last executing test programs:

3.165149001s ago: executing program 4 (id=1913):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f00000001c0), 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000)
recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x600100a2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x400}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x2, 0x4, 0x7, 0xfffffffffffffffc, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.168705155s ago: executing program 4 (id=1931):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffffd, 0x2, @TCA_ETF_PARMS={0x10}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x5c}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)

1.328548953s ago: executing program 3 (id=1944):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000220a01"], 0xc8}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
accept4$bt_l2cap(r4, 0x0, 0x0, 0x800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x54, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3f, 0x59}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "36d218f104944a83fb756efb1d"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="511e36f98000fef775e6f9de25cafb5debd2e46fc81842b5df964f411d2457ea4389ad91dc274b854cf0b8c3c0cc2c64fdf82318dedaefc6f928068d953d1133cc15605314cf7d5d6a7a08aede1fe468412b559f19f8e9b6ce08bb9bb1433b02bb8316dc8d540f289c0fa82d43de4cf2785375c66a089756087d63ebd2ad1ae3940e12fd414f7c293958722b646b3082be61fcb487e6738c6fe569e815ed5e4bceac6966615077b38c63f0c5c666c0b0cd1a3a6397d29b96f288766a", 0xbc}], 0x1}, 0x6400000c)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={<r7=>r2})
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4)

1.298420525s ago: executing program 4 (id=1946):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000130a010200000000000000000004d50fdad5aee2ea69c10000000800034000000002"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010)
recvmmsg(r1, 0x0, 0x0, 0x40010000, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
r9 = accept4(r7, 0x0, 0x0, 0x80000)
bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, 0xffffffffffffffff, 0x33, 0x0, 0x4000}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300008001dfefffffff251540100002112efe92288b0bd96fffa", @ANYRES32=r11, @ANYBLOB="000096040a000200aaaaaaaaaa0c00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)

1.279492188s ago: executing program 0 (id=1947):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20)
write$cgroup_devices(r0, 0x0, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000100))

1.204407316s ago: executing program 3 (id=1948):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) (async)
sendto$inet6(r0, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r2) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r6 = socket(0x10, 0x2, 0x6)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) (async)
sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) (async)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x8}, 0x8) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae9bdf775acde3ee9996091de1056"], 0x74}}, 0x0) (async)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x20048801) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0)

1.132384428s ago: executing program 1 (id=1950):
r0 = socket$inet6(0xa, 0x5, 0xff000001) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0_to_bond\x00'}) (async)
r3 = socket(0x400000000010, 0x2, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb5c}]}, 0x2c}}, 0x0) (async)
r6 = socket(0x400000000010, 0x800, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x11)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x5, @empty, 0x5}, 0x1c) (async)
r10 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00', <r12=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000000)={'wg1\x00', <r13=>0x0})
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000040)={r13, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={r12, 0x3, 0x6, @broadcast}, 0x10)
setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000100)={r13, 0x1, 0x6}, 0x10) (async)
socket(0x1d, 0x2, 0x6)

1.076732794s ago: executing program 3 (id=1951):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0}, 0x20)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.029247039s ago: executing program 0 (id=1952):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x4d, 0x0, &(0x7f00000000c0))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, 0x0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
listen(r5, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000012c0), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r2, 0x4, r2}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
pipe(&(0x7f00000000c0)={<r8=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', <r9=>0x0, 0x20, 0x1, 0x3, 0x1, {{0x1c, 0x4, 0x3, 0x21, 0x70, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010100, {[@timestamp_addr={0x44, 0x44, 0x53, 0x1, 0x9, [{@remote, 0x10555f9d}, {@loopback, 0x9}, {@empty, 0x80000000}, {@loopback, 0x3}, {@local, 0xfffffff2}, {@multicast1, 0x8}, {@empty, 0x7}, {@rand_addr=0x64010102, 0xc}]}, @ssrr={0x89, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x39}, @remote, @local]}, @generic={0x89, 0x9, "17fd1dc7fcc880"}]}}}}})
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6a4}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe390}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000940)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0xe, 0x1}, 0x10, 0xf5ac, 0xffffffffffffffff, 0x6, &(0x7f00000009c0)=[r7, r4, r0], &(0x7f0000000a00)=[{0x3, 0x5, 0x6, 0x8}, {0x3, 0x1, 0x9, 0x4}, {0x0, 0x4, 0x8, 0xb}, {0x1, 0x2, 0x8, 0x3}, {0x3, 0x3, 0x10, 0x9}, {0x2, 0x1, 0x3, 0x9}], 0x10, 0x276}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000b40)={r8, r10})
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r4}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x0, 0x1, 0x2, 0x8, 0xf, 0xffffffffffffffff, 0x4}, @call={0x85, 0x0, 0x0, 0x6e}, @generic={0x22, 0x3, 0x1, 0x9, 0x887e}, @alu={0x4, 0x0, 0x2, 0x6, 0x7, 0x80, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xa425, 0xd6, &(0x7f00000003c0)=""/214, 0x40f00, 0x10, '\x00', r9, 0x1a, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x8000, 0x1}, 0x10, 0x2c62f, r2, 0x7, &(0x7f0000000500)=[r0], &(0x7f00000007c0)=[{0x2, 0x3, 0x4, 0xb}, {0x1, 0x3, 0x7, 0x3}, {0x1, 0x5, 0xa, 0xa}, {0x2, 0x3, 0x10, 0x4}, {0x4, 0x4, 0x10, 0x7}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x1, 0x3, 0x7}], 0x10, 0x9}, 0x94)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20000)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0)

991.162904ms ago: executing program 2 (id=1953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2f00000091d700b59d96ae85cd37872aac94fdaf570cdb9af199d74024e4580eec47426743c8e7e1cc0d580919", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

888.619135ms ago: executing program 1 (id=1954):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040), 0x6)
bind$bt_hci(r7, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
sendmsg$nl_route(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000006803003900000006000700000000002400020001000000000000000200000009000000010000000400000001000000110000000c000200010000002c000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f0000000440)={'gre0\x00', 0xfffffffffffffff8, 0x1ff})

839.603039ms ago: executing program 3 (id=1955):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f00000009c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)

827.063194ms ago: executing program 2 (id=1956):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async)
getsockopt$MRT(r1, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000401000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000aa8f90c59530008710340fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0)) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x4}, 0x20) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5, 0x0, {0x5, 0x4, 0x0, 0x25, 0x9b0d, 0x67, 0x3, 0x80, 0x0, 0x5, @multicast1, @multicast2}}}}}}, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={'ipvlan0\x00', {0x2, 0x4e23, @local}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000180000000000020090b971f5d27977b6c77bd6b200000300000000050000001000d3d8d901000000578e6c22575016b2d1c1650e974d7c9acf3fea1a16ece2531c6bc08ef270c23e1590b364070895c5626cd5bc492c34dc938aeb740e9b19727315b77f81d489a9731c1980861d02156d014da09b473ee2233850221231532e391906dac856b296524deb98412e6b42998fd51aadf0fa97e7c3a2590de1e59d53c14d2c780500fa4ad8ea68b7f4f3158d26886e2f6a1c1e501b736441b92de54f97420f3eef85898436fec8808b12cfff68c1ae6a3b088f48b4e0ccee74c007057ee59aa04b570fff50b430bc9078041444df7fc9a1deda2508c1cb04757d2c1704ced45c29b8b06614f8dc153266"], 0x34}}, 0x0)

686.072618ms ago: executing program 2 (id=1957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x164, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x26, 0x6, "94637bd301730586064d1bd23264d8156460c037aef397f221b80427ea5777d1af87"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe2, 0x6, "cc4060e550c9eedcf3cd7188a36d73367bbb54b3dc8b0d0abb837b34cdcd3ac571455c13daf67311d659400a5b5655d55dc84fe30715971a277e065f5614239d44f57e058ca3a89a8ec87b4631da87a85a41738443076519bb8f7650ca1375b9865040ad36d98175d5ea75e3126e6eef538c71eeb69d386e8303fb1b92505a088722fa3d0bea0cc34b52a2d3edfbcfd027c7eb242da471dfe21bb4e43d6a42df6b94b55a81c00f31ad30b184fd5adb9f149cf2778ca0ef3bc637a5b8399e284492997f2dbe74c6e72fa55afd3ae7b94ec79a25b6aaba1bfc490f901ce637"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x403e453}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x361239cc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x615ff5f7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2a10a6bb}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={<r1=>r0, 0x8, 0x2, 0xb})
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x198, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x4001)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1100820}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x6}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x1, 0x5, 0x0, {0x0, 0x5, 0x0, 0x32c, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x4, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x9a8}, @NL80211_ATTR_PBSS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004894}, 0x4008004)
r5 = socket(0x8, 0x805, 0x5)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x44)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x41)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000b80)=0x200)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000c00)=<r6=>0x0)
sendmsg$nfc_llcp(r1, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x27, r6, 0x0, 0x2, 0xb8, 0xc4, "9c43268b07dbff53cbdf7b6d1b7513a232fd46adf846cf6d87ff8b84253d1cc137b6dd0e9ff23d58e227ee84eaeae9374dfcc3d143aae9cbad95fb05bfab91", 0x15}, 0x60, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="b07af79e0da4daa13bc792937411cfb5de45675bd48330ac38cf93cdc9a8f12d78047661844aa19234580a187198a9172fe1ece9ed64a677d0da7a0acdd48357446f27f7f0e9a48969c846e7cdaebd003e8e3f6f02358d736215dffa236b3897436c67b77f13f0fff227faf3e164bb971cd69d20", 0x74}, {&(0x7f0000000d40)="d840369025917b430ac0e0f3639af1785e784673cc05f11148905b1c97c1eef673dfc2a0a1835244ea7bf2", 0x2b}], 0x2, 0x0, 0x0, 0x20000091}, 0x10)
socket$unix(0x1, 0x5, 0x0)
getpeername$netlink(r5, &(0x7f0000000e00), &(0x7f0000000e40)=0xc)
getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000000e80)=""/198, &(0x7f0000000f80)=0xc6)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x174, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x174}, 0x1, 0x0, 0x0, 0x24004010}, 0x200040a0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001200))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wpan3\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wpan1\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x10004804)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x310, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4002)

685.34326ms ago: executing program 3 (id=1958):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11)
socket(0x2, 0x5, 0x0) (async)
r12 = socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r12)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r16=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r17 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x74, r14, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x40010)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r18=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) (async)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

558.106353ms ago: executing program 2 (id=1959):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001000010400a5b3493000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100080000000a000900aaaaaaaaaa000000080007000000000008000500", @ANYRES32=r5], 0x60}}, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="30002d8004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x5, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
listen(r9, 0x0)
connect$can_j1939(r9, 0x0, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0)

527.698427ms ago: executing program 1 (id=1960):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x3, 0x2, "00dbff", 0x8, 0x9b})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r2, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) (async)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x3, 0x2, "00dbff", 0x8, 0x9b}) (async)

515.38472ms ago: executing program 4 (id=1961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x10}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x4, r1}, 0x10)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000000a6c000000060a0b04000000000000000002000000400004803c0001800b00be9900000000000000002c0002800800034000000000080001400000000d08000640000002080004400000001705f235b086edde000200890004000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000abf75cfeb229c4d562667a9ed42000000000000"], 0x94}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f, 0x10}, 0x20) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x4, r1}, 0x10) (async)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65b2ff0a2c370242c067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000000a6c000000060a0b04000000000000000002000000400004803c0001800b00be9900000000000000002c0002800800034000000000080001400000000d08000640000002080004400000001705f235b086edde000200890004000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000abf75cfeb229c4d562667a9ed42000000000000"], 0x94}}, 0x0) (async)

451.438232ms ago: executing program 0 (id=1962):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c017000"}, 0xd8) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x7e90, 0x4, 0xfffffffffffffffd, 0x7, 0x3, 0x7fffffffffffffff]}, &(0x7f0000000000)=0x78)

376.428047ms ago: executing program 0 (id=1963):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) (async)
sendto$unix(r1, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0)
recvfrom$unix(r2, 0x0, 0xfffffffffffffe60, 0x2001, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x7, "5eee37d22a"}]}}}}}}}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

341.233709ms ago: executing program 1 (id=1964):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8ff7, 0x3484, 0x1, 0x8, 0x6, 0x5, 0x3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x3, 0x6, 0x40, 0x8, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000008}, 0x200080c0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@getneigh={0x14, 0x1e, 0x8, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x4, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0)

268.655648ms ago: executing program 0 (id=1965):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4c000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@loopback, 0x4e24, 0x9, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x67, 0x0, r6}, {0x80000001, 0x4, 0x3, 0x7, 0x6, 0x7, 0xfffffffffffff028, 0x800}, {0x2, 0x5000000000000000, 0x7, 0x2}, 0x276, 0x6e6bb7, 0x1, 0x1, 0x0, 0x2}, {{@in=@loopback, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x3501, 0x2, 0x3, 0x48, 0x2, 0x9, 0x10}}, 0xe8)

267.977935ms ago: executing program 1 (id=1966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
unshare(0x2040400)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0xa, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x88, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x88}}, 0x4000)
sendto$packet(r5, &(0x7f0000000240)='u', 0x1, 0x24044881, &(0x7f0000000000)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14)
bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r3, 0x4)

137.118092ms ago: executing program 2 (id=1967):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)

117.78631ms ago: executing program 1 (id=1968):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xa90, 0x4)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf4e)
writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0)

116.847885ms ago: executing program 4 (id=1969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7f, 0x29}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

68.303742ms ago: executing program 0 (id=1970):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x8000, 0x4)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x40000000)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=<r9=>0x0, &(0x7f00000005c0)=0x4)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x2}, {0x3, 0x5b03}, {0x0, 0x9}, {0xd, 0x2}, {0x6, 0xff}]}, @func={0xb, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000700)=""/53, 0x5b, 0x35, 0x0, 0x3997}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000800), 0x0, <r11=>0x0, &(0x7f0000000840)=""/160, 0xa0}}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r12)
ioctl$SIOCSIFHWADDR(r12, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
pipe(&(0x7f0000000980)={<r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, <r17=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x1, 0x4, 0x8, 0x10}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000400)='syzkaller\x00', 0x10000, 0x51, &(0x7f0000000480)=""/81, 0x40f00, 0x2, '\x00', r9, 0x1b, r10, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xb, 0x3, 0x7}, 0x10, r11, 0x0, 0x8, &(0x7f0000000b00)=[r12, r13, r14, 0x1, 0x1, r15, r16, r17], &(0x7f0000000b40)=[{0x3, 0x2, 0x1, 0x7}, {0x3, 0x3, 0xd, 0x2}, {0x2, 0x3, 0xf, 0x3}, {0x2, 0x5, 0x9}, {0x0, 0x5, 0x3, 0x6}, {0x2, 0x3, 0xc, 0x9}, {0x2, 0x2, 0xc, 0x1}, {0x5, 0x5, 0xe, 0xa}]}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', <r18=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r18, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000bd7000fddbdf253100eaff08000200", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x20000010)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4040001)

67.57259ms ago: executing program 3 (id=1971):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aa"], 0x48}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]})
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000080)=0x9)
write$ppp(r6, &(0x7f0000000540)='|Z', 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x8000, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x64}}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

22.60534ms ago: executing program 2 (id=1972):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket$inet(0x2, 0x2, 0x1)
getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000)
getsockopt$MRT(r1, 0x0, 0xd0, 0x0, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

0s ago: executing program 4 (id=1973):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490)

kernel console output (not intermixed with test programs):

