last executing test programs:

3.203481548s ago: executing program 3 (id=7674):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', <r1=>0x0, 0x29, 0x4, 0xff, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x7800, 0x10, 0xb}})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b000100657880080007400000000005000200000000000800064000000001080004400000000008000340000000af140000001100010000000000000000000000000a"], 0x94}}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @broadcast}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newtclass={0xf4, 0x28, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd, 0x7}, {0xfff3, 0x12}, {0xfff1, 0xa}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xa2, 0x5, 0x8000}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x8, 0x80}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0xd37f, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6, 0x2, 0xb}}, @TCA_HFSC_USC={0x10, 0x3, {0xffff37ec, 0x1, 0xaa2c}}, @TCA_HFSC_RSC={0x10, 0x1, {0x200004, 0x0, 0x401}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0x1, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x40}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x4, 0xe}}, @TCA_RATE={0x6, 0x5, {0xb3, 0x9d}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x4}}, {0xc, 0x2, [0xffff, 0x6, 0x1, 0x3]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x3404c899)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', r7, r0, 0x1, 0x2}, 0x50)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x1, 0x18}, 0xc)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r10, &(0x7f0000000240)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x12, &(0x7f0000000900)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000b0f0a00030000001832000005000000000000000000000018160000", @ANYRES32, @ANYBLOB="00000000000000002ede23f5e0daae317995e0a04ae321ce99fe5e1281e2ebede94fb5e69ea5e78c2a5fb570ec"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, &(0x7f0000000680), 0x41000, 0x24, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000700)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xe, 0x1000, 0xa309}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, r4], &(0x7f0000000c40)=[{0x3, 0x2, 0xf, 0x3}, {0x5, 0x4, 0x10, 0x7}, {0x0, 0x2, 0x10, 0x4}, {0x1, 0x4, 0x9, 0x4}, {0x3, 0x5, 0xb, 0x8}, {0x4, 0x5, 0xb, 0xb}, {0x4, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x4, 0xb}, {0x5, 0x5, 0xd}], 0x10, 0x70}, 0x94)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x30, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r11}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff0000080022eb000000002000e0000200000000000000000000000800655800000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x0, &(0x7f0000000340), &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3.057791891s ago: executing program 0 (id=7676):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.98337815s ago: executing program 2 (id=7677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r3, &(0x7f0000000040), 0x6)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000800060006000835000000450a0018006600000b2f907864010101ffff97b77ebd0165b3ae1dcf7ab6e9c2ffff3297e3ba1eac102daf326a6a5c7b1ee3fddd2ef864a496c17b003d4255521dba9343dc953d63d8d7861cc4af0bc91d1fa1d014000000004f1b8155579d8e5b70b8d921db411031ce21712e608a6959bedf651a2edba49c53176ec101abbc6f20866e1d6f1d6894338e96dab628ef34184e22c7a7e2e225db", @ANYRESOCT=r3, @ANYRESOCT=r2], 0x26)

2.752684565s ago: executing program 0 (id=7678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e0009fd27bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

2.395544863s ago: executing program 3 (id=7680):
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4048801)
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r0, 0x0, 0xd0, &(0x7f0000000580), &(0x7f00000006c0)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002"], 0x50}}, 0x4000850)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef", 0x8, 0x0, 0x0, 0x0)
listen(r1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
accept4(r1, 0x0, &(0x7f0000000700), 0x80400)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.335736502s ago: executing program 1 (id=7681):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000140)=[{&(0x7f0000000040)="0000000000a53a65d1ce1d24c3eef643e69b00000c9e", 0xeb98}, {&(0x7f0000000100)="4794462f8e88ebdbe24c005e350f8e9aee9d2879dbccd78d"}], 0x1, 0x0, 0xffffff5a, 0x1f000000}, 0x40800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e0001002abd7000fddbdf2508003a007f00000108008a00", @ANYRES32=0xee00, @ANYBLOB="98e1294462fbfb9d7e82a0f688551caaecae52c9"], 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10)

2.208563147s ago: executing program 1 (id=7682):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7241a468", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25010000000000000008410000004c0018fffffc00696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x24004081)

1.661751942s ago: executing program 3 (id=7683):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100"], 0x38}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

1.64464196s ago: executing program 1 (id=7684):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRESDEC=0x0], 0x70}}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000440)=@delchain={0x1804, 0x65, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {0x1, 0xfff1}, {0x5, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x17d0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe, 0x1}}, @TCA_U32_SEL={0x6e4, 0x5, {0xb, 0x7, 0x2, 0x6, 0x1, 0xd9d7, 0x4, 0x2, [{0x7ff, 0x7, 0xf106, 0x80000}, {0xfc2b, 0x6, 0x6, 0x8}, {0x1, 0xe, 0x1f86, 0x4}, {0xfff, 0x3, 0x1, 0xffff}, {0x10000, 0x3, 0x4, 0x6}, {0x7, 0x3d661e34, 0x0, 0x3}, {0x7, 0x9, 0xffffffff, 0x101}, {0x6, 0x19e, 0x5, 0x800}, {0x8, 0x80, 0x6, 0x9}, {0x6, 0x38f, 0x6}, {0xffff, 0xc0000000, 0x7ff, 0x1}, {0x3, 0x7, 0x200, 0x5c4}, {0x7fff, 0x10000, 0x6, 0x2}, {0x3, 0x7f, 0x1, 0x40}, {0x7, 0x64, 0xa, 0x8ea}, {0x7, 0x0, 0x5, 0x1}, {0x1, 0x47e2, 0x2, 0x1}, {0x286, 0x2, 0x6, 0x6}, {0x2, 0x7, 0x10, 0x5}, {0x3ff, 0xfff, 0x1, 0x618}, {0x0, 0x5, 0x0, 0x7}, {0x8001, 0x1, 0x5, 0x2}, {0x7, 0x6, 0x7fffffff, 0x7}, {0x401, 0x41, 0x8, 0xffffffff}, {0x9, 0x3ff, 0x7, 0x3}, {0xfffff12f, 0x7, 0xf0, 0x8}, {0x2, 0x6, 0x5, 0x2}, {0x7ff, 0x5, 0x61, 0x2}, {0xd2a, 0x0, 0x2, 0x2}, {0x6, 0x1, 0x8, 0x4}, {0x9, 0x8, 0x5, 0x6}, {0xfffffffd, 0x100, 0x1eec, 0x3}, {0x4, 0xfffffffb, 0x8, 0x9}, {0x3, 0x7fffffff, 0x4, 0x2}, {0x1000, 0x100, 0x2, 0x9}, {0x8, 0x70, 0x4, 0xd}, {0x2400, 0x7, 0x3, 0xc94e}, {0x2, 0x80000000, 0x4, 0x800}, {0x4, 0x80000000, 0x0, 0x1}, {0xffffd2ed, 0xffffffff, 0xb}, {0x2, 0x10, 0x5, 0x50b}, {0xfffffff3, 0x100, 0x8, 0x3ff}, {0x2, 0x1ff8, 0x5, 0x5}, {0x6, 0x7fff, 0x7f, 0x93e}, {0x4, 0x568, 0x7, 0x5}, {0x2, 0x3, 0x0, 0x40}, {0xc, 0x6, 0xfffffff7, 0x7}, {0x1ff, 0x7, 0x0, 0x5}, {0x200, 0x1, 0x1, 0x10000}, {0x6, 0x8, 0x2b53, 0x3}, {0x2, 0x5, 0x80000000, 0x900}, {0x6, 0x0, 0x1, 0x6}, {0xd7, 0x7, 0x7fff, 0x1}, {0x7, 0xfff, 0x8, 0xcbb1}, {0x484a5aad, 0x7, 0x1, 0x4}, {0x5, 0x2, 0x16, 0x7}, {0x80000000, 0xfff, 0x1ff, 0x800}, {0xe62b, 0xffff, 0x4, 0x597e0ae1}, {0x4, 0x2369, 0x6}, {0x1, 0x3, 0x5, 0x8}, {0x9, 0x4, 0xfff, 0x7}, {0xb5, 0x9, 0x1, 0x81}, {0x80000001, 0x7fff, 0x7c16, 0xc}, {0x3f4b09c1, 0x6, 0x9e6, 0x9}, {0x8ac, 0x9, 0x101, 0x1}, {0xe, 0x5, 0x0, 0x3cd0}, {0x5, 0x78, 0x7, 0xd}, {0x8, 0xfe2b, 0xc591}, {0x1, 0x7, 0x5, 0xff}, {0x7, 0x630f, 0x0, 0x3}, {0x4, 0x6, 0x4, 0xa}, {0x4, 0xffffffff, 0x3ff, 0x4}, {0x3, 0x83, 0x6, 0x800}, {0x5, 0x8, 0x0, 0x2}, {0x10, 0x6, 0x8, 0x7}, {0x6, 0x10001, 0x9, 0x7}, {0x1, 0xc, 0x6, 0x7}, {0x8, 0x7, 0x9, 0x3}, {0x0, 0x6, 0x3, 0x1}, {0x9, 0x888, 0x5, 0x5}, {0x80, 0xfffffff7, 0x6, 0x6}, {0x7, 0x5, 0xf91, 0x3}, {0x2, 0x503c4760, 0xfffffffe, 0x6}, {0xff, 0x3, 0x2, 0x6a30}, {0x2, 0x7, 0x32b, 0x4}, {0xb, 0x0, 0x5, 0x5}, {0x0, 0xfffffffb, 0x80000000, 0x4}, {0x200, 0x1000, 0xffffffff, 0x80}, {0x6, 0xd, 0x1, 0x80000000}, {0x2, 0x826, 0xfffffffe, 0xffff}, {0x100, 0xe9, 0x5d, 0xe}, {0x5, 0x1, 0x8, 0x2}, {0x400, 0xc, 0x1, 0xc}, {0x7, 0x6, 0x4, 0x8}, {0xe67f, 0x424, 0x1, 0x1}, {0x7, 0xffffffff, 0x4, 0x1000}, {0x19a7, 0x1, 0x6, 0x919}, {0x7, 0x4, 0x2, 0xc8}, {0x51a, 0x5, 0x2, 0x1}, {0x9, 0x6, 0x1, 0x8}, {0x3, 0xbb, 0x4, 0x7}, {0x0, 0x200, 0xd0c, 0x7}, {0x3, 0x8000, 0x47efefd8, 0x6}, {0x10, 0x3, 0xfffffff8, 0xfa7}, {0x10, 0x9, 0x9, 0x101}, {0x8, 0x800, 0x7fff, 0x2}, {0xc, 0x4, 0x9, 0x8}, {0x4, 0xa, 0xb4, 0x5}, {0x100, 0x8, 0xd, 0x80000001}]}}, @TCA_U32_HASH={0x8, 0x2, 0xc0}, @TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0xfff3}}, @TCA_U32_SEL={0x3f4, 0x5, {0x8, 0x72, 0xfa, 0x6, 0x64, 0x0, 0x4, 0x7, [{0x7, 0x9, 0x101, 0x2}, {0x1, 0xd42, 0x7, 0x7}, {0x6, 0x1, 0x7, 0x3}, {0x4, 0x3, 0xffffffff, 0x2}, {0x9, 0x9, 0xfffffff8, 0x1}, {0xe, 0x8000, 0x0, 0x1}, {0x8, 0x400, 0x6, 0x5}, {0x5b, 0xfff, 0x1}, {0x7, 0x3, 0xf, 0x5}, {0x3ff, 0x3, 0x3, 0xffff}, {0x8, 0x68da, 0x6, 0x7}, {0xed, 0x7fffffff, 0x6, 0x81}, {0x8, 0x0, 0x8001, 0x9}, {0x8, 0xc57, 0x200, 0xd16}, {0x6e46, 0x80000000, 0xf, 0x43d}, {0x400, 0x2, 0x9}, {0xe6, 0x5b2d, 0x200, 0x8d01}, {0x4000000, 0x8, 0xfffffffd, 0x3}, {0x10001, 0x6, 0x6, 0x3}, {0x8, 0x3, 0x2, 0x7}, {0x401, 0x4, 0x4, 0x3}, {0x9, 0xa6d, 0x3e4e, 0x3}, {0x8001, 0x7fff, 0xfffffffa}, {0x88, 0x200, 0x7, 0x2}, {0x7, 0x6, 0x9, 0x4}, {0x3, 0x9, 0x7fff, 0x9}, {0xf, 0x5, 0x3, 0x7}, {0x2, 0x400, 0x40000000, 0x3}, {0x16c1, 0xebd, 0x101, 0xe}, {0x6, 0x9, 0x9}, {0x4, 0x8, 0x0, 0x7}, {0x9, 0x0, 0xbd5, 0x6}, {0x80000000, 0x9, 0x700, 0x25f}, {0xfffff800, 0x8001, 0x9, 0x7}, {0x7, 0x400, 0x9}, {0x4f, 0x8, 0x4, 0x10}, {0x0, 0x98000000, 0x3, 0x9}, {0xfffffffa, 0xcf1, 0x0, 0x8}, {0xb9e1, 0x2, 0xfffffffc, 0x8383}, {0x8, 0x0, 0x1, 0x5}, {0x4, 0x2, 0xfffff001, 0x1}, {0xfff, 0x7fffffff, 0x71, 0x3}, {0x9, 0xc4a7, 0x8001, 0x6}, {0x6113, 0x77, 0x3, 0x9}, {0x8001, 0x3, 0x5, 0x400}, {0x3, 0x8, 0x5, 0x6}, {0x4, 0x53, 0x6, 0x8}, {0x0, 0x30000, 0xed, 0x5}, {0x5, 0xffffffd8, 0x1, 0x2}, {0x5, 0x1, 0x4, 0x1b7}, {0x2, 0x10000, 0x1, 0x7}, {0x2, 0xd, 0x7, 0x10}, {0xa, 0x94a3, 0x5, 0x3}, {0x7ff, 0x231, 0x5}, {0x7, 0x0, 0x0, 0x9c3}, {0x3, 0x7ee80000, 0x7fffffff}, {0x8, 0xdc5, 0x2, 0x8}, {0xffffa7c6, 0xfa, 0xb, 0x9}, {0xf, 0x9, 0xb, 0x8}, {0x3, 0x874, 0x4, 0x8000}, {0x5, 0x5, 0x2, 0x7}, {0x5, 0x8, 0x1, 0x5}]}}, @TCA_U32_POLICE={0x468, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x5, 0x9, 0xcb6, 0x5fd9, {0x0, 0x2, 0xffff, 0x4, 0x3, 0x800}, {0x6b, 0x2, 0x2, 0x7ff, 0x101, 0x9}, 0x32, 0x80000001, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6a7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x9, 0xe85c, 0xfff, 0x9, 0x5, 0x4, 0x7f, 0x8, 0x5, 0x1599, 0x9, 0xcd, 0x7, 0x7, 0x160, 0x80000000, 0xc699, 0x3, 0x3, 0x6, 0x5, 0x9c, 0x0, 0x800, 0x9, 0x4, 0x0, 0x5, 0x9, 0x6, 0x2, 0x9, 0x9, 0x4, 0x6, 0x5, 0x4, 0x4, 0x200, 0x0, 0xffffffff, 0x9, 0xff, 0x2, 0x1, 0x10, 0xfffffffc, 0x6, 0x9, 0x80, 0x2, 0x7, 0x4, 0x5, 0x6, 0x8, 0x80000000, 0x3, 0x6, 0x9, 0x0, 0x2, 0x7864, 0x9, 0x200, 0x4, 0x63fd, 0xf, 0xfffffffa, 0x7, 0x5, 0xffffff91, 0x5, 0xb6, 0x7f, 0x520, 0x7, 0x3, 0x3, 0x0, 0x5, 0x866, 0xab5f, 0x6, 0x0, 0xfffffff2, 0x2, 0x5, 0xfffffff9, 0x80, 0x4, 0xffffff2b, 0x3, 0xdd, 0x9, 0x6, 0x6b1, 0x9, 0x8baf, 0x0, 0x2, 0x6, 0x0, 0x7, 0x1, 0x4, 0x6, 0x1, 0x480000, 0x0, 0xb5, 0x6, 0x7, 0x6, 0x54db, 0x1000, 0x9, 0x81, 0xfffffffc, 0x1b, 0x5, 0x7, 0x7, 0x0, 0x3, 0x3, 0x1, 0x0, 0xffff, 0x8000000, 0x69da, 0x2, 0x401, 0x1a, 0x5, 0x8, 0x8, 0x3, 0x7, 0x4b87, 0x6, 0x6, 0x0, 0x44a, 0x10001, 0x7, 0x0, 0x2, 0x4, 0x7, 0x9, 0x200, 0xc, 0xffff459b, 0x3, 0x9, 0xf, 0x9, 0x9, 0x8, 0x1000, 0x81, 0xffff, 0x3, 0x1d49, 0x1, 0xaf, 0x2, 0x1, 0x4, 0x6, 0x5, 0xfffffff9, 0x6, 0x10000000, 0x569, 0xfffffffe, 0x2, 0xaffa, 0xfff, 0x8, 0x525, 0x8, 0x1, 0x400, 0x8, 0x4, 0xffff051e, 0x80000001, 0x9, 0x3, 0x7, 0x8, 0xffffffff, 0x5, 0xfffffff9, 0x7, 0x3, 0x200, 0x800, 0x2, 0x6, 0x0, 0x96c, 0x9c, 0x8, 0x4, 0x5, 0x7ff, 0x1ff, 0x7ff, 0x7, 0x8, 0xdc, 0x2, 0x9, 0x7fffffff, 0x9, 0x0, 0x80, 0x2, 0x1ff, 0x200000, 0xfffffff0, 0x159388f6, 0x2, 0xac12, 0x7, 0x9, 0xfffffff9, 0x7, 0xd13, 0x4, 0xa5e1, 0xfffffffb, 0x4, 0x7, 0x8000, 0x5, 0x538, 0xffff, 0x7f, 0x1000, 0x6, 0x6, 0x2, 0x80, 0x84e, 0x9, 0x1, 0x0, 0x10, 0x6, 0xfffffffc, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5e23}]}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x5, 0x2, 0xc489, 0x8, 0x9, 0xfffffffd, 0x70, 0xc, 0x2, 0x4, 0x2, 0x2, 0x3, 0x2, 0x7, 0x900000, 0x2, 0x9, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x70, 0x909, 0x3, 0x6, 0x4, 0x4, 0x9, 0xfffffff9, 0x1, 0xff, 0x5, 0x9, 0xff, 0xff, 0x6, 0x6, 0x2, 0x0, 0x7f, 0x1, 0x100, 0x200, 0x1, 0x7, 0x51, 0xfffffc00, 0x5, 0x8, 0xd02, 0x9, 0x1, 0xfffffffa, 0x8, 0x3, 0xac8, 0x9, 0x1, 0x4, 0xea0, 0x7, 0x6, 0x3c8, 0xe7, 0x3ff, 0x7, 0x2, 0x7, 0x1, 0xa17, 0x4, 0x7, 0xa, 0x7, 0x6, 0x81, 0x9f6, 0x80000000, 0x8, 0x8, 0xfffffffa, 0x4, 0x400, 0x6, 0x12000, 0x4, 0x5, 0x10001, 0x3, 0x2, 0x1, 0xe, 0x383, 0x4, 0x6, 0x3, 0x8, 0x4, 0x0, 0x4, 0x10000, 0x0, 0x101, 0x101, 0x4, 0x9, 0xf, 0xecd16b6, 0xfff, 0x4, 0x800, 0x586c, 0xffffff81, 0x80000000, 0x3, 0x63, 0x3, 0x4bbc, 0x7f, 0x1, 0x0, 0x0, 0x22b, 0x0, 0x1, 0x7, 0xed1, 0x1, 0x6c81, 0x0, 0xffff, 0x3, 0xeec, 0x5, 0x6, 0x3, 0x6, 0x10, 0x100, 0x3, 0x3, 0x2, 0x3284, 0x9, 0x8, 0x2, 0x5, 0xa, 0x678, 0x5, 0x382b, 0x52, 0x4, 0x6, 0x6bb, 0x9, 0xb, 0x0, 0x0, 0x0, 0x1ff, 0x8, 0x5, 0xa00, 0x3, 0x2, 0x4, 0x800, 0x2, 0x0, 0x5d62a6c6, 0x1, 0x95, 0x2, 0x80, 0x2, 0x5, 0xf188, 0xa, 0x1, 0x3ff, 0x7f, 0x5, 0x0, 0x7fffffff, 0x6, 0x80, 0x10000, 0x6, 0xe, 0x9, 0x0, 0x40000000, 0x9, 0x80000001, 0x0, 0x10, 0xa3d2, 0xbd, 0x2, 0x4, 0xfffffff8, 0x200, 0x7, 0x0, 0xfffffffe, 0x101, 0x8, 0x3, 0x4, 0x8, 0x200, 0xb98c, 0x5, 0x3, 0x3, 0xffffff25, 0x401, 0x90b2, 0x8, 0x5, 0x8000, 0x7, 0x1, 0x7ff, 0x5, 0xbf, 0x100, 0x5ff1, 0x8, 0x200, 0x9, 0x6, 0x3, 0x7, 0x0, 0xf, 0x5, 0x8, 0x4, 0x6d, 0xb80, 0x8, 0x7, 0x9, 0x9, 0x9, 0x4, 0x4, 0xf, 0x2, 0xa8c]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x6, 0xffff, 0x8, 0x8, 0x101, 0x7, 0x6a, 0xfffffffc, 0xc2e, 0xc2, 0x2, 0x171b, 0x49, 0x4, 0x6, 0xcc7c, 0x1, 0x9, 0x0, 0xec18f3, 0x1, 0x7, 0x0, 0x4, 0x8, 0xffff, 0x7, 0x4, 0x4, 0x2, 0x3, 0x1ff, 0x2, 0x2337, 0x4, 0x3, 0x7, 0x93, 0x6, 0xc, 0x8, 0x6, 0x9, 0x26be00, 0x0, 0x8, 0x61, 0x40, 0x9, 0x8, 0xc, 0xd, 0x1, 0x6, 0x5, 0xfff, 0x6, 0x7, 0xc13, 0x40, 0x9, 0x2878, 0x4, 0x4, 0x4, 0x0, 0x8, 0xb3, 0x80000001, 0x2, 0x8001, 0x24da, 0x2, 0x80000001, 0x8001, 0xffff4225, 0xa, 0x9, 0xfff, 0xfffffff8, 0x0, 0x7, 0x0, 0x32b, 0x10001, 0x9, 0xfffeffff, 0x1000, 0x3, 0x6, 0x3, 0x7, 0x2, 0x8, 0x6bc3, 0x7, 0x0, 0x81, 0x8, 0x7fff, 0x1, 0x2, 0x7, 0x8, 0xfffff846, 0xa, 0xc, 0x6, 0xb63e, 0x7fffffff, 0x1, 0x7256d199, 0x8, 0x6, 0x400000, 0x5, 0xced, 0xc00000, 0x8eb1, 0x1, 0x7, 0x4, 0x1, 0x69d8, 0x7, 0x8, 0xffff, 0x2, 0x10, 0x9cad, 0x80000001, 0x3, 0xfffffffd, 0x8, 0x9, 0x101, 0x81, 0x3, 0x2, 0x4, 0x8, 0x2, 0xd, 0x4, 0x1, 0x0, 0x101, 0x6, 0x0, 0x8, 0x7, 0x3, 0x8, 0x1, 0x6, 0xb, 0x2, 0x6, 0xfff, 0x7, 0x8000, 0x100, 0x1, 0x4, 0x4, 0x5, 0x4, 0x0, 0x0, 0xc, 0x8, 0x2, 0xffff, 0x4, 0x7, 0x9, 0x5, 0x1, 0x8, 0x4, 0x7, 0x6, 0x800, 0x1, 0xfffffff3, 0x3, 0x4, 0x5, 0xf58, 0x25a, 0x7, 0x6, 0xfffffffa, 0x1, 0x3, 0x3, 0x3, 0x8001, 0x80000001, 0x9, 0x3, 0x1, 0x26f, 0x4, 0x7, 0x1, 0x6, 0xa, 0xffffff0f, 0xffffff21, 0x686, 0x2, 0x4a7, 0x4, 0xfffffffd, 0x6, 0x1, 0x1, 0x4, 0x5, 0x99a, 0x6, 0x80000001, 0x5, 0x0, 0xfffffffc, 0x2, 0x7, 0x3, 0x0, 0x7b1, 0x9, 0x55, 0x7, 0x5, 0x5, 0x10, 0xe, 0x7f, 0x0, 0x3, 0x9, 0xffffff80, 0x7f, 0x401, 0x5, 0xe, 0x5, 0x6, 0x4, 0x4, 0x6, 0xb, 0xfffff227]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbb91, 0xffffffffffffffff, 0x8, 0x3, 0x4, {0x6, 0x1, 0x1, 0x7, 0x80, 0x4}, {0xb, 0x1, 0x0, 0x7, 0x7fff, 0x9}, 0x5, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}]}, 0x1804}}, 0x804)

