last executing test programs:

19m21.265256626s ago: executing program 0 (id=2183):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="230000000818000002000000ffff000001"], 0x48)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000700)=""/50, 0x32}], 0x2}}], 0x1, 0x40, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb08004500b000119078000000000000000000004e20009c9078ffff7672000000007b4b9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe090000e2acc68e6190fa40e8ae88443b56"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000002100)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x9b8b71d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000002380)=0x8000, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

19m19.302019539s ago: executing program 0 (id=2188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x38}}, 0x480d0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052)

19m18.401947616s ago: executing program 0 (id=2193):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) (async)
r3 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f00000000c0)="ff02040000b5ffffffffffffffff2c2be82db1af", 0x14) (async)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private2, 0xae3c}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) (async)
sendmmsg$inet(r4, &(0x7f0000003940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000040)="eb", 0x1}], 0x1}, 0xff0f}], 0x1, 0x200080fc) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044001}], 0x1, 0x4040800) (async)
bind$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/154, 0xd000, 0x1000, 0xffffffff, 0x3}, 0x20) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async)
write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0x1d, 0x65, 0x0, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "3297e3ba0fa8a2e71b"}}, 0x2b)

19m17.63530409s ago: executing program 0 (id=2195):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)
connect$netlink(r1, &(0x7f0000000180), 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x14, &(0x7f0000000900)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket$inet6(0xa, 0x1, 0x6)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)

19m15.814613588s ago: executing program 0 (id=2204):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r2, 0x0, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000000000000611138000000000054000000000000009500000000000000bf4ab41f57177a09badf2d609444dce0a96da39d4a798136691a3acad1a53ca6ce540a262ed4d483bc474439e647a1fe8030f2b3decef1295ff730339c3b5ca0adc5f22a7b86087fcde36b3b7cb28db72bad9afec5d35b5e41055d58aa2e7cc3a7b823d0e6b013fb8d78d2bb25a3487045b6cc75954d55d645146a97a9b3467e370ad955419fe2164b973301d9ddc38b6281c82a230dc1f9e00e95f5874e6964663a4b40c9c46b665868aa5b296c1e5f80a8059d"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)
connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0, 0x3a})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r11 = socket(0x11, 0x3, 0x1)
setsockopt(r11, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r13=>0x0})
sendmsg(r11, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r13, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}], 0x1}, 0x40011)
r14 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r14, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7)

19m14.370348519s ago: executing program 0 (id=2210):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x7a05, 0x1700)
write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0)
sendfile(r1, r0, 0x0, 0x10000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r2, 0x0, 0x0, 0x4008001, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
sendfile(r2, r0, 0x0, 0x9)

18m59.229093101s ago: executing program 32 (id=2210):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x7a05, 0x1700)
write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0)
sendfile(r1, r0, 0x0, 0x10000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r2, 0x0, 0x0, 0x4008001, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x9, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
sendfile(r2, r0, 0x0, 0x9)

11.445030872s ago: executing program 1 (id=9147):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x8a6e1000)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @random="2d12f4153c03", {0x8, 0x7}}, 0x10, 0x4, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x5}, {0x48, 0x1}, {0x60}, {0x60, 0x1}, {0x48}, {}, {0x1}, {0x18}]}, @void, [{0xdd, 0xff, "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"}, {0xdd, 0x1f, "1630a82e2b25a7ccbcd56f105c4a98b89ab3065917f31b61e667a46effe35a"}, {0xdd, 0xe7, "3039c7b6dead73de56ebc1a27b33793a0486d4631f72263e0c22e56108c44022630ba51a77f775238b8c9fc5eb5f3dc92483c8fca7c970399e1b77d1f23582e874384f87f8e4db149f71ab4462b9a9f690d8b60005e372fb36d36a8f7ce6b50e56411496ea33255fb64c02d22c83241cc252b788b241ef5035862b165da454a85dd778844217495ccc2d857faf42b89f0caf9390c9969bf02c000de1ea1f598e3833a0b6da4e577aeee7304d16bbe437d61ca076183470be31aeab6ccb52b2ee2c5076cad0c3503bd4f11e62045a7c687213bee157e8f143b6ed7c2cc0e549116a980308c36a8c"}, {0xdd, 0xb4, "2ee3643fdea5588e7af7a48d3d16bc37cd895c8ccdd7b77c814c25c9b64acbd4ca3fa65381a40f33b6ff4bc18fdea9eb41ff3a92c884ba14890451b7df8d4224f076cdf3e569a7d81c16eb86196370c2b5ef21761c7bc7edb75bf3e02442d4bdd9824caea2f203cca24564584577eac003dd5279f8fb1d91ac4d3c76838e3c45956c361cea1c5393941d7720c40b77e18836ac6db54c0701e03c31839fd627099d7ce9d2712e758df504d3bb509df2fcd2d5e077"}]}, 0x2ef)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
close(r0)

10.512105235s ago: executing program 1 (id=9154):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x218, 0x10, 0x1, 0x0, 0xfffffffc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {@in6=@private0, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0xffffffffffffff81}, {0x800}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in6=@private2, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in=@local, @in=@multicast2, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0xc0, 0x80, 0x2b, r1, r2}, {0xffffffff, 0x1000, 0x915, 0x0, 0xc, 0x401, 0x5, 0x80}, {0xffffffffffffdb2b, 0x0, 0x0, 0x30000000}, 0x401, 0x6e6bbf, 0x4272014b7f8d5435, 0x1, 0x3, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x218}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x2000000}, 0xc)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000)

10.218914055s ago: executing program 1 (id=9157):
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)

9.771734161s ago: executing program 1 (id=9160):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000080)={0x7, 0xfff, 0x4, 0xfffff47a, 0x6})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x6b, 0x5, 0xffffff80, 0x4)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000040)={'nicvf0\x00', 0x7ff})
sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

9.30256184s ago: executing program 1 (id=9161):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x10084, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0xc040)

9.10968844s ago: executing program 1 (id=9162):
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) (async)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b0605002400000020001280080001007369740014000280060008003e0000000500090021"], 0x40}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001800010900000000fcbcdbdf2502180000fe0300090000000008020100ac1414000800060013000000"], 0x2c}}, 0x8000000) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @printk={@u}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r9}, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r7, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x30, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a"}}, 0xfdef)

7.319031213s ago: executing program 5 (id=9174):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000010a016124aa9f00000000000a0000010900020073797a310000ebb74bb0010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x50}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @random="30cebbab0924", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001000", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, 'G\a\x00', 0x0, 0x3c, 0x0, @empty, @private2, [@srh={0x2f, 0x0, 0x4, 0x0, 0x44}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0xfff3}, {0xfff1, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

5.707005997s ago: executing program 5 (id=9180):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000193509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

5.534322839s ago: executing program 5 (id=9182):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x10084, @loopback={0xff000000}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0xc040)

5.412360375s ago: executing program 5 (id=9183):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r1, &(0x7f0000001b80)={&(0x7f00000000c0)=@tipc=@id, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f0000000200)=""/172, 0xac}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/87, 0x57}, {&(0x7f0000001880)=""/31, 0x1f}, {&(0x7f00000018c0)=""/37, 0x25}, {&(0x7f0000001900)=""/188, 0xbc}, {&(0x7f00000019c0)=""/85, 0x55}], 0x9, &(0x7f0000001b00)=""/110, 0x6e}, 0x40010002)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000380)) (async)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80, 0x6)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000884)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x6, 0x7, 0x7fff, 0x6ca], 0x2, 0x0, 0x0, [{}, {}]}, 0x98)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x805}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100edff00ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x24004800)

3.863236835s ago: executing program 5 (id=9186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'ip6gre0\x00', 0x600}) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x2, 0x200, 0x80, 0x1, 0xf0a}, {0x3, 0x2, 0x4, 0x1, 0x1, 0x7fffffff}, 0x8000, 0xdd3, 0x203}}, @TCA_TBF_BURST={0x8, 0x6, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc7, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000680)='l', 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x4a, &(0x7f0000000000)=0xffff2652, 0x4) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411})

3.792783283s ago: executing program 2 (id=9187):
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x2}}, 0xffffffffffffff7e)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x48000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[], 0x340a)

3.764497186s ago: executing program 3 (id=9188):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xf}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)

3.182375231s ago: executing program 3 (id=9189):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x24048040}, 0x20000000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x24048040}, 0x20000000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
recvfrom$packet(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async)

3.179868531s ago: executing program 5 (id=9190):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000", 0x32}], 0x1)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000300000000000b65f72db01907864010100ac1414aa0b3390030000000045000000000000000033000000000000"], 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@initdev, @multicast2}, 0x0)
pipe(0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff8c, 0x23, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="d0672ff1ee9e086ae1e6e842682ca5de509d806e976d282d8c329103c22c85292378822160710d993a5f", 0x2a, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

3.022907334s ago: executing program 4 (id=9192):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x10084, @loopback={0xff00000000000000}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0xc040)

2.963261357s ago: executing program 2 (id=9193):
r0 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x2, 0x4004}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x63, 0x88, 0x7, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x10, 0xa, 0xe}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x63, 0x88, 0x7, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x10, 0xa, 0xe}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="800ac4ff000000007110ab0000004a2cb9c55feec2fa5deb"], &(0x7f0000000480)='GPL\x00'}, 0x80)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @broadcast, 0x4f21, 0x4, 'fo\x00', 0x11, 0x3240, 0x35}, {@rand_addr=0x64010101, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async)
sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000)
close(0x3)

2.809397138s ago: executing program 4 (id=9194):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14, 0x80000)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000500)={0x2, 0x2}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a00000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/'], 0x20) (async, rerun: 32)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000200)={r7}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r5, r7, 0x2f, 0x2010, 0x4, @value=r8}, 0x20) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="dcc064176636b48e1bee7411da5267ec75f920f8242f79a95423bda2eb3cb31bedaf3b9d44540fd093f1cf32fe6fc88837eb280e78dbd36398987a50e7534c456cf4304c8e77628ef406c779b8dc0c29eab13ea7f33f290c7b873ddf535b47"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (rerun: 64)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r11, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x7a, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x33b1026, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x7, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x4, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0x9, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x9, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x2, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x5, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x1571, 0x7, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x9, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x1, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x3ff, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0x6, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbb, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x3, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x3, 0x0, 0x0, 0x6, 0x9, 0x9, 0x49e88dee, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x1fd, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bd, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x87c}}, 0x20004811) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.526660007s ago: executing program 2 (id=9195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES16=r1, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa010200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = accept$inet(r6, 0x0, &(0x7f0000000140))
getsockopt$inet_buf(r7, 0x0, 0x23, &(0x7f0000000180)=""/29, &(0x7f00000001c0)=0x1d)

2.394754004s ago: executing program 3 (id=9196):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0)

2.383361603s ago: executing program 4 (id=9197):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x6c}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
close(r2)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0xffffffffffffff18, {0x2, 0x0, @local}}, 0x24)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8)

2.22349511s ago: executing program 2 (id=9198):
socket$qrtr(0x2a, 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000049979f3a7000000"], 0x10}, 0x200040c1)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x941, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="0400000002080000fcffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000401707df01000000002402008e0f63c0cfaf78de7fca5c78f95e0100f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc050000006ad52e58"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="05000000020e00000000005e606259c644fe7c703e79f65d950000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000040010000000000000000000000595b6028a2e4931133f6d9919fd48557896811cd874f3c107bbfc1c8831026f40798a2b35d0600e02216198977dc3d41ed0880c64c39e5f4059bd1641ed15112"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808062000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x80c4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000002980))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x2b, 0x0, 0x0)

2.154945698s ago: executing program 3 (id=9199):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f00000007c0)=0x1e)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000))
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="11fc56a9", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

1.202509243s ago: executing program 3 (id=9200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'})
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r4, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvfrom(r4, 0x0, 0x0, 0x142, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], 0x0, 0xc}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000304030000000000000000005500", @ANYRES32=r6, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x5c, r1, 0x1, 0x0, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x3000000}, 0x40810)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x2000007, 0x1010, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000010a0101000000000000000001000001"], 0x20}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000000)

1.201544841s ago: executing program 4 (id=9201):
socket$netlink(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000003f3509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.065009423s ago: executing program 2 (id=9202):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="7977886cbd22f8", 0x7}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x200408d4) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="7977886cbd22f8", 0x7}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x200408d4)
r0 = socket$key(0xf, 0x3, 0x2)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x29168}}, 0x4000050)

1.012882818s ago: executing program 4 (id=9203):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x0)
listen(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
recvfrom(r1, &(0x7f0000000ac0)=""/4090, 0xffa, 0x42, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
clock_gettime(0x0, &(0x7f0000002f00)={<r4=>0x0, <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000680)="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", 0xfc)
recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, &(0x7f0000000740)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001740)=@ieee802154, 0x80, &(0x7f0000002d40)=[{&(0x7f00000017c0)=""/97, 0x61}, {&(0x7f0000001840)=""/231, 0xe7}, {&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/97, 0x61}, {&(0x7f0000002a00)=""/220, 0xdc}, {&(0x7f0000002b00)=""/220, 0xdc}, {&(0x7f0000002c00)=""/13, 0xd}, {&(0x7f0000002c40)=""/104, 0x68}, {&(0x7f0000002cc0)=""/95, 0x5f}], 0xa, &(0x7f0000002e00)=""/100, 0x64}, 0xe}], 0x2, 0x0, &(0x7f0000002f40)={r4, r5+10000000})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

902.610046ms ago: executing program 2 (id=9204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00050000000500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

120.704656ms ago: executing program 3 (id=9205):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r0}, 0x94)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @loopback}, <r2=>0x0}, &(0x7f00000001c0)=0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb8f9, 0x4)

0s ago: executing program 4 (id=9206):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50)
r4 = socket(0x2, 0x2, 0x1)
r5 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x805, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24001804}, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000800)={@local, 0x80, r6})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r4, 0x0, 0xc4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, <r7=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f00000009c0)="464827d838e85e4c50500c19"}, 0x20)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\v2', 0x2}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRESOCT=r3, @ANYRES64], 0x0, 0x52, 0x0, 0x0, 0x9}, 0x28)
socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000340)={'syzkaller1\x00', 0xff})
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540", @ANYRESHEX=r8], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)

kernel console output (not intermixed with test programs):

