last executing test programs:

7.980075295s ago: executing program 4 (id=3198):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000045000048024000180090001006d657461000000001400028008000140000000150800024000000004280001800b0001006f626a72656600001800028009000200737900000000000008000140000000080900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000009c00)={r4, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)

7.017909189s ago: executing program 4 (id=3200):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}, @in6={0xa, 0x4e21, 0x80, @empty, 0x4010}]}, &(0x7f00000001c0)=0x10) (async)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1, {0x2, 0x28, @multicast2}}, 0x24)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x42, 0x0, 0x80000}, 0x28) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000300)=[{}], 0x1) (async, rerun: 64)
r3 = epoll_create(0x3ff) (rerun: 64)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) (async)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x1f8, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='L\x00'/17, @ANYRES32=r1], 0x50) (async)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x8000) (async, rerun: 32)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d082e275205e12a2f7dd21cc13c33d89"}, @eol, @generic={0x22, 0x6, "da643453"}, @sack={0x5, 0xe, [0xa, 0x10, 0x7]}, @timestamp={0x8, 0xa, 0x80}]}}}}}}}}, 0x0) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, <r9=>0x0})
ppoll(&(0x7f000000c040)=[{r9, 0x2391}], 0x1, 0x0, 0x0, 0x0)

6.919172778s ago: executing program 4 (id=3201):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x4}]}]}, 0xa4}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', <r3=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="4000508005000200fc000000040005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4004)

6.809461539s ago: executing program 4 (id=3202):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e03000000000000000000"], 0x0, 0x54}, 0x28)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000380)=ANY=[], 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000d00001a0000000016bcdf03000000000000000000000000000000000a267897cbcbf3e12f7689180ee30cf0d48caecd4e57b686bcfd4bb725b2c3b4f0866f9dde7945df"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x3)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1)
close(r6)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

6.302587484s ago: executing program 4 (id=3206):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) (async)
unshare(0x6a040000) (async, rerun: 32)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x5) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0) (async)
connect$inet(r3, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
close(0x4)

4.653357201s ago: executing program 0 (id=3214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_FLUSHABLE(r1, 0x12, 0x8, 0x0, &(0x7f0000002540))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, &(0x7f00000000c0)=0x7cfd504e, 0xffffffffffffffff, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="4ae3b2cdc4c9a0800ac507718a00057934c6f91f5dfd217c9d98076402d7a4b6bf433f5afb4d89632400defbf7d5a265007e6a5f5a9505"], 0x290}}, 0x0)

4.621460642s ago: executing program 3 (id=3215):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="70b907000000030076657468315f746f5f6261746164760014001680100001800c000500fcffffff328498a4d1890a2a76051b0a215719d313f76520c7a7000c971b6bd25c065611646db2a8303c74985f3a3ae899bbfcbff1cebb2929b5d71ccd76d35a2847c97532abe8ac066cac6af8a395d9d8f6fcade294853528b1d0d5c14cb78d84be5203358de3eee8241430e8c2411181a1d6b7d4d6c87535ec0f0259882ebd0038f37ae991c5b12831cde6b4a4d35f1babd716"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xf, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r8 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
r9 = accept$alg(r8, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040)
recvmmsg(r9, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r11 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x144, 0x30, 0x400, 0x8000000, 0xfffffffd, {}, [{0x130, 0x1, [@m_mirred={0x12c, 0x17, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x7, 0x620, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x20000000, 0x6, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x6, 0x2, 0x6}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffffffb, 0x7, 0x1, 0x100}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffff037, 0x2, 0x8, 0x5, 0x5}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x0, 0x7, 0x8, 0x9f}, 0x4}}]}, {0x3e, 0x6, "bc703b528a9bb3832abf63c3180edb162f61052a1916d2810fe63e31a280d7fe1703d7d6e6eaf2363bde59d052cbabccd3303f63d7dc407bcf9b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x144}}, 0x240400c0)
ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
connect$inet(r11, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)

4.404757724s ago: executing program 0 (id=3217):
unshare(0x600)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0xa, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x70}}, 0x8094) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080003", @ANYRES64=r2, @ANYBLOB="bce505aee297e5ffa26a17ec405ae7dee1f187a965ba5cf41d61d4a75b1c277e7df89a61fddc6b7c815c1f82dcf50031e195be046300b8e6aeeb86621f666f9ae664797be11437dc646895af8b05456a53e7ed908b2ee15bb10af339d6eaab1f56cc17fd72b9c55040f43c18daf2e7f8c4e753055224d8eb96d2e15ed089218e4005c5b47cf44c3921db5378", @ANYRESOCT=r2], 0x38}}, 0x0)

4.404097714s ago: executing program 4 (id=3218):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c00"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1)
write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x5}}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x82}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000500))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'})
close(0x4)

4.374915438s ago: executing program 0 (id=3219):
socket$inet(0xa, 0x801, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xf)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
r5 = socket(0x15, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400801c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

4.216643993s ago: executing program 3 (id=3221):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000045000048024000180090001006d657461000000001400028008000140000000150800024000000004280001800b0001006f626a72656600001800028009000200737900000000000008000140000000080900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000009c00)={r5, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x25, 0x4, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)

4.188488864s ago: executing program 0 (id=3222):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000080000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r3, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000040)={@initdev, <r6=>0x0}, &(0x7f0000000080)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xf2, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x6a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000009c0)={0x90, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001)
bind(r4, &(0x7f00000008c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_generate\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x1e00}, 0x94)

4.172817264s ago: executing program 2 (id=3223):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002e0000001600000000f390bdcd8000000000000095400000000000002a8a7c612f3ed23fe89ce9237346cc7d8a6a80b8d1edcff038ae414012ed885b5f4055ce6b5b8fcce0f2b2bbb92abad37979137ec4"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x1010, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x1, 0x0, 0xe, 0xb, 0x1, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x6}, 0x10, 0x0, r0, 0x6, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x3, 0x3, 0x1, 0x1}, {0x1, 0x3, 0x3, 0xc}, {0x6, 0x3, 0x7, 0x7}, {0x2, 0x2, 0xb, 0x4}, {0x5, 0x4, 0x5, 0x2}, {0x0, 0x2, 0x1, 0xa}], 0x10, 0xf59e}, 0x94)
pwrite64(r3, &(0x7f0000000380)="8ecf32aea0b9f973fd495bb461163fab08c2fbcf8c1883dce21f863457d7c9bbc47307fa8c10f00f4d4934b3a07ef178023c46da3c5860b28d0af5ee5234a963ae997838493c95acfdd2f544b5fa4f7d5b0c88e713408101a68d11b449c23e399172ccb2bbc4dfd558809e7315274d90336a58af2f6787562c1a84323f4c673a0589f00d2a64b76d78fb8c5c8a9dcac47c019f6867b719b2f7212f688c40acd87b1c9d38e0d1a67d4545ebbfbf2ec7678b4f23196902", 0xb6, 0x6)

4.000455001s ago: executing program 0 (id=3225):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21408, 0x53f}}, 0x20}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

3.999632747s ago: executing program 2 (id=3226):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x0, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x3, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x4}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0xfff, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd"], 0x58}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x800, 0xe)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), &(0x7f0000000200)=0x4)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="040029bd7000ffdbdf00004f461f08ad629c38c902f48b1c762cef00b428601de903ff0b555cf19aa9cd73abe6a0c5bc70fe02eec5ee68081da510e9b3faad0df020eec2f9e994a1dc929b67c651a3d73662cbbfd480e74c66fa4e343059931f20da66ed70c000c2fe1b3a8a8b2f86a41fff17166c5d1662b96bddd29b93cc4aca110133d2fd65c373c87b3a35804aec6df883cb3bde74c4c2de75d52300483aef8e6c872b0a3d036a459cb1a9cc8fd0cf97cbea3d015b0782ea91b7f683126e1a6763bd189691761d5be940a416a79c841bdf6750348d4dd34037db7d68dfd0f98438aa945d745a3017f647"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44001)

3.898172158s ago: executing program 0 (id=3227):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000))
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newchain={0x48, 0x64, 0x808, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x8, 0xc}, {0x8, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newchain={0x48, 0x64, 0x808, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x8, 0xc}, {0x8, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

3.688215386s ago: executing program 2 (id=3228):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0xc4, &(0x7f0000000740)={@local, @broadcast, @void, {@generic={0x892f, "617d4363c2647342199465ca41af22a8560e2ae40c54e6cefcf15c9d342f08dd6f85e6d6fd6af45782cac5602f00a1fd4087088803b45940360cd7113b44bc9f6c988ef11022a406154d2a0e0a9f03e068cb62a138b08372f5036979317b28b0815e1069814661735836c8d83fb72be8b1390c50a7065e249d098d63d087f330fe9dc38c6af44b408dcd2979bad4de73d2cb34e2b8646c16629c8a6647c04a987171de064857e66bc04ade5167dc5584b42f3aec024f"}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1, 0x0, 0x0, 0x26, r2})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_fd={0x18, 0x5}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x7c, &(0x7f0000000200)=""/124, 0x41100, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1]}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r8, 0x25, 0x18, @void}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@mpls_getnetconf={0x4c, 0x52, 0x4, 0x70bd23, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0xfffffffffffffd30, 0x6, 0x1000}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffdfffc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc181}, 0x40000)

3.512589847s ago: executing program 2 (id=3229):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r4=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x0, 0x26, 0x2c, 0x0, 0xffffffff}, 0x28)
sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r0, 0x40c, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800020000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x5, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000fcdbdf252100000034002d80080003000908000005000400000000000800030009000000080002000300000505000400000000000800020001000000080003008208f379d445e36855ac7ad61103d2da68a3b7c90021b3b32d87da2c2215c3dbf34a44d90c09ac912848f4833ba3726e43118cbdcd78ea53d4cb59e7e0a215d486b3307d71c32e1355cd679bac7efadcb012be771a751e451c4920", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x6002}, 0x40000c0)

3.421548774s ago: executing program 2 (id=3230):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r4, &(0x7f00000030c0), 0x400000000000181, 0x20004050)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x8}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

3.304792677s ago: executing program 3 (id=3231):
syz_emit_ethernet(0x46, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10)

2.656579518s ago: executing program 3 (id=3235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
close(r2)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x34, [0x50a, 0x2, 0x1, 0x9, 0xffffffffffff8000, 0x2], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/52}, &(0x7f0000000200)=0x78)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

1.785085341s ago: executing program 1 (id=3238):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000063c0)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}, 0x1c, &(0x7f00000020c0)=[{&(0x7f00000003c0)="20de", 0x2}], 0x1}}], 0x1, 0x20000001)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1ff, 0x6a47, 0x2bec40, 0x2, 0xa1, 0x673, 0x7}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1ff, 0x6a47, 0x2bec40, 0x2, 0xa1, 0x673, 0x7}, 0x9c)

1.717963406s ago: executing program 1 (id=3239):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x200}}, &(0x7f0000000980)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21408, 0x53f}}, 0x20}}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000100)=0x7, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50)

1.716235771s ago: executing program 1 (id=3240):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000045000048024000180090001006d657461000000001400028008000140000000150800024000000004280001800b0001006f626a72656600001800028009000200737900000000000008000140000000080900010073797a30000000000900020073797a3200"], 0xa4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000009c00)={r5, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r2, 0x25, 0x4, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005800000000006c907800000000000000000420880b0086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000e5ffffff000a6a0800655800000000e680ee8ee8b87f0168785c0d51fb84228adad1095648f15e5bd74bc45a391f21a389307684fdcfa6d95a1b5ad717aa96bae81717fafdb6034d84cbc6a0d4fda3e02d5243c9acfe47921e4322fbfcb5746a72252ba7220f2c7caee48e8434d6c104f5acb1f1c3ba2a87a97a7d774260f28720e6a284ca8ec8bd1af6040ade5df330097c3c109b14cedcde0549ecfbab79a816a262c8618a61149913b8fe7dfb4ba8bb5c95a9247b19c5a5ee9f6b08a616af3e3d45b053bbfd1b2a3bdc4f54479067567541f27ecdc929946db1f9a4ad12e370d0a5b9a60162af4e12caf3c6b8c88096d65ac31e618e1f5e50d24cb0889fcc0000000000000000000051c3af95db96785107b9ff10ae5005571e76f8af57cef02c3ddcfa72b887bb3d34d8ff"], 0x0)

833.023638ms ago: executing program 1 (id=3241):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

722.664334ms ago: executing program 1 (id=3242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x0, [0x6, 0x0, 0x1, 0x6, 0x2, 0xc846], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0xa8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async, rerun: 64)
ioctl$int_out(r1, 0x5462, &(0x7f0000000180)) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)

284.99348ms ago: executing program 3 (id=3243):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x8040)

195.146069ms ago: executing program 2 (id=3244):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket(0x1, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfffffe5a)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x10, 0x6, 0x40000, 0x2, 0x2, 0x7d, 0xffffff19}})

4.562023ms ago: executing program 1 (id=3245):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r9)
sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b04, &(0x7f0000000200)={'wlan1\x00'})
bind$inet(r12, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)

0s ago: executing program 3 (id=3246):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0075ff", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x7f, 0x6]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff, {{}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010101}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x3e, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008c90}, 0x20880)
getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0xca, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r8}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r6, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce)
write$cgroup_pid(r5, &(0x7f0000000080)=0xffffffffffffffff, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff0000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000007500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

