last executing test programs:

14.962350568s ago: executing program 0 (id=9234):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000010000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

14.793701334s ago: executing program 0 (id=9238):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90180ff0000c54222cb7a"}}]}, 0x150}}, 0x0)

14.582087008s ago: executing program 0 (id=9241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

14.516304244s ago: executing program 0 (id=9244):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000100))

14.309520369s ago: executing program 0 (id=9248):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8})
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000)
r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='b '], 0x8)

14.196122328s ago: executing program 0 (id=9250):
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380), 0x10)
r6 = openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x20008844)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={<r8=>r4, &(0x7f0000000200)='(>\x00', 0x2, &(0x7f0000000240)={@_ha_fsid={[0x4, 0x87c]}, {0x0, 0x9, 0x4, 0x100000000}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x8})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000540)={'erspan0\x00', r2, 0xb550d111732b975e, 0x700, 0x6, 0x9, {{0x30, 0x4, 0x1, 0x3b, 0xc0, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x7, [{@empty, 0x7}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xe1}, {@broadcast, 0x9}, {@multicast1, 0xd}, {@remote, 0x5}]}, @rr={0x7, 0x23, 0xc0, [@multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast2, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp={0x44, 0x10, 0x61, 0x0, 0xf, [0x400, 0xe7, 0x5]}, @generic={0x7, 0x5, "62b05a"}, @ssrr={0x89, 0x17, 0xa, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote, @multicast1]}, @noop, @timestamp_addr={0x44, 0x1c, 0xa9, 0x1, 0x9, [{@local, 0x9}, {@loopback, 0x2}, {@remote, 0x7fffffff}]}, @end]}}}}})
sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000890}, 0x8000)
write$cgroup_pid(r6, &(0x7f0000000180), 0x12)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r9, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, 0x0, &(0x7f00000000c0))
write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

6.225717186s ago: executing program 1 (id=9323):
socket$nl_generic(0x11, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
socket(0x40000000015, 0x805, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r5, r4, 0x4, r6}, 0x10)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

6.099771103s ago: executing program 1 (id=9326):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

5.763894405s ago: executing program 1 (id=9329):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x9a, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xdd42aa509253125d, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x7}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x401}, @TCA_PIE_BETA={0x8, 0x5, 0x2}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0xb}]}}]}, 0x60}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.657890706s ago: executing program 1 (id=9331):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000002180))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000006280), 0x4)

5.446248396s ago: executing program 1 (id=9333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async)

5.306411448s ago: executing program 1 (id=9334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r1, 0x1, 0x3, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.182758465s ago: executing program 2 (id=9359):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x0) (async)
r1 = socket(0x22, 0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
listen(r2, 0x0) (async)
bind$bt_hci(r1, 0x0, 0x0) (async)
bind$can_raw(r1, &(0x7f0000000000), 0x10)

2.33104138s ago: executing program 2 (id=9360):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0)
sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0)
unshare(0x0)
syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x32, 0x0, @private=0x10000000, @empty}}}}}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0xde35, 0x20}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8}}, 0x8, 0x1ff, 0x6, 0xd, 0x16}, &(0x7f0000000140)=0x98)
unshare(0x10a00)

2.219124317s ago: executing program 4 (id=9362):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1})
r1 = socket(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a3000000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5ab", 0x1f}, {&(0x7f0000000180)="800978e5", 0x4}], 0x3}, 0x20008b88)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
shutdown(r5, 0x2)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) (async)
socket(0xa, 0x3, 0xff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a3000000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x800) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5ab", 0x1f}, {&(0x7f0000000180)="800978e5", 0x4}], 0x3}, 0x20008b88) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async)
shutdown(r5, 0x2) (async)
recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, 0x0, 0x0) (async)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) (async)

1.99251271s ago: executing program 3 (id=9363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$sock(r5, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x9754}}], 0x18}, 0x40812) (async)
sendmsg$sock(r5, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x9754}}], 0x18}, 0x40812)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010004b1a00000000000000007a000000", @ANYRES32=r4, @ANYBLOB="00000000000000000a0001000180c200000e0000"], 0x2c}}, 0x0)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000)
shutdown(r1, 0x1)
socket$kcm(0x21, 0x2, 0x2) (async)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000000000000100100000e000000"], 0x20}, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000000000000100100000e000000"], 0x20}, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4098, 0x1002}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4}, 0x12062) (async)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4098, 0x1002}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4}, 0x12062)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB="00800000672f2c795a4d7311a8dbdcfe61e14c75ae2d7d7d737a77c8875f23f69e0430d8caabf97ce659471c1f5a3fa359165deb3d921d61b567b15683806090fa8d8b97d7dfdbd2571b811b1394b2170ff99504942ea42794cd3cd26e7657b481891184a33500caf8ea7eb68ba5c7a618f03dd1d2ff1eea", @ANYRES16=r7, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x24080000}, 0x800) (async)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB="00800000672f2c795a4d7311a8dbdcfe61e14c75ae2d7d7d737a77c8875f23f69e0430d8caabf97ce659471c1f5a3fa359165deb3d921d61b567b15683806090fa8d8b97d7dfdbd2571b811b1394b2170ff99504942ea42794cd3cd26e7657b481891184a33500caf8ea7eb68ba5c7a618f03dd1d2ff1eea", @ANYRES16=r7, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x24080000}, 0x800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000)
socket$packet(0x11, 0x2, 0x300) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b1000000000000000056f77f6ace523406ba53371c35f83294783c6db3171419c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b1000000000000000056f77f6ace523406ba53371c35f83294783c6db3171419c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
poll(&(0x7f0000000040), 0x55, 0x0)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x4}, {0x6}]}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r12, 0x891a, &(0x7f00000001c0)={'ipvlan1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}) (async)
ioctl$sock_inet_SIOCSIFBRDADDR(r12, 0x891a, &(0x7f00000001c0)={'ipvlan1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}})

1.822779301s ago: executing program 2 (id=9364):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0)

1.749906187s ago: executing program 4 (id=9365):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xf}, {0xfff3, 0xc}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x24, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x116, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0xa005) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x116, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0xa005)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}}, 0x20010000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$xdp(0x2c, 0x3, 0x0) (async)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x20000, 0x4)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', <r9=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f00000018c0)={0x2c, 0x0, r9}, 0x10)
poll(&(0x7f0000000200)=[{r8}], 0x1, 0x1)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf2508000025"], 0x14}}, 0x812) (async)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf2508000025"], 0x14}}, 0x812)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'erspan0\x00', 0x1})
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)

1.619065882s ago: executing program 2 (id=9366):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

1.586250624s ago: executing program 3 (id=9367):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0xb15, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10041}, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @loopback, 0x4, 0x6, 0x0, 0x100, 0x5, 0x6010022})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.342040363s ago: executing program 4 (id=9368):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000019c54222cb7a"}}]}, 0x150}}, 0x0)

1.337117244s ago: executing program 3 (id=9369):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000100)={&(0x7f0000000080)=0x9, 0x7, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000000c0)})
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf2304a0574197cdb}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x80, 0x43, &(0x7f0000000180)=""/67, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xf, 0x3, 0xfff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x2, 0x10, 0x5}, {0x4, 0x5, 0x1, 0x4}, {0x4, 0x1, 0x1, 0x2}, {0x5, 0x1, 0x9, 0x9}, {0x2, 0x5, 0x85, 0x9}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x2, 0xd, 0x9}, {0x4, 0x2, 0xd, 0x3}, {0x3, 0x1, 0x4, 0xb}], 0x10, 0xe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0xa8, 0xad, &(0x7f0000000800)="2d3c001b143feb692e96a476dceaa31821e0788d02778661faa7a3573aa2f011848e5c46b4501e371d6fb5bf051e94d2158ba7fa8505aeec8c4066cc7de20f4f33306ab1c95fee03770c6ba4813ff47f627d76420f664372e59452117878bd9e1f9bc6d4cb89eb888cd2407e06c04ae82cc817dfdcc684300c6fbb685c0f28145bcde0f9f1b5d0cbb9889d86e832cfa3cafd3447e9132a118e10c908cf02cab80c802dafb586fe63", &(0x7f00000008c0)=""/173, 0x40, 0x0, 0xaf, 0x1a, &(0x7f0000000980)="1b7d675da9c435ba863f2df081c5f11e5ebf54b72936acf45f7edd7198fad30272cbdfe1d92934dd56b2b95f2564ff9e9840f35b1a1d9db1676eb47c3681e8af5c3937243870a5e68d43cb140786e3ad23b0bad98bea13e30d6337bd4c932383279147627b69c1869f4ef9c50aea8cd1639a328949a2a24ef15705b1567881b3027ddcef9f1a92316ecde6f247e67402392ed46f64fcab37777cf0843b17cca0af5296d476b87977355dd3ab93e987", &(0x7f0000000a40)="dc5f67fa4f6ed52dfc44ec37e36fbed3f8994194d3d7c480b1d6", 0x1}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0xa8, 0xad, &(0x7f0000000800)="2d3c001b143feb692e96a476dceaa31821e0788d02778661faa7a3573aa2f011848e5c46b4501e371d6fb5bf051e94d2158ba7fa8505aeec8c4066cc7de20f4f33306ab1c95fee03770c6ba4813ff47f627d76420f664372e59452117878bd9e1f9bc6d4cb89eb888cd2407e06c04ae82cc817dfdcc684300c6fbb685c0f28145bcde0f9f1b5d0cbb9889d86e832cfa3cafd3447e9132a118e10c908cf02cab80c802dafb586fe63", &(0x7f00000008c0)=""/173, 0x40, 0x0, 0xaf, 0x1a, &(0x7f0000000980)="1b7d675da9c435ba863f2df081c5f11e5ebf54b72936acf45f7edd7198fad30272cbdfe1d92934dd56b2b95f2564ff9e9840f35b1a1d9db1676eb47c3681e8af5c3937243870a5e68d43cb140786e3ad23b0bad98bea13e30d6337bd4c932383279147627b69c1869f4ef9c50aea8cd1639a328949a2a24ef15705b1567881b3027ddcef9f1a92316ecde6f247e67402392ed46f64fcab37777cf0843b17cca0af5296d476b87977355dd3ab93e987", &(0x7f0000000a40)="dc5f67fa4f6ed52dfc44ec37e36fbed3f8994194d3d7c480b1d6", 0x1}, 0x50)

1.284735033s ago: executing program 4 (id=9370):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x2, 0x300) (rerun: 32)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x20040084) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x7800, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', <r4=>r3, 0x10, 0x0, 0x1, 0x10000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4, 0x0, @loopback, @local}}}}) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=0x4) (rerun: 64)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="af1528f7bcd529edf2dfd2a6dab532c45ee970c830e41a7866fb6ac6307c66189df3", 0x22}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="961de6e8b18eb51b97c18b89bf861949d7774b290ae670e2ed5b9ecf75e615", 0x1f}], 0x1, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}], 0x88}}, {{&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f00000003c0)="7eb527144db3d6f3ac6112081adbdccf060e67eedd3d202a7e977d3200a5b6597c97a44e515f0d681591efe48c17", 0x2e}, {&(0x7f0000001380)="9f9a3a4187be6587e5e49c3c2b4921450368c346dbd4af0107ff9b7acfaf24f3ab3174022928440e8095c978f91e611bab3b79a241f684f80ad4cf041924fa2cd8c32bdc1f7b0ab661e7e1547754cd158fd88e56c49e9e00bde952bc0fc92c4260fac3f3116628c6834f5329df440ebfe5cd8330f291a8aea7eeed200c38221417550d9a83624bd680d06bf1af46a2b0107d225ef4b0763a2027dc6c4c8b4d832c8603e60d4796d7ee1a7d3458de3a9fe4dc301f6e9eb608e92806c2a37b8ad54a4e6787efd40a601347d988a9000000", 0xd0}], 0x2, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd0}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="cdb838e27047ba9bb406906ee17651331cfe660d1ea3f8ad9b21c7aefc65908650ee2774a0d4a9f59fec55d4451a661fb31d2fd98ef28fc3ed50b4bc3508f00d30889a90795e8f40d38d2b82fe36650c4e94cd2fd42f8b714b8030da89bf1cb99bc9735efa49e971627d8aec57deee5a", 0x70}], 0x1, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @broadcast}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="2339a4fefec80a4b9f48959a265a03d8b3b1228c6951c53974df331d9ec5673e1c15d65aa1ca36fc15b410a07c4d09b15c076b8195d24cb0dd630e22f21df49479bcbdfdf2693e9a20e330361915a4efa1219fd0980ec37bb2a17599f6af4d457a225b894e2b3b54fbb5860bddc23a1dfa53523ff69a04571ccb8c86a51abf1188b45028b4dec0706e37939fc0f9b8cc415c16d77c37", 0x96}, {&(0x7f0000000880)="39811366f6e75e8268bd6ba70026946564fc9b61f16b05dbd182bcc601dde9ad99933a6b0fd99b9370dc748536cd2b4a62d4d542cac817d428db1e2921b15a634386619f45281c25269965acbfddbefec3a1b1aaafdd2b10d40c0604906825d8670d47b62ff93302d30297851edb99875efc05aa0039fad19cdce5f482c015206e4cafbe2187db9bdf8e4108730827205633aa726cdaf717ab6c9af83fcaf4e668701f6aa88f69ac20fb7ce8bd99cfff308ded6601dcd961", 0xb8}, {&(0x7f0000000980)="1109bf4b34a4457b0d99e610e151674280a98ce5d9a652472163258865a2ffc7d5da78bf8081b86d182558110c15d18797d4d5a43cf9fbacf444d1c7fbb1ba12cb2f6986babc9e1a8e950318e088359f80ae12e43028254af0c983af1b3c410290f0dfc014bff85a52492b788be68ef3897f3abf5af5532fee71a0477d09c10f90849dda4aee5a8171639177143ab8616f184925fb38ec7c008b9afc613f8cb918c9efb64cf152659efa64996119c51a378d2bf99e37f74d1a445a7c3239380ee519ec0a6db6ea6d502b31138491b99580bdf61f0f6a58be113bab733279cde8", 0xe0}, {&(0x7f0000000a80)="2e8ca6b6c1429a14ecbd42db4d02151997875e6f7b26f279ed681a7dd64a01af2e530bbc2d0bb597ff1205faeba81c555f93ca3e6cd6107199c204ded09446e201c40cc4f00d89a1429e3bfca0920cd68e73902234ba22d6b51977976659e484b2084a1beec9e8d94b83b9aeac7b0aca8969eaf3b7303384a53a7f59ceae4329c586a6c11cfa3e0ffdd277c590", 0x8d}, {&(0x7f0000000b40)="da759bcad61d8d6725ccde25848d8dd6578be77bf94aad8328fbcd3275ee51f40b12de8d1b7a292fd3d32a1135992a1e015e7c4b5372e8e91c641faa34b93f5e541b488c", 0x44}, {&(0x7f0000000bc0)="ff3f6ae4d58b1c1477d9", 0xa}, {&(0x7f0000000c00)="625df4e0edec0eadbe45b245366c418c2c381943063c5fafe3b73118596296cbf7033958d09accdf79a8749f8bf22e58607120c624c0ca49e0de6a3af2ff94a526aa20267cc16bb102f5259a368d5010672e45b0699cefeaef6d683176cee079fd8d5deb0c795045e7449c6d0357f7b736", 0x71}], 0x7, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac141431640101000000000000009404010044289b4000000026000080010000000f0000000900000000000001ff0000000300000000fffffffe891b1fac14142bac1e0001ac141410ac141430640101000a010101001c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="7f000001ac1414bb00000000140000000000000000000000020000000800000000000000"], 0xb0}}, {{&(0x7f0000000dc0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="905740f5c11ffb005714914f12cc839d36ba102785f843972beb7c4494f75bd5b9273e86e5806d0964d829f6e2c06b059c58b5f979971ce12f08ed77bd60935f5934fb55846bad648740e0269f8b3938d01e864639ddc9d1cafaa90eb9fad171d43efbc857d809f8f4881b665fd6805737f49d52ea3e80d421088f9fc3443788a6d540425c41dc0c9aeac96d1b3c10c2b0056ad6725620593bed0f2fc9fb6d216265b19c72d1a74134ff557f63c305d22bb8ebd204bfa2de153a5d6c755d581767f83888635c0870e141", 0xca}, {&(0x7f0000000f00)="284f35247c90b4d677d60d7095f5eba0c17a2cf36a7c1e364f076973750fddebbf6d64a74f694c7e66ede1ad5fb949dfac0d5725382b29230d8f37eea06eb3e23e27bf9d6382522a5a491a02b590dda284b56dba9bd9bb5b3e37a2eb463409f8eb015b14240c14", 0x67}, {&(0x7f0000000f80)="e4e2f70b9b583fb44bf2886763b7be4a62189c4a79a4f579d6659594ab383c9cc6bdead6ab1ea3c591096aea66c0e151685cbd29026f2a1a9796950944a9354343eaf31cc08d0af7a6d3f85f4e55e0631b0aae589f07f189e7f243c42a32caaa0e8268ca436aa89afccf2956b0beb7f28e5c93e5c66626e3edda50708790512ea8fe2be3060d400c915601ccdf5129b25663f7d0", 0x94}, {&(0x7f0000001040)="031a52af6ad14819975e6f0ff100bbb83f939b1c1e528e4eb2ff11dc6ee4cf20e241a2933cbbb9a0f6932ed0a417c0e7350cd8e3eccf0ad8c91ff4fee64cb81ec882d6ffee0b27c96567e6b65067cf93bc6acff86c4ce50e05586a2c395818bf7a4d721341", 0x65}, {&(0x7f00000010c0)="d73716fe5bd6e9f56d85e63b1ee4731d5768b6b0dd6cfb2c3df0a9ea3686a1faa1d8f23e640e7733bf0a2da68a55ca343df3da4f39e978a140fb4c19916f5e04797c54d901bdf9caffd4bfd41beec5163fa71c14eaff80f80f93fe89f2d9e571c19324f72616009a50e21ced984995df2e324f628f6acea3e16a1a55708f8d87", 0x80}], 0x5, &(0x7f00000011c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x38}}], 0x6, 0x40010) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}})