1.540805888s ago: executing program 2 (id=7685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

1.52903179s ago: executing program 0 (id=7686):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x3f}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0)

1.461831621s ago: executing program 2 (id=7687):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0x0, 0xae02], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)

1.403613096s ago: executing program 4 (id=7688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0)

1.393579494s ago: executing program 2 (id=7689):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1003})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002b80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000100)="ac6918f634e56ea182d8ab746b89d8618dd29d185f65d0219a088b304ad018b90a59457cb9102306a915bf72441bde6da07bf3dd32620b816622b6f213d36acae5151315bb4f580ae2e0297ac904e9a2f611ef6818e421782e459e3583ca5ab5134ded99a8dbcd08782b4a9112f8439e6a5ebb257a0d53dfc6c71be4d4f432985d081446e006f37558a9d805a774beda4e9d", 0x92}, {&(0x7f00000001c0)="85ee871c786b80ed89efcb812da46fec964e04517a6e99ece9b93e8446b218e9cb712e7a7251472f75e230f93efba328a7aabc3c78b12ad5b1486c1158c7b7ce544ba17d8e1d0e4f776930ad77e032b510ccc87da24c6d77d87596e4df679a892ff09ae51ef769734a05d3610d5f0cf5adb764182f7ea049474a29372c", 0x7d}, {&(0x7f0000000240)="4a0907b2c3385d1e76f866c9c416bc1da264d7f217a1a7b2aa60ae8d9a0650ee0f13d3d3a1695a4ca355945d2f59252411816c748508fda7d6a1d82cc7f69b1ffb50c86b17261bdf6e400c430b21176698af86c4bccbe7cff1cd30637a08917074d4e1e2fa3f2786e1f77cfef8002886ffec00e1a37fa81e7f6ce0d760fe33c6235c5cfb1da6f2cbefe0266842dd4da58841c87d76efa85f84c2440ec65fef9892853cf4e0548eb76219f975a5ec39b9a1a6e3ad392a4ff8c7d7f3e0eb7a51d5ad3e21e63c7242ee6a5276610a620f86c4f3c11a608a03", 0xd7}, {&(0x7f0000000340)="290f9709a353a94e64e38486f381e01478f341654b911df5b60a3d3aa2eeb4deeb4370335d6f67727278103001426dc05810523ca395a037545c60971778870d63d6c552875c6456b0bd64359359fb915a31df2cf74c799da4ccbd7a94856ba933b38044b4b4222ded62c0c7b606bc684d4144bd2b808d9cd3a0178b91a5b8d0cddee023807c36b9498e4fed16b8e8abd88aa9f6c1a2937a7df6a16c8342654f", 0xa0}, {&(0x7f0000000400)="d5338a918153229796937c894951f6eb75ba831e2e3e3c249870f6b592d63758abf532c6016f0e1bab7272b939d691fc6008cb669bfd683e726786fb01835730cb66470c806cabc81eff432b6034fcf4315b57c92297cbbf421ab6ac44a113a236e094744b103986e0788d78872256b407f639a1ae9fdf511d73dd3b1f98bea55a4f17024b6f285b856a18d0e5d72a3f145c051924aeea2a3b05b38bdad2b1d70a0af7e042b4e3796fe68fe1b7badab6f70797282cd3520ad2ac6cce92753a9979b6273d1382c2c426eedf8b3e0b40128d3a626b87461de16111fe50e69f7aae3895758a954f97d974aa079d1f9991f59d40", 0xf2}, {&(0x7f0000000500)="ac612ff79fc11897387290f9e4d1", 0xe}, {&(0x7f0000000700)="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", 0x1000}], 0x7, &(0x7f0000001780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x2, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x80}}, {{&(0x7f0000001800)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001840)="08498a6e746c912955bdb43b41cf68cea70b2b6b8debadd1b4832a1fb942f740d94da2b4ca55cc932f58301acd9097b2689632be13e8e100813e87cd00afd5e3eb39e86ebafeb1f920c4f1da6879d9", 0x4f}, {&(0x7f00000018c0)="e205917117c1788adcf76224835a0523759e4eb22bcb5ef6a701e158be7027a09d2a34b97e87113e323a4a39400d9bac1a60fec329c3b3e49b676e6a55aa63a3ab9336065a3f56c9e69057d0661992698c87737fa09d1df7a0d7926f6a8c3a84167b36d4aa14f5fa9db0b9d8e669b9522ea770579447e9adc802964e6ca0e22bc4", 0x81}], 0x2, &(0x7f00000019c0)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x3a, 0x8, '\x00', [@ra={0x5, 0x2, 0xe}, @calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x100}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x200, [0x6, 0x4]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x81}, @pad1]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x3a, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x21}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @jumbo, @pad1, @generic={0x89, 0x2c, "62a9d89554e17c9d6c809f5671df33595c6e86a984619e2439026d6ac76c16cc8453ecd3c4d8be952e8e0177"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x7403, [0x0, 0x4ce9ef18, 0xa, 0x3c5, 0x0]}}]}}}, @rthdrdstopts={{0x1088, 0x29, 0x37, {0x3c, 0x20d, '\x00', [@generic={0xa8, 0x1000, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x52, [0x1, 0x3, 0xff, 0x1, 0x4]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0xc, 0x8, [0xa, 0x2, 0x7fffffff]}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x7}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0xe}}], 0x11a8}}], 0x2, 0x4885)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)

1.320588828s ago: executing program 4 (id=7690):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff})
tee(r3, r4, 0x1, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r7, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000380)={0x5, 0x8, 0x4, 0x7, 0x4, 0x0, [{0x4, 0xfe, 0x7, '\x00', 0x4000}, {0x9, 0x2, 0x2}, {0x8, 0x9fd, 0x4, '\x00', 0x3008}, {0x3, 0xe8, 0x541, '\x00', 0x6c01}]})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
socketpair(0x3, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000040)={r0})

1.293004951s ago: executing program 1 (id=7691):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fcb8000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

1.292237177s ago: executing program 3 (id=7692):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa60}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x50}}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0x58}}, 0x40040)
writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000580)="e547dba2cf2b8eef7135214780fc9eba6661cc59700b772b44b6e551bfcbb0c6d4d0d1e0", 0x24}, {&(0x7f00000005c0)="5e74f3cf15b47ccf7e8cdcc3cbe2deb4dea095d75ae3823416513263ebf98ed81c8dff848f248fef64bfe63a2fa5af7c1a5e35f9aa333f88c194c6085ca8cf994f68e599b645be903f802e4a50f5728a36ff15966fc13f5e9208d91a3b884881089fbc79059028b856525dc1e37733f91948d71d86dcce0c1c785fecc852c489a7aaf7e1e4b70ebe1c7f8c18a5ac7b2ace3ecf40e41898c3cc8d6c", 0x9b}, {&(0x7f0000000680)="5d70690e87c9d327e75d3274862ba17017f338f188b4401784d50b8388105d7535a6db7c8747109e60c93d61cffb28d9a9b2d2135274c5658a36dc0e7d60568396db2db53e2fc0af6dfc98087a4243720bf6f49b3752aa397528", 0x5a}, {&(0x7f0000000700)="37c52fcb023f32c82e92621f5f47c7ac421c4caeebe0c5cee15f50f66b", 0x1d}, {&(0x7f0000000740)="08ccc5f81e6c3a27886d13e1200cf7d062fc3e4b143170f9bfefcaf321e0158725b8e5a3eb866434a2fc4f85e5ce113e03892699eb42f3b421779b9920d59e5d885d15e482aa6c27d8d1837f4515e60962e4e80b6be83322f34645410b4bb302e0971eda931db53a83b2fc2d90be9163", 0x70}, {&(0x7f00000007c0)="457a69006ab271c47dbf0dae4f26bdf75570a0b791d429735fe97c89f39ec5634749e92d6d6b48077cc219c60d07e47f809c6149aea8676b78565896215efa5bad69bfceafeefa8701062dc48e04b74a314def8725f70acd5bd2045518ca3b3b50bf6bf3de6434b18143104a4ffe6484a0f6bfc9064545b04894f0b1c6c2fe77344b9c385223c587e6b2d601084eae5c89637d76e9b9d769b4b72d143e84feb1ed1a1a0a4102d1f20f060654d3733127cd3a856692403feb68ad8841e2e195c45dcf303c4a8561c7004bb99ee31eda22c2f76035c3c9d5f46b18acb162286a3bcac3223f4482bb54b896974849f55b72c128f8e8b8b218", 0xf7}, {&(0x7f00000008c0)="ca32ed3186469af4f253afe5b6f284ef258499bfd21a9095e24e9a21f82f54bc3f3bf8a01c2f828c70b54e019668d2f1f156a32f260de44fe8a6a773fb70c0d2147687f07f18789ae539673485367794ceb883eab0bfe55413b6b094a608451d85badd33b03374008cbec70a10a290285f709e122499acbacef3bcb18c1c0eb4b79675f16f7b78d9e7477d475dc986541778c12438331d10c7247f63c226502313a5fd302858", 0xa6}, {&(0x7f0000000980)="cfeaae1f629f90c6ab749508948d1acf593902b23fefa80e809617e53d1ec1d5bcb83c7ab513f2cea679a71061c79c01f86bdce88127471366e1ff6a890da2bc2e162319cc601a7d1cba2fee635936fd4ac8b1969d75c48e67aa4533a687f298f1a7a77c0bf714bc5257a5172932215926f5ac353bd8", 0x76}], 0x8)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'gre0\x00', <r7=>0x0, 0x700, 0xe0180dde6935fc55, 0xce, 0x1, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty, {[@timestamp={0x44, 0xc, 0x18, 0x0, 0x7, [0x5b, 0x81b]}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0xd, [{@multicast2, 0x7fffffff}]}, @generic={0x88, 0x2}, @lsrr={0x83, 0x1b, 0xde, [@remote, @multicast2, @broadcast, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x9c, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x4040044)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000d80)={'erspan0\x00', <r10=>r7, 0x700, 0x1, 0x8, 0x401, {{0x21, 0x4, 0x2, 0x3, 0x84, 0x66, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@noop, @noop, @generic={0x82, 0x4, 'gP'}, @timestamp_prespec={0x44, 0x14, 0x11, 0x3, 0x0, [{@private=0xa010101, 0x7}, {@local, 0x5}]}, @timestamp_addr={0x44, 0x2c, 0xa4, 0x1, 0x8, [{@multicast2, 0xffffffff}, {@private=0xa010101, 0x7414}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x2}, {@remote, 0xfffffffb}]}, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x1, [{@broadcast, 0xfff}, {@multicast2, 0x7}, {@multicast2, 0xf8e2}, {@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000050}, 0x41010)
socket$packet(0x11, 0x3, 0x300)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x2000c015)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004005}, 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000001280)={&(0x7f00000011c0), 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@deltclass={0x2c, 0x29, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0x6}, {0xf, 0x6}, {0xffe0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc000)
sendmsg$rds(r0, &(0x7f00000024c0)={&(0x7f00000012c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f0000001300)=""/17, 0x11}, {&(0x7f0000001340)=""/230, 0xe6}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/15, 0xf}], 0x4, 0x0, 0x0, 0x8000}, 0x4801)
sendmsg$nl_route(r0, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)=@delnexthop={0x58, 0x69, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048180}, 0x40)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002680), r0)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x2c, r13, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448cc}, 0x45)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000002780)={0x3, 'pim6reg1\x00', {}, 0x5513})

1.120345704s ago: executing program 4 (id=7693):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0)
getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
close(0x3)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r3], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2}, 0x6)
write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000006c"], 0xb8}}, 0x2c000010)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32=0x0, @ANYBLOB="5c0000001000030500"/20, @ANYBLOB="c986"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x0)

1.120234821s ago: executing program 1 (id=7694):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

1.03449761s ago: executing program 2 (id=7695):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f}, 0x94)

1.004751802s ago: executing program 0 (id=7696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd25000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