2]  ? __pfx____ratelimit+0x10/0x10
[  263.002016][T13002]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.002036][T13002]  ? __pfx__printk+0x10/0x10
[  263.002052][T13002]  ? __might_fault+0xb0/0x130
[  263.002083][T13002]  should_fail_ex+0x414/0x560
[  263.002121][T13002]  _copy_from_iter+0x1de/0x1790
[  263.002145][T13002]  ? rcu_is_watching+0x15/0xb0
[  263.002167][T13002]  ? kmalloc_reserve+0xbd/0x290
[  263.002184][T13002]  ? __pfx__copy_from_iter+0x10/0x10
[  263.002204][T13002]  ? __build_skb_around+0x262/0x3f0
[  263.002224][T13002]  ? netlink_sendmsg+0x642/0xb30
[  263.002239][T13002]  ? skb_put+0x11b/0x210
[  263.002261][T13002]  netlink_sendmsg+0x6b2/0xb30
[  263.002290][T13002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.002311][T13002]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.002338][T13002]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.002355][T13002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.002374][T13002]  __sock_sendmsg+0x21c/0x270
[  263.002399][T13002]  ____sys_sendmsg+0x505/0x830
[  263.002424][T13002]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.002451][T13002]  ? import_iovec+0x74/0xa0
[  263.002481][T13002]  ___sys_sendmsg+0x21f/0x2a0
[  263.002501][T13002]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.002554][T13002]  ? __fget_files+0x2a/0x420
[  263.002570][T13002]  ? __fget_files+0x3a0/0x420
[  263.002595][T13002]  __x64_sys_sendmsg+0x19b/0x260
[  263.002617][T13002]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.002645][T13002]  ? __pfx_ksys_write+0x10/0x10
[  263.002671][T13002]  ? do_syscall_64+0xbe/0xfa0
[  263.002691][T13002]  do_syscall_64+0xfa/0xfa0
[  263.002705][T13002]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.002721][T13002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.002737][T13002]  ? clear_bhb_loop+0x60/0xb0
[  263.002757][T13002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.002772][T13002] RIP: 0033:0x7f151af8f6c9
[  263.002789][T13002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.002801][T13002] RSP: 002b:00007f151bf01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.002817][T13002] RAX: ffffffffffffffda RBX: 00007f151b1e5fa0 RCX: 00007f151af8f6c9
[  263.002830][T13002] RDX: 0000000000004004 RSI: 0000200000001bc0 RDI: 0000000000000003
[  263.002841][T13002] RBP: 00007f151bf01090 R08: 0000000000000000 R09: 0000000000000000
[  263.002850][T13002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.002858][T13002] R13: 00007f151b1e6038 R14: 00007f151b1e5fa0 R15: 00007ffd50102208
[  263.002885][T13002]  </TASK>
[  263.675172][T13020] wlan1: mtu greater than device maximum
[  263.710192][T13017] syzkaller1: entered promiscuous mode
[  263.715861][T13017] syzkaller1: entered allmulticast mode
[  263.888650][T13028] 
: renamed from bond_slave_0
[  264.040542][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'.
[  264.218404][T13024] netlink: 'syz.4.1891': attribute type 1 has an invalid length.
[  264.307437][T13031] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1896'.
[  264.429489][T13040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.762076][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'.
[  264.798361][T13053] netlink: zone id is out of range
[  264.808752][T13053] netlink: zone id is out of range
[  264.817067][T13053] netlink: zone id is out of range
[  264.834865][T13053] netlink: zone id is out of range
[  265.056791][T13064] syzkaller1: entered promiscuous mode
[  265.074065][T13064] syzkaller1: entered allmulticast mode
[  265.746810][T13093] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1915'.
[  266.092055][T13107] syzkaller1: entered promiscuous mode
[  266.098138][T13107] syzkaller1: entered allmulticast mode
[  266.535240][T13131] netlink: 'syz.1.1926': attribute type 1 has an invalid length.
[  266.564122][T13131] netlink: 'syz.1.1926': attribute type 3 has an invalid length.
[  266.589152][T13131] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1926'.
[  266.622141][T13133] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  266.918067][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.152515][T13185] syzkaller0: entered promiscuous mode
[  268.158495][T13185] syzkaller0: entered allmulticast mode
[  268.336502][T13190] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1942'.
[  269.897153][T13188] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1942'.
[  269.906624][T13188] veth1: Caught tx_queue_len zero misconfig
[  270.421224][T13226] netlink: 'syz.0.1949': attribute type 4 has an invalid length.
[  270.676562][T13233] syzkaller1: entered promiscuous mode
[  270.686760][T13233] syzkaller1: entered allmulticast mode
[  270.921019][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'.
[  271.057305][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1954'.
[  271.103586][T13240] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1954'.
[  271.262334][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'.
[  271.286218][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1957'.
[  271.423090][T13269] syzkaller0: entered promiscuous mode
[  271.428848][T13269] syzkaller0: entered allmulticast mode
[  271.429476][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1957'.
[  271.447422][T13256] nbd: device at index 64 is going down
[  271.463385][T13269] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  271.474186][T13269] bond0: (slave sit0): Error -95 calling set_mac_address
[  271.602736][T13274] netlink: 'syz.4.1963': attribute type 1 has an invalid length.
[  271.647252][T13274] 8021q: adding VLAN 0 to HW filter on device bond5
[  271.744572][T13276] bond5: (slave gretap2): making interface the new active one
[  271.764387][T13280] netlink: 'syz.2.1965': attribute type 11 has an invalid length.
[  271.779535][T13276] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  271.798698][T13280] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1965'.
[  271.869565][T13280] syzkaller1: entered promiscuous mode
[  271.885404][T13280] syzkaller1: entered allmulticast mode
[  271.908332][T13282] syzkaller1: entered promiscuous mode
[  271.913842][T13282] syzkaller1: entered allmulticast mode
[  272.071409][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1969'.
[  272.092825][T13294] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig
[  272.183034][T13298] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  272.307335][T13298] bond2 (unregistering): Released all slaves
[  273.291490][T13342] net_ratelimit: 40 callbacks suppressed
[  273.291509][T13342] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  273.520090][T13346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.078161][T13355] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1982'.
[  274.098481][T13352] netlink: 'syz.4.1981': attribute type 54 has an invalid length.
[  274.322719][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'.
[  274.367061][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'.
[  274.428228][T13377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.454505][T13377] syzkaller0: entered promiscuous mode
[  274.466041][T13377] syzkaller0: entered allmulticast mode
[  274.496259][T13377] netlink: 'syz.2.1988': attribute type 7 has an invalid length.
[  274.554600][T13377] tipc: Resetting bearer <eth:syzkaller0>
[  274.600338][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1990'.
[  274.611805][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1990'.
[  274.989590][T13399] syzkaller0: entered promiscuous mode
[  274.995178][T13399] syzkaller0: entered allmulticast mode
[  275.098771][T13402] netlink: 'syz.1.1994': attribute type 11 has an invalid length.
[  275.107014][T13368] tipc: Resetting bearer <eth:syzkaller0>
[  275.119578][T13402] netlink: 'syz.1.1994': attribute type 11 has an invalid length.
[  275.185282][T13402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1994'.
[  275.221536][T13368] tipc: Disabling bearer <eth:syzkaller0>
[  275.336302][T13401] bridge16: entered promiscuous mode
[  275.345307][T13401] bridge16: entered allmulticast mode
[  275.429473][T13411] netlink: 'syz.3.1997': attribute type 1 has an invalid length.
[  275.521871][T13411] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.553171][T13419] xt_TCPMSS: Only works on TCP SYN packets
[  275.565475][T13415] ip6gretap2: entered allmulticast mode
[  275.810047][T13436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.817726][T13436] syzkaller0: entered promiscuous mode
[  275.823213][T13436] syzkaller0: entered allmulticast mode
[  275.901030][T13436] tipc: Resetting bearer <eth:syzkaller0>
[  276.005896][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'.
[  276.053752][T13449] netlink: 'syz.3.2006': attribute type 11 has an invalid length.
[  276.062732][T13449] netlink: 'syz.3.2006': attribute type 11 has an invalid length.
[  276.070813][T13449] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2006'.
[  276.277796][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  276.310092][T13433] tipc: Resetting bearer <eth:syzkaller0>
[  276.375042][T13433] tipc: Disabling bearer <eth:syzkaller0>
[  276.478199][T13453] bridge12: entered promiscuous mode
[  276.483728][T13453] bridge12: entered allmulticast mode
[  276.533631][T13445] syzkaller1: entered promiscuous mode
[  276.554354][T13445] syzkaller1: entered allmulticast mode
[  276.825048][T13468] syzkaller0: entered promiscuous mode
[  276.833968][T13468] syzkaller0: entered allmulticast mode
[  276.926498][T13471] __nla_validate_parse: 1 callbacks suppressed
[  276.926516][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'.
[  276.974686][T13471] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2010'.
[  277.206234][T13479] tipc: Resetting bearer <eth:syzkaller0>
[  277.272154][T13488] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  277.290883][T13489] netlink: 'syz.1.2015': attribute type 3 has an invalid length.
[  277.566041][T13499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.622330][T13500] netlink: 'syz.3.2018': attribute type 11 has an invalid length.
[  277.676837][T13500] netlink: 'syz.3.2018': attribute type 11 has an invalid length.
[  277.699584][T13500] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2018'.
[  277.858445][T13496] bridge13: entered promiscuous mode
[  277.875039][T13496] bridge13: entered allmulticast mode
[  278.071202][T13515] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2023'.
[  278.501927][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'.
[  278.650339][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2031'.
[  278.676411][ T7207] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.695308][ T7207] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.708224][ T7207] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.725687][ T7207] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.029814][T13558] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  279.093294][T13559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2034'.
[  279.259351][T13561] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  279.272354][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'.
[  279.356483][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'.
[  279.423411][T13565] sctp: [Deprecated]: syz.2.2037 (pid 13565) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.423411][T13565] Use struct sctp_sack_info instead
[  279.790446][T13577] syzkaller1: entered promiscuous mode
[  279.796119][T13577] syzkaller1: entered allmulticast mode
[  280.134533][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2043'.
[  280.239892][T13586] syzkaller1: entered promiscuous mode
[  280.246266][T13586] syzkaller1: entered allmulticast mode
[  280.531858][T13602] netlink: 'syz.2.2049': attribute type 33 has an invalid length.
[  280.611103][T13611] netlink: 'syz.4.2052': attribute type 29 has an invalid length.
[  280.638419][T13611] netlink: 'syz.4.2052': attribute type 29 has an invalid length.
[  280.684247][T13611] geneve1: Caught tx_queue_len zero misconfig
[  280.789320][T13620] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.185608][T13633] netlink: 'syz.4.2060': attribute type 1 has an invalid length.
[  281.348271][T13633] 8021q: adding VLAN 0 to HW filter on device bond6
[  281.384875][T13642] bond6: entered promiscuous mode
[  281.596093][T13652] sctp: [Deprecated]: syz.3.2062 (pid 13652) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.596093][T13652] Use struct sctp_sack_info instead
[  282.307122][T13663] __nla_validate_parse: 3 callbacks suppressed
[  282.307140][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.363036][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.382429][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.532271][T13664] syzkaller0: entered promiscuous mode
[  282.678075][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.679261][T13664] syzkaller0: entered allmulticast mode
[  282.743190][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.768823][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.825258][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.891172][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  282.932760][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  284.625958][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  284.940540][T13681] netlink: 'syz.0.2070': attribute type 2 has an invalid length.
[  284.965801][T13681] !: entered promiscuous mode
[  285.037015][T13686] netlink: 'syz.0.2070': attribute type 21 has an invalid length.
[  285.054913][T13686] netlink: 'syz.0.2070': attribute type 22 has an invalid length.
[  285.073253][T13686] netlink: 'syz.0.2070': attribute type 23 has an invalid length.
[  285.091575][T13688] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  285.098709][T13686] netlink: 'syz.0.2070': attribute type 25 has an invalid length.
[  285.110119][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  285.136236][T13688] netlink: 'syz.2.2072': attribute type 10 has an invalid length.
[  285.169668][T13688] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  285.444903][T13693] syzkaller0: entered promiscuous mode
[  285.450661][T13693] syzkaller0: entered allmulticast mode
[  285.461702][T13693] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  285.472511][T13693] bond0: (slave sit0): Error -95 calling set_mac_address
[  285.554948][T13695] netlink: 'syz.3.2074': attribute type 13 has an invalid length.
[  285.563341][T13695] netlink: 'syz.3.2074': attribute type 17 has an invalid length.
[  285.610381][T13695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.930127][T13708] netlink: 'syz.0.2076': attribute type 33 has an invalid length.
[  286.050855][T13717] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  286.272991][ T7136] hid-generic 0005:046D:05DF.0001: item fetching failed at offset 0/1
[  286.298216][T13732] wg1 speed is unknown, defaulting to 1000
[  286.326127][T13732] wg1 speed is unknown, defaulting to 1000
[  286.335263][ T7136] hid-generic 0005:046D:05DF.0001: probe with driver hid-generic failed with error -22
[  286.370074][T13732] wg1 speed is unknown, defaulting to 1000
[  286.400460][T13738] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  286.435460][T13732] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  286.459820][T13739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.490247][T13739] syzkaller0: entered promiscuous mode
[  286.495941][T13739] syzkaller0: entered allmulticast mode
[  286.565876][T13751] bond7: entered allmulticast mode
[  286.572467][T13732] wg1 speed is unknown, defaulting to 1000
[  286.588061][T13732] wg1 speed is unknown, defaulting to 1000
[  286.596125][T13732] wg1 speed is unknown, defaulting to 1000
[  286.607122][T13732] wg1 speed is unknown, defaulting to 1000
[  286.671896][T13732] wg1 speed is unknown, defaulting to 1000
[  286.688752][T13739] tipc: Resetting bearer <eth:syzkaller0>
[  286.753136][T13737] tipc: Resetting bearer <eth:syzkaller0>
[  286.838529][T13737] tipc: Disabling bearer <eth:syzkaller0>
[  286.871580][T13765] netlink: 'syz.0.2090': attribute type 10 has an invalid length.
[  286.895175][T13765] 8021q: adding VLAN 0 to HW filter on device team0
[  286.933650][T13765] bond0: (slave team0): Enslaving as an active interface with an up link
[  287.129561][T13781] netlink: 'syz.4.2097': attribute type 11 has an invalid length.
[  287.138123][T13781] netlink: 'syz.4.2097': attribute type 11 has an invalid length.
[  287.231179][T13761] wg1 speed is unknown, defaulting to 1000
[  287.338321][T13781] bridge8: entered promiscuous mode
[  287.343591][T13781] bridge8: entered allmulticast mode
[  287.660508][T13808] batadv0: entered promiscuous mode
