last executing test programs:

3.390635652s ago: executing program 0 (id=6212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r3=>0x0})
socket$unix(0x1, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1c}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

2.632737573s ago: executing program 2 (id=6219):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={<r0=>0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x7dc84015d334f49, &(0x7f0000000200)={@align=0x8, {0x40, 0x3, 0x1, 0x489}}, 0x66e, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0x3})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000140)='./file0\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000280)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x7a, 0x7, 0x1, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xa, 0x5, 0x0, 0x800, 0x2]}})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000100)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="4b9b2b131015", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xfc, 0x0, @void}}}}}}}}, 0x2e)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000220000000002b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20002041}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socket(0xa, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109240, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000027e5535e69856b910fd9ed52bda553a1c7dfef1cd7ab419c1a2a1be117fe0db587c1b6007a362acdc8ff5090d32506c4ebb073dbde7283000d60b194a1067efff050ee38164ae95420631b43f9baf8c55807f53597d09d2b08d1da25697138d6beb83d6b8211cc6c5bcbff8587", @ANYRESDEC=r5, @ANYBLOB="010000000d260000000068390f9402c488a57b446edeec0000000000000001410000001c001700050000000200"/61], 0x38}, 0x1, 0x0, 0x0, 0x8097}, 0x8000)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r10)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.515392583s ago: executing program 3 (id=6222):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value=0x102}, 0x21)

2.388135964s ago: executing program 0 (id=6223):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x20008040)

2.33183847s ago: executing program 3 (id=6225):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070003000000080006"], 0x4c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000100))
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r6, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x4000)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x5cae3fc8e6bb7a9f, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140))
r9 = epoll_create1(0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000240)={0xa0000004})

2.174337619s ago: executing program 1 (id=6227):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x500}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ffffff}}], {{}, {}, {0x85, 0x0, 0xfff3, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)

2.156829653s ago: executing program 0 (id=6228):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r2, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x0, 0x0, 0x2, 0x67}, 0x8)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000200)={r1, 0x0, 0x294000, &(0x7f0000000140)={@_ha_fsid={[0xff, 0x6]}, {0x40, 0x0, 0x87d, 0xd}}, 0x9, 0x0, 0x0})
sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000000000000290000000b"], 0x18}, 0x48010)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)

2.000646459s ago: executing program 0 (id=6230):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000040)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f00000003c0)=""/117, 0x75}], 0x4}, 0x8}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000540)=""/151, 0x97}], 0x3, &(0x7f0000000640)=""/255, 0xff}, 0x3ff}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/39, 0x27}, {&(0x7f0000000a00)=""/37, 0x25}], 0x6, &(0x7f0000000ac0)=""/74, 0x4a}, 0x8}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/41, 0x29}, {&(0x7f0000000c00)=""/175, 0xaf}, {&(0x7f0000000cc0)=""/47, 0x2f}, {&(0x7f0000000d00)=""/48, 0x30}, {&(0x7f0000000d40)=""/32, 0x20}], 0x6, &(0x7f0000000e00)=""/79, 0x4f}, 0x1}], 0x4, 0x10002, 0x0) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000f80), 0x400c03, 0x0)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000fc0)={0x8029, 0x3}) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES64=r2, @ANYRES16=r1, @ANYRES16=r2], 0x54}}, 0x0)

1.917598562s ago: executing program 4 (id=6231):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00000002c0))
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="c200000086255c847f71e4a1d9f0bef0dd1d5fb12b784e306519bd6494b10fb180ca320f78e8a600000000000400003f"], 0x8)

1.886903841s ago: executing program 2 (id=6232):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000080)=0x3, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff2d}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.832466387s ago: executing program 1 (id=6233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000d80)={0x410, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_TID_CONFIG={0x3e8, 0x11d, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x30, 0xc, 0x5, 0x6, 0x3, 0x3, 0x16, 0x5, 0xc, 0x8623b8ae779d61c6, 0x18]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x9}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x3}, {}, {0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x2}, {0x7, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0xa}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x6, 0x17}, {0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x7, 0x9}, {0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x60, 0x16, 0x64, 0x6, 0x7, 0xb, 0xc, 0x78, 0x36, 0x36, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff7fffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x18, 0x1b, 0x3, 0x1b, 0x24, 0x3, 0x4, 0xb, 0x16, 0x2, 0x16, 0x5, 0x30, 0x34, 0x24, 0x18, 0x48, 0x12, 0x32, 0x3, 0xb, 0x5, 0xc, 0x2, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xaf, 0x5, 0x8, 0xb33, 0xfc86, 0x8, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x2}, {0x4, 0x5}, {0x0, 0x4}, {0x7}, {0x7, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x5}, {0x5}, {0x0, 0x9}, {}, {0x3, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x3}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x7}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x1, 0x5}, {0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x5}, {0x4}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x18, 0x48, 0x18, 0x14]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x13fa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x80, 0x2, 0x9, 0x387d, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x4}, {0x1}, {0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x5, 0x3}, {0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x9}]}]}, @NL80211_BAND_2GHZ={0x4}]}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x118, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x5}, {0x6, 0x1}, {0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x1}, {0x1, 0x10}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x3}, {0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x8000, 0xfffc, 0x17, 0x1000, 0x0, 0x81]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xdcbe, 0x81, 0x8, 0x9, 0xa98, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x2}, {0x0, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x6}, {0x3, 0xa}, {0x6, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x7, 0x9}, {0x4, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0x3}, {0x5, 0x3}, {0x1}, {0x2, 0x5}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x9}, {0x7, 0x7}, {0x1}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x3}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0x3}, {0x3}, {0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x2}, {0x3, 0x7}, {0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x3}, {0x2}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x7}, {0x5}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x2, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xda, 0x3, 0x81, 0xc2, 0x7, 0x4, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x17, 0x7, 0x5, 0xca1, 0xea, 0xb, 0x1ff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x6c, 0x48, 0x3, 0x12, 0x12, 0x18, 0x48, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}]}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x40895}, 0x890)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x48, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x48}}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', <r9=>0x0})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r10 = socket(0x10, 0x803, 0x0)
socket(0x11, 0x2, 0xffc)
r11 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r11, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x104, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xae0, 0x27}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x24010)
r12 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, 0x0)
setsockopt$inet6_opts(r12, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8)

1.74190361s ago: executing program 4 (id=6234):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcfffaff0000000004000000850000003600000085000000d000007a95"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.728014987s ago: executing program 0 (id=6235):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={r1, 0x0, 0x4539, 0x6, 0x3, 0x5}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000680)={r4, r0, 0x7, 0xa9, &(0x7f0000000380)="915ff87371bedef93450556cd7e9c12728a6d6395382819c5afe417ee46a094ca8de839ae4c228a333738fceee8ce408c07cdbf155a8f64ee096d0bb3374d7c021187b720f5e9e74664ddfbd8711d237b4c059f7af1dc4673f57de5f2d09d7afb2272876b07da752ad3450975d798336b0bbc9fe8143790601dfd98d664cdd777d697ff9a66c063ac1728a6ebbff5b512e41b88bf176f50669f1030bd24eb0fabd014f7d20ce858758", 0x6, 0x7, 0x401, 0x5, 0x2, 0x0, 0x9, 'syz0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r7, 0xffffffffffffffff, 0x2b, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r11, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r14}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000feb000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.511487428s ago: executing program 4 (id=6236):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
r4 = accept$ax25(r0, &(0x7f00000003c0)={{}, [@remote, @bcast, @null, @bcast, @default, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={r4, 0x5, 0x3e, 0x9})
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xe}, {}, {0x7, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x2a, 0x2, 0x0) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) (async)
accept$ax25(r0, &(0x7f00000003c0)={{}, [@remote, @bcast, @null, @bcast, @default, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={r4, 0x5, 0x3e, 0x9}) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xe}, {}, {0x7, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