387135][ T6146] IPv6: Can't replace route, no match found
[ 1532.417121][ T6146] IPv6: Can't replace route, no match found
[ 1532.459510][ T6146] IPv6: Can't replace route, no match found
[ 1532.490038][ T6146] IPv6: Can't replace route, no match found
[ 1532.504795][ T6146] IPv6: Can't replace route, no match found
[ 1532.520771][ T6146] IPv6: Can't replace route, no match found
[ 1532.536769][ T6146] IPv6: Can't replace route, no match found
[ 1532.555290][ T6146] IPv6: Can't replace route, no match found
[ 1532.564976][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7933'.
[ 1532.576671][ T6146] IPv6: Can't replace route, no match found
[ 1532.585774][ T6146] IPv6: Can't replace route, no match found
[ 1532.592527][ T6146] IPv6: Can't replace route, no match found
[ 1532.614854][ T6146] IPv6: Can't replace route, no match found
[ 1532.638568][ T6146] IPv6: Can't replace route, no match found
[ 1533.023832][ T6196] syzkaller1: entered promiscuous mode
[ 1533.045258][ T6196] syzkaller1: entered allmulticast mode
[ 1533.212406][ T6214] __nla_validate_parse: 2 callbacks suppressed
[ 1533.212427][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'.
[ 1533.274820][ T6223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7944'.
[ 1533.321499][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7944'.
[ 1533.340157][ T6223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7944'.
[ 1533.601994][ T6223] netlink: 'syz.2.7944': attribute type 7 has an invalid length.
[ 1533.994041][ T6263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1534.239133][ T6278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7960'.
[ 1534.248467][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7960'.
[ 1534.258184][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7960'.
[ 1534.478539][ T6290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1534.496919][ T6289] tipc: Disabling bearer <eth:syzkaller0>
[ 1534.523990][ T6292] netlink: 'syz.1.7964': attribute type 1 has an invalid length.
[ 1534.536742][ T6292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7964'.
[ 1534.546632][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7964'.
[ 1534.572422][ T6297] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1534.725285][ T6303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1534.865866][ T6303] tipc: Resetting bearer <eth:syzkaller0>
[ 1534.973976][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[ 1535.002974][ T6318] netlink: 'syz.4.7969': attribute type 1 has an invalid length.
[ 1535.046246][ T6320] netlink: 'syz.1.7970': attribute type 1 has an invalid length.
[ 1535.070475][ T6320] netlink: 'syz.1.7970': attribute type 4 has an invalid length.
[ 1535.091558][ T6320] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7970'.
[ 1535.099037][ T6321] netlink: 'syz.1.7970': attribute type 1 has an invalid length.
[ 1535.128984][ T6321] netlink: 'syz.1.7970': attribute type 4 has an invalid length.
[ 1535.166702][ T6320] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20001
[ 1535.759322][ T6334] FAULT_INJECTION: forcing a failure.
[ 1535.759322][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1535.786885][ T6334] CPU: 1 UID: 0 PID: 6334 Comm: syz.3.7972 Not tainted syzkaller #0 PREEMPT(full) 
[ 1535.786906][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1535.786914][ T6334] Call Trace:
[ 1535.786919][ T6334]  <TASK>
[ 1535.786926][ T6334]  dump_stack_lvl+0xe8/0x150
[ 1535.786950][ T6334]  should_fail_ex+0x40c/0x560
[ 1535.786969][ T6334]  _copy_to_user+0x31/0xb0
[ 1535.786989][ T6334]  simple_read_from_buffer+0xe1/0x170
[ 1535.787010][ T6334]  proc_fail_nth_read+0x1bb/0x230
[ 1535.787029][ T6334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1535.787048][ T6334]  ? rw_verify_area+0x24a/0x4c0
[ 1535.787067][ T6334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1535.787083][ T6334]  vfs_read+0x213/0xa80
[ 1535.787104][ T6334]  ? __pfx___mutex_lock+0x10/0x10
[ 1535.787119][ T6334]  ? __pfx_vfs_read+0x10/0x10
[ 1535.787137][ T6334]  ? __fget_files+0x2a/0x420
[ 1535.787156][ T6334]  ? __fget_files+0x3a2/0x420
[ 1535.787170][ T6334]  ? __fget_files+0x2a/0x420
[ 1535.787191][ T6334]  ksys_read+0x150/0x270
[ 1535.787210][ T6334]  ? __pfx_ksys_read+0x10/0x10
[ 1535.787233][ T6334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.787247][ T6334]  do_syscall_64+0x174/0x580
[ 1535.787259][ T6334]  ? trace_irq_disable+0x3b/0x140
[ 1535.787274][ T6334]  ? clear_bhb_loop+0x40/0x90
[ 1535.787289][ T6334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1535.787302][ T6334] RIP: 0033:0x7f5b3f55e6ce
[ 1535.787315][ T6334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1535.787325][ T6334] RSP: 002b:00007f5b404b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1535.787344][ T6334] RAX: ffffffffffffffda RBX: 00007f5b404b86c0 RCX: 00007f5b3f55e6ce
[ 1535.787353][ T6334] RDX: 000000000000000f RSI: 00007f5b404b80a0 RDI: 0000000000000004
[ 1535.787361][ T6334] RBP: 00007f5b404b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1535.787368][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1535.787376][ T6334] R13: 00007f5b3f826038 R14: 00007f5b3f825fa0 R15: 00007ffd8bd02e88
[ 1535.787395][ T6334]  </TASK>
[ 1535.993664][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1538.868418][ T6302] tipc: Disabling bearer <eth:syzkaller0>
[ 1538.881177][ T6318] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1539.049647][ T6352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1539.074909][ T6354] FAULT_INJECTION: forcing a failure.
[ 1539.074909][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1539.100474][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.2.7977 Not tainted syzkaller #0 PREEMPT(full) 
[ 1539.100505][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1539.100517][ T6354] Call Trace:
[ 1539.100526][ T6354]  <TASK>
[ 1539.100536][ T6354]  dump_stack_lvl+0xe8/0x150
[ 1539.100575][ T6354]  should_fail_ex+0x40c/0x560
[ 1539.100606][ T6354]  _copy_to_user+0x31/0xb0
[ 1539.100639][ T6354]  simple_read_from_buffer+0xe1/0x170
[ 1539.100672][ T6354]  proc_fail_nth_read+0x1bb/0x230
[ 1539.100703][ T6354]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1539.100736][ T6354]  ? rw_verify_area+0x24a/0x4c0
[ 1539.100768][ T6354]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1539.100805][ T6354]  vfs_read+0x213/0xa80
[ 1539.100841][ T6354]  ? __pfx___mutex_lock+0x10/0x10
[ 1539.100866][ T6354]  ? __pfx_vfs_read+0x10/0x10
[ 1539.100902][ T6354]  ? __fget_files+0x2a/0x420
[ 1539.100933][ T6354]  ? __fget_files+0x3a2/0x420
[ 1539.100957][ T6354]  ? __fget_files+0x2a/0x420
[ 1539.100993][ T6354]  ksys_read+0x150/0x270
[ 1539.101027][ T6354]  ? __pfx_ksys_read+0x10/0x10
[ 1539.101067][ T6354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1539.101091][ T6354]  do_syscall_64+0x174/0x580
[ 1539.101111][ T6354]  ? trace_irq_disable+0x3b/0x140
[ 1539.101138][ T6354]  ? clear_bhb_loop+0x40/0x90
[ 1539.101164][ T6354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1539.101184][ T6354] RIP: 0033:0x7f526af5e6ce
[ 1539.101206][ T6354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1539.101223][ T6354] RSP: 002b:00007f526bf43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1539.101246][ T6354] RAX: ffffffffffffffda RBX: 00007f526bf446c0 RCX: 00007f526af5e6ce
[ 1539.101261][ T6354] RDX: 000000000000000f RSI: 00007f526bf440a0 RDI: 0000000000000005
[ 1539.101272][ T6354] RBP: 00007f526bf44090 R08: 0000000000000000 R09: 0000000000000000
[ 1539.101284][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1539.101295][ T6354] R13: 00007f526b226038 R14: 00007f526b225fa0 R15: 00007ffe0fc1df38
[ 1539.101329][ T6354]  </TASK>
[ 1539.324597][ T6358] __nla_validate_parse: 1 callbacks suppressed
[ 1539.324631][ T6358] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7979'.
[ 1539.457594][ T6351] tipc: Disabling bearer <eth:syzkaller0>
[ 1539.514830][ T6368] syzkaller0: entered promiscuous mode
[ 1539.530630][ T6368] syzkaller0: entered allmulticast mode
[ 1539.550985][ T6369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1539.597898][ T6368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1539.717704][ T6369] tipc: Resetting bearer <eth:syzkaller0>
[ 1539.725063][ T6367] tipc: Resetting bearer <eth:syzkaller0>
[ 1539.779165][ T6367] tipc: Disabling bearer <eth:syzkaller0>
[ 1539.779365][ T6388] netlink: 'syz.3.7986': attribute type 6 has an invalid length.
[ 1539.815772][ T6386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1539.824669][ T6366] tipc: Resetting bearer <eth:syzkaller0>
[ 1540.591523][ T6413] netlink: 'syz.5.7991': attribute type 6 has an invalid length.
[ 1541.024533][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7992'.
[ 1543.918783][ T6366] tipc: Disabling bearer <eth:syzkaller0>
[ 1543.955310][ T6386] tipc: Resetting bearer <eth:syzkaller0>
[ 1544.019526][T31063] tipc: Resetting bearer <eth:syzkaller0>
[ 1544.069658][ T6399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1544.096043][ T6385] tipc: Resetting bearer <eth:syzkaller0>
[ 1546.135658][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1547.423748][ T6385] tipc: Disabling bearer <eth:syzkaller0>
[ 1547.506823][ T6440] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.7997'.
[ 1547.701579][ T6450] IPVS: Error connecting to the multicast addr
[ 1548.338616][ T6489] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1548.349983][ T6489] mac80211_hwsim hwsim64 syzkaller0: left promiscuous mode
[ 1548.360931][ T6489] mac80211_hwsim hwsim64 syzkaller0: left allmulticast mode
[ 1548.548109][ T6495] netlink: 'syz.2.8013': attribute type 1 has an invalid length.
[ 1548.572970][ T6495] atomic_op ffff8880266a6998 conn xmit_atomic 0000000000000000
[ 1548.855816][ T6502] sit1: entered promiscuous mode
[ 1548.918381][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8018'.
[ 1548.939299][ T6508] netlink: 'syz.3.8018': attribute type 2 has an invalid length.
[ 1548.967936][ T6508] netlink: 'syz.3.8018': attribute type 1 has an invalid length.
[ 1548.985160][ T6510] netlink: 'syz.3.8018': attribute type 1 has an invalid length.
[ 1548.987549][ T6508] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8018'.
[ 1549.032528][ T6512] siw: device registration error -23
[ 1549.085014][ T6510] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1549.158338][ T6516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[ 1549.284425][ T6522] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1549.369686][ T6525] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8024'.
[ 1549.382055][ T6525] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8024'.
[ 1549.575827][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8026'.
[ 1549.596533][ T6529] IPv6: Can't replace route, no match found
[ 1549.615811][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8026'.
[ 1549.616075][ T6535] lo speed is unknown, defaulting to 1000
[ 1549.641270][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8026'.
[ 1549.669047][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8026'.
[ 1549.715457][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8026'.
[ 1549.794760][ T6546] team0: Refused to change device type
[ 1550.027842][ T6554] tipc: Invalid UDP bearer configuration
[ 1550.027904][ T6554] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1550.152479][ T6554] bond4: Removing last arp target with arp_interval on
[ 1550.473877][ T6540] lo speed is unknown, defaulting to 1000
[ 1550.846594][ T6569] netlink: 'syz.3.8034': attribute type 1 has an invalid length.
[ 1551.024591][ T6535] wlan0 speed is unknown, defaulting to 1000
[ 1551.091074][ T6576] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode
[ 1551.108984][ T6576] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode
[ 1551.578799][ T1879] Bluetooth: hci2: link tx timeout
[ 1551.584764][ T1879] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1551.625617][ T6540] wlan0 speed is unknown, defaulting to 1000
[ 1552.911233][ T6599] netlink: 'syz.2.8041': attribute type 1 has an invalid length.
[ 1552.941444][ T6599] __nla_validate_parse: 60 callbacks suppressed
[ 1552.941467][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8041'.
[ 1552.980433][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8041'.
[ 1553.170472][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1553.220559][ T6616] xt_bpf: check failed: parse error
[ 1553.479305][ T6626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1553.551054][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8051'.
[ 1553.581803][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8051'.
[ 1553.581803][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8051'.
[ 1553.652964][ T1879] Bluetooth: hci2: command 0x0405 tx timeout
[ 1553.789420][ T6650] netlink: 'syz.3.8053': attribute type 21 has an invalid length.
[ 1553.815252][ T6650] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1553.828024][ T6650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1553.835384][ T6650] IPv6: NLM_F_CREATE should be set when creating new route
[ 1553.842743][ T6650] IPv6: NLM_F_CREATE should be set when creating new route
[ 1553.850035][ T6650] IPv6: NLM_F_CREATE should be set when creating new route
[ 1554.454866][T31063] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1554.699639][ T6661] bridge0: entered promiscuous mode
[ 1554.724880][ T6661] bridge0: entered allmulticast mode
[ 1554.856860][ T6688] bond0: (slave wlan0): Enslaving as an active interface with an up link
[ 1554.981036][ T6694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8062'.
[ 1555.211621][ T6700] netlink: 'syz.3.8064': attribute type 4 has an invalid length.
[ 1555.259403][ T6700] netlink: 'syz.3.8064': attribute type 4 has an invalid length.
[ 1555.292676][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8064'.
[ 1555.304255][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8063'.
[ 1555.308700][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8065'.
[ 1555.337591][ T6679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8059'.
[ 1555.975258][ T6729] bond10: option lacp_active: invalid value (5)
[ 1555.987787][ T6729] bond10 (unregistering): Released all slaves
[ 1556.929574][ T6767] syzkaller1: entered allmulticast mode
[ 1557.465308][ T6787] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1557.665331][ T6800] xt_TCPMSS: Only works on TCP SYN packets
[ 1557.894398][ T6806] erspan0: entered promiscuous mode
[ 1557.919446][ T6806] erspan0: entered allmulticast mode
[ 1558.779014][ T6842] __nla_validate_parse: 9 callbacks suppressed
[ 1558.779038][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8096'.
[ 1559.104947][ T6855] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1559.106345][ T6860] netlink: 'syz.2.8103': attribute type 3 has an invalid length.
[ 1559.197950][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8102'.
[ 1559.554769][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8105'.
[ 1559.706439][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8110'.
[ 1560.047510][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8116'.
[ 1560.321376][ T6932] syzkaller0: entered promiscuous mode
[ 1560.327099][ T6932] syzkaller0: entered allmulticast mode
[ 1560.640866][ T6944] netlink: 'syz.4.8120': attribute type 21 has an invalid length.
[ 1560.673275][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8120'.
[ 1560.743400][ T6944] vlan0: entered promiscuous mode
[ 1560.838173][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8124'.
[ 1560.936406][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8126'.
[ 1561.325117][ T6988] bond0: entered promiscuous mode
[ 1561.331197][ T6988] bond_slave_0: entered promiscuous mode
[ 1561.339401][ T6988] ipvlan1: entered promiscuous mode
[ 1561.348015][ T6988] ipvlan1: left promiscuous mode
[ 1561.357258][ T6988] bond0: left promiscuous mode
[ 1561.376464][ T6988] bond_slave_0: left promiscuous mode
[ 1561.435915][ T6987] bond0: entered promiscuous mode
[ 1561.451159][ T6987] bond_slave_0: entered promiscuous mode
[ 1561.458680][ T6987] ipvlan1: entered promiscuous mode
[ 1561.466551][ T6987] ipvlan1: left promiscuous mode
[ 1561.475414][ T6987] bond0: left promiscuous mode
[ 1561.482555][ T6987] bond_slave_0: left promiscuous mode
[ 1561.491158][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1561.600890][ T6997] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8136'.
[ 1561.642026][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8136'.
[ 1561.696959][ T6997] syzkaller1: entered promiscuous mode
[ 1561.728744][ T7007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1561.732566][ T6997] syzkaller1: entered allmulticast mode
[ 1561.837812][ T7015] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1562.109600][ T7027] netlink: 'syz.3.8144': attribute type 27 has an invalid length.
[ 1562.152263][ T7022] syzkaller0: entered promiscuous mode
[ 1562.164515][ T7027] netlink: 'syz.3.8144': attribute type 4 has an invalid length.
[ 1562.181336][ T7022] syzkaller0: entered allmulticast mode
[ 1562.274500][ T7022] macsec0: entered promiscuous mode
[ 1562.413220][ T7040] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[ 1562.499223][ T7031] siw: device registration error -23
[ 1562.898727][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1562.930828][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1563.289142][ T7074] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1563.366221][ T7081] syzkaller0: entered promiscuous mode