[  287.666476][T13808] macvtap0: entered promiscuous mode
[  287.673438][T13808] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  288.429256][T13808] batadv0: left promiscuous mode
[  288.553910][T13830] __nla_validate_parse: 11 callbacks suppressed
[  288.553929][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  288.790302][T13845] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2114'.
[  288.842620][T13795] wg1 speed is unknown, defaulting to 1000
[  288.950888][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'.
[  289.008674][T13853] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  289.106206][T13845] team0: Port device dummy0 removed
[  289.492176][T13803] wg1 speed is unknown, defaulting to 1000
[  289.645680][T13866] syzkaller1: entered promiscuous mode
[  289.651748][T13866] syzkaller1: entered allmulticast mode
[  289.672086][T13865] syzkaller0: left promiscuous mode
[  289.677391][T13865] syzkaller0: left allmulticast mode
[  289.939846][T13872] netlink: 'syz.0.2122': attribute type 11 has an invalid length.
[  289.961641][T13872] netlink: 'syz.0.2122': attribute type 11 has an invalid length.
[  290.000907][T13872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2122'.
[  290.099924][T13881] syzkaller0: Caught tx_queue_len zero misconfig
[  290.165808][T13883] bridge11: entered promiscuous mode
[  290.172422][T13883] bridge11: entered allmulticast mode
[  290.218832][T13885] validate_nla: 3 callbacks suppressed
[  290.218851][T13885] netlink: 'syz.3.2125': attribute type 1 has an invalid length.
[  290.232343][T13885] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2125'.
[  290.436175][T13896] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  290.527363][T13903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.536004][T13906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.559235][T13904] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  290.570461][T13904] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  290.578855][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'.
[  290.625086][T13896] bond2: (slave gretap1): making interface the new active one
[  290.641240][T13896] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  290.694057][T13896] syz.0.2130 (13896) used greatest stack depth: 17464 bytes left
[  291.221905][T13939] syzkaller1: entered promiscuous mode
[  291.227546][T13939] syzkaller1: entered allmulticast mode
[  291.243103][T13942] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2140'.
[  291.256403][T13933] x_tables: unsorted entry at hook 2
[  291.435144][T13951] netlink: 'syz.2.2148': attribute type 11 has an invalid length.
[  291.446669][T13951] netlink: 'syz.2.2148': attribute type 11 has an invalid length.
[  291.455990][T13951] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2148'.
[  291.477393][T13954] netlink: 'syz.3.2150': attribute type 33 has an invalid length.
[  291.486138][T13954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2150'.
[  291.524656][T13951] bridge12: entered promiscuous mode
[  291.530570][T13951] bridge12: entered allmulticast mode
[  291.551995][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'.
[  292.014561][T13981] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  292.038881][ T5899] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.117369][T13993] netlink: 'syz.1.2161': attribute type 11 has an invalid length.
[  292.127554][T13993] netlink: 'syz.1.2161': attribute type 11 has an invalid length.
[  292.256362][T13993] bridge17: entered promiscuous mode
[  292.262736][T13993] bridge17: entered allmulticast mode
[  292.285195][    C1] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72
[  292.294462][   T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.450773][   T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.490201][  T983] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.517853][T14005] xt_CT: No such helper "netbios-ns"
[  292.831604][T14000] wg1 speed is unknown, defaulting to 1000
[  293.078001][ T5899] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.124511][T14002] syzkaller0: entered promiscuous mode
[  293.139301][T14002] syzkaller0: entered allmulticast mode
[  293.250187][T14019] syzkaller0: entered promiscuous mode
[  293.256635][T14019] syzkaller0: entered allmulticast mode
[  293.284538][T14034] syzkaller1: entered promiscuous mode
[  293.291722][T14034] syzkaller1: entered allmulticast mode
[  293.433654][T14036] veth0_to_hsr: entered promiscuous mode
[  293.440799][T14036] veth0_to_hsr: entered allmulticast mode
[  293.446695][T14036] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check.
[  293.765247][T14048] macvlan2: entered promiscuous mode
[  293.805142][T14048] vlan0: entered promiscuous mode
[  293.942734][T14066] __nla_validate_parse: 4 callbacks suppressed
[  293.942752][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'.
[  293.948197][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2176'.
[  294.018259][T14071] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  294.130270][T14048] vlan0 (unregistering): left promiscuous mode
[  294.336677][T14071] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2182'.
[  294.572199][T14091] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  294.687385][T14097] netlink: 'syz.3.2188': attribute type 13 has an invalid length.
[  294.877875][T14105] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  295.401494][T14107] netlink: 'syz.2.2190': attribute type 12 has an invalid length.
[  295.410709][T14107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2190'.
[  295.422234][ T5935] syz1: Port: 1 Link DOWN
[  295.427875][ T7195] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.436259][ T7195] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.461601][ T7195] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.470098][ T7195] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.496930][ T7195] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.546438][ T7195] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.572512][ T7195] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.602410][ T7195] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.662836][T14135] netlink: 'syz.2.2194': attribute type 9 has an invalid length.
[  295.683569][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'.
[  295.721119][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'.
[  295.771773][T14135] netlink: 'syz.2.2194': attribute type 9 has an invalid length.
[  295.815774][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'.
[  295.951091][T14143] syzkaller0: entered promiscuous mode
[  295.956608][T14143] syzkaller0: entered allmulticast mode
[  296.059792][T14151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2199'.
[  296.190524][T14159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2199'.
[  296.252348][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.657766][T14161] syzkaller0: left allmulticast mode
[  296.757891][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.102085][T14175] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.234594][T14175] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.284194][T14175] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.343510][T14175] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.381511][T14163] wg1 speed is unknown, defaulting to 1000
[  297.589794][   T61] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.626075][ T3542] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.677313][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'.
[  297.723155][   T61] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.781866][ T3542] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.882283][T14196] syzkaller1: entered promiscuous mode
[  297.905402][T14196] syzkaller1: entered allmulticast mode
[  298.063237][T14201] geneve2: entered promiscuous mode
[  298.083168][T14201] geneve2: entered allmulticast mode
[  298.106247][ T7195] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 33616 - 0
[  298.157878][ T7195] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 33616 - 0
[  298.186672][ T7195] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 33616 - 0
[  298.212998][ T7195] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 33616 - 0
[  298.561742][T14226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.583347][T14226] syzkaller0: entered promiscuous mode
[  298.597500][T14226] syzkaller0: entered allmulticast mode
[  298.632640][T14226] tipc: Resetting bearer <eth:syzkaller0>
[  298.644436][T14226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.668001][T14226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.697053][T14225] tipc: Resetting bearer <eth:syzkaller0>
[  298.745277][T14225] tipc: Disabling bearer <eth:syzkaller0>
[  298.936261][T14236] syzkaller0: entered promiscuous mode
[  298.943118][T14236] syzkaller0: entered allmulticast mode
[  299.028133][T14236] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  299.047207][T14236] bond0: (slave sit0): Error -95 calling set_mac_address
[  299.298115][T14234] wg1 speed is unknown, defaulting to 1000
[  299.697937][T14243] IPVS: Unknown mcast interface: ip6_vti0
[  300.246660][T14269] __nla_validate_parse: 3 callbacks suppressed
[  300.246678][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'.
[  300.282566][T14269] macvtap2: entered promiscuous mode
[  300.297419][T14269] bond0: entered promiscuous mode
[  300.304699][T14269] team0: entered promiscuous mode
[  300.318258][T14269] macvtap2: entered allmulticast mode
[  300.323677][T14269] bond0: entered allmulticast mode
[  300.349855][T14269] team0: entered allmulticast mode
[  300.364797][T14269] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  300.408494][T14271] macvtap2: left promiscuous mode
[  300.413709][T14271] bond0: left promiscuous mode
[  300.418719][T14271] team0: left promiscuous mode
[  300.430394][T14271] macvtap2: left allmulticast mode
[  300.447458][T14271] bond0: left allmulticast mode
[  300.457744][T14271] team0: left allmulticast mode
[  301.150512][T14243] wg1 speed is unknown, defaulting to 1000
[  301.161472][T14239] wg1 speed is unknown, defaulting to 1000
[  301.220864][T14240] wg1 speed is unknown, defaulting to 1000
[  301.310632][T14279] raw_sendmsg: syz.0.2228 forgot to set AF_INET. Fix it!
[  301.373702][T14242] wg1 speed is unknown, defaulting to 1000
[  301.887875][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.093792][T14300] syz_tun: entered allmulticast mode
[  302.102676][T14299] syzkaller0: entered promiscuous mode
[  302.108907][T14299] syzkaller0: entered allmulticast mode
[  302.196627][T14303] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  302.598123][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  302.684094][T14315] bond4: option ad_actor_sys_prio: invalid value (0)
[  302.693151][T14315] bond4: option ad_actor_sys_prio: allowed values 1 - 65535
[  302.704337][T14315] bond4 (unregistering): Released all slaves
[  302.799388][T14314] netlink: 'syz.4.2238': attribute type 3 has an invalid length.
[  303.579711][T14354] xt_hashlimit: size too large, truncated to 1048576
[  303.630170][T14356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.642723][T14353] netlink: 'syz.2.2244': attribute type 3 has an invalid length.
[  303.648721][T14356] netlink: 'syz.0.2245': attribute type 13 has an invalid length.
[  303.667912][T14356] netlink: 'syz.0.2245': attribute type 27 has an invalid length.
[  303.776954][T14356] syzkaller0: entered promiscuous mode
[  303.813612][T14356] syzkaller0: entered allmulticast mode
[  303.879713][T14369] netlink: 'syz.2.2249': attribute type 1 has an invalid length.
[  303.897942][T14369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2249'.
[  303.949657][T14371] netlink: 'syz.2.2249': attribute type 1 has an invalid length.
[  303.955263][T14354] tipc: Resetting bearer <eth:syzkaller0>
[  303.978727][T14341] wg1 speed is unknown, defaulting to 1000
[  303.984749][T14352] tipc: Resetting bearer <eth:syzkaller0>
[  304.008261][T14371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2249'.
[  304.018306][T14352] tipc: Disabling bearer <eth:syzkaller0>
[  304.096189][T14376] syzkaller0: entered promiscuous mode
[  304.102004][T14376] syzkaller0: entered allmulticast mode
[  304.186460][T14376] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  304.207325][T14376] bond0: (slave sit0): Error -95 calling set_mac_address
[  304.577419][T14393] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.594801][T14393] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.699755][T14393] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.710632][T14393] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.795972][T14393] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.820237][T14393] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.888171][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'.
[  304.935715][T14393] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.960593][T14393] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.111775][ T7195] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.120650][ T7195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.168248][ T7195] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.177080][ T7195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.185758][T14410] pimreg: tun_chr_ioctl cmd 2147767506
[  305.229548][ T7207] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.238956][ T7207] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.271833][ T7207] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.280904][ T7207] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.345438][T14422] netlink: 'syz.1.2266': attribute type 11 has an invalid length.
[  305.353469][T14422] netlink: 'syz.1.2266': attribute type 11 has an invalid length.
[  305.361772][T14422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2266'.
[  305.514768][T14424] bridge18: entered promiscuous mode
[  305.526953][T14424] bridge18: entered allmulticast mode
[  305.717791][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  305.880966][T14409] wg1 speed is unknown, defaulting to 1000
[  306.129981][T14441] netlink: 'syz.2.2271': attribute type 3 has an invalid length.
[  306.150687][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'.
[  306.177862][T14414] netlink: 'syz.0.2261': attribute type 6 has an invalid length.
[  306.620940][T14466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.399637][T14459] wg1 speed is unknown, defaulting to 1000
[  307.541113][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2278'.
[  307.689110][T14494] syzkaller0: entered promiscuous mode
[  307.695993][T14494] syzkaller0: entered allmulticast mode
[  307.798773][T14503] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  307.818818][T14503] bond0: (slave sit0): Error -95 calling set_mac_address
[  308.156877][T14519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2285'.
[  308.166797][T14519] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2285'.
[  308.376963][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'.
[  308.759882][T14561] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2296'.
[  309.028755][T14559] wg1 speed is unknown, defaulting to 1000
[  309.104839][T14567] vlan2: entered promiscuous mode
[  309.117876][T14567] syz_tun: entered promiscuous mode
[  309.428496][T14600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'.
[  310.137978][T14629] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  310.206433][T14637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.259849][T14640] syzkaller0: entered promiscuous mode
[  310.273697][T14640] syzkaller0: entered allmulticast mode
[  310.328958][T14632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.342588][T14631] tipc: Resetting bearer <eth:syzkaller0>
[  310.388451][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'.
[  310.388955][T14631] tipc: Disabling bearer <eth:syzkaller0>
[  310.868721][T14664] netlink: 720 bytes leftover after parsing attributes in process `syz.3.2323'.
[  310.922715][T14664] Cannot find del_set index 4 as target
[  311.022918][T14673] netlink: 'syz.4.2324': attribute type 11 has an invalid length.
[  311.336438][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'.
[  311.376314][T14700] team1: entered promiscuous mode
[  311.381779][T14700] team1: entered allmulticast mode
[  311.387449][T14700] 8021q: adding VLAN 0 to HW filter on device team1
[  311.411539][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'.
[  311.801913][T14723] syzkaller0: entered promiscuous mode
[  311.807427][T14723] syzkaller0: entered allmulticast mode