1.090970672s ago: executing program 3 (id=9371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a0101"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000005c0)=0x40)
connect$pppoe(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x1ffd, 0x0, {0x0, 0x0, 0x74, r6, {0xc}, {0xafabc05531515610, 0xfff3}, {0xfff3, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x7b25004c5aa6b2f}, 0x4008054)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={<r8=>0x0, 0x29, "d76b873368f969b2613d011e44f6ada9b64a5e7a6ffbb6ef7106b590885e1754e74f2b8df1c8731f3f"}, &(0x7f0000000440)=0x31)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000480)={r8, 0xffff}, 0x8)

915.623717ms ago: executing program 2 (id=9372):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00')

717.964669ms ago: executing program 4 (id=9373):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0)
write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "1c6868009464e3cc"}}}}}, 0x36)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000140)={0x8, 'veth1\x00', {'wlan1\x00'}, 0x9})
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r7)

677.607901ms ago: executing program 3 (id=9374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x8, &(0x7f0000000000), 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
listen(r5, 0xb852)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

315.804378ms ago: executing program 2 (id=9375):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002640)={'veth0_vlan\x00'})
bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10)
recvmmsg(r0, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/143, 0x8f}], 0x4, &(0x7f0000001400)=""/81, 0x51}, 0x9}, {{&(0x7f0000001480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001500)=""/252, 0xfc}, {&(0x7f0000001600)=""/79, 0x4f}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000001680)=""/167, 0xa7}, {&(0x7f0000001740)=""/71, 0x47}, {&(0x7f00000017c0)=""/43, 0x2b}], 0x6, &(0x7f0000001880)=""/184, 0xb8}, 0x2}, {{&(0x7f0000001940)=@tipc=@id, 0x80, &(0x7f0000001c00)=[{&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f0000001a40)=""/207, 0xcf}, {&(0x7f0000001b40)=""/10, 0xa}, {&(0x7f0000001b80)=""/13, 0xd}, {&(0x7f0000001bc0)=""/40, 0x28}], 0x5, &(0x7f0000001c80)=""/3, 0x3}, 0x416}, {{&(0x7f0000001cc0)=@nfc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d40)=""/131, 0x83}], 0x1, &(0x7f0000001e40)=""/177, 0xb1}, 0x1}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/91, 0x5b}, {&(0x7f0000001f80)=""/175, 0xaf}], 0x2, &(0x7f0000002080)=""/204, 0xcc}, 0x81}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002180)=""/255, 0xff}, {&(0x7f0000002280)=""/213, 0xd5}], 0x2, &(0x7f00000023c0)=""/138, 0x8a}, 0xfffffffd}], 0x6, 0x2, &(0x7f0000002600))
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
listen(r4, 0xfffffffd)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x20, 0x0, 0x1c18, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x204c000}, 0x4000)
close(r4)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

105.549476ms ago: executing program 4 (id=9376):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r0, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00')
r2 = gettid()
r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r7, 0x433, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000048}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31}, 0x90)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_GETNSID={0x5c, 0x5a, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x5c}}, 0x20000000)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

0s ago: executing program 3 (id=9377):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x1000000)

kernel console output (not intermixed with test programs):