[ 1563.381471][ T7081] syzkaller0: entered allmulticast mode
[ 1563.504000][ T7083] lo speed is unknown, defaulting to 1000
[ 1563.776362][ T7104] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20001
[ 1563.779305][ T7099] bond8: option miimon: invalid value (18446744073709551615)
[ 1563.784209][ T7104] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1563.814218][ T7099] bond8: option miimon: allowed values 0 - 2147483647
[ 1563.843950][ T7099] bond8 (unregistering): Released all slaves
[ 1564.283657][ T7123] __nla_validate_parse: 5 callbacks suppressed
[ 1564.283677][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8169'.
[ 1564.486686][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8173'.
[ 1564.510054][ T7130] netlink: 'syz.4.8173': attribute type 10 has an invalid length.
[ 1564.637971][ T7134] xt_l2tp: invalid flags combination: 8
[ 1564.835571][ T7083] wlan0 speed is unknown, defaulting to 1000
[ 1564.975044][ T7152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1565.171350][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8179'.
[ 1565.349524][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8180'.
[ 1567.215111][ T7252] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8201'.
[ 1567.265368][ T7252] netlink: 'syz.4.8201': attribute type 1 has an invalid length.
[ 1567.273051][ T7261] netlink: 'syz.3.8202': attribute type 1 has an invalid length.
[ 1567.293234][ T7258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1567.355142][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8204'.
[ 1567.449671][ T7261] bond8: entered promiscuous mode
[ 1567.497676][ T7261] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1567.646653][ T7269] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1567.689485][ T7269] bond8: (slave ipip3): The slave device specified does not support setting the MAC address
[ 1567.717627][ T7269] bond8: (slave ipip3): Setting fail_over_mac to active for active-backup mode
[ 1567.765680][ T7269] bond8: (slave ipip3): making interface the new active one
[ 1567.806197][ T7269] ipip3: entered promiscuous mode
[ 1567.828556][ T7269] bond8: (slave ipip3): Enslaving as an active interface with an up link
[ 1567.955996][T31063] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[ 1568.008340][T31063] bond0: now running without any active interface!
[ 1569.136991][ T7362] netlink: 'syz.2.8228': attribute type 3 has an invalid length.
[ 1569.164080][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8228'.
[ 1569.612647][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8230'.
[ 1569.681201][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8230'.
[ 1569.865341][ T7409] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8236'.
[ 1570.022534][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8238'.
[ 1570.033974][ T7421] erspan0: entered promiscuous mode
[ 1570.097260][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'.
[ 1570.308821][ T7433] netdevsim netdevsim4 
€Â: renamed from netdevsim0 (while UP)
[ 1570.593245][ T7442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8242'.
[ 1570.725705][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8240'.
[ 1571.116495][ T7470] tc_dump_action: action bad kind
[ 1572.701226][ T7541] team0: Device ipvlan0 is already an upper device of the team interface
[ 1575.415792][ T7529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1575.430967][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8263'.
[ 1575.674907][ T7607] 1ªî{X¹¦: entered promiscuous mode
[ 1575.742284][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8267'.
[ 1575.758564][ T7613] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8268'.
[ 1575.769033][ T7614] 1ªî{X¹¦: left promiscuous mode
[ 1575.789226][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8268'.
[ 1575.860027][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8268'.
[ 1576.693422][ T7661] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8278'.
[ 1577.041143][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8279'.
[ 1577.358445][ T7682] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8284'.
[ 1577.785982][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8290'.
[ 1577.815278][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8290'.
[ 1577.955109][ T7712] bridge5: entered allmulticast mode
[ 1578.349123][ T7732] netlink: 'syz.2.8296': attribute type 11 has an invalid length.
[ 1579.116277][ T7767] netlink: 'syz.3.8304': attribute type 10 has an invalid length.
[ 1579.499010][ T7767] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1579.529842][ T7767] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[ 1579.544182][ T7767] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1580.009297][ T7787] bridge7: entered promiscuous mode
[ 1580.025091][ T7787] bridge7: entered allmulticast mode
[ 1580.071426][ T7787] team0: Port device bridge7 added
[ 1580.303679][ T7794] netlink: 'syz.1.8314': attribute type 7 has an invalid length.
[ 1580.465435][ T7802] IPv6: Can't replace route, no match found
[ 1580.541058][ T7801] lo speed is unknown, defaulting to 1000
[ 1581.257668][ T7829] __nla_validate_parse: 1 callbacks suppressed
[ 1581.257693][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8321'.
[ 1581.328655][ T7829] vlan0: entered promiscuous mode
[ 1581.359024][ T7829] vlan0: left promiscuous mode
[ 1581.592291][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8322'.
[ 1582.126055][ T7801] wlan0 speed is unknown, defaulting to 1000
[ 1582.149283][ T7839] rdma_rxe: rxe_newlink: failed to add lo
[ 1582.175733][ T7856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8328'.
[ 1583.503106][ T7903] lo speed is unknown, defaulting to 1000
[ 1583.548704][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8340'.
[ 1584.847768][ T7903] wlan0 speed is unknown, defaulting to 1000
[ 1585.213077][ T7963] 1ªî{X¹¦: left allmulticast mode
[ 1585.325131][ T7963] tipc: Resetting bearer <eth:team0>
[ 1585.337825][ T7963] tipc: Resetting bearer <eth:batadv0>
[ 1585.414597][    C1] IPv4: Oversized IP packet from 127.0.0.1
[ 1585.428617][ T7963] ip6tnl1: left allmulticast mode
[ 1585.452222][ T7963] erspan1: left allmulticast mode
[ 1585.459374][ T7963] bond1: left allmulticast mode
[ 1585.474359][ T7963] ip6tnl3: left allmulticast mode
[ 1585.483085][ T7963] batman_adv: batadv0: Interface deactivated: gretap0
[ 1585.499775][ T7964] syzkaller1: entered promiscuous mode
[ 1585.511227][ T7964] syzkaller1: entered allmulticast mode
[ 1585.635422][T31065] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1585.666204][T31065] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.692143][T31065] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1585.720319][T31065] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.739790][T31065] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1585.765203][T31065] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.793853][T31065] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1585.829445][T31065] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1586.451103][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1586.461255][ T1107] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1587.030200][ T7982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.072646][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8361'.
[ 1587.091778][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1587.099717][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1587.344334][ T7982] bond0: (slave netdevsim1): Releasing backup interface
[ 1587.374930][ T7982] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode
[ 1587.457087][ T7982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.839863][ T7982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1588.122722][   T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.219214][   T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.244008][ T8083] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8369'.
[ 1588.269735][   T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.308859][T31074] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1588.458511][ T8089] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8371'.
[ 1588.492042][ T8092] netlink: 336 bytes leftover after parsing attributes in process `syz.2.8372'.
[ 1588.503980][ T8089] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8371'.
[ 1588.508824][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8372'.
[ 1588.523682][ T8089] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[ 1588.534519][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8374'.
[ 1588.548082][ T8089] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1589.723602][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8378'.
[ 1590.346979][ T8038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1590.789810][ T8153] syzkaller0: entered promiscuous mode
[ 1590.818663][ T8153] syzkaller0: entered allmulticast mode
[ 1590.849214][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8384'.
[ 1590.849220][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8384'.
[ 1590.987178][ T8160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1590.999726][ T8166] mac80211_hwsim hwsim64 syzkaller0: left promiscuous mode
[ 1591.014460][ T8166] mac80211_hwsim hwsim64 syzkaller0: left allmulticast mode
[ 1591.959029][ T8207] wg1: Caught tx_queue_len zero misconfig
[ 1592.195960][ T8220] __nla_validate_parse: 4 callbacks suppressed
[ 1592.195983][ T8220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8406'.
[ 1592.206235][ T8222] ip6erspan1: entered allmulticast mode
[ 1592.253076][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8408'.
[ 1592.629826][ T8236] netlink: 'syz.2.8411': attribute type 3 has an invalid length.
[ 1593.058908][ T8251] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8416'.
[ 1593.164042][ T8254] dummy0: Caught tx_queue_len zero misconfig
[ 1593.312642][ T8257] ±ÿ: renamed from lo (while UP)
[ 1593.703529][ T8271] syzkaller1: entered promiscuous mode
[ 1593.716856][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8421'.
[ 1593.732476][ T8271] syzkaller1: entered allmulticast mode
[ 1593.760165][ T8279] netlink: 'syz.5.8424': attribute type 1 has an invalid length.
[ 1593.988385][ T8285] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[ 1594.344173][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8433'.
[ 1594.456814][ T8305] bond9: option lacp_active: invalid value (5)
[ 1594.482853][ T8305] bond9 (unregistering): Released all slaves
[ 1594.629056][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8436'.
[ 1594.669553][ T8318] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1594.861433][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8439'.
[ 1594.958337][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8441'.
[ 1594.958338][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8441'.
[ 1594.984945][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8442'.
[ 1595.060725][ T8335] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1595.940877][ T8407] netlink: 'syz.5.8460': attribute type 4 has an invalid length.
[ 1595.947854][ T8408] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[ 1595.973529][ T8407] netlink: 'syz.5.8460': attribute type 4 has an invalid length.
[ 1598.493843][ T8372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1598.924012][ T8450] netlink: 'syz.2.8475': attribute type 2 has an invalid length.
[ 1598.926762][ T8449] macvtap0: entered promiscuous mode
[ 1598.939252][ T8449] bridge0: entered promiscuous mode
[ 1600.407245][ T8506] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20002
[ 1600.705947][ T8521] __nla_validate_parse: 4 callbacks suppressed
[ 1600.705969][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8495'.
[ 1600.975267][ T8521] bond4: option lacp_active: invalid value (5)
[ 1600.984711][ T8521] bond4 (unregistering): Released all slaves
[ 1601.246430][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8498'.
[ 1601.292438][ T8539] netlink: 'syz.1.8500': attribute type 12 has an invalid length.
[ 1601.328331][ T8539] netlink: 'syz.1.8500': attribute type 29 has an invalid length.
[ 1601.356735][ T8539] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8500'.
[ 1601.371432][ T8548] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8500'.
[ 1601.729821][ T8563] lo speed is unknown, defaulting to 1000
[ 1601.747746][ T8566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8508'.
[ 1601.859999][ T8568] bond10 (unregistering): Released all slaves
[ 1601.915598][ T8570] bond8: entered allmulticast mode
[ 1601.921231][ T8570] ipip3: entered allmulticast mode
[ 1602.000192][ T8567] bond8: left allmulticast mode
[ 1602.007225][ T8567] ipip3: left allmulticast mode
[ 1602.092718][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8511'.
[ 1602.137377][ T8574] bond10: option lacp_active: invalid value (5)
[ 1602.147066][ T8574] bond10 (unregistering): Released all slaves
[ 1602.484341][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8513'.
[ 1602.543364][ T8586] netlink: 'syz.3.8513': attribute type 11 has an invalid length.
[ 1602.553432][ T8584] lo speed is unknown, defaulting to 1000
[ 1602.614371][ T8563] wlan0 speed is unknown, defaulting to 1000
[ 1602.723154][ T8596] netlink: 'syz.1.8517': attribute type 11 has an invalid length.
[ 1603.341145][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8523'.
[ 1603.460696][ T8611] bond10: option lacp_active: invalid value (5)
[ 1603.472603][ T8611] bond10 (unregistering): Released all slaves
[ 1603.615540][ T8622] netlink: 'syz.1.8525': attribute type 1 has an invalid length.
[ 1603.651094][ T8622] netlink: 'syz.1.8525': attribute type 2 has an invalid length.
[ 1603.852240][ T8584] wlan0 speed is unknown, defaulting to 1000
[ 1604.359101][ T8636] syzkaller0: entered promiscuous mode
[ 1604.387086][ T8636] syzkaller0: entered allmulticast mode
[ 1604.751842][ T8659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1604.914992][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8537'.
[ 1604.960920][ T8659] tipc: Resetting bearer <eth:syzkaller0>
[ 1605.105400][ T8668] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8538'.
[ 1605.239868][ T8664] bond6: option lacp_active: invalid value (5)
[ 1605.253535][ T8664] bond6 (unregistering): Released all slaves
[ 1605.593526][T31073] tipc: Resetting bearer <eth:syzkaller0>
[ 1605.618970][ T8656] tipc: Resetting bearer <eth:syzkaller0>
[ 1607.581404][ T1318] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1608.989565][ T8656] tipc: Disabling bearer <eth:syzkaller0>
[ 1609.010643][ T8666] bridge6: entered promiscuous mode
[ 1609.015926][ T8666] bridge6: entered allmulticast mode
[ 1609.023541][ T8666] team0: Port device bridge6 added
[ 1609.145213][ T8699] netlink: 'syz.2.8547': attribute type 11 has an invalid length.
[ 1609.425778][ T8709] lo speed is unknown, defaulting to 1000
[ 1609.425914][ T8713] mac80211_hwsim hwsim64 syzkaller0: entered promiscuous mode
[ 1609.461501][ T8713] mac80211_hwsim hwsim64 syzkaller0: entered allmulticast mode
[ 1609.578677][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8554'.
[ 1609.634104][ T8726] bond4: entered promiscuous mode
[ 1609.663222][ T8726] bond4: entered allmulticast mode
[ 1609.694925][ T8726] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1609.719903][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8554'.
[ 1609.814366][ T8750] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[ 1609.877878][ T8730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8554'.
[ 1609.955799][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8557'.
[ 1610.093211][ T8752] udevd[8752]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1610.113139][ T8758] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[ 1610.140195][ T8702] udevd[8702]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1610.168596][ T8758] bond4 (unregistering): Released all slaves
[ 1610.824394][ T8709] wlan0 speed is unknown, defaulting to 1000
[ 1610.896557][ T8790] netlink: 'syz.3.8566': attribute type 63 has an invalid length.
[ 1611.027988][ T8797] x_tables: duplicate underflow at hook 2
[ 1611.242028][ T8807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8570'.
[ 1611.307281][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8570'.
[ 1611.338935][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8570'.
[ 1611.375777][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8572'.
[ 1611.921964][ T8824] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1612.173366][ T8828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8577'.
[ 1612.190583][ T8828] 0ªî{X¹¦: renamed from 
31ªî{X¹¦
[ 1612.198574][ T8828] 0ªî{X¹¦: entered allmulticast mode
[ 1612.222002][ T8828] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1612.248518][ T8832] netlink: 'syz.1.8578': attribute type 1 has an invalid length.
[ 1612.282004][ T8832] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1612.683952][ T8843] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1612.740019][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8581'.
[ 1612.786514][ T8841] ip6_vti0: entered allmulticast mode
[ 1613.203743][ T8858] netlink: 'syz.5.8586': attribute type 1 has an invalid length.
[ 1613.355688][ T8862] 0ªî{X¹¦: renamed from gretap0 (while UP)
[ 1613.402267][ T8862] 0ªî{X¹¦: entered allmulticast mode
[ 1613.421227][ T8862] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1613.607156][ T8870] netlink: 'syz.2.8589': attribute type 11 has an invalid length.
