476257][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'.
[  611.494084][T16968] bond9: entered promiscuous mode
[  611.499674][T16968] 8021q: adding VLAN 0 to HW filter on device bond9
[  611.511401][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'.
[  611.536200][T16970] netlink: 'syz.3.2865': attribute type 13 has an invalid length.
[  611.550192][T16970] netlink: 'syz.3.2865': attribute type 12 has an invalid length.
[  611.554277][T16964] bond9: (slave veth9): making interface the new active one
[  611.567160][T16964] veth9: entered promiscuous mode
[  611.573867][T16964] bond9: (slave veth9): Enslaving as an active interface with an up link
[  611.776029][T16979] IPVS: Error connecting to the multicast addr
[  611.874814][T16985] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2870'.
[  611.891996][T16830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  611.930595][T16830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  611.954468][T16830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  611.981166][T16830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  612.025202][T16992] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2871'.
[  612.040234][T16992] netlink: 'syz.2.2871': attribute type 9 has an invalid length.
[  612.060183][T16992] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2871'.
[  612.097435][T16992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2871'.
[  612.181910][T16830] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.190526][T17005] netlink: 'syz.0.2873': attribute type 4 has an invalid length.
[  612.239869][T16830] 8021q: adding VLAN 0 to HW filter on device team0
[  612.250170][T17008] netlink: 'syz.2.2874': attribute type 1 has an invalid length.
[  612.266831][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.271359][T17008] netlink: 'syz.2.2874': attribute type 6 has an invalid length.
[  612.273996][ T6569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.348672][T17014] netlink: 'syz.0.2875': attribute type 2 has an invalid length.
[  612.360994][T17014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2875'.
[  612.362083][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.377228][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.397656][T17014] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2875'.
[  612.893707][T16830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.927512][T17035] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  613.017000][T16830] veth0_vlan: entered promiscuous mode
[  613.051657][T16830] veth1_vlan: entered promiscuous mode
[  613.085545][ T5860] Bluetooth: hci5: command tx timeout
[  613.119417][T16830] veth0_macvtap: entered promiscuous mode
[  613.141536][T16830] veth1_macvtap: entered promiscuous mode
[  613.214756][T16830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.267667][T16830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.306618][ T6601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.325409][ T6601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.352881][ T6601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.368087][T17045] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  613.377608][T17052] netlink: 'syz.4.2887': attribute type 29 has an invalid length.
[  613.388123][T17045] netlink: 'syz.2.2884': attribute type 2 has an invalid length.
[  613.397385][T17052] netlink: 'syz.4.2887': attribute type 29 has an invalid length.
[  613.415455][ T6601] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.668378][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.685624][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.764603][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.782181][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.185563][T17105] netlink: 'syz.2.2899': attribute type 1 has an invalid length.
[  614.259370][T17111] netlink: 'syz.2.2899': attribute type 1 has an invalid length.
[  614.363887][T17111] 8021q: adding VLAN 0 to HW filter on device bond10
[  614.396558][T17105] bond10: (slave ip6gretap2): making interface the new active one
[  614.422632][T17105] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link
[  614.729542][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  614.743251][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  614.751458][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  614.762500][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  614.773982][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  614.953006][T17127] batadv0 speed is unknown, defaulting to 1000
[  615.128198][T17144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  615.164014][ T5862] Bluetooth: hci5: command tx timeout
[  615.286226][T17144] macsec1: entered promiscuous mode
[  615.360986][T17127] lo speed is unknown, defaulting to 1000
[  615.394392][T17127] wg1 speed is unknown, defaulting to 1000
[  615.858764][T17127] lo speed is unknown, defaulting to 1000
[  616.481565][T17215] __nla_validate_parse: 4 callbacks suppressed
[  616.481584][T17215] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2928'.
[  616.533452][T17217] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2930'.
[  616.731702][T17127] chnl_net:caif_netlink_parms(): no params data found
[  616.843754][ T5862] Bluetooth: hci2: command tx timeout
[  616.934849][T17127] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.942123][T17127] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.949721][T17127] bridge_slave_0: entered allmulticast mode
[  616.957522][T17127] bridge_slave_0: entered promiscuous mode
[  616.966411][T17127] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.973695][T17127] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.981571][T17127] bridge_slave_1: entered allmulticast mode
[  616.989882][T17127] bridge_slave_1: entered promiscuous mode
[  616.997281][T17228] pim6reg1: tun_chr_ioctl cmd 1074025677
[  617.003351][T17228] pim6reg1: linktype set to 776
[  617.081521][T17127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.097307][T17127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.134275][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'.
[  617.137152][T17127] team0: Port device team_slave_0 added
[  617.152200][T17127] team0: Port device team_slave_1 added
[  617.165950][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'.
[  617.225433][T17127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.232503][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.261236][T17127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.275302][T17127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.282251][T17127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.311550][T17127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.410681][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'.
[  617.424341][T17127] hsr_slave_0: entered promiscuous mode
[  617.432247][T17127] hsr_slave_1: entered promiscuous mode
[  617.439077][T17127] debugfs: 'hsr0' already exists in 'hsr'
[  617.445237][T17127] Cannot create hsr debugfs directory
[  617.451582][T17249] syzkaller0: entered promiscuous mode
[  617.461473][T17249] syzkaller0: entered allmulticast mode
[  617.461622][T17253] netlink: 'syz.1.2937': attribute type 10 has an invalid length.
[  617.500516][T17253] 8021q: adding VLAN 0 to HW filter on device team0
[  617.510236][T17253] bond0: (slave team0): Enslaving as an active interface with an up link
[  617.519418][T17244] ip6tnl0: Caught tx_queue_len zero misconfig
[  617.527078][T17244] netlink: 'syz.2.2936': attribute type 10 has an invalid length.
[  617.649370][T17264] netlink: 'syz.1.2942': attribute type 1 has an invalid length.
[  617.660642][T17264] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2942'.
[  617.691522][T17264] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2942'.
[  617.720263][T17264] netlink: 'syz.1.2942': attribute type 1 has an invalid length.
[  617.798208][T17127] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  617.819082][T17270] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  617.975059][T17284] team0: entered promiscuous mode
[  617.986276][T17284] team_slave_0: entered promiscuous mode
[  617.992638][T17284] team_slave_1: entered promiscuous mode
[  617.999675][T17284] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  618.018953][T17127] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.071977][T17127] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.117580][T17127] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  618.124681][T17292] GUP no longer grows the stack in syz.2.2949 (17292): 200000004000-200000005000 (200000002000)
[  618.139737][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.2.2949 Not tainted syzkaller #0 PREEMPT(full) 
[  618.139774][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  618.139786][T17292] Call Trace:
[  618.139793][T17292]  <TASK>
[  618.139801][T17292]  dump_stack_lvl+0xe8/0x150
[  618.139832][T17292]  __get_user_pages+0x2453/0x29d0
[  618.139876][T17292]  ? __gup_longterm_locked+0xc4e/0x1630
[  618.139897][T17292]  ? down_read_killable+0x1bb/0x340
[  618.139924][T17292]  ? try_get_folio+0xec/0x650
[  618.139951][T17292]  __gup_longterm_locked+0xdcf/0x1630
[  618.139998][T17292]  gup_fast_fallback+0x1d82/0x22e0
[  618.140049][T17292]  ? __pfx_gup_fast_fallback+0x10/0x10
[  618.140072][T17292]  ? is_valid_gup_args+0x11f/0x200
[  618.140092][T17292]  ? get_user_pages_fast+0x4d/0xb0
[  618.140114][T17292]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  618.140139][T17292]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  618.140165][T17292]  iov_iter_get_pages2+0x5e/0xa0
[  618.140186][T17292]  __se_sys_vmsplice+0x7b3/0x1490
[  618.140222][T17292]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  618.140241][T17292]  ? __pfx_futex_wait+0x10/0x10
[  618.140325][T17292]  do_syscall_64+0x14d/0xf80
[  618.140349][T17292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.140368][T17292]  ? trace_irq_disable+0x37/0x100
[  618.140388][T17292]  ? clear_bhb_loop+0x40/0x90
[  618.140405][T17292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.140415][T17292] RIP: 0033:0x7f596b19c629
[  618.140425][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.140434][T17292] RSP: 002b:00007f596c0e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  618.140446][T17292] RAX: ffffffffffffffda RBX: 00007f596b416180 RCX: 00007f596b19c629
[  618.140454][T17292] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  618.140460][T17292] RBP: 00007f596b232b39 R08: 0000000000000000 R09: 0000000000000000
[  618.140466][T17292] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  618.140472][T17292] R13: 00007f596b416218 R14: 00007f596b416180 R15: 00007ffcda56a528
[  618.140489][T17292]  </TASK>
[  618.142629][T17293] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.2950'.
[  618.366403][T17293] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  618.923732][ T5862] Bluetooth: hci2: command tx timeout
[  620.650704][T17266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  620.673161][T17127] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  620.708819][T17127] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  620.753870][T17127] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  620.796274][T17127] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  620.807720][T17314] netlink: 'syz.4.2956': attribute type 1 has an invalid length.
[  620.817199][T17314] netlink: 174 bytes leftover after parsing attributes in process `syz.4.2956'.
[  621.003344][ T5860] Bluetooth: hci2: command tx timeout
[  621.040168][T17343] vlan0: entered allmulticast mode
[  621.045588][T17343] veth0_vlan: entered allmulticast mode
[  621.171629][T17127] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.217321][T17127] 8021q: adding VLAN 0 to HW filter on device team0
[  621.249538][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.254860][T17354] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2967'.
[  621.256684][ T6605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.309917][T17355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  621.328614][T17355] syzkaller0: entered promiscuous mode
[  621.340255][T17355] syzkaller0: entered allmulticast mode
[  621.357116][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.364283][ T6603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.394334][T17332] netlink: 'syz.1.2960': attribute type 21 has an invalid length.
[  621.413345][T17332] bond0: option miimon: invalid value (18446744072155183148)
[  621.420786][T17332] bond0: option miimon: allowed values 0 - 2147483647
[  621.435025][T17355] tipc: Resetting bearer <eth:syzkaller0>
[  621.473273][T17353] tipc: Resetting bearer <eth:syzkaller0>
[  621.522375][T17353] tipc: Disabling bearer <eth:syzkaller0>
[  621.737257][T17374] xt_hashlimit: size too large, truncated to 1048576
[  621.755281][T17374] xt_hashlimit: max too large, truncated to 1048576
[  621.807448][T17378] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) !
[  621.817711][T17374] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  621.871618][T17127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.017503][T17127] veth0_vlan: entered promiscuous mode
[  622.055544][T17127] veth1_vlan: entered promiscuous mode
[  622.062604][T17386] batadv_slave_0: Caught tx_queue_len zero misconfig
[  622.137267][T17127] veth0_macvtap: entered promiscuous mode
[  622.157235][T17127] veth1_macvtap: entered promiscuous mode
[  622.200308][T17127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.264623][T17391] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  622.309382][T17127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.341383][ T6605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.362676][ T6605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.403993][ T6605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.438078][ T6605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  622.455416][T17403] __nla_validate_parse: 1 callbacks suppressed
[  622.455430][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'.
