last executing test programs:

5.0062155s ago: executing program 1 (id=2693):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000980)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x15, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0)
bind$isdn_base(r1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000100)=@llc={0x1a, 0x312, 0x6, 0xa, 0x7, 0x5a}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)="fb97eedbf825edb0d2afc19b9861f614346f", 0x12}, {&(0x7f0000000200)="55870ac09b9a1d3428b84fa707c03e3c887e4c31e35f757848797b0a8eee4a9293ecd3f753a153ece26b6f294b37ebc26d64540eaf64dcdae58e0de756f27f53ebec09db579a499970b9747b0fd5793c5bc2327390679a", 0x57}, {&(0x7f0000000280)="b396cce4703ecc88e6ff43f770ad28ad6ac42c7cd9c83a3b9081ec939f01767631615e0fe2d47ee5b6b9d3837e3570c8020b6a9ee19697d70cfc62cf12210dd056555934ec89a39b67b984e5d0fbf12ab8a3b8851c31653c6cd80f4deeb2768ed0891eb88be45c292ebd73df7692d424cc374830bd34e5e11d9c53766e48e8cdd80bb6813f71aae32cdef52d7317448d3d632a71aac9614238ee67ac7773ca794622a1745e68e52644f5ea762a128e93d1af245fab26c7158144517b99b1a50842f3d3d105608e75eb", 0xc9}, {&(0x7f0000000380)="32d4aec069603737dc20c70cd79f2cbaacd08aec94196be7d986db6b8c1219af2ef6445fc803830b78180526ef9aef9307222c6f2e277e9cfe4992c7be6d6433695131877a76a61becc4630f7854cc64a80f0985571d55559d1a7a43e8d497990f36ee74a0eae5e8372bc016f07f49dcb41a4f9b00b1e33f9728a02201462b2b6c3602604ce9178d295c", 0x8a}, {&(0x7f0000000440)="6f2237f84283d9c142d4b7061043a7d35ccd7f52890c5d88a2522539c34a5bcaba48279612cb8b28b7a8d57126364b368288ef20907331db4079caf76355e8e4741b185235fa923ea21a3bf22893b6ec166be6206ca52618d651b606c07c12fee6c4c74570eb26d093a54f066c9dec748ec733509ff79d243a23fa2fb179e4818fc0c8f9590649e9fd2402cd132b27e7771da1550bd59ce82b0847dffe738c3d3cd3b4488fec59933742d363cea00fe68b340cc730db7c1636e7bdd886c7dff9a2cdd9abb1caad920964f1ad7fb13706cbf620518b7a79afa25441170b7fce52973874", 0xe3}, {&(0x7f0000000540)="fb5bf6dc653b2318caf24819937525d3c3160f865d7cf2ead29591aec5851bffb6f719cd88cbf5e420fc276792e420f0ed9eedbfad7f404cd329c0f06d81c8003ebee6b234fab7a801149e3ec75c07dace9793558a6c09fd424798519b112e60ca87347465539afebca1685aeb144460b236f628376c5864008ffc63599897fb75af378fdc9a63eaaad071c53b5a1995b75d18c36284eb4dba89c705367c386ccfa9dabc626cd995a6c376bd34e03ee744ac136ececb2e5663164e2395141f841bbf89a066", 0xc5}, {&(0x7f0000000180)="b88128b2fdc6d722bd08b897eefa2be322543806cdbe6c391d70ea07ed1d67fbb34c552c", 0x24}, {&(0x7f0000000640)="72340dc9414011748b89d63285a3f0db770f921a8a2ec7f3770be06c47666ab9548dffdf02557e41490864e2dc21b6a29402eb95ac85a60fbaa93ff9c41816b7a37a2c9d34b94d2e055c74c88c10a2eea6470af3425dc8f98434", 0x5a}], 0x8}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="a028a4cee960bbce99805e7af2e1aba2db807bd3ecb20c2bfe8972c4bdd1148eadb39fc19ec28c97e22cc4a0522d971e21f50aad2e47afff385c5d7bb5", 0x3d}, {&(0x7f0000000780)="8318015cc89fe5bfb56518985c4d25a5bd6e06ee3589ba37833d12b726c6f06a471023a4b3c5c1c2791ade8e0f6adad125e7c74f61f65fe5427982344401ba469cf21040a7272cd7239f45f0f86db2fdf350ad079e5a971857b01b6b576db50a5d5893e4369e974c7c420d1e2659b5a35b3231cc0e533c9c7300f4d3dbaec6775f3b9b626a2c3b7fb547b4208ff65712e7c542b366231e50309398eea352911fab38d253850b6deeb44c0cd370c9e1643584908fe239ff660b286be9dd9b1c6755ea5f345a6847c8d7cce035cef4686b9997050a0a0d7886c0e29af1f017b46fb9ea07d84fdf9ddec19038384ad9d1ca85c68128", 0xf4}, {&(0x7f0000000880)="ac9309935684731e84bc0fb4b82d6f938329f84dcafc7ee3e3b36aca36578048e6d353a3dff56327f43d50c4905b3f86fd7e1c8eadc85427baf27c8489f84dc47d64e274caa254ca8d081c0ffebbba5b5f753fdcdccddcfd2ff5d381edda0a11d7a79464804a1102695b0c14108c8aa852a11fb552e88fd985b43714f65110343e0ff2ff41fe6440f9506fa100973caa9fb3c12489e8fa32e137e9db01122e51f300ddfab1e7", 0xa6}, {&(0x7f0000000940)="1b9f5d31ad910740a5689966ad108baf8f953fc0", 0x14}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="780c81cb3b1571ffc5d0", 0xa}, {&(0x7f0000000a00)="883d3ead0edab8132cfa70748dfc4ddf52a9431447a08748f66a78995b884b5680eaa2bebca892abb75a4f978c7f5f9a471eba54504f017c4cf723fb3a76bb9903215c95a4f97319658faf52118027f4c82bea524c6d6cbb830c5838b497134ee16732cd96c0a0060274b823b142686b8486f1e04c7fdce3d46d913d234b84e5a6aa2882c7f83a72ec8213ca3e466bba94bcd2ba92bf72d18048f7304a8cc0cac63cbf2dc1cd70b7c0d861fb4a9947c12c8fb3d6db18d8fa2196d8dcc8bc13d3ad58ee810f", 0xc5}, {&(0x7f0000000b00)="66e018be02f6f722ed1936f6698ba240cfd3472982293e05749346cdf21f99650c65c9a7fb8b44a95ff1c1d4f0d3631be808227a765e", 0x36}], 0x8, &(0x7f0000000bc0)=[{0xb8, 0x114, 0x5, "cbd324ddf33889311288bca030726795d2deba37cd949a5d63a43df79a30bbad2bff7ea69b87138391620f39b156ef2da31c98ed4d4e932b8dc5193066b2d087b2dd737521a52b8c45733f15db6f4fefe4ad7ac7efcb940b1f2141d6d7541a116242c10f990fc30224bead7510c0ed7c917390df462c14be292b2550a7689beebacab7f23178b03d7f073a16be2efc36cbf7add9eee38d099cb711a25684ea132e88ca"}, {0x78, 0x115, 0x0, "9f303f92ec9d1a61d41680903790cdb8246376663e82f01679bd5256972cf612c44688d236a35434048d3a15ad09f7c718042203c01979da338533974b7ea613bc80ade9d0201c19cb8793474777628a2603a62fbf06e9a36310ce7ca7f9aebbfa"}, {0x20, 0x1, 0x2, "2bcd72940f4b0b560bb6cf18"}, {0x100, 0x118, 0xdba, "40eb2fed14089f0e88580b380f905446d7b19658533439fe5ee3d99a1f2c5342d6dfc47de0fa591a990ea852bfa88acc42cdb46deb8d189084b281bfcc50582c6b0f840811d22b2665e7690e782ca29d9e8c9629308650f552d545e1787b547b4ede4e484c1fa1a119cde0560a23cd2662dd23c7c59c19b60dd0e8765fc42bf8d9ae344e33bef5a5cb31296ae07b1314007edb3eac59fb273a5f1395b05ed563e8524d2e5ce577e61269e789d13717091b2dd49fc1c45701526c37b99588bbe2dc2214c3747b466026ff55822c947ace7fa8fde5d5de5a41a036f87236ff390d10d7c4ec9a5a33bc96"}], 0x250}}], 0x2, 0x4004804)

4.875435879s ago: executing program 1 (id=2695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = epoll_create1(0x0)
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe000200d})
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010080000000a00000a140000001109000000000000000000000100000a000000000000e5"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000810)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r0, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900030073797a30190000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r3, 0x0, 0xffffffff004)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x110, r0, 0x25bd8000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000080)={'syzkaller0', 0x32, 0x30}, 0xd)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000d500000000000000000500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

3.652325083s ago: executing program 1 (id=2703):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r3, 0x8918, &(0x7f0000000380)={0xe0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)

2.894357822s ago: executing program 0 (id=2705):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32)
socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYBLOB='Cy4'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @default, @bcast, @bcast, @null, @rose, @netrom]}, &(0x7f0000000080)=0x48, 0x80800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000000c0)) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0}) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001800)=ANY=[@ANYBLOB="7eee16b5ff4f"], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005000007"], 0x4c}}, 0x4040810)

2.715164138s ago: executing program 4 (id=2706):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x9}, 0x8)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180800f5d1e17b29248100000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300)="75816c5c030000000000000073b6a87ebd937d")
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040048}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002a80))

2.398326709s ago: executing program 0 (id=2708):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r10, 0x3f38e000)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000140)="24000000010006", 0x7)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r8)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r13, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r12, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r12, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r12, 0x1)

2.368834494s ago: executing program 4 (id=2709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a6c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f000000a800)={0x0, 0x0, &(0x7f000000a7c0)={&(0x7f000000a700)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.234911613s ago: executing program 1 (id=2710):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x1a, 0xa, 0x7fff)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='pimreg1\x00') (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
unshare(0x22020600) (async)
pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000500), 0x4) (async)
r4 = socket$inet6(0xa, 0x2, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x14, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="98fad5709c567926", 0x8}], 0x1}}], 0x1, 0x5) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
close(0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)

2.098170061s ago: executing program 4 (id=2712):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r5, &(0x7f00000006c0)}, 0x20)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r8 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0)
recvmmsg(r8, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/63, 0x3f}], 0x2}, 0x4}], 0x1, 0x2000, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r8)
r10 = epoll_create1(0x0)
r11 = socket$tipc(0x1e, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000500)={0x14})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r12)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

1.798483892s ago: executing program 0 (id=2715):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x20040040)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
socket$unix(0x1, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x85}, 0x20040040) (async)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
socket$unix(0x1, 0x2, 0x0) (async)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async)
recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async)

1.650192413s ago: executing program 4 (id=2717):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x7, 0x6361, 0x5, 0xf, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffff22}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.648434836s ago: executing program 1 (id=2718):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x800})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000240))
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.634280753s ago: executing program 3 (id=2719):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x9}, 0x8)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180800f5d1e17b29248100000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300)="75816c5c030000000000000073b6a87ebd937d")
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040048}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002a80))

1.534878318s ago: executing program 0 (id=2720):
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000080)=0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}}, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f1e6ffffffff0082bc4713f4ba0ec70003b3", @ANYRES32, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)

1.458658272s ago: executing program 2 (id=2721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket(0x15, 0x5, 0x9)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce)

1.362038824s ago: executing program 3 (id=2722):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000100100000d000000010000000000000014000000000000001001000002000000000000e6"], 0x30}, 0x40000c4)

1.235856967s ago: executing program 3 (id=2723):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004f0039"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0x7}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x4c}}, 0x0)

978.414155ms ago: executing program 2 (id=2724):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="de13e08088f4b5e4f6ea9e3a03c10f0990be1285d788e4d81e29ae90e824000c8c3da4c11d81340c4364a4bdc87edf380d7d9f36dde167b5cf57cdebbdb9d826180d823d2d3e5275110ae9bb5b9af1b4c290362b25f83a1d19b20cdab8bb4dd370b2cb08b353a36502c950c781559e8c5e39b670deb3bfeab9", @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x58}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffeb5)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010003904000003180000000000000000", @ANYRES32=r3, @ANYBLOB="8106010000000000140012800b000100627269646765000004000280"], 0x34}}, 0x20044002)
r4 = socket(0x3, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
unshare(0x400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r6, @ANYBLOB="14135d4ac50549636a135481cae3d20007000000"], 0x2c}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYBLOB="140002000000000000ec349709fd4f464900000008000800c104000027e9a4f66679d1e836682c10ce068e086e842f24ccd8d8cb3e59a4c675c4081a5406b6626adefd367075f78b2125b0538278e47addb54f8471da14a8008f297ec4603a88c876a6f417e51e32561a2469140fe28a9da984c61eaf49f3382d849fd55b9608ec44a628d050660e31d240d2ce601d3485fadc99dfe70089d8b7788553fa2c2cdd51bb7daa00acd174602947022189e0d1a6858a93661f55c3c5d6dbcb90"], 0x34}}, 0x41)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x1000}, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'vlan0\x00', <r11=>0x0})
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x40, 0xfffe, 0x9, 0xea]}, &(0x7f0000000180)=0xc)
sendto$packet(r9, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14)

895.424848ms ago: executing program 3 (id=2725):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100021"], 0x44}}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010429bd700000f1000000000000", @ANYRES32=0x0, @ANYBLOB="9320000000200000380012800b00010067656e657665000028000280140007002001000000000000000000000000000208000b4000000007060005004e210000"], 0x58}}, 0x20000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000400), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000002c0)="c2826462241ae46e90316d1e002dcc119cc9543765ca8de0916d98b2f8f1c48c57e52ef100ea77068ba2726cfa0c3fd34e97c6a2d908ba19ba062fe929f7de41da26f0b5351e23941394c8829825ef84133a526d3eef0bf77b0773b792ecba503824ad446bf0606417183b6c12f0524c405e01e6580cb403b5c5abf1ccd63ed1c4664a13ac3025e4c97e77e7046f3e1045d791930e63a747452b0404014fe3c6", &(0x7f0000000440)=@buf="3ff637d32c9dbcc95f6655f6c90b6a96eebb57788207047be37c7d2f03047fa73c8277b2b343381af71326f395b51a083d93f0bd0d99869a0950ac8e829d897aa91edd3443512f803276a84593cd52cca69cef7682b8607df350c9d760c8ee571ab085413dee69f5bea6bcb9083f76bb474189b081159776dddd327191eb7cb4908cb7f2c6267423244f7b99345b9a97faab64d6731e0aa35a23585dfda4816b73f03ef197dbe34de869eea3f4d9f7e2f911175d52f1eef097a47252a3af78847840c73cd0db53e726bb2e66af391b0ae1aafeed076db507d66de7704753a87f9516e46a582cdb70", 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="af08000000000000611065000000000006000000000000009500080000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100021"], 0x44}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010429bd700000f1000000000000", @ANYRES32=0x0, @ANYBLOB="9320000000200000380012800b00010067656e657665000028000280140007002001000000000000000000000000000208000b4000000007060005004e210000"], 0x58}}, 0x20000000) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000400), 0x0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f00000002c0)="c2826462241ae46e90316d1e002dcc119cc9543765ca8de0916d98b2f8f1c48c57e52ef100ea77068ba2726cfa0c3fd34e97c6a2d908ba19ba062fe929f7de41da26f0b5351e23941394c8829825ef84133a526d3eef0bf77b0773b792ecba503824ad446bf0606417183b6c12f0524c405e01e6580cb403b5c5abf1ccd63ed1c4664a13ac3025e4c97e77e7046f3e1045d791930e63a747452b0404014fe3c6", &(0x7f0000000440)=@buf="3ff637d32c9dbcc95f6655f6c90b6a96eebb57788207047be37c7d2f03047fa73c8277b2b343381af71326f395b51a083d93f0bd0d99869a0950ac8e829d897aa91edd3443512f803276a84593cd52cca69cef7682b8607df350c9d760c8ee571ab085413dee69f5bea6bcb9083f76bb474189b081159776dddd327191eb7cb4908cb7f2c6267423244f7b99345b9a97faab64d6731e0aa35a23585dfda4816b73f03ef197dbe34de869eea3f4d9f7e2f911175d52f1eef097a47252a3af78847840c73cd0db53e726bb2e66af391b0ae1aafeed076db507d66de7704753a87f9516e46a582cdb70", 0x1}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="af08000000000000611065000000000006000000000000009500080000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) (async)

797.348577ms ago: executing program 2 (id=2726):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000030000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