[ 1613.676628][ T8874] netlink: 'syz.2.8589': attribute type 11 has an invalid length.
[ 1613.892426][ T8870] ip6gretap0: left promiscuous mode
[ 1613.942993][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1613.983751][ T8870] 8021q: adding VLAN 0 to HW filter on device team0
[ 1614.013514][ T8870] tipc: Resetting bearer <eth:team0>
[ 1614.069126][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1614.247494][ T8870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1614.274942][ T8870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1614.333790][ T8870] ip6gretap0: entered promiscuous mode
[ 1614.369317][ T8870] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1614.390938][ T8870] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1614.422666][ T8870] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1614.440071][ T8896] netlink: 'syz.5.8594': attribute type 1 has an invalid length.
[ 1614.457952][ T8896] netlink: 'syz.5.8594': attribute type 2 has an invalid length.
[ 1614.480169][ T8870] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1614.504552][ T8870] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1614.525407][ T8870] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1614.541206][ T8870] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1614.573683][ T8870] batman_adv: batadv0: Interface activated: gretap0
[ 1614.588515][ T8870] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1614.628683][ T8870] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1614.908255][ T3365] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1614.933225][ T3365] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1614.956593][ T3365] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1614.979864][ T3365] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.206818][ T3365] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1615.239420][ T3365] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.262257][ T3365] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1615.289393][ T3365] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1615.357637][T19580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1615.387831][ T3330] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1615.428191][ T3330] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1615.436192][ T4825] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1615.469296][ T8905] __nla_validate_parse: 3 callbacks suppressed
[ 1615.469320][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8596'.
[ 1615.529204][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8596'.
[ 1615.563760][ T8905] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8596'.
[ 1615.661980][ T4825] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1615.722926][ T4825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1615.750188][ T3330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1615.771855][ T1879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1615.788733][ T1879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1615.801024][ T1879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1615.822187][ T1879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1615.836664][ T1879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1615.843629][ T3330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1615.970191][T19580] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1616.103827][ T8925] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8600'.
[ 1616.204552][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8602'.
[ 1616.214863][ T8930] syzkaller0: entered promiscuous mode
[ 1616.232211][ T8930] syzkaller0: entered allmulticast mode
[ 1616.244096][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8602'.
[ 1616.351048][ T4825] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1616.745524][ T8942] x_tables: ip6_tables: mh match: only valid for protocol 135
[ 1617.115679][ T8915] lo speed is unknown, defaulting to 1000
[ 1617.515163][ T8959] netlink: 'syz.4.8610': attribute type 23 has an invalid length.
[ 1617.876518][ T8972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1617.941902][ T8972] netlink: 'syz.4.8614': attribute type 2 has an invalid length.
[ 1617.971088][T14902] Bluetooth: hci1: command tx timeout
[ 1617.977732][ T8972] netlink: 'syz.4.8614': attribute type 8 has an invalid length.
[ 1617.977756][ T8972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8614'.
[ 1618.071735][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8614'.
[ 1618.454550][T31070] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1618.519659][ T8998] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1618.536981][ T9000] netlink: 'syz.1.8621': attribute type 9 has an invalid length.
[ 1618.634951][ T8915] wlan0 speed is unknown, defaulting to 1000
[ 1618.900018][ T9012] netlink: 'syz.4.8626': attribute type 83 has an invalid length.
[ 1618.915097][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8626'.
[ 1618.949272][ T9011] netlink: 'syz.2.8625': attribute type 8 has an invalid length.
[ 1619.071028][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8629'.
[ 1619.154545][ T9011] lo speed is unknown, defaulting to 1000
[ 1619.181913][ T9017] netlink: 'syz.1.8628': attribute type 1 has an invalid length.
[ 1619.584327][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1619.606656][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1619.632368][ T8915] bridge_slave_0: entered allmulticast mode
[ 1619.647237][ T8915] bridge_slave_0: entered promiscuous mode
[ 1619.665288][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1619.682029][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1619.700565][ T8915] bridge_slave_1: entered allmulticast mode
[ 1619.721624][ T8915] bridge_slave_1: entered promiscuous mode
[ 1619.830048][ T8915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1619.854886][ T8915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1619.950179][ T8915] team0: Port device team_slave_0 added
[ 1619.976885][ T8915] team0: Port device team_slave_1 added
[ 1620.054242][T14902] Bluetooth: hci1: command tx timeout
[ 1620.241060][ T9057] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[ 1620.272593][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1620.279669][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.312433][ T8915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.337200][ T9060] netlink: 'syz.1.8638': attribute type 2 has an invalid length.
[ 1620.347254][ T9011] wlan0 speed is unknown, defaulting to 1000
[ 1620.355139][ T9062] netlink: 'syz.1.8638': attribute type 2 has an invalid length.
[ 1620.368746][ T8915] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1620.380014][ T8915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.428203][ T8915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1620.634583][ T9070] xt_hashlimit: size too large, truncated to 1048576
[ 1620.758740][ T8915] hsr_slave_0: entered promiscuous mode
[ 1620.782679][ T8915] hsr_slave_1: entered promiscuous mode
[ 1620.936303][ T1167] ip6_tnl_xmit_ctl: 11 callbacks suppressed
[ 1620.936328][ T1167] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1621.011681][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1621.096350][ T9083] __nla_validate_parse: 4 callbacks suppressed
[ 1621.096372][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'.
[ 1621.169106][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8647'.
[ 1621.179085][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8647'.
[ 1621.251247][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1621.441502][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1621.469878][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1622.015778][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1622.130860][T14902] Bluetooth: hci1: command tx timeout
[ 1622.310582][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1622.406843][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8656'.
[ 1622.421888][ T8915] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1622.460796][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8656'.
[ 1622.492057][ T8915] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1622.931294][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1623.032002][ T8915] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1623.056032][ T8915] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.309904][ T8915] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1623.331317][ T8915] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.579918][ T8915] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1623.590529][ T8915] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1623.907756][ T9159] netlink: 'syz.2.8664': attribute type 1 has an invalid length.
[ 1623.941567][ T9159] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8664'.
[ 1623.982539][ T9159] netlink: 'syz.2.8664': attribute type 1 has an invalid length.
[ 1624.210590][T14902] Bluetooth: hci1: command tx timeout
[ 1624.385307][ T9186] vlan1: entered promiscuous mode
[ 1624.401817][ T9186] dummy0: entered promiscuous mode
[ 1624.903478][ T8915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1624.922902][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1624.972094][ T8915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1624.991552][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1625.026547][ T8915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1625.105249][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1625.132424][ T8915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1625.151473][ T8915] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1625.281780][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8674'.
[ 1625.684295][ T9223] xt_hashlimit: size too large, truncated to 1048576
[ 1625.707396][ T8915] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1625.775036][ T8915] 8021q: adding VLAN 0 to HW filter on device team0
[ 1625.807470][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1625.814752][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1625.877537][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1625.884974][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1626.255740][ T9247] IPVS: Error connecting to the multicast addr
[ 1626.507811][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8682'.
[ 1626.651679][ T9269] netlink: 'syz.4.8686': attribute type 5 has an invalid length.
[ 1626.686476][ T9269] ip6erspan0: entered promiscuous mode
[ 1626.696212][ T9269] ip6erspan0: entered allmulticast mode
[ 1626.967725][ T9284] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8691'.
[ 1627.188331][ T9291] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[ 1627.204135][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8694'.
[ 1627.229041][ T9307] netlink: 'syz.4.8694': attribute type 1 has an invalid length.
[ 1627.274966][ T9291] bond10 (unregistering): Released all slaves
[ 1627.521702][ T4825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1627.552315][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1627.651791][ T4825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1627.673094][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1627.726721][ T8915] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1627.971825][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1628.071333][ T4825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1628.082672][ T9324] IPv6: Can't replace route, no match found
[ 1628.157002][ T9329] lo speed is unknown, defaulting to 1000
[ 1628.578277][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8701'.
[ 1628.629785][ T9353] xt_TCPMSS: Only works on TCP SYN packets
[ 1628.633826][ T8915] veth0_vlan: entered promiscuous mode
[ 1628.660734][ T8915] veth1_vlan: entered promiscuous mode
[ 1628.692105][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1628.725426][ T8915] veth0_macvtap: entered promiscuous mode
[ 1628.750114][ T8915] veth1_macvtap: entered promiscuous mode
[ 1628.788643][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1628.817871][ T8915] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1628.856157][T31078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.866706][T31078] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.880111][T31078] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1628.891066][T31078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1629.138523][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8703'.
[ 1629.169536][ T9357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8703'.
[ 1629.183003][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8703'.
[ 1629.256058][T31070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1629.265975][ T9357] syzkaller0: entered promiscuous mode
[ 1629.284304][T31070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1629.298054][ T9357] syzkaller0: entered allmulticast mode
[ 1629.337514][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1629.572085][ T3330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1629.604421][ T3330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1629.966313][ T9380] smc: ib device syz2 ibport 1 erased user defined pnetid S
[ 1629.981865][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1630.251300][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8710'.
[ 1630.273347][ T9390] netlink: 'syz.4.8710': attribute type 30 has an invalid length.
[ 1630.307221][ T9329] wlan0 speed is unknown, defaulting to 1000
[ 1630.446191][T31073] netdevsim netdevsim4 
€Â: set [0, 0] type 1 family 0 port 8472 - 0
[ 1630.498849][T31073] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1630.519240][T31073] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1630.562505][ T9397] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8711'.
[ 1630.584496][T31073] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1630.604550][ T9397] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[ 1630.627197][ T9397] 1ªî{X¹¦: entered allmulticast mode
[ 1630.636689][ T9397] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1631.517158][ T1879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1631.534541][ T1879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1631.545244][ T1879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1631.557944][ T1879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1631.566004][ T1879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1631.676013][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8717'.
[ 1631.776012][ T9416] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1632.238486][ T9422] bond5: Unable to set up delay as MII monitoring is disabled
[ 1632.271958][ T9422] bond5 (unregistering): Released all slaves
[ 1632.352506][ T9429] bond5: Unable to set up delay as MII monitoring is disabled
[ 1632.363874][ T9429] bond5 (unregistering): Released all slaves
[ 1632.639146][ T9437] FAULT_INJECTION: forcing a failure.
[ 1632.639146][ T9437] name failslab, interval 1, probability 0, space 0, times 0
[ 1632.670469][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.4.8721 Not tainted syzkaller #0 PREEMPT(full) 
[ 1632.670501][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1632.670514][ T9437] Call Trace:
[ 1632.670523][ T9437]  <TASK>
[ 1632.670534][ T9437]  dump_stack_lvl+0xe8/0x150
[ 1632.670576][ T9437]  should_fail_ex+0x40c/0x560
[ 1632.670611][ T9437]  should_failslab+0xa8/0x100
[ 1632.670645][ T9437]  kmem_cache_alloc_noprof+0xa6/0x5f0
[ 1632.670669][ T9437]  ? xfrm_policy_get_afinfo+0x30/0x1b0
[ 1632.670703][ T9437]  ? dst_alloc+0x105/0x170
[ 1632.670727][ T9437]  ? dst_alloc+0x105/0x170
[ 1632.670759][ T9437]  dst_alloc+0x105/0x170
[ 1632.670788][ T9437]  xfrm_lookup_with_ifid+0x7c8/0x1b40
[ 1632.670832][ T9437]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1632.670881][ T9437]  xfrm_lookup_route+0x3c/0x1c0
[ 1632.670905][ T9437]  udp_sendmsg+0x144a/0x2140
[ 1632.670977][ T9437]  ? count_memcg_event_mm+0x21/0x260
[ 1632.671021][ T9437]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1632.671089][ T9437]  ? current_check_autobind_udp_socket+0x198/0x3f0
[ 1632.671115][ T9437]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1632.671149][ T9437]  ? sock_rps_record_flow+0x19/0x350
[ 1632.671183][ T9437]  ? inet_sendmsg+0x23e/0x320
[ 1632.671215][ T9437]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1632.671243][ T9437]  sock_sendmsg_nosec+0x10e/0x180
[ 1632.671274][ T9437]  ____sys_sendmsg+0x54e/0x850
[ 1632.671303][ T9437]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1632.671336][ T9437]  ? import_iovec+0x73/0xa0
[ 1632.671371][ T9437]  ___sys_sendmsg+0x2a5/0x360
[ 1632.671392][ T9437]  ? __lock_acquire+0x683/0x2cf0
[ 1632.671427][ T9437]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1632.671456][ T9437]  ? kstrtouint+0x6e/0xe0
[ 1632.671513][ T9437]  ? __fget_files+0x2a/0x420
[ 1632.671542][ T9437]  ? __fget_files+0x3a2/0x420
[ 1632.671583][ T9437]  __sys_sendmmsg+0x273/0x4d0
[ 1632.671613][ T9437]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1632.671647][ T9437]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1632.671691][ T9437]  ? ksys_write+0x242/0x270
[ 1632.671726][ T9437]  ? __pfx_ksys_write+0x10/0x10
[ 1632.671771][ T9437]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1632.671794][ T9437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1632.671819][ T9437]  do_syscall_64+0x174/0x580
[ 1632.671840][ T9437]  ? trace_irq_disable+0x3b/0x140