[  622.537144][T17402] batadv0 speed is unknown, defaulting to 1000
[  622.596528][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.607524][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.651749][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  622.665018][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  622.809829][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'.
[  622.862641][T17413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  623.031338][T17416] xt_hashlimit: overflow, rate too high: 0
[  623.045667][T17402] lo speed is unknown, defaulting to 1000
[  623.083349][ T5862] Bluetooth: hci2: command tx timeout
[  623.090621][T17402] wg1 speed is unknown, defaulting to 1000
[  623.100709][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  623.114916][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  623.122885][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  623.132038][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  623.141275][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  623.163928][T17420] IPVS: set_ctl: invalid protocol: 16680 255.255.255.255:20004
[  623.183991][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2983'.
[  623.195341][T17420] bond0: ARP target 170.170.170.170 is already present
[  623.202398][T17420] bond0: option arp_ip_target: invalid value (2863311530)
[  623.243155][T17417] batadv0 speed is unknown, defaulting to 1000
[  623.353669][T17394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.668445][T17417] lo speed is unknown, defaulting to 1000
[  623.683563][ T6605] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.704588][ T6605] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.734693][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'.
[  623.756189][T17417] wg1 speed is unknown, defaulting to 1000
[  623.756204][T17402] lo speed is unknown, defaulting to 1000
[  623.788881][ T6605] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.822875][ T6605] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.845319][T17442] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2990'.
[  623.929049][ T6605] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  623.948902][ T6605] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.040351][ T6605] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  624.074614][ T6605] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.206804][ T1298] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  624.283629][T17458] netlink: 'syz.3.2995': attribute type 1 has an invalid length.
[  624.312905][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2995'.
[  624.331991][T17458] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2995'.
[  624.357691][T17458] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2995'.
[  624.490234][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'.
[  624.502593][T17470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2998'.
[  624.512088][ T6605] bond10 (unregistering): (slave ip6gretap2): Releasing active interface
[  624.842231][ T6605] bond0 (unregistering): (slave »»»»»»): Releasing backup interface
[  624.854687][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.864055][ T6605] bond0 (unregistering): Released all slaves
[  624.876819][ T6605] bond1 (unregistering): Released all slaves
[  624.888915][ T6605] bond2 (unregistering): Released all slaves
[  624.900970][ T6605] bond3 (unregistering): Released all slaves
[  624.913702][ T6605] bond4 (unregistering): Released all slaves
[  624.930019][ T6605] bond5 (unregistering): Released all slaves
[  624.954876][ T6605] bond6 (unregistering): Released all slaves
[  624.967239][ T6605] bond7 (unregistering): Released all slaves
[  624.980058][ T6605] bond8 (unregistering): Released all slaves
[  624.993958][ T6605] bond9 (unregistering): (slave veth9): Releasing backup interface
[  625.001868][ T6605] veth9: left promiscuous mode
[  625.010105][ T6605] bond9 (unregistering): Released all slaves
[  625.024775][ T6605] bond10 (unregistering): Released all slaves
[  625.052843][T17417] lo speed is unknown, defaulting to 1000
[  625.243117][ T5862] Bluetooth: hci1: command tx timeout
[  625.434082][ T6605] tipc: Left network mode
[  625.819615][T17503] syzkaller1: entered promiscuous mode
[  625.846408][T17503] syzkaller1: entered allmulticast mode
[  626.253654][T17526] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  626.281170][T17526] bond5 (unregistering): Released all slaves
[  626.726134][T17543] batadv0 speed is unknown, defaulting to 1000
[  626.766809][T17546] syzkaller0: entered promiscuous mode
[  626.772302][T17546] syzkaller0: entered allmulticast mode
[  627.055815][T17543] lo speed is unknown, defaulting to 1000
[  627.063639][T17543] wg1 speed is unknown, defaulting to 1000
[  627.314403][T17543] lo speed is unknown, defaulting to 1000
[  627.323019][ T5862] Bluetooth: hci1: command tx timeout
[  627.402243][T17417] chnl_net:caif_netlink_parms(): no params data found
[  627.786449][T17602] xt_hashlimit: size too large, truncated to 1048576
[  627.835256][T17417] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.854147][T17417] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.874727][T17417] bridge_slave_0: entered allmulticast mode
[  627.882401][T17417] bridge_slave_0: entered promiscuous mode
[  627.941304][T17417] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.980727][T17417] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.995757][T17417] bridge_slave_1: entered allmulticast mode
[  628.017548][T17417] bridge_slave_1: entered promiscuous mode
[  628.101008][T17608] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) !
[  628.212676][T17607] batadv0 speed is unknown, defaulting to 1000
[  628.351178][T17417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.469163][T17417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.598091][T17623] netlink: 'syz.3.3031': attribute type 29 has an invalid length.
[  628.656460][T17417] team0: Port device team_slave_0 added
[  628.776123][T17633] __nla_validate_parse: 2 callbacks suppressed
[  628.776135][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'.
[  628.874844][T17417] team0: Port device team_slave_1 added
[  628.995850][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'.
[  629.021293][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.050126][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.067897][ T6605] batman_adv: batadv0: Removing interface: macsec1
[  629.359726][T17607] lo speed is unknown, defaulting to 1000
[  629.370000][T17607] wg1 speed is unknown, defaulting to 1000
[  629.374311][T17417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.386728][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.413010][ T5862] Bluetooth: hci1: command tx timeout
[  629.419088][T17417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.442114][T17417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.449548][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.479442][T17417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.655839][T17417] hsr_slave_0: entered promiscuous mode
[  629.669138][T17417] hsr_slave_1: entered promiscuous mode
[  629.688161][T17417] debugfs: 'hsr0' already exists in 'hsr'
[  629.700395][T17417] Cannot create hsr debugfs directory
[  629.781157][T17607] lo speed is unknown, defaulting to 1000
[  630.877453][T17684] syzkaller1: entered promiscuous mode
[  630.886817][T17691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3040'.
[  630.889738][T17684] syzkaller1: entered allmulticast mode
[  630.897299][T17691] netlink: 179268 bytes leftover after parsing attributes in process `syz.3.3040'.
[  631.004210][T17684] bond0: (slave sit0): Error: Device type is different from other slaves
[  631.180396][T17702] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3043'.
[  631.264919][T17417] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  631.322533][T17417] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  631.370852][T17417] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  631.399856][T17417] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  631.486991][ T5860] Bluetooth: hci1: command tx timeout
[  631.495251][T17722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3046'.
[  631.521164][T17706] batadv0 speed is unknown, defaulting to 1000
[  631.700229][T17725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3047'.
[  631.907064][T17417] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.005144][T17417] 8021q: adding VLAN 0 to HW filter on device team0
[  632.092895][T17742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3050'.
[  632.108742][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.115907][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.161999][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.169177][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.354638][T17757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3052'.
[  632.365185][T17706] lo speed is unknown, defaulting to 1000
[  632.375875][T17706] wg1 speed is unknown, defaulting to 1000
[  632.656274][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.768823][T17417] veth0_vlan: entered promiscuous mode
[  632.799594][T17417] veth1_vlan: entered promiscuous mode
[  632.819840][T17706] lo speed is unknown, defaulting to 1000
[  632.864767][T17778] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3056'.
[  632.897873][T17417] veth0_macvtap: entered promiscuous mode
[  632.934364][T17417] veth1_macvtap: entered promiscuous mode
[  632.996841][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.026124][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.047529][ T6603] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.091283][ T6603] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.111085][ T6603] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.138135][ T6603] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.563464][ T5860] Bluetooth: hci1: command 0x0405 tx timeout
[  634.177221][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3058'.
[  634.194152][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'.
[  634.204500][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3058'.
[  635.219417][T17749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.363331][ T6557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.376457][ T6557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.384801][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3061'.
[  635.437813][ T6603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.449678][ T6603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.517232][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'.
[  635.604177][T17855] ipvlan2: entered promiscuous mode
[  636.090421][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3072'.
[  636.179752][T17895] netlink: 'syz.1.3073': attribute type 1 has an invalid length.
[  636.443394][ T5860] Bluetooth: hci1: command 0x0405 tx timeout
[  636.555505][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  636.566138][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  636.574142][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  636.582036][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  636.591144][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  636.710847][T17919] batadv0 speed is unknown, defaulting to 1000
[  636.819059][T17930] syzkaller0: entered promiscuous mode
[  636.845892][T17930] syzkaller0: entered allmulticast mode
[  637.299172][T17940] tipc: Started in network mode
[  637.304971][T17940] tipc: Node identity b24b9dd6144b, cluster identity 4711
[  637.312417][T17940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.340515][T17919] lo speed is unknown, defaulting to 1000
[  637.392345][T17919] wg1 speed is unknown, defaulting to 1000
[  637.399684][T17957] netlink: 'syz.4.3085': attribute type 1 has an invalid length.
[  637.415692][T17929] tipc: Resetting bearer <eth:syzkaller0>
[  637.436178][T17929] tipc: Disabling bearer <eth:syzkaller0>
[  637.476411][T17957] 8021q: adding VLAN 0 to HW filter on device bond12
[  637.558970][T17959] bond12: entered allmulticast mode
[  637.580957][T17961] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  637.602085][T17961] bond1: (slave lo): Enslaving as an active interface with an up link
[  637.615852][T17961] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  637.632470][T17957] tc_dump_action: action bad kind
[  637.701329][T17968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.760226][T17963] bond12: (slave ip6gretap2): making interface the new active one
[  637.768252][T17963] ip6gretap2: entered allmulticast mode
[  637.776442][T17963] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link
[  637.806720][T17919] lo speed is unknown, defaulting to 1000
[  637.897541][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3091'.
[  637.959924][T17978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3091'.
[  638.000578][T17978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  638.015881][T17978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  638.040537][T17978] bond0 (unregistering): Released all slaves
[  638.201479][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'.
[  638.257416][T17994] netlink: 'syz.1.3095': attribute type 1 has an invalid length.
[  638.271193][T17994] netlink: 'syz.1.3095': attribute type 2 has an invalid length.
[  638.456913][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'.
[  638.530763][T17919] chnl_net:caif_netlink_parms(): no params data found
[  638.683079][ T5860] Bluetooth: hci3: command tx timeout
[  638.740402][T17919] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.779037][T17919] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.809033][T17919] bridge_slave_0: entered allmulticast mode
[  638.846540][T17919] bridge_slave_0: entered promiscuous mode
[  638.879253][T17919] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.894756][T17919] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.903252][T17919] bridge_slave_1: entered allmulticast mode
[  638.915824][T17919] bridge_slave_1: entered promiscuous mode
[  639.020949][T17919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.057365][T17919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.200943][T17919] team0: Port device team_slave_0 added
[  639.213312][T17919] team0: Port device team_slave_1 added
[  639.387559][T17919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.402515][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.451439][T17919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.499160][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'.
[  639.508472][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3109'.