919.578745ms ago: executing program 1 (id=7697):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
r2 = socket(0x22, 0x2, 0x4)
recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000003)
sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)
recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)=@deltfilter={0x1348, 0x2d, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc, 0xf}, {0xfff1, 0xb}, {0xffe0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x15}}, @filter_kind_options=@f_fw={{0x7}, {0x1304, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x12f0, 0x4, [@m_vlan={0xe4, 0xb, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x0, 0x401, 0xc}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xd6c5, 0x7, 0x5, 0xfffff65b}, 0x3}}]}, {0x77, 0x6, "998fafe09edd7e32bd89f2749edc4dcdcf53bce523e77353ecd5be508133e634513dca622821f1682423e07d44bd75d48b7a94e7437e3a6538f4b70a1225a969388221b20cab9dc4fa701ce33b973838da9ba49fd038980fb04ab83ad59fc266a53f8bb2b5048f60c9a6419f8e6c56ae1096e6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x90, 0x10, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "e01b0cc231c51e0c58ebecd704646f7d"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e93d438ab0daf55a30abbd945117fb8"}]}, {0x3f, 0x6, "2b2d9d9d4b8811dd57fa927520c2d61c8cb748b304ec4e8e2f6e4db3501545bceea7e8d4737fc9e904b140238b55a22e39082d199c55760af0f4dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x1064, 0x1c, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x5, 0x10000000, 0x9, 0x80}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x114, 0x6, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0x983f, 0x4, 0x8, 0x2}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xecc3c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffc, 0x7ce9, 0x0, 0x0, 0x7}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x721, 0x8, 0x0, 0x3}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9d}]}, {0x79, 0x6, "e09b473bcd5b607de76361ecbaefd8b042703a8029ea5da39b19a263363ee80c372eb40e28d13eef2edb3a76f13da6b3ae47e0bcb5cdfb3b0f68f667c62b901c2fdf61508f4a3ad0f0f2acc8715afb6866f90b7ea078531be5eba9fbbf700a2b5bf605f373e8c6f4d48071d968502df9573058404c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xb}}]}}]}, 0x1348}}, 0x8000)
syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200283afffe800000e702000000180000000000bbff02000000000000003ac8931c87ac313c00907800000000fe8008000000000000000000000000bbfc0100000000000000000000000000fd"], 0x0)

919.180175ms ago: executing program 4 (id=7698):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000b21c22c55492b01ba2334dbd94ac74384e905c7bf2e8f8ac83faa55d0f831179f65ec7e0066cfd7bd22511696f04ac6c59d3fe9dd4ed7c5ccd8923e693aae5bb8da148d35c0842fef5660bb493d1a2a281af0ae5c90b05cc4480dbc3ca891f5048f7a7509dfe48df672394cf3a630e9aac3b7e", @ANYRES16=r5, @ANYBLOB="130f00000000000000000700000010000280040002000000000004000400"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) (async)
socket$kcm(0x2, 0x1, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000b21c22c55492b01ba2334dbd94ac74384e905c7bf2e8f8ac83faa55d0f831179f65ec7e0066cfd7bd22511696f04ac6c59d3fe9dd4ed7c5ccd8923e693aae5bb8da148d35c0842fef5660bb493d1a2a281af0ae5c90b05cc4480dbc3ca891f5048f7a7509dfe48df672394cf3a630e9aac3b7e", @ANYRES16=r5, @ANYBLOB="130f00000000000000000700000010000280040002000000000004000400"], 0x24}}, 0x0) (async)

385.629771ms ago: executing program 3 (id=7699):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x468, 0x398, 0x2c8, 0x1d0, 0x2c8, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0x0, 0xc802], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@empty, 0xe, 0x1b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)

327.388714ms ago: executing program 4 (id=7700):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0)

243.980462ms ago: executing program 0 (id=7701):
unshare(0x22020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000007060500000000000000b0aa010000026f1725ab9ac42bad4b6dc173761ed4b6730249415723b617e8d046990537bbbcdf92c263daad6c3c9067837ca3c026bddeca7b4bffff279347a5c4315fcbb1c5a3fc0919b76ccaafb9511372d75c650514e07845b004d994773a9ac08d1bec"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x40010000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x4, [0x25a, 0x10, 0x0, 0x6]}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000000000600004"], 0x14}}, 0x0)
unshare(0x8000400)
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0)

243.750331ms ago: executing program 2 (id=7702):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0xfa4, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}})

138.570329ms ago: executing program 3 (id=7703):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x300, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

108.377501ms ago: executing program 4 (id=7704):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000840000000a00500050000000000050001003900000005000400000000000900020073797a31000000000d000300686173683a6d616300000000"], 0x54}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xf3, @null, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})

0s ago: executing program 0 (id=7705):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a31000000000800044000000000090001"], 0x64}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x1e, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4)
connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x7ffffffe, 0x1}}}, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x3c4, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x334, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf1ec}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "26b8b216ea59c6e18e2ca1bc5c652472ff092ebe027f5c4912cadae43876cc9c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af153baa0b909b744a3709c626dc2facb35ac7a9903cdbec5001895a49236a8e"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @empty, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}]}, {0x23c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5b73a051e1d85d994215ff7f7fd97e7e9e613faba57481d84fda5d0693654bab"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "160809406bd6ee54d9a631bf2173ce83c9e8c707f82b5d904170c73119ada139"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x24, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc000000000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0014"], 0x1a4}}, 0x0)
recvfrom$inet(r1, &(0x7f0000001840)=""/4099, 0x1003, 0x2102, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfc, {0x1, 0x7c}, [@typed={0x4, 0x2b}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c010}, 0x0)

kernel console output (not intermixed with test programs):