839042][ T5837] hsr_slave_0: entered promiscuous mode
[   72.845881][ T5837] hsr_slave_1: entered promiscuous mode
[   72.886386][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.893356][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.919784][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.932588][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.939575][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.965825][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.977479][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.984510][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.010936][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.026600][ T5829] hsr_slave_0: entered promiscuous mode
[   73.032826][ T5829] hsr_slave_1: entered promiscuous mode
[   73.039350][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   73.045160][ T5829] Cannot create hsr debugfs directory
[   73.056237][ T5831] hsr_slave_0: entered promiscuous mode
[   73.063097][ T5831] hsr_slave_1: entered promiscuous mode
[   73.069324][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   73.075182][ T5831] Cannot create hsr debugfs directory
[   73.088075][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.095207][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.121131][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.346242][ T5828] hsr_slave_0: entered promiscuous mode
[   73.352464][ T5828] hsr_slave_1: entered promiscuous mode
[   73.359288][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   73.365348][ T5828] Cannot create hsr debugfs directory
[   73.376417][ T5830] hsr_slave_0: entered promiscuous mode
[   73.382849][ T5830] hsr_slave_1: entered promiscuous mode
[   73.389154][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   73.394952][ T5830] Cannot create hsr debugfs directory
[   73.759281][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.771995][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.802039][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.821287][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.868537][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.887388][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.908109][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.928276][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.990803][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.000973][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.011128][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.022517][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.127379][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.143979][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.156427][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.182984][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.227217][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.303028][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   74.314360][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.335780][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.346902][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.359358][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.394596][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.401776][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.413643][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.447545][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.454671][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.487068][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   74.498948][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.542569][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   74.562018][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.569128][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.582365][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.589593][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.604753][ T5841] Bluetooth: hci4: command tx timeout
[   74.605048][ T5847] Bluetooth: hci1: command tx timeout
[   74.629937][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.637053][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.661599][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.668718][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.685520][ T5847] Bluetooth: hci3: command tx timeout
[   74.685666][ T5841] Bluetooth: hci2: command tx timeout
[   74.696562][ T5847] Bluetooth: hci0: command tx timeout
[   74.732265][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.812767][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.891130][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   74.910181][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.977535][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.984716][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.030420][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   75.088634][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.095816][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.125441][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.132609][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.174143][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.181325][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.230605][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.247555][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.381831][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.490260][ T5837] veth0_vlan: entered promiscuous mode
[   75.501980][ T5831] veth0_vlan: entered promiscuous mode
[   75.532078][ T5837] veth1_vlan: entered promiscuous mode
[   75.579002][ T5831] veth1_vlan: entered promiscuous mode
[   75.608500][ T5830] veth0_vlan: entered promiscuous mode
[   75.637260][ T5830] veth1_vlan: entered promiscuous mode
[   75.709803][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.739010][ T5837] veth0_macvtap: entered promiscuous mode
[   75.767204][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.786305][ T5837] veth1_macvtap: entered promiscuous mode
[   75.795534][ T5831] veth0_macvtap: entered promiscuous mode
[   75.818346][ T5830] veth0_macvtap: entered promiscuous mode
[   75.841009][ T5831] veth1_macvtap: entered promiscuous mode
[   75.858050][ T5830] veth1_macvtap: entered promiscuous mode
[   75.897654][ T5829] veth0_vlan: entered promiscuous mode
[   75.911775][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.929164][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.962338][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.973067][ T5829] veth1_vlan: entered promiscuous mode
[   75.989272][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.017503][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.028492][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.067390][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.077367][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.109616][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.120687][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.140781][   T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.150437][   T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.190045][   T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.199003][   T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.212107][ T5829] veth0_macvtap: entered promiscuous mode
[   76.230714][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.242731][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.272760][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.282880][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.292690][ T5829] veth1_macvtap: entered promiscuous mode
[   76.337821][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.347123][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.349269][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.383360][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.434824][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.443282][ T2984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.453617][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.457495][ T2984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.479146][ T2984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.489433][ T2984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.505462][ T5828] veth0_vlan: entered promiscuous mode
[   76.557080][ T5828] veth1_vlan: entered promiscuous mode
[   76.596179][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.604032][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.631531][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.639638][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.656581][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.657758][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.684882][ T5841] Bluetooth: hci4: command tx timeout
[   76.685449][ T5847] Bluetooth: hci1: command tx timeout
[   76.746517][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.768828][ T5828] veth0_macvtap: entered promiscuous mode
[   76.768844][ T5847] Bluetooth: hci0: command tx timeout
[   76.768880][ T5847] Bluetooth: hci3: command tx timeout
[   76.780560][ T5841] Bluetooth: hci2: command tx timeout
[   76.790175][ T5828] veth1_macvtap: entered promiscuous mode
[   76.801397][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.810664][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.915190][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.923040][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.946402][ T5951] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   76.950243][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.000556][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.033383][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.042238][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.127871][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.239465][ T5961] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   77.249731][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.259907][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   77.267166][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.342230][ T5965] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   77.359818][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.371016][ T5969] FAULT_INJECTION: forcing a failure.
[   77.371016][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   77.397756][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) 
[   77.397779][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   77.397794][ T5969] Call Trace:
[   77.397801][ T5969]  <TASK>
[   77.397808][ T5969]  dump_stack_lvl+0x189/0x250
[   77.397837][ T5969]  ? __pfx____ratelimit+0x10/0x10
[   77.397854][ T5969]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.397872][ T5969]  ? __pfx__printk+0x10/0x10
[   77.397889][ T5969]  ? __might_fault+0xb0/0x130
[   77.397920][ T5969]  should_fail_ex+0x414/0x560
[   77.397956][ T5969]  _copy_from_user+0x2d/0xb0
[   77.397975][ T5969]  ___sys_sendmsg+0x158/0x2a0
[   77.397991][ T5969]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.398049][ T5969]  ? __might_fault+0xb0/0x130
[   77.398077][ T5969]  __sys_sendmmsg+0x227/0x430
[   77.398101][ T5969]  ? __pfx___sys_sendmmsg+0x10/0x10
[   77.398128][ T5969]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   77.398165][ T5969]  ? ksys_write+0x22a/0x250
[   77.398189][ T5969]  ? __pfx_ksys_write+0x10/0x10
[   77.398215][ T5969]  __x64_sys_sendmmsg+0xa0/0xc0
[   77.398234][ T5969]  do_syscall_64+0xfa/0xfa0
[   77.398254][ T5969]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.398275][ T5969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.398292][ T5969]  ? clear_bhb_loop+0x60/0xb0
[   77.398311][ T5969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.398332][ T5969] RIP: 0033:0x7f90af18f6c9
[   77.398356][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.398369][ T5969] RSP: 002b:00007f90b006d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   77.398386][ T5969] RAX: ffffffffffffffda RBX: 00007f90af3e5fa0 RCX: 00007f90af18f6c9
[   77.398398][ T5969] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000003
[   77.398408][ T5969] RBP: 00007f90b006d090 R08: 0000000000000000 R09: 0000000000000000
[   77.398417][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   77.398426][ T5969] R13: 00007f90af3e6038 R14: 00007f90af3e5fa0 R15: 00007ffe05aaa388
[   77.398452][ T5969]  </TASK>
[   77.404262][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   77.651257][ T5965] gretap1: entered promiscuous mode
[   77.664031][ T5977] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   77.845545][ T5983] Zero length message leads to an empty skb
[   77.975702][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.983557][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.155425][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.185145][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.534359][ T6010] syzkaller0: entered promiscuous mode
[   78.556603][ T6010] syzkaller0: entered allmulticast mode
[   78.640542][ T6023] ip6t_srh: unknown srh match flags  5F28
[   78.768503][ T5841] Bluetooth: hci1: command tx timeout
[   78.768513][   T52] Bluetooth: hci4: command tx timeout
[   78.846733][ T5841] Bluetooth: hci2: command tx timeout
[   78.847871][   T52] Bluetooth: hci0: command tx timeout
[   78.852161][ T5841] Bluetooth: hci3: command tx timeout
[   78.954823][ T6031] unsupported nla_type 52263
[   79.061938][ T6041] xt_TCPMSS: Only works on TCP SYN packets
[   79.079165][ T6042] xt_TCPMSS: Only works on TCP SYN packets
[   79.180208][ T6041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.29'.
[   79.197463][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.29'.
[   79.238965][ T6041] openvswitch: netlink: Flow key attr not present in new flow.
[   79.274549][ T6042] openvswitch: netlink: Flow key attr not present in new flow.
[   79.295268][ T6052] syzkaller0: entered promiscuous mode
[   79.306437][ T6052] syzkaller0: entered allmulticast mode
[   79.323099][ T6052] warning: `syz.3.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.371554][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   79.409803][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'.
[   79.448222][ T6054] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   79.459575][ T6054] netlink: 184 bytes leftover after parsing attributes in process `syz.2.33'.
[   79.471784][ T6052] netlink: 'syz.3.32': attribute type 13 has an invalid length.
[   79.495534][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'.
[   79.547576][   T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.558987][ T6052] netlink: 'syz.3.32': attribute type 13 has an invalid length.
[   79.573095][   T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.591450][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'.
[   79.606936][   T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.616350][   T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.629879][ T6063] netlink: 72 bytes leftover after parsing attributes in process `syz.2.35'.
[   79.706606][ T6063] bond1 (unregistering): Released all slaves
[   79.869235][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.473515][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.508008][ T6110] netlink: 'syz.4.49': attribute type 10 has an invalid length.
[   80.520622][ T6110] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   80.539352][ T6110] syzkaller0: entered promiscuous mode
[   80.545007][ T6110] syzkaller0: entered allmulticast mode
[   80.975188][ T6121] tipc: Started in network mode
[   81.001090][ T6121] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   81.038470][ T6121] tipc: Enabled bearer <eth:vlan0>, priority 10
[   81.148964][ T6127] netlink: 'syz.2.56': attribute type 4 has an invalid length.
[   81.373375][ T6131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.506161][ T6131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.712424][ T6131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.727015][ T6155] nftables ruleset with unbound chain
[   81.971105][ T6131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.047862][ T5916] tipc: Node number set to 10005162
[   82.302983][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.388223][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.452181][ T1108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.619364][ T3024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.883415][ T6206] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   82.958624][ T6210] Cannot find add_set index 0 as target
[   83.083069][ T6207] syzkaller0: entered promiscuous mode
[   83.090268][ T6207] syzkaller0: entered allmulticast mode
[   83.918117][ T6217] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.058774][ T6217] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.136163][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.232353][ T6217] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.389813][ T6262] netlink: 'syz.3.86': attribute type 1 has an invalid length.
[   84.524108][ T6217] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.893058][   T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.954681][   T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.017066][ T1108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.073843][ T1108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.159876][ T6298] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20003
[   85.285428][ T6304] tipc: Started in network mode
[   85.302507][ T6304] tipc: Node identity 0aa4e2cf0904, cluster identity 4711
[   85.342561][ T6304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.473870][ T6305] tipc: Disabling bearer <eth:syzkaller0>
[   85.660528][ T6322] __nla_validate_parse: 3 callbacks suppressed
[   85.660545][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   85.868323][ T6333] Bluetooth: MGMT ver 1.23