[  639.525853][T18041] team0: entered promiscuous mode
[  639.531962][T18041] team_slave_0: entered promiscuous mode
[  639.538633][T18041] team_slave_1: entered promiscuous mode
[  639.575161][T18041] team0: left promiscuous mode
[  639.580171][T18041] team_slave_0: left promiscuous mode
[  639.586172][T18041] team_slave_1: left promiscuous mode
[  639.601035][T17919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.611329][T17919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.673707][T17919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.754981][T18060] netlink: 'syz.4.3112': attribute type 1 has an invalid length.
[  639.778483][T18060] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3112'.
[  639.840233][T17919] hsr_slave_0: entered promiscuous mode
[  639.854211][T17919] hsr_slave_1: entered promiscuous mode
[  639.868525][T17919] debugfs: 'hsr0' already exists in 'hsr'
[  639.877325][T17919] Cannot create hsr debugfs directory
[  639.885631][T18054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.902899][T18060] syzkaller0: entered promiscuous mode
[  639.908380][T18060] syzkaller0: entered allmulticast mode
[  639.975551][T18054] tipc: Resetting bearer <eth:syzkaller0>
[  640.005524][T18053] tipc: Resetting bearer <eth:syzkaller0>
[  640.041938][T18053] tipc: Disabling bearer <eth:syzkaller0>
[  640.284155][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3120'.
[  640.394948][T17919] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.474718][T18102] netlink: 'syz.1.3124': attribute type 15 has an invalid length.
[  640.498502][T17919] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.645920][T17919] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.734308][T17919] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.765966][ T5860] Bluetooth: hci3: command tx timeout
[  640.969084][T18134] veth1_macvtap: left promiscuous mode
[  640.986195][T18134] macsec0: entered promiscuous mode
[  641.062622][T18138] netlink: 'syz.2.3131': attribute type 1 has an invalid length.
[  641.070595][T18138] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3131'.
[  641.112018][T17919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  641.142347][T17919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  641.186056][T17919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  641.206740][T17919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  641.231478][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'.
[  641.316809][T18149] bridge1: port 1(ip6gretap1) entered blocking state
[  641.335414][T18149] bridge1: port 1(ip6gretap1) entered disabled state
[  641.368185][T18154] IPVS: Scheduler module ip_vs_sip not found
[  641.375201][T18149] ip6gretap1: entered allmulticast mode
[  641.395529][T18149] ip6gretap1: entered promiscuous mode
[  641.479306][T18165] bridge1: port 2(veth3) entered blocking state
[  641.497596][T18165] bridge1: port 2(veth3) entered disabled state
[  641.512722][T18165] veth3: entered allmulticast mode
[  641.537306][T18165] veth3: entered promiscuous mode
[  641.543870][T18165] bridge1: port 2(veth3) entered blocking state
[  641.550251][T18165] bridge1: port 2(veth3) entered forwarding state
[  641.558294][T18173] batadv0: entered promiscuous mode
[  641.573188][T18173] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  641.604487][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'.
[  641.643495][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3139'.
[  641.751074][T17919] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.775331][ T6605] bridge1: port 2(veth3) entered disabled state
[  641.807265][T17919] 8021q: adding VLAN 0 to HW filter on device team0
[  641.852565][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.859722][ T6569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.901620][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.908772][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.095477][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'.
[  642.111125][T18200] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3145'.
[  642.135970][T18204] netlink: 'syz.3.3146': attribute type 21 has an invalid length.
[  642.441313][T17919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  642.461306][T18220] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  642.476030][T18220] tipc: Enabled bearer <udp:syz0>, priority 10
[  642.516097][T18224] xt_ipcomp: unknown flags 1D
[  642.539473][T18226] netlink: 'syz.4.3153': attribute type 1 has an invalid length.
[  642.623866][T18222] syzkaller1: entered promiscuous mode
[  642.629485][T18222] syzkaller1: entered allmulticast mode
[  642.642489][T17919] veth0_vlan: entered promiscuous mode
[  642.659408][T17919] veth1_vlan: entered promiscuous mode
[  642.694559][T17919] veth0_macvtap: entered promiscuous mode
[  642.745479][T17919] veth1_macvtap: entered promiscuous mode
[  642.781752][T17919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.812238][T17919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.843616][ T5860] Bluetooth: hci3: command tx timeout
[  642.851901][ T6592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.882474][ T6592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.918806][ T6592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.958639][ T6592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  643.130340][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.157343][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.219543][ T6568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.256514][ T6568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.268909][T18262] netlink: 'syz.4.3161': attribute type 2 has an invalid length.
[  643.593637][T11953] tipc: Node number set to 2785058262
[  643.807933][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  643.825781][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  643.836113][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  643.846780][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  643.860402][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  643.991664][T18285] batadv0 speed is unknown, defaulting to 1000
[  644.199117][ T5869] bond8: (slave syz_tun): Releasing active interface
[  644.404776][ T6592] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.539103][T18285] lo speed is unknown, defaulting to 1000
[  644.544509][T18303] netlink: 'syz.1.3174': attribute type 28 has an invalid length.
[  644.565258][T18304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  644.590752][T18303] x_tables: duplicate underflow at hook 1
[  644.598004][ T6592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.614624][T18304] x_tables: duplicate underflow at hook 1
[  644.662864][T18285] wg1 speed is unknown, defaulting to 1000
[  644.842439][ T6592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.889159][T18316] netem: invalid attributes len -1
[  644.904353][T18316] netem: change failed
[  644.922996][ T5862] Bluetooth: hci3: command tx timeout
[  644.945039][ T6592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  645.318896][T18285] lo speed is unknown, defaulting to 1000
[  645.329244][ T6592] bond0: left allmulticast mode
[  645.341179][T18327] __nla_validate_parse: 10 callbacks suppressed
[  645.341194][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3181'.
[  645.348487][ T6592] bond_slave_0: left allmulticast mode
[  645.365734][T18327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3181'.
[  645.388041][ T6592] bond_slave_1: left allmulticast mode
[  645.395035][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3181'.
[  645.401262][ T6592] bridge0: port 2(bond0) entered disabled state
[  645.428404][T18327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3181'.
[  645.446019][ T6592] dummy0: left allmulticast mode
[  645.457357][ T6592] dummy0: left promiscuous mode
[  645.465595][ T6592] bridge0: port 3(dummy0) entered disabled state
[  645.535158][ T6592] bridge_slave_0: left allmulticast mode
[  645.549936][ T6592] bridge_slave_0: left promiscuous mode
[  645.576884][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.750067][T18349] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3183'.
[  645.969528][ T5862] Bluetooth: hci0: command tx timeout
[  646.005188][ T6592] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  646.066475][ T6592] bond12 (unregistering): (slave ip6gretap2): Releasing active interface
[  646.077427][ T6592] ip6gretap2 (unregistering): left allmulticast mode
[  646.320793][ T6592] dvmrp1 (unregistering): left allmulticast mode
[  646.365350][ T6592] bond6 (unregistering): (slave geneve2): Releasing active interface
[  646.569372][ T6592] bond9 (unregistering): (slave bridge4): Releasing active interface
[  646.794238][ T6592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  646.803452][ T6592] bond_slave_0: left promiscuous mode
[  646.809788][ T6592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  646.820808][ T6592] bond_slave_1: left promiscuous mode
[  646.826949][ T6592] bond0 (unregistering): Released all slaves
[  646.836410][ T6592] bond1 (unregistering): Released all slaves
[  646.848813][ T6592] bond2 (unregistering): Released all slaves
[  646.862461][ T6592] bond3 (unregistering): Released all slaves
[  646.880147][ T6592] bond4 (unregistering): (slave lo): Releasing backup interface
[  646.890287][ T6592] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  646.903343][ T6592] bond4 (unregistering): Released all slaves
[  646.915900][ T6592] bond5 (unregistering): Released all slaves
[  646.930178][ T6592] bond6 (unregistering): Released all slaves
[  646.944372][ T6592] team0: Port device macvlan2 removed
[  646.953429][ T6592] bond7 (unregistering): Released all slaves
[  646.969564][ T6592] bond8 (unregistering): Released all slaves
[  646.981644][ T6592] bond9 (unregistering): Released all slaves
[  647.000306][ T6592] bond10 (unregistering): Released all slaves
[  647.015936][ T6592] bond11 (unregistering): (slave batadv2): Releasing backup interface
[  647.025570][ T6592] bond11 (unregistering): Released all slaves
[  647.038602][ T6592] bond12 (unregistering): Released all slaves
[  647.054334][ T6592] bond13 (unregistering): Released all slaves
[  647.257579][ T6592] !: left promiscuous mode
[  647.416808][ T6592] m1Ie5èÿá: left promiscuous mode
[  647.459340][T18392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3195'.
[  647.474460][T18393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3194'.
[  647.508877][T18389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3193'.
[  647.515288][T18395] syzkaller0: entered promiscuous mode
[  647.524515][T18395] syzkaller0: entered allmulticast mode
[  647.540276][ T6592] : left promiscuous mode
[  647.669029][ T6592] tipc: Left network mode
[  647.923755][T18285] chnl_net:caif_netlink_parms(): no params data found
[  648.044450][ T5862] Bluetooth: hci0: command tx timeout
[  648.110558][T18285] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.120897][T18285] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.128893][T18285] bridge_slave_0: entered allmulticast mode
[  648.136925][T18285] bridge_slave_0: entered promiscuous mode
[  648.152658][T18285] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.163629][T18285] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.170947][T18285] bridge_slave_1: entered allmulticast mode
[  648.180956][T18285] bridge_slave_1: entered promiscuous mode
[  648.248659][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.271681][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.308321][T18285] team0: Port device team_slave_0 added
[  648.359863][T18285] team0: Port device team_slave_1 added
[  648.488854][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.496071][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.536678][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.550150][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.558179][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.584768][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.760536][T18285] hsr_slave_0: entered promiscuous mode
[  648.769363][T18285] hsr_slave_1: entered promiscuous mode
[  648.776743][T18285] debugfs: 'hsr0' already exists in 'hsr'
[  648.784920][T18285] Cannot create hsr debugfs directory
[  648.795839][T18435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  648.887183][ T6592] hsr_slave_0: left promiscuous mode
[  648.896964][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.905190][ T6592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.914995][ T6592] batman_adv: batadv0: Removing interface: macsec2
[  649.041631][ T6592] team0 (unregistering): Port device team_slave_1 removed
[  649.068553][ T6592] team0 (unregistering): Port device team_slave_0 removed
[  649.076296][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  649.586127][T18451] syzkaller0: entered promiscuous mode
[  649.591617][T18451] syzkaller0: entered allmulticast mode
[  649.641834][ T6592] IPVS: stop unused estimator thread 0...
[  650.122977][ T5862] Bluetooth: hci0: command tx timeout
[  650.443947][T18393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  650.483379][T18285] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  650.541640][T18285] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  650.615875][T18285] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  650.659090][T18285] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  650.992304][T18285] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.016523][T18285] 8021q: adding VLAN 0 to HW filter on device team0
[  651.060885][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.068049][ T6568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.121576][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.128739][ T6568] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.554196][T18469] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  651.572302][T18469] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  651.608572][T18285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.821376][T18469] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  651.852866][T18469] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  651.933399][T18533] netlink: 'syz.3.3222': attribute type 1 has an invalid length.