gretap1): failed to get link speed/duplex
[  632.900191][T24626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.911149][T24626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.942715][T24626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  633.138202][T24775] bridge0: port 3(ipvlan0) entered blocking state
[  633.149720][T24775] bridge0: port 3(ipvlan0) entered disabled state
[  633.160229][T24775] ipvlan0: entered allmulticast mode
[  633.165865][T24775] bridge0: entered allmulticast mode
[  633.173326][T24775] ipvlan0: left allmulticast mode
[  633.178377][T24775] bridge0: left allmulticast mode
[  633.402626][ T5833] Bluetooth: hci0: command 0x040f tx timeout
[  633.636874][ T1312] hsr_slave_0: left promiscuous mode
[  633.645651][ T1312] hsr_slave_1: left promiscuous mode
[  633.651952][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  633.659999][ T1312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.675081][ T1312] vlan0: left allmulticast mode
[  633.680108][ T1312] veth0_vlan: left allmulticast mode
[  633.686711][ T1312] vlan0: left promiscuous mode
[  633.691960][ T1312] hsr0: left allmulticast mode
[  634.356302][ T1312] pim6reg (unregistering): left allmulticast mode
[  634.652390][T13612] net_ratelimit: 2 callbacks suppressed
[  634.652415][T13612] bond8: (slave gretap1): failed to get link speed/duplex
[  634.774080][T18780] bond8: (slave gretap1): failed to get link speed/duplex
[  634.882877][T18780] bond8: (slave gretap1): failed to get link speed/duplex
[  634.923947][T24756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  634.949985][T24626] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  635.019093][T24626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  635.051559][T24626] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  635.119278][T24626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  635.141496][T24626] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  635.152246][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms
[  635.160391][    C1] lec:lec_tx_timeout: lec0
[  635.165936][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  635.180768][   T63] nci: nci_rsp_packet: unknown rsp opcode 0x629
[  635.214624][T24626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  635.243651][T24626] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  635.258234][ T1312] IPVS: stop unused estimator thread 0...
[  635.276159][T24626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  635.300157][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6286'.
[  635.310231][   T63] bond8: (slave gretap1): failed to get link speed/duplex
[  635.409032][T24804] batman_adv: batadv0: Adding interface: dummy0
[  635.415901][T24804] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  635.443028][T24804] batman_adv: batadv0: Interface activated: dummy0
[  635.462601][ T8788] bond8: (slave gretap1): failed to get link speed/duplex
[  635.472421][ T5833] Bluetooth: hci0: command 0x040f tx timeout
[  635.557794][T24807] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  635.567236][T24807] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6288'.
[  635.576657][ T1312] bond8: (slave gretap1): failed to get link speed/duplex
[  635.682330][T18780] bond8: (slave gretap1): failed to get link speed/duplex
[  635.702963][T24807] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6288'.
[  635.804841][ T1312] bond8: (slave gretap1): failed to get link speed/duplex
[  635.914372][   T63] bond8: (slave gretap1): failed to get link speed/duplex
[  636.024668][ T8788] bond8: (slave gretap1): failed to get link speed/duplex
[  637.552422][ T5833] Bluetooth: hci0: command 0x040f tx timeout
[  638.070001][T24782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.235261][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6289'.
[  638.310357][T24823] bond12: entered promiscuous mode
[  638.317290][T24823] 8021q: adding VLAN 0 to HW filter on device bond12
[  638.325224][T24824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6289'.
[  638.326164][T24832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6289'.
[  638.465053][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6289'.
[  638.498454][T24823] bond12: (slave macvlan3): Opening slave failed
[  638.508930][T24836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6293'.
[  638.775854][T24626] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.860889][T24626] 8021q: adding VLAN 0 to HW filter on device team0
[  638.890172][T18780] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.897475][T18780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.947340][T16622] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.954691][T16622] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.236310][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6300'.
[  639.549579][T24874] netlink: 'syz.2.6304': attribute type 16 has an invalid length.
[  639.587521][T24874] netlink: 'syz.2.6304': attribute type 17 has an invalid length.
[  639.792715][T24874] tipc: Resetting bearer <ib:syz_tun>
[  639.812743][T24874] tipc: Resetting bearer <ib:syz_tun>
[  639.835722][T24874] net_ratelimit: 27 callbacks suppressed
[  639.835734][T24874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  639.859376][T24882] netlink: 'syz.4.6306': attribute type 1 has an invalid length.
[  639.879639][T24884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6307'.
[  639.941142][T24886] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  639.971538][T24886] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  639.985243][T24886] bond13: (slave ip6gre1): making interface the new active one
[  639.989602][T24887] netlink: 'syz.0.6307': attribute type 3 has an invalid length.
[  639.995436][T24886] bond13: (slave ip6gre1): Enslaving as an active interface with an up link
[  640.014573][T13612] bond8: (slave gretap1): failed to get link speed/duplex
[  640.095332][T24626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.161617][T13612] bond8: (slave gretap1): failed to get link speed/duplex
[  640.192349][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  640.200466][    C1] lec:lec_tx_timeout: lec0
[  640.291279][T24626] veth0_vlan: entered promiscuous mode
[  640.339733][T24626] veth1_vlan: entered promiscuous mode
[  640.462728][T24903] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  640.464126][   T63] bond8: (slave gretap1): failed to get link speed/duplex
[  640.505615][T24626] veth0_macvtap: entered promiscuous mode
[  640.536150][T24626] veth1_macvtap: entered promiscuous mode
[  640.625805][T24626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.678534][T24626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.718921][T13612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.753366][T13612] bond8: (slave gretap1): failed to get link speed/duplex
[  640.777702][   T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.823420][   T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.878287][   T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.962686][ T8788] bond8: (slave gretap1): failed to get link speed/duplex
[  641.063540][T24911] xt_hashlimit: overflow, try lower: 3/0
[  641.112303][ T8788] bond8: (slave gretap1): failed to get link speed/duplex
[  641.205002][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.216396][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.692700][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.704161][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.717647][ T1312] bond8: (slave gretap1): failed to get link speed/duplex
[  641.834096][T16622] bond8: (slave gretap1): failed to get link speed/duplex
[  642.526294][T24500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  642.542785][T24500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  642.553060][T24500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  642.573455][T24500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  642.593781][T24500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  642.603851][T24939] lo: Caught tx_queue_len zero misconfig
[  642.904843][ T5827] tipc: Resetting bearer <ib:syz_tun>
[  642.965157][ T5827] tipc: Disabling bearer <ib:syz_tun>
[  643.000317][T24943] IPVS: Error connecting to the multicast addr
[  643.023770][T24945] __nla_validate_parse: 1 callbacks suppressed
[  643.023792][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6326'.
[  643.115639][T24931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6322'.
[  643.220769][   T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.301381][T24931] lec:lec_start_xmit: lec0:No lecd attached
[  643.451178][   T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.501323][T24960] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.6330'.
[  643.599836][   T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.774209][   T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  643.894314][T24973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6335'.
[  643.980976][T24973] bond0: entered promiscuous mode
[  643.991940][T24973] bond_slave_0: entered promiscuous mode
[  643.999080][T24973] bond_slave_1: entered promiscuous mode
[  644.007563][T24973] gretap0: entered promiscuous mode
[  644.014979][T24973] hsr1: entered promiscuous mode
[  644.218834][T24985] netlink: 'syz.3.6340': attribute type 16 has an invalid length.
[  644.229393][T24985] netlink: 'syz.3.6340': attribute type 17 has an invalid length.
[  644.673411][ T5833] Bluetooth: hci2: command tx timeout
[  644.723316][T24985] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.731118][T24985] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.887955][T25008] FAULT_INJECTION: forcing a failure.
[  644.887955][T25008] name failslab, interval 1, probability 0, space 0, times 0
[  644.900859][T25008] CPU: 1 UID: 0 PID: 25008 Comm: syz.0.6346 Not tainted syzkaller #0 PREEMPT(full) 
[  644.900891][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.900905][T25008] Call Trace:
[  644.900916][T25008]  <TASK>
[  644.900927][T25008]  dump_stack_lvl+0xe8/0x150
[  644.900966][T25008]  should_fail_ex+0x412/0x560
[  644.901008][T25008]  should_failslab+0xa8/0x100
[  644.901040][T25008]  __kmalloc_noprof+0xe8/0x760
[  644.901066][T25008]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  644.901097][T25008]  tomoyo_realpath_from_path+0xe3/0x5d0
[  644.901133][T25008]  ? tomoyo_path_number_perm+0x219/0x630
[  644.901165][T25008]  tomoyo_path_number_perm+0x246/0x630
[  644.901199][T25008]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  644.901234][T25008]  ? __lock_acquire+0x6b5/0x2cf0
[  644.901275][T25008]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  644.901339][T25008]  ? __fget_files+0x2a/0x420
[  644.901363][T25008]  ? __fget_files+0x2a/0x420
[  644.901381][T25008]  ? __fget_files+0x3a0/0x420
[  644.901400][T25008]  ? __fget_files+0x2a/0x420
[  644.901424][T25008]  security_file_ioctl+0xc3/0x2a0
[  644.901457][T25008]  __se_sys_ioctl+0x47/0x170
[  644.901486][T25008]  do_syscall_64+0x14d/0xf80
[  644.901516][T25008]  ? trace_irq_disable+0x3b/0x150
[  644.901535][T25008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.901557][T25008]  ? clear_bhb_loop+0x40/0x90
[  644.901584][T25008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.901607][T25008] RIP: 0033:0x7f032259c819
[  644.901628][T25008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.901647][T25008] RSP: 002b:00007f032351c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  644.901671][T25008] RAX: ffffffffffffffda RBX: 00007f0322815fa0 RCX: 00007f032259c819
[  644.901687][T25008] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004
[  644.901702][T25008] RBP: 00007f032351c090 R08: 0000000000000000 R09: 0000000000000000
[  644.901716][T25008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.901730][T25008] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  644.901765][T25008]  </TASK>
[  644.901776][T25008] ERROR: Out of memory at tomoyo_realpath_from_path.
[  645.334952][T24985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  645.395773][T24985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  645.609001][T24985] veth3: left allmulticast mode
[  645.623129][T24985] bond2: left promiscuous mode
[  645.628223][T24985] bridge2: left promiscuous mode
[  645.676518][T24985] veth13: left allmulticast mode
[  645.688978][T24985] mac80211_hwsim hwsim7 +
: left promiscuous mode
[  645.696445][T24985] mac80211_hwsim hwsim7 +
: left allmulticast mode
[  645.721739][T24985] team0: left promiscuous mode
[  645.727082][T24985] team0: left allmulticast mode
[  645.778866][   T63] bridge_slave_1: left allmulticast mode
[  645.788745][   T63] bridge_slave_1: left promiscuous mode
[  645.799546][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.810586][   T63] bridge_slave_0: left allmulticast mode
[  645.817885][   T63] bridge_slave_0: left promiscuous mode
[  645.825439][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.839055][   T63] bond1: left allmulticast mode
[  645.844975][   T63] bond1: left promiscuous mode
[  645.850182][   T63] bridge2: port 1(bond1) entered disabled state
[  646.036628][   T63] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  646.049356][   T63] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[  646.159499][   T63] bond5 (unregistering): (slave gretap1): Releasing backup interface
[  646.752533][ T5833] Bluetooth: hci2: command tx timeout
[  646.798859][T24971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  646.915941][T25032] netlink: 'syz.1.6350': attribute type 2 has an invalid length.
[  647.117309][   T63] bond1 (unregistering): Released all slaves
[  647.132029][   T63] bond2 (unregistering): Released all slaves
[  647.146907][   T63] bond3 (unregistering): Released all slaves
[  647.168118][   T63] bond4 (unregistering): Released all slaves
[  647.187739][   T63] bond5 (unregistering): Released all slaves
[  647.206130][   T63] bond6 (unregistering): Released all slaves
[  647.229030][   T63] bond0 (unregistering): Released all slaves
[  647.248637][   T63] bond7 (unregistering): Released all slaves
[  647.268160][   T63] bond8 (unregistering): (slave veth3): Releasing active interface
[  647.281107][   T63] bond8 (unregistering): Released all slaves
[  647.299815][   T63] bond9 (unregistering): Released all slaves
[  647.320865][   T63] bond10 (unregistering): Released all slaves
[  647.335800][   T63] bond11 (unregistering): Released all slaves
[  647.356558][   T63] bond12 (unregistering): Released all slaves
[  647.371252][   T63] bond13 (unregistering): Released all slaves
[  647.386701][   T63] bond14 (unregistering): Released all slaves
[  647.413621][ T1312] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  647.429018][ T1312] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.437787][ T1312] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  647.446781][ T1312] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.477367][T25032] �9: entered promiscuous mode
[  647.530305][T24936] chnl_net:caif_netlink_parms(): no params data found
[  647.581286][ T1312] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  647.632793][ T1312] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.656530][ T1312] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  647.676410][ T1312] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  647.687923][   T63] tipc: Disabling bearer <udp:syz0>
[  647.706601][   T63] tipc: Disabling bearer <ib:caif0>
[  647.726817][   T63] tipc: Left network mode
[  648.017062][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6357'.
[  648.256125][T25080] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6359'.
[  648.283816][T25080] net_ratelimit: 15 callbacks suppressed
[  648.283836][T25080] netlink: ct family unspecified
[  648.312251][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  648.320364][    C1] lec:lec_tx_timeout: lec0
[  648.325168][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  648.497733][T24936] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.505224][T24936] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.512566][T24936] bridge_slave_0: entered allmulticast mode
[  648.520818][T24936] bridge_slave_0: entered promiscuous mode
[  648.532144][T24936] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.539678][T24936] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.550766][T24936] bridge_slave_1: entered allmulticast mode
[  648.559173][T24936] bridge_slave_1: entered promiscuous mode
[  648.622077][T25089] netlink: 'syz.0.6360': attribute type 12 has an invalid length.
[  648.646537][T25089] netlink: 'syz.0.6360': attribute type 29 has an invalid length.
[  648.686191][T25089] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6360'.
[  648.745210][T25089] netlink: 51 bytes leftover after parsing attributes in process `syz.0.6360'.
[  648.814959][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1
[  648.835159][ T5833] Bluetooth: hci2: command tx timeout
[  648.847444][T24936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.886544][T24936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.985579][T24936] team0: Port device team_slave_0 added
[  648.995061][T24936] team0: Port device team_slave_1 added
[  649.056760][T24936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.064434][T24936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.093998][T24936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.108448][T24936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.115785][T24936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.144310][T24936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  649.164893][T25096] netlink: 'syz.1.6362': attribute type 2 has an invalid length.
[  649.173236][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6362'.
[  649.206309][T25096] netlink: 'syz.1.6362': attribute type 25 has an invalid length.
[  649.315421][T24936] hsr_slave_0: entered promiscuous mode
[  649.323035][T24936] hsr_slave_1: entered promiscuous mode
[  649.333050][T25099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  649.526132][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.534698][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.174493][   T63] IPVS: stop unused estimator thread 0...
[  650.912833][ T5833] Bluetooth: hci2: command tx timeout
[  650.949069][T25064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  650.964887][T24936] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  650.997497][T24936] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  651.015878][T24936] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  651.048138][T24936] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  651.078074][T25102] FAULT_INJECTION: forcing a failure.
[  651.078074][T25102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  651.105802][T24936] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  651.121820][T25102] CPU: 0 UID: 0 PID: 25102 Comm: syz.1.6364 Not tainted syzkaller #0 PREEMPT(full) 
[  651.121852][T25102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  651.121867][T25102] Call Trace:
[  651.121876][T25102]  <TASK>
[  651.121886][T25102]  dump_stack_lvl+0xe8/0x150
[  651.121925][T25102]  should_fail_ex+0x412/0x560
[  651.121968][T25102]  _copy_from_user+0x2d/0xb0
[  651.121997][T25102]  ___sys_sendmsg+0x1c6/0x360
[  651.122035][T25102]  ? __pfx____sys_sendmsg+0x10/0x10
[  651.122107][T25102]  ? __fget_files+0x2a/0x420
[  651.122127][T25102]  ? __fget_files+0x3a0/0x420
[  651.122161][T25102]  __x64_sys_sendmsg+0x1bd/0x2a0
[  651.122200][T25102]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  651.122241][T25102]  ? __pfx_ksys_write+0x10/0x10
[  651.122280][T25102]  do_syscall_64+0x14d/0xf80
[  651.122311][T25102]  ? trace_irq_disable+0x3b/0x150
[  651.122331][T25102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.122355][T25102]  ? clear_bhb_loop+0x40/0x90
[  651.122383][T25102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.122406][T25102] RIP: 0033:0x7fe7c2b9c819
[  651.122428][T25102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.122448][T25102] RSP: 002b:00007fe7c39e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  651.122473][T25102] RAX: ffffffffffffffda RBX: 00007fe7c2e15fa0 RCX: 00007fe7c2b9c819
[  651.122490][T25102] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  651.122506][T25102] RBP: 00007fe7c39e6090 R08: 0000000000000000 R09: 0000000000000000
[  651.122520][T25102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  651.122534][T25102] R13: 00007fe7c2e16038 R14: 00007fe7c2e15fa0 R15: 00007ffd8f6ebee8
[  651.122571][T25102]  </TASK>
[  651.392506][T24936] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  651.429562][T25112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6370'.
[  651.439469][T24936] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  651.460386][T24936] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  651.775445][T25139] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6371'.
[  651.846050][T24936] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.854213][T25142] netlink: 'syz.3.6374': attribute type 30 has an invalid length.
[  651.905404][T25143] netlink: 'syz.3.6374': attribute type 30 has an invalid length.
[  651.960103][T24936] 8021q: adding VLAN 0 to HW filter on device team0
[  652.033762][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.040967][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.065729][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.073002][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.458234][T25170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6382'.
[  652.694072][T24936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.896591][T24936] veth0_vlan: entered promiscuous mode
[  652.956404][T24936] veth1_vlan: entered promiscuous mode
[  653.116628][T25172] openvswitch: netlink: Flow actions attr not present in new flow.
[  653.209659][T24936] veth0_macvtap: entered promiscuous mode
[  653.236766][T24936] veth1_macvtap: entered promiscuous mode
[  653.265413][T24936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.311824][T24936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.332598][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  653.340679][    C1] lec:lec_tx_timeout: lec0
[  653.358798][T13615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.389100][T13615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.398589][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  653.449995][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6389'.
[  653.475413][T13615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.488106][T25197] netlink: 'syz.1.6389': attribute type 1 has an invalid length.
[  653.500397][T13615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.588526][T25204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6389'.
[  654.059742][T13615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.079375][T13615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.186202][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.215261][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.449198][T25245] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  654.594466][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  654.732755][T25251] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.6406'.
[  654.773663][T25251] netlink: Unknown conntrack attr (type=2304, max=9)
[  654.917999][T25254] netlink: 'syz.1.6407': attribute type 2 has an invalid length.
[  654.952427][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6407'.
[  654.965766][T25254] netlink: 'syz.1.6407': attribute type 25 has an invalid length.
[  655.122112][T25235] openvswitch: netlink: Flow actions attr not present in new flow.
[  655.179101][T25268] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  655.463145][T25276] netlink: 'syz.1.6411': attribute type 21 has an invalid length.
[  655.621263][T25279] gtp1: entered promiscuous mode
[  655.634071][T25279] gtp1: entered allmulticast mode
[  655.719042][T25287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6413'.
[  655.785799][T25257] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  655.792158][T25257] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  656.160660][T25257] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  656.184535][T25257] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  656.335323][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6418'.