[ 1632.671869][ T9437]  ? clear_bhb_loop+0x40/0x90
[ 1632.671896][ T9437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1632.671919][ T9437] RIP: 0033:0x7f7a3459de99
[ 1632.671948][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1632.671967][ T9437] RSP: 002b:00007f7a353e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1632.671991][ T9437] RAX: ffffffffffffffda RBX: 00007f7a34825fa0 RCX: 00007f7a3459de99
[ 1632.672007][ T9437] RDX: 03fffffffffffe8f RSI: 0000200000004d00 RDI: 0000000000000004
[ 1632.672022][ T9437] RBP: 00007f7a353e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1632.672036][ T9437] R10: 0000000004000f50 R11: 0000000000000246 R12: 0000000000000001
[ 1632.672050][ T9437] R13: 00007f7a34826038 R14: 00007f7a34825fa0 R15: 00007ffeaafac778
[ 1632.672086][ T9437]  </TASK>
[ 1633.059041][ T9408] lo speed is unknown, defaulting to 1000
[ 1633.177259][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1633.258941][ T9439] "syz.2.8722" (9439) uses obsolete ecb(arc4) skcipher
[ 1633.430966][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8724'.
[ 1633.492684][ T9453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8724'.
[ 1633.579950][ T9444] ipvlan2: entered allmulticast mode
[ 1633.613915][ T9444] syz_tun: entered allmulticast mode
[ 1633.651452][ T1879] Bluetooth: hci3: command tx timeout
[ 1633.839842][ T9447] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1633.865814][ T9447] bond6 (unregistering): Released all slaves
[ 1634.125038][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8725'.
[ 1634.578649][ T9408] wlan0 speed is unknown, defaulting to 1000
[ 1634.951377][ T9492] syzkaller0: entered promiscuous mode
[ 1634.962529][ T9492] syzkaller0: entered allmulticast mode
[ 1634.964582][ T9494] netlink: 'syz.4.8735': attribute type 1 has an invalid length.
[ 1634.977588][ T9494] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8735'.
[ 1635.025141][ T9492] netlink: 'syz.2.8734': attribute type 1 has an invalid length.
[ 1635.051525][ T9494] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8735'.
[ 1635.083207][ T9500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8734'.
[ 1635.144208][ T9492] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1635.266253][ T9505] bond6: (slave geneve4): making interface the new active one
[ 1635.323524][ T9505] bond6: (slave geneve4): Enslaving as an active interface with an up link
[ 1635.650084][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8740'.
[ 1635.704780][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8741'.
[ 1635.730581][ T1879] Bluetooth: hci3: command tx timeout
[ 1635.738841][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8741'.
[ 1635.786921][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.795236][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1635.802697][ T9408] bridge_slave_0: entered allmulticast mode
[ 1635.810792][ T9408] bridge_slave_0: entered promiscuous mode
[ 1635.820170][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.827736][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.836362][ T9408] bridge_slave_1: entered allmulticast mode
[ 1635.848267][ T9408] bridge_slave_1: entered promiscuous mode
[ 1635.927340][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1635.955310][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1636.128732][ T9408] team0: Port device team_slave_0 added
[ 1636.154842][ T9408] team0: Port device team_slave_1 added
[ 1636.278364][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1636.294564][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1636.327893][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1636.329077][ T9552] netlink: 'syz.1.8749': attribute type 1 has an invalid length.
[ 1636.386876][ T9546] vlan0: entered promiscuous mode
[ 1636.420297][ T9546] syz_tun: entered promiscuous mode
[ 1636.503886][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1636.513717][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1636.554277][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1636.723100][ T9408] hsr_slave_0: entered promiscuous mode
[ 1636.730136][ T9408] hsr_slave_1: entered promiscuous mode
[ 1636.737732][ T9408] debugfs: 'hsr0' already exists in 'hsr'
[ 1636.749068][ T9408] Cannot create hsr debugfs directory
[ 1637.102632][ T9592] žÿ: renamed from team_slave_1 (while UP)
[ 1637.117082][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8758'.
[ 1637.161452][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8758'.
[ 1637.336911][ T9603] netlink: 'syz.2.8760': attribute type 1 has an invalid length.
[ 1637.354814][   T30] audit: type=1804 audit(1784569092.137:28): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8761" name="/newroot/566/cgroup.controllers" dev="tmpfs" ino=2935 res=1 errno=0
[ 1637.377750][   T30] audit: type=1800 audit(1784569092.137:29): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8761" name="cgroup.controllers" dev="tmpfs" ino=2935 res=0 errno=0
[ 1637.413599][ T9608] netlink: 'syz.4.8761': attribute type 1 has an invalid length.
[ 1637.528063][ T9612] netlink: 'syz.2.8760': attribute type 10 has an invalid length.
[ 1637.537193][ T9612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8760'.
[ 1637.698279][ T9603] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1637.810430][ T1879] Bluetooth: hci3: command tx timeout
[ 1637.959904][ T9607] bond7: (slave veth10): Enslaving as a backup interface with a down link
[ 1638.026111][ T9608] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1638.049512][ T9609] bond7: (slave dummy0): Enslaving as a backup interface with an up link
[ 1638.094420][ T9611] bond5: (slave veth0_to_bond): making interface the new active one
[ 1638.107206][ T9611] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1638.129962][ T9613] macvlan5: entered promiscuous mode
[ 1638.136050][T31069] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1638.136056][ T9613] macvlan5: entered allmulticast mode
[ 1638.148268][ T9613] bond5: entered promiscuous mode
[ 1638.158359][ T9613] veth0_to_bond: entered promiscuous mode
[ 1638.165450][ T9613] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1638.178082][ T9613] bond5: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1638.199406][ T9613] bond5: left promiscuous mode
[ 1638.206979][ T9613] veth0_to_bond: left promiscuous mode
[ 1638.247839][ T9612] dummy0: entered promiscuous mode
[ 1638.257081][ T9612] bond7: (slave dummy0): Removing an active aggregator
[ 1638.264096][ T3365] bond7: Warning: Found an uninitialized port
[ 1638.271993][ T9612] bond7: (slave dummy0): Releasing backup interface
[ 1638.349541][ T9408] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1638.383371][ T9623] netlink: 'syz.5.8762': attribute type 12 has an invalid length.
[ 1638.391988][ T9623] netlink: 'syz.5.8762': attribute type 29 has an invalid length.
[ 1638.402839][ T9623] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8762'.
[ 1638.413258][ T9623] netlink: 'syz.5.8762': attribute type 3 has an invalid length.
[ 1638.424946][ T9623] netlink: 'syz.5.8762': attribute type 2 has an invalid length.
[ 1638.452558][ T9623] netlink: 35 bytes leftover after parsing attributes in process `syz.5.8762'.
[ 1638.546677][ T9408] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1638.728183][ T9408] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1638.831924][ T9408] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.054335][ T9662] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[ 1639.084386][ T9661] syzkaller0: entered promiscuous mode
[ 1639.104152][ T9664] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[ 1639.113865][ T9661] syzkaller0: entered allmulticast mode
[ 1639.454708][ T9678] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8780'.
[ 1639.487579][ T9678] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[ 1639.892028][ T1879] Bluetooth: hci3: command tx timeout
[ 1639.968759][ T9678] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1639.989374][ T9408] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1640.024183][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8781'.
[ 1640.043368][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1640.055442][ T9408] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1640.069220][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1640.086804][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8781'.
[ 1640.165887][ T9408] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1640.196821][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1640.217179][ T9408] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1640.239900][ T9408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1640.573183][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1640.638908][ T9408] 8021q: adding VLAN 0 to HW filter on device team0
[ 1640.668820][T31069] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1640.676091][T31069] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1640.723708][ T9713] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002
[ 1640.739636][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1640.746870][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1642.119698][ T9757] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1642.139445][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1642.203914][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8797'.
[ 1642.209377][ T9760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8799'.
[ 1642.327690][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8800'.
[ 1642.349343][ T9764] netlink: 252 bytes leftover after parsing attributes in process `syz.2.8800'.
[ 1642.362458][ T9408] veth0_vlan: entered promiscuous mode
[ 1642.416889][ T9408] veth1_vlan: entered promiscuous mode
[ 1642.444927][ T9764] syzkaller0: entered promiscuous mode
[ 1642.462230][ T9764] syzkaller0: entered allmulticast mode
[ 1642.626733][ T9408] veth0_macvtap: entered promiscuous mode
[ 1642.646310][ T9408] veth1_macvtap: entered promiscuous mode
[ 1642.709784][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1642.753070][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1642.785290][ T9776] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1642.830074][T31078] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.898911][T31078] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.915607][T31078] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.935956][T31078] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1643.232461][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1643.270355][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.417259][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1643.449925][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1643.452160][ T9794] netlink: 'syz.5.8811': attribute type 1 has an invalid length.
[ 1643.464142][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.646114][ T9794] veth3: entered allmulticast mode
[ 1643.685302][ T9794] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1643.727364][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8811'.
[ 1643.783747][ T9799] bond1: (slave veth0_to_bond): making interface the new active one
[ 1643.845010][ T9799] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1643.984218][ T9808] FAULT_INJECTION: forcing a failure.
[ 1643.984218][ T9808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1644.034622][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.1.8813 Not tainted syzkaller #0 PREEMPT(full) 
[ 1644.034653][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1644.034666][ T9808] Call Trace:
[ 1644.034675][ T9808]  <TASK>
[ 1644.034685][ T9808]  dump_stack_lvl+0xe8/0x150
[ 1644.034725][ T9808]  should_fail_ex+0x40c/0x560
[ 1644.034756][ T9808]  _copy_to_user+0x31/0xb0
[ 1644.034791][ T9808]  bpf_test_finish+0x1cf/0x690
[ 1644.034835][ T9808]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1644.034867][ T9808]  ? bpf_prog_test_run_skb+0x903/0x2230
[ 1644.034894][ T9808]  bpf_prog_test_run_skb+0x11fe/0x2230
[ 1644.034942][ T9808]  ? __fget_files+0x3a2/0x420
[ 1644.034969][ T9808]  ? __fget_files+0x2a/0x420
[ 1644.035002][ T9808]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1644.035026][ T9808]  bpf_prog_test_run+0x2c5/0x340
[ 1644.035061][ T9808]  __sys_bpf+0xa22/0xd90
[ 1644.035099][ T9808]  ? __pfx___sys_bpf+0x10/0x10
[ 1644.035139][ T9808]  ? __fget_files+0x2a/0x420
[ 1644.035185][ T9808]  ? ksys_write+0x242/0x270
[ 1644.035220][ T9808]  ? __pfx_ksys_write+0x10/0x10
[ 1644.035257][ T9808]  __x64_sys_bpf+0xba/0xd0
[ 1644.035280][ T9808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1644.035302][ T9808]  do_syscall_64+0x174/0x580
[ 1644.035322][ T9808]  ? trace_irq_disable+0x3b/0x140
[ 1644.035347][ T9808]  ? clear_bhb_loop+0x40/0x90
[ 1644.035373][ T9808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1644.035393][ T9808] RIP: 0033:0x7fc58139de99
[ 1644.035411][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1644.035428][ T9808] RSP: 002b:00007fc582223028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1644.035451][ T9808] RAX: ffffffffffffffda RBX: 00007fc581625fa0 RCX: 00007fc58139de99
[ 1644.035467][ T9808] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[ 1644.035481][ T9808] RBP: 00007fc582223090 R08: 0000000000000000 R09: 0000000000000000
[ 1644.035494][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1644.035507][ T9808] R13: 00007fc581626038 R14: 00007fc581625fa0 R15: 00007ffda2bfb118
[ 1644.035542][ T9808]  </TASK>
[ 1644.647949][ T9832] ref_tracker: memory allocation failure, unreliable refcount tracker.
[ 1644.745062][ T9838] netlink: 'syz.3.8822': attribute type 21 has an invalid length.
[ 1644.763798][ T9838] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8822'.
[ 1644.970595][ T9846] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8825'.
[ 1644.987841][ T9846] netlink: 116 bytes leftover after parsing attributes in process `syz.5.8825'.
[ 1645.015333][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8825'.
[ 1645.138064][ T9846] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8825'.
[ 1645.176725][ T9849] bond6 (unregistering): Released all slaves
[ 1645.228161][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1645.236058][ T9846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.371485][ T9855] bridge_slave_0: left allmulticast mode
[ 1645.402988][ T9857] FAULT_INJECTION: forcing a failure.
[ 1645.402988][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1645.421155][ T9855] bridge_slave_0: left promiscuous mode
[ 1645.445515][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.463437][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.2.8827 Not tainted syzkaller #0 PREEMPT(full) 
[ 1645.463466][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1645.463479][ T9857] Call Trace:
[ 1645.463488][ T9857]  <TASK>
[ 1645.463497][ T9857]  dump_stack_lvl+0xe8/0x150
[ 1645.463536][ T9857]  should_fail_ex+0x40c/0x560
[ 1645.463567][ T9857]  _copy_to_user+0x31/0xb0
[ 1645.463604][ T9857]  bpf_test_finish+0x4ea/0x690
[ 1645.463639][ T9857]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1645.463666][ T9857]  ? bpf_prog_test_run_skb+0x903/0x2230
[ 1645.463690][ T9857]  bpf_prog_test_run_skb+0x11fe/0x2230
[ 1645.463735][ T9857]  ? __fget_files+0x3a2/0x420
[ 1645.463761][ T9857]  ? __fget_files+0x2a/0x420
[ 1645.463793][ T9857]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1645.463816][ T9857]  bpf_prog_test_run+0x2c5/0x340
[ 1645.463849][ T9857]  __sys_bpf+0xa22/0xd90
[ 1645.463884][ T9857]  ? __pfx___sys_bpf+0x10/0x10
[ 1645.463924][ T9857]  ? __fget_files+0x2a/0x420
[ 1645.463970][ T9857]  ? ksys_write+0x242/0x270
[ 1645.464003][ T9857]  ? __pfx_ksys_write+0x10/0x10
[ 1645.464039][ T9857]  __x64_sys_bpf+0xba/0xd0
[ 1645.464064][ T9857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1645.464088][ T9857]  do_syscall_64+0x174/0x580
[ 1645.464109][ T9857]  ? trace_irq_disable+0x3b/0x140
[ 1645.464135][ T9857]  ? clear_bhb_loop+0x40/0x90
[ 1645.464161][ T9857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1645.464182][ T9857] RIP: 0033:0x7f526af9de99
[ 1645.464202][ T9857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1645.464220][ T9857] RSP: 002b:00007f526bf44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1645.464243][ T9857] RAX: ffffffffffffffda RBX: 00007f526b225fa0 RCX: 00007f526af9de99
[ 1645.464259][ T9857] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a
[ 1645.464273][ T9857] RBP: 00007f526bf44090 R08: 0000000000000000 R09: 0000000000000000
[ 1645.464285][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1645.464298][ T9857] R13: 00007f526b226038 R14: 00007f526b225fa0 R15: 00007ffe0fc1df38
[ 1645.464333][ T9857]  </TASK>
[ 1645.839729][ T9855] bridge_slave_1: left allmulticast mode
[ 1645.858850][ T9855] bridge_slave_1: left promiscuous mode
[ 1645.886263][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1645.971877][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1646.013155][ T9855] bond0: (slave bond_slave_0): Releasing backup interface
[ 1646.074107][ T9855] team0: Port device team_slave_0 removed
[ 1646.132870][ T9855] team0: Port device team_slave_1 removed
[ 1646.159043][ T9855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1646.254840][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1646.303888][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1646.331697][ T9875] bond0 (unregistering): Released all slaves
[ 1646.383809][ T9885] lo: entered allmulticast mode