[  651.975795][T18532] netlink: 'syz.3.3222': attribute type 1 has an invalid length.
[  652.101772][T18533] 8021q: adding VLAN 0 to HW filter on device bond2
[  652.126417][T18469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  652.132342][T18469] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  652.206943][ T5862] Bluetooth: hci0: command tx timeout
[  652.314219][T18469] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  652.339404][T18469] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  652.357664][T18553] 8021q: VLANs not supported on ip6_vti0
[  652.509066][T18561] netlink: 'syz.0.3228': attribute type 61 has an invalid length.
[  652.515586][T18469] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  652.525323][T18561] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3228'.
[  652.538480][T18469] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  652.549670][T18285] veth0_vlan: entered promiscuous mode
[  652.588529][T18564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3229'.
[  652.588861][T18285] veth1_vlan: entered promiscuous mode
[  652.694272][T18570] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3229'.
[  652.720577][T18285] veth0_macvtap: entered promiscuous mode
[  652.768665][T18285] veth1_macvtap: entered promiscuous mode
[  652.829576][T18579] Bluetooth: MGMT ver 1.23
[  652.837850][T18285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.899915][T18285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.940515][ T6568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.977076][ T6568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.024735][ T6568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.088534][T18587] netlink: 'syz.0.3234': attribute type 3 has an invalid length.
[  653.120544][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  653.136846][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'.
[  653.149598][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3234'.
[  653.170097][ T6568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.582537][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.611487][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.714049][ T6592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.750763][ T6592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.767864][T18635] netlink: 'syz.2.3242': attribute type 1 has an invalid length.
[  653.784081][T18637] tipc: Started in network mode
[  653.789622][T18637] tipc: Node identity 5ed3d0982b6c, cluster identity 4711
[  653.832323][T18637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.935266][T18646] netlink: 'syz.2.3243': attribute type 2 has an invalid length.
[  654.160255][T18627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.240408][T18637] tipc: Disabling bearer <eth:syzkaller0>
[  654.275974][T18646] !: entered promiscuous mode
[  654.477792][T18627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.506284][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'.
[  654.517280][T18668] x_tables: duplicate underflow at hook 2
[  654.585371][T18673] netlink: 'syz.2.3246': attribute type 2 has an invalid length.
[  654.735271][T18627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.762010][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3247'.
[  654.952471][T18627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.144295][T18701] netlink: 'syz.2.3255': attribute type 13 has an invalid length.
[  655.167199][ T6605] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.184390][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'.
[  655.339227][T18718] FAULT_INJECTION: forcing a failure.
[  655.339227][T18718] name failslab, interval 1, probability 0, space 0, times 1
[  655.357846][T18718] CPU: 0 UID: 0 PID: 18718 Comm: syz.0.3258 Not tainted syzkaller #0 PREEMPT(full) 
[  655.357871][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  655.357880][T18718] Call Trace:
[  655.357887][T18718]  <TASK>
[  655.357894][T18718]  dump_stack_lvl+0xe8/0x150
[  655.357920][T18718]  should_fail_ex+0x412/0x560
[  655.357948][T18718]  should_failslab+0xa8/0x100
[  655.357969][T18718]  ? security_inode_alloc+0x39/0x310
[  655.357992][T18718]  kmem_cache_alloc_noprof+0x87/0x650
[  655.358021][T18718]  security_inode_alloc+0x39/0x310
[  655.358046][T18718]  inode_init_always_gfp+0x9ed/0xdc0
[  655.358076][T18718]  ? __pfx_sock_alloc_inode+0x10/0x10
[  655.358098][T18718]  alloc_inode+0x82/0x1b0
[  655.358122][T18718]  __sock_create+0x12d/0x9d0
[  655.358150][T18718]  udp_sock_create4+0xca/0x480
[  655.358175][T18718]  ? __pfx_udp_sock_create4+0x10/0x10
[  655.358210][T18718]  rxrpc_lookup_local+0xd1e/0x1500
[  655.358242][T18718]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  655.358283][T18718]  ? __local_bh_enable_ip+0xd0/0x130
[  655.358306][T18718]  rxrpc_sendmsg+0x399/0x710
[  655.358332][T18718]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  655.358350][T18718]  ____sys_sendmsg+0xa68/0xad0
[  655.358370][T18718]  ? __might_fault+0xaf/0x130
[  655.358395][T18718]  ? __pfx_____sys_sendmsg+0x10/0x10
[  655.358424][T18718]  ? import_iovec+0x73/0xa0
[  655.358444][T18718]  ___sys_sendmsg+0x2a5/0x360
[  655.358463][T18718]  ? __lock_acquire+0x6b5/0x2cf0
[  655.358486][T18718]  ? __pfx____sys_sendmsg+0x10/0x10
[  655.358543][T18718]  ? __fget_files+0x2a/0x420
[  655.358559][T18718]  ? __fget_files+0x3a0/0x420
[  655.358585][T18718]  __x64_sys_sendmsg+0x1bd/0x2a0
[  655.358608][T18718]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  655.358639][T18718]  ? __pfx_ksys_write+0x10/0x10
[  655.358671][T18718]  do_syscall_64+0x14d/0xf80
[  655.358691][T18718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.358706][T18718]  ? trace_irq_disable+0x37/0x100
[  655.358722][T18718]  ? clear_bhb_loop+0x40/0x90
[  655.358740][T18718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.358756][T18718] RIP: 0033:0x7f3962b9c629
[  655.358771][T18718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.358785][T18718] RSP: 002b:00007f3963acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  655.358804][T18718] RAX: ffffffffffffffda RBX: 00007f3962e15fa0 RCX: 00007f3962b9c629
[  655.358815][T18718] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003
[  655.358825][T18718] RBP: 00007f3963acf090 R08: 0000000000000000 R09: 0000000000000000
[  655.358835][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  655.358859][T18718] R13: 00007f3962e16038 R14: 00007f3962e15fa0 R15: 00007fff28a86218
[  655.358889][T18718]  </TASK>
[  655.358919][T18718] socket: no more sockets
[  655.721956][T18701] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.729665][T18701] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.888767][T18701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.902161][T18730] netlink: zone id is out of range
[  655.903054][T18701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.914796][T18730] netlink: zone id is out of range
[  655.914814][T18730] netlink: zone id is out of range
[  655.914823][T18730] netlink: zone id is out of range
[  655.914832][T18730] netlink: zone id is out of range
[  655.914843][T18730] netlink: zone id is out of range
[  655.914852][T18730] netlink: zone id is out of range
[  655.914860][T18730] netlink: zone id is out of range
[  655.953585][T18730] netlink: zone id is out of range
[  656.034734][T18732] "syz.0.3260" (18732) uses obsolete ecb(arc4) skcipher
[  656.072218][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'.
[  656.122526][ T6568] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.136988][ T6568] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.146904][ T6568] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.170477][ T6568] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.231671][ T6568] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.249907][ T6605] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.263099][ T6605] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  657.479004][T18840] netlink: 'syz.1.3288': attribute type 1 has an invalid length.
[  657.561520][T18847] __nla_validate_parse: 1 callbacks suppressed
[  657.561537][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'.
[  657.587472][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3290'.
[  657.715118][T18855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'.
[  657.733361][T18855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'.
[  657.853689][T18867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  658.016012][T18873] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.108273][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'.
[  658.170665][T18888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3299'.
[  658.207122][T18873] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.338087][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3299'.
[  658.349066][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3299'.
[  658.371885][T18873] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.486361][T18873] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  658.745492][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'.
[  658.754577][T18925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3310'.
[  658.792135][ T6596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.817963][ T6596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.858473][ T5886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.902717][ T6596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  659.107188][T18952] Bluetooth: MGMT ver 1.23
[  659.306266][T18965] syzkaller0: entered promiscuous mode
[  659.311819][T18965] syzkaller0: entered allmulticast mode
[  659.597345][T18977] netlink: 'syz.3.3326': attribute type 1 has an invalid length.
[  660.019172][T19000] FAULT_INJECTION: forcing a failure.
[  660.019172][T19000] name failslab, interval 1, probability 0, space 0, times 0
[  660.034592][T19000] CPU: 0 UID: 0 PID: 19000 Comm: syz.0.3332 Not tainted syzkaller #0 PREEMPT(full) 
[  660.034615][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  660.034625][T19000] Call Trace:
[  660.034631][T19000]  <TASK>
[  660.034645][T19000]  dump_stack_lvl+0xe8/0x150
[  660.034671][T19000]  should_fail_ex+0x412/0x560
[  660.034697][T19000]  should_failslab+0xa8/0x100
[  660.034721][T19000]  __kmalloc_cache_noprof+0x88/0x660
[  660.034741][T19000]  ? __kthread_create_on_node+0x115/0x3f0
[  660.034759][T19000]  ? __init_swait_queue_head+0xa9/0x150
[  660.034784][T19000]  ? __pfx_rxrpc_io_thread+0x10/0x10
[  660.034806][T19000]  __kthread_create_on_node+0x115/0x3f0
[  660.034827][T19000]  ? __pfx___kthread_create_on_node+0x10/0x10
[  660.034858][T19000]  ? __pfx_rxrpc_io_thread+0x10/0x10
[  660.034876][T19000]  ? __pfx_rxrpc_io_thread+0x10/0x10
[  660.034895][T19000]  kthread_create_on_node+0xeb/0x140
[  660.034918][T19000]  ? __pfx_kthread_create_on_node+0x10/0x10
[  660.034942][T19000]  ? do_raw_spin_unlock+0xf5/0x210
[  660.034967][T19000]  rxrpc_lookup_local+0xf1c/0x1500
[  660.034995][T19000]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[  660.035014][T19000]  ? __pfx_rxrpc_encap_rcv+0x10/0x10
[  660.035030][T19000]  ? __pfx_rxrpc_encap_err_rcv+0x10/0x10
[  660.035065][T19000]  ? __local_bh_enable_ip+0xd0/0x130
[  660.035087][T19000]  rxrpc_sendmsg+0x399/0x710
[  660.035111][T19000]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  660.035127][T19000]  ____sys_sendmsg+0xa68/0xad0
[  660.035147][T19000]  ? __might_fault+0xaf/0x130
[  660.035171][T19000]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.035198][T19000]  ? import_iovec+0x73/0xa0
[  660.035218][T19000]  ___sys_sendmsg+0x2a5/0x360
[  660.035236][T19000]  ? __lock_acquire+0x6b5/0x2cf0
[  660.035257][T19000]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.035310][T19000]  ? __fget_files+0x2a/0x420
[  660.035324][T19000]  ? __fget_files+0x3a0/0x420
[  660.035350][T19000]  __x64_sys_sendmsg+0x1bd/0x2a0
[  660.035371][T19000]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.035399][T19000]  ? __pfx_ksys_write+0x10/0x10
[  660.035429][T19000]  do_syscall_64+0x14d/0xf80
[  660.035449][T19000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.035468][T19000]  ? trace_irq_disable+0x37/0x100
[  660.035485][T19000]  ? clear_bhb_loop+0x40/0x90
[  660.035504][T19000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.035519][T19000] RIP: 0033:0x7f3962b9c629
[  660.035534][T19000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.035547][T19000] RSP: 002b:00007f3963acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.035564][T19000] RAX: ffffffffffffffda RBX: 00007f3962e15fa0 RCX: 00007f3962b9c629
[  660.035576][T19000] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003
[  660.035586][T19000] RBP: 00007f3963acf090 R08: 0000000000000000 R09: 0000000000000000
[  660.035596][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  660.035605][T19000] R13: 00007f3962e16038 R14: 00007f3962e15fa0 R15: 00007fff28a86218
[  660.035634][T19000]  </TASK>
[  661.115892][T18977] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  661.231681][T19002] 8021q: adding VLAN 0 to HW filter on device bond1
[  661.258937][T19003] bond1: (slave ip6gretap2): making interface the new active one
[  661.273635][T19003] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[  661.957348][T19071] netlink: 'syz.3.3352': attribute type 9 has an invalid length.