[  656.356083][T25257] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  656.362080][T25257] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  656.491301][T24500] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  656.515510][T24500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  656.525169][T24500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  656.572809][T24500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  656.593435][T24500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  656.646369][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  656.662582][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  656.669967][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  656.679579][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  656.687619][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  656.703500][ T5841] tipc: Disabling bearer <ib:syz_tun>
[  656.775606][T25311] netlink: 'syz.3.6419': attribute type 2 has an invalid length.
[  656.809744][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6419'.
[  656.819287][T25314] netlink: 'syz.3.6419': attribute type 25 has an invalid length.
[  656.894343][ T8788] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.004889][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'.
[  657.037698][ T8788] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.072154][T25329] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.6424'.
[  657.102419][T25329] netlink: ct family unspecified
[  657.208798][ T8788] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.420708][ T8788] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.467287][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6421'.
[  657.489410][T25322] openvswitch: netlink: Flow actions attr not present in new flow.
[  657.873084][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.988255][ T8788] batadv0: left allmulticast mode
[  658.001389][ T8788] batadv0: left promiscuous mode
[  658.062515][ T8788] bridge0: port 1(batadv0) entered disabled state
[  658.605709][ T8788] bond1: left allmulticast mode
[  658.610937][ T8788] bond1: left promiscuous mode
[  658.662147][ T8788] bridge2: port 1(bond1) entered disabled state
[  658.752482][T24500] Bluetooth: hci3: command tx timeout
[  658.803021][ T8788] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface
[  658.811616][ T8788] bond3 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 52:9e:37:03:72:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  658.875111][ T8788] bond13 (unregistering): (slave ip6gre1): Releasing backup interface
[  658.890773][T25380] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  659.018713][ T8788] bond3 (unregistering): (slave gretap1): Releasing backup interface
[  659.055298][T25384] netlink: 'syz.0.6436': attribute type 16 has an invalid length.
[  659.064983][ T8788] bond11 (unregistering): (slave gretap3): Releasing active interface
[  659.073219][T25384] netlink: 'syz.0.6436': attribute type 17 has an invalid length.
[  659.120962][ T8788] bridge0 (unregistering): left allmulticast mode
[  659.152250][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms
[  659.160415][    C1] lec:lec_tx_timeout: lec0
[  659.166143][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  659.447399][ T8788] bond0 (unregistering): Released all slaves
[  659.462044][ T8788] bond1 (unregistering): Released all slaves
[  659.476785][ T8788] bond2 (unregistering): Released all slaves
[  659.491947][ T8788] bond3 (unregistering): Released all slaves
[  659.519921][ T8788] bond4 (unregistering): Released all slaves
[  659.535444][ T8788] bond5 (unregistering): Released all slaves
[  659.550920][ T8788] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  659.561654][ T8788] bond6 (unregistering): (slave bond7): Releasing active interface
[  659.570797][ T8788] bond6 (unregistering): Released all slaves
[  659.591945][ T8788] bond7 (unregistering): Released all slaves
[  659.607304][ T8788] bond8 (unregistering): Released all slaves
[  659.621969][ T8788] bond9 (unregistering): Released all slaves
[  659.647603][ T8788] bond10 (unregistering): Released all slaves
[  659.661979][ T8788] bond11 (unregistering): Released all slaves
[  659.677431][ T8788] bond12 (unregistering): Released all slaves
[  659.694501][ T8788] bond13 (unregistering): Released all slaves
[  659.930748][T25384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  660.045188][ T8788] �9: left promiscuous mode
[  660.171732][ T8788] tipc: Disabling bearer <udp:syz0>
[  660.182712][ T8788] tipc: Disabling bearer <udp:syz2>
[  660.188297][ T8788] tipc: Left network mode
[  660.326649][ T8788] IPVS: stopping master sync thread 9084 ...
[  660.359724][T25266] chnl_net:caif_netlink_parms(): no params data found
[  660.656929][T25402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6441'.
[  660.666188][T25402] openvswitch: netlink: Flow actions attr not present in new flow.
[  660.728342][T25386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  660.832380][T24500] Bluetooth: hci3: command tx timeout
[  661.216848][T25421] netlink: 'syz.1.6444': attribute type 3 has an invalid length.
[  661.237589][T25421] netlink: 'syz.1.6444': attribute type 3 has an invalid length.
[  661.465518][T25266] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.505666][T25266] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.542805][T25266] bridge_slave_0: entered allmulticast mode
[  661.569576][T25266] bridge_slave_0: entered promiscuous mode
[  661.619099][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6451'.
[  661.633405][T25266] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.650294][T25445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6451'.
[  661.671000][T25266] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.701120][T25266] bridge_slave_1: entered allmulticast mode
[  661.710636][T25266] bridge_slave_1: entered promiscuous mode
[  661.958033][T25266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.003337][T25266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.066056][T25466] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  662.176856][T25469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6457'.
[  662.210344][T25469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'.
[  662.249245][T25266] team0: Port device team_slave_0 added
[  662.286652][T25266] team0: Port device team_slave_1 added
[  662.424379][T25266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.431499][T25266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.493757][T25266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.536164][T25266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.546086][T25266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.595485][T25266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.674396][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6455'.
[  662.683764][T25463] openvswitch: netlink: Flow actions attr not present in new flow.
[  662.758662][ T8788] hsr_slave_0: left promiscuous mode
[  662.767021][ T8788] hsr_slave_1: left promiscuous mode
[  662.912555][T24500] Bluetooth: hci3: command tx timeout
[  663.120334][T25266] hsr_slave_0: entered promiscuous mode
[  663.127139][T25266] hsr_slave_1: entered promiscuous mode
[  663.133871][T25266] debugfs: 'hsr0' already exists in 'hsr'
[  663.139645][T25266] Cannot create hsr debugfs directory
[  663.669081][ T8788] IPVS: stop unused estimator thread 0...
[  663.838038][T25266] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  663.850715][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  663.858935][T25266] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  663.882775][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.891036][T25266] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  663.907546][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  663.917413][T25266] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  663.929457][T25266] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  664.045420][T25266] 8021q: adding VLAN 0 to HW filter on device bond0
[  664.068626][T25266] 8021q: adding VLAN 0 to HW filter on device team0
[  664.081947][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.089214][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  664.118000][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.125223][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.202338][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms
[  664.210418][    C1] lec:lec_tx_timeout: lec0
[  664.416646][T25266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.696723][T25266] veth0_vlan: entered promiscuous mode
[  664.708759][T25266] veth1_vlan: entered promiscuous mode
[  664.737672][T25266] veth0_macvtap: entered promiscuous mode
[  664.747439][T25266] veth1_macvtap: entered promiscuous mode
[  664.767244][T25266] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.780752][T25266] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.795354][T13612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.805562][T13612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.816652][T13612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.826977][T13612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  664.896273][T18780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.906382][T18780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.938767][T18780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.948462][T18780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.994317][T24500] Bluetooth: hci3: command tx timeout
[  665.011515][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6404'.
[  666.914695][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  668.512514][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  674.192449][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms
[  674.200526][    C1] lec:lec_tx_timeout: lec0
[  674.205600][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  674.959818][T25541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  674.962776][T25547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6464'.
[  674.964464][T25546] netem: change failed
[  675.078995][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  675.090979][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  675.101789][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  675.114369][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  675.124598][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  675.780209][T25577] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  675.805989][T25579] netlink: 'syz.1.6470': attribute type 3 has an invalid length.
[  675.817031][T25579] netlink: 'syz.1.6470': attribute type 3 has an invalid length.
[  676.429848][T13612] dummy0: left allmulticast mode
[  676.446790][T13612] dummy0: left promiscuous mode
[  676.474253][T13612] bridge0: port 3(dummy0) entered disabled state
[  676.486684][T25608] Bluetooth: hci0: Opcode 0x080f failed: -22
[  676.535235][T13612] bridge_slave_1: left allmulticast mode
[  676.545981][T13612] bridge_slave_1: left promiscuous mode
[  676.551947][T13612] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.575033][T13612] bridge_slave_0: left allmulticast mode
[  676.580820][T13612] bridge_slave_0: left promiscuous mode
[  676.593107][T13612] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.606078][T25615] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  676.908257][T13612] bond8 (unregistering): (slave gretap1): Removing an active aggregator
[  676.922930][T13612] bond8 (unregistering): (slave gretap1): Releasing backup interface
[  676.967138][T13612] dvmrp0 (unregistering): left allmulticast mode
[  676.994221][T13612] bond11 (unregistering): (slave geneve3): Releasing active interface
[  677.015115][T13612] bond9 (unregistering): (slave geneve2): Releasing active interface
[  677.151638][T13612] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  677.161850][ T5833] Bluetooth: hci4: command tx timeout
[  677.497122][T13612] bond1 (unregistering): Released all slaves
[  677.511523][T13612] bond2 (unregistering): Released all slaves
[  677.526497][T13612] bond3 (unregistering): Released all slaves
[  677.547063][T13612] bond4 (unregistering): Released all slaves
[  677.561911][T13612] bond5 (unregistering): Released all slaves
[  677.579862][T13612] bond6 (unregistering): (slave veth5): Releasing active interface
[  677.590784][T13612] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface
[  677.601964][T13612] bond6 (unregistering): (slave veth7): Releasing active interface
[  677.611188][T13612] bond6 (unregistering): Released all slaves
[  677.626570][T13612] bond7 (unregistering): Released all slaves
[  677.641062][T13612] bond8 (unregistering): Released all slaves
[  677.656400][T13612] 
 (unregistering): Released all slaves
[  677.678505][T13612] bond0 (unregistering): Released all slaves
[  677.694727][T13612] bond9 (unregistering): Released all slaves
[  677.709635][T13612] bond10 (unregistering): Released all slaves
[  677.726945][T13612] bond11 (unregistering): Released all slaves
[  677.745686][T13612] bond12 (unregistering): Released all slaves
[  677.763889][T13612] bond13 (unregistering): Released all slaves
[  677.780882][T13612] bond14 (unregistering): Released all slaves
[  677.800183][T13612] bond15 (unregistering): Released all slaves
[  677.815944][T13612] bond16 (unregistering): Released all slaves
[  677.835048][T25608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6476'.
[  677.861779][T25552] chnl_net:caif_netlink_parms(): no params data found
[  678.060436][T13612] : left promiscuous mode
[  678.109304][T25638] netlink: 'syz.0.6481': attribute type 1 has an invalid length.
[  678.170530][T15594] IPVS: starting estimator thread 0...
[  678.189821][T13612] tipc: Disabling bearer <ib:caif0>
[  678.233415][T13612] tipc: Disabling bearer <udp:syz2>
[  678.240075][T13612] tipc: Left network mode
[  678.272609][T25647] IPVS: using max 28 ests per chain, 67200 per kthread
[  678.346879][T25552] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.354707][T25552] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.362019][T25552] bridge_slave_0: entered allmulticast mode
[  678.370649][T25552] bridge_slave_0: entered promiscuous mode
[  678.379597][T25552] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.387125][T25552] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.394925][T25552] bridge_slave_1: entered allmulticast mode
[  678.402931][T25552] bridge_slave_1: entered promiscuous mode
[  678.537670][T25552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.657809][T25552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.767454][T25552] team0: Port device team_slave_0 added
[  678.780672][T25552] team0: Port device team_slave_1 added
[  679.036760][T25552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.062251][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.112564][T25676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  679.174947][T25552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.212236][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  679.220356][    C1] lec:lec_tx_timeout: lec0
[  679.225562][T25552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.235188][ T5833] Bluetooth: hci4: command tx timeout
[  679.253012][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.284928][T25552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.320920][T25681] Bluetooth: hci0: Opcode 0x080f failed: -22
[  679.351187][T25681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6489'.
[  679.604100][T25690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6493'.
[  679.725063][    T9] lec:lec_start_xmit: lec0:No lecd attached
[  679.748195][T25552] hsr_slave_0: entered promiscuous mode
[  679.763538][T25552] hsr_slave_1: entered promiscuous mode
[  679.780580][T25552] debugfs: 'hsr0' already exists in 'hsr'
[  679.796661][T25552] Cannot create hsr debugfs directory
[  680.234431][T25720] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6498'.
[  680.594044][T13612] hsr_slave_0: left promiscuous mode
[  680.618451][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6500'.
[  680.643683][T13612] hsr_slave_1: left promiscuous mode
[  680.650948][T13612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.688576][T13612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  680.725662][T25742] Bluetooth: hci0: Opcode 0x080f failed: -22
[  680.744465][T25741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6503'.
[  681.064363][ T1312] smc: removing ib device syz1
[  681.208627][T25742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6501'.
[  681.233177][ T5488] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  681.253038][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1
[  681.322291][ T5833] Bluetooth: hci4: command tx timeout
[  681.483096][T25756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6506'.
[  681.950040][T25760] 8021q: adding VLAN 0 to HW filter on device bond2
[  681.995340][T25760] bond2 (unregistering): Released all slaves
[  682.064056][T25766] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6509'.
[  683.100914][T25804] Bluetooth: hci0: Opcode 0x080f failed: -22
[  683.108010][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6516'.
[  683.380651][T25552] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  683.393354][ T5833] Bluetooth: hci4: command tx timeout
[  683.438182][T25552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  683.459131][T25552] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  683.551071][T25552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  683.588949][T25552] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  683.654791][T25552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  683.677711][T25552] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  683.728524][T25552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  684.049170][T25552] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.146656][T25552] 8021q: adding VLAN 0 to HW filter on device team0
[  684.175244][T25819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6519'.
[  684.228197][T25819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6519'.
[  684.812243][T13615] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.819451][T13615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  685.035055][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6525'.
[  685.086117][T13615] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.093364][T13615] bridge0: port 2(bridge_slave_1) entered forwarding state
[  685.141630][T13612] IPVS: stop unused estimator thread 0...
[  685.152209][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms
[  685.160275][    C1] lec:lec_tx_timeout: lec0
[  685.165482][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  685.216983][T25853] syzkaller1: entered promiscuous mode
[  685.225222][T25853] syzkaller1: entered allmulticast mode
[  685.329705][T25865] __nla_validate_parse: 1 callbacks suppressed
[  685.329731][T25865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  685.357526][T25552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  685.473015][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  685.558353][T25876] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6527'.
[  685.769147][T25885] wireguard0: entered promiscuous mode
[  686.094407][T25552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  686.116315][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  686.125614][ T1298] aoe: packet could not be sent on lec0.  consider increasing tx_queue_len
[  686.151761][T25903] syzkaller1: entered promiscuous mode
[  686.158058][T25904] netlink: 'syz.0.6535': attribute type 16 has an invalid length.
[  686.167304][T25903] syzkaller1: entered allmulticast mode
[  686.173722][T25904] netlink: 'syz.0.6535': attribute type 17 has an invalid length.
[  686.252389][T25904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  686.300999][T25908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6537'.
[  686.424049][T25552] veth0_vlan: entered promiscuous mode
[  686.452743][T25912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6539'.
[  686.470312][T25552] veth1_vlan: entered promiscuous mode
[  686.478722][T25914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6540'.
[  686.631360][T25552] veth0_macvtap: entered promiscuous mode
[  686.661123][T25552] veth1_macvtap: entered promiscuous mode
[  686.694487][T25552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.710459][T25552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.730111][T13615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.741262][T13615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.751539][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6545'.
[  686.776210][T13615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.786693][T13615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.797538][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6545'.
[  686.879866][T25934] wireguard0: entered allmulticast mode
[  687.024755][T25937] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  687.334632][T25916] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  687.340738][T25916] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  687.376357][T25916] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  687.383341][T25916] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  687.531465][T13615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.544125][T13615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.634504][ T8788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.648003][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'.
[  687.652328][ T8788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.699130][T25945] syzkaller0: entered promiscuous mode
[  687.705444][T25945] syzkaller0: entered allmulticast mode
[  687.744676][T25957] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  687.870964][T25960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6553'.
[  689.297451][T25954] syzkaller1: entered promiscuous mode
[  689.303182][T25954] syzkaller1: entered allmulticast mode
[  689.319052][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'.
[  690.013479][T26014] syzkaller1: entered promiscuous mode
[  690.022843][T26014] syzkaller1: entered allmulticast mode
[  690.192567][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  690.200664][    C1] lec:lec_tx_timeout: lec0
[  690.535583][T26043] "syz.3.6582" (26043) uses obsolete ecb(arc4) skcipher
[  690.704274][T26056] netlink: 'syz.4.6586': attribute type 1 has an invalid length.
[  690.733621][T26052] syzkaller1: entered promiscuous mode
[  690.739586][T26057] netlink: zone id is out of range
[  690.746384][T26056] __nla_validate_parse: 5 callbacks suppressed
[  690.746403][T26056] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6586'.
[  690.748834][T26052] syzkaller1: entered allmulticast mode
[  690.772802][T26049] netlink: set zone limit has 4 unknown bytes
[  690.775519][T26056] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6586'.
[  690.779752][T26057] netlink: zone id is out of range
[  691.035491][T26068] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.6590'.
[  691.069611][T26068] netlink: ct family unspecified
[  691.076377][T26071] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  691.389642][T26086] netlink: 'syz.1.6597': attribute type 16 has an invalid length.
[  691.472520][T26086] netlink: 'syz.1.6597': attribute type 17 has an invalid length.
[  691.556567][T26086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  691.852064][T26118] netlink: 'syz.4.6606': attribute type 30 has an invalid length.
[  691.935649][T26122] netlink: 'syz.1.6607': attribute type 16 has an invalid length.
[  691.985705][T26122] netlink: 'syz.1.6607': attribute type 3 has an invalid length.
[  692.013070][T26122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6607'.
[  692.062384][T26130] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  692.153756][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6612'.
[  692.300310][T26147] netlink: 'syz.1.6616': attribute type 2 has an invalid length.
[  692.333005][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6616'.
[  692.396135][T26147] netlink: 'syz.1.6616': attribute type 25 has an invalid length.
[  692.975888][T26184] syzkaller1: entered promiscuous mode
[  692.981537][T26184] syzkaller1: entered allmulticast mode
[  693.321025][T26197] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6631'.
[  693.414935][T26205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6633'.
[  693.675934][T26222] netlink: 'syz.1.6639': attribute type 19 has an invalid length.
[  693.692270][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6639'.
[  693.713240][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  693.733006][ T1312] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  693.753057][T26222] netlink: 'syz.1.6639': attribute type 19 has an invalid length.