1.473251656s ago: executing program 2 (id=6237):
r0 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x24, 0x30, 0x9e54f29ff072a93b}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004bcb00000000000000000000589a179a3859d90b5d18539d5b678bafa6f9dc505f7fe50f3c294b203b8a3e84afd5435723ffa7ce0b6f57428daafb4f314295a697871e364f93bec24ac459f0a1db3aead5a6ce79553ce44ee1611e31e8619c07f1d56e846c3b"], 0x48) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0xa, 0xf)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0)
sendto$packet(r5, &(0x7f0000000500)="39c394f705916c4516999da208000b15", 0x10, 0x40810, &(0x7f0000000300)={0x11, 0xed, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000600)="f6bbc6b533a610000000", 0xce, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000006d0001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r12=>0x0})
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x1, r12, 0x4}, 0x10)

1.291300668s ago: executing program 4 (id=6238):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xff, 0x1}, 0x8)
sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0x3}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4)

1.208881811s ago: executing program 2 (id=6239):
socket$inet(0x10, 0x1, 0x808)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000001180)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa19}], 0x1c)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1c)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x800)
syz_emit_ethernet(0x5e, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @empty}}}}}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "76477dbc901cb78c", "4e1930137aeffa6aefd8189ac3bc5469756c4e7bb7be4fd782eaea78dd0c290f", "1420e92b", "3c8118ecf30602f1"}, 0x38)
getpeername$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e)
close(r0)

1.095784984s ago: executing program 4 (id=6240):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004091}, 0x4000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20004855}, 0x24004020)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080))
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x64, &(0x7f0000000040)=0x1c08, 0x4)

777.303025ms ago: executing program 0 (id=6241):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xb}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0xd, 0x5}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5], 0x1c}}, 0x0)
connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r6)
connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default]}, 0x40)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r10, 0x1}, &(0x7f0000000200)=0x8)
ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000100))

653.66093ms ago: executing program 1 (id=6242):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, 0x0, 0x22048880)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r2, &(0x7f00000009c0), &(0x7f00000006c0)=@udp6}, 0x20)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, 0x0, 0x0)
listen(0xffffffffffffffff, 0x7)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200142cfefe8000000000000000000000000000bbfe8000000000000300000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)

537.008857ms ago: executing program 3 (id=6243):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', <r1=>0x0, 0x40, 0x8, 0x5, 0x8, {{0x13, 0x4, 0x0, 0x19, 0x4c, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@end, @end, @rr={0x7, 0xf, 0xf2, [@loopback, @empty, @empty]}, @noop, @generic={0x83, 0xa, "6c983a845105792b"}, @timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x1, [{@broadcast, 0x8}, {@broadcast, 0x7fff}, {@remote, 0x81}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x44, 0x66, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf, 0xffe0}, {0x4, 0x2}, {0x0, 0x4}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xc44}, {0x8, 0xb, 0x10}]}, 0x44}}, 0x0)

519.856027ms ago: executing program 1 (id=6244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

464.659223ms ago: executing program 3 (id=6245):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018341a5f58ee000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000604000d2e000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10}, 0x94)

245.083772ms ago: executing program 2 (id=6246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x4800)
r4 = epoll_create(0x400)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000000))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')

244.889956ms ago: executing program 1 (id=6247):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000006a002902"], 0x14}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94)

224.140643ms ago: executing program 3 (id=6248):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async)
connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000080) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x46004, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc939}]}}}]}, 0x44}}, 0x80) (async)
r6 = accept4$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c, 0x80400)
setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000280)=0xc99301f181dd9269, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0) (async)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x42}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

129.250887ms ago: executing program 2 (id=6249):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210008}, 0xc, &(0x7f0000000600)={&(0x7f00000000c0)=@deltclass={0x504, 0x29, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x0, 0xffff}, {0x9, 0x2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x10}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x40}}}, @c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x0, 0x1, 0x6, 0xf001, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x8001, 0x0, 0x7fffffff, 0x5, 0x2, 0x69, 0x6, 0x7, 0x0, 0xfffff6db, 0x9, 0x1, 0x3, 0x4, 0x3, 0x61be, 0x7, 0x0, 0x1, 0x0, 0x8, 0x4, 0x1, 0x7f, 0x2, 0x6, 0x6, 0x80, 0x7, 0x1, 0x0, 0x1, 0xecd, 0x101, 0x9, 0xb, 0x1000, 0x7, 0x2, 0xffff, 0x401, 0x7, 0xca, 0x2, 0x0, 0xb1, 0x852, 0xe, 0x5, 0x3, 0x5, 0x5, 0x77e, 0xffff8001, 0x2, 0x9, 0x100, 0x55eb, 0x2, 0x3, 0xff, 0x3, 0xdc1, 0x7ff, 0xf6d5, 0x4, 0x5, 0x802, 0x7, 0x100, 0x2196, 0x6, 0x7, 0x1, 0x9, 0x7, 0x7, 0xe, 0x5, 0x8, 0x9, 0x100000, 0x5, 0x5, 0x2, 0x8, 0xd, 0x9, 0x8, 0x5, 0x7, 0x8, 0xeac, 0x8, 0x7, 0x3, 0x5, 0x1ff, 0x1, 0x0, 0x29, 0x504, 0x5, 0xf59, 0x6, 0xffffff11, 0x4667, 0x2, 0x9, 0x7ff, 0xd, 0x9, 0x7, 0x8, 0x8, 0x3ff, 0x7934, 0x6e5, 0x6, 0x714, 0x1, 0x6, 0x148, 0x2, 0x6, 0x5, 0xfffffff9, 0x200, 0x8, 0x4, 0x1, 0x5, 0x0, 0x6, 0x5, 0x0, 0x1ff, 0x7, 0xfffffffc, 0x4, 0x3, 0x0, 0x40, 0x4, 0x0, 0x6, 0x7, 0x3, 0xae, 0x6, 0x1944, 0x6, 0x6, 0x4, 0x76, 0xa027, 0xa720, 0x5, 0x1, 0x4, 0x7, 0x1, 0xd, 0x0, 0x800, 0x3, 0x80, 0x6, 0x3, 0xff, 0xc, 0x4, 0x6, 0x7, 0x6, 0xa, 0x98, 0x8001, 0x200, 0x6, 0x3, 0x7, 0xc, 0x4, 0x81, 0x7b9, 0xfffffffa, 0x18000, 0x9, 0x7, 0x2, 0xfffffffb, 0x800, 0x2, 0x3, 0x6, 0xa4, 0x5, 0x4, 0xec8b, 0xfffffff9, 0x5, 0xa6f, 0x0, 0x3, 0x2, 0x7, 0x7b, 0x4, 0x100, 0x5, 0x3, 0x7, 0x2, 0x18, 0x59f, 0x5, 0x5, 0x2, 0x7, 0xc, 0x4, 0x780e, 0x5, 0x2, 0xf, 0x4, 0x7, 0x3, 0xa7, 0x3, 0x3ff, 0x2e000, 0x0, 0xdf3f, 0x3, 0x6, 0xfffff67d, 0x8, 0x6, 0x1, 0x4d, 0x0, 0x0, 0x8, 0x7, 0x7, 0x6, 0x1, 0x30, 0x401, 0x6, 0x6, 0x6, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x0, 0x40f, 0x100, 0x4, 0xfffffd9b}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x6, 0x0, 0xd, 0x3, 0x1a}}]}}, @c_atm={{0x8}, {0x44, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xe}}, @TCA_ATM_HDR={0x20, 0x3, "29c7a990c504d6b55717f45452f888688bd8f8556d899c9c33f1720d"}, @TCA_ATM_FD={0x8}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x4880}, 0x4000040)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x4, 0xf, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0x1, 0x200, 0x6}})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x401}}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000800)=""/17, 0x37, 0x11, 0x1, 0x7}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], <r4=>0x0, 0x7d, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x9, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a45cad1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', r1, @cgroup_sock=0x2, r2, 0x8, &(0x7f0000000880)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x6, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000d40)={0x1, 0x1f, 0x3, 0x3, 0x0, 0x7, 0x6, 0x81, 0x5, 0x81, 0x6, 0x1, 0x0, 0x4}, 0xe)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040095}, 0x24040004)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001000)={<r7=>r0, &(0x7f0000000f00)='%]\x00', 0x2980, &(0x7f0000000f40)={@align=0xf, {0x6, 0x5, 0x5, 0x8}}, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0xa})
sendmsg$can_j1939(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)="8b1037dce99bad55bf8ce78543609cc0684d6bf502c8f13a7dc6d5de0c8a19abbcb2abad8e22e47890", 0x29}, 0x1, 0x0, 0x0, 0x800}, 0x4008011)
getpeername$inet(r7, &(0x7f0000001100)={0x2, 0x0, @loopback}, &(0x7f0000001140)=0x10)
unshare(0x200)
pipe(&(0x7f0000001180)={<r8=>0xffffffffffffffff})
setsockopt$inet_buf(r8, 0x0, 0x58, &(0x7f00000011c0)="0962aadcd73ea3eacf0b3f3fbe39237164d62d32d665ae8de05393c0497158b0b57bce71dde07aa544c510e1e7a67aec6cc940bb02d4db61259d480c731c5f7329011bd74ae7c824b92d1ec73a1a275a5133f3acfe323104554afea4d5f99e5a4bf5eb3ac88db05fb873c3c2e5fad35cf5221676d2010fda6296929bb69d6d3b8392f72480ea7ce84ceb0bcacc4b51f1141abca844dc670140fba96293dc59804f6971bb9e17e566bf2f989fb78d793ce8e701ed4ce811e46c19dc0b6d4b58102b5130b34a41ac0d8cb923076d4d01bfdb318fbf380584d9a5a5f1136095", 0xde)
r9 = socket(0x2b, 0x4, 0xf372)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000001300), r9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001340)={'syztnl1\x00', <r12=>r3, 0x40, 0x40, 0x7, 0x0, {{0xd, 0x4, 0x3, 0x3a, 0x34, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local, {[@ra={0x94, 0x4}, @generic={0x94, 0xf, "335d0fc1501511e953946e5fa2"}, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x4, [{@loopback, 0x2}]}]}}}}})
sendmsg$FOU_CMD_GET(r10, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r11, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x11)
socket$inet6(0xa, 0xa, 0x0)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r10)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x70, r13, 0x200, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x44)
getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000001640), &(0x7f0000001680)=0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000017c0)={<r14=>r9, &(0x7f00000016c0)='atm\x00', 0x408000, &(0x7f0000001700)={@_ha_fsid={[0x9]}, {0xe, 0x17, 0x10000}}, 0x0, &(0x7f0000001740)={@_ha_fsid}, &(0x7f0000001780)=0x4})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001800)={<r15=>0x0, 0x0, 0x5, 0xd, 0x7f, 0x9}, &(0x7f0000001840)=0x14)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r14, 0x84, 0x17, &(0x7f0000001880)={r15, 0x8, 0x84, "a6297a405d9a59f75bbd8e7a18a9f91fb06e5ad7694ab170ce3463a14675cbff498974bd5ea01cc0f10dc3bd4104e79ed3553496d5311950281e51b20ed889924b0af67028eb16916146c03e5332a57cad0dc43723857a2a6ae25e88c56cd00edde4b02c812a6746eef549eec5ea6831c93dc360216762b5192bc543b7d9041583b66902"}, 0x8c)