[   85.923643][ T6335] netlink: 184 bytes leftover after parsing attributes in process `syz.1.108'.
[   86.289755][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[   86.403854][ T6364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.118'.
[   86.423024][ T6364] xt_hashlimit: invalid rate
[   86.537912][ T6370] Cannot find add_set index 0 as target
[   86.627654][ T6374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.123'.
[   86.672926][ T5902] IPVS: starting estimator thread 0...
[   86.674267][ T6374] tipc: Invalid UDP bearer configuration
[   86.700504][  T898] cfg80211: failed to load regulatory.db
[   86.716796][ T6374] tipc: Enabling of bearer <udp:���L> rejected, failed to enable media
[   86.729457][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'.
[   86.796448][ T6379] IPVS: using max 29 ests per chain, 69600 per kthread
[   86.823021][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'.
[   86.864330][ T6384] openvswitch: netlink: Flow key attribute not present in set flow.
[   86.893747][ T6384] netlink: 'syz.1.127': attribute type 3 has an invalid length.
[   86.957908][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.129'.
[   86.964463][ T6384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.127'.
[   87.039632][ T6398] xt_TCPMSS: Only works on TCP SYN packets
[   87.158132][ T6403] syzkaller0: entered promiscuous mode
[   87.178331][ T6403] syzkaller0: entered allmulticast mode
[   87.458071][ T6421] netlink: 'syz.1.139': attribute type 12 has an invalid length.
[   87.476833][ T6423] netlink: 'syz.3.140': attribute type 25 has an invalid length.
[   87.485719][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'.
[   87.529533][ T6425] can: request_module (can-proto-0) failed.
[   87.558291][ T6421] bond1: option primary_reselect: invalid value (255)
[   87.586821][ T6421] bond1 (unregistering): Released all slaves
[   87.609919][ T6423] can: request_module (can-proto-0) failed.
[   88.190702][ T6459] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.216332][ T6459] bond1: (slave lo): Enslaving as a backup interface with an up link
[   88.227777][ T6459] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   88.594716][ T6483] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[   89.106597][ T6519] nbd: socks must be embedded in a SOCK_ITEM attr
[   89.125481][ T6516] netlink: 'syz.3.168': attribute type 1 has an invalid length.
[   89.315876][ T6530] xt_hashlimit: size too large, truncated to 1048576
[   89.405637][ T6534] netlink: 'syz.3.173': attribute type 16 has an invalid length.
[   89.441787][ T6534] netlink: 'syz.3.173': attribute type 3 has an invalid length.
[   89.510768][ T6530] syz.4.171: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   89.534573][ T6530] CPU: 0 UID: 0 PID: 6530 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT(full) 
[   89.534595][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   89.534604][ T6530] Call Trace:
[   89.534611][ T6530]  <TASK>
[   89.534619][ T6530]  dump_stack_lvl+0x189/0x250
[   89.534651][ T6530]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.534673][ T6530]  ? __pfx__printk+0x10/0x10
[   89.534693][ T6530]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.534716][ T6530]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   89.534740][ T6530]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   89.534766][ T6530]  warn_alloc+0x214/0x310
[   89.534797][ T6530]  ? __pfx_warn_alloc+0x10/0x10
[   89.534828][ T6530]  ? __get_vm_area_node+0x28f/0x300
[   89.534851][ T6530]  ? htable_create+0x101/0x7a0
[   89.534877][ T6530]  __vmalloc_node_range_noprof+0x690/0x12d0
[   89.534930][ T6530]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   89.534958][ T6530]  ? rcu_is_watching+0x15/0xb0
[   89.534977][ T6530]  ? htable_create+0x101/0x7a0
[   89.534997][ T6530]  __kvmalloc_node_noprof+0x674/0x910
[   89.535019][ T6530]  ? htable_create+0x101/0x7a0
[   89.535037][ T6530]  ? hashlimit_pernet+0x23/0x240
[   89.535057][ T6530]  ? hashlimit_pernet+0x23/0x240
[   89.535076][ T6530]  ? hashlimit_pernet+0x23/0x240
[   89.535104][ T6530]  htable_create+0x101/0x7a0
[   89.535133][ T6530]  hashlimit_mt_check_common+0x719/0xa10
[   89.535172][ T6530]  xt_check_match+0x3d1/0xab0
[   89.535200][ T6530]  ? __pfx_xt_check_match+0x10/0x10
[   89.535223][ T6530]  ? pcpu_alloc_noprof+0xfdd/0x1720
[   89.535257][ T6530]  ? xt_find_match+0x1f7/0x250
[   89.535285][ T6530]  translate_table+0x1553/0x2040
[   89.535333][ T6530]  ? __pfx_translate_table+0x10/0x10
[   89.535359][ T6530]  ? __might_fault+0xb0/0x130
[   89.535402][ T6530]  ? _copy_from_user+0x94/0xb0
[   89.535429][ T6530]  do_ip6t_set_ctl+0x970/0xce0
[   89.535457][ T6530]  ? rcu_is_watching+0x15/0xb0
[   89.535477][ T6530]  ? trace_contention_end+0x39/0x120
[   89.535498][ T6530]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   89.535545][ T6530]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   89.535574][ T6530]  ? __pfx_css_rstat_updated+0x10/0x10
[   89.535600][ T6530]  ? __lock_acquire+0xab9/0xd20
[   89.535622][ T6530]  nf_setsockopt+0x26f/0x290
[   89.535650][ T6530]  rawv6_setsockopt+0x23b/0x5b0
[   89.535672][ T6530]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   89.535689][ T6530]  ? aa_sock_opt_perm+0xff/0x1b0
[   89.535717][ T6530]  ? sock_common_setsockopt+0x36/0xc0
[   89.535740][ T6530]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   89.535766][ T6530]  do_sock_setsockopt+0x17c/0x1b0
[   89.535790][ T6530]  __x64_sys_setsockopt+0x13f/0x1b0
[   89.535814][ T6530]  do_syscall_64+0xfa/0xfa0
[   89.535836][ T6530]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.535858][ T6530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.535876][ T6530]  ? clear_bhb_loop+0x60/0xb0
[   89.535896][ T6530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.535912][ T6530] RIP: 0033:0x7f48beb8f6c9
[   89.535928][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.535942][ T6530] RSP: 002b:00007f48bf9d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   89.535970][ T6530] RAX: ffffffffffffffda RBX: 00007f48bede6180 RCX: 00007f48beb8f6c9
[   89.535983][ T6530] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[   89.535994][ T6530] RBP: 00007f48bec11f91 R08: 0000000000000588 R09: 0000000000000000
[   89.536005][ T6530] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[   89.536017][ T6530] R13: 00007f48bede6218 R14: 00007f48bede6180 R15: 00007ffddb2eaf98
[   89.536049][ T6530]  </TASK>
[   89.536066][ T6530] Mem-Info:
[   89.650052][ T6547] netlink: 'syz.2.177': attribute type 11 has an invalid length.
[   89.707657][ T6530] active_anon:5861 inactive_anon:0 isolated_anon:0
[   89.707657][ T6530]  active_file:2372 inactive_file:39876 isolated_file:0
[   89.707657][ T6530]  unevictable:768 dirty:422 writeback:0
[   89.707657][ T6530]  slab_reclaimable:10519 slab_unreclaimable:95215
[   89.707657][ T6530]  mapped:29025 shmem:1357 pagetables:1212
[   89.707657][ T6530]  sec_pagetables:0 bounce:0
[   89.707657][ T6530]  kernel_misc_reclaimable:0
[   89.707657][ T6530]  free:1332170 free_pcp:15563 free_cma:0
[   89.964329][ T6530] Node 0 active_anon:23544kB inactive_anon:0kB active_file:9488kB inactive_file:159304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116148kB dirty:1596kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12176kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.997673][ T6530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   90.035912][ T6530] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   90.075427][ T6542] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   90.120362][ T6530] lowmem_reserve[]: 0 2505 2505 2505 2505
[   90.147170][ T6530] Node 0 DMA32 free:1423252kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23444kB inactive_anon:0kB active_file:9488kB inactive_file:159304kB unevictable:1536kB writepending:1596kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:44464kB local_pcp:18704kB free_cma:0kB
[   90.203067][ T6530] lowmem_reserve[]: 0 0 0 0 0
[   90.209522][ T6530] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   90.246878][ T6530] lowmem_reserve[]: 0 0 0 0 0
[   90.251827][ T6530] Node 1 Normal free:3889428kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18560kB local_pcp:9856kB free_cma:0kB
[   90.322416][ T6530] lowmem_reserve[]: 0 0 0 0 0
[   90.327427][ T6530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   90.346928][ T6530] Node 0 DMA32: 45*4kB (UME) 78*8kB (UME) 31*16kB (UME) 118*32kB (UM) 11*64kB (UM) 2*128kB (M) 2*256kB (M) 5*512kB (UME) 7*1024kB (UME) 5*2048kB (UM) 341*4096kB (M) = 1423252kB
[   90.366435][ T6530] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   90.379462][ T6530] Node 1 Normal: 145*4kB (UE) 48*8kB (UME) 47*16kB (UME) 61*32kB (UME) 17*64kB (UME) 11*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3889428kB
[   90.404326][ T6530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.416593][ T6530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.434581][ T6530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   90.444683][ T6530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   90.453983][ T6530] 43602 total pagecache pages
[   90.466677][ T6530] 0 pages in swap cache
[   90.470973][ T6530] Free swap  = 124996kB
[   90.486408][ T6530] Total swap = 124996kB
[   90.493578][ T6530] 2097051 pages RAM
[   90.499993][ T6530] 0 pages HighMem/MovableOnly
[   90.509262][ T6530] 424119 pages reserved
[   90.519198][ T6530] 0 pages cma reserved
[   90.819749][ T6593] __nla_validate_parse: 7 callbacks suppressed
[   90.819765][ T6593] netlink: 208 bytes leftover after parsing attributes in process `syz.0.189'.
[   90.854264][ T6593] GUP no longer grows the stack in syz.0.189 (6593): 200000003000-20000000a000 (200000001000)
[   90.866433][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) 
[   90.866460][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   90.866470][ T6593] Call Trace:
[   90.866476][ T6593]  <TASK>
[   90.866483][ T6593]  dump_stack_lvl+0x189/0x250
[   90.866510][ T6593]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.866528][ T6593]  ? __pfx__printk+0x10/0x10
[   90.866541][ T6593]  ? find_vma+0xe7/0x160
[   90.866568][ T6593]  __get_user_pages+0x2470/0x2a00
[   90.866588][ T6593]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[   90.866622][ T6593]  ? rcu_is_watching+0x15/0xb0
[   90.866641][ T6593]  __gup_longterm_locked+0xde4/0x1660
[   90.866664][ T6593]  ? try_grab_folio_fast+0x1bf/0x6a0
[   90.866688][ T6593]  ? gup_fast_fallback+0x1b86/0x22d0
[   90.866707][ T6593]  gup_fast_fallback+0x1d65/0x22d0
[   90.866750][ T6593]  ? __pfx_gup_fast_fallback+0x10/0x10
[   90.866764][ T6593]  ? __mutex_lock+0x335/0x1350
[   90.866789][ T6593]  ? is_valid_gup_args+0x11f/0x200
[   90.866807][ T6593]  ? get_user_pages_fast+0x4d/0xb0
[   90.866824][ T6593]  __iov_iter_get_pages_alloc+0x39f/0xb40
[   90.866848][ T6593]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   90.866861][ T6593]  ? wait_for_space+0x248/0x2d0
[   90.866875][ T6593]  iov_iter_get_pages2+0x5e/0xa0
[   90.866893][ T6593]  __se_sys_vmsplice+0x548/0x10d0
[   90.866921][ T6593]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   90.866933][ T6593]  ? __pfx_futex_wait+0x10/0x10
[   90.866955][ T6593]  ? __ia32_sys_rt_sigreturn+0x743/0x860
[   90.867012][ T6593]  ? do_syscall_64+0xbe/0xfa0
[   90.867032][ T6593]  do_syscall_64+0xfa/0xfa0
[   90.867048][ T6593]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.867065][ T6593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.867089][ T6593]  ? clear_bhb_loop+0x60/0xb0
[   90.867106][ T6593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.867120][ T6593] RIP: 0033:0x7f90af18f6c9
[   90.867133][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.867145][ T6593] RSP: 002b:00007f90b006d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   90.867160][ T6593] RAX: ffffffffffffffda RBX: 00007f90af3e5fa0 RCX: 00007f90af18f6c9
[   90.867169][ T6593] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[   90.867177][ T6593] RBP: 00007f90af211f91 R08: 0000000000000000 R09: 0000000000000000
[   90.867185][ T6593] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   90.867193][ T6593] R13: 00007f90af3e6038 R14: 00007f90af3e5fa0 R15: 00007ffe05aaa388
[   90.867216][ T6593]  </TASK>
[   91.219862][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'.
[   91.247727][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.263746][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.316148][ T6602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.417852][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.442482][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.483024][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.534695][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.598184][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.624049][ T6622] netlink: 'syz.0.196': attribute type 9 has an invalid length.
[   91.826483][ T6628] netlink: 'syz.2.198': attribute type 21 has an invalid length.
[   92.149946][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.181851][ T6646] netlink: 'syz.1.203': attribute type 16 has an invalid length.
[   92.196556][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.225545][ T6646] netlink: 'syz.1.203': attribute type 17 has an invalid length.
[   92.230803][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'.
[   92.291594][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'.
[   92.379948][ T6646] net_ratelimit: 27 callbacks suppressed
[   92.379957][ T6646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.526063][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'.
[   92.701176][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[   92.754521][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'.
[   92.786027][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'.
[   92.944343][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'.
[   93.006186][ T6693] bond1: Unable to set down delay as MII monitoring is disabled
[   93.045909][ T6693] bond1 (unregistering): Released all slaves
[   93.162036][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'.
[   93.382829][ T5895] IPVS: starting estimator thread 0...
[   93.474601][ T6722] IPVS: using max 35 ests per chain, 84000 per kthread
[   93.818403][ T6742] netlink: 'syz.3.233': attribute type 10 has an invalid length.
[   93.851292][ T6742] syz_tun: entered promiscuous mode
[   93.889294][ T6749] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.899170][ T6742] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   93.907322][ T6749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.915250][ T6749] IPv6: NLM_F_CREATE should be set when creating new route
[   93.977975][ T6745] netlink: 'syz.2.235': attribute type 11 has an invalid length.
[   94.160795][ T6761] netlink: 'syz.1.237': attribute type 8 has an invalid length.
[   94.625687][ T6792] Cannot find del_set index 0 as target
[   94.754657][ T6793] netlink: 'syz.2.246': attribute type 13 has an invalid length.
[   94.963423][ T6807] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   95.288270][ T6818] lo: Caught tx_queue_len zero misconfig
[   95.317167][ T6790] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   95.332665][ T6790] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   95.389153][ T6824] vcan0: entered allmulticast mode
[   95.412214][ T6790] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   95.421246][ T6790] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   95.443231][ T6790] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.468444][ T6790] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   95.519909][ T6790] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.546816][ T6790] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   95.555427][ T5948] IPVS: starting estimator thread 0...
[   95.563654][ T6828] tipc: Started in network mode
[   95.574350][ T6828] tipc: Node identity ac1414aa, cluster identity 4711
[   95.583462][ T6790] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   95.598672][ T6790] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[   95.603593][ T6828] tipc: Enabled bearer <udp:s>, priority 10
[   95.665800][ T6832] IPVS: using max 32 ests per chain, 76800 per kthread
[   95.900798][ T6842] IPVS: ip_vs_edit_dest(): server weight less than zero
[   95.917785][ T6848] __nla_validate_parse: 12 callbacks suppressed
[   95.917801][ T6848] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.264'.
[   95.917834][ T6845] ip6gre1: entered allmulticast mode
[   95.944362][ T6849] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.264'.
[   96.005346][ T6846] netlink: 284 bytes leftover after parsing attributes in process `syz.3.265'.
[   96.037969][ T6855] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   96.145480][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.153221][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.166083][ T6860] openvswitch: netlink: Key type 31 is not supported
[   96.232965][ T6841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   96.488733][ T6874] netlink: 14 bytes leftover after parsing attributes in process `syz.3.272'.
[   96.687386][ T6893] syzkaller0: entered promiscuous mode
[   96.694102][ T6893] syzkaller0: entered allmulticast mode
[   96.715484][ T1579] tipc: Node number set to 2886997162
[   96.798999][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[   97.059588][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'.
[   97.188595][ T6922] netlink: 'syz.3.285': attribute type 1 has an invalid length.
[   97.210757][ T6922] netlink: 228 bytes leftover after parsing attributes in process `syz.3.285'.
[   97.254890][ T6926] netlink: 'syz.1.287': attribute type 3 has an invalid length.
[   97.476028][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[   98.082312][ T6973] xt_bpf: check failed: parse error