[  693.772300][ T1312] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  693.781092][ T1312] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  693.802432][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6639'.
[  693.899341][ T1312] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  694.198300][T26247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  694.947717][T26296] netlink: 'syz.3.6663': attribute type 1 has an invalid length.
[  695.271126][T26311] netlink: ct family unspecified
[  695.278280][T26313] SET target dimension over the limit!
[  695.401782][T26321] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  695.576795][T26327] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  695.666599][T26329] xt_CT: You must specify a L4 protocol and not use inversions on it
[  695.760804][T26331] Bluetooth: MGMT ver 1.23
[  695.925697][T15594] IPVS: starting estimator thread 0...
[  696.030949][T26348] IPVS: using max 26 ests per chain, 62400 per kthread
[  696.137362][T26351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  696.161713][T26359] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  696.177343][T26357] wireguard0: entered promiscuous mode
[  696.184918][T26355] __nla_validate_parse: 15 callbacks suppressed
[  696.184940][T26355] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6685'.
[  696.370040][T16688] IPVS: starting estimator thread 0...
[  696.503070][T26374] IPVS: using max 28 ests per chain, 67200 per kthread
[  696.554883][T26388] validate_nla: 2 callbacks suppressed
[  696.554908][T26388] netlink: 'syz.4.6693': attribute type 4 has an invalid length.
[  696.663302][T26392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6696'.
[  696.720363][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6698'.
[  696.761845][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6698'.
[  696.939859][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6700'.
[  696.951624][T26409] openvswitch: netlink: Flow actions attr not present in new flow.
[  696.975103][T26413] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6701'.
[  697.124851][T26420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6705'.
[  697.337072][T26431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6709'.
[  697.971242][T26474] netlink: 'syz.1.6725': attribute type 1 has an invalid length.
[  698.061700][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6725'.
[  698.077898][T26474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6725'.
[  698.110263][T26489] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  698.446974][T26507] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  698.461713][T26507] bond3 (unregistering): Released all slaves
[  698.648248][T26519] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.656048][T26519] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.000136][T26537] netlink: 'syz.0.6744': attribute type 1 has an invalid length.
[  699.100831][T26542] bond3: option xmit_hash_policy: invalid value (64)
[  699.152674][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms
[  699.153834][T26542] bond3 (unregistering): Released all slaves
[  699.160795][    C1] lec:lec_tx_timeout: lec0
[  699.172997][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  699.316719][T26543] bond3: option xmit_hash_policy: invalid value (64)
[  699.363689][T26543] bond3 (unregistering): Released all slaves
[  699.772677][T26583] netlink: 'syz.1.6753': attribute type 10 has an invalid length.
[  699.855537][T26583] team0: Port device dummy0 added
[  700.140701][T26599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.148365][T26599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.159200][T26599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.184697][T26599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.405787][T26609] netlink: 'syz.3.6761': attribute type 2 has an invalid length.
[  701.028507][T26662] netlink: ct family unspecified
[  701.058849][T26656] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  701.974716][T26681] __nla_validate_parse: 7 callbacks suppressed
[  701.974750][T26681] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6783'.
[  702.368980][T26722] netlink: 'syz.4.6792': attribute type 1 has an invalid length.
[  702.382861][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6785'.
[  702.526611][T26722] 8021q: adding VLAN 0 to HW filter on device bond3
[  702.562044][T26728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6792'.
[  702.614391][T26722] bond2: (slave bond3): making interface the new active one
[  702.647436][T26722] bond2: (slave bond3): Enslaving as an active interface with an up link
[  702.662102][T26738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6796'.
[  702.778481][T26727] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  702.799700][T26728] 8021q: adding VLAN 0 to HW filter on device bond2
[  703.126079][T26763] syzkaller0: entered promiscuous mode
[  703.132492][T26763] syzkaller0: entered allmulticast mode
[  703.222117][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6805'.
[  703.297431][T26772] netlink: 'syz.4.6806': attribute type 4 has an invalid length.
[  703.438320][T26782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6805'.
[  703.765748][T26801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6813'.
[  703.863183][T26807] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.912632][T26807] bridge_slave_0 (unregistering): left allmulticast mode
[  703.947405][T26807] bridge_slave_0 (unregistering): left promiscuous mode
[  703.977567][T26807] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.192239][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  704.200369][    C1] lec:lec_tx_timeout: lec0
[  704.430758][T26835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6826'.
[  704.445645][T26836] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  704.469198][T26835] bond0: entered promiscuous mode
[  704.474704][T26835] bond_slave_0: entered promiscuous mode
[  704.488114][T26835] bond_slave_1: entered promiscuous mode
[  704.498096][T26835] gretap0: entered promiscuous mode
[  704.505254][T26835] debugfs: 'hsr1' already exists in 'hsr'
[  704.516385][T26835] Cannot create hsr debugfs directory
[  704.529748][T26839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6827'.
[  704.564084][T26835] hsr1: entered promiscuous mode
[  705.023151][T26870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6836'.
[  705.132759][T26876] netlink: 'syz.1.6838': attribute type 11 has an invalid length.
[  705.219049][T26876] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.226915][T26876] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.541444][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  705.568885][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.602519][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  705.636723][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.681329][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  705.681981][T26897] netlink: 'syz.4.6844': attribute type 19 has an invalid length.
[  705.710221][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.741792][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  705.766530][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  705.785066][T26897] netlink: 'syz.4.6844': attribute type 19 has an invalid length.
[  705.806337][T26903] netlink: 'syz.1.6847': attribute type 15 has an invalid length.
[  705.814872][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  705.829509][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  705.849809][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  705.885456][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  706.113255][T26911] team0: Port device dummy0 removed
[  706.376138][T26937] netlink: 'syz.4.6858': attribute type 2 has an invalid length.
[  706.407741][T26937] netlink: 'syz.4.6858': attribute type 25 has an invalid length.
[  706.555842][T26940] sctp: [Deprecated]: syz.1.6860 (pid 26940) Use of int in maxseg socket option.
[  706.555842][T26940] Use struct sctp_assoc_value instead
[  706.777391][T26961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  707.081386][T26976] netlink: 'syz.4.6872': attribute type 2 has an invalid length.
[  707.101735][T26976] __nla_validate_parse: 18 callbacks suppressed
[  707.101758][T26976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6872'.
[  707.136925][T26981] netlink: 'syz.0.6874': attribute type 12 has an invalid length.
[  707.201886][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'.
[  707.202678][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6876'.
[  707.260788][  T998] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  707.270358][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'.
[  707.285342][  T998] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  707.305209][  T998] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  707.338965][  T998] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  707.647920][T27015] validate_nla: 3 callbacks suppressed
[  707.647941][T27015] netlink: 'syz.3.6885': attribute type 11 has an invalid length.
[  707.663288][T27014] syzkaller0: entered promiscuous mode
[  707.668863][T27014] syzkaller0: entered allmulticast mode
[  707.680251][T27014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6886'.
[  707.690429][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6885'.
[  707.896485][T13614] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  707.906336][T13614] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  707.920978][T13614] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  707.953327][T13614] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  708.042368][T27028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6891'.
[  708.271382][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6897'.
[  708.283767][T27045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6897'.
[  708.294463][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6897'.
[  708.484957][T27056] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  708.832315][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  708.957739][T27078] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  708.980387][T27078] bond3 (unregistering): Released all slaves
[  709.048659][T27094] netlink: 'syz.4.6912': attribute type 1 has an invalid length.
[  709.177041][T27094] 8021q: adding VLAN 0 to HW filter on device bond4
[  709.205237][T27110] FAULT_INJECTION: forcing a failure.
[  709.205237][T27110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  709.237473][T27110] CPU: 1 UID: 0 PID: 27110 Comm: syz.2.6917 Not tainted syzkaller #0 PREEMPT(full) 
[  709.237505][T27110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  709.237520][T27110] Call Trace:
[  709.237530][T27110]  <TASK>
[  709.237541][T27110]  dump_stack_lvl+0xe8/0x150
[  709.237579][T27110]  should_fail_ex+0x412/0x560
[  709.237621][T27110]  _copy_to_user+0x31/0xb0
[  709.237661][T27110]  simple_read_from_buffer+0xe1/0x170
[  709.237709][T27110]  proc_fail_nth_read+0x1bb/0x230
[  709.237749][T27110]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  709.237786][T27110]  ? rw_verify_area+0x2a6/0x4d0
[  709.237810][T27110]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  709.237844][T27110]  vfs_read+0x20c/0xa70
[  709.237867][T27110]  ? fdget_pos+0x246/0x320
[  709.237894][T27110]  ? __pfx___mutex_lock+0x10/0x10
[  709.237928][T27110]  ? __pfx_vfs_read+0x10/0x10
[  709.237956][T27110]  ? __fget_files+0x2a/0x420
[  709.237981][T27110]  ? __fget_files+0x3a0/0x420
[  709.238001][T27110]  ? __fget_files+0x2a/0x420
[  709.238032][T27110]  ksys_read+0x150/0x270
[  709.238061][T27110]  ? __pfx_ksys_read+0x10/0x10
[  709.238099][T27110]  do_syscall_64+0x14d/0xf80
[  709.238130][T27110]  ? trace_irq_disable+0x3b/0x150
[  709.238150][T27110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.238174][T27110]  ? clear_bhb_loop+0x40/0x90
[  709.238202][T27110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.238225][T27110] RIP: 0033:0x7f392215d04e
[  709.238258][T27110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  709.238279][T27110] RSP: 002b:00007f39203edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  709.238304][T27110] RAX: ffffffffffffffda RBX: 00007f39203ee6c0 RCX: 00007f392215d04e
[  709.238338][T27110] RDX: 000000000000000f RSI: 00007f39203ee0a0 RDI: 0000000000000003
[  709.238353][T27110] RBP: 00007f39203ee090 R08: 0000000000000000 R09: 0000000000000000
[  709.238367][T27110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.238380][T27110] R13: 00007f3922416038 R14: 00007f3922415fa0 R15: 00007fff8b542788
[  709.238414][T27110]  </TASK>
[  709.457696][T27115] netlink: 'syz.1.6916': attribute type 10 has an invalid length.
[  709.466331][T27101] bond4: (slave gretap3): making interface the new active one
[  709.476911][T27101] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  709.513310][T27103] syzkaller1: entered promiscuous mode
[  709.537168][T27103] syzkaller1: entered allmulticast mode
[  709.608491][T27106] netlink: 'syz.0.6915': attribute type 2 has an invalid length.
[  709.619083][T27113] netlink: 'syz.1.6916': attribute type 12 has an invalid length.
[  709.628371][T27113] netlink: 'syz.1.6916': attribute type 29 has an invalid length.
[  709.648957][T27113] netlink: 'syz.1.6916': attribute type 2 has an invalid length.
[  709.683096][T27115] veth0_vlan: left promiscuous mode
[  709.701063][T27115] veth0_vlan: entered promiscuous mode
[  709.724141][T27115] team0: Device veth0_vlan failed to register rx_handler
[  709.754265][T27119] netlink: 'syz.0.6915': attribute type 25 has an invalid length.
[  709.914424][T27138] netlink: Unknown conntrack attr (type=2304, max=9)
[  709.973417][T27139] veth1_to_hsr: entered allmulticast mode
[  710.063189][T27142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  710.140735][T27153] netlink: 'syz.4.6929': attribute type 16 has an invalid length.
[  710.152963][T27153] netlink: 'syz.4.6929': attribute type 17 has an invalid length.
[  710.173730][T27153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  710.595615][T27185] netlink: 'syz.3.6937': attribute type 11 has an invalid length.
[  710.697164][T27190] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  710.704536][T27190] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  710.873690][T27193] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.895452][T27193] 8021q: adding VLAN 0 to HW filter on device team0
[  710.925901][T27193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  711.947496][T27260] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  712.181039][T27277] __nla_validate_parse: 26 callbacks suppressed
[  712.181061][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6969'.
[  712.232575][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6969'.
[  712.343128][T27285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6972'.
[  712.354732][T27285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6972'.
[  712.500076][T27299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  712.647095][T27307] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.6980'.
[  712.657724][T27307] netlink: Unknown conntrack attr (type=2304, max=9)
[  712.697903][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6981'.
[  712.807711][T27314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6983'.
[  712.868060][T27318] validate_nla: 13 callbacks suppressed
[  712.868147][T27318] netlink: 'syz.0.6985': attribute type 16 has an invalid length.
[  712.889338][T27318] netlink: 'syz.0.6985': attribute type 17 has an invalid length.
[  712.901821][T27318] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.909121][T27318] bridge0: port 2(bridge_slave_1) entered listening state
[  712.916799][T27318] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.924041][T27318] bridge0: port 1(bridge_slave_0) entered listening state
[  712.939598][T27318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  713.156723][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6989'.
[  713.315011][T27337] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  713.354044][T27329] macvlan2: entered promiscuous mode
[  713.359781][T27329] macvlan2: entered allmulticast mode
[  713.366050][T27329] bond3: entered promiscuous mode
[  713.371553][T27329] bridge2: entered promiscuous mode
[  713.378037][T27329] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  713.395359][T27329] bond3: left promiscuous mode
[  713.400210][T27329] bridge2: left promiscuous mode
[  713.561830][T27354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6992'.
[  713.696131][T27356] netlink: 'syz.4.6996': attribute type 19 has an invalid length.
[  713.726221][T27356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6996'.
[  713.758501][T27356] netlink: 'syz.4.6996': attribute type 19 has an invalid length.
[  713.926547][T27371] netlink: 'syz.0.7001': attribute type 2 has an invalid length.
[  713.966248][T27371] netlink: 'syz.0.7001': attribute type 25 has an invalid length.
[  713.998028][T27375] netlink: 'syz.4.7003': attribute type 2 has an invalid length.
[  714.006484][T27374] netlink: 'syz.4.7003': attribute type 2 has an invalid length.
[  714.186451][T27388] netlink: 'syz.4.7007': attribute type 1 has an invalid length.
[  714.194323][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms
[  714.194358][    C1] lec:lec_tx_timeout: lec0
[  714.202980][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  714.218370][T27388] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  714.284284][T27393] debugfs: 'K��u�cr��K:����̥�B����|����lS��-!' already exists in 'ieee80211'
[  714.470418][T27403] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  714.835975][T27429] ip6t_srh: unknown srh match flags  4000
[  715.046040][T27446] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  715.355812][T27467] netlink: 'syz.0.7037': attribute type 10 has an invalid length.
[  715.367247][T27466] syzkaller1: entered promiscuous mode
[  715.376974][T27466] syzkaller1: entered allmulticast mode
[  715.388353][T27467] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.400310][T27467] bridge_slave_1: left allmulticast mode
[  715.434708][T27467] bridge_slave_1: left promiscuous mode
[  715.446606][T27467] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.514653][T27467] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  716.289996][T27512] syzkaller0: entered promiscuous mode
[  716.303288][T27512] syzkaller0: entered allmulticast mode
[  716.571356][T27528] bond4: entered allmulticast mode
[  716.733127][T27542] syzkaller1: entered promiscuous mode
[  716.738834][T27542] syzkaller1: entered allmulticast mode
[  716.991917][T27558] netlink: 'syz.3.7077': attribute type 11 has an invalid length.
[  717.252975][T27572] Bluetooth: MGMT ver 1.23
[  717.268631][T27572] __nla_validate_parse: 17 callbacks suppressed
[  717.268653][T27572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7082'.
[  717.411536][T27581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7086'.
[  717.488126][T27589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7087'.
[  717.541636][T27587] syzkaller1: entered promiscuous mode
[  717.549527][T27587] syzkaller1: entered allmulticast mode
[  717.570838][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7088'.
[  718.012125][T27619] validate_nla: 4 callbacks suppressed
[  718.049846][T27619] netlink: 'syz.1.7099': attribute type 1 has an invalid length.
[  718.076450][T27620] netlink: 'syz.1.7099': attribute type 1 has an invalid length.
[  718.100964][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7099'.
[  718.420029][T27633] syzkaller1: entered promiscuous mode
[  718.450945][T27633] syzkaller1: entered allmulticast mode
[  718.467701][T27640] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.7108'.
[  718.478100][T27640] netlink: Unknown conntrack attr (type=2304, max=9)
[  719.146529][T27650] infiniband syz0: set active
[  719.151527][T27650] infiniband syz0: added veth0_vlan
[  719.210918][T27650] RDS/IB: syz0: added
[  719.215032][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  719.215070][    C1] lec:lec_tx_timeout: lec0
[  719.232324][T27650] smc: adding ib device syz0 with port count 1
[  719.238666][T27650] smc:    ib device syz0 port 1 has no pnetid
[  719.350026][T27687] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7122'.
[  719.361984][T27687] netlink: Unknown conntrack attr (type=2304, max=9)
[  719.523419][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7123'.
[  719.609018][T27690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7123'.
[  719.967587][T27703] syzkaller1: entered promiscuous mode
[  719.992334][T27703] syzkaller1: entered allmulticast mode
[  720.148034][T27709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  720.483475][T27723] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.7133'.
[  720.508368][T27723] netlink: Unknown conntrack attr (type=2304, max=9)
[  721.430974][T27757] tipc: Started in network mode
[  721.436110][T27757] tipc: Node identity caf45b513aca, cluster identity 4711
[  721.449040][T27757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  721.539856][T27757] syzkaller0: entered promiscuous mode
[  721.548418][T27757] syzkaller0: entered allmulticast mode
[  721.555619][T27757] tipc: Resetting bearer <eth:syzkaller0>
[  721.602518][T27756] tipc: Resetting bearer <eth:syzkaller0>
[  723.579953][T27756] tipc: Disabling bearer <eth:syzkaller0>
[  723.601250][T27770] bridge_slave_1: left allmulticast mode
[  723.607013][T27770] bridge_slave_1: left promiscuous mode
[  723.613659][T27770] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.630760][T27770] bond0: (slave bond_slave_0): Releasing backup interface
[  723.646215][T27770] bond0: (slave bond_slave_1): Releasing backup interface
[  723.664888][T27770] team0: Port device team_slave_0 removed
[  723.676776][T27770] team0: Port device team_slave_1 removed
[  723.684106][T27770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  723.691733][T27770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.705642][T27770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  723.714561][T27770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.725397][T27770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  723.742079][T27772] __nla_validate_parse: 1 callbacks suppressed
[  723.742100][T27772] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7149'.
[  723.759022][T25014] tipc: Node number set to 4030618449
[  723.952883][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  724.056267][T27802] syzkaller1: entered promiscuous mode
[  724.061889][T27802] syzkaller1: entered allmulticast mode
[  725.230659][T27848] syzkaller1: entered promiscuous mode
[  725.236503][T27848] syzkaller1: entered allmulticast mode
[  725.775057][T27870] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.7179'.
[  725.950525][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7180'.
[  725.996043][T27885] syzkaller1: entered promiscuous mode
[  726.001721][T27885] syzkaller1: entered allmulticast mode
[  726.053768][T27883] netlink: 'syz.1.7182': attribute type 16 has an invalid length.
[  726.075681][T27883] netlink: 'syz.1.7182': attribute type 17 has an invalid length.
[  726.096882][T27889] netlink: 'syz.0.7185': attribute type 1 has an invalid length.
[  726.104907][T27888] netlink: 'syz.0.7185': attribute type 1 has an invalid length.
[  726.130503][T27883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  726.216157][T27888] bond1: entered promiscuous mode
[  726.241870][T27888] 8021q: adding VLAN 0 to HW filter on device bond1
[  726.282909][T27898] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.7186'.
[  726.326191][T27906] syzkaller0: entered promiscuous mode
[  726.331877][T27906] syzkaller0: entered allmulticast mode
[  726.570569][T27915] gre1: entered allmulticast mode
[  726.577986][T27912] netlink: 'syz.0.7191': attribute type 19 has an invalid length.
[  726.587183][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7191'.
[  726.633906][T13612] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  726.644975][T27912] netlink: 'syz.0.7191': attribute type 19 has an invalid length.
[  726.653347][T13612] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  726.672109][T27912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7191'.