74.69408ms ago: executing program 4 (id=6250):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
shutdown(r0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000)
select(0x40, &(0x7f0000000000)={0x6, 0x8000000000000000, 0x8001, 0x8000000000000000, 0x4, 0x1000, 0x1}, 0x0, 0x0, &(0x7f00000000c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r7, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x30}, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x9, 0x1, 0x9, 0x0, 0x0, 0x400000, r6})
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000180)={{0x6, @rose, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x6, 0x4, 0x10, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x51, &(0x7f00000002c0)=""/81, 0x41100, 0x10, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x3, 0x4, 0x1, 0xc}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xba, 0x29, &(0x7f00000007c0)="2cfcaa7ea44ef10d6479b7e267e505b565b058bd2c79642aa32937455e3c68b9572f80d8cc1c4d8523136f8cfdde0174a0f5440a87413059a2234ea2ef2395d0f811a254553a583548bd0ad0993aa7dfa7b1bfc540be1fb973fec952c67e9ab2504e76068b64ea50839f199552cfc91c3f4acf0d3a43c3845279d9f4efb04ff11cc323f43bf44f4e00c68123670be6209de3d84594e26aa7396059e6414d8fc53070c666409a07427ae80d05916c2f6597ce492c3d4715a3a93b", &(0x7f0000000480)=""/41, 0x6, 0x0, 0x1b, 0x84, &(0x7f00000004c0)="653ccfc6e0d16a21d2e74f7aa0b2778cb045b47c64095c4990a5b0", &(0x7f0000000880)="ee1770de398eb81eb135b72529d5be9a28654eda68ffe32c4a7f7f18b307a297bc55eb424be0cc28436f4ec0ee14cda1eb9fdfab4e8bb6ed5029e1019294f2bc8fbbe5e9dc34dfb0fe61b0a78ecb3eed2a3583d127dc8a0bb14e87252b718358c6e6cb5f734adbbcd9b9267dcdfc8c1313bbf85302589ec17e0846767c9a75b5ce238711", 0x0, 0x0, 0x418}, 0x50)
sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'macvtap0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x68}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0)

8.798084ms ago: executing program 1 (id=6251):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f00400ea6924334ff141bfc4f3e3723cb90b7588f40a635aa57d95d6ee9125ac1a9f76cd4659f84ed5cc87900aa6809c6b03b781240e83ebdb8b23a7de3a0b4d13de4d6588f6b3e7e778600c519f30045e484d81410031bce1c596066638b214cfa0c7a472815d406f14a238e405b0e4204a03711e9acf4d739d0684afcc764829a4fcd56ed5e009c930412cfcddcbe6d17c202c6fa794356a15aeb3ced77382cea8d737338adf8313300f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8002}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=6252):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc000000000000f0660080bb9ad809d5e1cace81b34113b0e3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2b, 'memory'}, {0x0, 'blkio'}, {0x2b, 'rlimit'}, {0x2b, 'blkio'}, {0x2b, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x0, 'cpuacct'}]}, 0x4b)

kernel console output (not intermixed with test programs):