[   98.265427][ T6984] netlink: 'syz.1.304': attribute type 23 has an invalid length.
[   98.552044][ T6997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.559365][ T6997] IPv6: NLM_F_CREATE should be set when creating new route
[   98.594286][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.306'.
[   98.629087][ T7001] netlink: 'syz.4.309': attribute type 1 has an invalid length.
[   98.665834][ T7001] netlink: 'syz.4.309': attribute type 10 has an invalid length.
[   98.683813][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.309'.
[   98.765893][ T7001] team0: Port device geneve0 added
[   98.966784][ T7021] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   99.001490][    C0] Illegal XDP return value 16128 on prog  (id 82) dev bond0, expect packet loss!
[   99.065468][ T7026] netlink: 'syz.4.317': attribute type 12 has an invalid length.
[   99.285876][ T7036] tipc: Started in network mode
[   99.290975][ T7036] tipc: Node identity 7ae8ba29e90d, cluster identity 4711
[   99.300586][ T7036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.308416][ T7036] syzkaller0: entered promiscuous mode
[   99.315876][ T7036] syzkaller0: entered allmulticast mode
[   99.366954][ T7036] tipc: Resetting bearer <eth:syzkaller0>
[   99.382455][ T7038] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.416087][ T7035] tipc: Resetting bearer <eth:syzkaller0>
[   99.466242][ T7035] tipc: Disabling bearer <eth:syzkaller0>
[   99.692932][ T7056] veth0: entered promiscuous mode
[   99.814758][ T7054] veth0: left promiscuous mode
[  100.148724][ T7082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.170812][ T7082] syzkaller0: entered promiscuous mode
[  100.201072][ T7082] syzkaller0: entered allmulticast mode
[  100.310782][ T7082] tipc: Resetting bearer <eth:syzkaller0>
[  100.366613][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[  100.449647][ T7081] tipc: Disabling bearer <eth:syzkaller0>
[  100.718713][ T7110] bond1 (unregistering): Released all slaves
[  100.938608][ T7134] __nla_validate_parse: 11 callbacks suppressed
[  100.938628][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.351'.
[  101.572432][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'.
[  101.651468][ T7168] netlink: 156 bytes leftover after parsing attributes in process `syz.0.363'.
[  101.666652][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'.
[  101.707938][ T7172] netlink: 13020 bytes leftover after parsing attributes in process `syz.2.364'.
[  101.946039][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'.
[  102.010007][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.021647][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.053063][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[  102.063642][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[  102.074753][ T7198] netlink: 'syz.2.370': attribute type 13 has an invalid length.
[  102.367843][ T7209] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  102.389863][ T7209] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[  102.403699][ T7209] bridge0: port 3(syz_tun) entered blocking state
[  102.412301][ T7209] bridge0: port 3(syz_tun) entered disabled state
[  102.419137][ T7209] syz_tun: entered allmulticast mode
[  102.438919][ T7209] syz_tun: entered promiscuous mode
[  102.445224][ T7209] bridge0: port 3(syz_tun) entered blocking state
[  102.451992][ T7209] bridge0: port 3(syz_tun) entered forwarding state
[  102.471010][ T7209] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  102.487488][ T7209] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[  102.563475][ T7225] netlink: 44 bytes leftover after parsing attributes in process `syz.0.380'.
[  102.642046][ T7233] sctp: [Deprecated]: syz.3.381 (pid 7233) Use of int in maxseg socket option.
[  102.642046][ T7233] Use struct sctp_assoc_value instead
[  102.996994][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[  103.013996][ T7256] netlink: 'syz.2.388': attribute type 1 has an invalid length.
[  103.022036][ T7256] netlink: 'syz.2.388': attribute type 2 has an invalid length.
[  103.173722][ T7266] xt_hashlimit: overflow, try lower: 3/0
[  103.241618][ T7268] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[  104.201726][ T7306] netlink: 'syz.0.406': attribute type 83 has an invalid length.
[  104.392289][ T7317] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[  104.487252][ T7321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.524923][ T7320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.705547][ T7334] __nla_validate_parse: 5 callbacks suppressed
[  130.705567][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.417'.
[  130.706558][ T7332] lo: Caught tx_queue_len zero misconfig
[  130.759807][ T7331] tipc: Started in network mode
[  130.765401][ T7331] tipc: Node identity ac14140f, cluster identity 4711
[  130.772539][ T7331] tipc: New replicast peer: 255.255.255.255
[  130.781652][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'.
[  130.785918][ T7331] tipc: Enabled bearer <udp:s>, priority 10
[  131.034955][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'.
[  131.084784][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'.
[  131.386488][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.443754][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.474625][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.508478][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.517852][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.527165][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'.
[  131.680835][ T7385] validate_nla: 1 callbacks suppressed
[  131.680851][ T7385] netlink: 'syz.3.429': attribute type 6 has an invalid length.
[  131.705570][ T7386] netlink: 'syz.3.429': attribute type 6 has an invalid length.
[  131.785253][ T7388] bridge0: Caught tx_queue_len zero misconfig
[  131.904553][ T1579] tipc: Node number set to 2886997007
[  132.109544][  T898] IPVS: starting estimator thread 0...
[  132.214528][ T7415] IPVS: using max 33 ests per chain, 79200 per kthread
[  132.744656][ T7453] netlink: 'syz.1.451': attribute type 12 has an invalid length.
[  132.781087][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.791543][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  133.040124][ T7473] FAULT_INJECTION: forcing a failure.
[  133.040124][ T7473] name failslab, interval 1, probability 0, space 0, times 0
[  133.085005][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) 
[  133.085030][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  133.085040][ T7473] Call Trace:
[  133.085048][ T7473]  <TASK>
[  133.085055][ T7473]  dump_stack_lvl+0x189/0x250
[  133.085083][ T7473]  ? __pfx____ratelimit+0x10/0x10
[  133.085105][ T7473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.085127][ T7473]  ? __pfx__printk+0x10/0x10
[  133.085150][ T7473]  ? __pfx___might_resched+0x10/0x10
[  133.085168][ T7473]  ? fs_reclaim_acquire+0x7d/0x100
[  133.085197][ T7473]  should_fail_ex+0x414/0x560
[  133.085226][ T7473]  should_failslab+0xa8/0x100
[  133.085245][ T7473]  kmem_cache_alloc_node_noprof+0x77/0x710
[  133.085267][ T7473]  ? __alloc_skb+0x112/0x2d0
[  133.085282][ T7473]  ? netlink_autobind+0xdb/0x300
[  133.085304][ T7473]  __alloc_skb+0x112/0x2d0
[  133.085322][ T7473]  netlink_sendmsg+0x5c6/0xb30
[  133.085345][ T7473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.085365][ T7473]  ? aa_sock_msg_perm+0xf1/0x1d0
[  133.085390][ T7473]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  133.085405][ T7473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  133.085421][ T7473]  __sock_sendmsg+0x21c/0x270
[  133.085444][ T7473]  ____sys_sendmsg+0x505/0x830
[  133.085466][ T7473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  133.085491][ T7473]  ? import_iovec+0x74/0xa0
[  133.085512][ T7473]  ___sys_sendmsg+0x21f/0x2a0
[  133.085533][ T7473]  ? __pfx____sys_sendmsg+0x10/0x10
[  133.085583][ T7473]  ? __fget_files+0x2a/0x420
[  133.085598][ T7473]  ? __fget_files+0x3a0/0x420
[  133.085624][ T7473]  __x64_sys_sendmsg+0x19b/0x260
[  133.085644][ T7473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  133.085669][ T7473]  ? __pfx_ksys_write+0x10/0x10
[  133.085694][ T7473]  ? do_syscall_64+0xbe/0xfa0
[  133.085723][ T7473]  do_syscall_64+0xfa/0xfa0
[  133.085743][ T7473]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.085764][ T7473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.085781][ T7473]  ? clear_bhb_loop+0x60/0xb0
[  133.085801][ T7473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.085814][ T7473] RIP: 0033:0x7f90af18f6c9
[  133.085828][ T7473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.085848][ T7473] RSP: 002b:00007f90b006d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  133.085866][ T7473] RAX: ffffffffffffffda RBX: 00007f90af3e5fa0 RCX: 00007f90af18f6c9
[  133.085878][ T7473] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004
[  133.085888][ T7473] RBP: 00007f90b006d090 R08: 0000000000000000 R09: 0000000000000000
[  133.085897][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.085905][ T7473] R13: 00007f90af3e6038 R14: 00007f90af3e5fa0 R15: 00007ffe05aaa388
[  133.085934][ T7473]  </TASK>
[  134.200808][ T7530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.397507][ T7536] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  134.415907][ T7536] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.542069][ T7543] syzkaller1: entered promiscuous mode
[  134.547706][ T7543] syzkaller1: entered allmulticast mode
[  134.556966][ T7545] netlink: 'syz.0.470': attribute type 29 has an invalid length.
[  134.566350][ T7552] netlink: 'syz.0.470': attribute type 29 has an invalid length.
[  134.610189][ T7539] netlink: 'syz.4.472': attribute type 1 has an invalid length.
[  135.072237][ T7570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.082220][ T7576] syzkaller0: entered promiscuous mode
[  135.086173][ T7580] netlink: 'syz.1.484': attribute type 9 has an invalid length.
[  135.089472][ T7576] syzkaller0: entered allmulticast mode
[  135.150132][ T7570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  135.210840][ T7570] tipc: Resetting bearer <eth:syzkaller0>
[  135.233545][ T7587] netlink: 'syz.3.485': attribute type 11 has an invalid length.
[  135.251119][ T7567] tipc: Resetting bearer <eth:syzkaller0>
[  135.306874][ T7567] tipc: Disabling bearer <eth:syzkaller0>
[  135.394156][ T7598] dvmrp6: entered allmulticast mode
[  135.506182][ T7607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.707688][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.788361][ T7622] __nla_validate_parse: 52 callbacks suppressed
[  135.788378][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'.
[  136.111009][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'.
[  136.140792][ T7643] trusted_key: syz.1.500 sent an empty control message without MSG_MORE.
[  136.150621][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.497'.
[  136.323251][ T7654] ip6t_rpfilter: unknown options
[  136.746924][ T7671] syzkaller0: entered promiscuous mode
[  136.753294][ T7671] syzkaller0: entered allmulticast mode
[  136.762819][ T7671] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.811481][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[  136.964098][ T7685] bond1: option mode: unable to set because the bond device has slaves
[  136.975286][ T7685] 8021q: VLANs not supported on bond1
[  137.271778][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  137.285045][ T7697] x_tables: unsorted underflow at hook 1
[  137.300505][ T7693] ip6tnl0: Caught tx_queue_len zero misconfig
[  137.312714][ T7693] bond0: Caught tx_queue_len zero misconfig
[  137.348809][ T7701] netlink: 'syz.0.519': attribute type 25 has an invalid length.
[  137.374843][ T7701] netlink: 9 bytes leftover after parsing attributes in process `syz.0.519'.
[  137.395177][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.516'.
[  137.410591][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  137.426534][ T7701] tipc: Resetting bearer <eth:vlan0>
[  137.487269][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'.
[  137.495772][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'.
[  137.714801][ T7720] netlink: 'syz.3.526': attribute type 9 has an invalid length.
[  137.763458][ T7730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.793822][ T7730] syzkaller0: entered promiscuous mode
[  137.821532][ T7730] syzkaller0: entered allmulticast mode
[  137.882855][ T7730] tipc: Resetting bearer <eth:syzkaller0>
[  138.337141][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.363332][ T7764] netlink: 'syz.2.536': attribute type 1 has an invalid length.
[  138.489326][ T7717] tipc: Resetting bearer <eth:syzkaller0>
[  138.504112][ T7717] tipc: Disabling bearer <eth:syzkaller0>
[  138.551710][ T7770] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  138.594918][ T7775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.620265][ T7775] syzkaller0: entered promiscuous mode
[  138.626854][ T7775] syzkaller0: entered allmulticast mode
[  138.647973][ T7775] tipc: Resetting bearer <eth:syzkaller0>
[  138.684648][ T7773] tipc: Resetting bearer <eth:syzkaller0>
[  138.725261][ T7773] tipc: Disabling bearer <eth:syzkaller0>
[  139.118112][ T7797] openvswitch: netlink: Unknown nsh attribute 0
[  139.144631][ T7797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.286573][ T7819] netlink: zone id is out of range
[  139.292888][ T7819] netlink: zone id is out of range
[  139.299543][ T7819] netlink: set zone limit has 8 unknown bytes
[  140.086810][ T7851] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  140.087763][ T7848] Cannot find add_set index 0 as target
[  140.326295][ T7861] netlink: 'syz.2.566': attribute type 5 has an invalid length.
[  140.392316][ T7873] sctp: [Deprecated]: syz.1.569 (pid 7873) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.392316][ T7873] Use struct sctp_sack_info instead
[  140.438068][ T7874] sctp: [Deprecated]: syz.1.569 (pid 7874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.438068][ T7874] Use struct sctp_sack_info instead
[  141.209439][ T7923] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[  141.240887][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.258316][ T7926] bond0: (slave rose0): Enslaving as an active interface with an up link
[  141.371822][ T7935] bond2: (slave bridge1): making interface the new active one
[  141.380647][ T7935] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  141.436624][ T7941] __nla_validate_parse: 8 callbacks suppressed
[  141.436641][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'.
[  141.525419][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'.
[  141.576966][ T7949] netlink: 248 bytes leftover after parsing attributes in process `syz.0.591'.
[  141.608207][ T7952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.087186][ T7968] netlink: 52 bytes leftover after parsing attributes in process `syz.0.597'.
[  142.109762][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.598'.
[  142.177863][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'.
[  142.530468][ T8000] : renamed from hsr0 (while UP)
[  142.743044][ T8008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  142.754990][ T8015] netlink: 'syz.0.608': attribute type 10 has an invalid length.
[  142.762750][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.608'.
[  142.816647][ T8008] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  142.864906][ T8008] gretap1: entered promiscuous mode
[  142.887258][ T8008] gretap1: entered allmulticast mode
[  142.939442][ T8015] team0: Port device geneve0 added
[  143.006000][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.613'.
[  143.042673][ T8030] x_tables: duplicate underflow at hook 3
[  143.078480][ T8030] netlink: 'syz.3.614': attribute type 1 has an invalid length.
[  143.153692][ T8030] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.453082][ T8054] Can't find ip_set type hash:ip,porv
[  147.334962][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  152.665795][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'.
[  152.707173][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[  152.749182][ T8064] netlink: 'syz.1.623': attribute type 14 has an invalid length.
[  152.793043][ T8064] netlink: 'syz.1.623': attribute type 13 has an invalid length.
[  152.813904][ T8075] x_tables: duplicate underflow at hook 3
[  153.084259][ T8085] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.628'.
[  194.211229][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.217765][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  211.527914][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[  211.641150][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  211.677323][ T8116] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[  211.737065][   T30] audit: type=1804 audit(1762855927.076:2): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.637" name="/newroot/148/cgroup.controllers" dev="tmpfs" ino=773 res=1 errno=0
[  211.813999][   T30] audit: type=1800 audit(1762855927.126:3): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.637" name="cgroup.controllers" dev="tmpfs" ino=773 res=0 errno=0
[  211.879713][ T8116] 8021q: adding VLAN 0 to HW filter on device bond1
[  211.921054][ T8136] netlink: 52 bytes leftover after parsing attributes in process `syz.3.639'.
[  211.937545][ T8116] bond1: (slave geneve3): making interface the new active one
[  211.938646][ T8137] netlink: 256 bytes leftover after parsing attributes in process `syz.4.642'.
[  211.965933][ T8116] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  211.998535][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.007807][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.052075][ T8133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.073423][ T8147] netlink: 'syz.0.644': attribute type 11 has an invalid length.
[  212.088474][ T8146] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[  212.117466][ T8133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.201388][ T8144] : entered promiscuous mode