 T521] tipc: Node identity ac14140f, cluster identity 4711
[  860.440682][  T521] tipc: New replicast peer: 255.255.255.255
[  860.453423][  T521] tipc: Enabled bearer <udp:syz2>, priority 10
[  860.666279][  T540] netlink: 'syz.1.7689': attribute type 11 has an invalid length.
[  860.702488][  T540] netlink: 'syz.1.7689': attribute type 4 has an invalid length.
[  860.769260][  T546] netlink: 'syz.2.7691': attribute type 10 has an invalid length.
[  860.966092][  T552] bond0 (unregistering): (slave bridge3): Releasing backup interface
[  860.990223][  T552] bridge3: left promiscuous mode
[  861.071608][  T552] bond0 (unregistering): (slave gretap2): Releasing backup interface
[  861.109351][  T552] bond0 (unregistering): Released all slaves
[  861.212142][  T570] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  861.345110][  T578] netlink: 'syz.0.7704': attribute type 61 has an invalid length.
[  861.425928][ T9818] IPVS: starting estimator thread 0...
[  861.519887][  T590] IPVS: using max 28 ests per chain, 67200 per kthread
[  861.560285][ T9818] tipc: Node number set to 2886997007
[  862.035762][  T628] syzkaller0: entered promiscuous mode
[  862.044861][  T622] netlink: 'syz.2.7715': attribute type 3 has an invalid length.
[  862.056115][  T628] syzkaller0: entered allmulticast mode
[  862.511738][  T657] __nla_validate_parse: 19 callbacks suppressed
[  862.511760][  T657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7727'.
[  862.583023][  T664] netlink: 'syz.3.7730': attribute type 11 has an invalid length.
[  862.591636][  T664] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7730'.
[  862.663168][  T659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7727'.
[  862.668920][  T667] syzkaller1: entered promiscuous mode
[  862.709155][  T667] syzkaller1: entered allmulticast mode
[  862.728775][  T670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7727'.
[  862.740362][  T670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7727'.
[  863.325090][  T708] validate_nla: 1 callbacks suppressed
[  863.325112][  T708] netlink: 'syz.1.7741': attribute type 1 has an invalid length.
[  863.371681][  T708] bond1: entered promiscuous mode
[  863.378541][  T708] 8021q: adding VLAN 0 to HW filter on device bond1
[  863.435296][  T710] 8021q: adding VLAN 0 to HW filter on device bond1
[  863.453882][  T710] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  863.498100][  T710] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  863.524114][  T721] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  863.547364][  T710] bond1: (slave vti0): making interface the new active one
[  863.556008][  T710] vti0: entered promiscuous mode
[  863.567568][  T710] bond1: (slave vti0): Enslaving as an active interface with an up link
[  863.827950][  T737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7749'.
[  864.033466][  T749] syzkaller0: entered promiscuous mode
[  864.055201][  T749] syzkaller0: entered allmulticast mode
[  864.520333][  T779] nlmon0: Caught tx_queue_len zero misconfig
[  864.722619][  T795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  865.549525][  T861] netlink: 'syz.1.7784': attribute type 1 has an invalid length.
[  865.558067][  T861] netlink: 'syz.1.7784': attribute type 2 has an invalid length.
[  865.567786][  T864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7781'.
[  865.582179][  T861] netlink: 'syz.1.7784': attribute type 1 has an invalid length.
[  865.622481][  T861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7784'.
[  867.430027][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  867.736807][  T805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  867.750311][  T827] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7769'.
[  868.039981][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.066112][  T887] 
s5���: renamed from vlan1 (while UP)
[  868.088785][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.110306][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.152812][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.271722][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.299653][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.367354][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.393286][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.406393][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7789'.
[  868.423869][  T917] FAULT_INJECTION: forcing a failure.
[  868.423869][  T917] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  868.437904][  T917] CPU: 1 UID: 0 PID: 917 Comm: syz.3.7796 Not tainted syzkaller #0 PREEMPT(full) 
[  868.437953][  T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  868.437968][  T917] Call Trace:
[  868.437977][  T917]  <TASK>
[  868.437986][  T917]  dump_stack_lvl+0xe8/0x150
[  868.438023][  T917]  should_fail_ex+0x412/0x560
[  868.438055][  T917]  _copy_from_user+0x2d/0xb0
[  868.438088][  T917]  ___sys_sendmsg+0x1c6/0x360
[  868.438126][  T917]  ? __pfx____sys_sendmsg+0x10/0x10
[  868.438192][  T917]  ? __fget_files+0x2a/0x420
[  868.438223][  T917]  ? __fget_files+0x3a0/0x420
[  868.438261][  T917]  __x64_sys_sendmsg+0x1bd/0x2a0
[  868.438292][  T917]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  868.438330][  T917]  ? __pfx_ksys_write+0x10/0x10
[  868.438362][  T917]  do_syscall_64+0x14d/0xf80
[  868.438392][  T917]  ? trace_irq_disable+0x3b/0x150
[  868.438421][  T917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.438440][  T917]  ? clear_bhb_loop+0x40/0x90
[  868.438464][  T917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.438484][  T917] RIP: 0033:0x7f7af939c629
[  868.438514][  T917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.438531][  T917] RSP: 002b:00007f7af75f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  868.438553][  T917] RAX: ffffffffffffffda RBX: 00007f7af9615fa0 RCX: 00007f7af939c629
[  868.438568][  T917] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  868.438581][  T917] RBP: 00007f7af75f6090 R08: 0000000000000000 R09: 0000000000000000
[  868.438593][  T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  868.438606][  T917] R13: 00007f7af9616038 R14: 00007f7af9615fa0 R15: 00007ffe7ca37d08
[  868.438639][  T917]  </TASK>
[  870.486366][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  870.964704][  T883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  871.406872][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807bfc8800: rx timeout, send abort
[  871.861369][ T1001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  871.907051][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880353b0c00: rx timeout, send abort
[  871.924497][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88807bfc8800: abort rx timeout. Force session deactivation
[  872.424199][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880353b0c00: abort rx timeout. Force session deactivation
[  874.584345][  T985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  874.830542][ T1039] __nla_validate_parse: 27 callbacks suppressed
[  874.830569][ T1039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7818'.
[  875.531668][ T1090] bond5: option miimon: invalid value (18446744073709551585)
[  875.541863][ T1094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7835'.
[  875.551734][ T1090] bond5: option miimon: allowed values 0 - 2147483647
[  875.653071][ T1090] bond5 (unregistering): Released all slaves
[  875.832280][ T1104] netlink: 284 bytes leftover after parsing attributes in process `syz.1.7840'.
[  876.230024][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  876.238984][    C1] lec:lec_tx_timeout: lec0
[  878.313467][ T1068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  878.496806][ T1114] netlink: 'syz.1.7844': attribute type 1 has an invalid length.
[  878.514034][ T1119] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7846'.
[  878.552182][ T1118] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  878.593414][ T1114] team0: Port device team_slave_0 removed
[  878.613750][ T1114] bond2: (slave team_slave_0): Enslaving as a backup interface with an up link
[  878.646340][ T1124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7846'.
[  878.665778][ T1125] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7847'.
[  878.716075][ T1129] netlink: 'syz.3.7849': attribute type 1 has an invalid length.
[  878.724190][ T1129] netlink: 'syz.3.7849': attribute type 4 has an invalid length.
[  878.732760][ T1129] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7849'.
[  878.861152][ T1132] syzkaller0: entered promiscuous mode
[  878.883506][ T1132] syzkaller0: entered allmulticast mode
[  879.123008][ T1156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7855'.
[  879.467787][ T1181] netlink: 'syz.3.7862': attribute type 5 has an invalid length.
[  879.778036][ T1195] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  879.845044][ T1196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7867'.
[  880.700165][ T1200] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7868'.
[  881.923647][ T1138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  882.072101][ T1203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7871'.
[  882.112903][ T1203] netlink: 'syz.2.7871': attribute type 1 has an invalid length.
[  882.125599][ T1203] netlink: 'syz.2.7871': attribute type 2 has an invalid length.
[  882.137982][ T1203] netlink: 'syz.2.7871': attribute type 1 has an invalid length.
[  882.154515][ T1203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7871'.
[  882.208070][ T1212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7872'.
[  882.232642][ T1214] netlink: 'syz.0.7873': attribute type 5 has an invalid length.
[  882.457640][ T1221] netlink: 3380 bytes leftover after parsing attributes in process `syz.2.7876'.
[  882.484000][ T1223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  882.492652][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_0
[  882.513763][ T1223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  882.532654][ T1223] batman_adv: batadv0: Removing interface: batadv_slave_1
[  882.548839][ T1231] IPVS: set_ctl: invalid protocol: 167 10.1.1.2:20001
[  882.761497][ T1249] IPv6: NLM_F_CREATE should be specified when creating new route
[  882.793699][T21834] Bluetooth: hci5: command 0x0406 tx timeout
[  883.174287][ T1268] team0: Device gtp0 is up. Set it down before adding it as a team port
[  885.624366][ T1236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  885.797394][ T1277] netlink: 'syz.4.7890': attribute type 10 has an invalid length.
[  885.929518][ T1291] netlink: 'syz.0.7889': attribute type 5 has an invalid length.
[  886.393762][ T1306] IPv6: NLM_F_CREATE should be specified when creating new route
[  886.439523][ T1298] pim6reg1: entered promiscuous mode
[  886.449531][ T1298] pim6reg1: entered allmulticast mode
[  886.579713][ T1323] veth0: entered promiscuous mode
[  886.607772][ T1323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7902'.
[  886.772435][ T1333] netlink: 'syz.4.7904': attribute type 10 has an invalid length.
[  886.984910][ T1336] netlink: 'syz.4.7905': attribute type 21 has an invalid length.
[  886.993615][ T1336] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7905'.
[  887.003775][ T1336] netlink: 'syz.4.7905': attribute type 5 has an invalid length.
[  887.012633][ T1336] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7905'.
[  889.417705][ T1309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  889.703647][ T1354] netlink: 'syz.0.7911': attribute type 2 has an invalid length.
[  889.725806][ T1354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7911'.
[  890.732062][ T1402] syzkaller0: entered promiscuous mode
[  890.737884][ T1402] syzkaller0: entered allmulticast mode
[  890.786941][ T1402] Unsupported ieee802154 address type: 0
[  890.831888][ T1406] netlink: 'syz.1.7925': attribute type 10 has an invalid length.
[  890.848560][ T1406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  890.857474][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.068553][ T1377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  893.079469][ T1389] netlink: 'syz.2.7919': attribute type 11 has an invalid length.
[  893.089576][ T1389] netlink: 'syz.2.7919': attribute type 11 has an invalid length.
[  893.097604][ T1389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7919'.
[  893.295935][ T1428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7931'.
[  893.483754][ T1434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7934'.
[  893.501823][ T1436] netlink: 'syz.4.7935': attribute type 10 has an invalid length.
[  893.533669][ T1434] netlink: 576 bytes leftover after parsing attributes in process `syz.0.7934'.
[  893.586669][ T1441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  893.763901][ T1458] openvswitch: netlink: IP tunnel dst address not specified
[  893.782251][ T1447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  893.793237][ T1447] syz_tun: entered allmulticast mode
[  893.936441][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7944'.
[  894.130051][ T1480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  894.236902][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7951'.
[  894.302084][ T1487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.396488][ T1493] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004
[  894.430383][ T1493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7953'.
[  894.458964][ T1439] tipc: Disabling bearer <eth:syzkaller0>
[  894.540905][T12604] lec:lec_start_xmit: lec0:No lecd attached
[  894.596471][ T1500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.713203][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7960'.
[  894.786666][ T1515] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  894.786548][   T30] audit: type=1107 audit(1771943605.714:9): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  894.799343][ T1516] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7961'.
[  894.987022][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7961'.
[  895.007864][ T1516] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.015921][ T1516] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.225840][ T1518] geneve2: entered promiscuous mode
[  895.231982][ T1518] geneve2: entered allmulticast mode
[  895.249940][T32253] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.269601][T32253] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.282804][T32253] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.293438][T32253] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  895.585103][ T1543] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  895.801500][ T1565] xt_hashlimit: size too large, truncated to 1048576
[  896.276362][ T1578] ipt_REJECT: TCP_RESET invalid for non-tcp
[  896.588618][ T1602] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  896.641517][ T1602] bond3: (slave lo): Enslaving as an active interface with an up link
[  896.679713][ T1602] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  896.742194][ T1592] syzkaller1: entered promiscuous mode
[  896.747839][ T1592] syzkaller1: entered allmulticast mode
[  896.766174][ T1616] syzkaller0: entered promiscuous mode
[  896.774166][ T1616] syzkaller0: entered allmulticast mode
[  896.839415][ T1606] syzkaller0: entered promiscuous mode
[  896.845939][ T1606] syzkaller0: entered allmulticast mode
[  896.940592][ T1625] netlink: 'syz.4.7992': attribute type 25 has an invalid length.
[  897.025610][ T1630] openvswitch: netlink: IPv4 tun info is not correct
[  898.632556][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.813495][ T1623] __nla_validate_parse: 6 callbacks suppressed
[  898.813516][ T1623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7990'.
[  898.868207][ T1618] syzkaller0: entered promiscuous mode
[  898.874554][ T1618] syzkaller0: entered allmulticast mode
[  898.944574][ T1634] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7994'.
[  899.038257][ T1638] netlink: 'syz.3.7995': attribute type 10 has an invalid length.
[  899.425934][ T1663] syzkaller0: entered promiscuous mode
[  899.433657][ T1663] syzkaller0: entered allmulticast mode
[  899.753351][ T1676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8008'.
[  899.809189][ T1676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8008'.
[  899.840184][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8012'.
[  899.951830][ T1691] netlink: 'syz.4.8014': attribute type 12 has an invalid length.
[  899.970330][ T1691] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8014'.
[  899.992958][ T1691] netlink: 'syz.4.8014': attribute type 1 has an invalid length.
[  900.022479][ T1693] netlink: 'syz.1.8015': attribute type 10 has an invalid length.
[  900.082830][ T1691] bond4: entered promiscuous mode
[  900.090821][ T1691] 8021q: adding VLAN 0 to HW filter on device bond4
[  900.171875][ T1701] syzkaller0: entered promiscuous mode
[  900.177457][ T1701] syzkaller0: entered allmulticast mode
[  900.229801][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms
[  900.238321][    C1] lec:lec_tx_timeout: lec0
[  900.266965][ T1691] bond4: (slave bridge2): making interface the new active one
[  900.275150][ T1691] bridge2: entered promiscuous mode
[  900.283526][ T1691] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  900.353427][ T1713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8022'.
[  900.608592][ T1728] netlink: 'syz.0.8029': attribute type 10 has an invalid length.
[  900.651228][ T1730] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  900.694078][ T1734] netlink: 'syz.1.8031': attribute type 10 has an invalid length.
[  900.741747][   T30] audit: type=1800 audit(1771943611.674:10): pid=1727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8028" name="memory.events" dev="tmpfs" ino=1895 res=0 errno=0
[  900.942710][ T1746] bond0: option resend_igmp: invalid value (32767)
[  900.949446][ T1746] bond0: option resend_igmp: allowed values 0 - 255
[  900.963927][ T1746] bond0 (unregistering): Released all slaves
[  901.037697][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8035'.
[  901.277512][ T1769] syzkaller0: entered promiscuous mode
[  901.286820][ T1769] syzkaller0: entered allmulticast mode
[  901.459078][ T1784] netlink: 'syz.0.8043': attribute type 10 has an invalid length.
[  901.603388][ T1794] netlink: 'syz.0.8048': attribute type 1 has an invalid length.
[  901.658949][ T1794] 8021q: adding VLAN 0 to HW filter on device bond5
[  901.710250][ T1797] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8049'.
[  901.890962][ T1811] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8054'.
[  902.005059][ T1817] ip6tnl0: Caught tx_queue_len zero misconfig
[  902.039910][ T1821] block nbd64: NBD_DISCONNECT
[  902.091481][ T1824] nbd: illegal input index -8454144
[  902.563211][ T1828] syzkaller0: entered promiscuous mode
[  902.568850][ T1828] syzkaller0: entered allmulticast mode
[  902.606037][ T1850] netlink: 'syz.4.8063': attribute type 1 has an invalid length.
[  902.638246][ T1850] bond5: entered promiscuous mode
[  902.644024][ T1850] 8021q: adding VLAN 0 to HW filter on device bond5
[  904.504667][ T1857] netlink: 'syz.2.8062': attribute type 12 has an invalid length.
[  904.512914][ T1857] netlink: 'syz.2.8062': attribute type 29 has an invalid length.
[  904.521249][ T1857] __nla_validate_parse: 5 callbacks suppressed
[  904.521267][ T1857] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8062'.
[  904.556761][ T1859] bond5: (slave bridge3): making interface the new active one
[  904.564905][ T1859] bridge3: entered promiscuous mode
[  904.574760][ T1859] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  904.816759][ T1876] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8068'.
[  905.204278][ T1843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  905.405106][ T1900] netlink: 'syz.1.8077': attribute type 10 has an invalid length.
[  905.748462][ T1904] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8079'.
[  906.714547][ T1985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8098'.
[  906.732279][ T1985] syzkaller0: entered promiscuous mode
[  906.737822][ T1985] syzkaller0: entered allmulticast mode
[  906.900089][ T1990] syzkaller1: entered promiscuous mode
[  906.906492][ T1990] syzkaller1: entered allmulticast mode
[  908.232261][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.019096][ T1948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  909.175178][ T1996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8102'.