[  555.898035][T23027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.007952][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4837'.
[  556.050607][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4837'.
[  556.067269][T23036] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000
[  556.724155][T23033] macvlan1: Device is already in use.
[  556.786160][T23079] macvtap0: entered promiscuous mode
[  556.845798][T23081] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  557.423129][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  557.612563][T23078] macvtap0: left promiscuous mode
[  559.118439][T23043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  559.128394][T23066] netlink: 'syz.2.4843': attribute type 1 has an invalid length.
[  559.136689][T23066] __nla_validate_parse: 1 callbacks suppressed
[  559.136706][T23066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4843'.
[  559.154571][T23065] netlink: 'syz.2.4843': attribute type 1 has an invalid length.
[  559.162468][T23065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4843'.
[  559.374525][T23099] netlink: 'syz.1.4849': attribute type 9 has an invalid length.
[  559.446042][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4850'.
[  559.896849][T23129] macvtap0: entered promiscuous mode
[  559.909274][T23133] pimreg: entered allmulticast mode
[  559.935321][T23129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  559.966724][T23132] pimreg: left allmulticast mode
[  560.170434][T23144] can: request_module (can-proto-3) failed.
[  560.350060][T23163] netlink: 'syz.4.4870': attribute type 9 has an invalid length.
[  560.697503][T23127] macvtap0: left promiscuous mode
[  561.089510][T23194] ip6gre7: entered allmulticast mode
[  561.098858][T16090] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  561.229240][T23165] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  561.253152][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  561.516589][T23218] macvtap0: entered promiscuous mode
[  561.579076][T23218] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  561.712216][T23234] netlink: 'syz.2.4887': attribute type 1 has an invalid length.
[  561.745255][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4890'.
[  561.780308][T23235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4890'.
[  562.036906][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4893'.
[  562.260372][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4897'.
[  562.284505][T23257] netlink: 'syz.3.4897': attribute type 21 has an invalid length.
[  562.321538][T23216] macvtap0: left promiscuous mode
[  562.325501][T23257] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  562.456633][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  562.483163][T23266] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4899'.
[  562.547385][T23225] lo speed is unknown, defaulting to 1000
[  562.556238][T23225] lo speed is unknown, defaulting to 1000
[  563.249374][T23249] lo speed is unknown, defaulting to 1000
[  563.332031][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4905'.
[  563.387258][T23249] lo speed is unknown, defaulting to 1000
[  563.717679][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4908'.
[  563.754997][T23266] siw: device registration error -23
[  563.945348][T23310] macvtap0: entered promiscuous mode
[  563.955159][T23310] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  564.386259][T23334] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4914'.
[  564.409251][T23331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4914'.
[  564.454841][    C1] ip6_tunnel: ip6gre10 xmit: Local address not yet configured!
[  564.651451][T23342] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  564.671405][T23342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.728349][T23308] macvtap0: left promiscuous mode
[  564.934702][   T30] audit: type=1800 audit(1772558441.995:12): pid=23353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4920" name="memory.events" dev="tmpfs" ino=2254 res=0 errno=0
[  565.207205][T23361] batman_adv: batadv0: Adding interface: ip6gretap0
[  565.214266][T23361] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  565.236325][T23361] batman_adv: batadv0: Interface activated: ip6gretap0
[  565.493039][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  565.510889][T23372] ip6gre5: entered allmulticast mode
[  565.535437][T16091] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  565.861420][T23383] tunl0: Caught tx_queue_len zero misconfig
[  566.070243][T23393] macvtap0: entered promiscuous mode
[  566.105720][T23393] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  566.278513][T23409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4932'.
[  566.290911][T23409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4932'.
[  566.484953][T23417] ip6gre5: entered allmulticast mode
[  566.504737][T16087] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  566.876880][T23392] macvtap0: left promiscuous mode
[  566.938417][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4942'.
[  567.130134][T23452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4944'.
[  567.532101][T23460] netlink: 'syz.2.4948': attribute type 10 has an invalid length.
[  567.583769][T23460] bridge0: port 4(dummy0) entered disabled state
[  567.584406][T23461] netlink: 'syz.2.4948': attribute type 10 has an invalid length.
[  567.591383][T23460] dummy0: left allmulticast mode
[  567.653507][T23460] bridge0: port 4(dummy0) entered disabled state
[  567.764266][T23465] Bluetooth: MGMT ver 1.23
[  567.773762][T23465] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4949'.
[  567.814048][T23461] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  568.293124][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  568.293124][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  568.324848][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4953'.
[  568.564012][T23496] macvtap0: entered promiscuous mode
[  568.615673][T23496] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  569.048662][T23517] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4958'.
[  569.078823][T23519] netlink: 'syz.4.4960': attribute type 1 has an invalid length.
[  569.104395][T23519] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4960'.
[  569.347192][T23495] macvtap0: left promiscuous mode
[  569.354229][T23531] netlink: 'syz.4.4962': attribute type 2 has an invalid length.
[  569.796105][T23550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4968'.
[  569.813110][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  569.845677][T23550] rdma_op ffff8880559419f0 conn xmit_rdma 0000000000000000
[  569.955990][T23554] syzkaller1: entered promiscuous mode
[  569.981949][T23554] syzkaller1: entered allmulticast mode
[  570.073665][T23560] netlink: 'syz.3.4971': attribute type 7 has an invalid length.
[  570.123015][T23560] netlink: 'syz.3.4971': attribute type 8 has an invalid length.
[  570.152733][T23560] netlink: 209828 bytes leftover after parsing attributes in process `syz.3.4971'.
[  570.690990][T23578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4975'.
[  570.693506][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  570.701662][T23578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4975'.
[  572.057480][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4976'.
[  572.188080][T23586] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:52768
[  572.760339][T23574] macvtap0: entered promiscuous mode
[  572.766176][T23576] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  572.809304][T23574] macvtap0: left promiscuous mode
[  572.956780][T23596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4981'.
[  572.991340][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'.
[  573.014865][T23599] netlink: 'syz.0.4982': attribute type 21 has an invalid length.
[  573.160942][T23605] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4984'.
[  573.178707][T23606] syzkaller0: entered promiscuous mode
[  573.196429][T23606] syzkaller0: entered allmulticast mode
[  573.413141][    C1] ip6_tunnel: ip6gre11 xmit: Local address not yet configured!
[  573.421109][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  573.436157][T23618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'.
[  573.451545][T23619] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  573.961112][T23641] netlink: 'syz.4.4995': attribute type 1 has an invalid length.
[  573.977347][T23640] ip6gre6: entered allmulticast mode
[  574.006455][T16090] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  574.022654][T23641] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4995'.
[  574.073580][T23641] NCSI netlink: No device for ifindex 0
[  574.470344][T23665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  574.693062][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  575.037256][T23648] lo speed is unknown, defaulting to 1000
[  575.077664][T23648] lo speed is unknown, defaulting to 1000
[  575.252038][T23713] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5012'.
[  575.296005][T23713] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.5012'.
[  575.331450][T23713] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5012'.