[  661.976766][T19071] netlink: 'syz.3.3352': attribute type 12 has an invalid length.
[  661.996833][T19071] netlink: 'syz.3.3352': attribute type 11 has an invalid length.
[  662.057014][T19076] net_ratelimit: 370 callbacks suppressed
[  662.057029][T19076] netlink: set zone limit has 8 unknown bytes
[  662.490323][T19112] ipvlan0: entered promiscuous mode
[  662.505038][T19112] ipvlan0: left promiscuous mode
[  662.649144][T19120] __nla_validate_parse: 16 callbacks suppressed
[  662.649160][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'.
[  662.890510][T19133] netlink: 'syz.0.3366': attribute type 5 has an invalid length.
[  662.991156][T19137] netlink: 'syz.0.3368': attribute type 6 has an invalid length.
[  662.999875][T19137] netlink: 'syz.0.3368': attribute type 5 has an invalid length.
[  663.045828][T19139] sctp: [Deprecated]: syz.0.3369 (pid 19139) Use of struct sctp_assoc_value in delayed_ack socket option.
[  663.045828][T19139] Use struct sctp_sack_info instead
[  663.064322][T19140] sctp: [Deprecated]: syz.0.3369 (pid 19140) Use of struct sctp_assoc_value in delayed_ack socket option.
[  663.064322][T19140] Use struct sctp_sack_info instead
[  663.251384][T19150] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  663.319783][T19152] netlink: 'syz.1.3372': attribute type 3 has an invalid length.
[  663.458076][T19163] netlink: 'syz.1.3375': attribute type 21 has an invalid length.
[  663.486443][T19163] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3375'.
[  663.506555][T19163] netlink: 'syz.1.3375': attribute type 4 has an invalid length.
[  663.507026][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'.
[  663.527100][T19163] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3375'.
[  663.543769][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'.
[  663.556145][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'.
[  663.725186][T19184] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3381'.
[  663.801451][T19188] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001
[  664.120746][T19209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3388'.
[  664.261346][T19216] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3389'.
[  664.276109][T19216] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3389'.
[  664.486602][ T6596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.501028][ T6596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.636046][T19233] bond1: option primary_reselect: invalid value (4)
[  664.656965][T19233] bond1 (unregistering): Released all slaves
[  664.744685][T19240] syzkaller0: entered promiscuous mode
[  664.750172][T19240] syzkaller0: entered allmulticast mode
[  664.863202][T19240] geneve2: entered allmulticast mode
[  664.920482][T19251] hsr_slave_1 (unregistering): left promiscuous mode
[  665.272978][T19269] x_tables: duplicate underflow at hook 3
[  665.409283][T19273] 8021q: adding VLAN 0 to HW filter on device bond2
[  665.434590][T19273] bond_slave_0: entered promiscuous mode
[  665.440503][T19273] bond_slave_1: entered promiscuous mode
[  665.447280][T19273] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  665.457367][T19273] bond2: (slave macvlan2): making interface the new active one
[  665.466566][T19273] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  665.496646][T19278] netlink: 'syz.0.3408': attribute type 6 has an invalid length.
[  665.549359][   T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  665.567999][   T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  665.645336][   T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  665.663525][   T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  666.003109][T19308] netlink: 'syz.1.3418': attribute type 10 has an invalid length.
[  666.011108][T19308] dummy0: entered promiscuous mode
[  666.017253][T19308] bridge0: port 3(dummy0) entered blocking state
[  666.053650][T19308] bridge0: port 3(dummy0) entered disabled state
[  666.070401][T19308] dummy0: entered allmulticast mode
[  666.096644][T19308] bridge0: port 3(dummy0) entered blocking state
[  666.103126][T19308] bridge0: port 3(dummy0) entered forwarding state
[  666.407203][T19312] netlink: 'syz.3.3419': attribute type 1 has an invalid length.
[  666.602483][T19329] team0 (unregistering): Port device team_slave_0 removed
[  666.663716][T19329] team0 (unregistering): Port device team_slave_1 removed
[  666.884842][T19338] netlink: 'syz.3.3426': attribute type 4 has an invalid length.
[  667.333383][T19352] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  667.532485][T19352] syzkaller0: entered promiscuous mode
[  667.538439][T19352] syzkaller0: entered allmulticast mode
[  668.210680][T19358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  668.360718][T19378] __nla_validate_parse: 23 callbacks suppressed
[  668.360737][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'.
[  669.080692][T19364] vlan0: entered allmulticast mode
[  669.086064][T19364] dummy0: entered allmulticast mode
[  669.093331][T19374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  669.269427][T19389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.277124][T19389] syzkaller0: entered promiscuous mode
[  669.284764][T19389] syzkaller0: entered allmulticast mode
[  669.355268][T19389] tipc: Resetting bearer <eth:syzkaller0>
[  669.380129][T19389] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3437'.
[  669.397014][T19389] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3437'.
[  669.461130][T19387] syzkaller0: entered promiscuous mode
[  669.471836][T19387] syzkaller0: entered allmulticast mode
[  669.481468][T19388] tipc: Resetting bearer <eth:syzkaller0>
[  669.509114][T19388] tipc: Disabling bearer <eth:syzkaller0>
[  669.586049][T19399] batadv0 speed is unknown, defaulting to 1000
[  669.656478][T19404] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3443'.
[  669.686584][T19404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'.
[  669.881228][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  669.969925][T19399] lo speed is unknown, defaulting to 1000
[  669.977907][T19399] wg1 speed is unknown, defaulting to 1000
[  670.837674][T19460] x_tables: duplicate underflow at hook 1
[  671.909008][T19399] lo speed is unknown, defaulting to 1000
[  672.430192][T19505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3467'.
[  672.445955][T19505] netlink: 'syz.0.3467': attribute type 2 has an invalid length.
[  672.652048][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'.
[  672.716557][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'.
[  673.406729][T19533] pimreg: entered allmulticast mode
[  673.587908][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3477'.
[  673.616606][T19535] syzkaller0: entered promiscuous mode
[  673.652870][T19535] syzkaller0: entered allmulticast mode
[  673.840833][T19552] batman_adv: batadv0: Adding interface: dummy0
[  673.847283][T19552] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.908875][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'.
[  673.918021][T19552] batman_adv: batadv0: Interface activated: dummy0
[  673.953278][T19552] batadv0: mtu less than device minimum
[  673.960225][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  673.972113][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  673.983867][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  673.995552][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  673.997085][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'.
[  674.007169][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  674.026955][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  674.038669][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  674.050307][T19552] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  674.099750][T19553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3478'.
[  674.173535][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'.
[  674.261091][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'.
[  674.270287][T19573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'.
[  674.337581][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'.
[  674.362536][T19580] net_ratelimit: 11 callbacks suppressed
[  674.362552][T19580] IPv6: addrconf: prefix option has invalid lifetime
[  674.693574][T19600] netlink: 'syz.2.3492': attribute type 1 has an invalid length.
[  674.753039][T19602] netlink: 'syz.0.3493': attribute type 1 has an invalid length.
[  674.875784][T19604] 8021q: adding VLAN 0 to HW filter on device bond1
[  674.887665][T19604] bond0: (slave bond1): making interface the new active one
[  674.895824][T19604] bond0: (slave bond1): Enslaving as an active interface with an up link
[  674.926623][T19600] bond0: (slave gretap1): Enslaving as a backup interface with an up link
[  674.999069][T19620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3496'.
[  675.108718][T19613] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  675.119340][T19613] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  675.143019][T19613] bond2: (slave vxcan3): making interface the new active one
[  675.152620][T19613] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[  675.173325][T19624] tap0: tun_chr_ioctl cmd 1074025677
[  675.178715][T19624] tap0: linktype set to 769
[  675.184664][T19627] tap0: tun_chr_ioctl cmd 1074025677
[  675.193170][T19627] tap0: linktype set to 769
[  675.215588][T19629] netlink: 'syz.4.3498': attribute type 39 has an invalid length.
[  675.583233][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3502'.
[  675.963308][T19674] batadv_slave_0: entered promiscuous mode
[  676.005937][T19674] batadv1: entered promiscuous mode
[  676.065639][T19682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.150113][T19673] batadv_slave_0: left promiscuous mode
[  676.212995][T19686] chnl_net:caif_netlink_parms(): no params data found
[  676.359815][T19690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.456617][T19695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  676.637701][T19709] 8021q: adding VLAN 0 to HW filter on device bond5
[  676.919849][T19724] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  677.007622][T19720] batadv0 speed is unknown, defaulting to 1000
[  677.027015][T19721] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  677.318620][T19739] syzkaller0: entered promiscuous mode
[  677.334154][T19739] syzkaller0: entered allmulticast mode
[  677.401444][T19741] netlink: 'syz.1.3534': attribute type 1 has an invalid length.
[  677.468718][T19720] lo speed is unknown, defaulting to 1000
[  677.524625][T19741] 8021q: adding VLAN 0 to HW filter on device bond3
[  677.549114][T19720] wg1 speed is unknown, defaulting to 1000
[  677.575678][T19746] bond3: (slave batadv1): Opening slave failed
[  677.868832][T19756] bond4: option resend_igmp: invalid value (2878)
[  677.883912][T19756] bond4: option resend_igmp: allowed values 0 - 255
[  677.917192][T19756] bond4 (unregistering): Released all slaves
[  677.948302][T19720] lo speed is unknown, defaulting to 1000
[  678.232635][T19776] macvtap1: entered promiscuous mode
[  678.262596][T19776] bridge0: entered promiscuous mode
[  678.294185][T19776] macvtap1: entered allmulticast mode
[  678.314327][T19776] bridge0: entered allmulticast mode
[  678.315738][T19785] netlink: 'syz.4.3543': attribute type 21 has an invalid length.
[  678.326810][T19776] bridge0: port 3(macvtap1) entered blocking state
[  678.351876][T19776] bridge0: port 3(macvtap1) entered disabled state
[  678.367150][T19788] netlink: 'syz.4.3543': attribute type 21 has an invalid length.
[  678.375851][T19787] netlink: 'syz.4.3543': attribute type 21 has an invalid length.