[  909.209054][ T1998] netlink: 'syz.0.8104': attribute type 10 has an invalid length.
[  909.373398][ T2008] syzkaller0: entered promiscuous mode
[  909.393418][ T2008] syzkaller0: entered allmulticast mode
[  909.617628][ T2027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8113'.
[  909.636340][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8113'.
[  909.844127][ T2033] syzkaller0: entered promiscuous mode
[  909.861741][ T2033] syzkaller0: entered allmulticast mode
[  909.884389][ T2014] infiniband syz0: set down
[  909.889164][ T2014] infiniband syz0: added bond0
[  909.970713][ T2014] RDS/IB: syz0: added
[  909.993464][ T2014] smc: adding ib device syz0 with port count 1
[  910.013760][ T2014] smc:    ib device syz0 port 1 has no pnetid
[  910.039254][ T2042] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  910.430057][ T2066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8125'.
[  910.603297][ T2071] syzkaller0: entered promiscuous mode
[  910.608953][ T2071] syzkaller0: entered allmulticast mode
[  912.448317][ T2124] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  912.468534][ T2124] netlink: 'syz.2.8143': attribute type 1 has an invalid length.
[  912.568129][ T2129] netlink: 'syz.3.8145': attribute type 11 has an invalid length.
[  912.582041][ T2129] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.8145'.
[  912.598976][ T2126] bond2: (slave gretap1): making interface the new active one
[  912.622196][ T2126] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  912.697735][ T2130] syzkaller0: entered promiscuous mode
[  912.707137][ T2130] syzkaller0: entered allmulticast mode
[  912.967513][ T2142] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.087043][ T2152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'.
[  913.109864][ T2152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'.
[  913.385899][ T5937] IPVS: starting estimator thread 0...
[  913.394733][ T2167] IPVS: ip_vs_edit_dest(): server weight less than zero
[  913.408170][ T2167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  913.493063][ T2168] IPVS: using max 27 ests per chain, 64800 per kthread
[  913.867198][ T2188] netlink: 'syz.0.8162': attribute type 10 has an invalid length.
[  914.023169][ T2195] syzkaller0: entered promiscuous mode
[  914.028905][ T2195] syzkaller0: entered allmulticast mode
[  916.437650][ T2170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  916.636017][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8169'.
[  916.766747][ T2215] netlink: 'syz.2.8172': attribute type 10 has an invalid length.
[  916.835983][ T2214] netlink: 'syz.0.8173': attribute type 10 has an invalid length.
[  917.020344][ T2224] syzkaller0: entered promiscuous mode
[  917.025905][ T2224] syzkaller0: entered allmulticast mode
[  917.367563][ T2253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8184'.
[  917.466226][ T2259] netlink: 'syz.3.8187': attribute type 10 has an invalid length.
[  917.504728][ T2257] syzkaller0: entered promiscuous mode
[  917.525460][ T2257] syzkaller0: entered allmulticast mode
[  917.600125][ T2263] xt_CT: No such helper "pptp"
[  917.690609][ T2266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  917.701052][ T2263] syzkaller0: entered promiscuous mode
[  917.706683][ T2263] syzkaller0: entered allmulticast mode
[  917.759392][ T2263] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  917.803275][ T2263] tipc: Resetting bearer <eth:syzkaller0>
[  917.819255][ T2261] tipc: Resetting bearer <eth:syzkaller0>
[  917.833833][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.855738][ T2276] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  917.897030][ T2261] tipc: Disabling bearer <eth:syzkaller0>
[  917.928048][ T2279] syzkaller0: entered promiscuous mode
[  917.941685][ T2279] syzkaller0: entered allmulticast mode
[  918.164790][ T2290] netlink: 'syz.4.8197': attribute type 10 has an invalid length.
[  918.633068][ T2303] netlink: 'syz.2.8201': attribute type 10 has an invalid length.
[  918.913152][ T2316] team0: Device ip6gre1 is of different type
[  919.036437][ T2317] syzkaller0: entered promiscuous mode
[  919.042413][ T2317] syzkaller0: entered allmulticast mode
[  919.127828][ T2319] netlink: 484 bytes leftover after parsing attributes in process `syz.1.8206'.
[  919.251319][ T2329] tls_set_device_offload_rx: netdev not found
[  919.664118][ T2350] bond0: option mode: unable to set because the bond device has slaves
[  919.686049][ T2352] netlink: 'syz.1.8215': attribute type 10 has an invalid length.
[  919.761058][ T2354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8216'.
[  919.802600][ T7336] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.829936][ T7336] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.859518][ T7336] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.889829][ T7336] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.949397][ T2363] netlink: 'syz.2.8219': attribute type 1 has an invalid length.
[  919.974064][ T2369] netlink: 'syz.2.8219': attribute type 1 has an invalid length.
[  920.008349][ T2363] netlink: 'syz.2.8219': attribute type 2 has an invalid length.
[  920.034546][ T2370] netlink: 'syz.1.8218': attribute type 3 has an invalid length.
[  920.045548][ T2369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8219'.
[  920.048235][ T2363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8219'.
[  920.132223][ T2370] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  920.152853][ T2370] bond4 (unregistering): Released all slaves
[  920.189198][ T2378] syzkaller0: entered promiscuous mode
[  920.201324][ T2378] syzkaller0: entered allmulticast mode
[  920.238861][ T2376] syzkaller0: entered promiscuous mode
[  920.244831][ T2376] syzkaller0: entered allmulticast mode
[  920.286448][ T2382] syzkaller0: entered promiscuous mode
[  920.298539][ T2382] syzkaller0: entered allmulticast mode
[  920.373969][ T2387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8225'.
[  920.460286][ T2387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  920.862845][ T2423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8229'.
[  920.872454][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8229'.
[  920.945758][ T2435] FAULT_INJECTION: forcing a failure.
[  920.945758][ T2435] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  921.002925][ T2435] CPU: 1 UID: 0 PID: 2435 Comm: syz.0.8234 Not tainted syzkaller #0 PREEMPT(full) 
[  921.002957][ T2435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  921.002970][ T2435] Call Trace:
[  921.002978][ T2435]  <TASK>
[  921.002987][ T2435]  dump_stack_lvl+0xe8/0x150
[  921.003024][ T2435]  should_fail_ex+0x412/0x560
[  921.003056][ T2435]  _copy_from_user+0x2d/0xb0
[  921.003088][ T2435]  ___sys_sendmsg+0x1c6/0x360
[  921.003126][ T2435]  ? __pfx____sys_sendmsg+0x10/0x10
[  921.003192][ T2435]  ? __fget_files+0x2a/0x420
[  921.003221][ T2435]  ? __fget_files+0x3a0/0x420
[  921.003260][ T2435]  __x64_sys_sendmsg+0x1bd/0x2a0
[  921.003295][ T2435]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  921.003336][ T2435]  ? __pfx_ksys_write+0x10/0x10
[  921.003369][ T2435]  do_syscall_64+0x14d/0xf80
[  921.003400][ T2435]  ? trace_irq_disable+0x3b/0x150
[  921.003430][ T2435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.003452][ T2435]  ? clear_bhb_loop+0x40/0x90
[  921.003478][ T2435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.003498][ T2435] RIP: 0033:0x7fa899b9c629
[  921.003519][ T2435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.003537][ T2435] RSP: 002b:00007fa89ab0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  921.003560][ T2435] RAX: ffffffffffffffda RBX: 00007fa899e15fa0 RCX: 00007fa899b9c629
[  921.003584][ T2435] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  921.003597][ T2435] RBP: 00007fa89ab0a090 R08: 0000000000000000 R09: 0000000000000000
[  921.003609][ T2435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  921.003621][ T2435] R13: 00007fa899e16038 R14: 00007fa899e15fa0 R15: 00007ffe7d22b058
[  921.003654][ T2435]  </TASK>
[  921.538954][ T2455] syzkaller0: entered promiscuous mode
[  921.549242][ T2455] syzkaller0: entered allmulticast mode
[  921.566502][ T2463] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  921.593839][ T2453] syzkaller0: entered promiscuous mode
[  921.599587][ T2453] syzkaller0: entered allmulticast mode
[  921.770547][ T2474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8247'.
[  921.956317][ T2487] C: renamed from lo (while UP)
[  921.976909][ T2487] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  922.040580][ T2482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  922.604641][ T2505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8255'.
[  922.761344][ T2531] validate_nla: 5 callbacks suppressed
[  922.761370][ T2531] netlink: 'syz.4.8258': attribute type 10 has an invalid length.
[  922.790655][ T2530] syzkaller0: entered promiscuous mode
[  922.796763][ T2530] syzkaller0: entered allmulticast mode
[  922.818197][ T2535] Cannot find set identified by id 3 to match
[  922.902327][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8259'.
[  922.947621][ T2535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8259'.
[  923.377355][ T2575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8269'.
[  923.489655][ T2569] netlink: 'syz.3.8269': attribute type 25 has an invalid length.
[  923.507140][ T2569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8269'.
[  923.536891][ T2575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8269'.
[  923.669521][ T2585] syzkaller0: entered promiscuous mode
[  923.676245][ T2585] syzkaller0: entered allmulticast mode
[  923.810059][ T2597] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8277'.
[  923.946322][ T2607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8280'.
[  924.290030][ T2635] netlink: 'syz.2.8288': attribute type 10 has an invalid length.
[  924.335207][ T2643] syzkaller0: entered promiscuous mode
[  924.343874][ T2643] syzkaller0: entered allmulticast mode
[  924.645620][ T2655] syzkaller0: entered promiscuous mode
[  924.651410][ T2655] syzkaller0: entered allmulticast mode
[  924.736532][ T2663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'.
[  925.017177][ T2687] netlink: 'syz.2.8302': attribute type 10 has an invalid length.
[  925.311662][ T2697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  925.549592][ T2725] syzkaller0: entered promiscuous mode
[  925.572054][ T2730] netlink: 'syz.3.8312': attribute type 21 has an invalid length.
[  925.599479][ T2725] syzkaller0: entered allmulticast mode
[  925.624025][ T2730] netlink: 'syz.3.8312': attribute type 5 has an invalid length.
[  925.677148][ T2741] netlink: 'syz.1.8315': attribute type 10 has an invalid length.
[  925.712111][ T2744] x_tables: duplicate underflow at hook 2
[  925.758174][ T2743] wg1: entered promiscuous mode
[  925.785510][ T2743] wg1: entered allmulticast mode
[  925.893873][ T2755] netlink: 'syz.1.8318': attribute type 1 has an invalid length.
[  925.944135][ T2762] Bluetooth: MGMT ver 1.23
[  926.042906][ T2747] syzkaller0: entered promiscuous mode
[  926.048649][ T2747] syzkaller0: entered allmulticast mode
[  926.110758][ T2755] 8021q: adding VLAN 0 to HW filter on device bond4
[  926.429719][ T2780] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  926.439031][ T5885] IPVS: starting estimator thread 0...
[  926.560046][ T2787] IPVS: using max 29 ests per chain, 69600 per kthread
[  926.687973][ T2801] netlink: 'syz.0.8327': attribute type 2 has an invalid length.
[  927.434105][T32250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.545147][ T2805] netlink: 'syz.4.8328': attribute type 10 has an invalid length.
[  928.604819][ T2814] __nla_validate_parse: 6 callbacks suppressed
[  928.604840][ T2814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8331'.
[  928.639205][ T2808] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8330'.
[  928.654517][ T2808] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8330'.
[  928.733128][ T2825] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.8329'.
[  929.064290][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8339'.
[  929.126849][ T2845] syzkaller0: entered promiscuous mode
[  929.144634][ T2856] netlink: 'syz.3.8342': attribute type 10 has an invalid length.
[  929.159471][ T2845] syzkaller0: entered allmulticast mode
[  929.932555][ T2906] syzkaller0: entered promiscuous mode
[  929.938366][ T2906] syzkaller0: entered allmulticast mode
[  930.215415][ T2919] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8362'.
[  930.407004][ T2938] bond3: option mode: unable to set because the bond device has slaves
[  930.472547][ T2939] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  930.523318][ T2944] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.8367'.
[  930.540995][ T2944] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.8367'.
[  930.625414][ T2945] syzkaller0: entered promiscuous mode
[  930.637507][ T2945] syzkaller0: entered allmulticast mode
[  930.771048][ T2956] syzkaller0: entered promiscuous mode
[  930.776800][ T2956] syzkaller0: entered allmulticast mode
[  930.903081][ T2963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8376'.
[  930.947280][ T2961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8377'.
[  931.043672][ T2972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  931.056241][ T2972] team0: Port device batadv0 added
[  931.407039][ T2996] syzkaller0: entered promiscuous mode
[  931.413615][ T2996] syzkaller0: entered allmulticast mode
[  931.602363][ T3007] netlink: 'syz.3.8396': attribute type 1 has an invalid length.
[  931.638384][ T3007] bond0: entered promiscuous mode
[  931.646541][ T3007] 8021q: adding VLAN 0 to HW filter on device bond0
[  931.745133][ T9818] IPVS: starting estimator thread 0...
[  931.864383][ T3017] IPVS: using max 31 ests per chain, 74400 per kthread
[  931.890364][ T3031] syzkaller0: entered promiscuous mode
[  931.898454][ T3031] syzkaller0: entered allmulticast mode
[  931.907474][ T3031] FAULT_INJECTION: forcing a failure.
[  931.907474][ T3031] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  931.922154][ T3031] CPU: 1 UID: 0 PID: 3031 Comm: syz.2.8400 Not tainted syzkaller #0 PREEMPT(full) 
[  931.922183][ T3031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  931.922196][ T3031] Call Trace:
[  931.922205][ T3031]  <TASK>
[  931.922215][ T3031]  dump_stack_lvl+0xe8/0x150
[  931.922251][ T3031]  should_fail_ex+0x412/0x560
[  931.922280][ T3031]  _copy_from_user+0x2d/0xb0
[  931.922312][ T3031]  __copy_msghdr+0x3c5/0x5b0
[  931.922347][ T3031]  ___sys_sendmsg+0x213/0x360
[  931.922381][ T3031]  ? __pfx____sys_sendmsg+0x10/0x10
[  931.922433][ T3031]  ? __fget_files+0x2a/0x420
[  931.922457][ T3031]  ? __fget_files+0x3a0/0x420
[  931.922488][ T3031]  __x64_sys_sendmsg+0x1bd/0x2a0
[  931.922516][ T3031]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  931.922547][ T3031]  ? rcu_is_watching+0x15/0xb0
[  931.922581][ T3031]  do_syscall_64+0x14d/0xf80
[  931.922606][ T3031]  ? trace_irq_disable+0x3b/0x150
[  931.922631][ T3031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.922649][ T3031]  ? clear_bhb_loop+0x40/0x90
[  931.922669][ T3031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  931.922686][ T3031] RIP: 0033:0x7f5e1b39c629
[  931.922705][ T3031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  931.922729][ T3031] RSP: 002b:00007f5e1c2ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  931.922750][ T3031] RAX: ffffffffffffffda RBX: 00007f5e1b615fa0 RCX: 00007f5e1b39c629
[  931.922763][ T3031] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000008
[  931.922774][ T3031] RBP: 00007f5e1c2ac090 R08: 0000000000000000 R09: 0000000000000000
[  931.922785][ T3031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  931.922795][ T3031] R13: 00007f5e1b616038 R14: 00007f5e1b615fa0 R15: 00007ffe09b1d588
[  931.922821][ T3031]  </TASK>
[  931.950997][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  932.023211][ T3036] netlink: 'syz.3.8401': attribute type 1 has an invalid length.
[  932.156874][ T3038] netlink: 'syz.0.8404': attribute type 5 has an invalid length.
[  932.294850][ T3047] sctp: [Deprecated]: syz.2.8407 (pid 3047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  932.294850][ T3047] Use struct sctp_sack_info instead
[  932.312725][ T3047] sctp: [Deprecated]: syz.2.8407 (pid 3047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  932.312725][ T3047] Use struct sctp_sack_info instead
[  934.736015][ T3015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.954512][ T3066] syzkaller0: entered promiscuous mode
[  934.963057][ T3066] syzkaller0: entered allmulticast mode
[  935.212462][ T3069] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  935.237135][ T3069] bond6 (unregistering): Released all slaves
[  935.412823][ T3098] __nla_validate_parse: 4 callbacks suppressed
[  935.412845][ T3098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8420'.
[  935.564512][ T3109] netlink: 'syz.3.8424': attribute type 2 has an invalid length.
[  935.574636][ T3109] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8424'.
[  935.651965][ T3109] tipc: Failed to remove unknown binding: 66,0,0/0:929793802/929793804
[  935.693620][ T3109] tipc: Failed to remove unknown binding: 66,0,0/0:929793802/929793803
[  935.718650][ T3109] tipc: Failed to remove unknown binding: 66,0,0/0:929793802/929793804
[  935.769992][ T3109] tipc: Failed to remove unknown binding: 66,0,0/0:929793802/929793803
[  935.801433][ T3125] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  935.930260][ T3133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8430'.
[  936.011539][ T3140] netlink: 'syz.0.8433': attribute type 1 has an invalid length.
[  936.019461][ T3140] netlink: 'syz.0.8433': attribute type 11 has an invalid length.
[  936.081893][ T3140] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8433'.
[  936.144617][ T3153] netlink: 'syz.2.8436': attribute type 64 has an invalid length.
[  936.248851][ T3164] netlink: 'syz.4.8439': attribute type 1 has an invalid length.
[  936.293654][ T3164] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  936.397965][ T3174] netlink: 'syz.4.8442': attribute type 10 has an invalid length.
[  936.496369][ T3177] netlink: 'syz.3.8444': attribute type 1 has an invalid length.
[  936.640382][ T3192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8449'.
[  936.663816][ T3190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8447'.
[  936.782108][ T3197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8451'.
[  936.841189][ T3197] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  936.855668][ T3197] ip6erspan0: entered promiscuous mode
[  936.861804][ T3197] ip6erspan0: entered allmulticast mode
[  937.106599][ T3214] netlink: 'syz.0.8457': attribute type 10 has an invalid length.
[  937.137498][ T3211] netlink: set zone limit has 4 unknown bytes
[  937.191647][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms
[  937.199957][    C1] lec:lec_tx_timeout: lec0
[  937.371288][ T3222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8460'.
[  937.408737][ T3225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8461'.
[  937.418662][ T3225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8461'.
[  937.447111][ T3225] syzkaller0: entered promiscuous mode
[  937.459847][ T3225] syzkaller0: entered allmulticast mode
[  937.633126][ T3238] netlink: 'syz.1.8465': attribute type 1 has an invalid length.
[  938.446177][ T3259] netlink: 'syz.2.8468': attribute type 10 has an invalid length.
[  939.712732][ T3238] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  939.964182][ T3265] 8021q: adding VLAN 0 to HW filter on device bond3
[  940.465647][ T3306] syzkaller0: entered promiscuous mode
[  940.472572][ T3306] syzkaller0: entered allmulticast mode
[  940.596426][ T3312] lo: entered promiscuous mode
[  940.602375][ T3312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  940.805661][ T3327] nbd: socks must be embedded in a SOCK_ITEM attr
[  941.035111][ T3339] __nla_validate_parse: 4 callbacks suppressed
[  941.035136][ T3339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8492'.
[  941.067667][ T3344] validate_nla: 2 callbacks suppressed
[  941.067687][ T3344] netlink: 'syz.3.8495': attribute type 10 has an invalid length.
[  941.125731][ T3346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8497'.
[  941.135941][ T3346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8497'.