[  726.683979][T13612] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  726.702624][T13612] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  726.760432][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.799511][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.822367][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.834806][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.845944][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.856313][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.871219][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  726.882038][T27919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  727.018143][T27932] syzkaller1: entered promiscuous mode
[  727.032254][T27932] syzkaller1: entered allmulticast mode
[  727.156444][T27939] netlink: 'syz.2.7200': attribute type 16 has an invalid length.
[  727.178075][T27939] netlink: 'syz.2.7200': attribute type 17 has an invalid length.
[  727.296968][T27944] netlink: 'syz.0.7202': attribute type 2 has an invalid length.
[  727.317028][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7202'.
[  727.352658][T27944] netlink: 'syz.0.7202': attribute type 25 has an invalid length.
[  727.590422][T27950] syzkaller1: entered promiscuous mode
[  727.602378][T27950] syzkaller1: entered allmulticast mode
[  727.609087][T27952] xt_l2tp: invalid flags combination: 8
[  727.635985][T27950] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96
[  728.291748][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7215'.
[  728.354100][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  728.506560][T27999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7222'.
[  728.543588][T27999] syzkaller0: entered promiscuous mode
[  728.551764][T28002] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7221'.
[  728.566546][T27999] syzkaller0: entered allmulticast mode
[  728.607714][T28002] gretap4: entered promiscuous mode
[  728.647132][T28002] batman_adv: batadv0: Adding interface: gretap4
[  728.682359][T28002] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  728.716159][T28002] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active
[  728.878309][T28021] net_ratelimit: 59 callbacks suppressed
[  728.878329][T28021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  729.016391][T28029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7230'.
[  729.152226][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms
[  729.160327][    C1] lec:lec_tx_timeout: lec0
[  729.165034][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  729.214920][T28044] bond1: entered promiscuous mode
[  729.220802][T28044] 8021q: adding VLAN 0 to HW filter on device bond1
[  729.764928][T28068] wireguard0: entered promiscuous mode
[  729.770475][T28068] wireguard0: entered allmulticast mode
[  729.808122][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7247'.
[  729.822971][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7248'.
[  729.846843][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7247'.
[  730.476531][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7261'.
[  730.490937][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7264'.
[  730.497397][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7262'.
[  730.514673][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7262'.
[  730.533604][T28120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7264'.
[  730.772526][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7269'.
[  731.097231][T28154] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  731.225222][T28165] validate_nla: 14 callbacks suppressed
[  731.225244][T28165] netlink: 'syz.1.7278': attribute type 15 has an invalid length.
[  731.294748][T13612] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  731.315118][T13612] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  731.337947][T28165] netlink: 'syz.1.7278': attribute type 15 has an invalid length.
[  731.368543][T13612] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  731.394509][T13612] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  731.545847][T28173] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  731.573206][T28173] team0: Device macvlan2 is already an upper device of the team interface
[  731.608888][T28177] syzkaller0: entered promiscuous mode
[  731.616960][T28177] syzkaller0: entered allmulticast mode
[  731.946959][T28201] netlink: 'syz.0.7293': attribute type 2 has an invalid length.
[  731.970293][T28201] netlink: 'syz.0.7293': attribute type 25 has an invalid length.
[  732.103609][T28206] netlink: 'syz.0.7295': attribute type 1 has an invalid length.
[  732.139343][T28206] 8021q: adding VLAN 0 to HW filter on device bond2
[  732.170662][T28206] bond2: (slave gretap1): making interface the new active one
[  732.181439][T28206] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  732.277285][T28213] netlink: 'syz.1.7298': attribute type 1 has an invalid length.
[  732.285547][T28213] netlink: 'syz.1.7298': attribute type 1 has an invalid length.
[  732.293570][T28213] netlink: 'syz.1.7298': attribute type 1 has an invalid length.
[  732.301522][T28213] netlink: 'syz.1.7298': attribute type 2 has an invalid length.
[  732.666812][T28232] netlink: 'syz.1.7302': attribute type 19 has an invalid length.
[  732.940967][T28238] gretap0: refused to change device tx_queue_len
[  732.980104][T28238] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  734.192247][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  734.200318][    C1] lec:lec_tx_timeout: lec0
[  734.204646][T28299] __nla_validate_parse: 19 callbacks suppressed
[  734.204710][T28299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7326'.
[  734.463220][T28309] syzkaller0: entered promiscuous mode
[  734.470321][T28309] syzkaller0: entered allmulticast mode
[  734.501085][T28313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7331'.
[  734.702855][T28317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7332'.
[  734.892608][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7336'.
[  735.120081][T28350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7342'.
[  735.155042][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7343'.
[  735.171610][T28350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7342'.
[  735.252041][T28353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7348'.
[  735.292468][T28357] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  735.400133][T28363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7350'.
[  735.488683][T28371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7353'.
[  735.933987][T28398] netlink: ct family unspecified
[  736.034051][T28402] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  736.112697][T28398] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  736.792972][T28439] validate_nla: 11 callbacks suppressed
[  736.792997][T28439] netlink: 'syz.4.7374': attribute type 2 has an invalid length.
[  736.899232][T28439] netlink: 'syz.4.7374': attribute type 25 has an invalid length.
[  737.444994][T28472] netlink: 'syz.3.7384': attribute type 10 has an invalid length.
[  737.460499][T28472] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  738.259795][T28502] netlink: 'syz.2.7390': attribute type 10 has an invalid length.
[  738.770218][T28521] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  738.867925][T28524] wireguard0: entered allmulticast mode
[  739.072327][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  739.178967][T28533] netlink: Unknown conntrack attr (type=2304, max=9)
[  739.417778][T28542] __nla_validate_parse: 11 callbacks suppressed
[  739.417799][T28542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7403'.
[  739.489251][T28555] syzkaller1: entered promiscuous mode
[  739.509134][T28555] syzkaller1: entered allmulticast mode
[  739.810079][T28575] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7413'.
[  739.840859][T28575] netlink: Unknown conntrack attr (type=2304, max=9)
[  739.853663][T28573] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7412'.
[  739.956472][T28584] IPv6: NLM_F_REPLACE set, but no existing node found!
[  740.056392][T28588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7420'.
[  740.125762][T28596] netlink: 'syz.4.7419': attribute type 21 has an invalid length.
[  740.165628][T28596] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7419'.
[  740.183834][T28596] netlink: 'syz.4.7419': attribute type 5 has an invalid length.
[  740.192454][T28596] netlink: 'syz.4.7419': attribute type 6 has an invalid length.
[  740.200233][T28596] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7419'.
[  740.220460][T28588] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7420'.
[  740.241070][T28588] xt_policy: neither incoming nor outgoing policy selected
[  740.446329][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7428'.
[  740.589121][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7429'.
[  740.637123][T28625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7429'.
[  740.852776][T28636] netlink: 'syz.0.7433': attribute type 2 has an invalid length.
[  740.999345][T28646] 8021q: adding VLAN 0 to HW filter on device bond2
[  741.128678][T28640] 8021q: adding VLAN 0 to HW filter on device bond2
[  741.165713][T28640] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  741.188041][T28640] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  741.206157][T28640] bond2: (slave xfrm1): making interface the new active one
[  741.243914][T28640] bond2: (slave xfrm1): Enslaving as an active interface with an up link
[  741.302512][T28658] syzkaller0: entered promiscuous mode
[  741.308089][T28658] syzkaller0: entered allmulticast mode
[  742.985584][T28721] FAULT_INJECTION: forcing a failure.
[  742.985584][T28721] name failslab, interval 1, probability 0, space 0, times 0
[  742.999944][T28721] CPU: 1 UID: 0 PID: 28721 Comm: syz.4.7458 Not tainted syzkaller #0 PREEMPT(full) 
[  742.999972][T28721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  742.999985][T28721] Call Trace:
[  742.999993][T28721]  <TASK>
[  743.000003][T28721]  dump_stack_lvl+0xe8/0x150
[  743.000037][T28721]  should_fail_ex+0x412/0x560
[  743.000074][T28721]  should_failslab+0xa8/0x100
[  743.000103][T28721]  __kmalloc_noprof+0xe8/0x760
[  743.000129][T28721]  ? rcu_is_watching+0x15/0xb0
[  743.000158][T28721]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  743.000196][T28721]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  743.000234][T28721]  genl_family_rcv_msg_doit+0xd9/0x330
[  743.000270][T28721]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  743.000308][T28721]  ? apparmor_capable+0x126/0x170
[  743.000335][T28721]  ? bpf_lsm_capable+0x9/0x20
[  743.000364][T28721]  ? security_capable+0x7e/0x2c0
[  743.000401][T28721]  genl_rcv_msg+0x61c/0x7a0
[  743.000437][T28721]  ? __pfx_genl_rcv_msg+0x10/0x10
[  743.000465][T28721]  ? __pfx_netlbl_mgmt_adddef+0x10/0x10
[  743.000497][T28721]  ? __lock_acquire+0x6b5/0x2cf0
[  743.000536][T28721]  netlink_rcv_skb+0x232/0x4b0
[  743.000560][T28721]  ? __pfx_genl_rcv_msg+0x10/0x10
[  743.000591][T28721]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  743.000632][T28721]  ? down_read+0x272/0x2e0
[  743.000650][T28721]  ? genl_rcv+0xd/0x40
[  743.000679][T28721]  genl_rcv+0x28/0x40
[  743.000705][T28721]  netlink_unicast+0x80f/0x9b0
[  743.000734][T28721]  ? __pfx_netlink_unicast+0x10/0x10
[  743.000757][T28721]  ? netlink_sendmsg+0x650/0xb40
[  743.000779][T28721]  ? skb_put+0x11b/0x210
[  743.000808][T28721]  netlink_sendmsg+0x813/0xb40
[  743.000841][T28721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  743.000877][T28721]  ? aa_sock_msg_perm+0xf1/0x1b0
[  743.000912][T28721]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  743.000941][T28721]  ____sys_sendmsg+0x972/0x9f0
[  743.000980][T28721]  ? __pfx_____sys_sendmsg+0x10/0x10
[  743.001018][T28721]  ? import_iovec+0x73/0xa0
[  743.001047][T28721]  ___sys_sendmsg+0x2a5/0x360
[  743.001081][T28721]  ? __pfx____sys_sendmsg+0x10/0x10
[  743.001169][T28721]  ? __fget_files+0x2a/0x420
[  743.001188][T28721]  ? __fget_files+0x3a0/0x420
[  743.001219][T28721]  __x64_sys_sendmsg+0x1bd/0x2a0
[  743.001253][T28721]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  743.001294][T28721]  ? __pfx_ksys_write+0x10/0x10
[  743.001332][T28721]  do_syscall_64+0x14d/0xf80
[  743.001362][T28721]  ? trace_irq_disable+0x3b/0x150
[  743.001381][T28721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.001404][T28721]  ? clear_bhb_loop+0x40/0x90
[  743.001431][T28721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.001454][T28721] RIP: 0033:0x7fda97b9c819
[  743.001475][T28721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.001495][T28721] RSP: 002b:00007fda9898b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  743.001519][T28721] RAX: ffffffffffffffda RBX: 00007fda97e15fa0 RCX: 00007fda97b9c819
[  743.001536][T28721] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[  743.001551][T28721] RBP: 00007fda9898b090 R08: 0000000000000000 R09: 0000000000000000
[  743.001565][T28721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.001578][T28721] R13: 00007fda97e16038 R14: 00007fda97e15fa0 R15: 00007fff00e3da28
[  743.001616][T28721]  </TASK>
[  743.428537][T28728] bond3 (unregistering): Released all slaves
[  743.712315][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.719630][    C0] bridge0: topology change detected, propagating
[  743.762199][T28741] netlink: 'syz.4.7463': attribute type 3 has an invalid length.
[  743.963928][T28752] xt_TCPMSS: Only works on TCP SYN packets
[  744.186926][T28761] netlink: 'syz.1.7470': attribute type 1 has an invalid length.
[  744.194823][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms
[  744.194860][    C1] lec:lec_tx_timeout: lec0
[  744.203192][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  744.394722][T28767] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  744.405170][T28767] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  744.417691][T28767] bond5: (slave vxcan3): making interface the new active one
[  744.426207][T28767] bond5: (slave vxcan3): Enslaving as an active interface with an up link
[  744.565941][T28761] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  744.621439][T28761] bond5: (slave vxcan5): Enslaving as a backup interface with an up link
[  744.796634][T28765] openvswitch: netlink: Unknown key attributes 2
[  744.972228][T28800] __nla_validate_parse: 17 callbacks suppressed
[  744.972372][T28800] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.7482'.
[  745.037239][T28800] netlink: Unknown conntrack attr (type=2304, max=9)
[  745.181746][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7486'.
[  745.223128][T28808] netlink: 'syz.3.7486': attribute type 1 has an invalid length.
[  745.255059][T28808] netlink: 'syz.3.7486': attribute type 2 has an invalid length.
[  745.659179][T28836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'.
[  745.669762][T28838] netlink: 'syz.3.7498': attribute type 21 has an invalid length.
[  745.686179][T28836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7496'.
[  745.702837][T16689] IPVS: starting estimator thread 0...
[  745.723381][T28836] syzkaller0: entered promiscuous mode
[  745.752201][T28836] syzkaller0: entered allmulticast mode
[  745.792285][T28843] IPVS: using max 30 ests per chain, 72000 per kthread
[  745.823135][T28846] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.7500'.
[  745.845744][T28846] netlink: ct family unspecified
[  745.910923][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7489'.
[  746.118408][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7506'.
[  747.392040][T28942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  747.413474][T28946] Cannot find del_set index 4 as target
[  747.432649][T28944] Cannot find del_set index 4 as target
[  747.558231][ T1298] aoe: packet could not be sent on lec0.  consider increasing tx_queue_len
[  747.583252][T28957] netlink: 'syz.4.7543': attribute type 10 has an invalid length.
[  747.631835][T28963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7541'.
[  747.645698][T28955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  747.688129][T28957] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.701014][T28957] bridge_slave_1: left allmulticast mode
[  747.712918][T28957] bridge_slave_1: left promiscuous mode
[  747.726872][T28957] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.798319][T28957] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  747.973237][T28985] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.7552'.
[  747.983011][T28985] netlink: Unknown conntrack attr (type=2304, max=9)
[  748.108309][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7553'.
[  748.295760][T29007] netlink: 'syz.3.7563': attribute type 16 has an invalid length.
[  748.325267][T29007] netlink: 'syz.3.7563': attribute type 3 has an invalid length.
[  748.345896][T29010] netlink: 'syz.0.7562': attribute type 32 has an invalid length.
[  748.399022][T29015] netlink: 'syz.0.7562': attribute type 83 has an invalid length.
[  749.212208][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  749.220333][    C1] lec:lec_tx_timeout: lec0
[  749.353255][T29075] netlink: 'syz.1.7579': attribute type 1 has an invalid length.
[  749.420697][T29075] 8021q: adding VLAN 0 to HW filter on device bond6
[  749.448944][T29084] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  749.551673][T29075] bond6: entered promiscuous mode
[  749.570232][T29075] bond6: entered allmulticast mode
[  749.770574][T29103] netlink: Unknown conntrack attr (type=2304, max=9)
[  749.791536][T29108] netlink: 'syz.0.7590': attribute type 1 has an invalid length.
[  750.043967][T29126] netlink: 'syz.3.7594': attribute type 1 has an invalid length.
[  750.051791][T29126] __nla_validate_parse: 7 callbacks suppressed
[  750.051813][T29126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7594'.
[  750.128268][T29127] openvswitch: netlink: Missing valid actions attribute.
[  750.135518][T29127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  750.154835][ T6472] lec:lec_start_xmit: lec0:No lecd attached
[  750.283382][T29139] netlink: 'syz.2.7600': attribute type 16 has an invalid length.
[  750.291377][T29139] netlink: 'syz.2.7600': attribute type 17 has an invalid length.
[  750.359013][T29139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  750.480757][T29152] FAULT_INJECTION: forcing a failure.
[  750.480757][T29152] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  750.536714][T29152] CPU: 0 UID: 0 PID: 29152 Comm: syz.4.7599 Not tainted syzkaller #0 PREEMPT(full) 
[  750.536745][T29152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  750.536759][T29152] Call Trace:
[  750.536768][T29152]  <TASK>
[  750.536777][T29152]  dump_stack_lvl+0xe8/0x150
[  750.536812][T29152]  should_fail_ex+0x412/0x560
[  750.536852][T29152]  _copy_from_user+0x2d/0xb0
[  750.536880][T29152]  ___sys_sendmsg+0x1c6/0x360
[  750.536916][T29152]  ? __pfx____sys_sendmsg+0x10/0x10
[  750.536982][T29152]  ? __fget_files+0x2a/0x420
[  750.537001][T29152]  ? __fget_files+0x3a0/0x420
[  750.537038][T29152]  __x64_sys_sendmsg+0x1bd/0x2a0
[  750.537070][T29152]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  750.537116][T29152]  ? rcu_is_watching+0x15/0xb0
[  750.537178][T29152]  do_syscall_64+0x14d/0xf80
[  750.537208][T29152]  ? trace_irq_disable+0x3b/0x150
[  750.537235][T29152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.537256][T29152]  ? clear_bhb_loop+0x40/0x90
[  750.537284][T29152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.537306][T29152] RIP: 0033:0x7fda97b9c819
[  750.537326][T29152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.537346][T29152] RSP: 002b:00007fda95dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  750.537370][T29152] RAX: ffffffffffffffda RBX: 00007fda97e16180 RCX: 00007fda97b9c819
[  750.537387][T29152] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  750.537401][T29152] RBP: 00007fda95dd5090 R08: 0000000000000000 R09: 0000000000000000
[  750.537415][T29152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  750.537428][T29152] R13: 00007fda97e16218 R14: 00007fda97e16180 R15: 00007fff00e3da28
[  750.537462][T29152]  </TASK>
[  751.021947][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7603'.
[  751.146580][T29161] lo: entered allmulticast mode
[  751.160075][T29161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7603'.
[  751.172050][T29163] netlink: 'syz.0.7604': attribute type 21 has an invalid length.
[  751.205558][T29161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7603'.
[  751.483255][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7602'.
[  751.862859][T29188] netlink: 'syz.3.7612': attribute type 19 has an invalid length.
[  751.870843][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7612'.
[  751.896578][T29188] netlink: 'syz.3.7612': attribute type 19 has an invalid length.
[  751.904976][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7612'.
[  752.179074][T29209] FAULT_INJECTION: forcing a failure.
[  752.179074][T29209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  752.204493][T29209] CPU: 0 UID: 0 PID: 29209 Comm: syz.3.7619 Not tainted syzkaller #0 PREEMPT(full) 
[  752.204527][T29209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  752.204542][T29209] Call Trace:
[  752.204551][T29209]  <TASK>
[  752.204561][T29209]  dump_stack_lvl+0xe8/0x150
[  752.204599][T29209]  should_fail_ex+0x412/0x560
[  752.204640][T29209]  _copy_from_user+0x2d/0xb0
[  752.204670][T29209]  ___sys_sendmsg+0x1c6/0x360
[  752.204708][T29209]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.204778][T29209]  ? __fget_files+0x2a/0x420
[  752.204798][T29209]  ? __fget_files+0x3a0/0x420
[  752.204830][T29209]  __x64_sys_sendmsg+0x1bd/0x2a0
[  752.204865][T29209]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  752.204906][T29209]  ? __pfx_ksys_write+0x10/0x10
[  752.204945][T29209]  do_syscall_64+0x14d/0xf80
[  752.204977][T29209]  ? trace_irq_disable+0x3b/0x150
[  752.204997][T29209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.205021][T29209]  ? clear_bhb_loop+0x40/0x90
[  752.205049][T29209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.205071][T29209] RIP: 0033:0x7f2eeff9c819
[  752.205093][T29209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.205113][T29209] RSP: 002b:00007f2ef0d88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.205150][T29209] RAX: ffffffffffffffda RBX: 00007f2ef0215fa0 RCX: 00007f2eeff9c819
[  752.205167][T29209] RDX: 0000000020008000 RSI: 0000200000000000 RDI: 0000000000000003
[  752.205182][T29209] RBP: 00007f2ef0d88090 R08: 0000000000000000 R09: 0000000000000000
[  752.205196][T29209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.205209][T29209] R13: 00007f2ef0216038 R14: 00007f2ef0215fa0 R15: 00007ffcaa4a9a58
[  752.205243][T29209]  </TASK>
[  752.549056][T29221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7625'.
[  752.565870][T29221] netlink: 'syz.4.7625': attribute type 11 has an invalid length.
[  752.574559][T29221] netlink: 'syz.4.7625': attribute type 11 has an invalid length.
[  752.582884][T29221] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7625'.
[  752.662204][T29224] netlink: 'syz.1.7627': attribute type 19 has an invalid length.
[  752.670182][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7627'.
[  752.709647][T29224] netlink: 'syz.1.7627': attribute type 19 has an invalid length.
[  752.873877][T29237] FAULT_INJECTION: forcing a failure.
[  752.873877][T29237] name failslab, interval 1, probability 0, space 0, times 0
[  752.914370][T29237] CPU: 1 UID: 0 PID: 29237 Comm: syz.1.7631 Not tainted syzkaller #0 PREEMPT(full) 
[  752.914401][T29237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  752.914414][T29237] Call Trace:
[  752.914423][T29237]  <TASK>
[  752.914433][T29237]  dump_stack_lvl+0xe8/0x150
[  752.914469][T29237]  should_fail_ex+0x412/0x560
[  752.914509][T29237]  should_failslab+0xa8/0x100
[  752.914539][T29237]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  752.914565][T29237]  ? __alloc_skb+0x186/0x7d0
[  752.914589][T29237]  ? __alloc_skb+0x1d0/0x7d0
[  752.914612][T29237]  ? __local_bh_enable_ip+0xd0/0x130
[  752.914646][T29237]  __alloc_skb+0x1d0/0x7d0
[  752.914676][T29237]  netlink_sendmsg+0x5d4/0xb40
[  752.914712][T29237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.914742][T29237]  ? aa_sock_msg_perm+0xf1/0x1b0
[  752.914778][T29237]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  752.914807][T29237]  ____sys_sendmsg+0x972/0x9f0
[  752.914848][T29237]  ? __pfx_____sys_sendmsg+0x10/0x10
[  752.914888][T29237]  ? import_iovec+0x73/0xa0
[  752.914919][T29237]  ___sys_sendmsg+0x2a5/0x360
[  752.914955][T29237]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.915022][T29237]  ? __fget_files+0x2a/0x420
[  752.915042][T29237]  ? __fget_files+0x3a0/0x420
[  752.915073][T29237]  __x64_sys_sendmsg+0x1bd/0x2a0
[  752.915117][T29237]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  752.915157][T29237]  ? __pfx_ksys_write+0x10/0x10