638.46899ms ago: executing program 2 (id=2727):
r0 = socket$kcm(0x10, 0x4, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x40000)

624.412061ms ago: executing program 4 (id=2728):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x4, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x1, 0x40}})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x6}, 0x38)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYRESHEX=r4], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4014)

493.352678ms ago: executing program 3 (id=2729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8c0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0x0, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0x101, 0x46, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xc, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0xfffffffd, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x2, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x6, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0xa, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x7, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4608, @any, 0x3, 0x3}, 0xe)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4844}, 0x4800)

467.974079ms ago: executing program 0 (id=2730):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50)
epoll_create1(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)

374.239116ms ago: executing program 1 (id=2731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000070008000540000000020900020073797a290000000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008000)
socket$kcm(0x29, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000002c0)="e8b43b", 0x3)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/113, 0x71}, 0x9}], 0x1, 0x12141, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r6, &(0x7f0000000a00)="c3c04476cff7893f0c1ddad39115ddfa387b349d15d90f31cd5192f57a333a43fdb2f03ec1a880a31bdf8a8f53789865bf8cb20f60bcc41b411b8fdf29a93262d74a7bb8b6d74c5a46e4e7fc8dccea04ce1e9a158d5f6072b7daf0417b583761dc68e22561cf077dbb869de67f13e54fe2286e257853c553c13d1197a7ba5d5f6f45af116dca19692edf02c879b49a772269d13f8a35484fe809b120478863afe5b177914fb3a62e1364f237e27dfda98eeada1e20897e8b956c661f701048492cce29ab0317469982e339fa3438d7c95f1931e9eea22fc0662119b8857b7043b3c189431df384c3cb4b0f562a1041bd5a58b828d1bb96861b6777e633895f1870090df01bc94f67496edb6c46174f21a9adfcf3c1a35de997ff7c45a022618af99f0d0cb3131b0645af4ab514afa429d3d1a6520af5b10a1365936fcf6247c1c240495cb158ecb8589b609475c1e85fa68155a2bfea55a8cc5aa331355c651b5d3e2756d4a6a05b6a65859b2133bfa39bfb7e76672ef1fccdaee3280a49506938130d5a6a75670c896187f14064cd273c5da033eb33ffa945c988f3c55a2a3940c1a670aa96417e4639804ed6d08defbb2f05d2b4dc5c7c3600433c0f102543e0f83be8a93d575bdb8dbab31d5c419fb4b5356bd170cabfefe796fc5917674710e18261caa32eab1a957cd48216505b7ce2be32ecb929f6a23043bf6b40e0a888753f33845e515368cce8602c45f7a6940dd036675cfe963ddc05709967b2a0df10b5927d19ebecb5a993b793bb8ed4629601f2b54b7c2fdd3780756152272c01fafd90579699bf5a7dfe88fc6b53cd71403f25d934d3431a85972bbf972cab20eaf72599482961c6a62d354613579d9691db3d30e4d76dacfc5bffce5c77bc558c39401ee7d20cdb573d36a0a2ae10f5eb236d162e91a9271840b19b73c7a471b816570b378d468e2cc515bfb05ef957dbd634d00a09f959377afca60d316a589e5567a2bb591703d3e7c24ff460086b4f1eb43c6e901998ed25616e7abbb1e464c7a236ebd9f99ef1b010b0f38f8ab1e2210d9612f316b4ccb6c45ce6c6350df3730ee693e83c5a9467263c69e96f9362935fbd03e9e7bfcfeb5871758e2375beb9d34daef5807a77d639a9703012b910faa335adda510ece61193304ff4195ecd91ee53a0f487bed8eaa85a20f8184ba22cf4bee1db526d26332125b83c3d77e315aef289c1cb1f5f1de420fb9d5581dddb8c9f732c06142eccd58a89d513da49e8f514bea1d1cf7b16faf73854a8efcde4336d0f1e6716ec70d99e86470503e47d4c502e6e94488acb67283d26d25c75ad54160e059a0325efb7224cbbc377f31aada7065735fded29c3065b1cd65d614bc9593b826c6e6fbf10ba05d981c78a9882aa47b1a7b20de65c63ba1f70e8597b2d536951fc227e4756bdb2ccf4b5852cba4d8913950351a8d94ead5826512c627ea420f1e3d9ed1773762acc968ce4b3c9d155ec4757a8209b5b21442d9aa2a8b44186de46710732f5110b840f33c71c4466358f4e78ba3e430845f7b23541ec6d80f30b178beacf9ea664b97f6c3eea62d9d4185810e3390770a0218d1a7b598b6edbed9f8b7668b45f5af98e50db05ad2b4e3e769f5fa7f89e67c00e73e9654dbcd7ac8549c6c13c1d69f87448b8c36dad08f4c6370f7c378ecb5d6b08f6420099846006fdcb36c4e9e2ef3571decf31e6ac2a7ffce68a40fcac2624e13bc618eb2dd126fbadea1f8a72107599f1732a468a0937d041d9c94bab052833fe6c0b6bb4da332bbd17ad88de013af24dca2ea627c234b883da425cad484aa218c23d6add1ea70cb31c09bc6542d20ba7a69e3435a12f12461206b976a1718868388ab2e2ef7b19adbf0837063f9a7a04c61761e120cd618212423e09a6922154a08d6397a0cc19e4fffcaf6b96c6f9762045ac04b8b45e0e5e962d3d5defa8a23aba9178401546d67a405062d77d78a7b0347ac6e3851cff00ffb750768a9dfb0e507ac05f2b6cb0e2e83882711ecc15d7c8fea15f5b5e247f2b5d0572441675bd724f785b61fc7a2091ffcb08d55e2ea5449a5b5f8f661bbf67b0773871035d5b5eb512a23eaeb9bc04cad1c0006eda20ead79d0fa0921298d147df1b00338e34d03964e12024411b685f92a0091cb14abc29da5922cdf7244fdabfb06da0afa1d03cbbb1d56aa84b0c9f1860c03dccc67933b2030c8436761264d93ba04347710fc9c6920f9ed166dc1c9308690c20ead2c2748a9179000a12c2568727e3e5322970b3dd433bb8d8cff50afe5c275e1eee06773ca41db2be3e99f791f7f36bf4c4769df892917571d4b0f9d3dac46c7c0c008dbfa7bd7761d571a4907210215bf1cb491d549c5ff421fb4b6faa51aa4f7485fa1ed7d59af3fb2e3044b650b88368bbf9b8eb462dc325801674ee82f0e8974667c07c452581914221581340a7ba142077faeaf5cec00eb2aa05995c090a769ce399419e46b24a6c8ae033f9d417edc274224977634ea64b405363c906ebd1d92e3b282f9088aa33bcfdb8ff6ec1d44099e156ee04bc0e32c9e5323c7fe1887c572bbebbf4e947a8c53d520c03d5b19714e90eaa7e460094854ed5a1b671c789c2fe724178aab27711bb4c57682c5697aca7b65e90ad92f0d3818965ae13d85142f895d7160b356d4d55a064f98b79bb251e495739cc6a93ecd99d9f99fa290a17cd1ae8b37c2b4b627b6c430ce72efeeff8d9457c8fa8dba13f0a86e638cdd2ec167ee6ae92222ba1ed910ef237a30c36c628bcc597a366c4f73e2c810e2f7d74be16e9a4b3f062edf62d90bdab8a0f967d1742cf75d1f4199ec0cb00ec24db040d17da06be876f292493946a597536fc0f05f2813efadcdda9bc59c1ad168f11df707de69eabbbcd9469d976893b4a34803792403288653c825bd794a35c3f90194762ad6c6c757b4af89f97ce96ab2e95ca7877f9b41978c59c2c3cfebd4ea6b58b11334f9ddfbf858253d696ab3c6af322b36cd0fa55171ad80da2245630f0cf75ad72e08852b1313229177e40841318633e22129a4dde1d936d3b62cf3bbe21a27fdd5c3133df8d1cd51099b3ef9c175bec4f8f88be53cb778d2ddfb9a3798171d95f9f51ff52d922efb91fa971a03f5237cf7e973d29fe04ff1dd04e2a48dae3eb6b0421aaf8bcfa9a114574cd66174f8c6b7974ea36c8ca8a0cc9bc07cf3e3a8ea494e786949bbef226f2a77de8689967ce28b9d2ded3864dd3deef7f55c3e490f67c6d2b11940a64dd2a6900480d25ae311c1eb230ac176ab21ddf931aa0d56d13e174a9cd5fc2f391b8c3d42a7b0f1632bc2f068b1496f19a1e6b8a346024112ab2563ef9bccf60441ab12170e02cee6fe98aee23134e894fa87fc9778312c34c0704a752d01a36cf7664e01247bd7a6981235247f37da20aaffaa7afc1c4581769cb6f8b2019a742ed09d414bccc10c5dde0b682b53ed346e82386ee0e68c4870206aa799022efb98477565b2fe01286f2902580dc4ec1039160ec6a36066832f4dbd482ca630e7a878b634882321da7d5a81e74865c94844a4f9c8a70f0030896c4d765a30bc7613bb8ac009883b70e4d7098c59f12a52ae4d58384674f4809f0545bb07fe2787586eb16457e80aa38a9d332124fb08b630ca7ddbe6ee6ca52217f0cb85e4cc5163c1d661021e3a4d2f5e59e389e1ad3efb683c7e1425505c4ca2b583b1ea8f15b0f4567993a62a540159f33e8a606810d5aa9d300f16e037d1ba548729cecc5128af2a449af256305c47c4139aea7beea2bb604f969ba6ae6d5f69e9d30830570a14b193d7a4a3c41cb733435174c4695f02ba0899fde0f6053bd903c05190569f2248e8a00c1d5a581572dc551adc5040fb56825c0dd52f30f454166c305564f541573f4dd74287add42b9f216379e6149b34984faf20f69d91977ab916b7d3e4839ebb3e66d4f8291551892dd2039a71adf322d7261e346504cd361e88ecbb4c45685b2d69f0eb6912d7e49c56ef058b3b123f12959ebae6a44dbef1ce9d1d0e7ca0df50dfb5243c71bb5d572e8599ec243eca45ab09839ca8c7a39f78041d687246c207aaa233e7eacfa3bc15c8cd04a8e9b3b7ddb5921bd40a0d7e31ae3bb666ae1d0369f9f1f9bddd5f489f7aed2e21e0d452f1c49447a6e39910ca24967be0fe080087ffd1705ec81a334221d13ec2b8f79618b74fea80a7ce0f48790514721ac90b68e4df8eb31e0a38a9e58bdd9bb9c119cd40ddcba38a9fdef987d4b68efc7afe33b36d416618d34d4651ff639fbc545c9258b82363cddda0bbd7a7b7b1dc806510bb7dd5a9f9c2cda74b25551df27ea1cbaf441893bdeb8c5cce9be1e712a620d84f8d5d685ddbfb0b9825d15b0c0cbc94ec2039275b048bcc3e977d426f9a6234701c14678c9524ba17e2c1074447ee51103e908ae7158d14a4995576e44753801ced5ba6342194cacab26ac0ab8c37fc2a41382ca5d6a1e39c213cb60c419bc18040304ef52f0986e7de053442950b700f1c09ea88634415f0ddaf0483e3f38c3ff4f3a18a6c7bbd081fffb85e122d51e44c7326e17905c358d2c6943b4b9dc16db9a8ddbe322f78594eafb1a229dfec9fb599e33b47d905fa0d3b08e054b36ffd9d258fb6258a59e72a9016de9315a4e120cdaa4febdb7e9d5b14153293f8ff56757056a71e52642436aa72ba767e4606c1b8aeadba145dfeea479e05938bbf25075a8a70120569ac0e96376a6eb3f6087f81b27ec90b50708e67299b59e3ff1b9af464c67c6704b35233b2dabe4a822a0eaeace146acdb8efc6560c282aec2493953e11415e890ae16464899bb6e71b581f228dd53a9818517f8d31cd9f527e894541011422d90e9285c4ef51fd63a7c66e47d0ce7fea6a3f65ba6139275c1944c8ec447e091c9afdc01edcfc88efc10db9cbb452ae57fda7092457b66bccf84cb3643ca9e8ecd905d7ab047f3295353888db3eb3d63ddb30fb45ecea592d9de9973774283e753f2282f1cdc3245780444430829c6efaef0630a8e1fde1a1576527e95c5832efd50db1dcc0dc8acaf4f40f61825b667cb6a39a9c43bc6de62259574d6b9e564f9e9db85015f1f60cc9df1aae42a4e0b8c3e629d93b169a2666449e69a85cc0f5c50d42d247df8ec3cb83ffec24266383fac6b04103240cf060000b7a86faeedf701e31957df644e5d0762cd10cda071b62b8ffe59eeba94bdfe12ea4f03d85f42a7577305dfd86de24721bbaf149c0f6b28676acbe95853475791ce711330a2158865fd9fee02e385ff24d675dad4f436620453e6342249aaea6b81d1dcdaf4af3245313dd2b263e711bcf8dc1a6b822beecc1387f1e2b5aa9484d683e3f4c44bbcb944f7f4da15a1f6e783fbdb8699d731a22db3ffd0be846cf8e6ce75a483f7cdef1b69a04c2fff61e978600fca4687cf16705918aa891968f81eb54a542ec01a1aeb4bee1bb27e18bf78b01e92ea5e0724e36655138f5d69c2806009b4a7f3b6ce797b26c70d838731f43686614aadb764e960b775f742b12896a5e194cb5d7657ddbf86b186d6c7b8ae6462830cebe149811fea6a23736461ed3d23d20a1dc4c2c668c8a2b09c3d80c568180e28cfd00f800e5fc3d8897d3c86822c7ba1c3bd5c19458a34db7e55053db0b7bf0c3011eec6bf229cc52dbf5206ea8bc265a24da94deca1a394fe2cdc945e24855b79c72a184e16c8d94b7b65cc0a1e47fc6b544b1b09a7c81d31117801e36ae29a6741175f5889699baaed84accbdc6d4f48", 0x1000, 0x40000, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x2710, @hyper}, 0x10)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x42050004, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32=r0], 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8, <r10=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x73)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r10, &(0x7f0000000000), &(0x7f0000000140)=@udp6, 0x1}, 0x20)

348.357419ms ago: executing program 2 (id=2732):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r0, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x9}, 0x8)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180800f5d1e17b29248100000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300)="75816c5c030000000000000073b6a87ebd937d")
r5 = socket$l2tp6(0xa, 0x2, 0x73)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r7, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040048}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002a80))

153.148773ms ago: executing program 2 (id=2733):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000200)='./file0\x00'}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000002000000014001a80100004800c"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x38}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xdbb}]}}}]}, 0x40}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x1ff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e80000001200050929bd7000fdd9df252a0904004e254e26fdffffff24090000080000000900000003000000050000001000000000", @ANYRES32=<r7=>0x0, @ANYBLOB="030001000010000006000000ffffffff990001000d8b94"], 0xe8}, 0x1, 0x0, 0x0, 0x26004811}, 0x2004c080)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a3200"], 0xd4}}, 0x40880)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(0xffffffffffffffff, &(0x7f0000000040)="050000000100", 0x6)
r10 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000000000)={@dev, @broadcast, <r12=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r13=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="adb45e8800000000a000128008000100767469009400028008000400e000000208000500ac1414bb080002000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000200070000000800060000100000080006000100000008000100", @ANYRES32=r12, @ANYBLOB="080002000800000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800030004000000080006000100000008000100", @ANYRES32=r12, @ANYBLOB="080003000104000008000100", @ANYRES32=r11, @ANYBLOB="080006007300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYRESDEC=r13], 0xd0}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

111.677889ms ago: executing program 0 (id=2734):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
shutdown(r0, 0x1)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
accept(r1, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c00078008000840006200db05000500020000000500010006000000"], 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

287.995µs ago: executing program 3 (id=2735):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1404, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x81)

0s ago: executing program 4 (id=2736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 2)

kernel console output (not intermixed with test programs):