[  941.223160][ T3354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8496'.
[  941.332962][ T3356] syzkaller0: entered promiscuous mode
[  941.341994][ T3356] syzkaller0: entered allmulticast mode
[  941.676932][ T3377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8503'.
[  941.748503][ T3379] syzkaller0: entered promiscuous mode
[  941.755351][ T3379] syzkaller0: entered allmulticast mode
[  942.165454][ T3405] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8510'.
[  942.729261][ T3434] 8021q: adding VLAN 0 to HW filter on device team0
[  942.748167][ T3434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  942.875945][ T3451] netlink: 'syz.1.8528': attribute type 1 has an invalid length.
[  942.896971][ T3451] netlink: 'syz.1.8528': attribute type 2 has an invalid length.
[  942.992821][ T3453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8530'.
[  943.120271][ T3466] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8532'.
[  943.130100][ T3465] netlink: 59 bytes leftover after parsing attributes in process `syz.3.8532'.
[  943.243025][ T3473] netlink: 'syz.3.8534': attribute type 10 has an invalid length.
[  943.299646][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.307708][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.315233][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.617686][ T3489] netlink: 'syz.4.8539': attribute type 12 has an invalid length.
[  943.650939][ T3489] netlink: 'syz.4.8539': attribute type 29 has an invalid length.
[  943.658839][ T3489] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8539'.
[  944.299833][ T3516] IPVS: set_ctl: invalid protocol: 299 172.20.20.170:20000
[  944.455065][ T3519] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0
[  946.034123][ T3470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  946.228669][ T3526] __nla_validate_parse: 3 callbacks suppressed
[  946.228983][ T3526] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8548'.
[  946.282047][ T3526] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  946.286935][ T3530] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8549'.
[  946.590641][ T3543] syzkaller0: entered promiscuous mode
[  946.596197][ T3543] syzkaller0: entered allmulticast mode
[  946.709506][ T3548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  946.731018][ T3548] syzkaller0: entered promiscuous mode
[  946.741472][ T3548] syzkaller0: entered allmulticast mode
[  946.762167][ T3550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  946.803101][ T3548] tipc: Resetting bearer <eth:syzkaller0>
[  946.828112][ T3552] SET target dimension over the limit!
[  946.840154][ T3552] netlink: 'syz.3.8557': attribute type 1 has an invalid length.
[  946.855569][ T3552] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8557'.
[  947.244778][ T3577] syzkaller0: entered promiscuous mode
[  947.251366][ T3577] syzkaller0: entered allmulticast mode
[  947.566117][ T3585] syzkaller0: entered promiscuous mode
[  947.572157][ T3585] syzkaller0: entered allmulticast mode
[  949.692989][ T3548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  949.788998][ T3547] tipc: Resetting bearer <eth:syzkaller0>
[  949.880404][ T3547] tipc: Disabling bearer <eth:syzkaller0>
[  949.896262][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8569'.
[  949.907513][ T3590] sock: sock_set_timeout: `syz.2.8569' (pid 3590) tries to set negative timeout
[  950.155759][ T3609] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8576'.
[  950.259164][ T3615] : entered promiscuous mode
[  950.267637][ T3616] netlink: 'syz.1.8578': attribute type 10 has an invalid length.
[  950.277300][ T3613] netlink: 'syz.2.8577': attribute type 10 has an invalid length.
[  950.321921][ T3618] sock: sock_set_timeout: `syz.0.8580' (pid 3618) tries to set negative timeout
[  950.375630][ T3622] FAULT_INJECTION: forcing a failure.
[  950.375630][ T3622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  950.407416][ T3622] CPU: 0 UID: 0 PID: 3622 Comm: syz.4.8581 Not tainted syzkaller #0 PREEMPT(full) 
[  950.407447][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  950.407461][ T3622] Call Trace:
[  950.407471][ T3622]  <TASK>
[  950.407481][ T3622]  dump_stack_lvl+0xe8/0x150
[  950.407517][ T3622]  should_fail_ex+0x412/0x560
[  950.407547][ T3622]  _copy_to_user+0x31/0xb0
[  950.407580][ T3622]  simple_read_from_buffer+0xe1/0x170
[  950.407615][ T3622]  proc_fail_nth_read+0x1bb/0x230
[  950.407647][ T3622]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  950.407680][ T3622]  ? rw_verify_area+0x2a6/0x4d0
[  950.407701][ T3622]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  950.407732][ T3622]  vfs_read+0x20c/0xa70
[  950.407751][ T3622]  ? fdget_pos+0x246/0x320
[  950.407792][ T3622]  ? __pfx___mutex_lock+0x10/0x10
[  950.407813][ T3622]  ? __pfx_vfs_read+0x10/0x10
[  950.407837][ T3622]  ? __fget_files+0x2a/0x420
[  950.407870][ T3622]  ? __fget_files+0x3a0/0x420
[  950.407898][ T3622]  ? __fget_files+0x2a/0x420
[  950.407936][ T3622]  ksys_read+0x150/0x270
[  950.407960][ T3622]  ? __pfx_ksys_read+0x10/0x10
[  950.407993][ T3622]  do_syscall_64+0x14d/0xf80
[  950.408023][ T3622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.408045][ T3622]  ? clear_bhb_loop+0x40/0x90
[  950.408071][ T3622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.408092][ T3622] RIP: 0033:0x7fe50eb5cece
[  950.408113][ T3622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  950.408131][ T3622] RSP: 002b:00007fe50f986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  950.408154][ T3622] RAX: ffffffffffffffda RBX: 00007fe50f9876c0 RCX: 00007fe50eb5cece
[  950.408169][ T3622] RDX: 000000000000000f RSI: 00007fe50f9870a0 RDI: 0000000000000006
[  950.408183][ T3622] RBP: 00007fe50f987090 R08: 0000000000000000 R09: 0000000000000000
[  950.408197][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  950.408208][ T3622] R13: 00007fe50ee16038 R14: 00007fe50ee15fa0 R15: 00007ffc37bcada8
[  950.408251][ T3622]  </TASK>
[  951.077337][ T3653] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  951.087942][ T3653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  951.099413][ T3653] syzkaller0: entered promiscuous mode
[  951.105620][ T3653] syzkaller0: entered allmulticast mode
[  951.127878][ T3653] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8591'.
[  951.140013][ T3653] tipc: Resetting bearer <eth:syzkaller0>
[  951.152223][ T3650] tipc: Resetting bearer <eth:syzkaller0>
[  951.160832][ T3659] netlink: 'syz.1.8592': attribute type 10 has an invalid length.
[  951.203033][ T3650] tipc: Disabling bearer <eth:syzkaller0>
[  951.249288][ T3662] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8593'.
[  951.570849][ T3671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8597'.
[  951.837115][ T3679] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  951.850110][ T3680] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[  951.880964][ T3679] netlink: 'syz.4.8599': attribute type 12 has an invalid length.
[  951.970783][ T3679] bond6: option primary_reselect: invalid value (255)
[  951.992703][ T3679] bond6 (unregistering): Released all slaves
[  952.036410][ T3684] �x9�: renamed from bridge_slave_0 (while UP)
[  952.264937][ T3703] netlink: 'syz.0.8606': attribute type 10 has an invalid length.
[  953.169494][ T3745] syzkaller0: entered promiscuous mode
[  953.187086][ T3745] syzkaller0: entered allmulticast mode
[  953.448921][ T3762] netlink: 'syz.4.8622': attribute type 10 has an invalid length.
[  953.892010][ T3781] netlink: 'syz.1.8626': attribute type 10 has an invalid length.
[  955.721713][ T3785] syzkaller0: entered promiscuous mode
[  955.727363][ T3785] syzkaller0: entered allmulticast mode
[  955.751118][ T3791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  955.892708][ T3797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8632'.
[  955.920550][ T3804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8634'.
[  955.968602][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8634'.
[  955.991414][ T3811] netlink: 'syz.3.8635': attribute type 4 has an invalid length.
[  955.999323][ T3811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8635'.
[  956.060059][ T3813] syzkaller0: entered promiscuous mode
[  956.073486][ T3813] syzkaller0: entered allmulticast mode
[  956.079369][ T3807] netlink: 'syz.3.8635': attribute type 4 has an invalid length.
[  956.087743][ T3807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8635'.
[  956.121503][ T3818] netlink: 'syz.0.8638': attribute type 10 has an invalid length.
[  956.206352][ T3816] team0: Port device dummy0 removed
[  956.222244][ T3816] batman_adv: batadv0: Adding interface: dummy0
[  956.229210][ T3816] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  956.265223][ T3816] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  956.298213][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8637'.
[  956.365291][ T3816] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8637'.
[  956.401067][ T3816] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  956.724899][ T3844] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  956.742155][ T3846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8645'.
[  956.756681][ T3844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8646'.
[  956.824789][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8648'.
[  956.836956][ T3848] syzkaller0: entered promiscuous mode
[  956.843091][ T3848] syzkaller0: entered allmulticast mode
[  956.947969][ T3857] netlink: 'syz.2.8650': attribute type 10 has an invalid length.
[  957.115523][ T3865] syzkaller0: entered promiscuous mode
[  957.128373][ T3865] syzkaller0: entered allmulticast mode
[  957.427008][ T3882] netlink: 'syz.1.8660': attribute type 2 has an invalid length.
[  957.435365][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'.
[  957.454810][ T3887] netlink: 'syz.0.8662': attribute type 10 has an invalid length.
[  957.461100][ T3882] netlink: 'syz.1.8660': attribute type 2 has an invalid length.
[  957.479539][ T3882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'.
[  957.593314][ T3890] syzkaller0: entered promiscuous mode
[  957.598954][ T3890] syzkaller0: entered allmulticast mode
[  957.765830][ T3896] syzkaller0: entered promiscuous mode
[  957.780991][ T3896] syzkaller0: entered allmulticast mode
[  957.967255][ T3915] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.8669'.
[  957.991192][ T3915] netlink: Conntrack attr has 4 unknown bytes
[  958.087761][ T3917] syzkaller0: entered promiscuous mode
[  958.109179][ T3917] syzkaller0: entered allmulticast mode
[  958.253729][ T3922] SET target dimension over the limit!
[  958.469629][ T3941] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  958.513294][ T3944] syzkaller0: entered promiscuous mode
[  958.518954][ T3944] syzkaller0: entered allmulticast mode
[  958.678928][ T3950] syzkaller0: entered promiscuous mode
[  958.686730][ T3950] syzkaller0: entered allmulticast mode
[  958.867058][ T3960] syzkaller0: entered promiscuous mode
[  958.874605][ T3960] syzkaller0: entered allmulticast mode
[  959.139292][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8692'.
[  959.166685][ T3971] digital: digital_start_poll: Unknown protocol
[  959.174545][T12604] lec:lec_start_xmit: lec0:No lecd attached
[  959.257808][ T3980] netlink: 4160 bytes leftover after parsing attributes in process `syz.4.8694'.
[  959.268040][ T3980] openvswitch: netlink: Flow key attr not present in new flow.
[  959.592924][ T3998] syzkaller0: entered promiscuous mode
[  959.608805][ T3998] syzkaller0: entered allmulticast mode
[  959.658103][ T4006] syzkaller0: entered promiscuous mode
[  959.664187][ T4006] syzkaller0: entered allmulticast mode
[  959.912500][ T4026] netlink: 'syz.3.8708': attribute type 10 has an invalid length.
[  960.366237][ T4065] syzkaller0: entered promiscuous mode
[  960.373324][ T4065] syzkaller0: entered allmulticast mode
[  960.471910][ T4069] syzkaller0: entered promiscuous mode
[  960.479813][ T4069] syzkaller0: entered allmulticast mode
[  960.492477][ T4071] netlink: 'syz.1.8717': attribute type 8 has an invalid length.
[  960.716318][ T4084] netlink: 'syz.4.8725': attribute type 6 has an invalid length.
[  960.844636][ T4092] netlink: 'syz.4.8728': attribute type 5 has an invalid length.
[  960.920757][ T5835] Bluetooth: hci0: link tx timeout
[  960.927186][ T5835] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  960.940827][ T5835] Bluetooth: hci0: link tx timeout
[  960.946021][ T5835] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  961.281426][ T4118] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode
[  961.293221][ T4118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.305971][ T4118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.328657][ T4119] sit0: entered promiscuous mode
[  961.337485][ T4119] netlink: 'syz.4.8735': attribute type 1 has an invalid length.
[  961.346725][ T4119] __nla_validate_parse: 6 callbacks suppressed
[  961.346757][ T4119] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8735'.
[  961.366228][ T4123] tipc: Enabled bearer <ib:gretap0>, priority 10
[  961.423056][ T4118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.433890][ T4118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.469398][ T4119] tc_dump_action: action bad kind
[  961.544304][ T4118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.557310][ T4118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.666948][ T4118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  961.678152][ T4118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  961.708486][ T4134] syzkaller0: entered promiscuous mode
[  961.715630][ T4134] syzkaller0: entered allmulticast mode
[  961.832026][ T4136] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.8740'.
[  961.917287][ T7336] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  961.932555][ T7336] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  962.014417][ T7361] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  962.027190][ T7361] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  962.165369][ T4147] netlink: 'syz.0.8743': attribute type 10 has an invalid length.
[  962.190874][ T7361] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  962.204530][ T7361] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  962.270085][ T7363] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  962.278350][ T7363] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.567443][ T4171] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8748'.
[  962.592109][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8748'.
[  962.651221][ T4171] bond0 (unregistering): Released all slaves
[  962.866452][ T4181] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  962.884599][ T4181] bond7 (unregistering): Released all slaves
[  962.935400][ T4184] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8752'.
[  962.947660][ T4177] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8752'.
[  963.032687][ T5835] Bluetooth: hci0: command 0x0405 tx timeout
[  963.054449][ T4190] netlink: 'syz.1.8755': attribute type 10 has an invalid length.
[  963.063187][ T4190] batman_adv: batadv0: Removing interface: dummy0
[  963.076969][ T4190] team0: Port device dummy0 added
[  963.148235][ T4194] vlan1: entered promiscuous mode
[  963.153792][ T4194] geneve1: entered promiscuous mode
[  963.159250][ T4194] vlan1: entered allmulticast mode
[  963.165444][ T4194] geneve1: entered allmulticast mode
[  963.213160][ T4198] netlink: 'syz.2.8759': attribute type 10 has an invalid length.
[  963.321393][ T4201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8761'.
[  963.330966][ T4201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8761'.
[  963.342181][ T4201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8761'.
[  963.629553][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8767'.
[  963.642718][ T4221] netlink: 'syz.0.8768': attribute type 1 has an invalid length.
[  963.649522][ T4218] team_slave_1: entered promiscuous mode
[  963.658557][ T4218] team_slave_1: left promiscuous mode
[  963.706064][ T4226] sctp: [Deprecated]: syz.1.8769 (pid 4226) Use of int in maxseg socket option.
[  963.706064][ T4226] Use struct sctp_assoc_value instead
[  963.709316][ T4221] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  963.731882][ T4216] syzkaller0: entered promiscuous mode
[  963.750461][ T4216] syzkaller0: entered allmulticast mode
[  963.849227][ T4233] openvswitch: netlink: Duplicate key (type 32).
[  964.198232][ T4254] netlink: 'syz.0.8780': attribute type 10 has an invalid length.
[  964.239872][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms
[  964.248220][    C1] lec:lec_tx_timeout: lec0
[  964.259580][ T4256] netlink: 'syz.4.8779': attribute type 8 has an invalid length.
[  964.380877][ T4262] netlink: get zone limit has 4 unknown bytes
[  964.461019][ T4268] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  964.508629][ T4270] netlink: 'syz.0.8785': attribute type 6 has an invalid length.
[  964.716157][ T4277] syzkaller0: entered promiscuous mode
[  964.723421][ T4277] syzkaller0: entered allmulticast mode
[  965.035652][ T4287] xt_TPROXY: Can be used only with -p tcp or -p udp
[  965.111952][ T5835] Bluetooth: hci0: command 0x0405 tx timeout
[  965.867452][ T4290] vlan2: entered allmulticast mode
[  965.886254][ T4290] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode
[  966.004444][ T4313] team0: Port device dummy0 removed
[  966.124763][ T4326] netlink: 'syz.1.8796': attribute type 1 has an invalid length.
[  966.232309][ T4334] bond5: (slave bridge4): making interface the new active one
[  966.241844][ T4334] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  966.336050][ T4326] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  967.230458][ T4362] IPv6: NLM_F_CREATE should be specified when creating new route
[  967.238489][ T4362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  967.246405][ T4362] IPv6: NLM_F_CREATE should be set when creating new route
[  967.253908][ T4362] IPv6: NLM_F_CREATE should be set when creating new route
[  967.508002][ T4377] __nla_validate_parse: 5 callbacks suppressed
[  967.508023][ T4377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8813'.
[  967.621682][ T4381] xt_hashlimit: size too large, truncated to 1048576
[  967.689967][ T4385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8816'.
[  967.725930][ T4390] netlink: 'syz.4.8817': attribute type 16 has an invalid length.
[  967.738837][ T4390] netlink: 'syz.4.8817': attribute type 17 has an invalid length.
[  967.810945][ T4390] sit0: left promiscuous mode
[  968.008379][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.015800][ T4390] bridge0: port 2(bridge_slave_1) entered listening state
[  968.023453][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.030874][ T4390] bridge0: port 1(bridge_slave_0) entered listening state
[  968.156902][ T4417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8822'.
[  968.168668][ T4390] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  968.192739][ T4390] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.203894][ T4390] 8021q: adding VLAN 0 to HW filter on device bond1
[  968.213863][ T4390] vlan2: left allmulticast mode
[  968.218954][ T4390] bond0: left allmulticast mode
[  968.227733][ T4390] bond2: left promiscuous mode
[  968.233239][ T4390] bond2: left allmulticast mode
[  968.241581][ T4390] 8021q: adding VLAN 0 to HW filter on device bond3
[  968.267914][ T4390] bond4: left promiscuous mode
[  968.272964][ T4390] bridge2: left promiscuous mode
[  968.280309][ T4390] bond5: left promiscuous mode
[  968.285141][ T4390] bridge3: left promiscuous mode
[  968.397043][ T4419] netlink: 'syz.3.8823': attribute type 1 has an invalid length.
[  968.465308][ T4417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.516169][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8823'.
[  968.555486][ T4419] 8021q: adding VLAN 0 to HW filter on device bond0
[  968.627712][ T4417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.667178][ T4421] vlan3: entered promiscuous mode
[  968.685935][ T4433] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8827'.
[  968.693825][ T4421] bond0: entered promiscuous mode
[  968.706527][ T4421] vlan3: entered allmulticast mode
[  968.712552][ T4421] bond0: entered allmulticast mode
[  968.734456][ T4426] 8021q: adding VLAN 0 to HW filter on device batadv1
[  968.744736][ T4426] bond0: (slave batadv1): making interface the new active one