[  311.832985][T14727] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2340'.
[  311.862952][T14731] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.985284][T14734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.001832][T14734] syzkaller0: entered promiscuous mode
[  312.027804][T14734] syzkaller0: entered allmulticast mode
[  312.137376][T14741] netlink: 'syz.4.2345': attribute type 11 has an invalid length.
[  312.149116][T14741] netlink: 'syz.4.2345': attribute type 11 has an invalid length.
[  312.167935][T14741] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2345'.
[  312.240273][T14746] tipc: Resetting bearer <eth:syzkaller0>
[  312.294143][T14755] bridge9: entered promiscuous mode
[  312.312733][T14755] bridge9: entered allmulticast mode
[  312.322750][T14733] tipc: Resetting bearer <eth:syzkaller0>
[  312.360847][T14733] tipc: Disabling bearer <eth:syzkaller0>
[  312.364438][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'.
[  312.383527][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2349'.
[  312.406819][T14761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2349'.
[  312.443328][T14763] batman_adv: batadv0: Adding interface: ip6gretap2
[  312.450881][T14763] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.476989][T14763] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  312.602351][T14775] netlink: 'syz.1.2351': attribute type 4 has an invalid length.
[  312.990740][T14775] wg1 speed is unknown, defaulting to 1000
[  313.183893][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'.
[  313.615996][T14824] netlink: 'syz.2.2364': attribute type 2 has an invalid length.
[  313.783799][T14830] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  313.923752][T14830] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  314.193273][T14848] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  314.212497][T14848] sctp: [Deprecated]: syz.1.2374 (pid 14848) Use of struct sctp_assoc_value in delayed_ack socket option.
[  314.212497][T14848] Use struct sctp_sack_info instead
[  314.300774][T14855] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  314.558990][T14872] netlink: 'syz.1.2380': attribute type 3 has an invalid length.
[  314.767999][T14891] xt_l2tp: v2 tid > 0xffff: 37482740
[  314.818951][T14898] netlink: 'syz.0.2388': attribute type 6 has an invalid length.
[  314.872516][T14898] netlink: 'syz.0.2388': attribute type 6 has an invalid length.
[  314.952126][T14903] syzkaller0: entered promiscuous mode
[  314.976637][T14903] syzkaller0: entered allmulticast mode
[  315.003393][T14909] bridge_slave_0: invalid flags given to default FDB implementation
[  315.273035][T14919] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  315.309982][T14919] bond4 (unregistering): Released all slaves
[  315.422885][T14927] netlink: 'syz.1.2398': attribute type 8 has an invalid length.
[  315.500439][T14931] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  315.560595][T14935] syzkaller0: entered promiscuous mode
[  315.576346][T14935] syzkaller0: entered allmulticast mode
[  315.600636][T14935] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  315.621237][T14939] __nla_validate_parse: 15 callbacks suppressed
[  315.621254][T14939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'.
[  315.636670][T14935] bond0: (slave sit0): Error -95 calling set_mac_address
[  315.817355][T14926] wg1 speed is unknown, defaulting to 1000
[  315.971906][T14956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2406'.
[  316.055504][T14959] FAULT_INJECTION: forcing a failure.
[  316.055504][T14959] name failslab, interval 1, probability 0, space 0, times 0
[  316.072496][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.3.2408 Not tainted syzkaller #0 PREEMPT(full) 
[  316.072521][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  316.072530][T14959] Call Trace:
[  316.072537][T14959]  <TASK>
[  316.072546][T14959]  dump_stack_lvl+0x189/0x250
[  316.072575][T14959]  ? __pfx____ratelimit+0x10/0x10
[  316.072600][T14959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.072621][T14959]  ? __pfx__printk+0x10/0x10
[  316.072642][T14959]  ? __pfx___might_resched+0x10/0x10
[  316.072660][T14959]  ? fs_reclaim_acquire+0x7d/0x100
[  316.072681][T14959]  should_fail_ex+0x414/0x560
[  316.072714][T14959]  should_failslab+0xa8/0x100
[  316.072734][T14959]  __kmalloc_noprof+0xcb/0x7f0
[  316.072756][T14959]  ? bpf_test_init+0x9f/0x150
[  316.072783][T14959]  bpf_test_init+0x9f/0x150
[  316.072809][T14959]  bpf_prog_test_run_xdp+0x503/0x10e0
[  316.072839][T14959]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  316.072861][T14959]  ? __fget_files+0x2a/0x420
[  316.072883][T14959]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  316.072902][T14959]  bpf_prog_test_run+0x2c7/0x340
[  316.072923][T14959]  __sys_bpf+0x562/0x860
[  316.072942][T14959]  ? __pfx___sys_bpf+0x10/0x10
[  316.072980][T14959]  ? ksys_write+0x22a/0x250
[  316.073005][T14959]  ? __pfx_ksys_write+0x10/0x10
[  316.073033][T14959]  __x64_sys_bpf+0x7c/0x90
[  316.073057][T14959]  do_syscall_64+0xfa/0xfa0
[  316.073072][T14959]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.073090][T14959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.073106][T14959]  ? clear_bhb_loop+0x60/0xb0
[  316.073127][T14959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.073144][T14959] RIP: 0033:0x7f994638f6c9
[  316.073160][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.073175][T14959] RSP: 002b:00007f994717c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  316.073194][T14959] RAX: ffffffffffffffda RBX: 00007f99465e5fa0 RCX: 00007f994638f6c9
[  316.073206][T14959] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  316.073218][T14959] RBP: 00007f994717c090 R08: 0000000000000000 R09: 0000000000000000
[  316.073228][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  316.073239][T14959] R13: 00007f99465e6038 R14: 00007f99465e5fa0 R15: 00007ffe24470208
[  316.073270][T14959]  </TASK>
[  316.317811][T14931] wg1 speed is unknown, defaulting to 1000
[  316.362422][T14927] wg1 speed is unknown, defaulting to 1000
[  316.466716][T14963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2409'.
[  316.508448][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  316.551803][T14963] netlink: 'syz.2.2409': attribute type 4 has an invalid length.
[  317.025440][T14988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2419'.
[  317.041502][T14988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2419'.
[  317.201432][T14996] FAULT_INJECTION: forcing a failure.
[  317.201432][T14996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.217106][T14996] CPU: 1 UID: 0 PID: 14996 Comm: syz.3.2420 Not tainted syzkaller #0 PREEMPT(full) 
[  317.217132][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  317.217142][T14996] Call Trace:
[  317.217149][T14996]  <TASK>
[  317.217157][T14996]  dump_stack_lvl+0x189/0x250
[  317.217185][T14996]  ? __pfx____ratelimit+0x10/0x10
[  317.217208][T14996]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.217230][T14996]  ? __pfx__printk+0x10/0x10
[  317.217261][T14996]  should_fail_ex+0x414/0x560
[  317.217291][T14996]  _copy_from_user+0x2d/0xb0
[  317.217313][T14996]  bpf_test_init+0xd8/0x150
[  317.217336][T14996]  bpf_prog_test_run_xdp+0x503/0x10e0
[  317.217372][T14996]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  317.217395][T14996]  ? __fget_files+0x2a/0x420
[  317.217422][T14996]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  317.217442][T14996]  bpf_prog_test_run+0x2c7/0x340
[  317.217464][T14996]  __sys_bpf+0x562/0x860
[  317.217483][T14996]  ? __pfx___sys_bpf+0x10/0x10
[  317.217521][T14996]  ? rcu_is_watching+0x15/0xb0
[  317.217548][T14996]  __x64_sys_bpf+0x7c/0x90
[  317.217570][T14996]  do_syscall_64+0xfa/0xfa0
[  317.217584][T14996]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.217601][T14996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.217616][T14996]  ? clear_bhb_loop+0x60/0xb0
[  317.217635][T14996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.217651][T14996] RIP: 0033:0x7f994638f6c9
[  317.217666][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.217680][T14996] RSP: 002b:00007f994717c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  317.217698][T14996] RAX: ffffffffffffffda RBX: 00007f99465e5fa0 RCX: 00007f994638f6c9
[  317.217710][T14996] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  317.217721][T14996] RBP: 00007f994717c090 R08: 0000000000000000 R09: 0000000000000000
[  317.217731][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.217741][T14996] R13: 00007f99465e6038 R14: 00007f99465e5fa0 R15: 00007ffe24470208
[  317.217770][T14996]  </TASK>
[  317.430582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.739895][T15015] tls_set_device_offload: netdev not found
[  317.823026][T15010] wg1 speed is unknown, defaulting to 1000
[  317.834194][T15022] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2423'.
[  318.215253][T14999] wg1 speed is unknown, defaulting to 1000
[  318.458323][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'.
[  318.766765][T15063] 8021q: adding VLAN 0 to HW filter on device bond4
[  318.787646][T15011] wg1 speed is unknown, defaulting to 1000
[  318.876927][ T5843] Bluetooth: hci4: link tx timeout
[  318.883717][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  318.893491][ T5828] Bluetooth: hci4: link tx timeout
[  318.900316][ T5828] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  319.795463][T15056] wg1 speed is unknown, defaulting to 1000
[  320.140556][T15110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'.
[  320.374761][T15135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2452'.
[  320.439719][T15135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.453212][T15135] syzkaller0: entered promiscuous mode
[  320.469595][T15135] syzkaller0: entered allmulticast mode
[  320.516676][T15135] tipc: Resetting bearer <eth:syzkaller0>
[  320.532537][T15135] netlink: 'syz.3.2452': attribute type 1 has an invalid length.
[  320.618026][T15106] wg1 speed is unknown, defaulting to 1000
[  320.648564][T15134] tipc: Resetting bearer <eth:syzkaller0>
[  320.680716][T15134] tipc: Disabling bearer <eth:syzkaller0>
[  320.918216][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  320.976102][T15161] __nla_validate_parse: 2 callbacks suppressed
[  320.976119][T15161] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.2460'.
[  320.980227][T15155] pim6reg1: entered promiscuous mode
[  320.997199][T15155] pim6reg1: entered allmulticast mode
[  321.317200][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2461'.
[  321.348502][T15163] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  321.380661][T15163] No such timeout policy "syz1"
[  321.398078][T15163] netlink: 'syz.2.2461': attribute type 8 has an invalid length.
[  321.619893][T15185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2468'.
[  321.671424][T15185] netlink: 'syz.0.2468': attribute type 13 has an invalid length.
[  321.857918][T15179] syzkaller1: entered promiscuous mode
[  321.865125][T15179] syzkaller1: entered allmulticast mode
[  321.991706][T15205] netlink: 'syz.4.2471': attribute type 21 has an invalid length.
[  322.024698][T15205] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2471'.
[  322.063147][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'.
[  322.235294][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'.
[  322.655053][T15242] netlink: 'syz.2.2479': attribute type 33 has an invalid length.
[  322.695549][T15242] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2479'.
[  322.781945][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2479'.
[  322.799562][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  322.836392][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'.
[  323.264526][T15274] netlink: 'syz.0.2485': attribute type 8 has an invalid length.
[  323.321443][T15226] wg1 speed is unknown, defaulting to 1000
[  323.781610][T15269] wg1 speed is unknown, defaulting to 1000
[  324.257084][T15273] wg1 speed is unknown, defaulting to 1000
[  324.511311][T15294] syzkaller1: entered promiscuous mode
[  324.517398][T15294] syzkaller1: entered allmulticast mode
[  324.554079][T15297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  325.133064][T15318] syzkaller1: entered promiscuous mode
[  325.155099][T15318] syzkaller1: entered allmulticast mode
[  325.265418][T15323] geneve0: entered promiscuous mode
[  325.270849][T15323] geneve0: entered allmulticast mode
[  325.382577][T15326] netlink: 'syz.1.2494': attribute type 2 has an invalid length.
[  325.430165][T15331] Cannot find add_set index 4 as target
[  325.768544][T15315] wg1 speed is unknown, defaulting to 1000
[  326.126511][T15356] __nla_validate_parse: 3 callbacks suppressed
[  326.126529][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'.
[  326.393134][T15358] 8021q: VLANs not supported on ip_vti0
[  326.418884][T15320] wg1 speed is unknown, defaulting to 1000
[  326.886463][T15368] syzkaller0: entered promiscuous mode
[  326.892193][T15368] syzkaller0: entered allmulticast mode
[  326.901059][T15331] wg1 speed is unknown, defaulting to 1000
[  327.055559][T15372] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  327.223866][T15374] siw: device registration error -23
[  327.558895][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'.
[  327.641767][T15376] wg1 speed is unknown, defaulting to 1000
[  328.214302][T15400] "syz.4.2518" (15400) uses obsolete ecb(arc4) skcipher
[  328.280976][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'.
[  328.874759][T15429] sctp: [Deprecated]: syz.3.2524 (pid 15429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.874759][T15429] Use struct sctp_sack_info instead
[  329.023413][T15438] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2529'.
[  329.228997][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'.
[  329.244858][T15456] block nbd0: Unsupported socket: should be TCP or UNIX.
[  329.328166][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2533'.
[  329.337241][T15464] openvswitch: netlink: Flow key attr not present in new flow.
[  330.047728][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'.
[  330.242276][T15532] netlink: 'syz.0.2552': attribute type 1 has an invalid length.
[  330.422308][T15537] lo: Caught tx_queue_len zero misconfig
[  330.459964][T15541] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  330.614330][T15558] nbd: must specify a device to reconfigure
[  330.676218][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2559'.
[  330.984463][T15571] netlink: 'syz.4.2563': attribute type 1 has an invalid length.
[  331.092808][T15571] 8021q: adding VLAN 0 to HW filter on device bond8
[  331.140662][T15574] bond8: (slave veth0_to_hsr): making interface the new active one
[  331.163642][T15574] bond8: (slave veth0_to_hsr): Enslaving as an active interface with an up link
[  331.177401][T15575] bond8: entered promiscuous mode
[  331.183695][T15575] veth0_to_hsr: entered promiscuous mode
[  331.212361][T15577] vlan2: entered promiscuous mode
[  331.220781][T15577] geneve1: entered promiscuous mode
[  331.226771][T15577] vlan2: entered allmulticast mode
[  331.232825][T15577] geneve1: entered allmulticast mode
[  331.240902][T15570] bond8: left promiscuous mode
[  331.255997][T15570] veth0_to_hsr: left promiscuous mode
[  331.423813][T15586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.600912][T15596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.805673][T15602] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2571'.
[  331.830199][T15602] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  332.124873][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'.
[  332.155447][T15598] wg1 speed is unknown, defaulting to 1000
[  332.371497][T15623] netlink: 'syz.4.2577': attribute type 3 has an invalid length.
[  332.432884][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2579'.
[  332.451116][T15629] nbd: must specify at least one socket
[  332.812498][T15650] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  333.129716][T15665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2587'.
[  333.130922][T15663] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2588'.
[  333.262378][T15673] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  333.348333][T15676] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2590'.
[  333.390660][T15677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2591'.
[  333.623963][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'.
[  334.432056][T15707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2600'.
[  334.442909][T15707] xt_bpf: check failed: parse error