[  678.388995][T19776] bridge0: left allmulticast mode
[  678.394280][T19776] bridge0: left promiscuous mode
[  679.034994][T19812] __nla_validate_parse: 16 callbacks suppressed
[  679.035013][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'.
[  679.093082][T19816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'.
[  679.097305][T19817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.112696][T19810] Cannot find del_set index 1 as target
[  679.366920][ T5886] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  679.418804][T19826] syzkaller0: entered promiscuous mode
[  679.452866][T19826] syzkaller0: entered allmulticast mode
[  680.993427][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3560'.
[  681.016189][T19854] block nbd0: Unsupported socket: should be TCP or UNIX.
[  681.118491][T19858] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  681.257403][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3567'.
[  681.333282][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3568'.
[  681.398401][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'.
[  681.449213][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3568'.
[  681.479112][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'.
[  681.538552][T19891] tipc: Started in network mode
[  681.546053][T19891] tipc: Node identity 76c568241abe, cluster identity 4711
[  681.553838][T19891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  681.561958][T19891] syzkaller0: entered promiscuous mode
[  681.569509][T19891] syzkaller0: entered allmulticast mode
[  681.597254][T19896] netlink: 'syz.1.3572': attribute type 1 has an invalid length.
[  681.607763][T19891] tipc: Resetting bearer <eth:syzkaller0>
[  681.667298][T19896] 8021q: adding VLAN 0 to HW filter on device bond4
[  681.676327][T19889] tipc: Resetting bearer <eth:syzkaller0>
[  681.710159][T19889] tipc: Disabling bearer <eth:syzkaller0>
[  681.757113][T19903] bond4: (slave veth3): Enslaving as an active interface with a down link
[  681.775013][T19901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  681.784494][T19901] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  681.823231][T19906] syzkaller0: entered promiscuous mode
[  681.850220][T19906] syzkaller0: entered allmulticast mode
[  681.890800][T19910] tipc: Resetting bearer <eth:syzkaller0>
[  681.929535][T19898] tipc: Resetting bearer <eth:syzkaller0>
[  681.961545][T19898] tipc: Disabling bearer <eth:syzkaller0>
[  682.176629][T19924] netlink: 'syz.3.3578': attribute type 2 has an invalid length.
[  682.190104][T19924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3578'.
[  682.200955][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'.
[  682.662376][T19966] x_tables: duplicate entry at hook 2
[  682.748401][T19970] x_tables: duplicate underflow at hook 1
[  682.809638][T19972] syzkaller0: entered promiscuous mode
[  682.823027][T19972] syzkaller0: entered allmulticast mode
[  683.138711][T19984] batadv0 speed is unknown, defaulting to 1000
[  683.339982][T19998] netlink: 'syz.4.3603': attribute type 1 has an invalid length.
[  683.523957][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.546408][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.583136][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.610307][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.620762][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.658561][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.678161][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.715990][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.746163][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.755904][T20005] openvswitch: netlink: Actions may not be safe on all matching packets
[  683.899843][T19984] lo speed is unknown, defaulting to 1000
[  684.037535][T19984] wg1 speed is unknown, defaulting to 1000
[  684.336338][T20047] __nla_validate_parse: 9 callbacks suppressed
[  684.336357][T20047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3616'.
[  684.382118][T20050] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3617'.
[  684.651084][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'.
[  684.776388][T20073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3623'.
[  684.836029][T19984] lo speed is unknown, defaulting to 1000
[  684.891567][T20082] netlink: 'syz.4.3626': attribute type 8 has an invalid length.
[  685.099894][T20036] siw: device registration error -23
[  685.507417][T20100] bridge0: port 3(dummy0) entered disabled state
[  685.513950][T20100] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.521301][T20100] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.549691][T20100] bond_slave_0: left promiscuous mode
[  685.555612][T20100] bond_slave_1: left promiscuous mode
[  685.726634][T20100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.745985][T20100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  686.019494][T20095] batadv0 speed is unknown, defaulting to 1000
[  686.032965][ T1005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.052163][ T1005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.061254][ T1005] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.088816][ T1005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  686.260302][T20126] netlink: 'syz.1.3638': attribute type 15 has an invalid length.
[  686.269790][T20126] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3638'.
[  686.357664][T10519] IPVS: starting estimator thread 0...
[  686.411043][T20095] lo speed is unknown, defaulting to 1000
[  686.421462][T20095] wg1 speed is unknown, defaulting to 1000
[  686.482837][T20139] IPVS: using max 39 ests per chain, 93600 per kthread
[  686.735428][T20158] netlink: 'syz.0.3644': attribute type 32 has an invalid length.
[  686.765646][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'.
[  686.773371][T20159] netlink: 'syz.4.3641': attribute type 1 has an invalid length.
[  686.834916][T20161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3641'.
[  686.917309][T20158] bond3: option coupled_control: invalid value (12)
[  686.927330][T20158] bond3 (unregistering): Released all slaves
[  686.986359][T20167] bond1: (slave geneve2): making interface the new active one
[  687.023479][T20167] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  687.047971][   T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  687.057868][   T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  687.104674][T20095] lo speed is unknown, defaulting to 1000
[  687.110480][T20155] batadv0 speed is unknown, defaulting to 1000
[  687.118332][T20170] netlink: 'syz.1.3646': attribute type 4 has an invalid length.
[  687.118915][   T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  687.183041][T20171] netlink: 'syz.1.3646': attribute type 4 has an invalid length.
[  687.199028][   T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  687.238595][T20173] netlink: 'syz.4.3647': attribute type 1 has an invalid length.
[  687.269185][T20173] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3647'.
[  687.435787][T20176] syzkaller0: entered promiscuous mode
[  687.441630][T20176] syzkaller0: entered allmulticast mode
[  687.567705][T20155] lo speed is unknown, defaulting to 1000
[  687.581993][T20155] wg1 speed is unknown, defaulting to 1000
[  687.588531][T20179] 8021q: VLANs not supported on gre0
[  687.863921][T20181] xt_hashlimit: max too large, truncated to 1048576
[  687.922714][T20183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3649'.
[  688.510408][T20187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3650'.
[  689.054620][T20155] lo speed is unknown, defaulting to 1000
[  689.419690][T20201] __nla_validate_parse: 1 callbacks suppressed
[  689.419706][T20201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3654'.
[  689.457253][T20201] syzkaller0: entered promiscuous mode
[  689.464473][T20201] syzkaller0: entered allmulticast mode
[  691.680252][T20221] batadv0 speed is unknown, defaulting to 1000
[  691.924472][T20226] syzkaller1: entered promiscuous mode
[  691.929983][T20226] syzkaller1: entered allmulticast mode
[  692.134012][T20221] lo speed is unknown, defaulting to 1000
[  692.141457][T20221] wg1 speed is unknown, defaulting to 1000
[  692.208544][T20250] netlink: 'syz.2.3667': attribute type 4 has an invalid length.
[  692.253914][T20250] netlink: 'syz.2.3667': attribute type 4 has an invalid length.
[  692.444221][T20266] netlink: 'syz.2.3670': attribute type 9 has an invalid length.
[  692.595400][T20221] lo speed is unknown, defaulting to 1000
[  692.812574][T20288] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3677'.
[  692.834226][T20285] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  692.845436][T20288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3677'.
[  692.904839][T20288] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  692.924279][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'.
[  692.967823][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'.
[  692.991840][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3678'.
[  693.178347][T20295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'.
[  693.205150][T20299] batadv0 speed is unknown, defaulting to 1000
[  693.530870][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'.
[  693.545833][T20299] lo speed is unknown, defaulting to 1000
[  693.560348][T20317] macvtap1: entered promiscuous mode
[  693.566169][T20317] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[  693.588076][T20299] wg1 speed is unknown, defaulting to 1000
[  693.699089][T20327] tap0: tun_chr_ioctl cmd 1074025680
[  694.162807][T20327] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.170516][T20327] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.827289][T20327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.874525][T20327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  695.476154][T20299] lo speed is unknown, defaulting to 1000
[  695.967056][ T5886] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  695.986197][ T5886] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  696.158953][ T5886] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.170740][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'.
[  696.189999][ T5886] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  696.211901][T20360] netlink: 'syz.4.3692': attribute type 5 has an invalid length.
[  696.224209][ T5886] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.233414][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3692'.
[  696.247532][ T5886] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  696.295615][T20360] geneve3: entered promiscuous mode
[  696.300912][T20360] geneve3: entered allmulticast mode
[  696.316178][ T5886] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  696.334353][ T5886] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  696.344066][ T5886] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 50656 - 0
[  696.353531][ T5886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 50656 - 0
[  696.418168][ T6604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 50656 - 0
[  696.436036][ T6604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 50656 - 0
[  696.499299][T20363] syzkaller1: entered promiscuous mode
[  696.512555][T20363] syzkaller1: entered allmulticast mode
[  696.948601][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'.
[  697.906898][T20342] net_ratelimit: 24 callbacks suppressed
[  697.906912][T20342] Set syz1 is full, maxelem 65536 reached
[  697.998727][T20398] pim6reg1: entered promiscuous mode
[  698.007297][T20398] pim6reg1: entered allmulticast mode
[  698.102129][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'.
[  698.118991][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3701'.
[  698.130767][T20403] netlink: 5212 bytes leftover after parsing attributes in process `syz.3.3701'.
[  699.012310][T20354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.258791][T20420] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3706'.
[  699.375449][T20424] openvswitch: netlink: Duplicate key (type 21).
[  699.555968][T20443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  699.569175][T20443] syzkaller0: entered promiscuous mode
[  699.575543][T20443] syzkaller0: entered allmulticast mode
[  699.604487][T20429] batadv0 speed is unknown, defaulting to 1000
[  699.751831][T20449] tipc: Resetting bearer <eth:syzkaller0>
[  699.775435][T20441] tipc: Resetting bearer <eth:syzkaller0>
[  699.802560][T20441] tipc: Disabling bearer <eth:syzkaller0>
[  699.824896][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'.
[  700.037161][T20429] lo speed is unknown, defaulting to 1000
[  700.054424][T20429] wg1 speed is unknown, defaulting to 1000
[  700.066513][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3719'.
[  700.100508][T20464] batadv_slave_1: entered promiscuous mode
[  700.125536][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3719'.
[  700.222369][T20465] batadv0 speed is unknown, defaulting to 1000
[  700.434386][T20429] lo speed is unknown, defaulting to 1000
[  700.529070][T20465] lo speed is unknown, defaulting to 1000
[  700.536918][T20465] wg1 speed is unknown, defaulting to 1000
[  701.377566][ T6604] bond8 (unregistering): (slave gretap1): Releasing active interface
[  701.416333][T20516] __nla_validate_parse: 2 callbacks suppressed
[  701.416350][T20516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3730'.