? __pfx_ksys_write+0x10/0x10
[  218.224776][ T9141]  ? rcu_is_watching+0x15/0xb0
[  218.224813][ T9141]  ? do_syscall_64+0xbe/0x3b0
[  218.224847][ T9141]  do_syscall_64+0xfa/0x3b0
[  218.224872][ T9141]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.224899][ T9141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.224919][ T9141]  ? clear_bhb_loop+0x60/0xb0
[  218.224944][ T9141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.224963][ T9141] RIP: 0033:0x7f4c1d18eb69
[  218.224982][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.224998][ T9141] RSP: 002b:00007f4c1dfb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  218.225020][ T9141] RAX: ffffffffffffffda RBX: 00007f4c1d3b5fa0 RCX: 00007f4c1d18eb69
[  218.225035][ T9141] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005
[  218.225046][ T9141] RBP: 00007f4c1dfb9090 R08: 0000000000000000 R09: 0000000000000000
[  218.225058][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.225069][ T9141] R13: 0000000000000000 R14: 00007f4c1d3b5fa0 R15: 00007ffc072127d8
[  218.225106][ T9141]  </TASK>
[  218.757662][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  218.909776][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'.
[  218.914833][ T9162] netlink: 'syz.4.833': attribute type 1 has an invalid length.
[  218.921732][ T9163] bond0: entered promiscuous mode
[  218.937363][ T9163] bond_slave_0: entered promiscuous mode
[  218.944347][ T9163] bond_slave_1: entered promiscuous mode
[  218.953773][ T9163] bond0: entered allmulticast mode
[  218.960683][ T9163] bond_slave_0: entered allmulticast mode
[  218.969688][ T9163] bond_slave_1: entered allmulticast mode
[  218.980724][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.045043][ T9162] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.107038][ T9167] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.136274][ T9167] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  219.172507][ T9167] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  219.254830][ T9162] veth7: entered promiscuous mode
[  219.265563][ T9162] bond1: (slave veth7): Enslaving as an active interface with a down link
[  219.277411][ T9174] bridge_slave_0: left allmulticast mode
[  219.284363][ T9174] bridge_slave_0: left promiscuous mode
[  219.290821][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.309424][ T9174] bridge_slave_1: left allmulticast mode
[  219.319663][ T9174] bridge_slave_1: left promiscuous mode
[  219.329358][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.332623][ T8904] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  219.364994][ T9174] bond0: (slave bond_slave_0): Releasing backup interface
[  219.374836][ T9174] bond_slave_0: left promiscuous mode
[  219.381946][ T9174] bond_slave_0: left allmulticast mode
[  219.390353][ T9174] bond0: (slave bond_slave_1): Releasing backup interface
[  219.402347][ T9174] bond_slave_1: left promiscuous mode
[  219.409417][ T9174] bond_slave_1: left allmulticast mode
[  219.421766][ T9174] team0: Port device team_slave_0 removed
[  219.432908][ T9174] team0: Port device team_slave_1 removed
[  219.440166][ T9174] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.449800][ T9174] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.463819][ T9172] erspan0: entered allmulticast mode
[  219.473637][ T9172] bond1: (slave erspan0): making interface the new active one
[  219.485545][ T9172] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  219.845381][ T9191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  220.325243][ T9219] FAULT_INJECTION: forcing a failure.
[  220.325243][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.421641][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.3.843 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  220.421675][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.421687][ T9219] Call Trace:
[  220.421695][ T9219]  <TASK>
[  220.421702][ T9219]  dump_stack_lvl+0x189/0x250
[  220.421731][ T9219]  ? __pfx____ratelimit+0x10/0x10
[  220.421760][ T9219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.421780][ T9219]  ? __pfx__printk+0x10/0x10
[  220.421804][ T9219]  ? __might_fault+0xb0/0x130
[  220.421845][ T9219]  should_fail_ex+0x414/0x560
[  220.421883][ T9219]  _copy_from_user+0x2d/0xb0
[  220.421912][ T9219]  __sys_bpf+0x1ed/0x870
[  220.421949][ T9219]  ? __pfx___sys_bpf+0x10/0x10
[  220.421991][ T9219]  ? ksys_write+0x22a/0x250
[  220.422021][ T9219]  ? __pfx_ksys_write+0x10/0x10
[  220.422045][ T9219]  ? rcu_is_watching+0x15/0xb0
[  220.422084][ T9219]  __x64_sys_bpf+0x7c/0x90
[  220.422109][ T9219]  do_syscall_64+0xfa/0x3b0
[  220.422136][ T9219]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.422163][ T9219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.422182][ T9219]  ? clear_bhb_loop+0x60/0xb0
[  220.422207][ T9219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.422226][ T9219] RIP: 0033:0x7f031218eb69
[  220.422245][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.422262][ T9219] RSP: 002b:00007f0312fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  220.422285][ T9219] RAX: ffffffffffffffda RBX: 00007f03123b6080 RCX: 00007f031218eb69
[  220.422299][ T9219] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000001
[  220.422312][ T9219] RBP: 00007f0312fb7090 R08: 0000000000000000 R09: 0000000000000000
[  220.422324][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.422336][ T9219] R13: 0000000000000001 R14: 00007f03123b6080 R15: 00007ffd03475068
[  220.422370][ T9219]  </TASK>
[  220.425152][ T9228] __nla_validate_parse: 1 callbacks suppressed
[  220.425175][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.844'.
[  220.716820][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.056270][ T9238] syzkaller1: entered promiscuous mode
[  221.062198][ T9238] syzkaller1: entered allmulticast mode
[  221.280897][ T9241] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.848'.
[  221.338646][ T9241] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  221.496102][ T9244] syzkaller0: entered promiscuous mode
[  221.502840][ T9244] syzkaller0: entered allmulticast mode
[  226.426398][ T9298] FAULT_INJECTION: forcing a failure.
[  226.426398][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.450418][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.0.854 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  226.450449][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.450461][ T9298] Call Trace:
[  226.450469][ T9298]  <TASK>
[  226.450479][ T9298]  dump_stack_lvl+0x189/0x250
[  226.450506][ T9298]  ? __pfx____ratelimit+0x10/0x10
[  226.450536][ T9298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.450557][ T9298]  ? __pfx__printk+0x10/0x10
[  226.450606][ T9298]  should_fail_ex+0x414/0x560
[  226.450666][ T9298]  _copy_to_user+0x31/0xb0
[  226.450697][ T9298]  simple_read_from_buffer+0xe1/0x170
[  226.450733][ T9298]  proc_fail_nth_read+0x1b3/0x220
[  226.450761][ T9298]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.450798][ T9298]  ? rw_verify_area+0x258/0x650
[  226.450825][ T9298]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.450850][ T9298]  vfs_read+0x1fd/0x980
[  226.450876][ T9298]  ? fdget_pos+0x247/0x320
[  226.450900][ T9298]  ? __pfx___mutex_lock+0x10/0x10
[  226.450931][ T9298]  ? __pfx_vfs_read+0x10/0x10
[  226.450960][ T9298]  ? __fget_files+0x2a/0x420
[  226.450984][ T9298]  ? __fget_files+0x3a0/0x420
[  226.451002][ T9298]  ? __fget_files+0x2a/0x420
[  226.451033][ T9298]  ksys_read+0x145/0x250
[  226.451063][ T9298]  ? __pfx_ksys_read+0x10/0x10
[  226.451086][ T9298]  ? rcu_is_watching+0x15/0xb0
[  226.451122][ T9298]  ? do_syscall_64+0xbe/0x3b0
[  226.451155][ T9298]  do_syscall_64+0xfa/0x3b0
[  226.451180][ T9298]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.451205][ T9298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.451224][ T9298]  ? clear_bhb_loop+0x60/0xb0
[  226.451248][ T9298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.451266][ T9298] RIP: 0033:0x7fd31a98d57c
[  226.451284][ T9298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  226.451298][ T9298] RSP: 002b:00007fd31b898030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  226.451318][ T9298] RAX: ffffffffffffffda RBX: 00007fd31abb5fa0 RCX: 00007fd31a98d57c
[  226.451332][ T9298] RDX: 000000000000000f RSI: 00007fd31b8980a0 RDI: 0000000000000004
[  226.451343][ T9298] RBP: 00007fd31b898090 R08: 0000000000000000 R09: 0000000000000000
[  226.451353][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  226.451363][ T9298] R13: 0000000000000000 R14: 00007fd31abb5fa0 R15: 00007ffeb272aa58
[  226.451394][ T9298]  </TASK>
[  226.845994][ T9254] netlink: 724 bytes leftover after parsing attributes in process `syz.2.851'.
[  226.858804][ T9254] netlink: 83 bytes leftover after parsing attributes in process `syz.2.851'.
[  226.908623][ T9289] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  226.923380][ T9302] openvswitch: netlink: Port -31465065 exceeds max allowable 65535
[  226.943843][ T9289] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  227.158794][ T9311] netlink: 'syz.0.859': attribute type 8 has an invalid length.
[  227.306464][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'.
[  227.319678][ T9311] 8021q: adding VLAN 0 to HW filter on device bond2
[  227.383710][ T9311] bond2: entered promiscuous mode
[  227.408384][ T9311] bond2: entered allmulticast mode
[  227.422244][ T9311] bond0: (slave bond2): Enslaving as an active interface with an up link
[  227.460265][   T30] audit: type=1804 audit(1754415366.357:2): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.863" name="/newroot/167/cgroup.controllers" dev="tmpfs" ino=876 res=1 errno=0
[  227.530861][   T30] audit: type=1800 audit(1754415366.397:3): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.863" name="cgroup.controllers" dev="tmpfs" ino=876 res=0 errno=0
[  227.579440][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.591865][   T30] audit: type=1800 audit(1754415366.397:4): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.863" name="cgroup.controllers" dev="tmpfs" ino=876 res=0 errno=0
[  227.634826][ T9329] netlink: 316 bytes leftover after parsing attributes in process `syz.3.865'.
[  227.669601][ T9329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'.
[  227.812240][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  227.820466][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  227.827383][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  228.068891][ T9330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.124217][ T8904] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  228.144085][ T8904] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  228.195360][ T8904] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  228.369450][ T9343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.399631][ T9352] lo speed is unknown, defaulting to 1000
[  228.436084][ T9352] lo speed is unknown, defaulting to 1000
[  228.890217][ T9363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.873'.
[  228.934638][ T9363] netlink: 34 bytes leftover after parsing attributes in process `syz.2.873'.
[  230.460991][ T9402] lo speed is unknown, defaulting to 1000
[  230.525871][ T9402] lo speed is unknown, defaulting to 1000
[  230.645472][ T9388] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  230.922248][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.887'.
[  230.967727][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.330952][ T9432] lo speed is unknown, defaulting to 1000
[  231.509424][ T9432] lo speed is unknown, defaulting to 1000
[  231.891797][ T5159] Bluetooth: hci4: command 0x0401 tx timeout
[  232.070088][ T9451] netlink: 244 bytes leftover after parsing attributes in process `syz.3.897'.
[  234.717873][ T9479] netlink: 786 bytes leftover after parsing attributes in process `syz.4.903'.
[  234.740043][ T9474] netlink: 196 bytes leftover after parsing attributes in process `syz.2.902'.
[  234.757647][ T9474] lo: entered promiscuous mode
[  234.764640][ T9474] tunl0: entered promiscuous mode
[  234.770504][ T9474] gre0: entered promiscuous mode
[  234.776844][ T9474] gretap0: entered promiscuous mode
[  234.784337][ T9474] erspan0: entered promiscuous mode
[  234.825492][ T9474] ip_vti0: entered promiscuous mode
[  234.861840][ T9474] ip6_vti0: entered promiscuous mode
[  234.891980][ T9474] sit0: entered promiscuous mode
[  234.897827][ T9474] ip6tnl0: entered promiscuous mode
[  234.937832][ T9474] ip6gre0: entered promiscuous mode
[  234.957660][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'.
[  234.958369][ T9474] syz_tun: entered promiscuous mode
[  234.974863][ T9474] ip6gretap0: entered promiscuous mode
[  234.981124][ T9474] vcan0: entered promiscuous mode
[  234.987146][ T9474] bond0: entered promiscuous mode
[  234.993315][ T9474] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  235.007326][ T9474] team0: entered promiscuous mode
[  235.015660][ T9474] dummy0: entered promiscuous mode
[  235.022542][ T9474] nlmon0: entered promiscuous mode
[  235.028601][ T9474] caif0: entered promiscuous mode
[  235.035452][ T9474] batadv0: entered promiscuous mode
[  235.043402][ T9474] vxcan0: entered promiscuous mode
[  235.050197][ T9474] vxcan1: entered promiscuous mode
[  235.062724][ T9474] wg0: entered promiscuous mode
[  235.069868][ T9474] wg1: entered promiscuous mode
[  235.076088][ T9474] wg2: entered promiscuous mode
[  235.086319][ T9474] veth0_to_bridge: entered promiscuous mode
[  235.099362][ T9474] bridge_slave_0: entered promiscuous mode
[  235.110477][ T9474] veth1_to_bridge: entered promiscuous mode
[  235.118734][ T9474] bridge_slave_1: entered promiscuous mode
[  235.126062][ T9474] veth0_to_bond: entered promiscuous mode
[  235.133849][ T9474] bond_slave_0: entered promiscuous mode
[  235.140943][ T9474] veth1_to_bond: entered promiscuous mode
[  235.149061][ T9474] bond_slave_1: entered promiscuous mode
[  235.157422][ T9474] veth0_to_team: entered promiscuous mode
[  235.164172][ T9474] team_slave_0: entered promiscuous mode
[  235.172368][ T9474] veth1_to_team: entered promiscuous mode
[  235.180239][ T9474] team_slave_1: entered promiscuous mode
[  235.188343][ T9474] veth0_to_batadv: entered promiscuous mode
[  235.195753][ T9474] batadv_slave_0: entered promiscuous mode
[  235.203298][ T9474] veth1_to_batadv: entered promiscuous mode
[  235.210386][ T9474] batadv_slave_1: entered promiscuous mode
[  235.217308][ T9474] xfrm0: entered promiscuous mode
[  235.223307][ T9474] veth0_to_hsr: entered promiscuous mode
[  235.230372][ T9474] veth1_to_hsr: entered promiscuous mode
[  235.237762][ T9474] hsr0: entered promiscuous mode
[  235.243767][ T9474] veth1_virt_wifi: entered promiscuous mode
[  235.251055][ T9474] veth0_virt_wifi: entered promiscuous mode
[  235.258656][ T9474] vlan0: entered promiscuous mode
[  235.265109][ T9474] vlan1: entered promiscuous mode
[  235.270958][ T9474] macvlan0: entered promiscuous mode
[  235.277531][ T9474] macvlan1: entered promiscuous mode
[  235.284008][ T9474] ipvlan0: entered promiscuous mode
[  235.290531][ T9474] ipvlan1: entered promiscuous mode
[  235.297018][ T9474] macvtap0: entered promiscuous mode
[  235.304381][ T9474] geneve0: entered promiscuous mode
[  235.310927][ T9474] geneve1: entered promiscuous mode
[  235.317600][ T9474] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  235.328193][ T9474] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  235.340749][ T9474] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  235.350630][ T9474] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  235.360473][ T9474] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  235.370560][ T9474] bridge1: entered promiscuous mode
[  235.377882][ T9474] veth2: entered promiscuous mode
[  235.384499][ T9474] veth3: entered promiscuous mode
[  235.390737][ T9474] syztnl0: entered promiscuous mode
[  235.397250][ T9474] gre1: entered promiscuous mode
[  235.403002][ T9474] syzkaller0: entered promiscuous mode
[  235.410172][ T9474] pimreg3: entered promiscuous mode
[  235.417123][ T9474] dvmrp0: entered promiscuous mode
[  235.424476][ T9474] ip6gretap1: entered promiscuous mode
[  235.430978][ T9474] geneve2: entered promiscuous mode
[  235.437806][ T9474] @
: entered promiscuous mode
[  235.443506][ T9474] ppp4: entered promiscuous mode
[  235.882330][ T9515] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.914'.
[  235.895824][ T9516] netlink: 'syz.1.912': attribute type 13 has an invalid length.
[  235.948689][ T9516] netlink: 'syz.1.912': attribute type 17 has an invalid length.
[  236.076646][ T9521] netlink: 'syz.3.916': attribute type 10 has an invalid length.
[  236.155043][ T9516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.203422][ T9522] bond1: (slave veth3): Releasing active interface
[  236.253874][ T9522] team0: Port device bridge1 removed
[  236.267587][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.334177][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.438450][ T9513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.459433][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'.
[  236.622553][ T9544] openvswitch: netlink: Unknown key attributes 2
[  236.932899][ T9560] lo speed is unknown, defaulting to 1000
[  236.942660][ T9560] lo speed is unknown, defaulting to 1000
[  237.079399][ T9565] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  237.164451][ T9565] 8021q: adding VLAN 0 to HW filter on device bond1
[  237.268389][ T9565] bond1: entered promiscuous mode
[  237.307571][ T9569] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  237.502296][ T9584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.933'.
[  238.038034][ T9600] ip6tnl4: entered promiscuous mode
[  238.047878][ T9600] ip6tnl4: entered allmulticast mode
[  238.788763][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'.
[  238.800509][ T9622] sctp: [Deprecated]: syz.1.943 (pid 9622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.800509][ T9622] Use struct sctp_sack_info instead
[  239.080399][ T9621] lo speed is unknown, defaulting to 1000
[  239.107445][ T9621] lo speed is unknown, defaulting to 1000
[  239.218395][ T9637] netlink: 'syz.3.950': attribute type 1 has an invalid length.
[  239.259810][ T9618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.280392][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.946'.
[  239.283029][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.950'.
[  239.355278][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'.
[  239.385040][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  239.630127][ T9639] smc: removing ib device syz0
[  240.171719][ T9663] netlink: 'syz.2.954': attribute type 11 has an invalid length.
[  240.372354][ T8904] tipc: Node number set to 2481033144
[  240.730813][ T9676] vxcan1: entered allmulticast mode
[  240.770013][ T9676] vxcan1: left allmulticast mode
[  241.502124][ T9694] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001
[  241.685317][ T9696] lo speed is unknown, defaulting to 1000
[  241.761607][ T9699] netlink: 'syz.4.963': attribute type 2 has an invalid length.
[  241.771161][ T9699] netlink: 119 bytes leftover after parsing attributes in process `syz.4.963'.
[  242.242708][ T9708] ipvlan2: entered promiscuous mode
[  242.251065][ T9708] bridge0: port 3(ipvlan2) entered blocking state
[  242.275666][ T9708] bridge0: port 3(ipvlan2) entered disabled state
[  242.287634][ T9708] ipvlan2: entered allmulticast mode
[  242.318231][ T9708] ipvlan2: left allmulticast mode
[  242.407900][ T9711] netlink: 'syz.3.962': attribute type 13 has an invalid length.