[  212.293984][ T8160] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[  212.329385][ T8160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.648'.
[  212.427168][ T8154] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  212.442413][ T8154] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  212.453692][ T8154] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  212.505525][ T8155] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  212.518027][ T8155] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  212.576357][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'.
[  212.591629][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  212.602628][ T8175] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.651'.
[  212.749477][ T8183] netlink: 352 bytes leftover after parsing attributes in process `syz.4.652'.
[  212.839367][ T8193] netlink: 4208 bytes leftover after parsing attributes in process `syz.3.654'.
[  212.854589][ T8193] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  213.331255][ T8221] pim6reg1: entered promiscuous mode
[  213.350630][ T8221] pim6reg1: entered allmulticast mode
[  214.119809][ T8273] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  214.145883][ T8273] netlink: 'syz.2.679': attribute type 2 has an invalid length.
[  214.290285][ T8276] bond1: entered promiscuous mode
[  214.321714][ T8276] bond1: entered allmulticast mode
[  214.327810][ T8276] 8021q: adding VLAN 0 to HW filter on device bond1
[  214.343929][ T8284] netlink: 'syz.3.685': attribute type 2 has an invalid length.
[  215.224587][ T8339] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  215.328725][ T8339] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.377925][ T8350] bond4: entered allmulticast mode
[  215.389112][ T8355] netlink: 'syz.2.704': attribute type 13 has an invalid length.
[  215.397952][ T8355] netlink: 'syz.2.704': attribute type 17 has an invalid length.
[  215.479602][ T8355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.506504][ T8357] netlink: 'syz.2.704': attribute type 11 has an invalid length.
[  215.592244][ T8361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.616350][ T8363] syzkaller0: entered promiscuous mode
[  215.621837][ T8363] syzkaller0: entered allmulticast mode
[  215.629881][ T1108] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.643201][ T1108] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.663011][ T1108] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.684303][ T1108] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.755721][ T8363] tipc: Resetting bearer <eth:syzkaller0>
[  215.802620][ T8363] tipc: Disabling bearer <eth:syzkaller0>
[  216.422721][ T8400] bond1: Setting coupled_control to off (0)
[  216.758035][ T8420] Bluetooth: MGMT ver 1.23
[  216.996273][ T8428] bond2: ARP target 1.0.0.0 is already present
[  217.002584][ T8428] bond2: option arp_ip_target: invalid value (1)
[  217.016443][ T8428] bond2 (unregistering): Released all slaves
[  217.438325][ T8458] __nla_validate_parse: 16 callbacks suppressed
[  217.438341][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  217.533675][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'.
[  217.699395][ T8478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.723874][ T8478] syzkaller0: entered promiscuous mode
[  217.731447][ T8478] syzkaller0: entered allmulticast mode
[  217.769670][ T8478] sch_tbf: peakrate 263774208 is lower than or equals to rate 1073741832 !
[  217.799222][ T8478] tipc: Resetting bearer <eth:syzkaller0>
[  217.819849][ T8486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.748'.
[  217.846666][ T8477] tipc: Resetting bearer <eth:syzkaller0>
[  217.876599][ T8477] tipc: Disabling bearer <eth:syzkaller0>
[  218.139506][ T8496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.160688][ T8496] syzkaller0: entered promiscuous mode
[  218.192653][ T8496] syzkaller0: entered allmulticast mode
[  218.218373][ T8496] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  218.263464][ T8496] tipc: Resetting bearer <eth:syzkaller0>
[  218.274967][ T8496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.308325][ T8495] tipc: Resetting bearer <eth:syzkaller0>
[  218.328059][ T8495] tipc: Disabling bearer <eth:syzkaller0>
[  218.362907][ T8510] syzkaller1: entered promiscuous mode
[  218.378146][ T8510] syzkaller1: entered allmulticast mode
[  218.418259][ T8505] openvswitch: netlink: IP tunnel dst address not specified
[  218.509618][ T8517] delete_channel: no stack
[  218.803010][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.764'.
[  218.879180][ T8538] validate_nla: 3 callbacks suppressed
[  218.879196][ T8538] netlink: 'syz.0.765': attribute type 2 has an invalid length.
[  219.169778][ T8551] netlink: 'syz.2.773': attribute type 6 has an invalid length.
[  219.485643][ T8554] team0 (unregistering): Port device team_slave_0 removed
[  219.504808][ T8554] team0 (unregistering): Port device team_slave_1 removed
[  219.521638][ T8554] team0 (unregistering): Port device geneve0 removed
[  219.588326][ T8560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.663692][ T8556] tipc: Resetting bearer <eth:syzkaller0>
[  219.697229][ T8579] syzkaller0: entered promiscuous mode
[  219.712285][ T8579] syzkaller0: entered allmulticast mode
[  219.758824][ T8590] macsec1: entered promiscuous mode
[  219.787582][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'.
[  219.847680][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  219.859433][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[  219.959011][ T8550] tipc: Disabling bearer <eth:syzkaller0>
[  219.970708][ T8597] lo: entered allmulticast mode
[  219.975913][ T8601] netlink: 256 bytes leftover after parsing attributes in process `syz.4.784'.
[  219.986019][ T8597] lo: left allmulticast mode
[  220.232684][ T8609] netlink: 56 bytes leftover after parsing attributes in process `syz.2.787'.
[  220.334024][ T8609] bond2: (slave ip_vti0): Device is not bonding slave
[  220.351490][ T8609] bond2: option active_slave: invalid value (ip_vti0)
[  220.369946][ T8627] netlink: 'syz.4.789': attribute type 1 has an invalid length.
[  220.419999][ T8609] bond2 (unregistering): Released all slaves
[  220.592050][ T8627] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.600841][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.789'.
[  220.621974][ T8631] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.629212][ T8631] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  220.640173][ T8631] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  220.724248][ T8637] veth5: entered promiscuous mode
[  220.749813][ T8637] bond2: (slave veth5): Enslaving as an active interface with a down link
[  220.776847][ T8643] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.838784][ T8651] veth0: entered promiscuous mode
[  220.847234][ T8651] veth0: left promiscuous mode
[  220.861271][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'.
[  221.283427][ T8681] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  221.319480][ T8681] bond5 (unregistering): Released all slaves
[  221.448168][ T8700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.455852][ T8700] syzkaller0: entered promiscuous mode
[  221.461436][ T8700] syzkaller0: entered allmulticast mode
[  221.496244][ T8700] tipc: Resetting bearer <eth:syzkaller0>
[  221.516489][ T8698] tipc: Resetting bearer <eth:syzkaller0>
[  221.545113][ T8698] tipc: Disabling bearer <eth:syzkaller0>
[  221.731758][ T8715] netlink: 'syz.4.815': attribute type 14 has an invalid length.
[  221.758223][ T8714] netlink: 'syz.4.815': attribute type 14 has an invalid length.
[  221.774299][ T1151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.783000][ T8714] netlink: 'syz.4.815': attribute type 14 has an invalid length.
[  221.791117][ T1151] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.812323][ T1151] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.849938][ T1151] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.885217][ T8715] netlink: 'syz.4.815': attribute type 14 has an invalid length.
[  222.179899][ T8741] block nbd0: not configured, cannot reconfigure
[  222.483704][ T8764] __nla_validate_parse: 7 callbacks suppressed
[  222.483722][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'.
[  222.490515][ T8759] delete_channel: no stack
[  222.519734][ T8759] netlink: 124 bytes leftover after parsing attributes in process `syz.3.827'.
[  222.746266][ T8775] net veth1_virt_wifi .: renamed from virt_wifi0
[  223.338336][ T8810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.844'.
[  223.350514][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.843'.
[  223.545465][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'.
[  223.981465][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'.
[  224.066978][ T8841] vcan0 (unregistering): left allmulticast mode
[  224.252429][ T8859] syzkaller0: entered promiscuous mode
[  224.279297][ T8859] syzkaller0: entered allmulticast mode
[  224.472301][ T8873] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  224.653084][ T8885] netlink: 'syz.0.868': attribute type 16 has an invalid length.
[  224.661066][ T8885] netlink: 'syz.0.868': attribute type 17 has an invalid length.
[  224.709108][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.717660][ T8885] 8021q: adding VLAN 0 to HW filter on device team0
[  224.728762][ T8885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.755987][ T8888] netlink: 'syz.3.867': attribute type 9 has an invalid length.
[  224.763645][ T8888] netlink: 'syz.3.867': attribute type 11 has an invalid length.
[  224.771727][ T8888] netlink: 'syz.3.867': attribute type 12 has an invalid length.
[  224.791013][ T8888] netlink: 210060 bytes leftover after parsing attributes in process `syz.3.867'.
[  224.817590][ T8888] openvswitch: netlink: Message has 4 unknown bytes.
[  224.853867][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.870'.
[  224.885200][ T8893] netlink: 'syz.0.870': attribute type 7 has an invalid length.
[  224.892930][ T8893] netlink: 'syz.0.870': attribute type 8 has an invalid length.
[  224.955925][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'.
[  225.064021][ T8902] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  225.104743][ T8902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.873'.
[  225.277765][ T8916] syz_tun: left promiscuous mode
[  225.387770][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.403619][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.500804][ T8914] netlink: 'syz.1.875': attribute type 12 has an invalid length.
[  225.549907][ T1108] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.590919][ T1108] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.687266][ T1108] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.716631][ T1108] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.749487][ T1108] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.769260][ T1108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.789127][ T1108] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.819308][ T1108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.334002][ T8973] block nbd0: not configured, cannot reconfigure
[  226.342634][ T8973] netlink: 'syz.4.895': attribute type 12 has an invalid length.
[  226.359378][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.451552][ T8983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  226.458816][ T8983] IPv6: NLM_F_CREATE should be set when creating new route
[  226.466186][ T8983] IPv6: NLM_F_CREATE should be set when creating new route
[  226.473608][ T8983] IPv6: NLM_F_CREATE should be set when creating new route
[  227.159950][ T9039] xt_hashlimit: max too large, truncated to 1048576
[  227.751166][ T9053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  227.902562][ T9058] __nla_validate_parse: 8 callbacks suppressed
[  227.902579][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  227.948309][ T9063] xt_hashlimit: size too large, truncated to 1048576
[  228.207309][ T9086] netlink: 14 bytes leftover after parsing attributes in process `syz.3.921'.
[  228.486584][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'.
[  228.596711][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'.
[  228.622315][ T9115] nbd: must specify a size in bytes for the device
[  228.629490][ T9102] batadv_slave_0: entered promiscuous mode
[  228.892584][ T9129] 8021q: adding VLAN 0 to HW filter on device bond2
[  229.299424][ T9153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.942'.
[  229.312164][ T9153] ksmbd: Unknown IPC event: 3, ignore.
[  229.382833][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.943'.
[  229.386927][ T9157] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'.
[  229.413577][ T9157] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'.
[  229.426394][ T9157] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'.
[  229.436022][ T9157] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'.
[  229.751612][ T9175] validate_nla: 2 callbacks suppressed
[  229.751629][ T9175] netlink: 'syz.3.947': attribute type 13 has an invalid length.
[  229.765394][ T9175] netlink: 'syz.3.947': attribute type 27 has an invalid length.
[  229.814064][ T9175] sctp: [Deprecated]: syz.3.947 (pid 9175) Use of int in max_burst socket option.
[  229.814064][ T9175] Use struct sctp_assoc_value instead
[  229.861812][ T9186] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  229.900232][ T9186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  229.917969][ T9188] sch_fq: defrate 0 ignored.
[  230.042882][ T5916] IPVS: starting estimator thread 0...
[  230.134557][ T9202] IPVS: using max 29 ests per chain, 69600 per kthread
[  230.404376][ T9226] syzkaller1: entered promiscuous mode
[  230.410093][ T9226] syzkaller1: entered allmulticast mode
[  230.427539][ T9226] syzkaller1: left promiscuous mode
[  230.433613][ T9226] syzkaller1: left allmulticast mode
[  231.868133][ T9248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.876173][ T9249] syzkaller0: entered promiscuous mode
[  231.881734][ T9249] syzkaller0: entered allmulticast mode
[  231.915406][ T9249] tipc: Resetting bearer <eth:syzkaller0>
[  231.954132][ T9249] tipc: Disabling bearer <eth:syzkaller0>
[  232.575199][ T9319] netlink: 'syz.4.991': attribute type 2 has an invalid length.
[  232.683341][ T9323] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  232.723936][ T9323] 8021q: adding VLAN 0 to HW filter on device bond4
[  232.747212][ T9323] bond4: (slave geneve2): making interface the new active one
[  232.756647][ T9323] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  232.913912][ T9334] __nla_validate_parse: 41 callbacks suppressed
[  232.913927][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  233.175314][ T9345] bond3: option resend_igmp: invalid value (32767)
[  233.181857][ T9345] bond3: option resend_igmp: allowed values 0 - 255
[  233.195171][ T9345] bond3 (unregistering): Released all slaves
[  233.230154][ T9347] netlink: 'syz.4.1001': attribute type 30 has an invalid length.
[  233.449247][ T9357] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  233.459079][ T9357] bond2 (unregistering): Released all slaves
[  233.577794][ T9357] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  233.593913][ T9357] bond2 (unregistering): Released all slaves
[  233.731030][ T9357] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  233.735438][ T9374] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.764598][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1013'.
[  233.764866][ T9357] bond2 (unregistering): Released all slaves
[  233.800885][ T9383] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.867456][ T9377] xt_hashlimit: size too large, truncated to 1048576
[  233.977103][ T9357] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  234.038463][ T9357] bond2 (unregistering): Released all slaves
[  234.058821][ T9397] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1018'.
[  234.073253][ T9397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.261502][ T9357] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  234.273876][ T9357] bond2 (unregistering): Released all slaves
[  234.449840][ T9421] syzkaller0: entered promiscuous mode
[  234.465990][ T9421] syzkaller0: entered allmulticast mode
[  234.490125][ T9421] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  234.607951][ T9430] bond5: (slave ip6gretap1): making interface the new active one
[  234.620155][ T9430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  234.636286][ T9430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  234.644283][ T9430] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  234.653835][ T9421] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  234.661465][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'.
[  234.671024][ T9436] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1026'.
[  234.683601][ T9436] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1026'.
[  234.737166][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'.
[  234.783459][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'.
[  235.008381][ T9451] xt_CT: No such helper "snmp_trap"
[  235.017302][   T52] block nbd0: Receive control failed (result -32)
[  235.139827][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  235.213265][ T9464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1034'.
[  235.505716][ T9464] bond5: (slave gre0): Device is not bonding slave
[  235.512787][ T9464] bond5: option active_slave: invalid value (gre0)
[  235.527923][ T9464] bond5 (unregistering): Released all slaves
[  235.542870][ T9486] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  235.604059][ T9488] netlink: 'syz.1.1041': attribute type 5 has an invalid length.
[  235.695087][ T9488] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004