[ 1646.413692][ T9885] tunl0: entered allmulticast mode
[ 1646.461277][ T9885] gre0: entered allmulticast mode
[ 1646.495881][ T9885] erspan0: entered allmulticast mode
[ 1646.511698][ T9885] ip_vti0: entered allmulticast mode
[ 1646.525938][ T9885] ip6_vti0: entered allmulticast mode
[ 1646.545497][ T9885] sit0: entered allmulticast mode
[ 1646.558321][ T9885] ip6tnl0: entered allmulticast mode
[ 1646.597203][ T9885] ip6gre0: entered allmulticast mode
[ 1646.623731][ T9885] ip6gretap0: entered allmulticast mode
[ 1646.640709][ T9885] bridge0: entered allmulticast mode
[ 1646.659503][ T9885] bond0: entered allmulticast mode
[ 1646.665151][ T4825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1646.679704][ T9885] team0: entered allmulticast mode
[ 1646.696542][ T9885] 
: entered allmulticast mode
[ 1646.707736][ T9885] nlmon0: entered allmulticast mode
[ 1646.721688][ T9885] veth0: entered allmulticast mode
[ 1646.724438][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1646.751530][ T4825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1646.782396][ T9885] veth1: entered allmulticast mode
[ 1646.803532][ T9885] wg0: entered allmulticast mode
[ 1646.818910][ T9885] wg1: entered allmulticast mode
[ 1646.831965][ T9885] wg2: entered allmulticast mode
[ 1646.870044][ T9885] veth0_to_bridge: entered allmulticast mode
[ 1646.879106][ T9885] bridge_slave_0: entered allmulticast mode
[ 1646.887683][ T9885] veth1_to_bridge: entered allmulticast mode
[ 1646.907122][ T9893] x_tables: duplicate underflow at hook 1
[ 1646.908951][ T9885] bridge_slave_1: entered allmulticast mode
[ 1646.926817][ T9885] veth0_to_bond: entered allmulticast mode
[ 1646.959005][ T9896] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 1646.964823][ T9885] bond_slave_0: entered allmulticast mode
[ 1646.989643][ T9896] ipt_ECN: cannot use operation on non-tcp rule
[ 1647.005523][ T9885] veth0_to_team: entered allmulticast mode
[ 1647.041762][ T9885] team_slave_0: entered allmulticast mode
[ 1647.060027][ T9885] veth1_to_team: entered allmulticast mode
[ 1647.084508][ T9885] team_slave_1: entered allmulticast mode
[ 1647.102689][ T9885] veth0_to_batadv: entered allmulticast mode
[ 1647.124267][ T9885] batadv_slave_0: entered allmulticast mode
[ 1647.144502][ T9885] veth1_to_batadv: entered allmulticast mode
[ 1647.171627][ T9885] batadv_slave_1: entered allmulticast mode
[ 1647.198437][ T9885] xfrm0: entered allmulticast mode
[ 1647.214572][ T9885] veth0_to_hsr: entered allmulticast mode
[ 1647.233220][ T9885] hsr_slave_0: entered allmulticast mode
[ 1647.251502][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1647.254223][ T9885] veth1_to_hsr: entered allmulticast mode
[ 1647.279847][ T9885] hsr_slave_1: entered allmulticast mode
[ 1647.298454][ T9885] hsr0: entered allmulticast mode
[ 1647.314002][ T9885] hsr0: left promiscuous mode
[ 1647.325614][ T9885] veth1_virt_wifi: entered allmulticast mode
[ 1647.341860][ T9885] veth0_virt_wifi: entered allmulticast mode
[ 1647.356432][ T9885] veth1_vlan: entered allmulticast mode
[ 1647.374682][ T9885] veth0_vlan: entered allmulticast mode
[ 1647.393180][ T9885] vlan0: entered allmulticast mode
[ 1647.406205][ T9885] vlan1: entered allmulticast mode
[ 1647.425257][ T9885] macvlan0: entered allmulticast mode
[ 1647.439025][ T9885] macvlan1: entered allmulticast mode
[ 1647.447052][ T9885] ipvlan0: entered allmulticast mode
[ 1647.454145][ T9885] ipvlan1: entered allmulticast mode
[ 1647.464458][ T9885] geneve1: entered allmulticast mode
[ 1647.472185][ T9885] mac80211_hwsim hwsim71 wlan0: left promiscuous mode
[ 1647.479259][ T9885] ip6tnl1: entered allmulticast mode
[ 1647.485927][ T9885] vxlan0: entered allmulticast mode
[ 1647.495034][ T9885] bridge0: port 3(vlan2) entered blocking state
[ 1647.501526][ T9885] bridge0: port 3(vlan2) entered forwarding state
[ 1647.510358][ T9885] sit1: entered allmulticast mode
[ 1647.516307][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1647.516463][ T9885] ipvlan2: entered allmulticast mode
[ 1647.531506][ T9885] ipvlan3: entered allmulticast mode
[ 1647.537420][ T9885] gretap0: entered allmulticast mode
[ 1647.544328][ T9885] netdevsim netdevsim1 eth0: entered allmulticast mode
[ 1647.552788][ T9885] netdevsim netdevsim1 eth1: entered allmulticast mode
[ 1647.560837][ T9885] netdevsim netdevsim1 eth2: entered allmulticast mode
[ 1647.569471][ T9885] netdevsim netdevsim1 eth3: entered allmulticast mode
[ 1647.578556][ T9885] gtp0: entered allmulticast mode
[ 1647.584824][ T9885] bond1: entered allmulticast mode
[ 1647.589970][ T9885] ip6gre1: entered allmulticast mode
[ 1647.597491][ T9885] vxlan1: entered allmulticast mode
[ 1647.604641][ T9885] bridge0.257: entered allmulticast mode
[ 1647.611649][ T9885] gtp1: entered allmulticast mode
[ 1647.617434][ T9885] macvlan2: entered allmulticast mode
[ 1647.623626][ T9885] bond2: entered allmulticast mode
[ 1647.628882][ T9885] 
: entered allmulticast mode
[ 1647.634579][ T9885] veth2: entered allmulticast mode
[ 1647.639846][ T9885] veth3: entered allmulticast mode
[ 1647.645530][ T9885] ip6gre2: entered allmulticast mode
[ 1647.651291][ T9885] ipip0: left promiscuous mode
[ 1647.656181][ T9885] vlan0002: entered allmulticast mode
[ 1647.661966][ T9885] bridge1: entered allmulticast mode
[ 1647.667976][ T9885] bond3: entered allmulticast mode
[ 1647.673833][ T9885] sit2: entered allmulticast mode
[ 1647.679464][ T9885] bridge2: left promiscuous mode
[ 1647.685212][ T9885] syztnl0: entered allmulticast mode
[ 1647.690772][ T9885] ´: entered allmulticast mode
[ 1647.695683][ T9885] macvlan3: entered allmulticast mode
[ 1647.701409][ T9885] macvlan4: entered allmulticast mode
[ 1647.706957][ T9885] bridge3: entered allmulticast mode
[ 1647.713290][ T9885] ip6tnl2: entered allmulticast mode
[ 1647.718783][ T9885] sit3: entered allmulticast mode
[ 1647.724785][ T9885] ip6gre3: entered allmulticast mode
[ 1647.730282][ T9885] bridge4: entered allmulticast mode
[ 1647.736579][ T9885] bridge5: entered allmulticast mode
[ 1647.744101][ T9885] macvtap0: left promiscuous mode
[ 1647.749357][ T9885] macvtap0: entered allmulticast mode
[ 1647.755598][ T9885] mac80211_hwsim hwsim71 veth1_to_bo
d: entered allmulticast mode
[ 1647.764197][ T9885] mac80211_hwsim hwsim83 wlan1: entered allmulticast mode
[ 1647.772896][ T9885] gre1: entered allmulticast mode
[ 1647.779536][ T9885] vlan3: entered allmulticast mode
[ 1647.829507][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1647.852418][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1647.896056][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1647.897337][ T9909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1647.993526][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1648.159642][ T9915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1648.764559][ T9948] __nla_validate_parse: 6 callbacks suppressed
[ 1648.764601][ T9948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8849'.
[ 1649.020329][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1649.029969][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8854'.
[ 1649.119682][ T9963] netlink: 'syz.4.8852': attribute type 1 has an invalid length.
[ 1649.137015][ T9963] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8852'.
[ 1649.159593][ T9963] netlink: 'syz.4.8852': attribute type 1 has an invalid length.
[ 1649.186741][ T9968] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8853'.
[ 1649.293664][ T9976] netlink: 'syz.1.8857': attribute type 27 has an invalid length.
[ 1649.948018][T10004] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8865'.
[ 1649.971181][T10004] 0ªî{X¹¦: renamed from gretap0 (while UP)
[ 1649.991827][T10004] 0ªî{X¹¦: entered allmulticast mode
[ 1650.005687][T10004] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1650.451976][  T141] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1650.708750][T10027] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1650.755812][T10027] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1651.126129][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8878'.
[ 1651.155754][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8878'.
[ 1651.196912][T10053] hsr_slave_0: left promiscuous mode
[ 1651.212138][T10053] hsr_slave_1: left promiscuous mode
[ 1651.493800][T10072] netlink: 'syz.4.8882': attribute type 4 has an invalid length.
[ 1651.789726][T10077] netlink: 'syz.5.8884': attribute type 1 has an invalid length.
[ 1651.800335][T10080] Bluetooth: MGMT ver 1.23
[ 1651.829934][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8884'.
[ 1651.840976][T10083] xt_hashlimit: size too large, truncated to 1048576
[ 1651.858917][T10086] veth0_to_batadv: mtu less than device minimum
[ 1651.897808][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8886'.
[ 1652.237778][T10107] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002
[ 1652.292236][T10109] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8888'.
[ 1652.527709][T10112] bond0: option lacp_active: invalid value (5)
[ 1652.561458][T10112] bond0 (unregistering): Released all slaves
[ 1652.664879][T10115] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1652.752547][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1652.774024][T10117] netlink: 'syz.2.8891': attribute type 29 has an invalid length.
[ 1652.876235][T10126] netlink: 'syz.5.8893': attribute type 1 has an invalid length.
[ 1653.313711][T10140] geneve0: entered promiscuous mode
[ 1654.336716][T10177] __nla_validate_parse: 5 callbacks suppressed
[ 1654.336739][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1654.583789][T10184] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1654.609905][T10180] netlink: 'syz.5.8910': attribute type 1 has an invalid length.
[ 1654.635344][T10187] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1654.660566][T10180] netlink: 'syz.5.8910': attribute type 2 has an invalid length.
[ 1655.354140][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1655.398288][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1655.409157][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1655.423000][T10204] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8914'.
[ 1655.468755][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1655.488853][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'.
[ 1655.600817][T10215] netlink: 'syz.5.8916': attribute type 1 has an invalid length.
[ 1655.748763][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8916'.
[ 1655.807453][T10215] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1656.865207][T10263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1658.066501][T10301] xt_CT: No such helper "syz0"
[ 1658.365434][T10310] netlink: 'syz.1.8944': attribute type 1 has an invalid length.
[ 1658.478452][T10315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1658.499160][T10315] batadv_slave_1: entered allmulticast mode
[ 1658.886510][T10334] netlink: 'syz.1.8949': attribute type 3 has an invalid length.
[ 1660.027939][T10382] nbd: couldn't find a device at index -1590602240
[ 1660.428435][T10398] __nla_validate_parse: 7 callbacks suppressed
[ 1660.428458][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8963'.
[ 1660.619851][T10405] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1660.846986][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8970'.
[ 1661.685463][T14902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1661.715353][T14902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1661.729774][T14902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1661.751823][T14902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1661.764829][T14902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1662.223772][T10467] geneve0: entered promiscuous mode
[ 1662.235798][T10467] geneve0: left promiscuous mode
[ 1662.394513][T10473] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1662.877900][T10446] lo speed is unknown, defaulting to 1000
[ 1662.929424][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8983'.
[ 1663.117602][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8983'.
[ 1663.886416][T10525] FAULT_INJECTION: forcing a failure.
[ 1663.886416][T10525] name failslab, interval 1, probability 0, space 0, times 0
[ 1663.903131][ T1879] Bluetooth: hci5: command tx timeout
[ 1663.909919][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1663.993611][T10525] CPU: 0 UID: 0 PID: 10525 Comm: syz.5.8988 Not tainted syzkaller #0 PREEMPT(full) 
[ 1663.993642][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1663.993656][T10525] Call Trace:
[ 1663.993665][T10525]  <TASK>
[ 1663.993676][T10525]  dump_stack_lvl+0xe8/0x150
[ 1663.993715][T10525]  should_fail_ex+0x40c/0x560
[ 1663.993755][T10525]  should_failslab+0xa8/0x100
[ 1663.993787][T10525]  kmem_cache_alloc_noprof+0xa6/0x5f0
[ 1663.993809][T10525]  ? xfrm_policy_get_afinfo+0x30/0x1b0
[ 1663.993841][T10525]  ? dst_alloc+0x105/0x170
[ 1663.993861][T10525]  ? dst_alloc+0x105/0x170
[ 1663.993891][T10525]  dst_alloc+0x105/0x170
[ 1663.993919][T10525]  xfrm_lookup_with_ifid+0x7c8/0x1b40
[ 1663.993961][T10525]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[ 1663.994010][T10525]  xfrm_lookup_route+0x3c/0x1c0
[ 1663.994034][T10525]  udp_sendmsg+0x144a/0x2140
[ 1663.994070][T10525]  ? lock_acquire+0x106/0x350
[ 1663.994113][T10525]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1663.994179][T10525]  ? current_check_autobind_udp_socket+0x198/0x3f0
[ 1663.994204][T10525]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1663.994237][T10525]  ? sock_rps_record_flow+0x19/0x350
[ 1663.994270][T10525]  ? inet_sendmsg+0x23e/0x320
[ 1663.994302][T10525]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1663.994327][T10525]  sock_sendmsg_nosec+0x10e/0x180
[ 1663.994357][T10525]  ____sys_sendmsg+0x54e/0x850
[ 1663.994385][T10525]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1663.994417][T10525]  ? import_iovec+0x73/0xa0
[ 1663.994453][T10525]  ___sys_sendmsg+0x2a5/0x360
[ 1663.994483][T10525]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1663.994501][T10525]  ? __lock_acquire+0x683/0x2cf0
[ 1663.994582][T10525]  __sys_sendmmsg+0x273/0x4d0
[ 1663.994611][T10525]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1663.994644][T10525]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1663.994685][T10525]  ? ksys_write+0x242/0x270
[ 1663.994728][T10525]  ? __pfx_ksys_write+0x10/0x10
[ 1663.994768][T10525]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1663.994791][T10525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1663.994813][T10525]  do_syscall_64+0x174/0x580
[ 1663.994833][T10525]  ? trace_irq_disable+0x3b/0x140
[ 1663.994861][T10525]  ? clear_bhb_loop+0x40/0x90
[ 1663.994888][T10525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1663.994913][T10525] RIP: 0033:0x7f152399de99
[ 1663.994935][T10525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1663.994953][T10525] RSP: 002b:00007f1521bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1663.994976][T10525] RAX: ffffffffffffffda RBX: 00007f1523c25fa0 RCX: 00007f152399de99
[ 1663.994990][T10525] RDX: 03fffffffffffe8f RSI: 0000200000004d00 RDI: 0000000000000004
[ 1663.995005][T10525] RBP: 00007f1521bf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1663.995018][T10525] R10: 0000000004000f50 R11: 0000000000000246 R12: 0000000000000002
[ 1663.995029][T10525] R13: 00007f1523c26038 R14: 00007f1523c25fa0 R15: 00007ffeabf61ee8
[ 1663.995066][T10525]  </TASK>
[ 1664.397890][T10446] wlan0 speed is unknown, defaulting to 1000
[ 1664.653033][T10539] bridge: RTM_NEWNEIGH with invalid ether address
[ 1664.690080][T10539] bridge: RTM_NEWNEIGH with invalid ether address
[ 1665.359366][T10446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1665.379779][T10446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1665.409652][T10446] bridge_slave_0: entered allmulticast mode
[ 1665.425425][T10446] bridge_slave_0: entered promiscuous mode
[ 1665.442895][T10446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1665.454191][T10446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.470722][T10446] bridge_slave_1: entered allmulticast mode
[ 1665.489165][T10446] bridge_slave_1: entered promiscuous mode
[ 1665.615927][T10446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1665.655724][T10446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1665.783832][T10446] team0: Port device team_slave_0 added
[ 1665.814933][T10446] team0: Port device team_slave_1 added
[ 1665.851748][T10592] FAULT_INJECTION: forcing a failure.
[ 1665.851748][T10592] name failslab, interval 1, probability 0, space 0, times 0
[ 1665.865123][T10592] CPU: 1 UID: 0 PID: 10592 Comm: syz.3.9002 Not tainted syzkaller #0 PREEMPT(full) 
[ 1665.865151][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1665.865164][T10592] Call Trace:
[ 1665.865172][T10592]  <TASK>
[ 1665.865182][T10592]  dump_stack_lvl+0xe8/0x150
[ 1665.865221][T10592]  should_fail_ex+0x40c/0x560
[ 1665.865253][T10592]  should_failslab+0xa8/0x100
[ 1665.865283][T10592]  kmem_cache_alloc_noprof+0xa6/0x5f0
[ 1665.865308][T10592]  ? dst_alloc+0x105/0x170
[ 1665.865332][T10592]  ? dst_alloc+0x105/0x170
[ 1665.865363][T10592]  dst_alloc+0x105/0x170
[ 1665.865393][T10592]  ipv4_blackhole_route+0x32/0x6a0
[ 1665.865456][T10592]  xfrm_lookup_route+0xd7/0x1c0
[ 1665.865481][T10592]  udp_sendmsg+0x144a/0x2140
[ 1665.865517][T10592]  ? lock_acquire+0x106/0x350
[ 1665.865560][T10592]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1665.865628][T10592]  ? current_check_autobind_udp_socket+0x198/0x3f0