[  242.467073][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.965'.
[  242.554228][ T9711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.665011][ T9714] Unsupported ieee802154 address type: 0
[  243.155390][ T9730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.165425][ T9730] syzkaller0: entered promiscuous mode
[  243.180161][ T9730] syzkaller0: entered allmulticast mode
[  243.263738][ T9732] IPVS: length: 100 != 8
[  243.317902][ T9730] tipc: Resetting bearer <eth:syzkaller0>
[  243.368547][ T9734] lo speed is unknown, defaulting to 1000
[  243.397077][ T9729] tipc: Resetting bearer <eth:syzkaller0>
[  243.466089][ T9729] tipc: Disabling bearer <eth:syzkaller0>
[  243.799152][ T9734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.882440][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  243.933082][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.980'.
[  244.116285][ T9764] netlink: 'syz.3.982': attribute type 3 has an invalid length.
[  244.302289][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'.
[  244.456151][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'.
[  244.746188][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'.
[  244.979510][ T9801] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  245.020308][ T9810] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  245.033242][ T9803] netlink: 'syz.3.994': attribute type 16 has an invalid length.
[  245.044582][ T9803] netlink: 'syz.3.994': attribute type 17 has an invalid length.
[  245.192498][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.999'.
[  245.299736][ T9827] openvswitch: netlink: Message has 4 unknown bytes.
[  245.325765][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.015626][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'.
[  246.147523][ T7394] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.185331][ T7394] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.234653][ T7394] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.279637][ T7394] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.643405][ T9870] lo speed is unknown, defaulting to 1000
[  246.780696][ T9886] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  246.915702][ T9891] sock: sock_timestamping_bind_phc: sock not bind to device
[  246.982458][ T9886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.018718][ T9882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  247.201930][ T9881] tipc: Resetting bearer <eth:syzkaller0>
[  247.267047][ T9881] tipc: Disabling bearer <eth:syzkaller0>
[  247.305338][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'.
[  247.414330][ T9895] netlink: 'syz.2.1017': attribute type 1 has an invalid length.
[  247.561124][ T9870] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1008'.
[  247.999089][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'.
[  248.727562][   T36] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  248.743327][ T9914] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  248.840598][ T9957] lo speed is unknown, defaulting to 1000
[  248.925597][ T9953] lo speed is unknown, defaulting to 1000
[  248.979235][ T9960] lo speed is unknown, defaulting to 1000
[  249.654910][ T9978] netlink: 'syz.3.1039': attribute type 12 has an invalid length.
[  249.671997][ T9981] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1039'.
[  249.947466][ T9990] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  249.995365][ T9990] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1043'.
[  250.028813][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'.
[  250.041553][ T9990] NCSI netlink: No device for ifindex 0
[  250.154842][T10005] netlink: 'syz.2.1048': attribute type 4 has an invalid length.
[  250.370796][T10011] netlink: 'syz.1.1049': attribute type 4 has an invalid length.
[  250.498806][   T24] lo speed is unknown, defaulting to 1000
[  250.528619][   T24] syz2: Port: 1 Link DOWN
[  250.848766][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'.
[  250.917275][T10029] veth1: mtu greater than device maximum
[  251.072333][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'.
[  251.183351][T10036] 8021q: VLANs not supported on ip6_vti0
[  251.603063][T10055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1060'.
[  251.958944][T10072] netlink: del zone limit has 4 unknown bytes
[  252.123260][T10089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1065'.
[  252.235295][T10087] tap0: tun_chr_ioctl cmd 1074025677
[  252.253906][T10087] tap0: linktype set to 0
[  252.348499][T10094] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  252.436464][T10097] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  253.521993][T10145] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1087'.
[  254.203874][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'.
[  254.236854][T10178] sctp: [Deprecated]: syz.3.1093 (pid 10178) Use of int in maxseg socket option.
[  254.236854][T10178] Use struct sctp_assoc_value instead
[  254.417810][T10187] smc: net device bond0 applied user defined pnetid SYZ2
[  255.355341][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.509906][T10231] bond1: (slave erspan0): Releasing active interface
[  255.528485][T10231] bridge_slave_0: left allmulticast mode
[  255.546797][T10231] bridge_slave_0: left promiscuous mode
[  255.576440][T10231] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.601022][T10231] bridge_slave_1: left allmulticast mode
[  255.611589][T10231] bridge_slave_1: left promiscuous mode
[  255.618735][T10231] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.639237][T10231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.660359][T10231] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.666601][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1106'.
[  255.686642][T10231] bond1: (slave veth7): Releasing active interface
[  255.966126][T10247] netlink: 'syz.2.1111': attribute type 83 has an invalid length.
[  256.510368][T10264] netlink: 'syz.3.1117': attribute type 4 has an invalid length.
[  257.027440][T10286] macvlan0: left promiscuous mode
[  257.063117][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1124'.
[  257.385854][T10308] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1132'.
[  257.400571][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'.
[  257.425731][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1134'.
[  257.457396][T10307] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1134'.
[  257.468736][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'.
[  257.482789][T10307] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  257.545902][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1136'.
[  257.784974][T10325] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1138'.
[  258.047627][T10342] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1140'.
[  258.494170][T10361] netlink: 'syz.0.1147': attribute type 20 has an invalid length.
[  258.553430][ T3481] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.568548][T10361] netlink: 'syz.0.1147': attribute type 20 has an invalid length.
[  258.580738][ T3481] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.598395][ T3481] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.653741][ T3481] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.844953][T10377] veth1_to_team: entered allmulticast mode
[  258.921247][T10382] netlink: 'syz.4.1152': attribute type 21 has an invalid length.
[  259.310559][T10387] lo speed is unknown, defaulting to 1000
[  259.797271][T10405] netlink: 'syz.2.1157': attribute type 10 has an invalid length.
[  259.915921][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.954924][T10408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.991128][T10408] tipc: Resetting bearer <eth:syzkaller0>
[  260.030016][T10406] tipc: Disabling bearer <eth:syzkaller0>
[  260.264861][T10421] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  260.297461][T10421] netlink: 'syz.0.1161': attribute type 3 has an invalid length.
[  260.598322][T10435] netlink: 'syz.1.1164': attribute type 1 has an invalid length.
[  260.681196][T10435] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  260.715248][T10445] __nla_validate_parse: 16 callbacks suppressed
[  260.715274][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'.
[  260.780590][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1167'.
[  260.923541][T10447] erspan0: entered promiscuous mode
[  260.930960][T10447] erspan0: left allmulticast mode
[  260.982018][T10452] netlink: 'syz.1.1168': attribute type 1 has an invalid length.
[  261.149094][T10459] netlink: 'syz.4.1171': attribute type 2 has an invalid length.
[  261.188081][T10459] : entered promiscuous mode
[  261.299367][T10467] lo speed is unknown, defaulting to 1000
[  261.578924][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  262.667158][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1180'.
[  262.679988][T10502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.701353][T10502] syzkaller0: entered promiscuous mode
[  262.718990][T10502] syzkaller0: entered allmulticast mode
[  262.863018][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'.
[  263.011356][T10515] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1182'.
[  263.152012][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  263.223652][T10496] tipc: Disabling bearer <eth:syzkaller0>
[  263.336544][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'.
[  263.412097][T10522] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  263.518715][T10529] netlink: 'syz.0.1186': attribute type 1 has an invalid length.
[  263.700413][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'.
[  263.819294][T10542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1188'.
[  264.239719][T10561] sctp: [Deprecated]: syz.3.1193 (pid 10561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  264.239719][T10561] Use struct sctp_sack_info instead
[  264.336636][T10563] netlink: 'syz.2.1194': attribute type 1 has an invalid length.
[  264.408831][T10563] 8021q: adding VLAN 0 to HW filter on device bond2
[  264.480322][T10563] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1194'.
[  264.578497][T10567] bond2: (slave ip6erspan0): making interface the new active one
[  264.634885][T10567] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  264.848494][T10571] lo speed is unknown, defaulting to 1000
[  264.980204][T10578] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  265.120719][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1199'.
[  265.183782][T10592] ip6gretap1: entered promiscuous mode
[  265.720846][T10621] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  266.094352][T10632] __nla_validate_parse: 7 callbacks suppressed
[  266.094398][T10632] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1212'.
[  266.239671][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'.
[  266.359681][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1213'.
[  266.400183][T10642] IPVS: Scheduler module ip_vs_ not found
[  267.037436][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.068302][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.183432][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'.
[  267.193701][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'.
[  267.248526][T10680] netlink: 'syz.3.1222': attribute type 12 has an invalid length.
[  267.275087][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  267.321741][T10680] netlink: 'syz.3.1222': attribute type 14 has an invalid length.
[  267.807894][T10710] netlink: 'syz.3.1227': attribute type 1 has an invalid length.
[  267.894200][T10710] 8021q: adding VLAN 0 to HW filter on device bond4
[  268.061256][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1230'.
[  268.578527][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'.
[  268.605493][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'.
[  268.847104][T10756] vxcan1: entered allmulticast mode
[  268.870031][T10756] vxcan1: left allmulticast mode
[  269.048633][ T3469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.084346][ T3469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.122553][ T3469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.133732][ T3469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.226036][T10764] bond0: (slave rose0): Error: Device can not be enslaved while up
[  269.562492][T10778] syzkaller0: entered promiscuous mode
[  269.574228][T10778] syzkaller0: entered allmulticast mode
[  269.612834][T10786] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  269.627767][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1250'.
[  270.917968][T10831] tipc: Failed to remove unknown binding: 66,1,1/1954211294:2470826973/2470826976
[  271.399788][T10841] __nla_validate_parse: 2 callbacks suppressed
[  271.399812][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'.
[  272.686227][T10794] syzkaller0: entered allmulticast mode
[  272.704936][T10814] syzkaller0: left promiscuous mode
[  272.711192][T10814] syzkaller0: left allmulticast mode
[  272.907908][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'.
[  272.939764][T10852] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  272.971930][T10854] syzkaller0: Caught tx_queue_len zero misconfig
[  273.121262][T10860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.165192][T10852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  273.260181][T10867] IPVS: Error connecting to the multicast addr
[  273.286614][T10867] netlink: 'syz.2.1270': attribute type 16 has an invalid length.
[  273.350768][T10867] netlink: 'syz.2.1270': attribute type 17 has an invalid length.
[  273.433665][T10880] IPv6: NLM_F_REPLACE set, but no existing node found!
[  273.525051][T10867] tipc: Resetting bearer <eth:syzkaller0>
[  273.610740][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'.
[  273.661087][T10848] tipc: Resetting bearer <eth:syzkaller0>
[  273.693649][T10848] tipc: Disabling bearer <eth:syzkaller0>
[  273.722116][T10882] netlink: 'syz.3.1273': attribute type 2 has an invalid length.
[  273.747697][T10882] netlink: 'syz.3.1273': attribute type 1 has an invalid length.
[  273.805795][T10882] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1273'.
[  274.228209][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'.
[  274.405744][T10902] netlink: 'syz.2.1280': attribute type 2 has an invalid length.
[  274.474910][T10906] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  274.627904][T10918] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  274.663840][T10915] lo: left promiscuous mode
[  274.678338][T10915] tunl0: left promiscuous mode
[  274.688702][T10915] gre0: left promiscuous mode
[  274.705368][T10915] gretap0: left promiscuous mode
[  274.723524][T10915] erspan0: left promiscuous mode
[  274.738020][T10923] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1288'.
[  274.743205][T10915] ip_vti0: left promiscuous mode
[  274.765217][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1288'.
[  274.851974][T10928] netlink: 'syz.0.1282': attribute type 10 has an invalid length.
[  274.871792][T10915] ip6_vti0: left promiscuous mode
[  274.887031][T10915] sit0: left promiscuous mode
[  274.892356][T10915] ip6tnl0: left promiscuous mode
[  274.943947][T10915] ip6gre0: left promiscuous mode
[  274.950006][T10915] syz_tun: left promiscuous mode
[  274.955694][T10915] ip6gretap0: left promiscuous mode
[  274.962640][T10915] vcan0: left promiscuous mode
[  274.968419][T10915] bond0: left promiscuous mode
[  274.973763][T10915] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  275.000567][T10915] team0: left promiscuous mode
[  275.010080][T10915] dummy0: left promiscuous mode
[  275.016165][T10915] nlmon0: left promiscuous mode
[  275.022229][T10915] caif0: left promiscuous mode
[  275.028639][T10915] batadv0: left promiscuous mode
[  275.035122][T10915] vxcan0: left promiscuous mode
[  275.040754][T10915] vxcan1: left promiscuous mode
[  275.049382][T10915] wg0: left promiscuous mode
[  275.054741][T10915] wg1: left promiscuous mode
[  275.060014][T10915] wg2: left promiscuous mode
[  275.065592][T10915] veth0_to_bridge: left promiscuous mode
[  275.072098][T10915] bridge_slave_0: left promiscuous mode
[  275.080440][T10915] veth1_to_bridge: left promiscuous mode
[  275.087873][T10915] bridge_slave_1: left promiscuous mode
[  275.095700][T10915] veth0_to_bond: left promiscuous mode
[  275.102419][T10915] bond_slave_0: left promiscuous mode
[  275.109297][T10915] veth1_to_bond: left promiscuous mode
[  275.116847][T10915] bond_slave_1: left promiscuous mode
[  275.125140][T10915] veth0_to_team: left promiscuous mode
[  275.133385][T10915] team_slave_0: left promiscuous mode
[  275.141391][T10915] veth1_to_team: left promiscuous mode
[  275.148750][T10915] team_slave_1: left promiscuous mode
[  275.155990][T10915] veth0_to_batadv: left promiscuous mode
[  275.163728][T10915] batadv_slave_0: left promiscuous mode
[  275.171163][T10915] veth1_to_batadv: left promiscuous mode
[  275.178294][T10915] batadv_slave_1: left promiscuous mode
[  275.186924][T10915] xfrm0: left promiscuous mode
[  275.192345][T10915] veth0_to_hsr: left promiscuous mode
[  275.199890][T10915] veth1_to_hsr: left promiscuous mode
[  275.207804][T10915] hsr0: left promiscuous mode
[  275.214091][T10915] veth1_virt_wifi: left promiscuous mode
[  275.221119][T10915] veth0_virt_wifi: left promiscuous mode
[  275.228172][T10915] vlan0: left promiscuous mode
[  275.233573][T10915] vlan1: left promiscuous mode
[  275.241237][T10915] macvlan1: left promiscuous mode
[  275.247393][T10915] ipvlan0: left promiscuous mode
[  275.258891][T10915] ipvlan1: left promiscuous mode
[  275.272091][T10915] macvtap0: left promiscuous mode
[  275.278014][T10915] geneve0: left promiscuous mode
[  275.284321][T10915] geneve1: left promiscuous mode
[  275.289845][T10915] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  275.298136][T10915] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[  275.306506][T10915] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[  275.314611][T10915] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[  275.325017][T10915] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  275.333021][T10915] bridge1: left promiscuous mode
[  275.340135][T10915] veth2: left promiscuous mode
[  275.347579][T10915] veth3: left promiscuous mode
[  275.356247][T10915] syztnl0: left promiscuous mode
[  275.364169][T10915] gre1: left promiscuous mode
[  275.371813][T10915] pimreg3: left promiscuous mode
[  275.377912][T10915] dvmrp0: left promiscuous mode
[  275.384017][T10915] ip6gretap1: left promiscuous mode
[  275.389896][T10915] geneve2: left promiscuous mode
[  275.396000][T10915] @
: left promiscuous mode
[  275.401207][T10915] bond1: left promiscuous mode
[  275.455518][T10918] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.475642][T10911] bond0: (slave bond2): Releasing backup interface
[  275.488889][T10911] bond2: left promiscuous mode
[  275.504187][T10911] bond2: left allmulticast mode
[  275.562073][T10921] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.585145][T10921] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  275.618886][T10921] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  275.726518][T10925] bond3: (slave bridge4): Enslaving as an active interface with a down link