[  334.607901][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2600'.
[  334.763986][T15717] SET target dimension over the limit!
[  335.024055][T15732] macvlan0: entered promiscuous mode
[  335.040933][T15732] netlink: 'syz.1.2608': attribute type 1 has an invalid length.
[  335.083467][T15732] netlink: 'syz.1.2608': attribute type 2 has an invalid length.
[  335.147405][T15741] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  335.167337][T15741] syzkaller0: entered promiscuous mode
[  335.176682][T15741] syzkaller0: entered allmulticast mode
[  335.196233][T15741] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  335.227350][T15741] bond0: (slave sit0): Error -95 calling set_mac_address
[  335.472162][T15734] wg1 speed is unknown, defaulting to 1000
[  335.763366][T15762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.516530][T15772] wg1 speed is unknown, defaulting to 1000
[  336.985339][T15790] wg1 speed is unknown, defaulting to 1000
[  339.118381][T15811] netlink: 'syz.0.2628': attribute type 4 has an invalid length.
[  339.138449][T15811] netlink: 'syz.0.2628': attribute type 4 has an invalid length.
[  339.320926][T15819] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  339.942488][T15834] __nla_validate_parse: 4 callbacks suppressed
[  339.942506][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'.
[  339.996057][T15841] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  340.021561][T15842] netlink: 'syz.4.2636': attribute type 3 has an invalid length.
[  340.039798][T15841] syzkaller0: entered allmulticast mode
[  340.061098][T15841] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  340.092982][T15841] bond0: (slave sit0): Error -95 calling set_mac_address
[  340.126448][T15838] netlink: 'syz.2.2638': attribute type 12 has an invalid length.
[  340.205071][T15852] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  340.368718][T15860] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  340.660613][T15845] wg1 speed is unknown, defaulting to 1000
[  340.762530][T15863] sch_fq: defrate 2 ignored.
[  340.839329][T15863] pim6reg1: entered promiscuous mode
[  340.844655][T15863] pim6reg1: entered allmulticast mode
[  340.872793][T15871] bond5: option fail_over_mac: invalid value (127)
[  340.880720][T15871] bond5 (unregistering): Released all slaves
[  341.303230][T15893] netlink: 'syz.3.2652': attribute type 11 has an invalid length.
[  341.317874][T15893] netlink: 'syz.3.2652': attribute type 11 has an invalid length.
[  341.335922][T15893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2652'.
[  341.448310][T15889] bridge14: entered promiscuous mode
[  341.454586][T15889] bridge14: entered allmulticast mode
[  341.639471][T15905] vlan2: entered allmulticast mode
[  341.645184][T15905] bridge_slave_0: entered allmulticast mode
[  341.661124][T15905] bridge0: port 1(vlan2) entered blocking state
[  341.677858][T15905] bridge0: port 1(vlan2) entered disabled state
[  341.693168][T15905] vlan2: entered promiscuous mode
[  341.698992][T15905] bridge_slave_0: entered promiscuous mode
[  341.823007][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2660'.
[  341.990075][T15908] wg1 speed is unknown, defaulting to 1000
[  342.008249][T15922] netlink: 'syz.2.2661': attribute type 16 has an invalid length.
[  342.016536][T15922] netlink: 55946 bytes leftover after parsing attributes in process `syz.2.2661'.
[  342.143351][T15927] netlink: 'syz.2.2662': attribute type 1 has an invalid length.
[  342.183224][T15927] 8021q: adding VLAN 0 to HW filter on device bond4
[  342.208280][T15927] bond4: (slave ip6erspan0): making interface the new active one
[  342.212963][T15931] netlink: 'syz.3.2663': attribute type 11 has an invalid length.
[  342.218325][T15927] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  342.395751][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'.
[  342.470115][T15938] macvlan0: entered promiscuous mode
[  342.475480][T15938] macvlan0: entered allmulticast mode
[  342.486586][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'.
[  342.495859][T15938] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  342.535328][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'.
[  342.544438][ T7195] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  342.554326][ T7195] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  342.566710][ T7195] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  342.604481][ T7195] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  342.709275][T15944] netlink: 'syz.3.2668': attribute type 13 has an invalid length.
[  342.748908][T15944] netlink: 'syz.3.2668': attribute type 17 has an invalid length.
[  342.812183][T15944] erspan0: left promiscuous mode
[  342.834714][T15944] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.844464][T15944] 8021q: adding VLAN 0 to HW filter on device `
[  342.854260][T15944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.879739][T15962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2672'.
[  342.890240][T15962] xt_bpf: check failed: parse error
[  342.910290][T15952] Cannot find add_set index 0 as target
[  342.953262][T15965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2672'.
[  343.053976][T15964] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  343.061989][T15964] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  343.160227][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'.
[  343.521303][T16006] syzkaller0: entered promiscuous mode
[  343.537402][T16006] syzkaller0: entered allmulticast mode
[  343.683405][T16018] tipc: Can't bind to reserved service type 1
[  343.702006][T16018] netlink: 'syz.3.2690': attribute type 39 has an invalid length.
[  343.727098][T16021] macvlan2: entered allmulticast mode
[  343.733699][T16021] bridge0: port 2(macvlan2) entered blocking state
[  343.740611][T16021] bridge0: port 2(macvlan2) entered disabled state
[  343.801370][T16022] geneve2: entered promiscuous mode
[  343.806626][T16022] geneve2: entered allmulticast mode
[  343.963872][T16030] vlan0: entered allmulticast mode
[  343.971451][T16030] bridge_slave_0: entered allmulticast mode
[  344.441894][T16062] validate_nla: 1 callbacks suppressed
[  344.441912][T16062] netlink: 'syz.0.2704': attribute type 4 has an invalid length.
[  344.464475][T16068] netlink: 'syz.4.2706': attribute type 22 has an invalid length.
[  344.609621][T16068] netlink: 'syz.4.2706': attribute type 22 has an invalid length.
[  344.686673][T16076] syzkaller1: entered promiscuous mode
[  344.713123][T16076] syzkaller1: entered allmulticast mode
[  344.841754][T16081] netlink: 'syz.3.2711': attribute type 11 has an invalid length.
[  344.858697][T16081] netlink: 'syz.3.2711': attribute type 11 has an invalid length.
[  344.966989][T16085] bridge15: entered promiscuous mode
[  344.972771][T16085] bridge15: entered allmulticast mode
[  345.024375][T16057] wg1 speed is unknown, defaulting to 1000
[  345.129133][T16092] macsec2: entered promiscuous mode
[  345.134623][T16092] macsec2: entered allmulticast mode
[  345.443036][T16099] __nla_validate_parse: 17 callbacks suppressed
[  345.443055][T16099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2714'.
[  345.475516][T16102] netlink: 'syz.2.2715': attribute type 15 has an invalid length.
[  345.484833][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'.
[  345.512230][T16099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2714'.
[  345.534554][ T7195] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  345.553891][T16102] netlink: 'syz.2.2715': attribute type 15 has an invalid length.
[  345.572308][ T7195] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  345.587707][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'.
[  345.588951][T16099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2714'.
[  345.606831][ T7195] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  345.628983][ T7195] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  345.731401][T16107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'.
[  346.046578][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2720'.
[  346.079756][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'.
[  346.140671][T16130] netlink: 'syz.1.2723': attribute type 11 has an invalid length.
[  346.150895][T16130] netlink: 'syz.1.2723': attribute type 11 has an invalid length.
[  346.176852][T16130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2723'.
[  346.258799][T16137] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  346.281810][T16120] bridge20: entered promiscuous mode
[  346.288054][T16120] bridge20: entered allmulticast mode
[  346.288095][T16137] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2725'.
[  346.327804][T16139] veth0_to_bridge: entered promiscuous mode
[  346.335209][T16139] Bluetooth: MGMT ver 1.23
[  346.532741][T16148] x_tables: duplicate underflow at hook 2
[  346.801602][T16128] wg1 speed is unknown, defaulting to 1000
[  347.229790][T16138] veth0_to_bridge: left promiscuous mode
[  347.240198][T16171] netlink: 'syz.4.2737': attribute type 11 has an invalid length.
[  347.248718][T16171] netlink: 'syz.4.2737': attribute type 11 has an invalid length.
[  347.358670][T16170] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  347.372298][T16170] bond0: (slave sit0): Error -95 calling set_mac_address
[  347.545232][T16182] FAULT_INJECTION: forcing a failure.
[  347.545232][T16182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  347.565407][T16169] bridge10: entered promiscuous mode
[  347.588337][T16169] bridge10: entered allmulticast mode
[  347.615691][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.3.2740 Not tainted syzkaller #0 PREEMPT(full) 
[  347.615718][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  347.615729][T16182] Call Trace:
[  347.615737][T16182]  <TASK>
[  347.615744][T16182]  dump_stack_lvl+0x189/0x250
[  347.615772][T16182]  ? __pfx____ratelimit+0x10/0x10
[  347.615797][T16182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.615819][T16182]  ? __pfx__printk+0x10/0x10
[  347.615851][T16182]  should_fail_ex+0x414/0x560
[  347.615881][T16182]  _copy_to_user+0x31/0xb0
[  347.615904][T16182]  simple_read_from_buffer+0xe1/0x170
[  347.615935][T16182]  proc_fail_nth_read+0x1b3/0x220
[  347.615961][T16182]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  347.615986][T16182]  ? rw_verify_area+0x2a6/0x4d0
[  347.616006][T16182]  ? __lock_acquire+0xab9/0xd20
[  347.616022][T16182]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  347.616045][T16182]  vfs_read+0x200/0xa30
[  347.616066][T16182]  ? fdget_pos+0x247/0x320
[  347.616087][T16182]  ? __pfx___mutex_lock+0x10/0x10
[  347.616106][T16182]  ? __pfx_vfs_read+0x10/0x10
[  347.616131][T16182]  ? __fget_files+0x2a/0x420
[  347.616151][T16182]  ? __fget_files+0x3a0/0x420
[  347.616167][T16182]  ? __fget_files+0x2a/0x420
[  347.616193][T16182]  ksys_read+0x145/0x250
[  347.616218][T16182]  ? __pfx_ksys_read+0x10/0x10
[  347.616244][T16182]  ? do_syscall_64+0xbe/0xfa0
[  347.616264][T16182]  do_syscall_64+0xfa/0xfa0
[  347.616280][T16182]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.616297][T16182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.616314][T16182]  ? clear_bhb_loop+0x60/0xb0
[  347.616336][T16182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.616352][T16182] RIP: 0033:0x7f994638e0dc
[  347.616368][T16182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  347.616383][T16182] RSP: 002b:00007f994715b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  347.616402][T16182] RAX: ffffffffffffffda RBX: 00007f99465e6090 RCX: 00007f994638e0dc
[  347.616415][T16182] RDX: 000000000000000f RSI: 00007f994715b0a0 RDI: 0000000000000004
[  347.616426][T16182] RBP: 00007f994715b090 R08: 0000000000000000 R09: 0000000000000000
[  347.616436][T16182] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001
[  347.616448][T16182] R13: 00007f99465e6128 R14: 00007f99465e6090 R15: 00007ffe24470208
[  347.616480][T16182]  </TASK>
[  347.899082][T16186] bond0: Caught tx_queue_len zero misconfig
[  348.371324][T16195] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  348.479478][T16203] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  348.711867][T16210] SET target dimension over the limit!
[  348.719163][T16210] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  348.748712][T16210] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  348.994920][T16239] tipc: Resetting bearer <eth:syzkaller0>
[  349.080551][ T7195] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.100057][ T7195] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.137881][ T7195] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.146366][ T7195] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  349.525901][T16257] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  349.905973][T16271] xt_bpf: check failed: parse error
[  350.474292][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.498526][T16262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.544702][T16293] __nla_validate_parse: 11 callbacks suppressed
[  350.544722][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'.
[  350.581154][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2772'.
[  350.760633][T16262] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  350.808126][T16262] batman_adv: batadv0: Interface deactivated: macsec1
[  350.820435][T16262] bridge0: left promiscuous mode
[  350.825434][T16262] bridge0: left allmulticast mode
[  350.831430][T16262] veth5: left promiscuous mode
[  350.847296][T16262] bridge4: left promiscuous mode
[  350.852698][T16262] bridge4: left allmulticast mode
[  350.869745][T16262] bridge7: left promiscuous mode
[  350.875028][T16262] bridge7: left allmulticast mode
[  350.910799][T16262] bond6: left promiscuous mode
[  350.915856][T16262] bond7: left allmulticast mode
[  350.926001][T16262] bridge8: left promiscuous mode
[  350.933453][T16262] bridge8: left allmulticast mode
[  351.026083][T16262] bridge9: left promiscuous mode
[  351.031651][T16262] bridge9: left allmulticast mode
[  351.046737][T16262] bridge10: left promiscuous mode
[  351.053078][T16262] bridge10: left allmulticast mode
[  351.058921][T16265] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2767'.
[  351.068575][   T10] wg1 speed is unknown, defaulting to 1000
[  351.082621][   T10] syz: Port: 1 Link DOWN
[  351.119594][ T7196] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.158195][ T7196] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  351.184817][ T7196] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.210506][ T7196] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  351.238281][ T7196] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.254709][ T7196] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  351.273846][ T7196] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  351.285509][ T7196] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  351.472601][T16322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2780'.
[  351.484312][T16322] xt_bpf: check failed: parse error
[  351.559508][T16328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'.
[  351.727014][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'.
[  351.746502][T16339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2784'.
[  351.943559][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2789'.
[  352.150974][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2792'.
[  352.971618][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2798'.
[  353.101492][T16391] netlink: 'syz.2.2799': attribute type 12 has an invalid length.
[  353.387954][T16403] netlink: 'syz.4.2805': attribute type 11 has an invalid length.
[  353.410637][T16403] netlink: 'syz.4.2805': attribute type 11 has an invalid length.
[  353.499298][T16418] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  353.622540][T16403] bridge11: entered promiscuous mode
[  353.629728][T16403] bridge11: entered allmulticast mode
[  353.852847][T16442] netlink: 'syz.3.2817': attribute type 2 has an invalid length.
[  353.865720][T16442] netlink: 'syz.3.2817': attribute type 9 has an invalid length.
[  353.951865][T16449] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  353.962505][T16449] bond0: (slave sit0): Error -95 calling set_mac_address
[  354.163281][T16460] bond2: (slave vcan2): The slave device specified does not support setting the MAC address
[  354.190312][T16460] bond2: (slave vcan2): Enslaving as a backup interface with an up link
[  354.232516][T16467] netlink: 'syz.2.2824': attribute type 11 has an invalid length.
[  354.254145][T16462] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.278120][T16467] netlink: 'syz.2.2824': attribute type 11 has an invalid length.