[  235.722943][ T9490] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004
[  235.817955][ T9501] netlink: 'syz.3.1042': attribute type 4 has an invalid length.
[  236.125267][ T9518] openvswitch: netlink: IP tunnel dst address not specified
[  236.262460][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  236.314378][ T9526] team0 (unregistering): Port device team_slave_0 removed
[  236.324766][ T9526] team0 (unregistering): Port device team_slave_1 removed
[  236.346143][ T9531] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  236.396380][ T9533] bond6 (unregistering): Released all slaves
[  236.583834][ T9544] erspan0: entered promiscuous mode
[  236.624592][ T9549] syzkaller0: entered promiscuous mode
[  236.645992][ T9549] syzkaller0: entered allmulticast mode
[  236.683922][ T9544] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  236.919802][ T9565] netlink: 'syz.2.1066': attribute type 10 has an invalid length.
[  237.071921][ T9565] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  237.138965][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.349638][ T9582] netlink: 'syz.2.1072': attribute type 2 has an invalid length.
[  237.708116][ T9612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.752332][ T9612] syzkaller0: entered promiscuous mode
[  237.784542][ T9612] syzkaller0: entered allmulticast mode
[  237.902777][ T9622] vlan2: entered promiscuous mode
[  237.908983][ T9622] geneve1: entered promiscuous mode
[  237.916169][ T9622] vlan2: entered allmulticast mode
[  237.921306][ T9622] geneve1: entered allmulticast mode
[  237.932778][ T9612] tipc: Resetting bearer <eth:syzkaller0>
[  237.963900][ T9629] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001
[  238.032577][ T9611] tipc: Resetting bearer <eth:syzkaller0>
[  238.089812][ T9611] tipc: Disabling bearer <eth:syzkaller0>
[  238.101643][ T9641] __nla_validate_parse: 13 callbacks suppressed
[  238.101658][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'.
[  238.131112][ T9638] nbd: couldn't find device at index 61440
[  238.272049][ T9647] tun0: tun_chr_ioctl cmd 1074025675
[  238.288622][ T9647] tun0: persist disabled
[  238.293313][ T9653] netlink: 'syz.0.1092': attribute type 64 has an invalid length.
[  238.301800][ T9653] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1092'.
[  238.341128][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'.
[  238.489738][ T9660] syzkaller0: entered promiscuous mode
[  238.495336][ T9660] syzkaller0: entered allmulticast mode
[  238.893178][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'.
[  238.943484][ T9684] vlan1: entered allmulticast mode
[  238.950042][ T9684] veth0_vlan: entered allmulticast mode
[  238.956646][ T9690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.979081][ T9665] syzkaller1: entered allmulticast mode
[  240.009777][ T9709] netlink: 'syz.2.1107': attribute type 15 has an invalid length.
[  240.051240][ T9710] macvtap1: entered promiscuous mode
[  240.056862][ T9710] vlan0: entered promiscuous mode
[  240.062402][ T9710] macvtap1: entered allmulticast mode
[  240.068288][ T9710] vlan0: entered allmulticast mode
[  240.073556][ T9710] veth0_vlan: entered allmulticast mode
[  240.178089][ T9711] macvtap2: entered promiscuous mode
[  240.183450][ T9711] macvtap2: entered allmulticast mode
[  240.221743][ T9721] netlink: 'syz.3.1110': attribute type 21 has an invalid length.
[  240.263919][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'.
[  240.294834][ T9721] netlink: 'syz.3.1110': attribute type 21 has an invalid length.
[  240.313229][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'.
[  240.411212][ T9734] netlink: 'syz.0.1113': attribute type 24 has an invalid length.
[  240.420754][ T9733] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.450971][ T9735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.613839][ T9745] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  240.648405][ T9748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1118'.
[  240.694148][ T9754] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  241.077348][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'.
[  241.087039][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'.
[  241.214214][ T9793] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1128'.
[  241.236732][ T9793] netlink: 'syz.1.1128': attribute type 2 has an invalid length.
[  241.252944][ T9793] �9: entered promiscuous mode
[  241.300171][ T9799] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  241.397371][ T9807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.405310][ T9807] syzkaller0: entered promiscuous mode
[  241.410851][ T9807] syzkaller0: entered allmulticast mode
[  241.419767][ T9806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.452884][ T9806] tipc: Resetting bearer <eth:syzkaller0>
[  241.462597][ T9804] tipc: Resetting bearer <eth:syzkaller0>
[  241.476161][ T9804] tipc: Disabling bearer <eth:syzkaller0>
[  241.478551][ T9810] xt_socket: unknown flags 0xe4
[  241.800725][ T9830] veth5: entered allmulticast mode
[  241.912527][ T9834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.921360][ T9834] syzkaller0: entered promiscuous mode
[  241.928532][ T9834] syzkaller0: entered allmulticast mode
[  241.938737][ T9834] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  241.995782][ T9834] tipc: Resetting bearer <eth:syzkaller0>
[  242.015003][ T9833] tipc: Resetting bearer <eth:syzkaller0>
[  242.038193][ T9833] tipc: Disabling bearer <eth:syzkaller0>
[  242.631922][ T9861] nbd: illegal input index 2958377
[  243.785216][ T9917] netlink: 'syz.4.1168': attribute type 1 has an invalid length.
[  243.968765][ T9928] __nla_validate_parse: 3 callbacks suppressed
[  243.968782][ T9928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1170'.
[  244.162578][ T9940] netlink: 'syz.4.1173': attribute type 28 has an invalid length.
[  244.189008][ T9940] netlink: 'syz.4.1173': attribute type 3 has an invalid length.
[  244.197769][ T9940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1173'.
[  244.520970][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'.
[  244.574880][ T9949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'.
[  245.334852][T10009] xt_ecn: cannot match TCP bits for non-tcp packets
[  245.354233][T10009] IPVS: set_ctl: invalid protocol: 2 172.20.20.15:20001
[  245.593144][T10024] IPVS: ip_vs_add_dest(): server weight less than zero
[  245.632002][T10030] netlink: 'syz.4.1199': attribute type 1 has an invalid length.
[  245.710044][T10034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1199'.
[  245.725205][T10030] bond4: entered promiscuous mode
[  245.730474][T10030] bond4: entered allmulticast mode
[  245.736820][T10030] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.811183][T10037] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  245.852836][T10037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1200'.
[  246.183663][T10064] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  246.198930][T10069] netlink: 'syz.2.1206': attribute type 9 has an invalid length.
[  246.226513][T10064] netlink: 'syz.1.1207': attribute type 9 has an invalid length.
[  246.244843][T10064] netlink: 'syz.1.1207': attribute type 6 has an invalid length.
[  246.438552][T10084] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  246.544124][T10084] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  246.556403][T10084] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  246.618584][T10089] gretap1: entered promiscuous mode
[  246.628048][T10089] bond6: (slave gretap1): making interface the new active one
[  246.641420][T10089] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  246.739290][T10084] macvlan0: entered promiscuous mode
[  246.744709][T10084] macvlan0: entered allmulticast mode
[  246.755271][T10084] bond6: entered promiscuous mode
[  246.772279][T10084] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  246.809300][T10100] xt_TPROXY: Can be used only with -p tcp or -p udp
[  246.821143][T10084] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  246.839231][T10084] bond6: left promiscuous mode
[  246.895423][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'.
[  246.931614][T10095] syzkaller0: entered promiscuous mode
[  246.938055][T10095] syzkaller0: entered allmulticast mode
[  247.037617][T10103] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96
[  247.069733][T10103] netlink: 'syz.0.1216': attribute type 13 has an invalid length.
[  247.181945][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'.
[  248.140873][T10120] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  248.374708][T10143] ieee802154 phy0 wpan0: encryption failed: -22
[  248.863995][T10172] netlink: 'syz.2.1237': attribute type 5 has an invalid length.
[  248.877274][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'.
[  249.016464][T10177] netlink: 'syz.2.1238': attribute type 1 has an invalid length.
[  249.070170][T10179] netlink: 'syz.4.1239': attribute type 8 has an invalid length.
[  249.225400][T10185] bond0: entered promiscuous mode
[  249.230525][T10185] bond_slave_0: entered promiscuous mode
[  249.236924][T10185] bond_slave_1: entered promiscuous mode
[  249.253055][T10185] batadv0: entered promiscuous mode
[  249.260001][T10185] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  249.271334][T10185] 8021q: adding VLAN 0 to HW filter on device hsr1
[  249.281871][T10185] bond0: left promiscuous mode
[  249.287976][T10185] bond_slave_0: left promiscuous mode
[  249.306187][T10185] bond_slave_1: left promiscuous mode
[  249.331978][T10185] batadv0: left promiscuous mode
[  249.714998][T10205] netlink: 'syz.2.1246': attribute type 21 has an invalid length.
[  250.212178][T10243] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1258'.
[  250.253363][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'.
[  250.567824][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'.
[  250.694762][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1264'.
[  250.836436][T10276] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.991283][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  251.012591][T10284] veth1_macvtap: left promiscuous mode
[  251.023814][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'.
[  251.175412][T10293] validate_nla: 1 callbacks suppressed
[  251.175428][T10293] netlink: 'syz.2.1274': attribute type 2 has an invalid length.
[  251.212428][T10293] netlink: 'syz.2.1274': attribute type 2 has an invalid length.
[  251.652200][T10320] Bluetooth: MGMT ver 1.23
[  251.719806][T10323] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  251.741610][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  251.762547][T10329] : entered promiscuous mode
[  251.770760][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  251.888753][T10332] syzkaller0: entered promiscuous mode
[  251.904767][T10332] syzkaller0: entered allmulticast mode
[  251.913723][T10338] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.1291'.
[  252.036730][T10337] netlink: 'syz.0.1289': attribute type 1 has an invalid length.
[  252.238379][T10361] syzkaller0: entered promiscuous mode
[  252.251028][T10361] syzkaller0: entered allmulticast mode
[  252.510525][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'.
[  252.549335][T10378] xt_recent: Unsupported userspace flags (000000b1)
[  252.557509][T10381] xt_recent: Unsupported userspace flags (000000b1)
[  252.578137][T10374] sock: sock_timestamping_bind_phc: sock not bind to device
[  252.841486][T10401] tipc: Enabling <eth:lo> not permitted
[  252.848174][T10401] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  253.185184][T10424] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  253.212869][T10424] bond7 (unregistering): Released all slaves
[  253.345762][T10430] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  253.353733][T10430] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  253.364952][T10430] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  253.381304][T10430] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  253.389449][T10430] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  253.398494][T10430] netlink: 'syz.1.1315': attribute type 2 has an invalid length.
[  253.419645][T10432] xt_TCPMSS: Only works on TCP SYN packets
[  253.641315][T10455] xfrm2: entered allmulticast mode
[  254.317051][T10479] veth0: Caught tx_queue_len zero misconfig
[  254.552519][T10494] bridge0: port 3(syz_tun) entered disabled state
[  254.612295][T10494] syz_tun (unregistering): left allmulticast mode
[  254.634505][T10494] syz_tun (unregistering): left promiscuous mode
[  254.640978][T10494] bridge0: port 3(syz_tun) entered disabled state
[  254.887090][T10503] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  255.149490][T10525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.652511][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.659269][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  256.185406][T10595] sctp: [Deprecated]: syz.2.1364 (pid 10595) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.185406][T10595] Use struct sctp_sack_info instead
[  256.240808][T10596] __nla_validate_parse: 18 callbacks suppressed
[  256.240826][T10596] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1363'.
[  256.266198][T10591] team0 (unregistering): Port device team_slave_0 removed
[  256.277595][T10591] team0 (unregistering): Port device team_slave_1 removed
[  256.289538][T10591] team0 (unregistering): Port device geneve0 removed
[  256.371716][T10600] validate_nla: 4 callbacks suppressed
[  256.371733][T10600] netlink: 'syz.2.1367': attribute type 1 has an invalid length.
[  256.405884][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'.
[  256.416028][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'.
[  256.491468][T10609] : renamed from hsr0 (while UP)
[  256.545840][T10614] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1370'.
[  256.665916][T10627] netlink: 'syz.3.1369': attribute type 15 has an invalid length.
[  256.673767][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'.
[  256.716354][T10627] netlink: 'syz.3.1369': attribute type 15 has an invalid length.
[  256.724206][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'.
[  257.609553][T10648] syzkaller0: entered promiscuous mode
[  257.618801][T10653] netlink: 'syz.4.1382': attribute type 9 has an invalid length.
[  257.621895][T10648] syzkaller0: entered allmulticast mode
[  257.659593][T10651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  257.680021][T10654] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1378'.
[  257.692817][T10654] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1378'.
[  257.740847][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1381'.
[  257.993542][T10674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.020646][T10674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1388'.
[  258.030352][T10675] pim6reg: entered allmulticast mode
[  258.063204][T10678] netlink: 'syz.3.1390': attribute type 5 has an invalid length.
[  258.181483][T10693] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  258.190007][T10693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.473181][T10711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.836298][T10721] 8021q: adding VLAN 0 to HW filter on device bond5
[  258.964213][T10730] lo: entered allmulticast mode
[  258.992300][T10729] lo: left allmulticast mode
[  259.164129][T10744] block nbd1: not configured, cannot reconfigure
[  259.434745][T10762] netlink: 'syz.3.1417': attribute type 1 has an invalid length.
[  259.523381][T10762] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  259.536549][T10762] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  259.572486][T10770] gretap1: entered promiscuous mode
[  259.582874][T10770] bond2: (slave gretap1): making interface the new active one
[  259.591967][T10770] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  259.622017][T10773] macvlan2: entered promiscuous mode
[  259.630862][T10773] macvlan2: entered allmulticast mode
[  259.637404][T10773] bond2: entered promiscuous mode
[  259.647145][T10773] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  259.665662][T10773] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  259.707712][T10773] bond2: left promiscuous mode
[  260.048600][T10807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.100411][T10803] SET target dimension over the limit!
[  260.449990][T10838] sctp: [Deprecated]: syz.3.1440 (pid 10838) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.449990][T10838] Use struct sctp_sack_info instead
[  260.468955][T10837] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  261.046990][T10854] netlink: 'syz.1.1444': attribute type 10 has an invalid length.
[  261.065457][T10854] team0: Port device geneve0 added
[  261.185042][T10856] tipc: Disabling bearer <eth:vlan0>
[  261.206040][T10856] vlan1 (unregistering): left allmulticast mode
[  261.212486][T10856] veth0_vlan (unregistering): left allmulticast mode
[  261.311847][T10868] __nla_validate_parse: 19 callbacks suppressed
[  261.311865][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'.
[  261.403677][T10870] netlink: 'syz.1.1449': attribute type 1 has an invalid length.
[  261.429161][T10872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.439354][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1451'.
[  261.448799][T10870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.538059][T10877] netlink: 'syz.0.1450': attribute type 12 has an invalid length.
[  261.546161][T10877] netlink: 'syz.0.1450': attribute type 29 has an invalid length.
[  261.553985][T10877] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1450'.
[  261.583891][T10877] netlink: 'syz.0.1450': attribute type 1 has an invalid length.
[  261.596244][T10881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  261.653788][T10891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1457'.