[  275.798760][T10928] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  275.821627][T10928] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.838068][T10928] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  275.849270][T10928] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  275.859662][T10928] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  275.888609][T10931] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  275.936643][T10931] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  276.001644][T10931] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.046490][T10964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  276.458734][T10984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1303'.
[  276.506366][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'.
[  276.606835][T10978] bond2: entered promiscuous mode
[  276.627271][T10978] bond2: entered allmulticast mode
[  276.650842][T10978] 8021q: adding VLAN 0 to HW filter on device bond2
[  276.939806][T11008] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  277.138498][T11008] bond3: (slave bridge4): Releasing active interface
[  277.172093][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'.
[  277.355590][T11008] netlink: 'syz.1.1310': attribute type 10 has an invalid length.
[  277.392135][T11008] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  277.445396][T11008] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.510675][T11008] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  277.522004][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  277.745882][T11025] lo speed is unknown, defaulting to 1000
[  278.009077][T11038] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  278.252227][T11049] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  278.794176][T11075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.811966][T11075] syzkaller0: entered promiscuous mode
[  278.818804][T11075] syzkaller0: entered allmulticast mode
[  278.859864][T11075] tipc: Resetting bearer <eth:syzkaller0>
[  278.870881][T11074] tipc: Resetting bearer <eth:syzkaller0>
[  278.899243][T11074] tipc: Disabling bearer <eth:syzkaller0>
[  279.244241][T11092] lo speed is unknown, defaulting to 1000
[  279.956966][T11120] lo speed is unknown, defaulting to 1000
[  281.026134][T11158] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1350'.
[  281.487520][T11170] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  281.887034][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'.
[  282.209314][T11185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  282.398655][T11190] bond0: (slave wlan1): Releasing backup interface
[  282.439058][T11190] bond0: Destroying bond
[  282.676577][T11190] bond0 (unregistering): Released all slaves
[  282.831920][T11201] 
@ÿ: renamed from bond_slave_0
[  282.865696][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'.
[  283.086504][T11223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.221736][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'.
[  283.880131][T11214] tipc: Disabling bearer <eth:syzkaller0>
[  284.343903][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'.
[  284.536455][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'.
[  284.556880][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'.
[  284.900009][T11278] lo speed is unknown, defaulting to 1000
[  285.078376][T11283] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1384'.
[  285.159852][T11285] lo speed is unknown, defaulting to 1000
[  285.430302][T11292] netlink: 'syz.2.1386': attribute type 10 has an invalid length.
[  285.500067][T11292] team0: Port device dummy0 added
[  286.222556][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'.
[  286.299695][T11320] : entered promiscuous mode
[  286.835543][T11331] syzkaller0: entered promiscuous mode
[  286.842192][T11331] syzkaller0: entered allmulticast mode
[  289.829782][T11353] lo speed is unknown, defaulting to 1000
[  289.885601][ T3481] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.915400][ T3481] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.947864][ T3481] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  290.009320][ T3481] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  290.284607][T11377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.310107][T11377] syzkaller0: entered promiscuous mode
[  290.323149][T11377] syzkaller0: entered allmulticast mode
[  290.369877][T11377] tipc: Resetting bearer <eth:syzkaller0>
[  290.411798][T11375] tipc: Resetting bearer <eth:syzkaller0>
[  290.446464][T11375] tipc: Disabling bearer <eth:syzkaller0>
[  290.494759][T11380] syzkaller1: entered promiscuous mode
[  290.510933][T11380] syzkaller1: entered allmulticast mode
[  291.757712][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1427'.
[  291.934314][T11446] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1429'.
[  292.675857][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'.
[  292.705930][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'.
[  292.845437][T11486] lo speed is unknown, defaulting to 1000
[  292.945820][T11492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1440'.
[  293.678061][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1447'.
[  294.191854][T11528] lo speed is unknown, defaulting to 1000
[  294.200657][    C1] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82
[  294.457180][T11539] FAULT_INJECTION: forcing a failure.
[  294.457180][T11539] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.494247][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.2.1454 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  294.494282][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.494294][T11539] Call Trace:
[  294.494303][T11539]  <TASK>
[  294.494312][T11539]  dump_stack_lvl+0x189/0x250
[  294.494343][T11539]  ? __pfx____ratelimit+0x10/0x10
[  294.494373][T11539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.494396][T11539]  ? __pfx__printk+0x10/0x10
[  294.494423][T11539]  ? __might_fault+0xb0/0x130
[  294.494469][T11539]  should_fail_ex+0x414/0x560
[  294.494508][T11539]  _copy_from_user+0x2d/0xb0
[  294.494539][T11539]  ___sys_sendmsg+0x158/0x2a0
[  294.494585][T11539]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.494666][T11539]  ? __fget_files+0x2a/0x420
[  294.494687][T11539]  ? __fget_files+0x3a0/0x420
[  294.494721][T11539]  __x64_sys_sendmsg+0x19b/0x260
[  294.494748][T11539]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.494783][T11539]  ? __pfx_ksys_write+0x10/0x10
[  294.494809][T11539]  ? rcu_is_watching+0x15/0xb0
[  294.494847][T11539]  ? do_syscall_64+0xbe/0x3b0
[  294.494883][T11539]  do_syscall_64+0xfa/0x3b0
[  294.494910][T11539]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.494938][T11539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.494959][T11539]  ? clear_bhb_loop+0x60/0xb0
[  294.494986][T11539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.495006][T11539] RIP: 0033:0x7f507b98eb69
[  294.495027][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.495045][T11539] RSP: 002b:00007f507c757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.495069][T11539] RAX: ffffffffffffffda RBX: 00007f507bbb5fa0 RCX: 00007f507b98eb69
[  294.495085][T11539] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  294.495098][T11539] RBP: 00007f507c757090 R08: 0000000000000000 R09: 0000000000000000
[  294.495112][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.495125][T11539] R13: 0000000000000000 R14: 00007f507bbb5fa0 R15: 00007ffeb8eddac8
[  294.495162][T11539]  </TASK>
[  295.087244][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'.
[  295.446385][T11556] lo speed is unknown, defaulting to 1000
[  295.675102][   T30] audit: type=1107 audit(1754415434.577:5): pid=11562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB¡'
[  295.846583][T11565] : entered promiscuous mode
[  295.960376][T11571] team0: Mode changed to "activebackup"
[  295.968030][T11569] tipc: Enabled bearer <eth:team0>, priority 0
[  296.627410][T11606] bridge0: entered promiscuous mode
[  296.648399][T11605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.721581][T11604] tipc: Disabling bearer <eth:syzkaller0>
[  297.023590][T11612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.036606][T11612] syzkaller0: entered promiscuous mode
[  297.046076][T11612] syzkaller0: entered allmulticast mode
[  297.102228][ T8892] tipc: Node number set to 3214833486
[  297.220256][T11612] tipc: Resetting bearer <eth:syzkaller0>
[  297.259287][T11611] tipc: Resetting bearer <eth:syzkaller0>
[  297.347971][T11611] tipc: Disabling bearer <eth:syzkaller0>
[  297.574999][T11636] !
: renamed from dummy0 (while UP)
[  297.591933][T11645] netlink: 'syz.4.1487': attribute type 13 has an invalid length.
[  297.677323][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'.
[  297.930531][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1490'.
[  298.075510][T11662] netlink: 'syz.3.1492': attribute type 1 has an invalid length.
[  298.143217][T11662] 8021q: adding VLAN 0 to HW filter on device bond5
[  298.247115][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1496'.
[  298.259452][T11674] veth0_to_team: entered promiscuous mode
[  298.271351][T11674] veth0_to_team: entered allmulticast mode
[  299.214721][T11728] lo speed is unknown, defaulting to 1000
[  300.330637][T11767] bridge0: entered promiscuous mode
[  300.375892][T11767] bridge0: port 1(macvlan2) entered blocking state
[  300.413038][T11767] bridge0: port 1(macvlan2) entered disabled state
[  300.451893][T11767] macvlan2: entered allmulticast mode
[  300.458764][T11767] bridge0: entered allmulticast mode
[  300.552977][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1522'.
[  300.571279][T11767] macvlan2: left allmulticast mode
[  300.591828][T11767] bridge0: left allmulticast mode
[  300.610004][T11767] bridge0: left promiscuous mode
[  300.667118][T11784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.696868][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  300.716872][T11785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.801169][T11783] veth1_macvtap: left promiscuous mode
[  300.822613][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  301.421803][ T5159] Bluetooth: hci4: link tx timeout
[  301.429121][ T5159] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.458595][T11812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'.
[  301.638054][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'.
[  301.807089][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1537'.
[  301.838226][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'.
[  302.021799][T11825] netlink: 'syz.0.1538': attribute type 10 has an invalid length.
[  302.499406][T11846] netlink: 'syz.4.1543': attribute type 10 has an invalid length.
[  302.729800][T11854] netlink: 'syz.3.1544': attribute type 39 has an invalid length.
[  302.918373][T11858] netlink: 'syz.2.1547': attribute type 21 has an invalid length.
[  302.930977][T11858] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  302.947278][T11858] __nla_validate_parse: 3 callbacks suppressed
[  302.947303][T11858] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1547'.
[  303.149190][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'.
[  303.208136][T11867] openvswitch: netlink: Flow key attr not present in new flow.
[  303.269756][T11867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'.
[  303.280938][T11867] netlink: 'syz.3.1548': attribute type 29 has an invalid length.
[  303.500317][ T5844] Bluetooth: hci4: command 0x0401 tx timeout
[  303.958278][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'.
[  304.051155][T11899] netlink: 'syz.3.1558': attribute type 11 has an invalid length.
[  304.088612][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'.
[  304.152587][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'.
[  304.171798][T11899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1558'.
[  304.175037][T11903] lo speed is unknown, defaulting to 1000
[  304.196767][T11908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1557'.
[  304.253877][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'.
[  304.758503][T11920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.881122][T11969] ieee802154 phy0 wpan0: encryption failed: -22
[  306.499557][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'.
[  306.819521][T12002] vlan2: entered allmulticast mode
[  306.845532][T12002] veth1: entered allmulticast mode
[  306.855019][T11992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.025508][T12018] netlink: 'syz.3.1591': attribute type 5 has an invalid length.
[  307.050772][T12018] geneve3: entered promiscuous mode
[  307.056478][T12018] geneve3: entered allmulticast mode
[  307.078433][   T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  307.109229][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  307.129954][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  307.146623][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  307.539732][T12037] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000
[  307.659386][T12041] sctp: [Deprecated]: syz.4.1596 (pid 12041) Use of int in max_burst socket option.
[  307.659386][T12041] Use struct sctp_assoc_value instead
[  307.782573][T12043] netlink: 'syz.1.1597': attribute type 10 has an invalid length.
[  307.884149][T12051] netlink: 'syz.3.1600': attribute type 1 has an invalid length.
[  307.889984][T12043] team0: Port device geneve0 added
[  308.004804][T12051] 8021q: adding VLAN 0 to HW filter on device bond6
[  308.037966][T12054] 8021q: adding VLAN 0 to HW filter on device bond6
[  308.046889][T12054] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  308.063950][T12054] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  308.109393][T12058] bond6: (slave bridge0): Enslaving as an active interface with a down link
[  308.386973][T12068] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  309.217487][T12098] netlink: 'syz.4.1614': attribute type 1 has an invalid length.
[  309.275725][T12098] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.404585][T12101] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.447956][T12101] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  309.463423][T12101] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  309.581264][T12098] bond3: (slave bridge3): Enslaving as an active interface with a down link
[  310.067193][T12115] lo speed is unknown, defaulting to 1000
[  310.188054][T12124] lo speed is unknown, defaulting to 1000
[  310.215714][T12130] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.603824][T12145] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  310.738909][T12149] __nla_validate_parse: 6 callbacks suppressed
[  310.738944][T12149] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.1626'.
[  310.786102][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'.
[  310.969067][T12149] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  310.995464][T12149] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1626'.
[  311.676561][T12174] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  311.714382][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.002066][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.147423][T12189] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  312.173300][T12189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1636'.
[  312.307177][T12188] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  312.315773][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1636'.
[  312.457061][T12201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1640'.
[  312.949726][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'.
[  313.592796][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  313.660919][T12236] netlink: 'syz.1.1651': attribute type 10 has an invalid length.
[  313.956170][T12235] team0: Port device geneve0 removed
[  314.201851][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  314.571041][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'.
[  314.857254][T12267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1658'.
[  314.896109][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1658'.
[  314.990497][T12273] netlink: 'syz.3.1660': attribute type 20 has an invalid length.
[  315.090947][T12267] lo speed is unknown, defaulting to 1000
[  315.185137][T12272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.539389][T12296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  315.687575][T12301] netlink: 'syz.2.1665': attribute type 1 has an invalid length.
[  315.992930][T12317] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  316.007371][T12317] __nla_validate_parse: 5 callbacks suppressed
[  316.007396][T12317] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1670'.
[  316.031375][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  316.476224][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'.
[  316.513797][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'.
[  316.526961][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'.
[  316.603626][T12343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.009915][T12353] syzkaller0: entered promiscuous mode
[  317.020430][T12353] syzkaller0: entered allmulticast mode
[  317.047122][T12362] netlink: 'syz.4.1687': attribute type 2 has an invalid length.
[  317.122957][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'.
[  317.153860][T12362] block nbd7: not configured, cannot reconfigure
[  317.353224][   T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.055884][T12391] netlink: 'syz.0.1693': attribute type 4 has an invalid length.
[  321.250253][   T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.259861][   T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.352587][   T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.629457][T12407] netpci0: tun_chr_ioctl cmd 1074025681
[  321.648186][T12408] netlink: 'syz.0.1700': attribute type 10 has an invalid length.
[  321.673390][T12408] team0: Port device dummy0 added
[  321.941335][T12419] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  321.961724][T12419] netlink: 'syz.0.1703': attribute type 4 has an invalid length.
[  321.969976][T12419] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1703'.
[  322.269465][T12427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.478199][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'.
[  322.498820][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'.
[  322.937683][T12457] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  322.963807][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1717'.
[  322.988323][T12458] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  322.996392][T12458] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  323.057421][T12458] netlink: 'syz.4.1718': attribute type 10 has an invalid length.
[  323.253307][T12474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1723'.
[  323.276685][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1723'.
[  323.307737][T12475] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1722'.
[  323.429615][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'.
[  323.834746][T12496] netlink: 'syz.1.1731': attribute type 1 has an invalid length.
[  323.993022][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'.
[  324.044293][T12504] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.168136][T12502] bond0: (slave geneve2): making interface the new active one
[  324.237686][T12502] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  324.270105][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  324.279995][T12520] openvswitch: netlink: IP tunnel dst address not specified
[  324.304057][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  324.339121][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'.
[  324.379062][T12517] netlink: 'syz.2.1734': attribute type 4 has an invalid length.