[  968.753537][ T4426] batadv1: entered promiscuous mode
[  968.763589][ T4426] batadv1: entered allmulticast mode
[  968.772175][ T4426] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  968.899666][ T4417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.009215][T32252] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  969.048872][ T9818] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  969.063119][T32252] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  969.165327][ T4417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.201080][ T4445] syz_tun: mtu less than device minimum
[  969.342555][ T1955] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.379289][ T1955] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  969.426271][ T1955] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  969.440069][ T9818] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  969.457127][ T7361] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  969.564656][ T4466] netlink: 'syz.4.8835': attribute type 1 has an invalid length.
[  969.680391][ T4466] veth15: entered promiscuous mode
[  969.808464][ T4483] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  969.830062][ T9801] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  970.180111][ T4505] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8845'.
[  970.260906][ T4508] geneve2: entered promiscuous mode
[  970.266782][ T4508] geneve2: entered allmulticast mode
[  970.432630][ T4510] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  970.460510][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8852'.
[  970.476095][ T4510] bond6: entered promiscuous mode
[  970.483149][ T4510] bond6: entered allmulticast mode
[  970.489022][ T4510] 8021q: adding VLAN 0 to HW filter on device bond6
[  970.501624][ T1955] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  970.542803][ T4521] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  970.562472][ T4521] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8852'.
[  970.575345][ T1955] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  970.585337][ T1955] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  970.622349][ T1955] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  970.710294][ T4529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8856'.
[  970.732888][ T4530] bond7 (unregistering): Released all slaves
[  970.822626][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8853'.
[  970.832770][ T4544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  970.851054][ T4535] netlink: 'syz.2.8857': attribute type 13 has an invalid length.
[  970.859117][ T4535] netlink: 'syz.2.8857': attribute type 17 has an invalid length.
[  970.870314][ T4542] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  971.047532][ T4535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  971.285775][ T4554] IPVS: sh: FWM 3 0x00000003 - no destination available
[  971.362101][ T4570] netlink: 'syz.0.8862': attribute type 29 has an invalid length.
[  971.458279][ T4565] macvtap2: entered promiscuous mode
[  971.479644][ T4565] macvtap2: entered allmulticast mode
[  971.518009][ T4574] dvmrp0: entered allmulticast mode
[  971.726110][ T4584] netlink: 'syz.4.8868': attribute type 1 has an invalid length.
[  972.018049][ T4603] bond0: entered promiscuous mode
[  972.057432][ T4603] bond0: left promiscuous mode
[  972.286053][ T4617] netem: unknown loss type 0
[  972.291634][ T4617] netem: change failed
[  972.707409][ T4637] __nla_validate_parse: 5 callbacks suppressed
[  972.707429][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8888'.
[  972.774605][ T4640] netlink: 'syz.0.8886': attribute type 13 has an invalid length.
[  972.788674][ T4637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8888'.
[  973.076264][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8893'.
[  973.109968][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  973.180903][ T4666] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8895'.
[  973.409849][ T4681] syzkaller0: entered promiscuous mode
[  973.415578][ T4681] syzkaller0: entered allmulticast mode
[  973.456494][ T4683] syzkaller0: entered promiscuous mode
[  973.463761][ T4683] syzkaller0: entered allmulticast mode
[  973.532023][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8904'.
[  974.147795][ T4712] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8910'.
[  974.252864][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8911'.
[  974.288698][ T4713] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  974.316415][ T4722] netlink: 'syz.2.8913': attribute type 1 has an invalid length.
[  974.332089][ T1955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  974.333600][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'.
[  974.351223][ T1955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  974.366703][ T4724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.387882][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'.
[  974.397725][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8911'.
[  974.424564][ T4722] bond4: entered promiscuous mode
[  974.430087][ T4722] bond4: entered allmulticast mode
[  974.435762][ T4722] 8021q: adding VLAN 0 to HW filter on device bond4
[  974.524099][ T4718] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  974.536776][ T4718] bond5 (unregistering): Released all slaves
[  974.720687][ T4740] syzkaller1: entered promiscuous mode
[  974.726325][ T4740] syzkaller1: entered allmulticast mode
[  974.767895][ T7363] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  974.821223][ T4750] syzkaller0: entered promiscuous mode
[  974.826951][ T4750] syzkaller0: entered allmulticast mode
[  977.498964][ T4746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  977.658612][ T4800] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  977.710496][ T4805] __nla_validate_parse: 11 callbacks suppressed
[  977.710516][ T4805] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8930'.
[  977.754532][ T4805] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8930'.
[  977.766244][ T4803] syzkaller0: entered promiscuous mode
[  977.771974][ T4803] syzkaller0: entered allmulticast mode
[  977.921531][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8937'.
[  977.945700][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8937'.
[  977.999088][ T4816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  978.062345][ T4826] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[  978.078908][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8939'.
[  978.259537][ T4838] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  978.405966][ T4846] syzkaller0: entered promiscuous mode
[  978.415022][ T4846] syzkaller0: entered allmulticast mode
[  978.733183][ T4863] netlink: 'syz.3.8951': attribute type 2 has an invalid length.
[  978.789649][ T4863] �9: entered promiscuous mode
[  978.988069][ T4871] netlink: 'syz.4.8954': attribute type 13 has an invalid length.
[  979.387055][ T4887] tipc: Enabling of bearer <�th:lo> rejected, media not registered
[  979.490399][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  979.500636][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  979.515760][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  979.534630][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  979.543953][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  979.665681][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8966'.
[  979.827071][ T4914] netlink: 'syz.4.8967': attribute type 9 has an invalid length.
[  980.045844][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8971'.
[  980.160127][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  980.242552][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  980.376205][T32252] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.419814][T32252] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.535589][T32252] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.566339][T32252] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.629256][ T4951] syzkaller0: entered promiscuous mode
[  980.650092][ T4951] syzkaller0: entered allmulticast mode
[  980.701200][T32252] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.722459][T32252] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.827235][T32252] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.859925][T32252] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.916723][ T4962] netlink: 'syz.1.8979': attribute type 10 has an invalid length.
[  981.258594][ T4892] chnl_net:caif_netlink_parms(): no params data found
[  981.298478][T32252] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.333492][T32252] �x9�: left allmulticast mode
[  981.350104][T32252] �x9�: left promiscuous mode
[  981.355190][T32252] bridge0: port 1(
1�x9�) entered disabled state
[  981.378195][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8984'.
[  981.398227][ T4976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8984'.
[  981.590059][T21834] Bluetooth: hci4: command tx timeout
[  981.830477][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  982.055422][T32252] bond1 (unregistering): Released all slaves
[  982.073850][T32252] bond2 (unregistering): Released all slaves
[  982.090362][T32252] bond3 (unregistering): Released all slaves
[  982.116407][T32252] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface
[  982.128352][T32252] bond4 (unregistering): Released all slaves
[  982.149193][T32252] bond0 (unregistering): (slave batadv1): Releasing active interface
[  982.163037][T32252] batadv1: left promiscuous mode
[  982.169186][T32252] batadv1: left allmulticast mode
[  982.176595][T32252] bond0 (unregistering): Released all slaves
[  982.200205][ T4973] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  982.202258][ T4991] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode
[  982.363956][T32252] : left promiscuous mode
[  982.546333][T32252] �9: left promiscuous mode
[  982.664972][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.708126][ T4892] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.745623][ T4892] bridge_slave_0: entered allmulticast mode
[  982.768831][ T4892] bridge_slave_0: entered promiscuous mode
[  982.816320][ T5030] netlink: 'syz.0.8995': attribute type 1 has an invalid length.
[  982.883302][ T4892] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.890882][ T4892] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.906641][ T4892] bridge_slave_1: entered allmulticast mode
[  982.923775][ T4892] bridge_slave_1: entered promiscuous mode
[  983.111210][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  983.118653][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  983.205178][ T5030] bond7: entered promiscuous mode
[  983.211556][ T5030] 8021q: adding VLAN 0 to HW filter on device bond7
[  983.244942][ T5033] bond7: (slave bridge5): making interface the new active one
[  983.259150][ T5033] bridge5: entered promiscuous mode
[  983.268861][ T5033] bond7: (slave bridge5): Enslaving as an active interface with an up link
[  983.613627][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8995'.
[  983.671951][T21834] Bluetooth: hci4: command tx timeout
[  983.826890][ T4892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  983.841386][ T4892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  983.893582][ T5073] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  983.951467][ T5033] macvlan3: entered promiscuous mode
[  983.963737][ T5033] macvlan3: entered allmulticast mode
[  984.039431][ T5062] syzkaller0: entered promiscuous mode
[  984.053626][ T5062] syzkaller0: entered allmulticast mode
[  984.081903][ T5078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9002'.
[  984.092856][ T5078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9002'.
[  984.331415][T32253] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  984.843102][ T5101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  985.751308][T21834] Bluetooth: hci4: command tx timeout
[  986.434664][ T4892] team0: Port device team_slave_0 added
[  986.446458][ T5106] syzkaller0: entered promiscuous mode
[  986.452694][ T5106] syzkaller0: entered allmulticast mode
[  986.469185][ T4892] team0: Port device team_slave_1 added
[  986.566737][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  986.574639][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.604200][ T4892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  986.617270][ T4892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  986.624828][ T4892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  986.651433][ T4892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  986.757715][ T5117] netlink: 179636 bytes leftover after parsing attributes in process `syz.4.9010'.
[  986.769326][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9010'.
[  986.843424][ T4892] hsr_slave_0: entered promiscuous mode
[  986.851098][ T4892] hsr_slave_1: entered promiscuous mode
[  986.858153][ T4892] debugfs: 'hsr0' already exists in 'hsr'
[  986.864304][ T4892] Cannot create hsr debugfs directory
[  986.961613][T32252] hsr_slave_0: left promiscuous mode
[  986.967970][T32252] hsr_slave_1: left promiscuous mode
[  986.975187][T32252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  986.983470][T32252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  986.992092][T32252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  987.000009][T32252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  987.011961][T32252] veth1_macvtap: left promiscuous mode
[  987.018111][T32252] veth0_macvtap: left promiscuous mode
[  987.024496][T32252] veth1_vlan: left promiscuous mode
[  987.030624][T32252] veth0_vlan: left promiscuous mode
[  987.177983][T32252] pim6reg (unregistering): left allmulticast mode
[  987.230938][ T5085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  987.512467][T32252] team0 (unregistering): Port device team_slave_1 removed
[  987.535812][T32252] team0 (unregistering): Port device team_slave_0 removed
[  987.673435][T32252] team0 (unregistering): Port device dummy0 removed
[  987.830430][T21834] Bluetooth: hci4: command tx timeout
[  988.326260][ T5168] syzkaller0: entered promiscuous mode
[  988.333554][ T5168] syzkaller0: entered allmulticast mode
[  988.582608][ T7363] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  988.619235][ T5184] syzkaller0: entered promiscuous mode
[  988.626581][ T5184] syzkaller0: entered allmulticast mode
[  988.654530][ T5194] syzkaller0: entered promiscuous mode
[  988.688536][ T5194] syzkaller0: entered allmulticast mode
[  988.804051][T32252] IPVS: stop unused estimator thread 0...
[  991.418924][ T5185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  991.452496][ T4892] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  991.508899][ T4892] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  991.573861][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9026'.
[  991.626248][ T5239] bond7: Unable to set up delay as MII monitoring is disabled
[  991.642476][ T5239] bond7 (unregistering): Released all slaves
[  991.740483][ T4892] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  991.796780][ T4892] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  991.814944][ T5254] netlink: 'syz.4.9032': attribute type 1 has an invalid length.
[  991.864558][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9032'.
[  991.879534][ T5258] syzkaller0: entered promiscuous mode
[  991.886584][ T5258] syzkaller0: entered allmulticast mode
[  991.974186][ T5264] syzkaller0: entered promiscuous mode
[  991.981302][ T5264] syzkaller0: entered allmulticast mode
[  992.110807][ T5271] syzkaller0: entered promiscuous mode
[  992.116563][ T5271] syzkaller0: entered allmulticast mode
[  992.289055][ T4892] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.365276][ T4892] 8021q: adding VLAN 0 to HW filter on device team0
[  992.430631][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.437937][ T7363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.457446][ T5290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  992.510816][ T5290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  992.524765][T32253] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.532106][T32253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.712671][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp
[  992.746716][ T5298] vlan3: entered promiscuous mode
[  992.766463][ T5298] bridge0: entered promiscuous mode
[  992.780155][ T5298] vlan3: entered allmulticast mode
[  992.785446][ T5298] bridge0: entered allmulticast mode
[  992.829575][ T4892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  993.030300][ T5315] syzkaller0: entered promiscuous mode
[  993.036194][ T5315] syzkaller0: entered allmulticast mode
[  993.305503][ T5328] bond6: invalid ARP target 0.0.0.0 specified for addition
[  993.320485][ T5328] bond6: option arp_ip_target: invalid value (0)
[  993.359930][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  993.372460][ T5331] netlink: 'syz.2.9051': attribute type 10 has an invalid length.
[  993.382883][ T5328] bond6 (unregistering): Released all slaves
[  993.449451][ T5331] veth1_macvtap: left promiscuous mode
[  993.465024][ T5331] team0: Device veth1_macvtap failed to register rx_handler
[  993.521597][ T5339] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9050'.
[  993.555714][ T5336] syzkaller0: entered promiscuous mode
[  993.572321][ T5336] syzkaller0: entered allmulticast mode
[  993.649657][ T5345] x_tables: duplicate underflow at hook 3
[  993.676492][ T5341] netlink: 'syz.1.9052': attribute type 1 has an invalid length.
[  993.686066][ T4892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  993.694988][ T5341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  993.698889][ T5343] openvswitch: netlink: EtherType 50a is less than min 600
[  993.718334][ T5343] netlink: 'syz.2.9053': attribute type 1 has an invalid length.
[  993.816525][ T5343] 8021q: adding VLAN 0 to HW filter on device bond5
[  993.904612][ T5349] bond5: (slave veth9): Enslaving as an active interface with a down link
[  993.918983][ T5352] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  993.983718][ T5343] bond5: (slave veth11): Enslaving as an active interface with a down link
[  993.993441][ T5343] netlink: 'syz.2.9053': attribute type 1 has an invalid length.
[  994.002516][ T5343] netlink: 'syz.2.9053': attribute type 2 has an invalid length.
[  994.052120][ T4892] veth0_vlan: entered promiscuous mode
[  994.103862][ T4892] veth1_vlan: entered promiscuous mode
[  994.114956][ T5363] syzkaller0: entered promiscuous mode
[  994.132477][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9058'.
[  994.133177][ T5363] syzkaller0: entered allmulticast mode
[  994.201345][ T5368] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9061'.
[  994.294889][ T4892] veth0_macvtap: entered promiscuous mode
[  994.335720][ T4892] veth1_macvtap: entered promiscuous mode
[  994.395934][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.416155][ T4892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.466328][ T7363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.517163][ T7363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  994.558101][ T7363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  994.579236][ T7363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  994.772636][ T5391] xt_hashlimit: size too large, truncated to 1048576
[  994.785818][T32254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  994.809841][T32254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.835573][ T5394] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9068'.
[  994.915844][T32253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  994.935296][T32253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.985037][ T5402] syzkaller1: entered promiscuous mode
[  995.007944][ T5402] syzkaller1: entered allmulticast mode
[  995.055172][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9071'.
[  995.119656][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9071'.
[  995.129373][T32254] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  995.141178][T32254] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  995.160837][T32254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  995.256576][T32254] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  995.268554][ T5409] syzkaller1: entered allmulticast mode