[  701.556662][ T6604] bond9 (unregistering): (slave bridge0): Releasing active interface
[  701.609971][ T6604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  701.618811][ T6604] bond_slave_0: left promiscuous mode
[  701.625371][ T6604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.634505][ T6604] bond_slave_1: left promiscuous mode
[  701.640292][ T6604] bond0 (unregistering): Released all slaves
[  701.653973][ T6604] bond1 (unregistering): Released all slaves
[  701.666595][ T6604] bond2 (unregistering): Released all slaves
[  701.678884][ T6604] bond3 (unregistering): Released all slaves
[  701.701411][ T6604] bond4 (unregistering): Released all slaves
[  701.714130][ T6604] bond5 (unregistering): Released all slaves
[  701.727503][ T6604] bond6 (unregistering): Released all slaves
[  701.739767][ T6604] bond7 (unregistering): Released all slaves
[  701.759247][ T6604] bond8 (unregistering): Released all slaves
[  701.773612][ T6604] bond9 (unregistering): Released all slaves
[  701.786158][ T6604] bond10 (unregistering): Released all slaves
[  701.800671][ T6604] bond11 (unregistering): (slave dummy0): Releasing active interface
[  701.809543][ T6604] dummy0: left allmulticast mode
[  701.819602][ T6604] bond11 (unregistering): Released all slaves
[  701.832138][ T6604] bond12 (unregistering): Released all slaves
[  701.844922][ T6604] bond13 (unregistering): Released all slaves
[  701.865815][T20465] lo speed is unknown, defaulting to 1000
[  701.933582][T20514] bond6: entered allmulticast mode
[  701.987737][T20515] bridge2: entered promiscuous mode
[  701.994769][T20515] bridge2: entered allmulticast mode
[  702.018176][T20515] bond6: (slave bridge2): making interface the new active one
[  702.042545][T20515] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  702.183499][ T6604] !: left promiscuous mode
[  702.228454][T20526] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3735'.
[  702.245973][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'.
[  702.273625][ T6604] : left promiscuous mode
[  702.372988][ T6604] : left promiscuous mode
[  702.461816][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3737'.
[  702.482887][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'.
[  702.574148][T20537] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3738'.
[  702.602463][ T6604] tipc: Left network mode
[  702.604410][T20529] tap0: tun_chr_ioctl cmd 1074025692
[  702.665697][T20539] netlink: 'syz.0.3739': attribute type 1 has an invalid length.
[  702.910932][T20549] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3743'.
[  703.158492][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3744'.
[  703.338177][ T6604] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode
[  704.456050][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3750'.
[  704.531316][ T6604] hsr_slave_0: left promiscuous mode
[  704.552584][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.562382][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  704.570301][ T6604] batman_adv: batadv0: Removing interface: macvlan3
[  704.837275][ T6604] team0 (unregistering): Port device team_slave_1 removed
[  704.877973][ T6604] team0 (unregistering): Port device team_slave_0 removed
[  704.963760][ T6596] smc: removing ib device syz1
[  705.091273][T20107] batadv0 speed is unknown, defaulting to 1000
[  705.143392][T20589] lo speed is unknown, defaulting to 1000
[  705.163809][T20589] wg1 speed is unknown, defaulting to 1000
[  705.368998][T20612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3752'.
[  705.902973][T20549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  706.123181][    C1] ------------[ cut here ]------------
[  706.129077][    C1] ODEBUG: free active (active state 0) object: ffff88807e92cc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  706.142003][    C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.4.3759/20642
[  706.152852][    C1] Modules linked in:
[  706.157011][    C1] CPU: 1 UID: 0 PID: 20642 Comm: syz.4.3759 Not tainted syzkaller #0 PREEMPT(full) 
[  706.166407][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  706.176512][    C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  706.182875][    C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  706.202511][    C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246
[  706.208629][    C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4ce878 RCX: 0000000000000000
[  706.216627][    C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570
[  706.224649][    C1] RBP: ffffffff8bcf4a00 R08: ffff88807e92cc90 R09: ffffffff8bcf5d20
[  706.232626][    C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807e92ce00
[  706.240623][    C1] R13: ffffffff901b4570 R14: ffff88807e92c000 R15: ffff88807e92cc90
[  706.248628][    C1] FS:  00007f0dcbfa66c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000
[  706.257594][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  706.264205][    C1] CR2: 0000001b32e23ffc CR3: 0000000056d86000 CR4: 00000000003526f0
[  706.272275][    C1] Call Trace:
[  706.275588][    C1]  <IRQ>
[  706.278437][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  706.284137][    C1]  kfree+0x13a/0x610
[  706.288045][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  706.293219][    C1]  rose_timer_expiry+0x4cb/0x600
[  706.298177][    C1]  ? call_timer_fn+0x178/0x5a0
[  706.302989][    C1]  call_timer_fn+0x192/0x5a0
[  706.307590][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  706.313102][    C1]  ? call_timer_fn+0xd4/0x5a0
[  706.317790][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  706.322961][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  706.328171][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  706.333686][    C1]  __run_timer_base+0x652/0x8b0
[  706.338549][    C1]  ? ktime_get+0x45/0x200
[  706.342939][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  706.348334][    C1]  ? sched_clock_cpu+0x74/0x440
[  706.353242][    C1]  run_timer_softirq+0xb7/0x170
[  706.358107][    C1]  handle_softirqs+0x22a/0x7c0
[  706.362926][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  706.367711][    C1]  __irq_exit_rcu+0x5f/0x150
[  706.372315][    C1]  irq_exit_rcu+0x9/0x30
[  706.376613][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  706.382263][    C1]  </IRQ>
[  706.385235][    C1]  <TASK>
[  706.388171][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  706.394196][    C1] RIP: 0010:lock_acquire+0x221/0x330
[  706.399490][    C1] Code: ff ff ff e8 a1 e5 fd 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 1b a3 76 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 ca 00 0a cc 48 8d 3d c8 7f 73
[  706.419146][    C1] RSP: 0018:ffffc90003626d98 EFLAGS: 00000282
[  706.425242][    C1] RAX: 536f15a150c88b00 RBX: 0000000000000000 RCX: 0000000000000046
[  706.433252][    C1] RDX: 00000000e01f7040 RSI: ffffffff8e151802 RDI: ffffffff8c276500
[  706.441229][    C1] RBP: ffffffff81759275 R08: ffffffff81759275 R09: ffffffff8e75e0a0
[  706.449247][    C1] R10: ffffc90003626ef8 R11: ffffffff81af7870 R12: 0000000000000002
[  706.457249][    C1] R13: ffffffff8e75e0a0 R14: 0000000000000000 R15: 0000000000000246
[  706.465272][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  706.470403][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  706.476622][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  706.481761][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  706.487803][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  706.492953][    C1]  unwind_next_frame+0xc2/0x23c0
[  706.497912][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  706.503070][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  706.508195][    C1]  ? get_page_from_freelist+0x24dc/0x2580
[  706.513948][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  706.519946][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  706.526134][    C1]  arch_stack_walk+0x11b/0x150
[  706.530928][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  706.536954][    C1]  stack_trace_save+0xa9/0x100
[  706.541742][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  706.547164][    C1]  save_stack+0x122/0x230
[  706.551512][    C1]  ? __pfx_save_stack+0x10/0x10
[  706.556391][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  706.561335][    C1]  ? post_alloc_hook+0x228/0x280
[  706.566308][    C1]  ? get_page_from_freelist+0x24dc/0x2580
[  706.572039][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  706.578080][    C1]  __set_page_owner+0x8d/0x4c0
[  706.582883][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  706.588265][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  706.594365][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  706.599574][    C1]  ? bad_range+0x8b/0x2c0
[  706.603941][    C1]  post_alloc_hook+0x228/0x280
[  706.608727][    C1]  get_page_from_freelist+0x24dc/0x2580
[  706.614327][    C1]  ? fs_reclaim_acquire+0x7c/0x100
[  706.619485][    C1]  ? prepare_alloc_pages+0x22a/0x650
[  706.624818][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  706.630650][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  706.637019][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  706.642238][    C1]  ? __refill_objects_node+0x245/0x5c0
[  706.647741][    C1]  allocate_slab+0x77/0x660
[  706.652264][    C1]  refill_objects+0x331/0x3c0
[  706.656977][    C1]  ? __pcs_replace_empty_main+0x239/0x620
[  706.662713][    C1]  __pcs_replace_empty_main+0x2b9/0x620
[  706.668302][    C1]  kmem_cache_alloc_noprof+0x37d/0x650
[  706.673794][    C1]  ? __kernfs_new_node+0xe9/0x8e0
[  706.678837][    C1]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  706.684513][    C1]  __kernfs_new_node+0xe9/0x8e0
[  706.689389][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[  706.694894][    C1]  ? kernfs_root+0x1c/0x230
[  706.699427][    C1]  ? kernfs_root+0x1c/0x230
[  706.703978][    C1]  ? kernfs_root+0x1c/0x230
[  706.708493][    C1]  ? kernfs_root+0x1c/0x230
[  706.713039][    C1]  kernfs_new_node+0x102/0x210
[  706.717825][    C1]  __kernfs_create_file+0x4b/0x2e0
[  706.722974][    C1]  sysfs_add_file_mode_ns+0x238/0x300
[  706.728384][    C1]  internal_create_group+0x673/0x1180
[  706.733835][    C1]  ? __pfx_rwsem_wake+0x10/0x10
[  706.738705][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  706.744581][    C1]  ? up_write+0x1ab/0x410
[  706.748937][    C1]  sysfs_create_groups+0x59/0x120
[  706.754015][    C1]  device_add_attrs+0x1bf/0x5b0
[  706.758882][    C1]  ? __pfx_device_add_attrs+0x10/0x10
[  706.764306][    C1]  ? device_add_class_symlinks+0x21f/0x240
[  706.770132][    C1]  device_add+0x496/0xb70
[  706.774513][    C1]  ? device_initialize+0x24b/0x440
[  706.779644][    C1]  netdev_register_kobject+0x178/0x310
[  706.785160][    C1]  register_netdevice+0x12c0/0x1cf0
[  706.790394][    C1]  ? __pfx_register_netdevice+0x10/0x10
[  706.795996][    C1]  ? tun_net_initialize+0x145/0x460
[  706.801210][    C1]  ? __pfx_tun_net_initialize+0x10/0x10
[  706.806806][    C1]  ? alloc_netdev_mqs+0xd9b/0x11b0
[  706.811941][    C1]  tun_set_iff+0x844/0xf00
[  706.816427][    C1]  __tun_chr_ioctl+0x7bb/0x1e10
[  706.821308][    C1]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  706.826652][    C1]  ? __fget_files+0x2a/0x420