[  575.360722][T23713] tc_dump_action: action bad kind
[  576.124754][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'.
[  576.194736][T23758] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  576.326695][T23771] FAULT_INJECTION: forcing a failure.
[  576.326695][T23771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  576.368789][T23771] CPU: 1 UID: 0 PID: 23771 Comm: syz.4.5024 Not tainted syzkaller #0 PREEMPT(full) 
[  576.368820][T23771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  576.368834][T23771] Call Trace:
[  576.368843][T23771]  <TASK>
[  576.368851][T23771]  dump_stack_lvl+0xe8/0x150
[  576.368890][T23771]  should_fail_ex+0x412/0x560
[  576.368923][T23771]  _copy_from_user+0x2d/0xb0
[  576.368957][T23771]  ___sys_sendmsg+0x1c6/0x360
[  576.369137][T23771]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.369207][T23771]  ? __fget_files+0x2a/0x420
[  576.369238][T23771]  ? __fget_files+0x3a0/0x420
[  576.369279][T23771]  __x64_sys_sendmsg+0x1bd/0x2a0
[  576.369315][T23771]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.369357][T23771]  ? __pfx_ksys_write+0x10/0x10
[  576.369390][T23771]  do_syscall_64+0x14d/0xf80
[  576.369417][T23771]  ? trace_irq_disable+0x3b/0x150
[  576.369447][T23771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.369470][T23771]  ? clear_bhb_loop+0x40/0x90
[  576.369499][T23771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.369520][T23771] RIP: 0033:0x7f418499c799
[  576.369540][T23771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.369557][T23771] RSP: 002b:00007f4185875028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.369580][T23771] RAX: ffffffffffffffda RBX: 00007f4184c15fa0 RCX: 00007f418499c799
[  576.369595][T23771] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000006
[  576.369609][T23771] RBP: 00007f4185875090 R08: 0000000000000000 R09: 0000000000000000
[  576.369622][T23771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.369634][T23771] R13: 00007f4184c16038 R14: 00007f4184c15fa0 R15: 00007ffc9b513ee8
[  576.369668][T23771]  </TASK>
[  576.854086][T23785] netlink: 'syz.3.5025': attribute type 4 has an invalid length.
[  576.938920][T23789] netlink: 'syz.2.5029': attribute type 2 has an invalid length.
[  577.593578][T23815] bond7: entered promiscuous mode
[  577.599553][T23815] 8021q: adding VLAN 0 to HW filter on device bond7
[  577.694765][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5037'.
[  577.825986][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'.
[  577.861499][T23835] netlink: 'syz.1.5038': attribute type 21 has an invalid length.
[  577.973203][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  578.270621][T23862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5044'.
[  578.305579][T23857] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  578.384944][T23862] netlink: 'syz.3.5044': attribute type 1 has an invalid length.
[  578.397812][T23862] netlink: 'syz.3.5044': attribute type 2 has an invalid length.
[  578.533079][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  578.922784][T23861] lo speed is unknown, defaulting to 1000
[  578.962005][T23861] lo speed is unknown, defaulting to 1000
[  579.173195][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  579.457710][T23902] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5054'.
[  579.472424][T23903] ��: renamed from bond_slave_0
[  579.813034][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  580.314909][T23936] netlink: 'syz.1.5064': attribute type 1 has an invalid length.
[  580.395801][T23940] netlink: 'syz.1.5064': attribute type 89 has an invalid length.
[  580.497724][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'.
[  580.533271][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5065'.
[  580.548389][T23946] bond3 (unregistering): Released all slaves
[  580.814370][T23957] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5067'.
[  580.848491][T23957] openvswitch: netlink: ufid size 150 bytes exceeds the range (1, 16)
[  580.864968][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'.
[  580.883812][T23957] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  580.910783][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5069'.
[  580.989838][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'.
[  580.989874][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5068'.
[  581.040285][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5068'.
[  581.288686][T23985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5070'.
[  581.740243][T24015] netlink: 'syz.0.5078': attribute type 16 has an invalid length.
[  581.752592][T24015] netlink: 'syz.0.5078': attribute type 17 has an invalid length.
[  581.832512][T24015] ip6gretap0: entered promiscuous mode
[  581.863917][T24015] 8021q: adding VLAN 0 to HW filter on device .`
[  581.881259][T24015] 8021q: adding VLAN 0 to HW filter on device team0
[  581.908250][T24015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  581.963444][ T5889] lo speed is unknown, defaulting to 1000
[  581.969690][ T5889] syz0: Port: 1 Link ACTIVE
[  581.987925][T17901] lo speed is unknown, defaulting to 1000
[  582.005874][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'.
[  582.286125][T24037] syzkaller0: entered promiscuous mode
[  582.304656][T24037] syzkaller0: entered allmulticast mode
[  582.576191][T24052] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  582.782419][T24066] 8021q: VLANs not supported on ip6tnl0
[  583.351029][T24101] gretap1: entered promiscuous mode
[  583.388785][T24101] batman_adv: batadv0: Adding interface: gretap1
[  583.421497][T24101] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  583.493588][T24101] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  583.654372][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  583.663084][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  583.671371][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  585.431836][T24182] netlink: 'syz.1.5115': attribute type 21 has an invalid length.
[  585.534856][T24188] __nla_validate_parse: 3 callbacks suppressed
[  585.534877][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5117'.
[  586.213014][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  586.904269][T24243] netlink: 212088 bytes leftover after parsing attributes in process `syz.1.5131'.
[  587.144948][T24252] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  587.180837][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5136'.
[  587.223347][T24255] netlink: 'syz.1.5136': attribute type 21 has an invalid length.
[  587.672449][T24274] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5140'.
[  587.771748][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5142'.
[  588.514272][T24304] team0: No ports can be present during mode change
[  588.783242][T24315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5150'.
[  588.994982][T24321] ipt_ECN: cannot use operation on non-tcp rule
[  589.139331][T24330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5152'.
[  589.372058][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5156'.
[  589.423176][T24340] netlink: 'syz.1.5156': attribute type 21 has an invalid length.
[  590.048889][T24350] lo speed is unknown, defaulting to 1000
[  590.057226][T24350] lo speed is unknown, defaulting to 1000
[  590.828183][T24385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5168'.
[  591.334803][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  591.851254][T24408] bond5: option ad_select: invalid value (34)
[  591.865785][T24408] bond5 (unregistering): Released all slaves
[  591.958782][T24412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'.
[  591.980588][T24412] netlink: 'syz.2.5173': attribute type 21 has an invalid length.
[  592.259569][T24387] macvtap0: entered promiscuous mode
[  592.282527][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5174'.
[  592.298856][T24417] 8021q: VLANs not supported on vcan0
[  592.456192][T24422] syzkaller0: entered promiscuous mode
[  592.472011][T24422] syzkaller0: entered allmulticast mode
[  592.529019][T24422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.547332][T24421] tipc: Resetting bearer <eth:syzkaller0>
[  592.606292][T24421] tipc: Disabling bearer <eth:syzkaller0>
[  592.623413][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  592.642758][T24384] macvtap0: left promiscuous mode
[  592.817044][T24435] netlink: 'syz.1.5177': attribute type 21 has an invalid length.
[  592.850700][T24435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5177'.
[  592.896184][T24385] lo speed is unknown, defaulting to 1000
[  592.904549][T24385] lo speed is unknown, defaulting to 1000
[  593.057868][T24440] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  593.390595][T24456] netlink: 'syz.1.5184': attribute type 1 has an invalid length.
[  593.435800][T24456] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  593.706070][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5188'.
[  593.751670][T24471] netlink: 'syz.3.5188': attribute type 21 has an invalid length.
[  593.828308][T24473] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  593.894054][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  594.425043][T24485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5190'.