[  354.564061][T16450] wg1 speed is unknown, defaulting to 1000
[  354.572488][T16487] bridge0: entered promiscuous mode
[  354.577961][T16487] bridge0: entered allmulticast mode
[  354.658691][T16490] netlink: 'syz.4.2828': attribute type 1 has an invalid length.
[  354.888444][T16501] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  354.935871][T16503] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  354.959310][T16502] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  354.970045][T16502] bond0: (slave sit0): Error -95 calling set_mac_address
[  355.079209][T16444] wg1 speed is unknown, defaulting to 1000
[  355.224687][T16512] xt_bpf: check failed: parse error
[  355.817080][T16533] dvmrp12: entered allmulticast mode
[  355.835525][T16533] __nla_validate_parse: 12 callbacks suppressed
[  355.835542][T16533] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2842'.
[  356.036950][T16531] dvmrp12: left allmulticast mode
[  356.163044][T16557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2850'.
[  356.173363][T16557] xt_bpf: check failed: parse error
[  356.185289][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2850'.
[  356.248222][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'.
[  356.808349][T16608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'.
[  356.835310][T16608] xt_bpf: check failed: parse error
[  356.842966][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2863'.
[  357.061749][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'.
[  357.326197][T16640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2869'.
[  357.329090][T16632] ip6tnl0: Caught tx_queue_len zero misconfig
[  357.335387][T16640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2869'.
[  357.563996][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'.
[  357.587150][T16652] xt_bpf: check failed: parse error
[  357.599242][T16654] netlink: 'syz.0.2876': attribute type 3 has an invalid length.
[  357.634548][T16654] Bluetooth: MGMT ver 1.23
[  358.280250][T16699] netlink: 'syz.2.2892': attribute type 9 has an invalid length.
[  358.311349][T16699] netlink: 'syz.2.2892': attribute type 6 has an invalid length.
[  359.080225][T16756] nbd4: detected capacity change from 0 to 63
[  359.086883][T16754] block nbd4: NBD_DISCONNECT
[  359.094754][T16754] block nbd4: Disconnected due to user request.
[  359.102877][T16754] block nbd4: shutting down sockets
[  359.145164][T16756] bond9: entered promiscuous mode
[  359.150376][T16756] bond9: entered allmulticast mode
[  359.156080][T16756] 8021q: adding VLAN 0 to HW filter on device bond9
[  359.362517][T16779] netlink: 'syz.2.2914': attribute type 10 has an invalid length.
[  359.641249][T16801] nbd: must specify at least one socket
[  359.674553][T16804] dvmrp6: entered allmulticast mode
[  359.730172][T16808] syzkaller1: entered promiscuous mode
[  359.735830][T16808] syzkaller1: entered allmulticast mode
[  359.746039][T16808] netlink: 'syz.0.2921': attribute type 4 has an invalid length.
[  359.802897][T16810] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  359.813590][T16810] bond0: (slave sit0): Error -95 calling set_mac_address
[  359.850777][T16812] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  359.861695][T16812] bond0: (slave sit0): Error -95 calling set_mac_address
[  360.323389][T16827] x_tables: duplicate underflow at hook 1
[  360.502793][ T7208] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.561098][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.574400][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.582729][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.602381][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  360.603271][ T7208] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.629436][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.690239][ T7208] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.758284][ T7208] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  360.880129][ T7212] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  360.911067][ T7212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  360.929522][T16854] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  360.946562][ T7207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  360.991499][ T7207] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  361.134637][T16857] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  361.580715][T16864] __nla_validate_parse: 11 callbacks suppressed
[  361.580736][T16864] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2940'.
[  362.540775][ T7208] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  362.549686][ T7208] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  362.556830][ T7208] bond0 (unregistering): Released all slaves
[  362.654478][ T7208] bond1 (unregistering): Released all slaves
[  362.688162][ T5843] Bluetooth: hci4: command tx timeout
[  362.755201][ T7208] bond2 (unregistering): (slave vcan0): Releasing backup interface
[  362.764165][ T7208] bond2 (unregistering): (slave vcan1): Releasing backup interface
[  362.773064][ T7208] bond2 (unregistering): (slave vcan2): Releasing backup interface
[  362.783019][ T7208] bond2 (unregistering): Released all slaves
[  362.876221][ T7208] bond3 (unregistering): Released all slaves
[  362.888592][ T7208] bond4 (unregistering): Released all slaves
[  362.900125][T16841] wg1 speed is unknown, defaulting to 1000
[  363.062152][ T7208] tipc: Disabling bearer <udp:s>
[  363.071580][ T7208] tipc: Left network mode
[  363.113161][T16895] netlink: 'syz.4.2947': attribute type 32 has an invalid length.
[  363.151531][T16895] netlink: 'syz.4.2947': attribute type 29 has an invalid length.
[  363.219983][T16895] netlink: 'syz.4.2947': attribute type 29 has an invalid length.
[  363.240984][T16900] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2947'.
[  363.479593][T16841] chnl_net:caif_netlink_parms(): no params data found
[  363.781759][T16841] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.789597][T16841] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.796844][T16841] bridge_slave_0: entered allmulticast mode
[  363.807972][T16841] bridge_slave_0: entered promiscuous mode
[  363.822934][ T7208] hsr_slave_0: left promiscuous mode
[  363.829637][ T7208] hsr_slave_1: left promiscuous mode
[  363.849060][T16930] netlink: 'syz.0.2956': attribute type 5 has an invalid length.
[  364.487040][T16841] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.496742][T16841] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.504682][T16841] bridge_slave_1: entered allmulticast mode
[  364.513352][T16841] bridge_slave_1: entered promiscuous mode
[  364.570530][T16939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2959'.
[  364.628108][T16943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2959'.
[  364.651671][T16841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.691310][T16841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.719407][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'.
[  364.757816][ T5843] Bluetooth: hci4: command tx timeout
[  364.774405][T16841] team0: Port device team_slave_0 added
[  364.789448][T16841] team0: Port device team_slave_1 added
[  364.840181][T16841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.843754][ T7208] IPVS: stop unused estimator thread 0...
[  364.847149][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.847173][T16841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.855158][T16841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.901086][T16841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.927480][T16841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.993219][T16841] hsr_slave_0: entered promiscuous mode
[  364.999833][T16841] hsr_slave_1: entered promiscuous mode
[  365.006033][T16841] debugfs: 'hsr0' already exists in 'hsr'
[  365.014104][T16841] Cannot create hsr debugfs directory
[  365.185989][T16841] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  365.249247][T16841] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  365.307448][T16841] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  365.380302][T16841] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  365.415526][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[  365.470095][T16973] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2971'.
[  365.525751][T16975] bridge15: the hash_elasticity option has been deprecated and is always 16
[  365.534851][T16975] bridge15: entered allmulticast mode
[  365.615094][T16841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  365.625783][T16841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  365.643164][T16841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  365.659115][T16841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  365.821849][T16841] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.857270][T16841] 8021q: adding VLAN 0 to HW filter on device team0
[  365.879104][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.886348][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.908038][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.915226][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.002454][T16999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2978'.
[  366.024452][T16999] netlink: 'syz.0.2978': attribute type 13 has an invalid length.
[  366.070841][T16999] netlink: 'syz.0.2978': attribute type 298 has an invalid length.
[  366.253132][T16841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.284324][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'.
[  366.351809][T16841] veth0_vlan: entered promiscuous mode
[  366.376441][T16841] veth1_vlan: entered promiscuous mode
[  366.412639][T16841] veth0_macvtap: entered promiscuous mode
[  366.433749][T16841] veth1_macvtap: entered promiscuous mode
[  366.493068][T16841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.510923][T16841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.526150][ T7196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.538799][ T7196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.555757][ T7196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.573721][ T7196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.685536][ T7195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.696927][ T7195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.733694][ T7195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.744074][ T7195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.807911][T17030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2925'.
[  366.818529][T17030] xt_bpf: check failed: parse error
[  366.841008][ T5843] Bluetooth: hci4: command tx timeout
[  366.848425][T17032] sctp: [Deprecated]: syz.0.2988 (pid 17032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.848425][T17032] Use struct sctp_sack_info instead
[  366.866729][T17032] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2988'.
[  367.234519][T17040] wg1 speed is unknown, defaulting to 1000
[  367.896749][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'.
[  368.157309][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  368.167046][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  368.176220][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  368.196459][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  368.209449][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  368.333548][T17073] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.416618][T17075] x_tables: duplicate underflow at hook 2
[  368.921385][ T5828] Bluetooth: hci4: command tx timeout
[  369.414897][T17107] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  370.358069][ T5828] Bluetooth: hci5: command tx timeout
[  370.691202][T17065] wg1 speed is unknown, defaulting to 1000
[  370.882918][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'.
[  370.892928][T17112] netlink: 'syz.4.3009': attribute type 5 has an invalid length.
[  370.903221][T17121] netlink: 'syz.3.3011': attribute type 10 has an invalid length.
[  370.940578][T17121] netlink: 'syz.3.3011': attribute type 10 has an invalid length.
[  371.004929][T17125] netlink: 'syz.4.3013': attribute type 11 has an invalid length.
[  371.015616][T17125] netlink: 'syz.4.3013': attribute type 11 has an invalid length.
[  371.024239][T17125] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3013'.
[  371.204733][T17125] bridge12: entered promiscuous mode
[  371.220198][T17125] bridge12: entered allmulticast mode
[  371.243940][T17065] chnl_net:caif_netlink_parms(): no params data found
[  371.281645][T17140] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.292523][T17140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.304087][T17140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33616 - 0
[  371.376248][T17140] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.386452][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3017'.
[  371.387742][T17140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.414819][T17140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33616 - 0
[  371.516632][T17140] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.530542][T17140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.543756][T17140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33616 - 0
[  371.579574][T17065] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.587037][T17065] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.594966][T17065] bridge_slave_0: entered allmulticast mode
[  371.603133][T17065] bridge_slave_0: entered promiscuous mode
[  371.613361][T17065] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.620757][T17065] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.628898][T17065] bridge_slave_1: entered allmulticast mode
[  371.637026][T17065] bridge_slave_1: entered promiscuous mode
[  371.695829][T17140] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.706490][T17140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.716626][T17140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33616 - 0
[  371.751740][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3023'.
[  371.762489][T17167] xt_bpf: check failed: parse error
[  371.784214][T17065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.785225][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3022'.
[  371.831080][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3023'.
[  371.835334][T17065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.928872][T17065] team0: Port device team_slave_0 added
[  371.934500][ T7207] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.943373][ T7207] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 33616 - 0
[  371.981063][ T7207] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  371.994919][T17065] team0: Port device team_slave_1 added
[  372.024300][ T7212] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.032938][ T7212] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 33616 - 0
[  372.042667][ T7212] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  372.085133][ T7196] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.094912][ T7196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 33616 - 0
[  372.104686][ T7196] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  372.170369][ T7196] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.187626][ T7196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 33616 - 0
[  372.207898][ T7196] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  372.248804][T17065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.256177][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.311480][T17065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.396189][T17065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.405694][T17065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.440571][ T5828] Bluetooth: hci5: command tx timeout
[  372.458138][T17065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.634174][T17205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3033'.
[  372.640974][T17190] syzkaller0: entered promiscuous mode
[  372.668082][T17190] syzkaller0: entered allmulticast mode
[  372.764945][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3035'.
[  372.791796][T17065] hsr_slave_0: entered promiscuous mode
[  372.809315][T17209] xt_bpf: check failed: parse error
[  372.816517][T17065] hsr_slave_1: entered promiscuous mode
[  372.825785][T17065] debugfs: 'hsr0' already exists in 'hsr'
[  372.832105][T17065] Cannot create hsr debugfs directory
[  372.891802][T17211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3035'.
[  373.029839][T17213] bridge_slave_0: left allmulticast mode