[  261.677525][T10887] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  261.826052][T10901] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1460'.
[  261.865646][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'.
[  262.267213][T10926] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  262.275361][T10926] netlink: 'syz.1.1468': attribute type 4 has an invalid length.
[  262.283200][T10926] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1468'.
[  262.524739][   T52] Bluetooth: hci4: command tx timeout
[  262.593177][T10946] nft_compat: unsupported protocol 0
[  262.600382][T10946] netlink: 'syz.2.1474': attribute type 1 has an invalid length.
[  262.641034][T10946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1474'.
[  262.650624][T10946] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1474'.
[  262.660130][T10946] netlink: 'syz.2.1474': attribute type 5 has an invalid length.
[  262.668864][T10946] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1474'.
[  263.033442][T10967] netlink: 'syz.2.1479': attribute type 10 has an invalid length.
[  263.044787][T10967] dummy0: entered promiscuous mode
[  263.057593][T10967] bridge0: port 3(dummy0) entered blocking state
[  263.068542][T10967] bridge0: port 3(dummy0) entered disabled state
[  263.076753][T10967] dummy0: entered allmulticast mode
[  263.087545][T10967] bridge0: port 3(dummy0) entered blocking state
[  263.094082][T10967] bridge0: port 3(dummy0) entered forwarding state
[  263.235976][T10980] mac80211_hwsim hwsim5 wlan0: Caught tx_queue_len zero misconfig
[  263.259141][T10981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.376938][T10989] netlink: 'syz.1.1489': attribute type 1 has an invalid length.
[  263.432105][T10995] gretap0: entered promiscuous mode
[  263.652248][T11022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.674337][T11022] syzkaller0: entered promiscuous mode
[  263.688380][T11022] syzkaller0: entered allmulticast mode
[  263.722531][T11022] tipc: Resetting bearer <eth:syzkaller0>
[  263.743810][T11020] tipc: Resetting bearer <eth:syzkaller0>
[  263.759892][T11020] tipc: Disabling bearer <eth:syzkaller0>
[  265.629636][T11054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.641491][T11054] syzkaller0: entered promiscuous mode
[  265.662225][T11054] syzkaller0: entered allmulticast mode
[  265.712695][T11053] tipc: Resetting bearer <eth:syzkaller0>
[  265.767034][T11053] tipc: Disabling bearer <eth:syzkaller0>
[  265.867505][T11075] bond6: (slave geneve3): making interface the new active one
[  265.889543][T11075] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  265.997272][T11085] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.025554][   T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  266.046276][   T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  266.047012][T11081] SET target dimension over the limit!
[  266.065467][   T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  266.090679][   T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  266.264039][T11096] bond7: Unable to set up delay as MII monitoring is disabled
[  266.295975][T11096] bond7 (unregistering): Released all slaves
[  266.346136][T11100] pimreg: entered allmulticast mode
[  266.347726][T11103] __nla_validate_parse: 12 callbacks suppressed
[  266.347740][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  266.474116][T11103] 8021q: adding VLAN 0 to HW filter on device bond4
[  266.588353][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.600624][T11116] bridge5: entered promiscuous mode
[  266.608008][T11116] bridge5: entered allmulticast mode
[  266.625360][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.662645][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.698123][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1523'.
[  266.831827][T11134] validate_nla: 2 callbacks suppressed
[  266.831843][T11134] netlink: 'syz.1.1532': attribute type 10 has an invalid length.
[  266.846387][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1532'.
[  266.975118][T11141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'.
[  267.142654][T11158] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1536'.
[  267.279646][T11162] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  267.313857][T11168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1540'.
[  267.418489][T11175] netlink: 'syz.1.1542': attribute type 83 has an invalid length.
[  267.461291][T11178] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  267.479371][T11181] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  267.633297][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'.
[  267.875033][T11214] raw_sendmsg: syz.3.1555 forgot to set AF_INET. Fix it!
[  268.241589][T11224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.251349][T11224] batadv_slave_0: left promiscuous mode
[  268.266043][T11224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.304802][T11224] gretap1: left promiscuous mode
[  268.310143][T11224] gretap1: left allmulticast mode
[  268.320668][T11224] veth5: left allmulticast mode
[  268.329642][ T2984] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.338308][ T2984] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  268.355629][ T2984] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.373242][ T2984] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  268.385813][T11236] veth0_macvtap: left promiscuous mode
[  268.422864][ T2984] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.431477][ T2984] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  268.440336][ T2984] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.449440][ T2984] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  268.458690][T11239] ip6tnl0: Caught tx_queue_len zero misconfig
[  268.760308][T11256] netlink: 'syz.4.1569': attribute type 21 has an invalid length.
[  269.193600][T11286] netlink: 'syz.4.1573': attribute type 3 has an invalid length.
[  269.326416][T11290] netlink: 'syz.3.1574': attribute type 5 has an invalid length.
[  269.352240][T11290] geneve2: entered promiscuous mode
[  269.367081][T11290] geneve2: entered allmulticast mode
[  269.376449][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  269.418126][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  269.451219][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  269.474174][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  269.661672][T11315] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  269.692857][T11315] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  269.789476][T11324] IPv6: NLM_F_REPLACE set, but no existing node found!
[  269.928388][T11334] netlink: 'syz.3.1587': attribute type 1 has an invalid length.
[  270.033156][T11339] bond3: (slave gretap2): making interface the new active one
[  270.042219][T11339] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  270.232072][T11334] 8021q: adding VLAN 0 to HW filter on device bond3
[  270.297143][T11365] netlink: 'syz.0.1596': attribute type 22 has an invalid length.
[  270.297772][T11370] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.361497][ T2984] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.361582][T11365] netlink: 'syz.0.1596': attribute type 22 has an invalid length.
[  270.373696][ T2984] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.415438][ T2984] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.470727][ T2984] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.498132][T11386] bridge5: entered promiscuous mode
[  270.506183][T11386] bridge5: entered allmulticast mode
[  270.643369][T11385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.659262][T11378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  271.229185][T11442] IPv6: NLM_F_REPLACE set, but no existing node found!
[  271.503046][T11465] xt_bpf: check failed: parse error
[  271.617411][T11475] __nla_validate_parse: 15 callbacks suppressed
[  271.617427][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1631'.
[  271.722469][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1633'.
[  271.739237][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'.
[  271.987268][T11500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1641'.
[  272.032165][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'.
[  272.087506][T11507] syzkaller0: entered promiscuous mode
[  272.093096][T11507] syzkaller0: entered allmulticast mode
[  272.268058][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'.
[  272.566812][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'.
[  272.712262][T11543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.775829][T11543] syzkaller0: entered promiscuous mode
[  272.781335][T11543] syzkaller0: entered allmulticast mode
[  272.792290][T11543] tipc: Resetting bearer <eth:syzkaller0>
[  272.812789][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'.
[  272.828051][T11550] dvmrp0: entered allmulticast mode
[  272.834699][T11543] pim6reg1: entered promiscuous mode
[  272.840402][T11543] pim6reg1: entered allmulticast mode
[  272.841914][T11548] validate_nla: 2 callbacks suppressed
[  272.841929][T11548] netlink: 'syz.4.1656': attribute type 3 has an invalid length.
[  272.939658][T11542] tipc: Resetting bearer <eth:syzkaller0>
[  273.993494][T11542] tipc: Disabling bearer <eth:syzkaller0>
[  274.002969][T11569] veth0_to_bridge: entered promiscuous mode
[  274.030489][T11569] veth0_to_bridge: left promiscuous mode
[  274.125299][T11587] xt_hashlimit: invalid interval
[  274.223365][T11597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1666'.
[  274.591710][T11628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'.
[  274.914492][T11646] syzkaller1: entered promiscuous mode
[  274.919999][T11646] syzkaller1: entered allmulticast mode
[  274.998354][T11650] syz_tun: entered allmulticast mode
[  275.065255][T11650] syz_tun (unregistering): left allmulticast mode
[  275.213096][T11659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.730431][T11705] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003
[  317.086897][ T1303] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.096279][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.102562][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  340.835563][T11712] __nla_validate_parse: 7 callbacks suppressed
[  340.835580][T11712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1701'.
[  341.086546][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'.
[  341.107468][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'.
[  341.112511][T11733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1706'.
[  341.167242][T11725] @: entered promiscuous mode
[  341.199231][T11725] @: left promiscuous mode
[  341.287041][T11735] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1707'.
[  341.315226][T11735] ksmbd: Unknown IPC event: 1, ignore.
[  341.373843][T11744] netlink: 'syz.3.1710': attribute type 1 has an invalid length.
[  341.404076][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'.
[  341.422608][T11747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.478457][T11744] bond4: entered promiscuous mode
[  341.504256][T11744] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.746230][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'.
[  341.765450][T11774] bridge_slave_1: left allmulticast mode
[  341.774534][T11774] bridge_slave_1: left promiscuous mode
[  341.780355][T11774] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.805805][T11774] bridge_slave_0: left allmulticast mode
[  341.811497][T11774] bridge_slave_0: left promiscuous mode
[  341.820909][T11774] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.873604][T11784] vxcan1: tx address claim with dlc 0
[  341.910742][T11783] netlink: 'syz.1.1721': attribute type 10 has an invalid length.
[  341.933024][T11783] veth0_virt_wifi: entered allmulticast mode
[  341.960834][   T52] block nbd1: Receive control failed (result -32)
[  341.985903][T11783] team0: Port device veth0_virt_wifi added
[  342.030070][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'.
[  342.040725][T11789] netlink: 'syz.4.1722': attribute type 20 has an invalid length.
[  342.049287][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1722'.
[  342.059362][T11789] netlink: 'syz.4.1722': attribute type 20 has an invalid length.
[  342.146362][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'.
[  342.166474][T11801] netlink: 'syz.4.1726': attribute type 4 has an invalid length.
[  342.694378][T11838] netlink: 'syz.1.1739': attribute type 3 has an invalid length.
[  342.944305][T11846] bond5: (slave bond_slave_1): Device is not our slave
[  342.954001][T11846] bond5: option active_slave: invalid value (bond_slave_1)
[  342.989348][T11846] bond5 (unregistering): Released all slaves
[  343.370625][T11878] Bluetooth: MGMT ver 1.23
[  344.260296][T11890] bridge0: port 3(vlan0) entered blocking state
[  344.267064][T11890] bridge0: port 3(vlan0) entered disabled state
[  344.275682][T11890] vlan0: entered allmulticast mode
[  344.284148][T11890] bridge0: entered allmulticast mode
[  344.291651][T11894] netlink: 'syz.2.1757': attribute type 4 has an invalid length.
[  344.305718][T11890] vlan0: left allmulticast mode
[  344.310704][T11890] bridge0: left allmulticast mode
[  344.335960][T11896] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  344.433055][T11899] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  345.132006][T11932] netlink: 'syz.1.1766': attribute type 1 has an invalid length.
[  345.349903][T11946] ip6gre0: Master is either lo or non-ether device
[  345.411990][T11956] netlink: 'syz.0.1776': attribute type 1 has an invalid length.
[  345.546879][T11961] Cannot find add_set index 2 as target
[  345.672059][T11974] syz_tun: entered promiscuous mode
[  345.680026][T11974] vlan3: entered promiscuous mode
[  345.759662][T11973] vxcan0: entered allmulticast mode
[  345.932593][T11990] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  345.956301][T11991] __nla_validate_parse: 15 callbacks suppressed
[  345.956319][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'.
[  346.001434][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'.
[  346.117448][T12004] netlink: 'syz.1.1792': attribute type 21 has an invalid length.
[  346.148992][T12004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1792'.
[  346.164168][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'.
[  346.214856][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'.
[  346.276497][T12018] netlink: 210060 bytes leftover after parsing attributes in process `syz.3.1796'.
[  346.311420][T12018] openvswitch: netlink: Message has 4 unknown bytes.
[  346.342169][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'.
[  346.394043][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'.
[  346.470112][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1801'.
[  346.506739][T12029] IPVS: length: 51 != 24
[  346.521218][T12024] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  346.663922][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.712770][T12046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1808'.
[  346.830857][T12054] x_tables: ip_tables: icmp match: only valid for protocol 1
[  347.065453][T12075] validate_nla: 3 callbacks suppressed
[  347.065471][T12075] netlink: 'syz.0.1816': attribute type 3 has an invalid length.
[  347.178955][T12084] lo: Caught tx_queue_len zero misconfig
[  347.186452][T12084] netlink: 'syz.0.1819': attribute type 5 has an invalid length.
[  347.283620][T12090] netlink: 'syz.4.1820': attribute type 14 has an invalid length.
[  347.293202][T12091] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002
[  347.297097][T12090] netlink: 'syz.4.1820': attribute type 14 has an invalid length.
[  347.328157][T12091] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  347.426134][T12100] netlink: 'syz.0.1823': attribute type 4 has an invalid length.
[  347.625514][T12111] netlink: 'syz.4.1828': attribute type 12 has an invalid length.
[  347.725831][T12111] bond6: option primary_reselect: invalid value (255)
[  347.739377][T12111] bond6 (unregistering): Released all slaves
[  347.780197][T12128] netlink: 'syz.1.1835': attribute type 16 has an invalid length.
[  348.106817][T12150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.139284][T12150] ip6gretap0: entered allmulticast mode
[  348.232682][T12164] tipc: Resetting bearer <eth:syzkaller0>
[  348.396057][T12149] tipc: Disabling bearer <eth:syzkaller0>
[  348.419138][T12172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.434911][T12172] syzkaller0: entered promiscuous mode
[  348.440551][T12172] syzkaller0: entered allmulticast mode
[  348.542315][T12172] tipc: Resetting bearer <eth:syzkaller0>
[  348.563310][T12181] sctp: [Deprecated]: syz.0.1850 (pid 12181) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.563310][T12181] Use struct sctp_sack_info instead
[  348.590500][T12171] tipc: Resetting bearer <eth:syzkaller0>
[  348.610866][T12171] tipc: Disabling bearer <eth:syzkaller0>
[  348.643637][T12183] bond5: ARP target 1.0.0.0 is already present
[  348.651431][T12183] bond5: option arp_ip_target: invalid value (1)
[  348.673607][T12183] bond5 (unregistering): Released all slaves
[  349.032690][T12218] sock: sock_timestamping_bind_phc: sock not bind to device
[  349.505904][T12257] lo: entered promiscuous mode
[  349.518106][T12257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.546446][T12261] netlink: 'syz.1.1874': attribute type 1 has an invalid length.
[  349.644663][T12266] netlink: 'syz.1.1876': attribute type 1 has an invalid length.
[  349.653870][T12270] netlink: 'syz.2.1878': attribute type 10 has an invalid length.
[  349.684821][T12266] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  349.700838][T12266] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  349.818799][T12266] macvlan0: entered promiscuous mode
[  349.836170][T12266] macvlan0: entered allmulticast mode
[  349.874005][T12266] bond7: entered promiscuous mode