[ 1665.865653][T10592]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1665.865687][T10592]  ? sock_rps_record_flow+0x19/0x350
[ 1665.865720][T10592]  ? inet_sendmsg+0x23e/0x320
[ 1665.865752][T10592]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1665.865780][T10592]  sock_sendmsg_nosec+0x10e/0x180
[ 1665.865820][T10592]  ____sys_sendmsg+0x54e/0x850
[ 1665.865847][T10592]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1665.865880][T10592]  ? import_iovec+0x73/0xa0
[ 1665.865913][T10592]  ___sys_sendmsg+0x2a5/0x360
[ 1665.865939][T10592]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1665.865958][T10592]  ? __lock_acquire+0x683/0x2cf0
[ 1665.866049][T10592]  __sys_sendmmsg+0x273/0x4d0
[ 1665.866078][T10592]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1665.866111][T10592]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1665.866158][T10592]  ? ksys_write+0x242/0x270
[ 1665.866192][T10592]  ? __pfx_ksys_write+0x10/0x10
[ 1665.866232][T10592]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1665.866254][T10592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1665.866277][T10592]  do_syscall_64+0x174/0x580
[ 1665.866296][T10592]  ? trace_irq_disable+0x3b/0x140
[ 1665.866323][T10592]  ? clear_bhb_loop+0x40/0x90
[ 1665.866350][T10592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1665.866371][T10592] RIP: 0033:0x7fd5aeb9de99
[ 1665.866392][T10592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1665.866409][T10592] RSP: 002b:00007fd5afa82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1665.866433][T10592] RAX: ffffffffffffffda RBX: 00007fd5aee25fa0 RCX: 00007fd5aeb9de99
[ 1665.866448][T10592] RDX: 03fffffffffffe8f RSI: 0000200000004d00 RDI: 0000000000000004
[ 1665.866463][T10592] RBP: 00007fd5afa82090 R08: 0000000000000000 R09: 0000000000000000
[ 1665.866476][T10592] R10: 0000000004000f50 R11: 0000000000000246 R12: 0000000000000002
[ 1665.866489][T10592] R13: 00007fd5aee26038 R14: 00007fd5aee25fa0 R15: 00007ffccdfa8b78
[ 1665.866526][T10592]  </TASK>
[ 1665.913396][T10446] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1665.990325][ T1879] Bluetooth: hci5: command tx timeout
[ 1666.169905][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1666.196782][T10446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1666.212397][T10446] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1666.230287][T10446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1666.323567][T10446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1666.624198][T10446] hsr_slave_0: entered promiscuous mode
[ 1666.647336][T10446] hsr_slave_1: entered promiscuous mode
[ 1667.182166][T10638] sch_fq: defrate 4294967293 ignored.
[ 1667.187406][T10609] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1667.329325][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9011'.
[ 1667.416383][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9014'.
[ 1667.605803][T10645] lo speed is unknown, defaulting to 1000
[ 1667.846977][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9017'.
[ 1667.881306][T10446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1667.885538][ T1879] block nbd6: Receive control failed (result -32)
[ 1667.893839][T14902] block nbd6: Receive control failed (result -32)
[ 1667.928661][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9017'.
[ 1667.965088][T10446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.979408][T10662] nbd: must specify at least one socket
[ 1668.210838][T14902] Bluetooth: hci5: command tx timeout
[ 1668.235587][T10446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1668.257822][T10446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1668.356657][T31078] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[ 1668.594991][T10446] netdevsim netdevsim4 
€Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1668.633110][T10446] netdevsim netdevsim4 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.022320][ T1318] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[ 1669.487007][T10645] wlan0 speed is unknown, defaulting to 1000
[ 1669.956157][T10446] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1669.989972][T10446] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1670.005363][T10446] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1670.116176][T10446] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1670.154597][T10446] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1670.209126][T10446] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1670.236046][T10446] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1670.277690][T10446] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1670.291419][T14902] Bluetooth: hci5: command tx timeout
[ 1670.735931][T10446] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1670.819868][T10751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9030'.
[ 1670.855419][T10446] 8021q: adding VLAN 0 to HW filter on device team0
[ 1670.896344][T10750] syzkaller0: entered promiscuous mode
[ 1670.909678][T10750] syzkaller0: entered allmulticast mode
[ 1670.940608][T10751] bond0: invalid ARP target 0.0.0.0 specified for addition
[ 1670.955626][T10751] bond0: option arp_ip_target: invalid value (0)
[ 1671.073909][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1671.081144][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1671.144282][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1671.151534][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1671.278739][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9034'.
[ 1671.320956][T10771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9034'.
[ 1671.573910][ T3365] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[ 1671.588237][T10785] netlink: 'syz.1.9037': attribute type 13 has an invalid length.
[ 1671.610406][ T3365] bond0: active interface up!
[ 1671.702139][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1671.715022][ T4825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1671.816993][ T4825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1672.154894][    C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1672.330775][ T4825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1672.390982][ T4824] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1672.576794][T10826] IPVS: Unknown mcast interface: dvmrp1
[ 1672.756414][T10830] 8021q: VLANs not supported on gre0
[ 1672.843248][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1672.847364][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9045'.
[ 1672.911242][T10835] netlink: 'syz.2.9045': attribute type 10 has an invalid length.
[ 1673.228505][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9047'.
[ 1673.262643][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9048'.
[ 1673.543112][T10446] veth0_vlan: entered promiscuous mode
[ 1673.629644][T10446] veth1_vlan: entered promiscuous mode
[ 1673.894701][T10446] veth0_macvtap: entered promiscuous mode
[ 1673.928670][T10446] veth1_macvtap: entered promiscuous mode
[ 1673.982603][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1674.005823][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1674.076752][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1674.113054][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1674.141520][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1674.168227][   T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1674.174439][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9055'.
[ 1674.588635][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1674.603390][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1674.716208][T10907] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[ 1674.718071][T10894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1675.050729][T31069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1675.085225][T31069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1675.299498][T10943] openvswitch: netlink: Multiple metadata blocks provided
[ 1676.023814][T10957] sit1: entered promiscuous mode
[ 1676.098244][ T1879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1676.115071][ T1879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1676.129453][ T1879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1676.146924][ T1879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1676.155673][ T1879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1676.385273][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9072'.
[ 1676.419546][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9072'.
[ 1676.717306][T11000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9075'.
[ 1676.902178][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9076'.
[ 1677.126149][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9077'.
[ 1677.152828][T11021] netlink: 'syz.3.9078': attribute type 4 has an invalid length.
[ 1677.158454][T11022] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9078'.
[ 1677.226374][T11023] netlink: 'syz.3.9078': attribute type 4 has an invalid length.
[ 1677.232025][T11022] netlink: 'syz.3.9078': attribute type 5 has an invalid length.
[ 1678.033461][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1678.068956][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1678.212083][T14902] Bluetooth: hci4: command tx timeout
[ 1678.296145][T11030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1678.361963][T31070] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1678.399960][T31070] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1678.428657][T31070] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1678.480341][T10983] lo speed is unknown, defaulting to 1000
[ 1678.486201][T31070] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1678.804063][T11072] __nla_validate_parse: 3 callbacks suppressed
[ 1678.804087][T11072] netlink: 228 bytes leftover after parsing attributes in process `syz.5.9088'.
[ 1678.873884][T11072] netlink: 'syz.5.9088': attribute type 13 has an invalid length.
[ 1678.920581][T11072] netlink: 'syz.5.9088': attribute type 17 has an invalid length.
[ 1678.992311][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9088'.
[ 1679.157434][T11072] 8021q: adding VLAN 0 to HW filter on device team0
[ 1679.178099][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1679.221192][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9091'.
[ 1679.251357][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1679.259905][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1679.271619][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1679.324502][T11072] veth1_vlan: left promiscuous mode
[ 1679.343882][T11072] veth0_vlan: left promiscuous mode
[ 1679.353547][T11072] veth0_vlan: entered promiscuous mode
[ 1679.366083][T11072] veth1_vlan: entered promiscuous mode
[ 1679.388902][T11072] veth1_macvtap: left promiscuous mode
[ 1679.396129][T11072] veth0_macvtap: left promiscuous mode
[ 1679.403530][T11072] veth0_macvtap: entered promiscuous mode
[ 1679.421830][T11072] veth1_macvtap: entered promiscuous mode
[ 1679.445608][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1679.458720][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1679.473276][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1679.488751][T11072] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1679.515834][T11072] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1679.527258][T11072] veth3: left allmulticast mode
[ 1679.537686][T11072] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1679.610851][T11074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1679.653703][ T3365] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1679.660995][ T3365] bridge0: port 1(bridge_slave_0) entered listening state
[ 1679.813946][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1679.826788][T11089] netlink: 'syz.1.9092': attribute type 2 has an invalid length.
[ 1679.835531][T11089] netlink: 'syz.1.9092': attribute type 1 has an invalid length.
[ 1679.843512][T11089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1679.851672][T11085] bond1: option broadcast_neighbor: invalid value (4)
[ 1679.880025][T11085] bond1 (unregistering): Released all slaves
[ 1679.964288][ T3330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.002886][T11090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1680.033711][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1680.060360][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1680.069748][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1680.082310][T11090] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9092'.
[ 1680.125762][ T3330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.145272][ T3330] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[ 1680.159576][T10983] wlan0 speed is unknown, defaulting to 1000
[ 1680.160140][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.243355][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.258738][T11122] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_cmd_wq": -EINTR
[ 1680.291857][T14902] Bluetooth: hci4: command tx timeout
[ 1680.540936][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1680.873725][T11200] netlink: 'syz.1.9100': attribute type 3 has an invalid length.
[ 1681.699596][T10983] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1681.710129][T10983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1681.718032][T10983] bridge_slave_0: entered allmulticast mode
[ 1681.779404][T10983] bridge_slave_0: entered promiscuous mode
[ 1681.834370][T10983] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1681.844475][T10983] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1681.853892][T10983] bridge_slave_1: entered allmulticast mode
[ 1681.864227][T10983] bridge_slave_1: entered promiscuous mode
[ 1681.967895][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1682.022261][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1682.199978][T10983] team0: Port device team_slave_0 added
[ 1682.225404][T10983] team0: Port device team_slave_1 added
[ 1682.364872][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1682.372162][T14902] Bluetooth: hci4: command tx timeout
[ 1682.392935][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1682.451308][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1682.462095][  T141] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1682.479765][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1682.499600][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1682.512989][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1682.553036][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1682.986921][T10983] hsr_slave_0: entered promiscuous mode
[ 1683.004411][T10983] hsr_slave_1: entered promiscuous mode
[ 1683.019979][T10983] debugfs: 'hsr0' already exists in 'hsr'
[ 1683.034584][T10983] Cannot create hsr debugfs directory
[ 1683.127869][T11276] xfrm1: entered allmulticast mode
[ 1683.387420][T11289] netlink: 'syz.3.9115': attribute type 1 has an invalid length.
[ 1683.546750][T11282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1683.554629][T11282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1683.871753][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1683.909790][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1684.451348][T14902] Bluetooth: hci4: command tx timeout
[ 1684.602884][T11289] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1684.668731][T11297] 
: renamed from dummy0
[ 1684.741166][T11302] 0ªî{X¹¦: renamed from 
31ªî{X¹¦ (while UP)
[ 1684.762611][T11302] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1684.833170][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1684.851709][T11319] __nla_validate_parse: 7 callbacks suppressed
[ 1684.851731][T11319] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9121'.
[ 1684.875006][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1684.906579][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.002294][T11319] 0ªî{X¹¦: renamed from gretap0
[ 1685.057047][T11319] 0ªî{X¹¦: entered allmulticast mode
[ 1685.087995][T11319] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1685.138017][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.590135][T11332] netlink: 'syz.5.9125': attribute type 3 has an invalid length.
[ 1685.620301][T11332] netlink: 646 bytes leftover after parsing attributes in process `syz.5.9125'.
[ 1685.641664][T11334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9125'.
[ 1685.941932][T10983] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1685.954047][T10983] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.319398][T10983] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1686.343062][T10983] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.567905][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9126'.
[ 1686.629310][T10983] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1686.651486][T10983] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1686.890685][T10983] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1686.913387][T10983] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.897782][T10983] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1687.942108][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1687.969729][T10983] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1688.011218][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1688.034744][T10983] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1688.072263][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1688.093957][T10983] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1688.190608][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9129'.