[  594.493958][T24485] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.554079][T24485] bridge_slave_1 (unregistering): left allmulticast mode
[  594.573195][T24485] bridge_slave_1 (unregistering): left promiscuous mode
[  594.611803][T24485] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.244366][T24501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.282766][T24507] syzkaller0: entered promiscuous mode
[  595.289091][T24517] netlink: 'syz.1.5196': attribute type 4 has an invalid length.
[  595.297212][T24507] syzkaller0: entered allmulticast mode
[  595.368629][T24501] tipc: Resetting bearer <eth:syzkaller0>
[  595.397963][T24524] netlink: 'syz.1.5196': attribute type 4 has an invalid length.
[  595.412467][T24495] tipc: Resetting bearer <eth:syzkaller0>
[  595.506725][T24495] tipc: Disabling bearer <eth:syzkaller0>
[  595.600799][T24534] netlink: 'syz.2.5201': attribute type 2 has an invalid length.
[  595.889140][T24547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5204'.
[  596.010409][T24559] netlink: 'syz.0.5207': attribute type 11 has an invalid length.
[  596.148629][T24569] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  596.176787][T24569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.266608][T24575] 8021q: VLANs not supported on ip6gre0
[  596.587279][T24578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  596.614706][T24593] siw: device registration error -23
[  596.707328][T24598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5211'.
[  597.020193][T24606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5214'.
[  597.064352][T24610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5216'.
[  597.093348][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  597.101232][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  597.219632][T24617] netlink: 'syz.3.5218': attribute type 1 has an invalid length.
[  597.227870][T24617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5218'.
[  597.239066][T24614] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  597.263108][T24614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5215'.
[  597.307865][T24624] netlink: 'syz.1.5219': attribute type 3 has an invalid length.
[  597.317352][T24624] netlink: 'syz.1.5219': attribute type 3 has an invalid length.
[  597.340653][T24624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5219'.
[  597.755526][T24639] netlink: 'syz.0.5221': attribute type 11 has an invalid length.
[  598.204744][T24624] lo speed is unknown, defaulting to 1000
[  598.212396][T24624] lo speed is unknown, defaulting to 1000
[  598.256646][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5223'.
[  598.294747][T24654] ip6gre6: entered allmulticast mode
[  598.318381][T16090] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  598.373158][    C1] ip6_tunnel: ip6gre10 xmit: Local address not yet configured!
[  598.692783][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5228'.
[  598.897013][T24681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5230'.
[  599.023125][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  599.063499][T24687] netlink: 'syz.2.5232': attribute type 4 has an invalid length.
[  599.117304][T24689] tipc: MTU too low for tipc bearer
[  599.417461][T24702] netlink: 'syz.3.5234': attribute type 11 has an invalid length.
[  599.941993][T24719] ip6gre7: entered allmulticast mode
[  599.960864][T16087] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  600.268941][T24709] lo speed is unknown, defaulting to 1000
[  600.302568][T24709] lo speed is unknown, defaulting to 1000
[  600.902332][T24743] netlink: 'syz.3.5241': attribute type 1 has an invalid length.
[  600.910450][T24743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.931679][T24743] __nla_validate_parse: 3 callbacks suppressed
[  600.931699][T24743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5241'.
[  601.013029][T24745] netlink: 'syz.0.5242': attribute type 9 has an invalid length.
[  601.022233][T24745] netlink: 'syz.0.5242': attribute type 11 has an invalid length.
[  601.062209][T24745] netlink: 'syz.0.5242': attribute type 12 has an invalid length.
[  601.093262][T24745] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.5242'.
[  601.122664][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5242'.
[  601.368260][T24752] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  601.476947][T24755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5246'.
[  601.573026][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  601.892314][T24767] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5249'.
[  601.993907][   T30] audit: type=1107 audit(1772558479.055:13): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  602.041565][T24770] xfrm0: entered promiscuous mode
[  602.085920][T24770] xfrm0: entered allmulticast mode
[  602.407298][T24785] xfrm0: left promiscuous mode
[  602.412178][T24785] xfrm0: left allmulticast mode
[  602.442409][T24785] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  602.691695][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'.
[  602.706840][T24789] validate_nla: 1 callbacks suppressed
[  602.706861][T24789] netlink: 'syz.3.5253': attribute type 1 has an invalid length.
[  602.773157][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  602.847873][T24789] bond5: entered promiscuous mode
[  602.861513][T24789] 8021q: adding VLAN 0 to HW filter on device bond5
[  603.039449][T24796] bond5: (slave bridge3): making interface the new active one
[  603.070937][T24796] bridge3: entered promiscuous mode
[  603.083831][T24796] bridge3: left promiscuous mode
[  603.164202][T24782] lo speed is unknown, defaulting to 1000
[  603.171876][T24782] lo speed is unknown, defaulting to 1000
[  603.323152][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'.
[  603.495135][T24812] bond0: (slave gre0): Error: Device type is different from other slaves
[  603.519119][T24815] netlink: 'syz.2.5260': attribute type 11 has an invalid length.
[  603.546820][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5259'.
[  603.573069][T24816] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  603.729201][T24822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5261'.
[  603.813142][    C0] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  603.857222][T24823] syzkaller1: entered promiscuous mode
[  603.880900][T24823] syzkaller1: entered allmulticast mode
[  604.056029][T24828] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5263'.
[  604.133123][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  604.152338][T24833] Cannot find del_set index 4 as target
[  604.186154][T16061] bridge_slave_1: left allmulticast mode
[  604.202126][T16061] bridge_slave_1: left promiscuous mode
[  604.222602][T16061] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.259299][T16061] bridge_slave_0: left promiscuous mode
[  604.268580][T16061] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.318588][T24841] xt_ecn: cannot match TCP bits for non-tcp packets
[  604.481223][T24848] FAULT_INJECTION: forcing a failure.
[  604.481223][T24848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.520566][T24848] CPU: 0 UID: 0 PID: 24848 Comm: syz.2.5267 Not tainted syzkaller #0 PREEMPT(full) 
[  604.520598][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  604.520613][T24848] Call Trace:
[  604.520623][T24848]  <TASK>
[  604.520633][T24848]  dump_stack_lvl+0xe8/0x150
[  604.520670][T24848]  should_fail_ex+0x412/0x560
[  604.520703][T24848]  _copy_from_iter+0x1d3/0x1670
[  604.520850][T24848]  ? rcu_is_watching+0x15/0xb0
[  604.520889][T24848]  ? __pfx__copy_from_iter+0x10/0x10
[  604.520935][T24848]  ? netlink_sendmsg+0x650/0xb40
[  604.521022][T24848]  ? skb_put+0x11b/0x210
[  604.521104][T24848]  netlink_sendmsg+0x6c0/0xb40
[  604.521143][T24848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  604.521175][T24848]  ? aa_sock_msg_perm+0xf1/0x1b0
[  604.521261][T24848]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  604.521304][T24848]  ? __pfx_netlink_sendmsg+0x10/0x10
[  604.521331][T24848]  ____sys_sendmsg+0xa68/0xad0
[  604.521373][T24848]  ? __pfx_____sys_sendmsg+0x10/0x10
[  604.521415][T24848]  ? import_iovec+0x73/0xa0
[  604.521448][T24848]  ___sys_sendmsg+0x2a5/0x360
[  604.521484][T24848]  ? __pfx____sys_sendmsg+0x10/0x10
[  604.521553][T24848]  ? __fget_files+0x2a/0x420
[  604.521584][T24848]  ? __fget_files+0x3a0/0x420
[  604.521626][T24848]  __x64_sys_sendmsg+0x1bd/0x2a0
[  604.521662][T24848]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  604.521703][T24848]  ? __pfx_ksys_write+0x10/0x10
[  604.521737][T24848]  do_syscall_64+0x14d/0xf80
[  604.521769][T24848]  ? trace_irq_disable+0x3b/0x150
[  604.521800][T24848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.521822][T24848]  ? clear_bhb_loop+0x40/0x90
[  604.521849][T24848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.521872][T24848] RIP: 0033:0x7f10c519c799
[  604.521902][T24848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  604.521922][T24848] RSP: 002b:00007f10c5f7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  604.521946][T24848] RAX: ffffffffffffffda RBX: 00007f10c5415fa0 RCX: 00007f10c519c799