[  373.045387][T17213] bridge_slave_0: left promiscuous mode
[  373.083172][T17213] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.121831][T17213] bridge_slave_1: left allmulticast mode
[  373.128350][T17213] bridge_slave_1: left promiscuous mode
[  373.134157][T17213] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.190131][T17213] bond0: (slave bond_slave_0): Releasing backup interface
[  373.244053][T17213] bond0: (slave bond_slave_1): Releasing backup interface
[  373.301070][T17213] team0: Port device team_slave_0 removed
[  373.335999][T17213] team0: Port device team_slave_1 removed
[  373.349811][T17213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.367484][T17213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.390424][T17213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.398737][T17213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.409697][T17213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  373.470839][T17192] wg1 speed is unknown, defaulting to 1000
[  373.572574][T17226] netlink: 'syz.4.3037': attribute type 3 has an invalid length.
[  373.593860][T17229] netlink: 'syz.3.3038': attribute type 2 has an invalid length.
[  373.595861][T17219] netlink: 'syz.4.3037': attribute type 5 has an invalid length.
[  373.877032][T17188] wg1 speed is unknown, defaulting to 1000
[  373.946563][T17065] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  374.177516][T17065] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  374.299204][T17065] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  374.368866][T17248] tipc: New replicast peer: 255.255.255.255
[  374.377029][T17248] tipc: Enabled bearer <udp:syz2>, priority 10
[  374.388944][T17065] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  374.517900][ T5828] Bluetooth: hci5: command tx timeout
[  374.710819][T17065] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  374.750055][T17065] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  374.776862][T17065] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  374.894397][T17065] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  375.126041][T17065] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.290445][T17065] 8021q: adding VLAN 0 to HW filter on device team0
[  375.343714][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.350932][ T7196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.352854][T17280] netlink: 'syz.1.3051': attribute type 23 has an invalid length.
[  375.387923][T17275] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  375.409886][T14114] tipc: Node number set to 16777216
[  375.425774][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.433062][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.862974][T17296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.929066][T17260] wg1 speed is unknown, defaulting to 1000
[  375.948587][T17296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.112147][T17065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.242264][T17065] veth0_vlan: entered promiscuous mode
[  376.262906][T17065] veth1_vlan: entered promiscuous mode
[  376.316169][T17065] veth0_macvtap: entered promiscuous mode
[  376.329750][T17065] veth1_macvtap: entered promiscuous mode
[  376.484344][T17065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.513453][T17065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.536947][T17293] wg1 speed is unknown, defaulting to 1000
[  376.559427][   T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.569199][   T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.578471][   T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.585390][T17286] wg1 speed is unknown, defaulting to 1000
[  376.604412][ T5828] Bluetooth: hci5: command tx timeout
[  376.641791][   T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.242304][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.274866][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.528917][T17325] netlink: 'syz.1.3064': attribute type 1 has an invalid length.
[  377.606603][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3064'.
[  377.707190][T17325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3064'.
[  377.735426][T17336] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  377.793683][T17343] netlink: 'syz.3.3069': attribute type 33 has an invalid length.
[  377.829711][T17343] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3069'.
[  377.956692][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'.
[  378.051397][T17359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'.
[  378.097746][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3072'.
[  378.151687][T17362] netlink: 'syz.4.3074': attribute type 11 has an invalid length.
[  378.175812][ T7208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.179236][T17362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3074'.
[  378.242589][T17366] syzkaller1: entered promiscuous mode
[  378.267715][T17366] syzkaller1: entered allmulticast mode
[  378.340011][ T7208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.513930][ T7208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.539424][T17376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3080'.
[  378.561795][T17377] syzkaller1: entered promiscuous mode
[  378.567415][T17377] syzkaller1: entered allmulticast mode
[  378.628060][T17378] netlink: 'syz.4.3080': attribute type 12 has an invalid length.
[  378.691791][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.700771][ T7208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.718978][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.729028][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.737173][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.745882][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.754532][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.823127][ T7196] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  378.846986][ T7212] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  378.877498][ T7212] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  378.900742][ T7212] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  378.912051][ T7208] bridge_slave_1: left allmulticast mode
[  378.918629][ T7208] bridge_slave_1: left promiscuous mode
[  378.926123][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.939381][ T7208] bridge_slave_0: left allmulticast mode
[  378.945165][ T7208] bridge_slave_0: left promiscuous mode
[  378.951942][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.329366][ T7208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.343049][ T7208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.357818][ T7208] bond0 (unregistering): Released all slaves
[  379.391921][T17382] openvswitch: netlink: Message has 4 unknown bytes.
[  379.412926][T17379] wg1 speed is unknown, defaulting to 1000
[  379.516304][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'.
[  379.544933][T17385] macvlan0: entered promiscuous mode
[  379.556739][T17385] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  379.575651][T17385] netlink: 'syz.3.3082': attribute type 2 has an invalid length.
[  379.584798][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'.
[  379.905206][T17401] netlink: 'syz.1.3086': attribute type 33 has an invalid length.
[  379.945100][T17398] netlink: 'syz.3.3085': attribute type 11 has an invalid length.
[  379.953219][T17398] netlink: 'syz.3.3085': attribute type 11 has an invalid length.
[  380.043470][ T7208] hsr_slave_0: left promiscuous mode
[  380.049972][ T7208] hsr_slave_1: left promiscuous mode
[  380.056892][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.066270][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.075327][ T7208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.086311][ T7208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.152138][ T7208] veth1_macvtap: left promiscuous mode
[  380.162101][ T7208] veth0_macvtap: left promiscuous mode
[  380.168018][ T7208] veth1_vlan: left promiscuous mode
[  380.173503][ T7208] veth0_vlan: left promiscuous mode
[  380.271466][T17420] netlink: 'syz.4.3089': attribute type 12 has an invalid length.
[  380.615885][ T7208] team0 (unregistering): Port device team_slave_1 removed
[  380.654433][ T7208] team0 (unregistering): Port device team_slave_0 removed
[  380.841665][ T5828] Bluetooth: hci3: command tx timeout
[  381.081533][T17418] bridge1: entered promiscuous mode
[  381.093948][T17418] bridge1: entered allmulticast mode
[  381.141720][T17379] chnl_net:caif_netlink_parms(): no params data found
[  381.270066][T17427] sit0: entered promiscuous mode
[  381.388333][T17379] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.409515][T17379] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.416789][T17379] bridge_slave_0: entered allmulticast mode
[  381.435398][T17379] bridge_slave_0: entered promiscuous mode
[  381.475793][T17379] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.489107][T17379] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.514966][T17379] bridge_slave_1: entered allmulticast mode
[  381.538649][T17379] bridge_slave_1: entered promiscuous mode
[  381.673722][T17443] syzkaller1: entered promiscuous mode
[  381.687350][T17443] syzkaller1: entered allmulticast mode
[  381.701376][T17379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.716840][T17379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.795148][T17379] team0: Port device team_slave_0 added
[  381.825448][T17379] team0: Port device team_slave_1 added
[  381.922429][T17379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.929510][T17379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.955671][T17379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.966694][T17448] wg1 speed is unknown, defaulting to 1000
[  381.969002][T17379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.979718][T17379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  382.005728][T17379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.101983][T17379] hsr_slave_0: entered promiscuous mode
[  382.110140][T17379] hsr_slave_1: entered promiscuous mode
[  382.116609][T17379] debugfs: 'hsr0' already exists in 'hsr'
[  382.123390][T17379] Cannot create hsr debugfs directory
[  382.318136][T17449] wg1 speed is unknown, defaulting to 1000
[  382.353312][T17461] netlink: 'syz.4.3098': attribute type 11 has an invalid length.
[  382.386396][T17463] netlink: 'syz.1.3099': attribute type 21 has an invalid length.
[  382.657370][T17379] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  382.664510][T17469] __nla_validate_parse: 9 callbacks suppressed
[  382.664532][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'.
[  382.773770][T17379] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  382.842219][T17379] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  382.918825][ T5828] Bluetooth: hci3: command tx timeout
[  383.021387][T17379] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  383.119725][T17485] netlink: 'syz.4.3107': attribute type 1 has an invalid length.
[  383.185558][T17485] 8021q: adding VLAN 0 to HW filter on device bond10
[  383.210943][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3107'.
[  383.231288][T17485] bond10: entered promiscuous mode
[  383.236465][T17485] bond10: entered allmulticast mode
[  383.306051][T17497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'.
[  383.393927][T17379] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  383.414080][T17379] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  383.436256][T17379] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  383.481539][T17379] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  383.518750][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'.
[  383.695881][T17529] netlink: 'syz.0.3119': attribute type 33 has an invalid length.
[  383.714878][T17529] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3119'.
[  383.729299][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'.
[  383.815246][T17379] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.848751][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3119'.
[  383.870925][T17379] 8021q: adding VLAN 0 to HW filter on device team0
[  383.893168][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.900387][ T7196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.940216][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.947436][ T7207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.262263][T17561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.325131][T17565] bridge0: entered promiscuous mode
[  384.336256][T17565] netlink: 916 bytes leftover after parsing attributes in process `syz.3.3128'.
[  384.450475][T17379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.460006][T17571] netlink: 'syz.0.3131': attribute type 3 has an invalid length.
[  384.490508][T17573] netlink: 'syz.0.3131': attribute type 3 has an invalid length.
[  384.501954][T17574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3132'.
[  384.517349][T17574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3132'.
[  384.646918][T17379] veth0_vlan: entered promiscuous mode
[  384.699008][T17379] veth1_vlan: entered promiscuous mode
[  384.795686][T17379] veth0_macvtap: entered promiscuous mode
[  384.822992][T17379] veth1_macvtap: entered promiscuous mode
[  384.891901][T17379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.942447][T17379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.989859][ T7196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.020880][ T5828] Bluetooth: hci3: command tx timeout
[  385.024588][ T7196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.069130][ T7196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.113923][ T7196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.499134][T17610] netlink: 'syz.0.3138': attribute type 33 has an invalid length.
[  385.528845][ T7206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.536820][ T7206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.685088][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.703036][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.754467][T17622] netlink: 'syz.1.3141': attribute type 23 has an invalid length.
[  385.942452][T17630] bridge2: left promiscuous mode
[  385.971016][T17630] bridge2: left allmulticast mode
[  385.990960][T17630] batadv0: left promiscuous mode
[  386.002706][T17630] macvtap1: left promiscuous mode
[  386.035212][T17630] bridge3: left promiscuous mode
[  386.054859][T17630] bridge3: left allmulticast mode
[  386.069397][T17630] bridge4: left promiscuous mode
[  386.080392][T17630] bridge4: left allmulticast mode
[  386.091647][T17630] bridge5: left promiscuous mode
[  386.103494][T17630] bridge5: left allmulticast mode
[  386.113742][T17630] bridge6: left promiscuous mode
[  386.125704][T17630] bridge6: left allmulticast mode
[  386.143241][T17630] geneve0: left promiscuous mode
[  386.186003][T17630] bridge7: left promiscuous mode
[  386.203949][T17630] bridge7: left allmulticast mode
[  386.238094][T17630] bridge8: left promiscuous mode
[  386.243083][T17630] bridge8: left allmulticast mode
[  386.314733][T17630] bridge11: left promiscuous mode
[  386.337857][T17630] bridge11: left allmulticast mode
[  386.349534][T17649] netlink: 'syz.2.3148': attribute type 298 has an invalid length.
[  386.377944][T17630] geneve2: left promiscuous mode
[  386.382956][T17630] geneve2: left allmulticast mode
[  386.460091][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  386.461953][T17650] xt_CT: No such helper "netbios-ns"
[  386.484814][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  386.494754][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  386.504383][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  386.512978][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  386.530802][T17630] team1: left promiscuous mode
[  386.544073][T17630] team1: left allmulticast mode
[  386.568227][ T7206] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.578657][ T7206] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 33616 - 0
[  386.596029][ T7206] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  386.619522][T17646] veth0_macvtap: left promiscuous mode
[  386.704819][ T7206] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.713984][ T7206] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 33616 - 0
[  386.722939][ T7206] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  386.731614][ T7206] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.740597][ T7206] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 33616 - 0