[  324.393124][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  324.415584][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  324.447419][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.310760][T12567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.398172][T12574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.438319][T12574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.645290][T12574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.682057][T12574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.206846][T12574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.251648][T12574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.417575][T12574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.431147][T12574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.440221][T12633] __nla_validate_parse: 1 callbacks suppressed
[  329.440245][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'.
[  329.517919][T12635] netlink: 'syz.2.1766': attribute type 10 has an invalid length.
[  329.879001][ T7398] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.888760][ T7398] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.950635][ T7398] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.960887][ T7398] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.023224][ T7398] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.055447][ T7398] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.119744][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.147487][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.323577][T12653] lo speed is unknown, defaulting to 1000
[  330.405716][   T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.435533][   T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.481324][   T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.560641][   T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.765481][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1777'.
[  330.858722][T12682] netlink: 'syz.1.1777': attribute type 5 has an invalid length.
[  330.880351][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'.
[  331.420388][T12707] syzkaller0: entered promiscuous mode
[  331.453258][T12707] syzkaller0: entered allmulticast mode
[  331.503451][ T8904] IPVS: starting estimator thread 0...
[  331.601829][T12710] IPVS: using max 27 ests per chain, 64800 per kthread
[  331.638477][T12704] lo speed is unknown, defaulting to 1000
[  332.222084][T12730] netlink: 'syz.4.1792': attribute type 11 has an invalid length.
[  332.335243][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'.
[  332.777906][T12739] netlink: 400 bytes leftover after parsing attributes in process `syz.4.1795'.
[  332.808464][T12739] openvswitch: netlink: Flow key attr not present in new flow.
[  333.273021][T12764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.279843][T12756] IPv6: Can't replace route, no match found
[  333.289390][T12762] netlink: 'syz.3.1803': attribute type 1 has an invalid length.
[  333.840412][T12783] openvswitch: netlink: Multiple metadata blocks provided
[  333.855839][T12785] netlink: 'syz.3.1811': attribute type 3 has an invalid length.
[  334.218690][T12795] lo speed is unknown, defaulting to 1000
[  334.252253][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'.
[  334.284725][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'.
[  334.660531][T12809] lo speed is unknown, defaulting to 1000
[  334.750671][T12808] lo speed is unknown, defaulting to 1000
[  335.362042][T12837] lo speed is unknown, defaulting to 1000
[  336.716195][T12866] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  336.995525][T12884] veth0_to_team: left promiscuous mode
[  337.003943][T12884] veth0_to_team: left allmulticast mode
[  337.010041][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'.
[  337.056590][T12884] netlink: 'syz.0.1839': attribute type 10 has an invalid length.
[  337.080834][T12884] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1839'.
[  337.137658][T12894] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1839'.
[  337.193570][T12893] netlink: 'syz.1.1838': attribute type 1 has an invalid length.
[  337.247521][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'.
[  337.316255][T12900] macvlan0: entered allmulticast mode
[  337.323534][T12900] veth1_vlan: entered allmulticast mode
[  337.376217][T12900] team0: Port device macvlan0 added
[  337.386048][T12912] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1842'.
[  337.593374][T12920] sctp: [Deprecated]: syz.4.1847 (pid 12920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.593374][T12920] Use struct sctp_sack_info instead
[  338.016956][T12935] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  338.099190][T12939] netlink: 'syz.2.1854': attribute type 1 has an invalid length.
[  338.182272][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'.
[  338.407991][T12939] 8021q: adding VLAN 0 to HW filter on device bond3
[  338.474108][T12942] vlan2: entered allmulticast mode
[  338.496716][T12942] veth1: entered allmulticast mode
[  338.526536][T12942] bond3: (slave vlan2): Opening slave failed
[  339.096158][ T5844] Bluetooth: hci4: command 0x0401 tx timeout
[  339.160890][T12979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.184216][T12979] syzkaller0: entered promiscuous mode
[  339.219614][T12979] syzkaller0: entered allmulticast mode
[  339.382407][T12979] tipc: Resetting bearer <eth:syzkaller0>
[  339.444076][T12978] tipc: Resetting bearer <eth:syzkaller0>
[  339.634010][T12978] tipc: Disabling bearer <eth:syzkaller0>
[  339.854316][T13015] netlink: 'syz.2.1875': attribute type 12 has an invalid length.
[  339.867552][T13012] lo speed is unknown, defaulting to 1000
[  339.917618][T13015] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1875'.
[  339.954254][T13019] netlink: 'syz.3.1879': attribute type 1 has an invalid length.
[  340.067135][T13019] 8021q: adding VLAN 0 to HW filter on device bond7
[  340.407095][T13030] Bluetooth: MGMT ver 1.23
[  340.587789][T13041] sctp: [Deprecated]: syz.0.1885 (pid 13041) Use of int in max_burst socket option.
[  340.587789][T13041] Use struct sctp_assoc_value instead
[  340.621721][T13039] macvlan1: entered promiscuous mode
[  340.649185][T13039] ipvlan0: entered promiscuous mode
[  340.686056][T13039] ipvlan0: left promiscuous mode
[  340.703807][T13039] macvlan1: left promiscuous mode
[  341.732021][T13064] wireguard0: entered promiscuous mode
[  341.741252][T13064] wireguard0: entered allmulticast mode
[  341.803067][T13062] syzkaller1: entered promiscuous mode
[  341.809884][T13062] syzkaller1: entered allmulticast mode
[  341.820915][T13061] erspan0: entered allmulticast mode
[  341.829346][T13075] syzkaller1: entered allmulticast mode
[  342.271007][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'.
[  342.313630][T13090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.648927][T13090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.770344][T13090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.926814][T13090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.196459][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'.
[  343.930521][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.948055][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.061135][ T1143] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.144218][ T1143] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.280220][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'.
[  344.296640][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'.
[  344.480621][T13178] lo speed is unknown, defaulting to 1000
[  344.503580][T13181] netlink: 'syz.1.1915': attribute type 58 has an invalid length.
[  344.561818][T13181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1915'.
[  345.520506][T13216] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1925'.
[  345.542818][T13216] gretap0: entered promiscuous mode
[  345.569188][T13216] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1925'.
[  345.569627][T13214] lo speed is unknown, defaulting to 1000
[  345.617310][T13216] 0ªî{X¹¦: renamed from gretap0
[  345.647148][T13216] 0ªî{X¹¦: left promiscuous mode
[  345.689626][T13216] 0ªî{X¹¦: entered allmulticast mode
[  345.707032][T13216] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  346.140367][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'.
[  346.373630][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'.
[  346.427914][T13249] lo speed is unknown, defaulting to 1000
[  347.228577][T13278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1958'.
[  347.482021][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1958'.
[  348.234296][T13314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1954'.
[  349.582803][T13372] FAULT_INJECTION: forcing a failure.
[  349.582803][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.610515][T13376] netlink: 'syz.1.1970': attribute type 10 has an invalid length.
[  349.708028][T13372] CPU: 1 UID: 0 PID: 13372 Comm: syz.0.1972 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  349.708064][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.708077][T13372] Call Trace:
[  349.708087][T13372]  <TASK>
[  349.708096][T13372]  dump_stack_lvl+0x189/0x250
[  349.708126][T13372]  ? __pfx____ratelimit+0x10/0x10
[  349.708155][T13372]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.708176][T13372]  ? __pfx__printk+0x10/0x10
[  349.708202][T13372]  ? __might_fault+0xb0/0x130
[  349.708247][T13372]  should_fail_ex+0x414/0x560
[  349.708285][T13372]  _copy_from_user+0x2d/0xb0
[  349.708315][T13372]  kstrtouint_from_user+0xc4/0x170
[  349.708341][T13372]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  349.708386][T13372]  proc_fail_nth_write+0x88/0x200
[  349.708411][T13372]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  349.708452][T13372]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  349.708475][T13372]  vfs_write+0x27b/0xa90
[  349.708512][T13372]  ? __pfx_vfs_write+0x10/0x10
[  349.708540][T13372]  ? __fget_files+0x2a/0x420
[  349.708563][T13372]  ? __fget_files+0x3a0/0x420
[  349.708580][T13372]  ? __fget_files+0x2a/0x420
[  349.708609][T13372]  ksys_write+0x145/0x250
[  349.708633][T13372]  ? __fget_files+0x3a0/0x420
[  349.708652][T13372]  ? __pfx_ksys_write+0x10/0x10
[  349.708684][T13372]  ? do_syscall_64+0xbe/0x3b0
[  349.708717][T13372]  do_syscall_64+0xfa/0x3b0
[  349.708742][T13372]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.708767][T13372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.708786][T13372]  ? clear_bhb_loop+0x60/0xb0
[  349.708809][T13372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.708827][T13372] RIP: 0033:0x7fd31a98d61f
[  349.708844][T13372] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  349.708861][T13372] RSP: 002b:00007fd31b898030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  349.708885][T13372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd31a98d61f
[  349.708898][T13372] RDX: 0000000000000001 RSI: 00007fd31b8980a0 RDI: 0000000000000004
[  349.708909][T13372] RBP: 00007fd31b898090 R08: 0000000000000000 R09: 0000000000000000
[  349.708921][T13372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  349.708932][T13372] R13: 0000000000000000 R14: 00007fd31abb5fa0 R15: 00007ffeb272aa58
[  349.708966][T13372]  </TASK>
[  350.361236][T13382] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1974'.
[  350.973111][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  351.001818][T13402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1981'.
[  351.500871][T13339] lo speed is unknown, defaulting to 1000
[  351.789079][T13431] netlink: 'syz.3.1992': attribute type 11 has an invalid length.
[  351.806354][T13431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1992'.
[  351.956859][T13443] netlink: 'syz.2.1996': attribute type 1 has an invalid length.
[  352.248787][T13443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  352.440552][T13446] lo speed is unknown, defaulting to 1000
[  352.812778][T13455] syzkaller1: entered promiscuous mode
[  352.860049][T13455] syzkaller1: entered allmulticast mode
[  352.910244][T13455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'.
[  353.071938][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'.
[  353.135147][T13474] sctp: [Deprecated]: syz.3.2007 (pid 13474) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.135147][T13474] Use struct sctp_sack_info instead
[  353.898007][T13516] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  354.003004][T13516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  354.013311][T13523] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2020'.
[  354.082451][ T5926] IPVS: starting estimator thread 0...
[  354.181873][T13530] IPVS: using max 25 ests per chain, 60000 per kthread
[  354.303247][T13532] lo speed is unknown, defaulting to 1000
[  354.367247][T13527] lo speed is unknown, defaulting to 1000
[  354.601183][T13546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2024'.
[  354.662060][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2024'.
[  354.799943][T13546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  354.823971][T13546] gretap2: entered promiscuous mode
[  354.836914][T13546] gretap2: entered allmulticast mode
[  355.045880][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'.
[  355.077946][T13574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.094125][T13570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'.
[  355.100656][T13574] netlink: 'syz.0.2027': attribute type 1 has an invalid length.
[  355.228068][ T7398] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  355.518195][T13588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2029'.
[  355.669139][T13596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'.
[  355.690731][T13596] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  355.762335][T13597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2033'.
[  355.836194][T13608] lo speed is unknown, defaulting to 1000
[  357.027068][T13642] netlink: 'syz.3.2042': attribute type 1 has an invalid length.
[  357.051995][T13642] netlink: 'syz.3.2042': attribute type 3 has an invalid length.
[  357.500582][T13657] netlink: 'syz.4.2046': attribute type 1 has an invalid length.
[  357.789799][T13660] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  357.860010][T13664] 8021q: adding VLAN 0 to HW filter on device bond4
[  357.870067][ T1143] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  357.957984][T13672] netlink: 'syz.0.2052': attribute type 10 has an invalid length.
[  357.977635][T13674] __nla_validate_parse: 10 callbacks suppressed
[  357.977660][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'.
[  358.486162][T13665] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  358.500531][T13665] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  358.524422][T13665] bond4 (unregistering): Released all slaves
[  358.851861][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.259768][T13716] _ÐZ`Ô€@: entered promiscuous mode
[  359.570815][T13728] delete_channel: no stack
[  359.606632][T13728] syzkaller1: entered allmulticast mode
[  359.649864][T13732] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  359.671990][T13732] netlink: 'syz.2.2073': attribute type 2 has an invalid length.
[  359.684004][T13732] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  359.704393][T13732] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.2073'.
[  360.101936][T13747] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  360.154335][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  360.210491][T13747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2078'.
[  360.398605][T13754] erspan0: left allmulticast mode
[  360.414929][T13754] veth1_to_team: left allmulticast mode
[  360.430951][T13754] vlan0: left promiscuous mode
[  360.519695][T13754] gretap1: left promiscuous mode
[  360.542603][T13754] geneve2: left promiscuous mode
[  360.556791][T13754] bridge1: left promiscuous mode
[  360.564470][T13754] bridge1: left allmulticast mode
[  360.610445][T13754] geneve3: left promiscuous mode
[  360.625724][T13754] geneve3: left allmulticast mode
[  360.658902][T13754] gretap2: left promiscuous mode
[  360.692133][T13754] gretap2: left allmulticast mode
[  360.783611][T13762] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  360.830230][ T1143] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  360.838084][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'.
[  360.881741][ T1143] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  361.023035][ T1143] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  361.067620][ T1143] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  361.531758][T13804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.256515][T13827] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2101'.
[  362.285743][T13827] netem: invalid attributes len -16
[  362.331977][T13827] netem: change failed
[  362.566946][T13844] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2104'.
[  363.075815][T13863] netlink: 'syz.1.2110': attribute type 1 has an invalid length.
[  363.134088][T13863] 8021q: adding VLAN 0 to HW filter on device bond5
[  363.166160][T13863] vlan2: entered promiscuous mode
[  363.174631][T13863] bond5: entered promiscuous mode
[  363.180659][T13863] vlan2: entered allmulticast mode
[  363.186755][T13863] bond5: entered allmulticast mode
[  363.308547][T13868] bond5: (slave gretap1): making interface the new active one
[  363.342088][T13868] gretap1: entered promiscuous mode
[  363.353873][T13868] gretap1: entered allmulticast mode
[  363.373556][T13868] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  364.004477][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  364.039283][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2121'.
[  364.122586][T13899] bond3: entered promiscuous mode
[  364.128048][T13899] bond3: entered allmulticast mode
[  364.134598][T13899] 8021q: adding VLAN 0 to HW filter on device bond3
[  364.408097][T13919] netlink: 'syz.4.2129': attribute type 3 has an invalid length.
[  364.432853][T13919] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2129'.
[  364.833136][T13947] sit0: left promiscuous mode
[  364.863184][T13947] bond0: left promiscuous mode
[  364.869653][T13947] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  364.893812][T13948] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  365.006230][T13947] macsec1: left promiscuous mode
[  365.056953][T13947] gretap1: left promiscuous mode
[  365.087562][T13955] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2139'.
[  365.093013][T13947] ip6tnl1: left promiscuous mode
[  365.108107][T13947] ip6gretap1: left promiscuous mode
[  365.119278][T13947] bond3: left promiscuous mode
[  365.366880][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'.
[  365.419156][ T5926] IPVS: starting estimator thread 0...
[  365.531961][T13976] IPVS: using max 26 ests per chain, 62400 per kthread
[  365.882372][T13985] netlink: 'syz.1.2149': attribute type 1 has an invalid length.
[  366.089026][T13991] bond6: (slave gretap2): making interface the new active one
[  366.144600][T13991] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  366.202517][T13989] lo speed is unknown, defaulting to 1000
[  366.268335][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'.
[  366.358580][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'.
[  366.823785][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'.
[  366.959733][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2150'.
[  367.321214][T14020] geneve4: entered promiscuous mode