[  604.521964][T24848] RDX: 0000000020008000 RSI: 00002000000002c0 RDI: 0000000000000003
[  604.521978][T24848] RBP: 00007f10c5f7b090 R08: 0000000000000000 R09: 0000000000000000
[  604.521992][T24848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.522006][T24848] R13: 00007f10c5416038 R14: 00007f10c5415fa0 R15: 00007ffcd4835328
[  604.522041][T24848]  </TASK>
[  605.067751][T16061] bond10 (unregistering): (slave gretap1): Releasing backup interface
[  606.201609][T16061] bond3 (unregistering): (slave bridge19): Releasing backup interface
[  606.399062][T16061] bond5 (unregistering): (slave bridge22): Releasing active interface
[  606.813918][T16061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  606.825100][T16061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.837532][T16061] bond0 (unregistering): Released all slaves
[  606.851913][T16061] bond1 (unregistering): Released all slaves
[  606.876423][T16061] bond2 (unregistering): Released all slaves
[  606.897552][T16061] bond3 (unregistering): Released all slaves
[  606.919501][T16061] bond4 (unregistering): (slave veth3): Releasing active interface
[  606.931524][T16061] bond4 (unregistering): (slave veth5): Releasing active interface
[  606.958965][T16061] bond4 (unregistering): Released all slaves
[  606.987515][T16061] bond5 (unregistering): Released all slaves
[  607.006206][T16061] bond6 (unregistering): Released all slaves
[  607.029895][T16061] bond7 (unregistering): Released all slaves
[  607.052444][T16061] bond8 (unregistering): Released all slaves
[  607.075452][T16061] bond9 (unregistering): Released all slaves
[  607.097977][T16061] bond10 (unregistering): (slave bond11): Releasing backup interface
[  607.107013][T16061] bond11 (unregistering): left promiscuous mode
[  607.124120][T16061] bond10 (unregistering): Released all slaves
[  607.148964][T16061] bond11 (unregistering): Released all slaves
[  607.168139][T16061] bond12 (unregistering): Released all slaves
[  607.333203][    C1] ip6_tunnel: ip6gre11 xmit: Local address not yet configured!
[  607.508649][T16061] tipc: Left network mode
[  607.539223][T24868] __nla_validate_parse: 1 callbacks suppressed
[  607.539247][T24868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5273'.
[  607.577219][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5274'.
[  607.619346][T24871] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  607.694402][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'.
[  607.888555][T24879] wg2: Caught tx_queue_len zero misconfig
[  608.054238][T24887] FAULT_INJECTION: forcing a failure.
[  608.054238][T24887] name failslab, interval 1, probability 0, space 0, times 0
[  608.143019][T24887] CPU: 1 UID: 0 PID: 24887 Comm: syz.3.5279 Not tainted syzkaller #0 PREEMPT(full) 
[  608.143052][T24887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  608.143067][T24887] Call Trace:
[  608.143077][T24887]  <TASK>
[  608.143087][T24887]  dump_stack_lvl+0xe8/0x150
[  608.143137][T24887]  should_fail_ex+0x412/0x560
[  608.143170][T24887]  should_failslab+0xa8/0x100
[  608.143242][T24887]  ? skb_clone+0x212/0x3a0
[  608.143286][T24887]  kmem_cache_alloc_noprof+0x87/0x650
[  608.143329][T24887]  ? __netlink_lookup+0xc6/0x8b0
[  608.143367][T24887]  skb_clone+0x212/0x3a0
[  608.143404][T24887]  __netlink_deliver_tap+0x404/0x850
[  608.143446][T24887]  ? netlink_deliver_tap+0x2e/0x1b0
[  608.143475][T24887]  netlink_deliver_tap+0x19c/0x1b0
[  608.143505][T24887]  netlink_unicast+0x7e3/0x9b0
[  608.143540][T24887]  ? __pfx_netlink_unicast+0x10/0x10
[  608.143567][T24887]  ? netlink_sendmsg+0x650/0xb40
[  608.143593][T24887]  ? skb_put+0x11b/0x210
[  608.143628][T24887]  netlink_sendmsg+0x813/0xb40
[  608.143666][T24887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  608.143699][T24887]  ? aa_sock_msg_perm+0xf1/0x1b0
[  608.143728][T24887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  608.143755][T24887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  608.143782][T24887]  ____sys_sendmsg+0xa68/0xad0
[  608.143825][T24887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  608.143868][T24887]  ? import_iovec+0x73/0xa0
[  608.143904][T24887]  ___sys_sendmsg+0x2a5/0x360
[  608.143943][T24887]  ? __pfx____sys_sendmsg+0x10/0x10
[  608.144015][T24887]  ? __fget_files+0x2a/0x420
[  608.144045][T24887]  ? __fget_files+0x3a0/0x420
[  608.144086][T24887]  __x64_sys_sendmsg+0x1bd/0x2a0
[  608.144130][T24887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  608.144172][T24887]  ? __pfx_ksys_write+0x10/0x10
[  608.144209][T24887]  do_syscall_64+0x14d/0xf80
[  608.144240][T24887]  ? trace_irq_disable+0x3b/0x150
[  608.144271][T24887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.144293][T24887]  ? clear_bhb_loop+0x40/0x90
[  608.144320][T24887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.144342][T24887] RIP: 0033:0x7fea7c59c799
[  608.144362][T24887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.144382][T24887] RSP: 002b:00007fea7d3cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  608.144405][T24887] RAX: ffffffffffffffda RBX: 00007fea7c815fa0 RCX: 00007fea7c59c799
[  608.144422][T24887] RDX: 0000000020008000 RSI: 00002000000002c0 RDI: 0000000000000003
[  608.144437][T24887] RBP: 00007fea7d3cd090 R08: 0000000000000000 R09: 0000000000000000
[  608.144450][T24887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.144463][T24887] R13: 00007fea7c816038 R14: 00007fea7c815fa0 R15: 00007ffdf6a59f38
[  608.144499][T24887]  </TASK>
[  608.149921][T24887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5279'.
[  608.544034][T24885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5278'.
[  609.215805][T24906] netlink: 'syz.2.5281': attribute type 10 has an invalid length.
[  609.253095][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  609.254349][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  609.787342][T24918] netlink: 'syz.3.5286': attribute type 1 has an invalid length.
[  609.795347][T24918] netlink: 760 bytes leftover after parsing attributes in process `syz.3.5286'.
[  609.836770][T24930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5287'.
[  610.011543][T24936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5289'.
[  610.011866][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5288'.
[  610.111489][T24938] netlink: 'syz.3.5290': attribute type 11 has an invalid length.
[  610.441620][T24948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5293'.
[  610.505744][T24948] ip6gre5: entered allmulticast mode
[  610.533267][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  611.026544][T24942] netlink: 'syz.0.5291': attribute type 12 has an invalid length.
[  611.063065][T24974] netlink: 'syz.1.5298': attribute type 21 has an invalid length.
[  611.612449][T16061] hsr_slave_0: left promiscuous mode
[  611.633191][T16061] hsr_slave_1: left promiscuous mode
[  611.641261][T16061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  611.680924][T16061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  611.709383][T16061] batman_adv: batadv0: Interface deactivated: dummy0
[  611.749166][T16061] batman_adv: batadv0: Removing interface: dummy0
[  611.815799][    C0] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  611.823997][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  613.027854][T24953] lo speed is unknown, defaulting to 1000
[  613.048452][T25004] ip6gre7: entered allmulticast mode
[  613.168742][T24953] lo speed is unknown, defaulting to 1000
[  613.541778][T25026] __nla_validate_parse: 23 callbacks suppressed
[  613.541803][T25026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5310'.
[  613.653233][T25031] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  613.780133][T16061] IPVS: stop unused estimator thread 0...
[  613.980695][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5314'.
[  614.140196][T25050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.373708][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  614.383048][    C1] ip6_tunnel: ip6gre9 xmit: Local address not yet configured!
[  614.536253][T25063] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5315'.
[  614.553374][T25063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.853670][T25069] netlink: 'syz.2.5319': attribute type 3 has an invalid length.
[  615.020375][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5322'.
[  615.074848][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5322'.
[  615.111062][T25078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5321'.
[  615.150094][T25083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5322'.
[  615.225208][T25080] ipvlan0: entered promiscuous mode
[  615.236560][T25080] ipvlan0: left promiscuous mode
[  615.325838][T25083] ipvlan0: entered promiscuous mode
[  615.360238][T25083] ipvlan0: left promiscuous mode
[  615.579003][T25087] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5323'.
[  615.655884][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5325'.
[  615.713022][T25091] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  616.100121][T25096] netlink: 'syz.1.5326': attribute type 2 has an invalid length.
[  616.150078][T25096] l24): entered promiscuous mode
[  616.949210][T25140] netlink: 'syz.4.5334': attribute type 11 has an invalid length.