[  349.890987][T12266] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  349.908258][T12266] bond7: left promiscuous mode
[  349.986475][T12284] bond6: invalid ARP target 0.0.0.0 specified for addition
[  349.994909][T12284] bond6: option arp_ip_target: invalid value (0)
[  350.004584][T12284] bond6 (unregistering): Released all slaves
[  350.032059][T12293] ip6gre1: entered promiscuous mode
[  350.037770][T12293] ip6gre1: entered allmulticast mode
[  350.048866][T12294] syzkaller0: entered promiscuous mode
[  350.054813][T12294] syzkaller0: entered allmulticast mode
[  350.220470][T12303] syzkaller0: entered promiscuous mode
[  350.232243][T12303] syzkaller0: entered allmulticast mode
[  350.850603][T12351] syzkaller1: entered promiscuous mode
[  350.858339][T12351] syzkaller1: entered allmulticast mode
[  350.990535][T12356] __nla_validate_parse: 23 callbacks suppressed
[  350.990553][T12356] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1904'.
[  351.021761][T12356] block nbd2: Unsupported socket: should be TCP or UNIX.
[  351.170100][T12366] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1906'.
[  351.189318][T12366] NCSI netlink: No device for ifindex 65584
[  351.448193][T12386] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  351.547967][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'.
[  352.249079][T12441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1928'.
[  352.259090][T12441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1928'.
[  352.277854][T12443] validate_nla: 5 callbacks suppressed
[  352.277870][T12443] netlink: 'syz.3.1929': attribute type 3 has an invalid length.
[  352.293525][T12443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1929'.
[  352.491365][T12457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'.
[  352.539122][T12461] netlink: 'syz.2.1935': attribute type 1 has an invalid length.
[  352.586408][T12459] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  352.598079][T12461] bond5: (slave geneve4): making interface the new active one
[  352.612635][T12461] bond5: (slave geneve4): Enslaving as an active interface with an up link
[  352.638472][   T49] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  352.656425][   T49] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  352.702679][   T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  352.734853][ T2984] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  353.057953][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'.
[  353.086201][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'.
[  353.092004][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'.
[  353.889030][T12540] bond7 (unregistering): Released all slaves
[  354.059770][T12564] macvtap1: entered allmulticast mode
[  354.078429][T12567] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  354.089280][T12564] veth0_macvtap: entered allmulticast mode
[  354.090816][T12570] netlink: 'syz.2.1959': attribute type 9 has an invalid length.
[  354.312873][T12593] sctp: [Deprecated]: syz.0.1965 (pid 12593) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.312873][T12593] Use struct sctp_sack_info instead
[  354.536658][T12602] dvmrp0: entered allmulticast mode
[  354.561814][T12606] 
[  354.564176][T12606] ======================================================
[  354.571300][T12606] WARNING: possible circular locking dependency detected
[  354.578331][T12606] syzkaller #0 Not tainted
[  354.582743][T12606] ------------------------------------------------------
[  354.589745][T12606] syz.1.1968/12606 is trying to acquire lock:
[  354.595794][T12606] ffff8880739b4218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50
[  354.608074][T12606] 
[  354.608074][T12606] but task is already holding lock:
[  354.615514][T12606] ffff88807cd93958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  354.625439][T12606] 
[  354.625439][T12606] which lock already depends on the new lock.
[  354.625439][T12606] 
[  354.635828][T12606] 
[  354.635828][T12606] the existing dependency chain (in reverse order) is:
[  354.644825][T12606] 
[  354.644825][T12606] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  354.653070][T12606]        lock_acquire+0x120/0x360
[  354.658093][T12606]        _raw_spin_lock+0x2e/0x40
[  354.663112][T12606]        sch_direct_xmit+0x153/0x4b0
[  354.668383][T12606]        __dev_queue_xmit+0x1857/0x3b50
[  354.673917][T12606]        ip6_finish_output2+0xfb3/0x1480
[  354.679535][T12606]        ip6_output+0x340/0x550
[  354.684370][T12606]        NF_HOOK+0x9e/0x380
[  354.688873][T12606]        mld_sendpack+0x8d4/0xe60
[  354.693882][T12606]        mld_ifc_work+0x83e/0xd60
[  354.698895][T12606]        process_scheduled_works+0xae1/0x17b0
[  354.704952][T12606]        worker_thread+0x8a0/0xda0
[  354.710045][T12606]        kthread+0x711/0x8a0
[  354.714616][T12606]        ret_from_fork+0x4bc/0x870
[  354.719706][T12606]        ret_from_fork_asm+0x1a/0x30
[  354.724970][T12606] 
[  354.724970][T12606] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}:
[  354.735303][T12606]        validate_chain+0xb9b/0x2140
[  354.740617][T12606]        __lock_acquire+0xab9/0xd20
[  354.745802][T12606]        lock_acquire+0x120/0x360
[  354.750815][T12606]        _raw_spin_lock+0x2e/0x40
[  354.755822][T12606]        __dev_queue_xmit+0x22b7/0x3b50
[  354.761352][T12606]        ip6_finish_output2+0xfb3/0x1480
[  354.766973][T12606]        ip6_output+0x340/0x550
[  354.771807][T12606]        ndisc_send_skb+0xbce/0x1510
[  354.777075][T12606]        ndisc_solicit+0x444/0x610
[  354.782170][T12606]        __neigh_event_send+0xf70/0x1560
[  354.787787][T12606]        neigh_resolve_output+0x198/0x750
[  354.793500][T12606]        ip6_finish_output2+0xfb3/0x1480
[  354.799130][T12606]        ip6_output+0x340/0x550
[  354.804051][T12606]        ip6_send_skb+0x1d5/0x390
[  354.809066][T12606]        icmp6_send+0x12c6/0x1940
[  354.814107][T12606]        ip6_link_failure+0x3b/0x4c0
[  354.819380][T12606]        ip_tunnel_xmit+0x175b/0x2390
[  354.824739][T12606]        __gre_xmit+0x19a/0x240
[  354.829575][T12606]        erspan_xmit+0xa04/0x1220
[  354.834586][T12606]        dev_hard_start_xmit+0x2d7/0x830
[  354.840205][T12606]        sch_direct_xmit+0x241/0x4b0
[  354.845482][T12606]        __qdisc_run+0xb16/0x15f0
[  354.850492][T12606]        __dev_queue_xmit+0x1056/0x3b50
[  354.856541][T12606]        ip6_finish_output2+0xfb3/0x1480
[  354.862217][T12606]        ip6_output+0x340/0x550
[  354.867057][T12606]        ip6_mr_output+0x4e9/0x1100
[  354.872244][T12606]        rawv6_send_hdrinc+0xe16/0x17a0
[  354.877778][T12606]        rawv6_sendmsg+0x12ee/0x1830
[  354.883066][T12606]        __sock_sendmsg+0x19c/0x270
[  354.888260][T12606]        ____sys_sendmsg+0x505/0x830
[  354.893549][T12606]        ___sys_sendmsg+0x21f/0x2a0
[  354.898733][T12606]        __x64_sys_sendmsg+0x19b/0x260
[  354.904174][T12606]        do_syscall_64+0xfa/0xfa0
[  354.909184][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.915584][T12606] 
[  354.915584][T12606] other info that might help us debug this:
[  354.915584][T12606] 
[  354.925790][T12606]  Possible unsafe locking scenario:
[  354.925790][T12606] 
[  354.933216][T12606]        CPU0                    CPU1
[  354.938559][T12606]        ----                    ----
[  354.943917][T12606]   lock(&qdisc_xmit_lock_key#4);
[  354.948941][T12606]                                lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  354.958568][T12606]                                lock(&qdisc_xmit_lock_key#4);
[  354.966104][T12606]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3);
[  354.973209][T12606] 
[  354.973209][T12606]  *** DEADLOCK ***
[  354.973209][T12606] 
[  354.981333][T12606] 12 locks held by syz.1.1968/12606:
[  354.986597][T12606]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0
[  354.996347][T12606]  #1: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100
[  355.005731][T12606]  #2: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  355.014767][T12606]  #3: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  355.024674][T12606]  #4: ffff88807cd93958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  355.034933][T12606]  #5: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940
[  355.044094][T12606]  #6: ffff88802f6f8a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940
[  355.053472][T12606]  #7: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390
[  355.062767][T12606]  #8: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  355.071801][T12606]  #9: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510
[  355.081267][T12606]  #10: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550
[  355.090394][T12606]  #11: ffffffff8df3d6c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  355.100575][T12606] 
[  355.100575][T12606] stack backtrace:
[  355.106465][T12606] CPU: 1 UID: 0 PID: 12606 Comm: syz.1.1968 Not tainted syzkaller #0 PREEMPT(full) 
[  355.106483][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  355.106496][T12606] Call Trace:
[  355.106502][T12606]  <TASK>
[  355.106509][T12606]  dump_stack_lvl+0x189/0x250
[  355.106532][T12606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.106549][T12606]  ? __pfx__printk+0x10/0x10
[  355.106564][T12606]  ? print_lock_name+0xde/0x100
[  355.106579][T12606]  print_circular_bug+0x2ee/0x310
[  355.106596][T12606]  check_noncircular+0x134/0x160
[  355.106615][T12606]  validate_chain+0xb9b/0x2140
[  355.106631][T12606]  ? lockdep_unlock+0x89/0x120
[  355.106655][T12606]  __lock_acquire+0xab9/0xd20
[  355.106670][T12606]  ? __dev_queue_xmit+0x22b7/0x3b50
[  355.106686][T12606]  lock_acquire+0x120/0x360
[  355.106697][T12606]  ? __dev_queue_xmit+0x22b7/0x3b50
[  355.106713][T12606]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  355.106730][T12606]  ? check_noncircular+0xe0/0x160
[  355.106747][T12606]  _raw_spin_lock+0x2e/0x40
[  355.106764][T12606]  ? __dev_queue_xmit+0x22b7/0x3b50
[  355.106778][T12606]  __dev_queue_xmit+0x22b7/0x3b50
[  355.106797][T12606]  ? __dev_queue_xmit+0x27b/0x3b50
[  355.106815][T12606]  ? neigh_resolve_output+0x438/0x750
[  355.106833][T12606]  ? __pfx___dev_queue_xmit+0x10/0x10
[  355.106848][T12606]  ? read_seqbegin+0x122/0x250
[  355.106865][T12606]  ? neigh_resolve_output+0x438/0x750
[  355.106882][T12606]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.106899][T12606]  ? read_seqbegin+0x1ac/0x250
[  355.106916][T12606]  ? __pfx_read_seqbegin+0x10/0x10
[  355.106933][T12606]  ? __local_bh_enable_ip+0x12d/0x1c0
[  355.106947][T12606]  ? eth_header+0x11b/0x200
[  355.106961][T12606]  ? __asan_memcpy+0x40/0x70
[  355.106991][T12606]  ip6_finish_output2+0xfb3/0x1480
[  355.107016][T12606]  ? __pfx_ip6_finish_output2+0x10/0x10
[  355.107034][T12606]  ? ip6_mtu+0x7d/0x490
[  355.107050][T12606]  ? ip6_mtu+0x38c/0x490
[  355.107066][T12606]  ? ip6_finish_output+0x2ef/0x4e0
[  355.107083][T12606]  ? ip6_output+0x126/0x550
[  355.107098][T12606]  ip6_output+0x340/0x550
[  355.107116][T12606]  ndisc_send_skb+0xbce/0x1510
[  355.107131][T12606]  ? ndisc_send_skb+0x1e4/0x1510
[  355.107147][T12606]  ? __pfx_ndisc_send_skb+0x10/0x10
[  355.107162][T12606]  ? __pfx_dst_output+0x10/0x10
[  355.107184][T12606]  ndisc_solicit+0x444/0x610
[  355.107201][T12606]  ? __pfx_ndisc_solicit+0x10/0x10
[  355.107218][T12606]  ? __neigh_event_send+0xf08/0x1560
[  355.107238][T12606]  ? __pfx_ndisc_solicit+0x10/0x10
[  355.107252][T12606]  __neigh_event_send+0xf70/0x1560
[  355.107272][T12606]  ? ___neigh_create+0x1c83/0x2260
[  355.107290][T12606]  neigh_resolve_output+0x198/0x750
[  355.107314][T12606]  ip6_finish_output2+0xfb3/0x1480
[  355.107336][T12606]  ? __pfx_ip6_finish_output2+0x10/0x10
[  355.107355][T12606]  ? ip6_mtu+0x7d/0x490
[  355.107370][T12606]  ? ip6_mtu+0x38c/0x490
[  355.107386][T12606]  ? ip6_finish_output+0x2ef/0x4e0
[  355.107402][T12606]  ? ip6_output+0x126/0x550
[  355.107418][T12606]  ip6_output+0x340/0x550
[  355.107434][T12606]  ? ip6_send_skb+0x10f/0x390
[  355.107452][T12606]  ip6_send_skb+0x1d5/0x390
[  355.107471][T12606]  icmp6_send+0x12c6/0x1940
[  355.107485][T12606]  ? icmp6_send+0x1e9/0x1940
[  355.107504][T12606]  ? __pfx_icmp6_send+0x10/0x10
[  355.107517][T12606]  ? __lock_acquire+0xab9/0xd20
[  355.107536][T12606]  ? ip6_neigh_lookup+0x14e/0x470
[  355.107552][T12606]  ? ip6_neigh_lookup+0x14e/0x470
[  355.107565][T12606]  ? ip6_neigh_lookup+0x397/0x470
[  355.107578][T12606]  ? ip6_neigh_lookup+0x14e/0x470
[  355.107592][T12606]  ? __pfx_ip6_neigh_lookup+0x10/0x10
[  355.107608][T12606]  ip6_link_failure+0x3b/0x4c0
[  355.107624][T12606]  ip_tunnel_xmit+0x175b/0x2390
[  355.107644][T12606]  ? ip_tunnel_xmit+0x80/0x2390
[  355.107667][T12606]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  355.107684][T12606]  ? gre_build_header+0x31c/0xa40
[  355.107704][T12606]  ? __pfx_gre_build_header+0x10/0x10
[  355.107721][T12606]  ? lockdep_unlock+0x89/0x120
[  355.107739][T12606]  ? __pfx_skb_network_protocol+0x10/0x10
[  355.107755][T12606]  __gre_xmit+0x19a/0x240
[  355.107772][T12606]  ? __pfx___gre_xmit+0x10/0x10
[  355.107788][T12606]  ? __asan_memset+0x22/0x50
[  355.107803][T12606]  ? erspan_build_header+0x19c/0x370
[  355.107822][T12606]  erspan_xmit+0xa04/0x1220
[  355.107844][T12606]  ? __pfx_erspan_xmit+0x10/0x10
[  355.107860][T12606]  ? __lock_acquire+0xab9/0xd20
[  355.107876][T12606]  dev_hard_start_xmit+0x2d7/0x830
[  355.107896][T12606]  sch_direct_xmit+0x241/0x4b0
[  355.107915][T12606]  ? __pfx_sch_direct_xmit+0x10/0x10
[  355.107932][T12606]  ? tbf_dequeue+0x814/0xcc0
[  355.107953][T12606]  __qdisc_run+0xb16/0x15f0
[  355.107971][T12606]  ? tbf_enqueue+0x1d1/0x700
[  355.107994][T12606]  __dev_queue_xmit+0x1056/0x3b50
[  355.108009][T12606]  ? register_lock_class+0x51/0x320
[  355.108024][T12606]  ? __dev_queue_xmit+0x27b/0x3b50
[  355.108044][T12606]  ? __pfx___dev_queue_xmit+0x10/0x10
[  355.108059][T12606]  ? read_seqbegin+0x122/0x250
[  355.108075][T12606]  ? neigh_resolve_output+0x438/0x750
[  355.108092][T12606]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.108109][T12606]  ? read_seqbegin+0x1ac/0x250
[  355.108126][T12606]  ? __pfx_read_seqbegin+0x10/0x10
[  355.108142][T12606]  ? __local_bh_enable_ip+0x12d/0x1c0
[  355.108156][T12606]  ? eth_header+0x11b/0x200
[  355.108169][T12606]  ? __asan_memcpy+0x40/0x70
[  355.108193][T12606]  ip6_finish_output2+0xfb3/0x1480
[  355.108216][T12606]  ? __pfx_ip6_finish_output2+0x10/0x10
[  355.108236][T12606]  ? ip6_mtu+0x7d/0x490
[  355.108252][T12606]  ? ip6_mtu+0x38c/0x490
[  355.108268][T12606]  ? ip6_finish_output+0x2ef/0x4e0
[  355.108284][T12606]  ? ip6_output+0x126/0x550
[  355.108300][T12606]  ip6_output+0x340/0x550
[  355.108318][T12606]  ip6_mr_output+0x4e9/0x1100
[  355.108340][T12606]  ? ip6_mr_output+0x1ca/0x1100
[  355.108359][T12606]  ? __pfx_ip6_mr_output+0x10/0x10
[  355.108380][T12606]  ? ip6t_do_table+0x1db/0x1560
[  355.108399][T12606]  ? __pfx_ip6t_do_table+0x10/0x10
[  355.108421][T12606]  ? skb_dst+0x4f/0xd0
[  355.108434][T12606]  ? dst_output+0x17b/0x1c0
[  355.108446][T12606]  ? rawv6_send_hdrinc+0xc9f/0x17a0
[  355.108460][T12606]  rawv6_send_hdrinc+0xe16/0x17a0
[  355.108479][T12606]  ? __pfx_rawv6_send_hdrinc+0x10/0x10
[  355.108492][T12606]  ? txopt_get+0x335/0x3f0
[  355.108505][T12606]  ? __pfx_dst_output+0x10/0x10
[  355.108517][T12606]  ? __pfx_txopt_get+0x10/0x10
[  355.108533][T12606]  rawv6_sendmsg+0x12ee/0x1830
[  355.108552][T12606]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  355.108573][T12606]  ? __pfx_aa_sk_perm+0x10/0x10
[  355.108592][T12606]  ? sock_rps_record_flow+0x19/0x410
[  355.108611][T12606]  ? inet_sendmsg+0x2f4/0x370
[  355.108622][T12606]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.108637][T12606]  __sock_sendmsg+0x19c/0x270
[  355.108655][T12606]  ____sys_sendmsg+0x505/0x830
[  355.108671][T12606]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.108688][T12606]  ? import_iovec+0x74/0xa0
[  355.108704][T12606]  ___sys_sendmsg+0x21f/0x2a0
[  355.108719][T12606]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.108744][T12606]  ? __fget_files+0x2a/0x420
[  355.108756][T12606]  ? __fget_files+0x3a0/0x420
[  355.108772][T12606]  __x64_sys_sendmsg+0x19b/0x260
[  355.108786][T12606]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.108803][T12606]  ? do_user_addr_fault+0xc85/0x1380
[  355.108819][T12606]  ? do_syscall_64+0xbe/0xfa0
[  355.108837][T12606]  do_syscall_64+0xfa/0xfa0
[  355.108854][T12606]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.108871][T12606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.108885][T12606]  ? clear_bhb_loop+0x60/0xb0
[  355.108900][T12606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.108913][T12606] RIP: 0033:0x7fef1378f6c9
[  355.108935][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.108947][T12606] RSP: 002b:00007fef145cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.108963][T12606] RAX: ffffffffffffffda RBX: 00007fef139e6090 RCX: 00007fef1378f6c9
[  355.108973][T12606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  355.108987][T12606] RBP: 00007fef13811f91 R08: 0000000000000000 R09: 0000000000000000
[  355.108995][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.109004][T12606] R13: 00007fef139e6128 R14: 00007fef139e6090 R15: 00007fffa90ffa28
[  355.109020][T12606]  </TASK>
[  355.899556][T12604] macvtap2: entered promiscuous mode
[  355.905818][T12604] vlan0: entered promiscuous mode
[  355.911237][T12604] macvtap2: entered allmulticast mode
[  355.916647][T12604] vlan0: entered allmulticast mode
[  355.921823][T12604] veth0_vlan: entered allmulticast mode
[  355.928080][T12602] veth0: entered promiscuous mode
[  355.947594][T12604] ppp0: PPP: outbound frame not passed
[  355.957475][T12601] veth0: left promiscuous mode
[  355.958661][T12611] xt_CT: You must specify a L4 protocol and not use inversions on it
[  356.018270][T12606] syz.1.1968 (12606) used greatest stack depth: 17928 bytes left
[  356.125855][   T52] Bluetooth: hci3: command tx timeout