[  367.414826][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  367.460345][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  367.532464][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  367.584434][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  368.679942][T14058] netlink: 'syz.0.2173': attribute type 21 has an invalid length.
[  368.711997][T14058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2173'.
[  369.344657][T14077] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  369.427194][T14077] bond6: (slave bridge0): Releasing active interface
[  369.573404][T14079] netlink: 'syz.3.2178': attribute type 10 has an invalid length.
[  369.674769][T14079] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  369.820640][T14090] FAULT_INJECTION: forcing a failure.
[  369.820640][T14090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.842381][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.0.2181 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  369.842425][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  369.842437][T14090] Call Trace:
[  369.842446][T14090]  <TASK>
[  369.842455][T14090]  dump_stack_lvl+0x189/0x250
[  369.842484][T14090]  ? __pfx____ratelimit+0x10/0x10
[  369.842514][T14090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.842535][T14090]  ? __pfx__printk+0x10/0x10
[  369.842559][T14090]  ? __might_fault+0xb0/0x130
[  369.842602][T14090]  should_fail_ex+0x414/0x560
[  369.842639][T14090]  _copy_from_user+0x2d/0xb0
[  369.842668][T14090]  ___sys_sendmsg+0x158/0x2a0
[  369.842694][T14090]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.842758][T14090]  ? __fget_files+0x2a/0x420
[  369.842777][T14090]  ? __fget_files+0x3a0/0x420
[  369.842808][T14090]  __x64_sys_sendmsg+0x19b/0x260
[  369.842833][T14090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.842866][T14090]  ? __pfx_ksys_write+0x10/0x10
[  369.842891][T14090]  ? rcu_is_watching+0x15/0xb0
[  369.842928][T14090]  ? do_syscall_64+0xbe/0x3b0
[  369.842961][T14090]  do_syscall_64+0xfa/0x3b0
[  369.842988][T14090]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.843014][T14090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.843043][T14090]  ? clear_bhb_loop+0x60/0xb0
[  369.843069][T14090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.843088][T14090] RIP: 0033:0x7fd31a98eb69
[  369.843107][T14090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.843124][T14090] RSP: 002b:00007fd31b898038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.843146][T14090] RAX: ffffffffffffffda RBX: 00007fd31abb5fa0 RCX: 00007fd31a98eb69
[  369.843160][T14090] RDX: 0000000004008800 RSI: 0000200000000240 RDI: 0000000000000005
[  369.843173][T14090] RBP: 00007fd31b898090 R08: 0000000000000000 R09: 0000000000000000
[  369.843184][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.843195][T14090] R13: 0000000000000000 R14: 00007fd31abb5fa0 R15: 00007ffeb272aa58
[  369.843227][T14090]  </TASK>
[  370.738690][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'.
[  370.834682][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'.
[  370.959742][T14111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2187'.
[  371.033393][T14113] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2188'.
[  371.053031][T14113] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2188'.
[  371.062708][T14113] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2188'.
[  371.874880][T14137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.900294][T14137] syzkaller0: entered promiscuous mode
[  371.927583][T14137] syzkaller0: entered allmulticast mode
[  372.153699][T14147] netlink: 'syz.0.2197': attribute type 20 has an invalid length.
[  372.323321][T14136] tipc: Resetting bearer <eth:syzkaller0>
[  372.433492][T14136] tipc: Disabling bearer <eth:syzkaller0>
[  372.666837][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'.
[  373.689724][T14190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.021589][T14204] netlink: 'syz.2.2212': attribute type 2 has an invalid length.
[  374.246373][T14219] FAULT_INJECTION: forcing a failure.
[  374.246373][T14219] name failslab, interval 1, probability 0, space 0, times 0
[  374.331711][T14219] CPU: 0 UID: 0 PID: 14219 Comm: syz.4.2216 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  374.331746][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  374.331758][T14219] Call Trace:
[  374.331768][T14219]  <TASK>
[  374.331789][T14219]  dump_stack_lvl+0x189/0x250
[  374.331817][T14219]  ? __pfx____ratelimit+0x10/0x10
[  374.331846][T14219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.331866][T14219]  ? __pfx__printk+0x10/0x10
[  374.331895][T14219]  ? __pfx___might_resched+0x10/0x10
[  374.331925][T14219]  ? fs_reclaim_acquire+0x7d/0x100
[  374.331954][T14219]  should_fail_ex+0x414/0x560
[  374.331993][T14219]  should_failslab+0xa8/0x100
[  374.332025][T14219]  __kmalloc_noprof+0xcb/0x4f0
[  374.332053][T14219]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  374.332093][T14219]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  374.332127][T14219]  genl_start+0x180/0x6c0
[  374.332148][T14219]  ? netlink_lookup+0x30/0x200
[  374.332186][T14219]  __netlink_dump_start+0x469/0x7e0
[  374.332226][T14219]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  374.332254][T14219]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  374.332273][T14219]  ? genl_get_cmd+0x67f/0x910
[  374.332297][T14219]  ? __pfx_genl_start+0x10/0x10
[  374.332314][T14219]  ? __pfx_genl_dumpit+0x10/0x10
[  374.332331][T14219]  ? __pfx_genl_done+0x10/0x10
[  374.332357][T14219]  ? stack_trace_save+0x9c/0xe0
[  374.332388][T14219]  genl_rcv_msg+0x5da/0x790
[  374.332418][T14219]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.332439][T14219]  ? __pfx_ethnl_tsinfo_start+0x10/0x10
[  374.332466][T14219]  ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10
[  374.332492][T14219]  ? __pfx_ethnl_tsinfo_done+0x10/0x10
[  374.332542][T14219]  netlink_rcv_skb+0x205/0x470
[  374.332568][T14219]  ? __lock_acquire+0xab9/0xd20
[  374.332597][T14219]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.332622][T14219]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.332676][T14219]  ? down_read+0x1ad/0x2e0
[  374.332701][T14219]  genl_rcv+0x28/0x40
[  374.332721][T14219]  netlink_unicast+0x82c/0x9e0
[  374.332761][T14219]  ? __pfx_netlink_unicast+0x10/0x10
[  374.332791][T14219]  ? netlink_sendmsg+0x642/0xb30
[  374.332817][T14219]  ? skb_put+0x11b/0x210
[  374.332843][T14219]  netlink_sendmsg+0x805/0xb30
[  374.332885][T14219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.332920][T14219]  ? aa_sock_msg_perm+0x94/0x160
[  374.332949][T14219]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  374.332972][T14219]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.333012][T14219]  __sock_sendmsg+0x219/0x270
[  374.333044][T14219]  ____sys_sendmsg+0x505/0x830
[  374.333074][T14219]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.333108][T14219]  ? import_iovec+0x74/0xa0
[  374.333142][T14219]  ___sys_sendmsg+0x21f/0x2a0
[  374.333167][T14219]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.333238][T14219]  ? __fget_files+0x2a/0x420
[  374.333257][T14219]  ? __fget_files+0x3a0/0x420
[  374.333292][T14219]  __x64_sys_sendmsg+0x19b/0x260
[  374.333318][T14219]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.333353][T14219]  ? __pfx_ksys_write+0x10/0x10
[  374.333378][T14219]  ? rcu_is_watching+0x15/0xb0
[  374.333416][T14219]  ? do_syscall_64+0xbe/0x3b0
[  374.333450][T14219]  do_syscall_64+0xfa/0x3b0
[  374.333477][T14219]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.333504][T14219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.333525][T14219]  ? clear_bhb_loop+0x60/0xb0
[  374.333552][T14219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.333571][T14219] RIP: 0033:0x7f917bf8eb69
[  374.333592][T14219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.333610][T14219] RSP: 002b:00007f917ce26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.333633][T14219] RAX: ffffffffffffffda RBX: 00007f917c1b5fa0 RCX: 00007f917bf8eb69
[  374.333647][T14219] RDX: 0000000004008800 RSI: 0000200000000240 RDI: 0000000000000005
[  374.333661][T14219] RBP: 00007f917ce26090 R08: 0000000000000000 R09: 0000000000000000
[  374.333673][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.333685][T14219] R13: 0000000000000000 R14: 00007f917c1b5fa0 R15: 00007ffe35c3f198
[  374.333722][T14219]  </TASK>
[  375.503513][T14253] netlink: 'syz.3.2224': attribute type 1 has an invalid length.
[  375.577501][T14255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'.
[  375.714881][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'.
[  375.733622][T14265] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2227'.
[  375.749742][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'.
[  375.781154][T14264] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  375.842331][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'.
[  375.913931][T14269] macvtap1: entered promiscuous mode
[  375.933669][T14269] erspan0: entered promiscuous mode
[  375.943954][T14269] macvtap1: entered allmulticast mode
[  375.953076][T14269] erspan0: entered allmulticast mode
[  375.979106][T14272] erspan0: left allmulticast mode
[  376.006618][T14272] erspan0: left promiscuous mode
[  376.322398][T14287] bond0: (slave geneve2): Releasing active interface
[  376.333819][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.406698][T14287] bond5: (slave gretap1): Releasing active interface
[  376.423633][T14292] netlink: 'syz.4.2235': attribute type 1 has an invalid length.
[  376.448424][T14287] gretap1: left promiscuous mode
[  376.471105][T14292] netlink: 'syz.4.2235': attribute type 3 has an invalid length.
[  376.482046][T14295] netlink: 'syz.1.2233': attribute type 10 has an invalid length.
[  376.498385][T14287] gretap1: left allmulticast mode
[  376.517647][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.536999][T14292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2235'.
[  376.653025][T14287] bond6: (slave gretap2): Releasing active interface
[  376.740299][   T49] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  376.780111][   T49] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  376.791944][   T49] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  376.835078][T14307] netlink: 'syz.4.2236': attribute type 4 has an invalid length.
[  376.886697][T14308] netlink: 'syz.4.2236': attribute type 4 has an invalid length.
[  376.897212][   T49] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  377.016241][T14304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2236'.
[  377.225833][T14315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2241'.
[  377.676949][T14310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2239'.
[  377.715406][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'.
[  377.821261][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'.
[  378.033744][T14354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'.
[  378.101602][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2251'.
[  378.419575][T14379] netlink: 'syz.1.2258': attribute type 6 has an invalid length.
[  378.429583][T14380] netlink: 'syz.1.2258': attribute type 6 has an invalid length.
[  378.431939][T14380] netlink: 'syz.1.2258': attribute type 6 has an invalid length.
[  378.726028][T14387] pimreg: entered allmulticast mode
[  378.882515][T14398] netlink: 'syz.1.2263': attribute type 1 has an invalid length.
[  379.214320][T14420] netlink: 'syz.0.2271': attribute type 4 has an invalid length.
[  379.258839][T14420] syzkaller1: entered promiscuous mode
[  379.265503][T14420] syzkaller1: entered allmulticast mode
[  379.675447][T14444] netlink: 'syz.3.2277': attribute type 2 has an invalid length.
[  379.704367][T14444] netlink: 'syz.3.2277': attribute type 1 has an invalid length.
[  379.833636][T14452] FAULT_INJECTION: forcing a failure.
[  379.833636][T14452] name failslab, interval 1, probability 0, space 0, times 0
[  379.857450][T14452] CPU: 1 UID: 0 PID: 14452 Comm: syz.0.2279 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  379.857483][T14452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  379.857496][T14452] Call Trace:
[  379.857505][T14452]  <TASK>
[  379.857514][T14452]  dump_stack_lvl+0x189/0x250
[  379.857542][T14452]  ? __pfx____ratelimit+0x10/0x10
[  379.857572][T14452]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.857594][T14452]  ? __pfx__printk+0x10/0x10
[  379.857628][T14452]  ? __pfx___might_resched+0x10/0x10
[  379.857657][T14452]  ? fs_reclaim_acquire+0x7d/0x100
[  379.857685][T14452]  should_fail_ex+0x414/0x560
[  379.857723][T14452]  should_failslab+0xa8/0x100
[  379.857745][T14452]  __kmalloc_cache_noprof+0x70/0x3d0
[  379.857804][T14452]  ? ethnl_tsinfo_start+0xcd/0x2c0
[  379.857841][T14452]  ethnl_tsinfo_start+0xcd/0x2c0
[  379.857868][T14452]  ? genl_start+0x4a3/0x6c0
[  379.857895][T14452]  genl_start+0x4c3/0x6c0
[  379.857925][T14452]  __netlink_dump_start+0x469/0x7e0
[  379.857962][T14452]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  379.857992][T14452]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  379.858030][T14452]  ? genl_get_cmd+0x67f/0x910
[  379.858058][T14452]  ? __pfx_genl_start+0x10/0x10
[  379.858078][T14452]  ? __pfx_genl_dumpit+0x10/0x10
[  379.858098][T14452]  ? __pfx_genl_done+0x10/0x10
[  379.858128][T14452]  ? stack_trace_save+0x9c/0xe0
[  379.858158][T14452]  genl_rcv_msg+0x5da/0x790
[  379.858191][T14452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  379.858212][T14452]  ? __pfx_ethnl_tsinfo_start+0x10/0x10
[  379.858239][T14452]  ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10
[  379.858266][T14452]  ? __pfx_ethnl_tsinfo_done+0x10/0x10
[  379.858315][T14452]  netlink_rcv_skb+0x205/0x470
[  379.858341][T14452]  ? __lock_acquire+0xab9/0xd20
[  379.858369][T14452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  379.858394][T14452]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  379.858449][T14452]  ? down_read+0x1ad/0x2e0
[  379.858472][T14452]  genl_rcv+0x28/0x40
[  379.858492][T14452]  netlink_unicast+0x82c/0x9e0
[  379.858530][T14452]  ? __pfx_netlink_unicast+0x10/0x10
[  379.858559][T14452]  ? netlink_sendmsg+0x642/0xb30
[  379.858586][T14452]  ? skb_put+0x11b/0x210
[  379.858611][T14452]  netlink_sendmsg+0x805/0xb30
[  379.858652][T14452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  379.858686][T14452]  ? aa_sock_msg_perm+0x94/0x160
[  379.858715][T14452]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  379.858739][T14452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  379.858770][T14452]  __sock_sendmsg+0x219/0x270
[  379.858799][T14452]  ____sys_sendmsg+0x505/0x830
[  379.858827][T14452]  ? __pfx_____sys_sendmsg+0x10/0x10
[  379.858859][T14452]  ? import_iovec+0x74/0xa0
[  379.858892][T14452]  ___sys_sendmsg+0x21f/0x2a0
[  379.858916][T14452]  ? __pfx____sys_sendmsg+0x10/0x10
[  379.858983][T14452]  ? __fget_files+0x2a/0x420
[  379.859010][T14452]  ? __fget_files+0x3a0/0x420
[  379.859042][T14452]  __x64_sys_sendmsg+0x19b/0x260
[  379.859066][T14452]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  379.859098][T14452]  ? __pfx_ksys_write+0x10/0x10
[  379.859123][T14452]  ? rcu_is_watching+0x15/0xb0
[  379.859158][T14452]  ? do_syscall_64+0xbe/0x3b0
[  379.859191][T14452]  do_syscall_64+0xfa/0x3b0
[  379.859218][T14452]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.859244][T14452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.859263][T14452]  ? clear_bhb_loop+0x60/0xb0
[  379.859287][T14452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.859307][T14452] RIP: 0033:0x7fd31a98eb69
[  379.859326][T14452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.859344][T14452] RSP: 002b:00007fd31b898038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  379.859368][T14452] RAX: ffffffffffffffda RBX: 00007fd31abb5fa0 RCX: 00007fd31a98eb69
[  379.859382][T14452] RDX: 0000000004008800 RSI: 0000200000000240 RDI: 0000000000000005
[  379.859396][T14452] RBP: 00007fd31b898090 R08: 0000000000000000 R09: 0000000000000000
[  379.859409][T14452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.859421][T14452] R13: 0000000000000000 R14: 00007fd31abb5fa0 R15: 00007ffeb272aa58
[  379.859455][T14452]  </TASK>
[  381.073806][T14500] __nla_validate_parse: 7 callbacks suppressed
[  381.073830][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'.
[  382.385148][T14526] lo speed is unknown, defaulting to 1000
[  382.722755][T14539] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2304'.
[  382.755405][T14539] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2304'.
[  382.771755][ T5844] Bluetooth: hci4: command 0x0401 tx timeout
[  383.500991][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'.
[  383.516393][T14559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2309'.
[  383.583887][T14562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2309'.
[  383.612834][T14563] netlink: 1532 bytes leftover after parsing attributes in process `syz.0.2308'.
[  385.013859][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2321'.
[  385.013872][T14599] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2321'.
[  385.125005][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'.
[  386.031691][T14639] vlan3: entered promiscuous mode
[  386.179131][T14643] lo speed is unknown, defaulting to 1000
[  386.359000][T14655] __nla_validate_parse: 2 callbacks suppressed
[  386.359024][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'.
[  386.624871][T14662] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.774577][T14662] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.038035][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'.
[  387.196493][T14662] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.420760][T14662] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.467591][T14693] netlink: 'syz.0.2346': attribute type 13 has an invalid length.
[  387.476689][T14693] netlink: 'syz.0.2346': attribute type 17 has an invalid length.
[  387.620973][T14697] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002
[  387.719161][T14702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2350'.
[  387.745248][T14693] bond0: left allmulticast mode
[  387.753459][T14693] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  387.769312][T14693] 8021q: adding VLAN 0 to HW filter on device team0
[  387.788523][T14693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.808372][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.879690][T14708] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0
[  387.950638][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.984795][ T1143] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  388.059020][T14694] lo speed is unknown, defaulting to 1000
[  388.185479][ T1143] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.215655][ T1143] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.385246][ T3476] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.639200][T14734] lo speed is unknown, defaulting to 1000
[  389.057213][T14743] lo speed is unknown, defaulting to 1000
[  389.398337][T14752] lo speed is unknown, defaulting to 1000
[  390.029237][T14787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.068503][T14783] syzkaller0: entered promiscuous mode
[  390.111611][T14783] syzkaller0: entered allmulticast mode
[  390.170375][T14792] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2374'.
[  390.188078][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'.
[  390.343072][T14784] tipc: Resetting bearer <eth:syzkaller0>