[  752.915195][T29237]  do_syscall_64+0x14d/0xf80
[  752.915225][T29237]  ? trace_irq_disable+0x3b/0x150
[  752.915245][T29237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.915268][T29237]  ? clear_bhb_loop+0x40/0x90
[  752.915295][T29237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.915317][T29237] RIP: 0033:0x7fe7c2b9c819
[  752.915338][T29237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.915359][T29237] RSP: 002b:00007fe7c39e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.915383][T29237] RAX: ffffffffffffffda RBX: 00007fe7c2e15fa0 RCX: 00007fe7c2b9c819
[  752.915400][T29237] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  752.915414][T29237] RBP: 00007fe7c39e6090 R08: 0000000000000000 R09: 0000000000000000
[  752.915448][T29237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  752.915462][T29237] R13: 00007fe7c2e16038 R14: 00007fe7c2e15fa0 R15: 00007ffd8f6ebee8
[  752.915498][T29237]  </TASK>
[  753.344694][T29250] openvswitch: netlink: Message has 6 unknown bytes.
[  753.996975][T29295] openvswitch: netlink: Unknown key attributes 2
[  754.031174][T29290] 8021q: adding VLAN 0 to HW filter on device bond7
[  754.057568][T29290] bond6: (slave veth0_to_bond): Releasing active interface
[  754.070784][T29290] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  754.453936][T29316] validate_nla: 3 callbacks suppressed
[  754.453973][T29316] netlink: 'syz.3.7657': attribute type 2 has an invalid length.
[  754.471110][T29317] syzkaller1: entered promiscuous mode
[  754.482284][T29317] syzkaller1: entered allmulticast mode
[  754.491678][T29316] netlink: 'syz.3.7657': attribute type 25 has an invalid length.
[  754.696004][T29327] netlink: 'syz.2.7661': attribute type 16 has an invalid length.
[  754.713642][T29327] netlink: 'syz.2.7661': attribute type 17 has an invalid length.
[  755.162467][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  755.170633][    C1] lec:lec_tx_timeout: lec0
[  755.422663][T29334] __nla_validate_parse: 6 callbacks suppressed
[  755.422688][T29334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7663'.
[  755.439461][T29334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7663'.
[  755.448923][T29334] openvswitch: netlink: Flow actions attr not present in new flow.
[  756.044455][T29366] FAULT_INJECTION: forcing a failure.
[  756.044455][T29366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.105022][T29366] CPU: 1 UID: 0 PID: 29366 Comm: syz.0.7671 Not tainted syzkaller #0 PREEMPT(full) 
[  756.105063][T29366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  756.105078][T29366] Call Trace:
[  756.105087][T29366]  <TASK>
[  756.105097][T29366]  dump_stack_lvl+0xe8/0x150
[  756.105135][T29366]  should_fail_ex+0x412/0x560
[  756.105176][T29366]  _copy_to_user+0x31/0xb0
[  756.105208][T29366]  simple_read_from_buffer+0xe1/0x170
[  756.105247][T29366]  proc_fail_nth_read+0x1bb/0x230
[  756.105285][T29366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  756.105323][T29366]  ? rw_verify_area+0x2a6/0x4d0
[  756.105347][T29366]  ? tun_chr_write_iter+0x18a/0x200
[  756.105372][T29366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  756.105407][T29366]  vfs_read+0x20c/0xa70
[  756.105430][T29366]  ? fdget_pos+0x246/0x320
[  756.105457][T29366]  ? __pfx___mutex_lock+0x10/0x10
[  756.105492][T29366]  ? __pfx_vfs_read+0x10/0x10
[  756.105519][T29366]  ? __fget_files+0x2a/0x420
[  756.105545][T29366]  ? __fget_files+0x3a0/0x420
[  756.105564][T29366]  ? __fget_files+0x2a/0x420
[  756.105595][T29366]  ksys_read+0x150/0x270
[  756.105624][T29366]  ? __pfx_ksys_read+0x10/0x10
[  756.105662][T29366]  do_syscall_64+0x14d/0xf80
[  756.105694][T29366]  ? trace_irq_disable+0x3b/0x150
[  756.105714][T29366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.105737][T29366]  ? clear_bhb_loop+0x40/0x90
[  756.105766][T29366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.105789][T29366] RIP: 0033:0x7f032255d04e
[  756.105810][T29366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  756.105830][T29366] RSP: 002b:00007f032351bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  756.105854][T29366] RAX: ffffffffffffffda RBX: 00007f032351c6c0 RCX: 00007f032255d04e
[  756.105871][T29366] RDX: 000000000000000f RSI: 00007f032351c0a0 RDI: 0000000000000007
[  756.105886][T29366] RBP: 00007f032351c090 R08: 0000000000000000 R09: 0000000000000000
[  756.105900][T29366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.105914][T29366] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  756.105955][T29366]  </TASK>
[  756.574879][T29343] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7666'.
[  756.616121][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7666'.
[  756.634795][T29380] pim6reg: entered allmulticast mode
[  756.640448][T29379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7674'.
[  756.870384][T29392] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.7676'.
[  756.898314][T29392] netlink: Unknown conntrack attr (type=2304, max=9)
[  757.473828][T29396] syzkaller1: entered promiscuous mode
[  757.489331][T29396] syzkaller1: entered allmulticast mode
[  757.577137][T29405] sysfs: cannot create duplicate filename '/class/ieee80211/K��u�cr��K:����̥�B����|����lS��-!'
[  757.613410][T29405] CPU: 0 UID: 0 PID: 29405 Comm: syz.0.7678 Not tainted syzkaller #0 PREEMPT(full) 
[  757.613444][T29405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  757.613460][T29405] Call Trace:
[  757.613469][T29405]  <TASK>
[  757.613480][T29405]  dump_stack_lvl+0xe8/0x150
[  757.613521][T29405]  sysfs_warn_dup+0x8e/0xa0
[  757.613558][T29405]  sysfs_do_create_link_sd+0xc0/0x110
[  757.613596][T29405]  device_add_class_symlinks+0x1cf/0x240
[  757.613642][T29405]  device_add+0x475/0xb70
[  757.613681][T29405]  wiphy_register+0x1d73/0x2d50
[  757.613730][T29405]  ? __pfx_wiphy_register+0x10/0x10
[  757.613758][T29405]  ? __pfx_netdev_run_todo+0x10/0x10
[  757.613793][T29405]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  757.613826][T29405]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  757.613868][T29405]  ieee80211_register_hw+0x3562/0x4200
[  757.613933][T29405]  ? ieee80211_register_hw+0x1491/0x4200
[  757.613980][T29405]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  757.614035][T29405]  ? __hrtimer_setup+0x181/0x200
[  757.614066][T29405]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  757.614093][T29405]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  757.614162][T29405]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  757.614193][T29405]  ? kstrndup+0xbf/0x160
[  757.614235][T29405]  hwsim_new_radio_nl+0xf35/0x1bd0
[  757.614295][T29405]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  757.614340][T29405]  ? rcu_is_watching+0x15/0xb0
[  757.614373][T29405]  ? trace_kmalloc+0x2a/0x110
[  757.614406][T29405]  ? __nla_parse+0x40/0x60
[  757.614440][T29405]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  757.614483][T29405]  genl_family_rcv_msg_doit+0x22a/0x330
[  757.614525][T29405]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  757.614573][T29405]  ? bpf_lsm_capable+0x9/0x20
[  757.614610][T29405]  ? security_capable+0x7e/0x2c0
[  757.614653][T29405]  genl_rcv_msg+0x61c/0x7a0
[  757.614693][T29405]  ? __pfx_genl_rcv_msg+0x10/0x10
[  757.614724][T29405]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  757.614757][T29405]  ? __lock_acquire+0x6b5/0x2cf0
[  757.614802][T29405]  netlink_rcv_skb+0x232/0x4b0
[  757.614829][T29405]  ? __pfx_genl_rcv_msg+0x10/0x10
[  757.614864][T29405]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  757.614913][T29405]  ? down_read+0x272/0x2e0
[  757.614933][T29405]  ? genl_rcv+0xd/0x40
[  757.614967][T29405]  genl_rcv+0x28/0x40
[  757.614997][T29405]  netlink_unicast+0x80f/0x9b0
[  757.615049][T29405]  ? __pfx_netlink_unicast+0x10/0x10
[  757.615071][T29405]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  757.615103][T29405]  ? netlink_sendmsg+0x650/0xb40
[  757.615128][T29405]  ? skb_put+0x11b/0x210
[  757.615162][T29405]  netlink_sendmsg+0x813/0xb40
[  757.615199][T29405]  ? __pfx_netlink_sendmsg+0x10/0x10
[  757.615231][T29405]  ? aa_sock_msg_perm+0xf1/0x1b0
[  757.615271][T29405]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  757.615304][T29405]  ____sys_sendmsg+0x972/0x9f0
[  757.615335][T29405]  ? futex_unqueue+0x211/0x240
[  757.615372][T29405]  ? __pfx_____sys_sendmsg+0x10/0x10
[  757.615416][T29405]  ? import_iovec+0x73/0xa0
[  757.615451][T29405]  ___sys_sendmsg+0x2a5/0x360
[  757.615491][T29405]  ? __pfx____sys_sendmsg+0x10/0x10
[  757.615532][T29405]  ? futex_wait+0x29a/0x380
[  757.615616][T29405]  ? __fget_files+0x2a/0x420
[  757.615637][T29405]  ? __fget_files+0x3a0/0x420
[  757.615672][T29405]  __x64_sys_sendmsg+0x1bd/0x2a0
[  757.615709][T29405]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  757.615753][T29405]  ? rcu_is_watching+0x15/0xb0
[  757.615804][T29405]  do_syscall_64+0x14d/0xf80
[  757.615836][T29405]  ? trace_irq_disable+0x3b/0x150
[  757.615858][T29405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.615883][T29405]  ? clear_bhb_loop+0x40/0x90
[  757.615919][T29405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.615943][T29405] RIP: 0033:0x7f032259c819
[  757.615966][T29405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.615988][T29405] RSP: 002b:00007f032351c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  757.616014][T29405] RAX: ffffffffffffffda RBX: 00007f0322815fa0 RCX: 00007f032259c819
[  757.616033][T29405] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[  757.616049][T29405] RBP: 00007f0322632c91 R08: 0000000000000000 R09: 0000000000000000
[  757.616065][T29405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.616080][T29405] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  757.616120][T29405]  </TASK>
[  758.213183][T29431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7684'.
[  758.244549][T29431] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  758.265199][T29434] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7685'.
[  758.328124][T29436] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  758.417438][T29443] netlink: 'syz.2.7689': attribute type 12 has an invalid length.
[  758.477952][T29443] bond3: option primary_reselect: invalid value (255)
[  758.494041][T29443] bond3 (unregistering): Released all slaves
[  758.712562][T29460] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7693'.
[  758.856912][T29466] sysfs: cannot create duplicate filename '/class/ieee80211/K��u�cr��K:����̥�B����|����lS��-!'
[  758.882493][T29466] CPU: 0 UID: 0 PID: 29466 Comm: syz.0.7696 Not tainted syzkaller #0 PREEMPT(full) 
[  758.882523][T29466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  758.882566][T29466] Call Trace:
[  758.882575][T29466]  <TASK>
[  758.882585][T29466]  dump_stack_lvl+0xe8/0x150
[  758.882624][T29466]  sysfs_warn_dup+0x8e/0xa0
[  758.882660][T29466]  sysfs_do_create_link_sd+0xc0/0x110
[  758.882698][T29466]  device_add_class_symlinks+0x1cf/0x240
[  758.882737][T29466]  device_add+0x475/0xb70
[  758.882785][T29466]  wiphy_register+0x1d73/0x2d50
[  758.882831][T29466]  ? __pfx_wiphy_register+0x10/0x10
[  758.882857][T29466]  ? __pfx_netdev_run_todo+0x10/0x10
[  758.882892][T29466]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  758.882923][T29466]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  758.882962][T29466]  ieee80211_register_hw+0x3562/0x4200
[  758.883011][T29466]  ? ieee80211_register_hw+0x1491/0x4200
[  758.883059][T29466]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  758.883114][T29466]  ? __hrtimer_setup+0x181/0x200
[  758.883144][T29466]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  758.883171][T29466]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  758.883237][T29466]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  758.883268][T29466]  ? kstrndup+0xbf/0x160
[  758.883309][T29466]  hwsim_new_radio_nl+0xf35/0x1bd0
[  758.883386][T29466]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  758.883450][T29466]  ? rcu_is_watching+0x15/0xb0
[  758.883485][T29466]  ? trace_kmalloc+0x2a/0x110
[  758.883523][T29466]  ? __nla_parse+0x40/0x60
[  758.883561][T29466]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  758.883607][T29466]  genl_family_rcv_msg_doit+0x22a/0x330
[  758.883649][T29466]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  758.883697][T29466]  ? bpf_lsm_capable+0x9/0x20
[  758.883729][T29466]  ? security_capable+0x7e/0x2c0
[  758.883772][T29466]  genl_rcv_msg+0x61c/0x7a0
[  758.883816][T29466]  ? __pfx_genl_rcv_msg+0x10/0x10
[  758.883848][T29466]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  758.883881][T29466]  ? __lock_acquire+0x6b5/0x2cf0
[  758.883925][T29466]  netlink_rcv_skb+0x232/0x4b0
[  758.883952][T29466]  ? __pfx_genl_rcv_msg+0x10/0x10
[  758.883987][T29466]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  758.884034][T29466]  ? down_read+0x272/0x2e0
[  758.884055][T29466]  ? genl_rcv+0xd/0x40
[  758.884088][T29466]  genl_rcv+0x28/0x40
[  758.884118][T29466]  netlink_unicast+0x80f/0x9b0
[  758.884152][T29466]  ? __pfx_netlink_unicast+0x10/0x10
[  758.884173][T29466]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  758.884204][T29466]  ? netlink_sendmsg+0x650/0xb40
[  758.884227][T29466]  ? skb_put+0x11b/0x210
[  758.884261][T29466]  netlink_sendmsg+0x813/0xb40
[  758.884297][T29466]  ? __pfx_netlink_sendmsg+0x10/0x10
[  758.884329][T29466]  ? aa_sock_msg_perm+0xf1/0x1b0
[  758.884369][T29466]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  758.884400][T29466]  ____sys_sendmsg+0x972/0x9f0
[  758.884443][T29466]  ? __pfx_____sys_sendmsg+0x10/0x10
[  758.884487][T29466]  ? import_iovec+0x73/0xa0
[  758.884521][T29466]  ___sys_sendmsg+0x2a5/0x360
[  758.884582][T29466]  ? __pfx____sys_sendmsg+0x10/0x10
[  758.884621][T29466]  ? futex_wake+0x4ac/0x580
[  758.884683][T29466]  ? __fget_files+0x2a/0x420
[  758.884705][T29466]  ? __fget_files+0x3a0/0x420
[  758.884748][T29466]  __x64_sys_sendmsg+0x1bd/0x2a0
[  758.884781][T29466]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  758.884840][T29466]  ? rcu_is_watching+0x15/0xb0
[  758.884900][T29466]  do_syscall_64+0x14d/0xf80
[  758.884930][T29466]  ? trace_irq_disable+0x3b/0x150
[  758.884949][T29466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.884971][T29466]  ? clear_bhb_loop+0x40/0x90
[  758.885016][T29466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.885038][T29466] RIP: 0033:0x7f032259c819
[  758.885060][T29466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.885081][T29466] RSP: 002b:00007f032351c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  758.885104][T29466] RAX: ffffffffffffffda RBX: 00007f0322815fa0 RCX: 00007f032259c819
[  758.885121][T29466] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[  758.885136][T29466] RBP: 00007f0322632c91 R08: 0000000000000000 R09: 0000000000000000
[  758.885151][T29466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  758.885165][T29466] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  758.885203][T29466]  </TASK>
[  759.386058][T29477] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7697'.
[  759.540569][T29483] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  759.681232][T29492] syzkaller1: entered promiscuous mode
[  759.693710][T29492] syzkaller1: entered allmulticast mode
[  759.728015][T29496] netlink: 'syz.4.7704': attribute type 1 has an invalid length.
[  759.745484][T29498] netlink: 'syz.3.7703': attribute type 16 has an invalid length.
[  759.758859][T29498] netlink: 'syz.3.7703': attribute type 17 has an invalid length.
[  759.815107][T29500] ==================================================================
[  759.823258][T29500] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740
[  759.831084][T29500] Read of size 8 at addr ffff888034c839a0 by task syz.0.7705/29500
[  759.839010][T29500] 
[  759.841392][T29500] CPU: 1 UID: 0 PID: 29500 Comm: syz.0.7705 Not tainted syzkaller #0 PREEMPT(full) 
[  759.841421][T29500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  759.841436][T29500] Call Trace:
[  759.841445][T29500]  <TASK>
[  759.841454][T29500]  dump_stack_lvl+0xe8/0x150
[  759.841490][T29500]  print_report+0xba/0x230
[  759.841517][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  759.841554][T29500]  kasan_report+0x117/0x150
[  759.841585][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  759.841625][T29500]  af_alg_pull_tsgl+0x1c6/0x740
[  759.841669][T29500]  skcipher_recvmsg+0x5df/0x1140
[  759.841712][T29500]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  759.841738][T29500]  ? aa_sock_msg_perm+0xf1/0x1b0
[  759.841774][T29500]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  759.841809][T29500]  ? security_socket_recvmsg+0x7e/0x2c0
[  759.841837][T29500]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  759.841863][T29500]  sock_recvmsg+0x172/0x1b0
[  759.841890][T29500]  __sys_recvfrom+0x240/0x3c0
[  759.841920][T29500]  ? __pfx___sys_recvfrom+0x10/0x10
[  759.841947][T29500]  ? do_futex+0x333/0x420
[  759.841992][T29500]  ? rcu_is_watching+0x15/0xb0
[  759.842027][T29500]  __x64_sys_recvfrom+0xde/0x100
[  759.842057][T29500]  do_syscall_64+0x14d/0xf80
[  759.842088][T29500]  ? trace_irq_disable+0x3b/0x150
[  759.842109][T29500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.842131][T29500]  ? clear_bhb_loop+0x40/0x90
[  759.842155][T29500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.842178][T29500] RIP: 0033:0x7f032259c819
[  759.842199][T29500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.842219][T29500] RSP: 002b:00007f032351c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  759.842244][T29500] RAX: ffffffffffffffda RBX: 00007f0322815fa0 RCX: 00007f032259c819
[  759.842261][T29500] RDX: 0000000000001003 RSI: 0000200000001840 RDI: 0000000000000004
[  759.842276][T29500] RBP: 00007f0322632c91 R08: 0000000000000000 R09: 0000000000000000
[  759.842291][T29500] R10: 0000000000002102 R11: 0000000000000246 R12: 0000000000000000
[  759.842305][T29500] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  759.842333][T29500]  </TASK>
[  759.842341][T29500] 
[  760.060949][T29500] Allocated by task 29500:
[  760.065410][T29500]  kasan_save_track+0x3e/0x80
[  760.070119][T29500]  __kasan_kmalloc+0x93/0xb0
[  760.074793][T29500]  __kmalloc_noprof+0x35c/0x760
[  760.079704][T29500]  sock_kmalloc+0xd6/0x160
[  760.084153][T29500]  skcipher_recvmsg+0x54d/0x1140
[  760.089113][T29500]  sock_recvmsg+0x172/0x1b0
[  760.093636][T29500]  __sys_recvfrom+0x240/0x3c0
[  760.098341][T29500]  __x64_sys_recvfrom+0xde/0x100
[  760.103399][T29500]  do_syscall_64+0x14d/0xf80
[  760.108018][T29500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.113964][T29500] 
[  760.116312][T29500] The buggy address belongs to the object at ffff888034c83980
[  760.116312][T29500]  which belongs to the cache kmalloc-32 of size 32
[  760.130207][T29500] The buggy address is located 0 bytes to the right of
[  760.130207][T29500]  allocated 32-byte region [ffff888034c83980, ffff888034c839a0)
[  760.144635][T29500] 
[  760.147004][T29500] The buggy address belongs to the physical page:
[  760.153482][T29500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34c83
[  760.162294][T29500] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  760.169426][T29500] page_type: f5(slab)
[  760.173456][T29500] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122
[  760.182063][T29500] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[  760.190764][T29500] page dumped because: kasan: bad access detected
[  760.197223][T29500] page_owner tracks the page as allocated
[  760.202961][T29500] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5363, tgid 5363 (v4l_id), ts 48087992344, free_ts 48066230880
[  760.223126][T29500]  post_alloc_hook+0x231/0x280
[  760.227928][T29500]  get_page_from_freelist+0x24dc/0x2580
[  760.233508][T29500]  __alloc_frozen_pages_noprof+0x18d/0x380
[  760.239339][T29500]  allocate_slab+0x77/0x660
[  760.243882][T29500]  refill_objects+0x331/0x3c0
[  760.248587][T29500]  __pcs_replace_empty_main+0x2e6/0x730
[  760.254154][T29500]  __kmalloc_noprof+0x474/0x760
[  760.259021][T29500]  tomoyo_encode+0x28b/0x550
[  760.263660][T29500]  tomoyo_realpath_from_path+0x58d/0x5d0
[  760.269334][T29500]  tomoyo_check_open_permission+0x229/0x470
[  760.275297][T29500]  security_file_open+0xa9/0x240
[  760.280272][T29500]  do_dentry_open+0x384/0x14e0
[  760.285059][T29500]  vfs_open+0x3b/0x340
[  760.289152][T29500]  path_openat+0x2e08/0x3860
[  760.293767][T29500]  do_file_open+0x23e/0x4a0
[  760.298295][T29500]  do_sys_openat2+0x113/0x200
[  760.303102][T29500] page last free pid 23 tgid 23 stack trace:
[  760.309094][T29500]  __free_frozen_pages+0xc2b/0xdb0
[  760.314228][T29500]  tlb_remove_table_rcu+0x85/0x100
[  760.319369][T29500]  rcu_core+0x7cd/0x1070
[  760.323652][T29500]  handle_softirqs+0x22a/0x870
[  760.328787][T29500]  run_ksoftirqd+0x36/0x60
[  760.333223][T29500]  smpboot_thread_fn+0x541/0xa50
[  760.338217][T29500]  kthread+0x388/0x470
[  760.342401][T29500]  ret_from_fork+0x51e/0xb90
[  760.347045][T29500]  ret_from_fork_asm+0x1a/0x30
[  760.351841][T29500] 
[  760.354176][T29500] Memory state around the buggy address:
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 104: Connection reset by peer)
[  760.359862][T29500]  ffff888034c83880: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  760.367952][T29500]  ffff888034c83900: 00 00 05 fc fc fc fc fc fa fb fb fb fc fc fc fc
[  760.376065][T29500] >ffff888034c83980: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  760.384151][T29500]                                ^
[  760.389334][T29500]  ffff888034c83a00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  760.397493][T29500]  ffff888034c83a80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  760.405584][T29500] ==================================================================
[  760.488579][T29500] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  760.495859][T29500] CPU: 1 UID: 0 PID: 29500 Comm: syz.0.7705 Not tainted syzkaller #0 PREEMPT(full) 
[  760.505286][T29500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  760.515387][T29500] Call Trace:
[  760.518700][T29500]  <TASK>
[  760.521698][T29500]  vpanic+0x56c/0xa60
[  760.525764][T29500]  ? __pfx_vpanic+0x10/0x10
[  760.530408][T29500]  ? __pfx___schedule+0x10/0x10
[  760.535321][T29500]  panic+0xc5/0xd0
[  760.539103][T29500]  ? __pfx_panic+0x10/0x10
[  760.543575][T29500]  ? preempt_schedule_common+0x82/0xd0
[  760.549094][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  760.554178][T29500]  check_panic_on_warn+0x89/0xb0
[  760.559184][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  760.564296][T29500]  end_report+0x73/0x180
[  760.568586][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  760.573655][T29500]  kasan_report+0x128/0x150
[  760.578283][T29500]  ? af_alg_pull_tsgl+0x1c6/0x740
[  760.583360][T29500]  af_alg_pull_tsgl+0x1c6/0x740
[  760.588274][T29500]  skcipher_recvmsg+0x5df/0x1140
[  760.593257][T29500]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  760.598657][T29500]  ? aa_sock_msg_perm+0xf1/0x1b0
[  760.603633][T29500]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  760.608949][T29500]  ? security_socket_recvmsg+0x7e/0x2c0
[  760.614557][T29500]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  760.619954][T29500]  sock_recvmsg+0x172/0x1b0
[  760.624490][T29500]  __sys_recvfrom+0x240/0x3c0
[  760.629202][T29500]  ? __pfx___sys_recvfrom+0x10/0x10
[  760.634429][T29500]  ? do_futex+0x333/0x420
[  760.638799][T29500]  ? rcu_is_watching+0x15/0xb0
[  760.643609][T29500]  __x64_sys_recvfrom+0xde/0x100
[  760.648586][T29500]  do_syscall_64+0x14d/0xf80
[  760.653236][T29500]  ? trace_irq_disable+0x3b/0x150
[  760.658296][T29500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.664409][T29500]  ? clear_bhb_loop+0x40/0x90
[  760.669107][T29500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.675026][T29500] RIP: 0033:0x7f032259c819
[  760.679475][T29500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.699104][T29500] RSP: 002b:00007f032351c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  760.707546][T29500] RAX: ffffffffffffffda RBX: 00007f0322815fa0 RCX: 00007f032259c819
[  760.715542][T29500] RDX: 0000000000001003 RSI: 0000200000001840 RDI: 0000000000000004
[  760.723538][T29500] RBP: 00007f0322632c91 R08: 0000000000000000 R09: 0000000000000000
[  760.731545][T29500] R10: 0000000000002102 R11: 0000000000000246 R12: 0000000000000000
[  760.739538][T29500] R13: 00007f0322816038 R14: 00007f0322815fa0 R15: 00007ffc85b05c78
[  760.747550][T29500]  </TASK>
[  760.751207][T29500] Kernel Offset: disabled
[  760.755544][T29500] Rebooting in 86400 seconds..