[  995.962685][ T5464] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[  996.223929][ T5484] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  996.459524][ T5494] netlink: 'syz.4.9094': attribute type 1 has an invalid length.
[  996.720097][ T5506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9097'.
[  996.802588][ T5508] syzkaller0: entered promiscuous mode
[  996.820264][ T5508] syzkaller0: entered allmulticast mode
[  996.873553][ T5512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9100'.
[  997.220532][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9108'.
[  997.338656][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9111'.
[  997.416654][ T5520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  997.447848][ T5533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9107'.
[  997.635522][ T5554] macsec1: entered promiscuous mode
[  997.868462][ T5573] syzkaller0: entered promiscuous mode
[  997.883418][ T5573] syzkaller0: entered allmulticast mode
[  998.021000][ T5582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9119'.
[  998.047450][ T5580] syzkaller0: entered promiscuous mode
[  998.053755][ T5580] syzkaller0: entered allmulticast mode
[  998.193122][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9123'.
[  998.226338][ T5584] dvmrp0: entered allmulticast mode
[  998.284482][ T5588] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9122'.
[  998.310683][T21834] Bluetooth: hci4: command tx timeout
[  998.369777][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  998.377943][    C1] lec:lec_tx_timeout: lec0
[  998.469821][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  998.477111][    C1] bridge0: topology change detected, propagating
[  998.484184][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  998.491657][    C1] bridge0: topology change detected, propagating
[  998.579065][ T5603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  998.672696][ T5608] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000
[  998.726550][ T5610] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000
[  998.832716][ T5616] syzkaller0: entered promiscuous mode
[  998.840656][ T5616] syzkaller0: entered allmulticast mode
[  999.110589][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  999.192060][ T5639] ip6gre2: entered allmulticast mode
[  999.627907][ T5667] syzkaller0: entered promiscuous mode
[  999.660196][ T5667] syzkaller0: entered allmulticast mode
[  999.748504][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  999.762709][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  999.782348][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  999.802696][ T5677] netlink: 'syz.2.9149': attribute type 12 has an invalid length.
[  999.830871][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  999.842953][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  999.991924][ T5683] syzkaller0: entered promiscuous mode
[  999.997932][ T5683] syzkaller0: entered allmulticast mode
[ 1000.336285][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9158'.
[ 1000.418570][T32254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.510012][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9158'.
[ 1000.569654][T32254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.682569][T32254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1000.711934][ T5708] syzkaller0: entered promiscuous mode
[ 1000.718397][ T5708] syzkaller0: entered allmulticast mode
[ 1000.796033][T32254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.129280][ T5720] syzkaller0: entered promiscuous mode
[ 1001.137169][ T5720] syzkaller0: entered allmulticast mode
[ 1001.153229][ T5676] chnl_net:caif_netlink_parms(): no params data found
[ 1001.469011][T32254] bridge_slave_1: left allmulticast mode
[ 1001.475173][T32254] bridge_slave_1: left promiscuous mode
[ 1001.482239][T32254] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.493971][T32254] bridge_slave_0: left allmulticast mode
[ 1001.499977][T32254] bridge_slave_0: left promiscuous mode
[ 1001.506129][T32254] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.539156][T32254] tipc: Resetting bearer <eth:xfrm0>
[ 1001.781025][T32254] tipc: Disabling bearer <eth:xfrm0>
[ 1001.837938][T32254] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1001.910119][T21834] Bluetooth: hci3: command tx timeout
[ 1001.975907][T32254] bond4 (unregistering): (slave bridge2): Releasing backup interface
[ 1002.035069][T32254] bond5 (unregistering): (slave bridge3): Releasing backup interface
[ 1002.091857][T32254] bond0 (unregistering): Released all slaves
[ 1002.118969][T32254] bond1 (unregistering): Released all slaves
[ 1002.137765][T32254] bond2 (unregistering): Released all slaves
[ 1002.153499][T32254] bond3 (unregistering): Released all slaves
[ 1002.173207][T32254] bond4 (unregistering): Released all slaves
[ 1002.191033][T32254] bond5 (unregistering): Released all slaves
[ 1002.213203][T32254] bond6 (unregistering): Released all slaves
[ 1002.415594][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.450190][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1002.469969][ T5676] bridge_slave_0: entered allmulticast mode
[ 1002.481814][ T5676] bridge_slave_0: entered promiscuous mode
[ 1002.494065][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1002.515336][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.544253][ T5676] bridge_slave_1: entered allmulticast mode
[ 1002.558856][ T5676] bridge_slave_1: entered promiscuous mode
[ 1002.577516][T32254] : left promiscuous mode
[ 1002.785610][T32254] : left promiscuous mode
[ 1002.863123][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1002.891352][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1002.994185][ T5676] team0: Port device team_slave_0 added
[ 1003.004300][ T5791] netlink: 'syz.0.9182': attribute type 1 has an invalid length.
[ 1003.024085][T32254] tipc: Disabling bearer <udp:syz0>
[ 1003.034600][T32254] tipc: Left network mode
[ 1003.052312][ T5791] netlink: 'syz.0.9182': attribute type 1 has an invalid length.
[ 1003.059479][ T5793] netlink: 'syz.0.9182': attribute type 1 has an invalid length.
[ 1003.105843][ T5676] team0: Port device team_slave_1 added
[ 1003.106652][ T5793] __nla_validate_parse: 67 callbacks suppressed
[ 1003.106697][ T5793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 1003.165803][ T5793] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 1003.191435][ T5791] netlink: 'syz.0.9182': attribute type 1 has an invalid length.
[ 1003.199549][ T5791] netlink: 'syz.0.9182': attribute type 2 has an invalid length.
[ 1003.219509][ T5793] netlink: 658 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 1003.266775][ T5791] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9182'.
[ 1003.381618][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1003.388821][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.497148][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1003.529360][ T5795] syzkaller0: entered promiscuous mode
[ 1003.543185][ T5795] syzkaller0: entered allmulticast mode
[ 1003.622486][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1003.630381][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.699024][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1003.974690][ T5830] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1003.989928][T21834] Bluetooth: hci3: command tx timeout
[ 1004.000629][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9192'.
[ 1004.043070][ T5676] hsr_slave_0: entered promiscuous mode
[ 1004.050461][ T5676] hsr_slave_1: entered promiscuous mode
[ 1004.168657][ T5840] FAULT_INJECTION: forcing a failure.
[ 1004.168657][ T5840] name failslab, interval 1, probability 0, space 0, times 0
[ 1004.181891][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.1.9194 Not tainted syzkaller #0 PREEMPT(full) 
[ 1004.181919][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1004.181932][ T5840] Call Trace:
[ 1004.181941][ T5840]  <TASK>
[ 1004.181950][ T5840]  dump_stack_lvl+0xe8/0x150
[ 1004.181986][ T5840]  should_fail_ex+0x412/0x560
[ 1004.182017][ T5840]  should_failslab+0xa8/0x100
[ 1004.182045][ T5840]  kmem_cache_alloc_bulk_noprof+0x8d/0x7e0
[ 1004.182070][ T5840]  ? pfn_valid+0x125/0x4c0
[ 1004.182106][ T5840]  bpf_test_run_xdp_live+0x179c/0x1cf0
[ 1004.182151][ T5840]  ? bpf_test_run_xdp_live+0x438/0x1cf0
[ 1004.182188][ T5840]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[ 1004.182236][ T5840]  ? 0xffffffffa0201810
[ 1004.182255][ T5840]  ? 0xffffffffa0201848
[ 1004.182272][ T5840]  ? 0xffffffffa0201898
[ 1004.182318][ T5840]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[ 1004.182356][ T5840]  ? _copy_from_user+0x94/0xb0
[ 1004.182386][ T5840]  ? bpf_test_init+0x113/0x150
[ 1004.182408][ T5840]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1004.182437][ T5840]  bpf_prog_test_run_xdp+0x81c/0x1160
[ 1004.182479][ T5840]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1004.182510][ T5840]  ? __fget_files+0x2a/0x420
[ 1004.182545][ T5840]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1004.182572][ T5840]  bpf_prog_test_run+0x2c7/0x340
[ 1004.182604][ T5840]  __sys_bpf+0x643/0x950
[ 1004.182638][ T5840]  ? __pfx___sys_bpf+0x10/0x10
[ 1004.182686][ T5840]  ? ksys_write+0x242/0x270
[ 1004.182710][ T5840]  ? __pfx_ksys_write+0x10/0x10
[ 1004.182740][ T5840]  __x64_sys_bpf+0x7c/0x90
[ 1004.182769][ T5840]  do_syscall_64+0x14d/0xf80
[ 1004.182800][ T5840]  ? trace_irq_disable+0x3b/0x150
[ 1004.182830][ T5840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.182852][ T5840]  ? clear_bhb_loop+0x40/0x90
[ 1004.182878][ T5840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1004.182900][ T5840] RIP: 0033:0x7f1e8979c629
[ 1004.182919][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1004.182938][ T5840] RSP: 002b:00007f1e8a5ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1004.182961][ T5840] RAX: ffffffffffffffda RBX: 00007f1e89a15fa0 RCX: 00007f1e8979c629
[ 1004.182977][ T5840] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1004.182990][ T5840] RBP: 00007f1e8a5ff090 R08: 0000000000000000 R09: 0000000000000000
[ 1004.183004][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1004.183015][ T5840] R13: 00007f1e89a16038 R14: 00007f1e89a15fa0 R15: 00007ffc5e717f48
[ 1004.183050][ T5840]  </TASK>
[ 1004.928257][ T5867] syzkaller0: entered promiscuous mode
[ 1004.937619][ T5867] syzkaller0: entered allmulticast mode
[ 1005.208793][T32254] hsr_slave_0: left promiscuous mode
[ 1005.232962][T32254] hsr_slave_1: left promiscuous mode
[ 1005.264230][T32254] veth1_macvtap: left promiscuous mode
[ 1005.270751][T32254] veth0_macvtap: left promiscuous mode
[ 1005.276774][T32254] veth1_vlan: left promiscuous mode
[ 1005.285438][T32254] veth0_vlan: left promiscuous mode
[ 1005.506772][T32254] pim6reg (unregistering): left allmulticast mode
[ 1005.721946][T32254] team0 (unregistering): Port device team_slave_1 removed
[ 1005.735714][ T5898] netlink: 'syz.3.9205': attribute type 10 has an invalid length.
[ 1005.750727][T32254] team0 (unregistering): Port device team_slave_0 removed
[ 1005.841767][T32254] team0 (unregistering): Port device dummy0 removed
[ 1005.943973][ T5898] team0: Port device dummy0 added
[ 1006.071398][T21834] Bluetooth: hci3: command tx timeout
[ 1006.642371][T32254] IPVS: stop unused estimator thread 0...
[ 1006.821035][ T5925] syzkaller0: entered promiscuous mode
[ 1006.826747][ T5925] syzkaller0: entered allmulticast mode
[ 1008.161822][T21834] Bluetooth: hci3: command tx timeout
[ 1009.767937][ T5988] veth0: entered promiscuous mode
[ 1009.776836][ T5676] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1009.799592][ T5676] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1009.831019][ T5676] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1009.838024][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9220'.
[ 1009.868987][ T5676] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1010.128404][ T6014] syzkaller0: entered promiscuous mode
[ 1010.134525][ T6014] syzkaller0: entered allmulticast mode
[ 1010.311732][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1010.341009][ T6018] vlan2: entered promiscuous mode
[ 1010.350092][ T6018] vlan2: entered allmulticast mode
[ 1010.355558][ T6018] hsr_slave_1: entered allmulticast mode
[ 1010.381721][ T6022] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1010.441043][ T5676] 8021q: adding VLAN 0 to HW filter on device team0
[ 1010.476420][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.483983][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1010.522476][T32254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.530021][T32254] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1010.976352][ T6047] syzkaller0: entered promiscuous mode
[ 1010.986511][ T6047] syzkaller0: entered allmulticast mode
[ 1011.114866][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1011.234736][ T6063] netlink: 'syz.2.9243': attribute type 2 has an invalid length.
[ 1011.256541][ T6063] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9243'.
[ 1011.330361][ T6068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9244'.
[ 1011.509125][ T6078] SET target dimension over the limit!
[ 1011.576026][ T6082] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9249'.
[ 1011.591132][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9247'.
[ 1011.615668][ T6085] netlink: 'syz.0.9250': attribute type 4 has an invalid length.
[ 1011.671406][ T6085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9250'.
[ 1011.719894][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9251'.
[ 1011.734694][ T6089] netlink: 'syz.3.9251': attribute type 64 has an invalid length.
[ 1011.744897][ T6089] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9251'.
[ 1011.828837][ T6092] syzkaller0: entered promiscuous mode
[ 1011.836326][ T6092] syzkaller0: entered allmulticast mode
[ 1011.850318][ T6095] netlink: 'syz.3.9251': attribute type 1 has an invalid length.
[ 1011.915602][ T6095] erspan1: entered allmulticast mode
[ 1011.984944][ T5676] veth0_vlan: entered promiscuous mode
[ 1012.003860][ T5676] veth1_vlan: entered promiscuous mode
[ 1012.122009][ T5676] veth0_macvtap: entered promiscuous mode
[ 1012.137337][ T5676] veth1_macvtap: entered promiscuous mode
[ 1012.153962][ T6107] netlink: 'syz.2.9258': attribute type 64 has an invalid length.
[ 1012.191129][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1012.226064][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1012.247137][ T7363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.268046][ T7363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.289475][ T7363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.312910][ T7363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1012.454491][ T6117] netlink: 'syz.2.9262': attribute type 1 has an invalid length.
[ 1012.467166][ T1955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.522816][ T1955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.634106][ T6117] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1012.681087][ T7361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1012.689169][ T7361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.779558][ T6132] syzkaller0: entered promiscuous mode
[ 1012.799147][ T6132] syzkaller0: entered allmulticast mode
[ 1012.944409][ T6104] Bluetooth: hci0: Opcode 0x080f failed: -4
[ 1013.042759][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9267'.
[ 1013.081597][ T6142] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1013.106267][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1013.118611][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1013.134055][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1013.153137][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1013.162810][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1014.143854][ T6193] netlink: 'syz.3.9283': attribute type 10 has an invalid length.
[ 1014.160386][ T5835] Bluetooth: hci0: command 0x0405 tx timeout
[ 1014.173960][ T6144] chnl_net:caif_netlink_parms(): no params data found
[ 1014.300621][ T6194] syzkaller0: entered promiscuous mode
[ 1014.306555][ T6194] syzkaller0: entered allmulticast mode
[ 1014.314787][ T6199] netlink: 'syz.1.9284': attribute type 1 has an invalid length.
[ 1014.324526][ T6199] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9284'.
[ 1014.334954][ T6199] netlink: 'syz.1.9284': attribute type 1 has an invalid length.
[ 1014.343326][ T6199] netlink: 'syz.1.9284': attribute type 8 has an invalid length.
[ 1014.351421][ T6196] ipvlan2: entered allmulticast mode
[ 1014.351446][ T6196] batadv_slave_1: entered allmulticast mode
[ 1014.359304][ T6196] batman_adv: batadv0: Adding interface: ipvlan2
[ 1014.375290][ T6196] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.402570][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1014.415429][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1014.426430][ T6196] batman_adv: batadv0: Interface activated: ipvlan2
[ 1014.579167][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.587675][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.598193][ T6144] bridge_slave_0: entered allmulticast mode
[ 1014.607338][ T6144] bridge_slave_0: entered promiscuous mode
[ 1014.627693][ T6214] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1014.639253][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.646943][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.654942][ T6144] bridge_slave_1: entered allmulticast mode
[ 1014.670350][ T6144] bridge_slave_1: entered promiscuous mode
[ 1014.761523][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1014.786695][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1014.864145][ T6144] team0: Port device team_slave_0 added
[ 1014.878641][ T6144] team0: Port device team_slave_1 added
[ 1014.926048][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1014.933796][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1014.961765][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1014.975698][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1014.983171][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1015.011185][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1015.196256][ T5835] Bluetooth: hci1: command tx timeout
[ 1017.247032][ T6144] hsr_slave_0: entered promiscuous mode
[ 1017.253991][ T6144] hsr_slave_1: entered promiscuous mode
[ 1017.260745][ T6144] debugfs: 'hsr0' already exists in 'hsr'
[ 1017.266890][ T6144] Cannot create hsr debugfs directory
[ 1017.273682][ T5835] Bluetooth: hci1: command tx timeout
[ 1017.881840][ T6144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.013761][ T6144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.031802][ T5937] IPVS: starting estimator thread 0...
[ 1018.131372][ T6144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.143514][ T6266] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1018.261149][ T6144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.405469][ T6294] IPVS: set_ctl: invalid protocol: 103 172.20.20.41:20000
[ 1018.440863][ T6292] __nla_validate_parse: 1 callbacks suppressed
[ 1018.440888][ T6292] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.9308'.
[ 1018.484054][ T6297] validate_nla: 1 callbacks suppressed
[ 1018.484076][ T6297] netlink: 'syz.1.9311': attribute type 10 has an invalid length.
[ 1018.654268][ T6144] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1018.676051][ T6144] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1018.700143][ T6144] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1018.719212][ T6144] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1018.937526][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.984268][ T6144] 8021q: adding VLAN 0 to HW filter on device team0
[ 1019.002760][ T6321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9318'.
[ 1019.031418][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.038910][ T7363] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.048876][ T6320] syzkaller1: entered promiscuous mode
[ 1019.054973][ T6320] syzkaller1: entered allmulticast mode
[ 1019.073630][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.080886][ T7363] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.118120][ T6321] netlink: 'syz.4.9318': attribute type 21 has an invalid length.
[ 1019.139379][ T6321] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1019.167209][ T6321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1019.175361][ T6321] IPv6: NLM_F_CREATE should be set when creating new route