[  706.831249][    C1]  ? __fget_files+0x3a0/0x420
[  706.836070][    C1]  ? __fget_files+0x2a/0x420
[  706.840682][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  706.846254][    C1]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  706.851391][    C1]  __se_sys_ioctl+0xfc/0x170
[  706.856045][    C1]  do_syscall_64+0x14d/0xf80
[  706.860652][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.866763][    C1]  ? trace_irq_disable+0x37/0x100
[  706.871807][    C1]  ? clear_bhb_loop+0x40/0x90
[  706.876538][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.882441][    C1] RIP: 0033:0x7f0dcb19c629
[  706.887499][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.907139][    C1] RSP: 002b:00007f0dcbfa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  706.915588][    C1] RAX: ffffffffffffffda RBX: 00007f0dcb415fa0 RCX: 00007f0dcb19c629
[  706.923593][    C1] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000007
[  706.931575][    C1] RBP: 00007f0dcb232b39 R08: 0000000000000000 R09: 0000000000000000
[  706.939576][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.947571][    C1] R13: 00007f0dcb416038 R14: 00007f0dcb415fa0 R15: 00007ffeda495938
[  706.955591][    C1]  </TASK>
[  706.958624][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  706.965911][    C1] CPU: 1 UID: 0 PID: 20642 Comm: syz.4.3759 Not tainted syzkaller #0 PREEMPT(full) 
[  706.975285][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  706.985342][    C1] Call Trace:
[  706.988621][    C1]  <IRQ>
[  706.991466][    C1]  vpanic+0x1e0/0x670
[  706.995466][    C1]  panic+0xc5/0xd0
[  706.999196][    C1]  ? __pfx_panic+0x10/0x10
[  707.003635][    C1]  __warn+0x315/0x4a0
[  707.007624][    C1]  ? debug_check_no_obj_freed+0x405/0x550
[  707.013354][    C1]  ? debug_check_no_obj_freed+0x405/0x550
[  707.019085][    C1]  __report_bug+0x29a/0x540
[  707.023594][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  707.029420][    C1]  ? debug_check_no_obj_freed+0x405/0x550
[  707.035175][    C1]  ? __pfx___report_bug+0x10/0x10
[  707.040224][    C1]  ? kfree+0x1c1/0x610
[  707.044301][    C1]  ? rose_timer_expiry+0x4c3/0x600
[  707.049423][    C1]  ? call_timer_fn+0x192/0x5a0
[  707.054193][    C1]  ? __run_timer_base+0x652/0x8b0
[  707.059228][    C1]  ? run_timer_softirq+0xb7/0x170
[  707.064258][    C1]  ? handle_softirqs+0x22a/0x7c0
[  707.069204][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  707.073975][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  707.079792][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  707.085945][    C1]  ? lock_acquire+0x221/0x330
[  707.090621][    C1]  ? unwind_next_frame+0xc2/0x23c0
[  707.095740][    C1]  ? arch_stack_walk+0x11b/0x150
[  707.100692][    C1]  report_bug_entry+0x19a/0x290
[  707.105550][    C1]  ? debug_check_no_obj_freed+0x44a/0x550
[  707.111275][    C1]  ? debug_check_no_obj_freed+0x44f/0x550
[  707.117000][    C1]  handle_bug+0xca/0x200
[  707.121261][    C1]  exc_invalid_op+0x1a/0x50
[  707.125775][    C1]  asm_exc_invalid_op+0x1a/0x20
[  707.130633][    C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  707.136970][    C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  707.156585][    C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246
[  707.162653][    C1] RAX: ffffffff8a888d00 RBX: ffffffff9a4ce878 RCX: 0000000000000000
[  707.170627][    C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570
[  707.178604][    C1] RBP: ffffffff8bcf4a00 R08: ffff88807e92cc90 R09: ffffffff8bcf5d20
[  707.186584][    C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88807e92ce00
[  707.194558][    C1] R13: ffffffff901b4570 R14: ffff88807e92c000 R15: ffff88807e92cc90
[  707.202537][    C1]  ? __pfx_timer_debug_hint+0x10/0x10
[  707.207914][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  707.213562][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  707.219214][    C1]  kfree+0x13a/0x610
[  707.223114][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  707.228250][    C1]  rose_timer_expiry+0x4cb/0x600
[  707.233196][    C1]  ? call_timer_fn+0x178/0x5a0
[  707.237970][    C1]  call_timer_fn+0x192/0x5a0
[  707.242563][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  707.248030][    C1]  ? call_timer_fn+0xd4/0x5a0
[  707.252713][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  707.257836][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  707.263041][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  707.268509][    C1]  __run_timer_base+0x652/0x8b0
[  707.273360][    C1]  ? ktime_get+0x45/0x200
[  707.277709][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  707.283091][    C1]  ? sched_clock_cpu+0x74/0x440
[  707.287962][    C1]  run_timer_softirq+0xb7/0x170
[  707.292819][    C1]  handle_softirqs+0x22a/0x7c0
[  707.297590][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  707.302369][    C1]  __irq_exit_rcu+0x5f/0x150
[  707.306962][    C1]  irq_exit_rcu+0x9/0x30
[  707.311207][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  707.316849][    C1]  </IRQ>
[  707.319779][    C1]  <TASK>
[  707.322707][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  707.328688][    C1] RIP: 0010:lock_acquire+0x221/0x330
[  707.333977][    C1] Code: ff ff ff e8 a1 e5 fd 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 1b a3 76 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 00 ca 00 0a cc 48 8d 3d c8 7f 73
[  707.353585][    C1] RSP: 0018:ffffc90003626d98 EFLAGS: 00000282
[  707.359658][    C1] RAX: 536f15a150c88b00 RBX: 0000000000000000 RCX: 0000000000000046
[  707.367629][    C1] RDX: 00000000e01f7040 RSI: ffffffff8e151802 RDI: ffffffff8c276500
[  707.375601][    C1] RBP: ffffffff81759275 R08: ffffffff81759275 R09: ffffffff8e75e0a0
[  707.383574][    C1] R10: ffffc90003626ef8 R11: ffffffff81af7870 R12: 0000000000000002
[  707.391545][    C1] R13: ffffffff8e75e0a0 R14: 0000000000000000 R15: 0000000000000246
[  707.399509][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  707.404639][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  707.410818][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  707.415956][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  707.421960][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  707.427087][    C1]  unwind_next_frame+0xc2/0x23c0
[  707.432039][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  707.437169][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  707.442296][    C1]  ? get_page_from_freelist+0x24dc/0x2580
[  707.448029][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  707.454029][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  707.460200][    C1]  arch_stack_walk+0x11b/0x150
[  707.464984][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  707.470985][    C1]  stack_trace_save+0xa9/0x100
[  707.475771][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  707.481174][    C1]  save_stack+0x122/0x230
[  707.485526][    C1]  ? __pfx_save_stack+0x10/0x10
[  707.490389][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  707.495333][    C1]  ? post_alloc_hook+0x228/0x280
[  707.500280][    C1]  ? get_page_from_freelist+0x24dc/0x2580
[  707.506015][    C1]  ? __alloc_frozen_pages_noprof+0x18d/0x380
[  707.512037][    C1]  __set_page_owner+0x8d/0x4c0
[  707.516819][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  707.522200][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  707.528283][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  707.533494][    C1]  ? bad_range+0x8b/0x2c0
[  707.537839][    C1]  post_alloc_hook+0x228/0x280
[  707.542627][    C1]  get_page_from_freelist+0x24dc/0x2580
[  707.548208][    C1]  ? fs_reclaim_acquire+0x7c/0x100
[  707.553362][    C1]  ? prepare_alloc_pages+0x22a/0x650
[  707.558673][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  707.564504][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  707.570847][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  707.576059][    C1]  ? __refill_objects_node+0x245/0x5c0
[  707.581544][    C1]  allocate_slab+0x77/0x660
[  707.586061][    C1]  refill_objects+0x331/0x3c0
[  707.590749][    C1]  ? __pcs_replace_empty_main+0x239/0x620
[  707.596485][    C1]  __pcs_replace_empty_main+0x2b9/0x620
[  707.602040][    C1]  kmem_cache_alloc_noprof+0x37d/0x650
[  707.607505][    C1]  ? __kernfs_new_node+0xe9/0x8e0
[  707.612527][    C1]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  707.618150][    C1]  __kernfs_new_node+0xe9/0x8e0
[  707.622996][    C1]  ? __pfx___kernfs_new_node+0x10/0x10
[  707.628444][    C1]  ? kernfs_root+0x1c/0x230
[  707.632936][    C1]  ? kernfs_root+0x1c/0x230
[  707.637427][    C1]  ? kernfs_root+0x1c/0x230
[  707.641916][    C1]  ? kernfs_root+0x1c/0x230
[  707.646409][    C1]  kernfs_new_node+0x102/0x210
[  707.651164][    C1]  __kernfs_create_file+0x4b/0x2e0
[  707.656262][    C1]  sysfs_add_file_mode_ns+0x238/0x300
[  707.661626][    C1]  internal_create_group+0x673/0x1180
[  707.666994][    C1]  ? __pfx_rwsem_wake+0x10/0x10
[  707.671837][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  707.677635][    C1]  ? up_write+0x1ab/0x410
[  707.681955][    C1]  sysfs_create_groups+0x59/0x120
[  707.686968][    C1]  device_add_attrs+0x1bf/0x5b0
[  707.691806][    C1]  ? __pfx_device_add_attrs+0x10/0x10
[  707.697165][    C1]  ? device_add_class_symlinks+0x21f/0x240
[  707.702957][    C1]  device_add+0x496/0xb70
[  707.707271][    C1]  ? device_initialize+0x24b/0x440
[  707.712366][    C1]  netdev_register_kobject+0x178/0x310
[  707.717817][    C1]  register_netdevice+0x12c0/0x1cf0
[  707.723014][    C1]  ? __pfx_register_netdevice+0x10/0x10
[  707.728548][    C1]  ? tun_net_initialize+0x145/0x460
[  707.733734][    C1]  ? __pfx_tun_net_initialize+0x10/0x10
[  707.739260][    C1]  ? alloc_netdev_mqs+0xd9b/0x11b0
[  707.744365][    C1]  tun_set_iff+0x844/0xf00
[  707.748777][    C1]  __tun_chr_ioctl+0x7bb/0x1e10
[  707.753621][    C1]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  707.758897][    C1]  ? __fget_files+0x2a/0x420
[  707.763468][    C1]  ? __fget_files+0x3a0/0x420
[  707.768124][    C1]  ? __fget_files+0x2a/0x420
[  707.772697][    C1]  ? bpf_lsm_file_ioctl+0x9/0x20
[  707.777619][    C1]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  707.782718][    C1]  __se_sys_ioctl+0xfc/0x170
[  707.787303][    C1]  do_syscall_64+0x14d/0xf80
[  707.791883][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.797932][    C1]  ? trace_irq_disable+0x37/0x100
[  707.802939][    C1]  ? clear_bhb_loop+0x40/0x90
[  707.807602][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.813476][    C1] RIP: 0033:0x7f0dcb19c629
[  707.817873][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.837459][    C1] RSP: 002b:00007f0dcbfa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.845856][    C1] RAX: ffffffffffffffda RBX: 00007f0dcb415fa0 RCX: 00007f0dcb19c629
[  707.853808][    C1] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000007
[  707.861761][    C1] RBP: 00007f0dcb232b39 R08: 0000000000000000 R09: 0000000000000000
[  707.869713][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.877663][    C1] R13: 00007f0dcb416038 R14: 00007f0dcb415fa0 R15: 00007ffeda495938
[  707.885632][    C1]  </TASK>
[  707.888981][    C1] Kernel Offset: disabled
[  707.893288][    C1] Rebooting in 86400 seconds..