[  390.392787][T14784] tipc: Disabling bearer <eth:syzkaller0>
[  390.460459][T14792] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  391.078072][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'.
[  391.390165][T14837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2385'.
[  391.912177][T14845] lo speed is unknown, defaulting to 1000
[  392.067070][T14850] tipc: New replicast peer: 255.255.255.255
[  392.116367][T14850] tipc: Enabled bearer <udp:syz2>, priority 10
[  393.032826][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2390'.
[  393.241660][ T8904] tipc: Node number set to 3384707493
[  394.778637][T14932] lo speed is unknown, defaulting to 1000
[  395.833425][T14957] team0: Port device dummy0 removed
[  395.852866][T14957] bond0: (slave wlan1): Releasing backup interface
[  396.087638][T14963] team0: Mode changed to "activebackup"
[  396.708194][T14966] lo speed is unknown, defaulting to 1000
[  396.990443][T14992] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2430'.
[  397.262638][T14992] syzkaller0: entered promiscuous mode
[  397.278963][T14992] syzkaller0: entered allmulticast mode
[  397.396516][T15004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2434'.
[  397.546911][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2434'.
[  401.597302][T15064] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  401.684888][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'.
[  401.752584][T15070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2452'.
[  401.793332][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2452'.
[  402.578883][T15095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.595230][T15094] syzkaller0: entered promiscuous mode
[  402.623330][T15094] syzkaller0: entered allmulticast mode
[  402.764681][T15094] tipc: Resetting bearer <eth:syzkaller0>
[  402.782348][T15094] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2460'.
[  402.809371][T15095] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2460'.
[  402.893847][T15093] tipc: Resetting bearer <eth:syzkaller0>
[  402.992971][T15093] tipc: Disabling bearer <eth:syzkaller0>
[  403.159782][T15113] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.275335][T15118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.295549][T15113] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.341183][T15118] syzkaller0: entered promiscuous mode
[  403.349714][T15118] syzkaller0: entered allmulticast mode
[  403.396292][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2470'.
[  403.428245][T15113] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.524142][T15114] tipc: Resetting bearer <eth:syzkaller0>
[  403.551316][T15114] tipc: Disabling bearer <eth:syzkaller0>
[  403.575098][T15113] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.603898][T15129] syzkaller0: Caught tx_queue_len zero misconfig
[  403.878299][ T1143] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  403.899880][ T1143] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  403.954823][ T1143] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  404.005005][ T1143] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  404.829717][T15160] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  405.298954][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'.
[  405.580922][T15188] lo speed is unknown, defaulting to 1000
[  405.603564][T15190] netlink: 'syz.3.2487': attribute type 13 has an invalid length.
[  405.614006][T15190] netlink: 'syz.3.2487': attribute type 17 has an invalid length.
[  405.725162][T15190] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.740078][T15190] 8021q: adding VLAN 0 to HW filter on device team0
[  405.753171][T15190] tipc: Resetting bearer <eth:team0>
[  405.759271][T15190] tipc: Resetting bearer <eth:team0>
[  405.791756][T15190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.944648][T15200] tun0: tun_chr_ioctl cmd 2147767507
[  407.066393][T15242] netlink: 'syz.2.2504': attribute type 13 has an invalid length.
[  407.109671][T15242] netlink: 'syz.2.2504': attribute type 17 has an invalid length.
[  407.380403][T15242] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.490945][T15242] 8021q: adding VLAN 0 to HW filter on device team0
[  407.713591][T15242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  407.939062][T15269] netlink: 'syz.3.2512': attribute type 1 has an invalid length.
[  407.975137][T15269] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2512'.
[  408.022956][T15269] NCSI netlink: No device for ifindex 0
[  408.044268][T15273] netlink: 'syz.0.2513': attribute type 1 has an invalid length.
[  408.068194][T15274] bond0: option tlb_dynamic_lb: unable to set because the bond device is up
[  408.092787][T15273] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2513'.
[  408.154831][T15276] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2513'.
[  408.362216][T15285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.401045][T15285] netlink: 13268 bytes leftover after parsing attributes in process `syz.0.2517'.
[  408.412294][T15285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2517'.
[  408.624226][T15294] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2519'.
[  408.715329][T15297] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2521'.
[  408.782050][T15297] netlink: zone id is out of range
[  408.792573][T15297] netlink: zone id is out of range
[  408.799103][T15297] netlink: zone id is out of range
[  408.825466][T15297] netlink: zone id is out of range
[  408.835607][T15297] netlink: get zone limit has 8 unknown bytes
[  408.985452][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2524'.
[  409.035470][T15305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.052393][T15305] syzkaller0: entered promiscuous mode
[  409.067339][T15305] syzkaller0: entered allmulticast mode
[  409.099632][T15306] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.227480][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  409.239035][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'.
[  409.251260][T15303] tipc: Resetting bearer <eth:syzkaller0>
[  409.322700][T15303] tipc: Disabling bearer <eth:syzkaller0>
[  409.364747][T15306] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.485778][T15306] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.615522][T15306] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.934940][ T3469] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.989289][ T3469] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  410.042135][ T3469] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  410.077715][ T3469] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  410.210196][T15352] IPv6: Can't replace route, no match found
[  410.256442][T15352] vlan0: entered promiscuous mode
[  410.318019][T15352] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  410.549446][T15366] lo speed is unknown, defaulting to 1000
[  411.178007][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.208300][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.273537][T15391] lo speed is unknown, defaulting to 1000
[  411.299672][T15397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.867635][T15414] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001
[  411.892897][T15414] netlink: 'syz.4.2557': attribute type 7 has an invalid length.
[  411.931088][T15414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.095681][T15414] syzkaller0: entered promiscuous mode
[  412.122127][T15414] syzkaller0: entered allmulticast mode
[  412.135841][T15414] tipc: Resetting bearer <eth:syzkaller0>
[  412.335188][ T3469] tipc: Resetting bearer <eth:syzkaller0>
[  412.358295][T15414] tipc: Resetting bearer <eth:syzkaller0>
[  412.378695][T15435] sit0: entered promiscuous mode
[  412.442452][T15435] netlink: 'syz.3.2562': attribute type 1 has an invalid length.
[  412.473801][T15433] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  412.541662][T15413] tipc: Resetting bearer <eth:syzkaller0>
[  416.218214][T15413] tipc: Disabling bearer <eth:syzkaller0>
[  416.251730][T15450] __nla_validate_parse: 7 callbacks suppressed
[  416.251759][T15450] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2561'.
[  416.471137][T15470] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  416.522482][   T30] audit: type=1800 audit(1754415555.417:6): pid=15470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2571" name="memory.events" dev="tmpfs" ino=2723 res=0 errno=0
[  416.558875][T15472] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.667668][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'.
[  416.769393][T15472] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.970216][T15472] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.071342][T15472] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.196110][T15490] lo speed is unknown, defaulting to 1000
[  417.403054][T15500] netlink: 'syz.1.2580': attribute type 3 has an invalid length.
[  417.506114][ T1143] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.574397][   T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.614061][ T3469] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.680421][ T7398] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.889943][T15512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2583'.
[  417.934317][T15507] pimreg: entered allmulticast mode
[  417.937763][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2584'.
[  418.278503][T15523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.332339][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'.
[  418.357423][T15523] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  418.369891][T15520] tipc: Resetting bearer <eth:syzkaller0>
[  418.447279][T15520] tipc: Disabling bearer <eth:syzkaller0>
[  418.738496][T15547] tipc: Enabled bearer <ib:veth1_to_bond>, priority 10
[  419.288205][T15574] sctp: [Deprecated]: syz.1.2602 (pid 15574) Use of int in max_burst socket option deprecated.
[  419.288205][T15574] Use struct sctp_assoc_value instead
[  419.430664][T15579] netlink: 'syz.0.2603': attribute type 10 has an invalid length.
[  419.485795][T15579] team0: Refused to change device type
[  420.561268][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'.
[  420.599002][T15631] lo speed is unknown, defaulting to 1000
[  420.739224][T15635] lo speed is unknown, defaulting to 1000
[  420.839980][T15646] netlink: 'syz.1.2627': attribute type 13 has an invalid length.
[  420.936313][T15646] tipc: Resetting bearer <ib:veth1_to_bond>
[  420.946372][ T8906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.552738][ T8906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.782686][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'.
[  421.875846][T15682] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  421.997377][T15691] netlink: 'syz.3.2637': attribute type 32 has an invalid length.
[  422.036318][T15693] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2638'.
[  422.050808][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'.
[  422.102954][T15691] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  422.376341][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'.
[  422.391267][T15709] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2641'.
[  422.542036][ T8906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  422.560390][T15715] tipc: Resetting bearer <ib:veth1_to_bond>
[  423.075389][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'.
[  423.137479][T15738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2650'.
[  423.191798][ T8906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.207414][T15738] gre1: entered allmulticast mode
[  423.529324][T15752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2656'.
[  423.635589][T15751] netlink: 'syz.3.2655': attribute type 66 has an invalid length.
[  423.809173][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2659'.
[  423.828437][T15762] netlink: 'syz.0.2659': attribute type 1 has an invalid length.
[  423.837731][T15762] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2659'.
[  424.218972][T15788] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  424.669289][T15803] netlink: 'syz.0.2670': attribute type 15 has an invalid length.
[  424.752186][T15805] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  425.559184][T15849] netlink: 'syz.4.2684': attribute type 1 has an invalid length.
[  425.988662][T15860] lo speed is unknown, defaulting to 1000
[  426.858765][T15892] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  428.050784][T15921] lo speed is unknown, defaulting to 1000
[  428.080835][T15924] netlink: 'syz.1.2703': attribute type 13 has an invalid length.
[  428.098580][T15924] netlink: 'syz.1.2703': attribute type 17 has an invalid length.
[  428.175175][T15924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  428.194856][  T978] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.216679][   T24] lo speed is unknown, defaulting to 1000
[  428.231360][   T24] syz2: Port: 1 Link ACTIVE
[  428.551897][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  428.911145][T15948] __nla_validate_parse: 11 callbacks suppressed
[  428.911172][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'.
[  429.024581][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'.
[  429.046793][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'.
[  429.106306][T15951] lo speed is unknown, defaulting to 1000
[  429.132135][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'.
[  429.143400][ T5159] Bluetooth: hci4: link tx timeout
[  429.150391][ T5159] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  429.179974][T15956] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  429.212006][T15956] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  429.283361][T15959] netlink: 'syz.4.2712': attribute type 1 has an invalid length.
[  429.316940][T15959] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2712'.
[  429.353112][T15959] NCSI netlink: No device for ifindex 0
[  429.699202][T15979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.752254][T15982] syzkaller0: entered promiscuous mode
[  429.759709][T15982] syzkaller0: entered allmulticast mode
[  429.794807][T15984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  429.932550][T15992] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  429.964564][T15979] tipc: Resetting bearer <eth:syzkaller0>
[  430.100694][T15989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2720'.
[  430.116296][T15989] netlink: 'syz.0.2720': attribute type 10 has an invalid length.
[  430.121192][T16004] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  430.134496][T16004] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  430.382184][T15976] tipc: Resetting bearer <eth:syzkaller0>
[  430.448211][T15976] tipc: Disabling bearer <eth:syzkaller0>
[  430.516138][T15989] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  430.563359][T15989] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  430.793118][T16028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2728'.
[  431.172078][ T5844] Bluetooth: hci4: command 0x0401 tx timeout
[  431.244913][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'.
[  431.248840][T10302] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  431.270786][T10302] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  431.282724][T10302] CPU: 1 UID: 0 PID: 10302 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  431.296305][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  431.310226][T10302] RIP: 0010:klist_del+0x49/0x110
[  431.318507][T10302] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65
[  431.349390][T10302] RSP: 0018:ffffc90003457768 EFLAGS: 00010202
[  431.358453][T10302] RAX: 000000000000000b RBX: ffff88807ea05060 RCX: ffff88806bc65a00
[  431.368610][T10302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  431.379098][T10302] RBP: ffffc90003457890 R08: ffff88806993b003 R09: 1ffff1100d327600
[  431.388610][T10302] R10: dffffc0000000000 R11: ffffed100d327601 R12: dffffc0000000000
[  431.398976][T10302] R13: 1ffff1100fd40a0c R14: 0000000000000000 R15: ffff888024214750
[  431.408283][T10302] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  431.420378][T10302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.428070][T10302] CR2: 00007ffe35c3dc78 CR3: 000000005e47e000 CR4: 00000000003526f0
[  431.436939][T10302] Call Trace:
[  431.440687][T10302]  <TASK>
[  431.443727][T10302]  device_del+0x280/0x8e0
[  431.448759][T10302]  ? _raw_spin_unlock_irq+0x2e/0x50
[  431.454815][T10302]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  431.462413][T10302]  ? __pfx_device_del+0x10/0x10
[  431.467873][T10302]  ? netdev_unregister_kobject+0x344/0x450
[  431.474415][T10302]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  431.482453][T10302]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  431.489956][T10302]  ? rtnl_net_dev_lock+0x257/0x2f0
[  431.495480][T10302]  unregister_netdevice_queue+0x33c/0x380
[  431.502789][T10302]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  431.522579][T10302]  ? rtnl_net_dev_lock+0x36/0x2f0
[  431.528790][T10302]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  431.537872][T10302]  unregister_netdev+0x1f/0x60
[  431.544702][T10302]  bnep_session+0x294d/0x2b40
[  431.551123][T10302]  ? __schedule+0x1755/0x4d30
[  431.556890][T10302]  ? __lock_acquire+0xab9/0xd20
[  431.563719][T10302]  ? __pfx_bnep_session+0x10/0x10
[  431.570321][T10302]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  431.580384][T10302]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  431.589734][T10302]  ? __pfx_woken_wake_function+0x10/0x10
[  431.596764][T10302]  ? __kthread_parkme+0x7b/0x200
[  431.605376][T10302]  ? __kthread_parkme+0x1a1/0x200
[  431.612982][T10302]  kthread+0x70e/0x8a0
[  431.618823][T10302]  ? __pfx_bnep_session+0x10/0x10
[  431.625571][T10302]  ? __pfx_kthread+0x10/0x10
[  431.632267][T10302]  ? _raw_spin_unlock_irq+0x23/0x50
[  431.638902][T10302]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.645502][T10302]  ? __pfx_kthread+0x10/0x10
[  431.651081][T10302]  ret_from_fork+0x3fc/0x770
[  431.656513][T10302]  ? __pfx_ret_from_fork+0x10/0x10
[  431.664600][T10302]  ? __switch_to_asm+0x39/0x70
[  431.670641][T10302]  ? __switch_to_asm+0x33/0x70
[  431.676622][T10302]  ? __pfx_kthread+0x10/0x10
[  431.682967][T10302]  ret_from_fork_asm+0x1a/0x30
[  431.688497][T10302]  </TASK>
[  431.691701][T10302] Modules linked in:
[  431.696187][T10302] ---[ end trace 0000000000000000 ]---
[  431.719626][T10302] RIP: 0010:klist_del+0x49/0x110
[  431.728171][T10302] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 dd bc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b dd bc f6 4d 8b 7e 58 4c 89 f7 e8 bf 65
[  431.749872][T10302] RSP: 0018:ffffc90003457768 EFLAGS: 00010202
[  431.756652][T10302] RAX: 000000000000000b RBX: ffff88807ea05060 RCX: ffff88806bc65a00
[  431.765565][T10302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  431.774333][T10302] RBP: ffffc90003457890 R08: ffff88806993b003 R09: 1ffff1100d327600
[  431.782771][T10302] R10: dffffc0000000000 R11: ffffed100d327601 R12: dffffc0000000000
[  431.791320][T10302] R13: 1ffff1100fd40a0c R14: 0000000000000000 R15: ffff888024214750
[  431.800353][T10302] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  431.815599][T10302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.825738][T10302] CR2: 00007f0312fd7f98 CR3: 00000000677a2000 CR4: 00000000003526f0
[  431.834962][T10302] Kernel panic - not syncing: Fatal exception
[  431.841911][T10302] Kernel Offset: disabled
[  431.846789][T10302] Rebooting in 86400 seconds..