[ 1019.182804][ T6321] IPv6: NLM_F_CREATE should be set when creating new route
[ 1019.190537][ T6321] IPv6: NLM_F_CREATE should be set when creating new route
[ 1019.219381][ T6317] netlink: 'syz.4.9318': attribute type 21 has an invalid length.
[ 1019.256569][ T6317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1019.302820][ T6317] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1019.325112][ T6317] team0: Device macvlan2 is already an upper device of the team interface
[ 1019.355466][ T5835] Bluetooth: hci1: command tx timeout
[ 1019.544924][ T6339] netlink: 'syz.1.9323': attribute type 10 has an invalid length.
[ 1019.576344][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.655779][ T6144] veth0_vlan: entered promiscuous mode
[ 1019.716454][ T6144] veth1_vlan: entered promiscuous mode
[ 1019.723469][ T6347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9327'.
[ 1019.748624][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9327'.
[ 1019.782864][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9327'.
[ 1019.842874][ T6144] veth0_macvtap: entered promiscuous mode
[ 1019.855749][ T6144] veth1_macvtap: entered promiscuous mode
[ 1019.877646][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1019.910695][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1019.925619][ T6347] Cannot find add_set index 2 as target
[ 1019.943708][ T7363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.970373][ T7363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.995062][ T7363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.024172][ T7363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.052371][ T6355] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1020.298080][ T7361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.311929][ T6363] netlink: 'syz.3.9332': attribute type 21 has an invalid length.
[ 1020.329879][ T7361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.339818][ T6363] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9332'.
[ 1020.379056][ T7363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.400065][ T7363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.569223][ T6372] netlink: 'syz.3.9335': attribute type 10 has an invalid length.
[ 1020.586012][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9266'.
[ 1020.609642][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9330'.
[ 1020.620763][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9330'.
[ 1020.638651][ T6375] netlink: 'syz.2.9266': attribute type 18 has an invalid length.
[ 1020.650409][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9266'.
[ 1020.725588][ T6375] netlink: 'syz.2.9266': attribute type 18 has an invalid length.
[ 1020.731379][ T7336] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1020.752171][ T7336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1020.773185][ T7336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1020.808229][ T6379] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 1020.820648][ T7336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.062271][T21834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1021.073200][T21834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1021.082017][ T6386] netlink: 'syz.2.9339': attribute type 3 has an invalid length.
[ 1021.102356][T21834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1021.121897][ T6386] netlink: 'syz.2.9339': attribute type 2 has an invalid length.
[ 1021.136111][T21834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1021.160625][T21834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1021.430097][ T5835] Bluetooth: hci1: command tx timeout
[ 1021.627320][T32256] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.655658][T32256] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[ 1021.755061][T32256] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.777275][T32256] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[ 1021.861820][T32256] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1021.873618][T32256] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[ 1021.976128][T32256] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1022.010287][T32256] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[ 1022.360448][T32256] bridge_slave_1: left allmulticast mode
[ 1022.376715][T32256] bridge_slave_1: left promiscuous mode
[ 1022.409194][T32256] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1022.453931][T32256] bridge_slave_0: left allmulticast mode
[ 1022.464501][T32256] bridge_slave_0: left promiscuous mode
[ 1022.475452][T32256] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1022.528229][T32256] tipc: Resetting bearer <ib:gretap0>
[ 1022.704857][T32256] bond1 (unregistering): (slave vti0): Releasing backup interface
[ 1022.721171][T32256] vti0 (unregistering): left promiscuous mode
[ 1022.758223][T32256] tipc: Disabling bearer <ib:gretap0>
[ 1022.784577][T32256] bond5 (unregistering): (slave gretap2): Releasing active interface
[ 1022.829294][T32256] dvmrp0 (unregistering): left allmulticast mode
[ 1023.025973][T32256] bond5 (unregistering): (slave bridge4): Releasing active interface
[ 1023.188397][T32256] bond0 (unregistering): Released all slaves
[ 1023.205518][T32256] bond1 (unregistering): Released all slaves
[ 1023.222596][T32256] bond2 (unregistering): (slave team_slave_0): Releasing backup interface
[ 1023.236009][T32256] bond2 (unregistering): Released all slaves
[ 1023.254146][T32256] bond3 (unregistering): (slave lo): Releasing backup interface
[ 1023.262702][T32256] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1023.274208][ T5835] Bluetooth: hci5: command tx timeout
[ 1023.281934][T32256] bond3 (unregistering): Released all slaves
[ 1023.301049][T32256] bond4 (unregistering): Released all slaves
[ 1023.315465][T32256] bond5 (unregistering): Released all slaves
[ 1023.424914][ T6382] chnl_net:caif_netlink_parms(): no params data found
[ 1023.464980][T32256] �9: left promiscuous mode
[ 1023.597724][ T6459] netdevsim netdevsim4 
: renamed from netdevsim0 (while UP)
[ 1023.633035][ T6462] __nla_validate_parse: 11 callbacks suppressed
[ 1023.633054][ T6462] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.9361'.
[ 1023.653574][T32256] tipc: Disabling bearer <udp:syz2>
[ 1023.664199][T32256] tipc: Left network mode
[ 1023.759533][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.766915][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.777079][ T6382] bridge_slave_0: entered allmulticast mode
[ 1023.785366][ T6382] bridge_slave_0: entered promiscuous mode
[ 1023.794480][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.802567][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.810048][ T6382] bridge_slave_1: entered allmulticast mode
[ 1023.818361][ T6382] bridge_slave_1: entered promiscuous mode
[ 1023.858104][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.904371][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1023.996270][ T6477] validate_nla: 2 callbacks suppressed
[ 1023.996293][ T6477] netlink: 'syz.3.9363': attribute type 9 has an invalid length.
[ 1024.027768][ T6477] netlink: 'syz.3.9363': attribute type 6 has an invalid length.
[ 1024.115432][ T6486] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9365'.
[ 1024.131879][ T6382] team0: Port device team_slave_0 added
[ 1024.193081][ T6382] team0: Port device team_slave_1 added
[ 1024.466561][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1024.481580][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.519550][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1024.652152][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1024.659181][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1024.764454][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1024.813455][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9371'.
[ 1024.922916][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.965317][ T6518] bridge_slave_1 (unregistering): left allmulticast mode
[ 1024.976679][ T6518] bridge_slave_1 (unregistering): left promiscuous mode
[ 1024.984357][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.041698][ T6521] bridge1: entered promiscuous mode
[ 1025.047732][ T6521] bridge1: entered allmulticast mode
[ 1025.061951][ T6521] team0: Port device bridge1 added
[ 1025.074509][T12604] lec:lec_start_xmit: lec0:No lecd attached
[ 1025.090187][ T6522] bridge0: port 3(team0) entered blocking state
[ 1025.126381][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9373'.
[ 1025.130800][ T6522] bridge0: port 3(team0) entered disabled state
[ 1025.160034][ T6522] team0: entered allmulticast mode
[ 1025.182884][ T6522] team_slave_0: entered allmulticast mode
[ 1025.188791][ T6522] team_slave_1: entered allmulticast mode
[ 1025.235124][ T6522] team0: entered promiscuous mode
[ 1025.256527][ T6522] team_slave_0: entered promiscuous mode
[ 1025.275269][ T6522] team_slave_1: entered promiscuous mode
[ 1025.311029][ T6522] bridge0: port 3(team0) entered blocking state
[ 1025.317446][ T6522] bridge0: port 3(team0) entered forwarding state
[ 1025.355783][ T5835] Bluetooth: hci5: command tx timeout
[ 1025.476100][ T6382] hsr_slave_0: entered promiscuous mode
[ 1025.487318][ T6382] hsr_slave_1: entered promiscuous mode
[ 1025.496756][ T6382] debugfs: 'hsr0' already exists in 'hsr'
[ 1025.502993][ T6382] Cannot create hsr debugfs directory
[ 1025.538713][T32256] hsr_slave_0: left promiscuous mode
[ 1025.545813][T32256] hsr_slave_1: left promiscuous mode
[ 1025.553473][T32256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1025.561269][T32256] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1025.572141][T32256] veth1_macvtap: left promiscuous mode
[ 1025.577836][T32256] veth0_macvtap: left promiscuous mode
[ 1025.587495][T32256] veth1_vlan: left promiscuous mode
[ 1025.714760][ T6545] openvswitch: netlink: EtherType 50a is less than min 600
[ 1025.744281][ T6546] ------------[ cut here ]------------
[ 1025.750441][ T6546] msk->pm.local_addr_used == 0
[ 1025.750478][ T6546] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.3.9377/6546
[ 1025.767163][ T6546] Modules linked in:
[ 1025.771785][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.3.9377 Not tainted syzkaller #0 PREEMPT(full) 
[ 1025.781182][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1025.791688][ T6546] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1025.798474][ T6546] Code: 01 00 00 49 89 c6 e8 ae 50 29 f6 e9 28 fb ff ff e8 a4 50 29 f6 48 89 df be 03 00 00 00 e8 57 d6 11 f9 eb a4 e8 90 50 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48
[ 1025.818730][ T6546] RSP: 0018:ffffc90006447160 EFLAGS: 00010287
[ 1025.825040][ T6546] RAX: ffffffff8b9c3c00 RBX: 0000000000000000 RCX: 0000000000080000
[ 1025.833149][ T6546] RDX: ffffc90013fce000 RSI: 0000000000000f99 RDI: 0000000000000f9a
[ 1025.841212][ T6546] RBP: ffffc900064473b0 R08: ffff88809ac26cc7 R09: 1ffff11013584d98
[ 1025.849584][ T6546] R10: dffffc0000000000 R11: ffffed1013584d99 R12: 1ffff11013584d97
[ 1025.857941][ T6546] R13: ffff88805a507380 R14: ffff88809ac26200 R15: ffff88809ac26cb8
[ 1025.866196][ T6546] FS:  00007fbb022b76c0(0000) GS:ffff888125566000(0000) knlGS:0000000000000000
[ 1025.875497][ T6546] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1025.882499][ T6546] CR2: 0000200000032000 CR3: 0000000076d9e000 CR4: 00000000003526f0
[ 1025.891170][ T6546] Call Trace:
[ 1025.894595][ T6546]  <TASK>
[ 1025.897589][ T6546]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1025.904076][ T6546]  ? rcu_is_watching+0x15/0xb0
[ 1025.908998][ T6546]  ? trace_kmalloc+0x2a/0x110
[ 1025.913907][ T6546]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1025.920458][ T6546]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1025.926258][ T6546]  ? __asan_memcpy+0x40/0x70
[ 1025.931000][ T6546]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1025.937246][ T6546]  ? bpf_lsm_capable+0x9/0x20
[ 1025.942245][ T6546]  ? security_capable+0x7e/0x2c0
[ 1025.947337][ T6546]  genl_rcv_msg+0x61c/0x7a0
[ 1025.952340][ T6546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1025.957540][ T6546]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1025.964646][ T6546]  ? __lock_acquire+0x6b5/0x2cf0
[ 1025.969773][ T6546]  netlink_rcv_skb+0x232/0x4b0
[ 1025.974729][ T6546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1025.980153][ T6546]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1025.985642][ T6546]  ? down_read+0x272/0x2e0
[ 1025.990153][ T6546]  ? genl_rcv+0xd/0x40
[ 1025.994345][ T6546]  genl_rcv+0x28/0x40
[ 1025.998392][ T6546]  netlink_unicast+0x80f/0x9b0
[ 1026.003550][ T6546]  ? __pfx_netlink_unicast+0x10/0x10
[ 1026.009038][ T6546]  ? netlink_sendmsg+0x650/0xb40
[ 1026.014160][ T6546]  ? skb_put+0x11b/0x210
[ 1026.018633][ T6546]  netlink_sendmsg+0x813/0xb40
[ 1026.023526][ T6546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1026.029036][ T6546]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[ 1026.035543][ T6546]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1026.040665][ T6546]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1026.046201][ T6546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1026.051797][ T6546]  ____sys_sendmsg+0xa68/0xad0
[ 1026.056734][ T6546]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1026.062234][ T6546]  ? import_iovec+0x73/0xa0
[ 1026.066897][ T6546]  ___sys_sendmsg+0x2a5/0x360
[ 1026.071799][ T6546]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1026.077082][ T6546]  ? futex_wake+0x4ac/0x580
[ 1026.082693][ T6546]  ? __fget_files+0x2a/0x420
[ 1026.087351][ T6546]  ? __fget_files+0x3a0/0x420
[ 1026.092172][ T6546]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1026.097277][ T6546]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1026.103078][ T6546]  ? rcu_is_watching+0x15/0xb0
[ 1026.108293][ T6546]  do_syscall_64+0x14d/0xf80
[ 1026.113049][ T6546]  ? trace_irq_disable+0x3b/0x150
[ 1026.118150][ T6546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.124521][ T6546]  ? clear_bhb_loop+0x40/0x90
[ 1026.129289][ T6546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.135489][ T6546] RIP: 0033:0x7fbb0139c629
[ 1026.140080][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.160144][ T6546] RSP: 002b:00007fbb022b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1026.168640][ T6546] RAX: ffffffffffffffda RBX: 00007fbb01615fa0 RCX: 00007fbb0139c629
[ 1026.176866][ T6546] RDX: 0000000001000000 RSI: 0000200000000140 RDI: 0000000000000007
[ 1026.185398][ T6546] RBP: 00007fbb01432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1026.193755][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1026.201995][ T6546] R13: 00007fbb01616038 R14: 00007fbb01615fa0 R15: 00007fff48e59028
[ 1026.210740][ T6546]  </TASK>
[ 1026.213954][ T6546] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1026.221340][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.3.9377 Not tainted syzkaller #0 PREEMPT(full) 
[ 1026.230832][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1026.241555][ T6546] Call Trace:
[ 1026.245030][ T6546]  <TASK>
[ 1026.248005][ T6546]  vpanic+0x56c/0xa60
[ 1026.252071][ T6546]  ? __pfx__printk+0x10/0x10
[ 1026.256718][ T6546]  ? __pfx_vpanic+0x10/0x10
[ 1026.261312][ T6546]  ? is_bpf_text_address+0x292/0x2b0
[ 1026.266635][ T6546]  ? is_bpf_text_address+0x26/0x2b0
[ 1026.271864][ T6546]  panic+0xc5/0xd0
[ 1026.275657][ T6546]  ? __pfx_panic+0x10/0x10
[ 1026.280301][ T6546]  __warn+0x315/0x4f0
[ 1026.284333][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.290437][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.296704][ T6546]  __report_bug+0x29a/0x540
[ 1026.301466][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.307528][ T6546]  ? __pfx___report_bug+0x10/0x10
[ 1026.312693][ T6546]  ? __lock_acquire+0x6b5/0x2cf0
[ 1026.317864][ T6546]  ? __lock_sock_fast+0x45/0xe0
[ 1026.323132][ T6546]  ? preempt_schedule_thunk+0x16/0x30
[ 1026.328661][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.334610][ T6546]  report_bug+0x16a/0x220
[ 1026.339272][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.345636][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430
[ 1026.351696][ T6546]  handle_bug+0x98/0x200
[ 1026.355999][ T6546]  exc_invalid_op+0x1a/0x50
[ 1026.360653][ T6546]  asm_exc_invalid_op+0x1a/0x20
[ 1026.365555][ T6546] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430
[ 1026.372147][ T6546] Code: 01 00 00 49 89 c6 e8 ae 50 29 f6 e9 28 fb ff ff e8 a4 50 29 f6 48 89 df be 03 00 00 00 e8 57 d6 11 f9 eb a4 e8 90 50 29 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48
[ 1026.391964][ T6546] RSP: 0018:ffffc90006447160 EFLAGS: 00010287
[ 1026.398545][ T6546] RAX: ffffffff8b9c3c00 RBX: 0000000000000000 RCX: 0000000000080000
[ 1026.406556][ T6546] RDX: ffffc90013fce000 RSI: 0000000000000f99 RDI: 0000000000000f9a
[ 1026.414886][ T6546] RBP: ffffc900064473b0 R08: ffff88809ac26cc7 R09: 1ffff11013584d98
[ 1026.423616][ T6546] R10: dffffc0000000000 R11: ffffed1013584d99 R12: 1ffff11013584d97
[ 1026.431899][ T6546] R13: ffff88805a507380 R14: ffff88809ac26200 R15: ffff88809ac26cb8
[ 1026.440449][ T6546]  ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430
[ 1026.446508][ T6546]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1026.453001][ T6546]  ? rcu_is_watching+0x15/0xb0
[ 1026.457979][ T6546]  ? trace_kmalloc+0x2a/0x110
[ 1026.463065][ T6546]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1026.469552][ T6546]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1026.475254][ T6546]  ? __asan_memcpy+0x40/0x70
[ 1026.479912][ T6546]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1026.486407][ T6546]  ? bpf_lsm_capable+0x9/0x20
[ 1026.491232][ T6546]  ? security_capable+0x7e/0x2c0
[ 1026.496414][ T6546]  genl_rcv_msg+0x61c/0x7a0
[ 1026.501133][ T6546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1026.506453][ T6546]  ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10
[ 1026.512646][ T6546]  ? __lock_acquire+0x6b5/0x2cf0
[ 1026.517800][ T6546]  netlink_rcv_skb+0x232/0x4b0
[ 1026.522944][ T6546]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1026.528175][ T6546]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1026.533540][ T6546]  ? down_read+0x272/0x2e0
[ 1026.538107][ T6546]  ? genl_rcv+0xd/0x40
[ 1026.542209][ T6546]  genl_rcv+0x28/0x40
[ 1026.546333][ T6546]  netlink_unicast+0x80f/0x9b0
[ 1026.551358][ T6546]  ? __pfx_netlink_unicast+0x10/0x10
[ 1026.556788][ T6546]  ? netlink_sendmsg+0x650/0xb40
[ 1026.562314][ T6546]  ? skb_put+0x11b/0x210
[ 1026.566712][ T6546]  netlink_sendmsg+0x813/0xb40
[ 1026.571659][ T6546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1026.577096][ T6546]  ? trace_sched_set_need_resched_tp+0x3e/0x160
[ 1026.583738][ T6546]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1026.588722][ T6546]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1026.594530][ T6546]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1026.599852][ T6546]  ____sys_sendmsg+0xa68/0xad0
[ 1026.604755][ T6546]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1026.610080][ T6546]  ? import_iovec+0x73/0xa0
[ 1026.614904][ T6546]  ___sys_sendmsg+0x2a5/0x360
[ 1026.619716][ T6546]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1026.625152][ T6546]  ? futex_wake+0x4ac/0x580
[ 1026.629820][ T6546]  ? __fget_files+0x2a/0x420
[ 1026.634445][ T6546]  ? __fget_files+0x3a0/0x420
[ 1026.639259][ T6546]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1026.644407][ T6546]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1026.650024][ T6546]  ? rcu_is_watching+0x15/0xb0
[ 1026.654848][ T6546]  do_syscall_64+0x14d/0xf80
[ 1026.659576][ T6546]  ? trace_irq_disable+0x3b/0x150
[ 1026.664907][ T6546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.671585][ T6546]  ? clear_bhb_loop+0x40/0x90
[ 1026.676683][ T6546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.682599][ T6546] RIP: 0033:0x7fbb0139c629
[ 1026.687069][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.707294][ T6546] RSP: 002b:00007fbb022b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1026.716057][ T6546] RAX: ffffffffffffffda RBX: 00007fbb01615fa0 RCX: 00007fbb0139c629
[ 1026.724434][ T6546] RDX: 0000000001000000 RSI: 0000200000000140 RDI: 0000000000000007
[ 1026.732824][ T6546] RBP: 00007fbb01432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1026.741185][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1026.749471][ T6546] R13: 00007fbb01616038 R14: 00007fbb01615fa0 R15: 00007fff48e59028
[ 1026.757791][ T6546]  </TASK>
[ 1026.761539][ T6546] Kernel Offset: disabled
[ 1026.765965][ T6546] Rebooting in 86400 seconds..