[ 1688.289914][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1688.438060][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9129'.
[ 1688.562367][T11360] syzkaller0: entered promiscuous mode
[ 1688.574734][T11360] syzkaller0: entered allmulticast mode
[ 1688.939289][T10983] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1688.990051][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9132'.
[ 1689.022146][T10983] 8021q: adding VLAN 0 to HW filter on device team0
[ 1689.038623][T11379] bridge0: Device is already in use.
[ 1689.078027][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1689.085274][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1689.285501][T31078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1689.292757][T31078] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1689.337687][ T4827] syz2: Port: 1 Link DOWN
[ 1689.470099][T11392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1689.477457][T11392] IPv6: NLM_F_CREATE should be set when creating new route
[ 1689.535775][T11394] netlink: 'syz.5.9138': attribute type 1 has an invalid length.
[ 1689.756115][T11394] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1689.785408][T11410] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9141'.
[ 1689.819024][T11410] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[ 1689.869006][T11410] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1690.070835][T11423] tipc: Enabled bearer <eth:team0>, priority 0
[ 1690.917142][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1690.965317][ T5287] veth0_vlan: left promiscuous mode
[ 1690.999850][T11041] veth0_vlan: entered promiscuous mode
[ 1691.053149][T11048] syz2: Port: 1 Link ACTIVE
[ 1691.221238][T10983] veth0_vlan: entered promiscuous mode
[ 1691.304201][T10983] veth1_vlan: entered promiscuous mode
[ 1691.447585][T10983] veth0_macvtap: entered promiscuous mode
[ 1691.478122][T10983] veth1_macvtap: entered promiscuous mode
[ 1691.596720][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1691.669373][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1691.774343][ T3330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.798239][ T3330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.885591][ T3365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.946825][ T3365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1692.020964][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9160'.
[ 1692.228269][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1692.264911][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.397411][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1692.445694][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1692.826107][T11514] sctp: [Deprecated]: syz.5.9163 (pid 11514) Use of int in maxseg socket option.
[ 1692.826107][T11514] Use struct sctp_assoc_value instead
[ 1693.048407][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9165'.
[ 1693.099351][T11523] netlink: 'syz.4.9166': attribute type 1 has an invalid length.
[ 1693.156341][T11523] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.9166'.
[ 1693.158646][T11522] netlink: 'syz.2.9165': attribute type 1 has an invalid length.
[ 1693.186044][T11522] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9165'.
[ 1693.207635][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9165'.
[ 1693.223745][T11521] lo speed is unknown, defaulting to 1000
[ 1693.418907][ T1879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1693.439864][ T1879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1693.448592][ T1879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1693.467542][ T1879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1693.479072][ T1879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1693.782572][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9169'.
[ 1693.834987][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9169'.
[ 1694.408236][  T141] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1694.442612][  T141] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.611518][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1694.728132][T11560] netlink: 'syz.5.9174': attribute type 2 has an invalid length.
[ 1694.800047][  T141] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1694.830718][  T141] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.911544][T11560] batadv0: entered promiscuous mode
[ 1694.963153][T11560] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[ 1695.024502][T11521] wlan0 speed is unknown, defaulting to 1000
[ 1695.108724][  T141] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1695.138358][  T141] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.287897][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1695.292161][T11529] lo speed is unknown, defaulting to 1000
[ 1695.498823][  T141] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1695.521692][  T141] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1695.570761][T14902] Bluetooth: hci0: command tx timeout
[ 1695.645138][T11577] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1696.499143][  T141] vlan2: left promiscuous mode
[ 1696.514174][  T141] geneve0: left promiscuous mode
[ 1696.525954][  T141] bridge0: port 3(vlan2) entered disabled state
[ 1696.563261][T11599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1697.048130][  T141] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[ 1697.639393][  T141] bond0 (unregistering): Released all slaves
[ 1697.650618][T14902] Bluetooth: hci0: command tx timeout
[ 1697.658228][  T141] bond1 (unregistering): Released all slaves
[ 1697.673806][  T141] bond2 (unregistering): Released all slaves
[ 1697.689826][  T141] bond3 (unregistering): Released all slaves
[ 1697.709122][T11529] wlan0 speed is unknown, defaulting to 1000
[ 1697.721797][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1697.947769][  T141] 
: left promiscuous mode
[ 1698.173840][  T141] tipc: Disabling bearer <udp:syz2>
[ 1698.189808][  T141] tipc: Disabling bearer <eth:team0>
[ 1698.206754][  T141] tipc: Left network mode
[ 1698.662923][T11649] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9190'.
[ 1698.863108][T11649] 0ªî{X¹¦: renamed from gretap0 (while UP)
[ 1698.876128][T11649] 0ªî{X¹¦: entered allmulticast mode
[ 1698.889340][T11649] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1698.926140][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9194'.
[ 1699.736718][T14902] Bluetooth: hci0: command tx timeout
[ 1700.158290][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1700.278981][  T141] hsr_slave_0: left promiscuous mode
[ 1700.326392][  T141] hsr_slave_1: left promiscuous mode
[ 1700.368054][  T141] veth1_vlan: left promiscuous mode
[ 1700.381150][  T141] veth0_vlan: left promiscuous mode
[ 1700.725219][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9204'.
[ 1700.750293][T11717] netlink: 'syz.4.9203': attribute type 3 has an invalid length.
[ 1700.817265][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9200'.
[ 1700.856324][   T48] smc: removing ib device syz2
[ 1700.902605][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9203'.
[ 1701.437972][ T4828] syz2: Port: 1 Link DOWN
[ 1701.547976][T11716] bond1: option lacp_active: invalid value (5)
[ 1701.608629][T11716] bond1 (unregistering): Released all slaves
[ 1701.709778][T11046] ==================================================================
[ 1701.717985][T11046] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250
[ 1701.726942][T11046] Read of size 1 at addr ffff88807f124e09 by task kworker/1:13/11046
[ 1701.735096][T11046] 
[ 1701.737523][T11046] CPU: 1 UID: 0 PID: 11046 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(full) 
[ 1701.737565][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1701.737579][T11046] Workqueue: events smc_ib_port_event_work
[ 1701.737631][T11046] Call Trace:
[ 1701.737641][T11046]  <TASK>
[ 1701.737650][T11046]  dump_stack_lvl+0xe8/0x150
[ 1701.737685][T11046]  print_address_description+0x55/0x1e0
[ 1701.737731][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1701.737758][T11046]  print_report+0x58/0x70
[ 1701.737784][T11046]  kasan_report+0x117/0x150
[ 1701.737818][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1701.737848][T11046]  __ethtool_get_link_ksettings+0x230/0x250
[ 1701.737885][T11046]  __ethtool_get_link_ksettings+0x11f/0x250
[ 1701.737914][T11046]  ib_get_eth_speed+0x180/0x7f0
[ 1701.737975][T11046]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1701.738000][T11046]  ? do_raw_spin_unlock+0xf5/0x210
[ 1701.738028][T11046]  ? rxe_query_port+0x6b/0x3d0
[ 1701.738069][T11046]  rxe_query_port+0x93/0x3d0
[ 1701.738092][T11046]  ib_query_port+0x16e/0x830
[ 1701.738117][T11046]  smc_ib_port_event_work+0x147/0x920
[ 1701.738151][T11046]  ? rcu_is_watching+0x15/0xb0
[ 1701.738184][T11046]  ? process_scheduled_works+0xa20/0x14e0
[ 1701.738208][T11046]  process_scheduled_works+0xa8e/0x14e0
[ 1701.738247][T11046]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1701.738274][T11046]  ? assign_work+0x3cf/0x5d0
[ 1701.738299][T11046]  worker_thread+0xa47/0xfb0
[ 1701.738337][T11046]  kthread+0x388/0x470
[ 1701.738365][T11046]  ? __pfx_worker_thread+0x10/0x10
[ 1701.738386][T11046]  ? __pfx_kthread+0x10/0x10
[ 1701.738415][T11046]  ret_from_fork+0x514/0xb70
[ 1701.738460][T11046]  ? __pfx_ret_from_fork+0x10/0x10
[ 1701.738488][T11046]  ? __switch_to+0xc89/0x1420
[ 1701.738515][T11046]  ? __pfx_kthread+0x10/0x10
[ 1701.738544][T11046]  ret_from_fork_asm+0x1a/0x30
[ 1701.738572][T11046]  </TASK>
[ 1701.738581][T11046] 
[ 1701.921324][T11046] Allocated by task 31440:
[ 1701.925823][T11046]  kasan_save_track+0x3e/0x80
[ 1701.930519][T11046]  __kasan_kmalloc+0x93/0xb0
[ 1701.935202][T11046]  __kvmalloc_node_noprof+0x53f/0x860
[ 1701.940578][T11046]  alloc_netdev_mqs+0xa9/0x12b0
[ 1701.945434][T11046]  rtnl_create_link+0x321/0xd70
[ 1701.950293][T11046]  rtnl_newlink_create+0x258/0x7b0
[ 1701.955410][T11046]  rtnl_newlink+0x166d/0x1c30
[ 1701.960092][T11046]  rtnetlink_rcv_msg+0x802/0xc00
[ 1701.965034][T11046]  netlink_rcv_skb+0x226/0x4a0
[ 1701.969798][T11046]  netlink_unicast+0x7bb/0x940
[ 1701.974653][T11046]  netlink_sendmsg+0x813/0xb40
[ 1701.979415][T11046]  sock_sendmsg_nosec+0x13a/0x180
[ 1701.984441][T11046]  __sys_sendto+0x408/0x5a0
[ 1701.988960][T11046]  __x64_sys_sendto+0xde/0x100
[ 1701.993735][T11046]  do_syscall_64+0x174/0x580
[ 1701.998330][T11046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1702.004225][T11046] 
[ 1702.006549][T11046] Freed by task 141:
[ 1702.010442][T11046]  kasan_save_track+0x3e/0x80
[ 1702.015126][T11046]  kasan_save_free_info+0x40/0x50
[ 1702.020191][T11046]  __kasan_slab_free+0x5c/0x80
[ 1702.024962][T11046]  kfree+0x1c5/0x640
[ 1702.028860][T11046]  device_release+0xc4/0x1f0
[ 1702.033547][T11046]  kobject_put+0x222/0x550
[ 1702.037978][T11046]  netdev_run_todo+0xeee/0x1060
[ 1702.042844][T11046]  default_device_exit_batch+0x923/0x9a0
[ 1702.048491][T11046]  ops_undo_list+0x4b4/0x8d0
[ 1702.053087][T11046]  cleanup_net+0x572/0x810
[ 1702.057512][T11046]  process_scheduled_works+0xa8e/0x14e0
[ 1702.063069][T11046]  worker_thread+0xa47/0xfb0
[ 1702.067661][T11046]  kthread+0x388/0x470
[ 1702.071737][T11046]  ret_from_fork+0x514/0xb70
[ 1702.076358][T11046]  ret_from_fork_asm+0x1a/0x30
[ 1702.081123][T11046] 
[ 1702.083450][T11046] The buggy address belongs to the object at ffff88807f124000
[ 1702.083450][T11046]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 1702.097763][T11046] The buggy address is located 3593 bytes inside of
[ 1702.097763][T11046]  freed 4096-byte region [ffff88807f124000, ffff88807f125000)
[ 1702.111734][T11046] 
[ 1702.114061][T11046] The buggy address belongs to the physical page:
[ 1702.120528][T11046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f120
[ 1702.129286][T11046] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1702.137785][T11046] memcg:ffff88802bbff101
[ 1702.142022][T11046] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1702.149566][T11046] page_type: f5(slab)
[ 1702.153566][T11046] raw: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122
[ 1702.162184][T11046] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88802bbff101
[ 1702.170780][T11046] head: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122
[ 1702.179467][T11046] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88802bbff101
[ 1702.188146][T11046] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1702.196816][T11046] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1702.205483][T11046] page dumped because: kasan: bad access detected
[ 1702.211893][T11046] page_owner tracks the page as allocated
[ 1702.217608][T11046] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4991, tgid 4991 (udevd), ts 31484948769, free_ts 28750764550
[ 1702.238370][T11046]  post_alloc_hook+0x1f9/0x250
[ 1702.243166][T11046]  get_page_from_freelist+0x21fa/0x2270
[ 1702.248720][T11046]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1702.254629][T11046]  allocate_slab+0x79/0x5e0
[ 1702.259140][T11046]  refill_objects+0x2d5/0x350
[ 1702.263825][T11046]  __pcs_replace_empty_main+0x2bf/0x6b0
[ 1702.269382][T11046]  __kvmalloc_node_noprof+0x66b/0x860
[ 1702.274764][T11046]  seq_read_iter+0x1ea/0xca0
[ 1702.279358][T11046]  vfs_read+0x595/0xa80
[ 1702.283521][T11046]  ksys_read+0x150/0x270
[ 1702.287770][T11046]  do_syscall_64+0x174/0x580
[ 1702.292398][T11046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1702.298300][T11046] page last free pid 1 tgid 1 stack trace:
[ 1702.304100][T11046]  free_pages_prepare+0x960/0xa60
[ 1702.309132][T11046]  __free_contig_range_common+0x174/0x340
[ 1702.314875][T11046]  destroy_args+0x4e5/0x570
[ 1702.319437][T11046]  debug_vm_pgtable+0x3f8/0x410
[ 1702.324290][T11046]  do_one_initcall+0x250/0x870
[ 1702.329061][T11046]  do_initcall_level+0x10a/0x1a0
[ 1702.334037][T11046]  do_initcalls+0x59/0xa0
[ 1702.338367][T11046]  kernel_init_freeable+0x29d/0x3e0
[ 1702.343569][T11046]  kernel_init+0x1d/0x1d0
[ 1702.347912][T11046]  ret_from_fork+0x514/0xb70
[ 1702.352521][T11046]  ret_from_fork_asm+0x1a/0x30
[ 1702.357326][T11046] 
[ 1702.359660][T11046] Memory state around the buggy address:
[ 1702.365287][T11046]  ffff88807f124d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1702.373348][T11046]  ffff88807f124d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1702.381409][T11046] >ffff88807f124e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1702.389465][T11046]                       ^
[ 1702.393794][T11046]  ffff88807f124e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1702.401941][T11046]  ffff88807f124f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1702.410017][T11046] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1702.453466][T14902] Bluetooth: hci0: command tx timeout
[ 1702.477724][T11046] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1702.484979][T11046] CPU: 1 UID: 0 PID: 11046 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(full) 
[ 1702.494538][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1702.504598][T11046] Workqueue: events smc_ib_port_event_work
[ 1702.510427][T11046] Call Trace:
[ 1702.513708][T11046]  <TASK>
[ 1702.516638][T11046]  vpanic+0x56c/0xa60
[ 1702.520636][T11046]  ? __pfx_vpanic+0x10/0x10
[ 1702.525157][T11046]  panic+0xc5/0xd0
[ 1702.528973][T11046]  ? __pfx_panic+0x10/0x10
[ 1702.533397][T11046]  ? preempt_schedule_thunk+0x16/0x40
[ 1702.538774][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1702.544853][T11046]  ? preempt_schedule_thunk+0x16/0x40
[ 1702.550240][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1702.556323][T11046]  check_panic_on_warn+0x89/0xb0
[ 1702.561276][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1702.567360][T11046]  end_report+0x73/0x170
[ 1702.571641][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1702.577729][T11046]  kasan_report+0x128/0x150
[ 1702.582255][T11046]  ? __ethtool_get_link_ksettings+0x230/0x250
[ 1702.588345][T11046]  __ethtool_get_link_ksettings+0x230/0x250
[ 1702.594251][T11046]  __ethtool_get_link_ksettings+0x11f/0x250
[ 1702.600162][T11046]  ib_get_eth_speed+0x180/0x7f0
[ 1702.605025][T11046]  ? __pfx_ib_get_eth_speed+0x10/0x10
[ 1702.610412][T11046]  ? do_raw_spin_unlock+0xf5/0x210
[ 1702.615539][T11046]  ? rxe_query_port+0x6b/0x3d0
[ 1702.620308][T11046]  rxe_query_port+0x93/0x3d0
[ 1702.624909][T11046]  ib_query_port+0x16e/0x830
[ 1702.629503][T11046]  smc_ib_port_event_work+0x147/0x920
[ 1702.634905][T11046]  ? rcu_is_watching+0x15/0xb0
[ 1702.639681][T11046]  ? process_scheduled_works+0xa20/0x14e0
[ 1702.645406][T11046]  process_scheduled_works+0xa8e/0x14e0
[ 1702.650965][T11046]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1702.656951][T11046]  ? assign_work+0x3cf/0x5d0
[ 1702.661553][T11046]  worker_thread+0xa47/0xfb0
[ 1702.666182][T11046]  kthread+0x388/0x470
[ 1702.670262][T11046]  ? __pfx_worker_thread+0x10/0x10
[ 1702.675394][T11046]  ? __pfx_kthread+0x10/0x10
[ 1702.679993][T11046]  ret_from_fork+0x514/0xb70
[ 1702.684590][T11046]  ? __pfx_ret_from_fork+0x10/0x10
[ 1702.689712][T11046]  ? __switch_to+0xc89/0x1420
[ 1702.694487][T11046]  ? __pfx_kthread+0x10/0x10
[ 1702.699088][T11046]  ret_from_fork_asm+0x1a/0x30
[ 1702.703858][T11046]  </TASK>
[ 1702.707174][T11046] Kernel Offset: disabled
[ 1702.711492][T11046] Rebooting in 86400 seconds..