[  386.749330][ T7206] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  386.778460][ T7206] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  386.798744][ T7206] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 33616 - 0
[  386.815260][ T7206] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  387.077793][ T5843] Bluetooth: hci3: command tx timeout
[  387.124211][ T7206] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  387.132913][T17643] wg1 speed is unknown, defaulting to 1000
[  387.179000][ T4584] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  387.203509][ T4584] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  387.255874][ T7206] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  387.393750][ T7207] tipc: Resetting bearer <eth:syzkaller0>
[  387.562650][T17670] netlink: 'syz.0.3153': attribute type 83 has an invalid length.
[  387.575390][T17672] netlink: 'syz.0.3153': attribute type 83 has an invalid length.
[  387.711472][ T7207] team0: Port device geneve0 removed
[  387.745704][ T7207] bridge0 (unregistering): left promiscuous mode
[  387.844025][ T7207] tipc: Disabling bearer <eth:syzkaller0>
[  388.597878][ T5843] Bluetooth: hci5: command tx timeout
[  388.683018][ T7207] bond0 (unregistering): left promiscuous mode
[  388.702331][ T7207] bond0 (unregistering): Released all slaves
[  388.804406][ T7207] bond1 (unregistering): Released all slaves
[  388.904649][ T7207] bond2 (unregistering): (slave veth3): Releasing active interface
[  388.915288][ T7207] bond2 (unregistering): Released all slaves
[  389.053723][ T7207] bond3 (unregistering): Released all slaves
[  389.192055][ T7207] bond4 (unregistering): Released all slaves
[  389.310593][ T7207] bond5 (unregistering): (slave veth1): Releasing active interface
[  389.319983][ T7207] bond5 (unregistering): Released all slaves
[  389.417773][ T7207] bond6 (unregistering): (slave veth5): Releasing active interface
[  389.427215][ T7207] bond6 (unregistering): Released all slaves
[  389.441213][T17648] wg1 speed is unknown, defaulting to 1000
[  389.994989][T17665] wg1 speed is unknown, defaulting to 1000
[  390.006552][T17652] wg1 speed is unknown, defaulting to 1000
[  390.243151][T17700] bond0: entered promiscuous mode
[  390.255249][T17700] team0: entered promiscuous mode
[  390.278120][T17700] bond0: left promiscuous mode
[  390.284228][T17700] team0: left promiscuous mode
[  390.536815][T17706] syzkaller1: entered promiscuous mode
[  390.542598][T17706] syzkaller1: entered allmulticast mode
[  390.583104][T17652] chnl_net:caif_netlink_parms(): no params data found
[  390.678641][ T5843] Bluetooth: hci5: command tx timeout
[  390.707065][T17714] __nla_validate_parse: 9 callbacks suppressed
[  390.707183][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3166'.
[  390.739615][T17652] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.746951][T17652] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.754791][T17652] bridge_slave_0: entered allmulticast mode
[  390.763623][T17652] bridge_slave_0: entered promiscuous mode
[  390.781027][T17652] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.788889][T17652] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.796315][T17652] bridge_slave_1: entered allmulticast mode
[  390.804377][T17652] bridge_slave_1: entered promiscuous mode
[  390.884168][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.913757][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.262077][T17729] netlink: 'syz.4.3170': attribute type 11 has an invalid length.
[  391.270363][T17729] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3170'.
[  391.342689][ T7207] tipc: Left network mode
[  391.437124][T17652] team0: Port device team_slave_0 added
[  391.495821][T17652] team0: Port device team_slave_1 added
[  391.538850][T17740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  391.573496][T17740] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3172'.
[  391.587910][T17745] netlink: 'syz.4.3174': attribute type 33 has an invalid length.
[  391.604374][T17745] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3174'.
[  391.624726][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.631849][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.658784][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.695014][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.707637][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.792213][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'.
[  391.803189][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.958717][T17764] netlink: 'syz.4.3178': attribute type 10 has an invalid length.
[  391.975975][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3178'.
[  391.996868][T17755] syzkaller0: entered promiscuous mode
[  392.026058][T17755] syzkaller0: entered allmulticast mode
[  392.079985][T17652] hsr_slave_0: entered promiscuous mode
[  392.101357][T17652] hsr_slave_1: entered promiscuous mode
[  392.121318][T17652] debugfs: 'hsr0' already exists in 'hsr'
[  392.127246][T17652] Cannot create hsr debugfs directory
[  392.134446][T17764] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  392.144764][T17764] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  392.157467][T17764] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  392.167891][T17764] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  392.463416][T17790] syzkaller1: entered promiscuous mode
[  392.469492][T17790] syzkaller1: entered allmulticast mode
[  392.544409][T17652] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.661473][T17652] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.753237][T17652] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  392.763917][ T5843] Bluetooth: hci5: command tx timeout
[  392.845339][T17652] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  393.388876][T17652] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  393.450411][T17652] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  393.506127][T17652] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  393.559223][T17652] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  394.838111][ T5843] Bluetooth: hci5: command tx timeout
[  394.919122][T17862] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3203'.
[  395.025834][T17652] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.094333][T17865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.178821][T17652] 8021q: adding VLAN 0 to HW filter on device team0
[  395.210659][T17865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.248431][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.255571][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.282943][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.290186][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[  395.335772][ T7207] IPVS: stop unused estimator thread 0...
[  395.389024][T17865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.440358][T17877] lo: Caught tx_queue_len zero misconfig
[  395.477085][T17878] tunl0: Caught tx_queue_len zero misconfig
[  395.601684][T17865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.901236][ T4584] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.947425][ T4584] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.999516][   T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.031740][   T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.134913][T17880] wg1 speed is unknown, defaulting to 1000
[  396.310660][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  396.456881][T17652] veth0_vlan: entered promiscuous mode
[  396.477155][T17652] veth1_vlan: entered promiscuous mode
[  396.697037][T17652] veth0_macvtap: entered promiscuous mode
[  396.842613][T17652] veth1_macvtap: entered promiscuous mode
[  396.939898][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.956246][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.973561][ T7208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.007245][ T7208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.036391][T17913] tap0: tun_chr_ioctl cmd 1074025676
[  397.042407][T17913] tap0: owner set to 0
[  397.049104][ T7208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.058997][ T7208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.096209][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3215'.
[  397.112327][T17917] syzkaller0: entered promiscuous mode
[  397.118279][T17917] syzkaller0: entered allmulticast mode
[  397.164834][T17915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3215'.
[  397.275608][T17923] netlink: 7016 bytes leftover after parsing attributes in process `syz.4.3218'.
[  397.286428][ T7208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.295395][ T7208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.303342][T17923] openvswitch: netlink: Message has 8 unknown bytes.
[  397.350992][T17925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3219'.
[  397.366520][ T7206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.376493][ T7206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.670241][T17946] xt_bpf: check failed: parse error
[  397.741434][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3226'.
[  398.137510][ T5833] syz_tun (unregistering): left allmulticast mode
[  398.234182][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  398.246095][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  398.254610][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  398.262753][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  398.281051][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  398.336740][T17951] wg1 speed is unknown, defaulting to 1000
[  398.415358][T17967] syzkaller1: entered promiscuous mode
[  398.422029][T17967] syzkaller1: entered allmulticast mode
[  398.787442][ T7206] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  398.821185][ T7206] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  398.860434][ T7206] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  398.903277][ T7206] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  398.936173][ T4584] vlan2: left allmulticast mode
[  398.942286][ T4584] bridge_slave_0: left allmulticast mode
[  398.951164][ T4584] vlan2: left promiscuous mode
[  398.961070][ T4584] bridge_slave_0: left promiscuous mode
[  398.967604][ T4584] bridge0: port 1(vlan2) entered disabled state
[  399.138700][ T4584] batman_adv: batadv0: Removing interface: ip6gretap2
[  399.361170][ T4584] bond5 (unregistering): (slave gretap2): Releasing active interface
[  399.415065][ T4584] dvmrp0 (unregistering): left allmulticast mode
[  399.431255][ T4584] dvmrp6 (unregistering): left allmulticast mode
[  399.738881][T17987] xt_bpf: check failed: parse error
[  399.794504][T17987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3237'.
[  400.127733][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.137415][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.146630][ T4584] bond0 (unregistering): Released all slaves
[  400.243223][ T4584] bond1 (unregistering): Released all slaves
[  400.342521][ T4584] bond2 (unregistering): (slave veth5): Releasing active interface
[  400.351261][ T4584] bond2 (unregistering): Released all slaves
[  400.369702][ T5828] Bluetooth: hci0: command tx timeout
[  400.465461][ T4584] bond3 (unregistering): Released all slaves
[  400.562645][ T4584] bond4 (unregistering): Released all slaves
[  400.660546][ T4584] bond5 (unregistering): Released all slaves
[  400.761635][ T4584] bond6 (unregistering): Released all slaves
[  400.781658][ T4584] bond7 (unregistering): Released all slaves
[  400.930418][ T4584] bond8 (unregistering): (slave veth0_to_hsr): Releasing active interface
[  400.942366][ T4584] bond8 (unregistering): Released all slaves
[  401.062284][ T4584] bond9 (unregistering): Released all slaves
[  401.160770][ T4584] bond10 (unregistering): Released all slaves
[  401.175718][T17961] wg1 speed is unknown, defaulting to 1000
[  401.182172][T17982] pimreg: entered allmulticast mode
[  401.183193][ T7207] smc: removing ib device syz2
[  401.187846][T17982] pimreg: left allmulticast mode
[  401.540759][T18007] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  401.606764][T18007] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  401.727305][T18011] geneve2: entered promiscuous mode
[  401.912959][T18014] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  402.096308][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'.
[  402.363112][T14118] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI
[  402.375027][T14118] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267]
[  402.383442][T14118] CPU: 0 UID: 0 PID: 14118 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) 
[  402.392980][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  402.403032][T14118] Workqueue: events l2cap_info_timeout
[  402.408507][T14118] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  402.414388][T14118] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 55 24 09 cc 66 66 66 66 66 66 2e
[  402.433980][T14118] RSP: 0018:ffffc900053e7788 EFLAGS: 00010202
[  402.440038][T14118] RAX: dffffc0000000000 RBX: ffffffff891f39c8 RCX: 7f7cc76a10a08a00
[  402.447994][T14118] RDX: 0000000000000000 RSI: ffffffff891f39c8 RDI: 000000000000004c
[  402.455949][T14118] RBP: ffffffff8a507cb5 R08: 0000000000000001 R09: 0000000000000000
[  402.463905][T14118] R10: dffffc0000000000 R11: ffffffff8a507c70 R12: 0000000000000000
[  402.471862][T14118] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  402.479817][T14118] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  402.488730][T14118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  402.495298][T14118] CR2: 0000001b32919ff8 CR3: 0000000057626000 CR4: 00000000003526f0
[  402.503256][T14118] Call Trace:
[  402.506522][T14118]  <TASK>
[  402.509439][T14118]  __kasan_check_byte+0x12/0x40
[  402.514278][T14118]  lock_acquire+0x8d/0x360
[  402.518686][T14118]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.523866][T14118]  ? __cancel_work+0x254/0x2e0
[  402.528617][T14118]  lock_sock_nested+0x48/0x100
[  402.533366][T14118]  ? l2cap_sock_ready_cb+0x45/0x140
[  402.538550][T14118]  l2cap_sock_ready_cb+0x45/0x140
[  402.543560][T14118]  l2cap_conn_start+0x76d/0xe50
[  402.548399][T14118]  ? __pfx_l2cap_conn_start+0x10/0x10
[  402.553753][T14118]  ? __lock_acquire+0xab9/0xd20
[  402.558586][T14118]  ? __pfx___mutex_lock+0x10/0x10
[  402.563595][T14118]  ? process_scheduled_works+0x9ef/0x17b0
[  402.569302][T14118]  l2cap_info_timeout+0x68/0xa0
[  402.574149][T14118]  ? process_scheduled_works+0x9ef/0x17b0
[  402.579851][T14118]  process_scheduled_works+0xae1/0x17b0
[  402.585393][T14118]  ? __pfx_process_scheduled_works+0x10/0x10
[  402.591359][T14118]  worker_thread+0x8a0/0xda0
[  402.595943][T14118]  kthread+0x711/0x8a0
[  402.599998][T14118]  ? __pfx_worker_thread+0x10/0x10
[  402.605089][T14118]  ? __pfx_kthread+0x10/0x10
[  402.609697][T14118]  ? _raw_spin_unlock_irq+0x23/0x50
[  402.614886][T14118]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.620076][T14118]  ? __pfx_kthread+0x10/0x10
[  402.624673][T14118]  ret_from_fork+0x4bc/0x870
[  402.629295][T14118]  ? __pfx_ret_from_fork+0x10/0x10
[  402.634432][T14118]  ? __switch_to_asm+0x39/0x70
[  402.639185][T14118]  ? __switch_to_asm+0x33/0x70
[  402.643929][T14118]  ? __pfx_kthread+0x10/0x10
[  402.648507][T14118]  ret_from_fork_asm+0x1a/0x30
[  402.653261][T14118]  </TASK>
[  402.656276][T14118] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  402.661028][T14118] ---[ end trace 0000000000000000 ]---
[  402.701684][ T5828] Bluetooth: hci0: command tx timeout
[  402.750768][T14118] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  402.757573][T14118] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 00 55 24 09 cc 66 66 66 66 66 66 2e
[  402.794469][T14118] RSP: 0018:ffffc900053e7788 EFLAGS: 00010202
[  402.800639][T14118] RAX: dffffc0000000000 RBX: ffffffff891f39c8 RCX: 7f7cc76a10a08a00
[  402.808688][T14118] RDX: 0000000000000000 RSI: ffffffff891f39c8 RDI: 000000000000004c
[  402.816676][T14118] RBP: ffffffff8a507cb5 R08: 0000000000000001 R09: 0000000000000000
[  402.824720][T14118] R10: dffffc0000000000 R11: ffffffff8a507c70 R12: 0000000000000000
[  402.832767][T14118] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001
[  402.844929][T14118] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  402.853954][T14118] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  402.860601][T14118] CR2: 0000001b32919ff8 CR3: 000000000dd38000 CR4: 00000000003526f0
[  402.907595][T14118] Kernel panic - not syncing: Fatal exception
[  402.914098][T14118] Kernel Offset: disabled
[  402.918411][T14118] Rebooting in 86400 seconds..