[  617.179667][T25104] lo speed is unknown, defaulting to 1000
[  617.392659][T25104] lo speed is unknown, defaulting to 1000
[  617.557197][T25155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5338'.
[  617.593048][T25155] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  617.945436][T25173] bridge3: entered promiscuous mode
[  617.984659][T25173] bridge3: entered allmulticast mode
[  618.401896][T25192] bond0: (slave dummy0): Releasing backup interface
[  618.445904][T25192] bridge_slave_0: left allmulticast mode
[  618.448126][T25199] netlink: 'syz.4.5349': attribute type 11 has an invalid length.
[  618.473670][T25192] bridge_slave_0: left promiscuous mode
[  618.487469][T25192] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.523196][T25192] bond0: (slave bond_slave_0): Releasing backup interface
[  618.551759][T25192] bond0: (slave bond_slave_1): Releasing backup interface
[  618.591065][T25192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.643086][T25192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.671652][T25192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.704148][T25192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.726842][T25192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  619.114794][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5355'.
[  619.132979][T25230] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  619.493054][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  619.496229][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  619.664309][T25247] tipc: Started in network mode
[  619.669476][T25247] tipc: Node identity 0ef1424e6a11, cluster identity 4711
[  619.725583][T25247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.793719][T25257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'.
[  620.108620][T25268] netlink: 'syz.2.5365': attribute type 9 has an invalid length.
[  620.236301][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5364'.
[  620.238716][T25273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'.
[  620.281709][T25280] x_tables: duplicate underflow at hook 2
[  620.350111][T25279] batadv0: entered promiscuous mode
[  620.748913][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5373'.
[  620.782347][T25297] netlink: 'syz.2.5372': attribute type 26 has an invalid length.
[  620.807701][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5371'.
[  620.821151][T25298] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  620.841958][T25297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5372'.
[  620.852087][  T796] tipc: Node number set to 1692418638
[  620.949672][T25310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5375'.
[  621.250517][T25318] lo: Caught tx_queue_len zero misconfig
[  621.599426][T25333] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  621.659779][T25339] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5382'.
[  621.717238][T25342] netlink: 'syz.0.5383': attribute type 9 has an invalid length.
[  621.741517][T25339] netlink: 'syz.3.5382': attribute type 11 has an invalid length.
[  621.761668][T25339] netlink: 'syz.3.5382': attribute type 23 has an invalid length.
[  621.792639][T25339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5382'.
[  622.175205][T25334] lo speed is unknown, defaulting to 1000
[  622.193292][T25334] lo speed is unknown, defaulting to 1000
[  623.727242][T25390] lo speed is unknown, defaulting to 1000
[  623.736701][T25390] lo speed is unknown, defaulting to 1000
[  624.394322][T25437] netlink: 'syz.0.5405': attribute type 4 has an invalid length.
[  624.413928][T25438] netlink: 'syz.0.5405': attribute type 4 has an invalid length.
[  624.433349][T25439] __nla_validate_parse: 2 callbacks suppressed
[  624.433370][T25439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5406'.
[  624.611591][T25443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  624.694825][  T796] lo speed is unknown, defaulting to 1000
[  624.700637][  T796] syz0: Port: 1 Link DOWN
[  624.781869][  T796] lo speed is unknown, defaulting to 1000
[  624.790109][T25452] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5408'.
[  625.146153][T16060] pimreg3: left allmulticast mode
[  625.584796][T16060] bond3 (unregistering): (slave gretap1): Releasing backup interface
[  626.587541][T16060] bond0 (unregistering): Released all slaves
[  626.602441][T16060] bond1 (unregistering): Released all slaves
[  626.618128][T16060] bond2 (unregistering): Released all slaves
[  626.639544][T16060] bond3 (unregistering): (slave bond4): Releasing backup interface
[  626.648794][T16060] bond3 (unregistering): Released all slaves
[  626.663408][T16060] bond4 (unregistering): Released all slaves
[  626.678660][T16060] bond5 (unregistering): (slave bond6): Releasing backup interface
[  626.687608][T16060] bond5 (unregistering): Released all slaves
[  626.711021][T16060] bond6 (unregistering): Released all slaves
[  626.729032][T25452] bridge0: entered allmulticast mode
[  626.898431][T16060] tipc: Left network mode
[  627.425008][T25500] netlink: 'syz.3.5423': attribute type 5 has an invalid length.
[  627.433044][T25500] netlink: 'syz.3.5423': attribute type 5 has an invalid length.
[  627.525548][T25504] FAULT_INJECTION: forcing a failure.
[  627.525548][T25504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.580577][T25507] netlink: 'syz.1.5426': attribute type 10 has an invalid length.
[  627.585765][T25504] CPU: 0 UID: 0 PID: 25504 Comm: syz.4.5425 Not tainted syzkaller #0 PREEMPT(full) 
[  627.585856][T25504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  627.585890][T25504] Call Trace:
[  627.585920][T25504]  <TASK>
[  627.585943][T25504]  dump_stack_lvl+0xe8/0x150
[  627.586046][T25504]  should_fail_ex+0x412/0x560
[  627.586128][T25504]  _copy_from_user+0x2d/0xb0
[  627.586212][T25504]  ___sys_recvmsg+0x175/0x590
[  627.586309][T25504]  ? __lock_acquire+0x6b5/0x2cf0
[  627.586421][T25504]  ? __pfx____sys_recvmsg+0x10/0x10
[  627.586604][T25504]  do_recvmmsg+0x334/0x800
[  627.586720][T25504]  ? __pfx_do_recvmmsg+0x10/0x10
[  627.586836][T25504]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  627.586979][T25504]  __x64_sys_recvmmsg+0x198/0x250
[  627.587075][T25504]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  627.587197][T25504]  do_syscall_64+0x14d/0xf80
[  627.587272][T25504]  ? trace_irq_disable+0x3b/0x150
[  627.587354][T25504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.587409][T25504]  ? clear_bhb_loop+0x40/0x90
[  627.587487][T25504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.587550][T25504] RIP: 0033:0x7f418499c799
[  627.587603][T25504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.587654][T25504] RSP: 002b:00007f4185875028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  627.587736][T25504] RAX: ffffffffffffffda RBX: 00007f4184c15fa0 RCX: 00007f418499c799
[  627.587778][T25504] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003
[  627.587818][T25504] RBP: 00007f4185875090 R08: 0000000000000000 R09: 0000000000000000
[  627.587851][T25504] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  627.587883][T25504] R13: 00007f4184c16038 R14: 00007f4184c15fa0 R15: 00007ffc9b513ee8
[  627.587976][T25504]  </TASK>
[  627.785043][T25509] netlink: 'syz.1.5426': attribute type 10 has an invalid length.
[  627.813111][    C0] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  627.823051][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  627.944077][T25509] team0: Port device dummy0 removed
[  628.007384][T25509] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  628.041191][T25515] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5428'.
[  629.353070][T25562] netlink: 'syz.0.5436': attribute type 9 has an invalid length.
[  629.542538][T25561] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5437'.
[  629.734228][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  629.795438][T25580] netlink: 'syz.0.5444': attribute type 1 has an invalid length.
[  629.814061][T16060] batman_adv: batadv0: Interface deactivated: dummy0
[  629.832248][T16060] batman_adv: batadv0: Removing interface: dummy0
[  629.839251][T25580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5444'.
[  629.839603][T25581] netlink: 'syz.2.5442': attribute type 11 has an invalid length.
[  629.866436][T25580] netlink: 'syz.0.5444': attribute type 7 has an invalid length.
[  630.373277][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  630.869290][T25567] lo speed is unknown, defaulting to 1000
[  630.912619][T25567] lo speed is unknown, defaulting to 1000
[  630.919073][T25612] x_tables: duplicate underflow at hook 1
[  630.939949][T25612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5448'.
[  631.169026][T25624] nbd: must specify a size in bytes for the device
[  631.311271][T25635] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5453'.
[  631.352076][T25638] netlink: 'syz.4.5454': attribute type 9 has an invalid length.
[  631.536685][T25640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5453'.
[  631.653118][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  631.879261][T25655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'.
[  631.897580][T25655] netlink: 'syz.0.5456': attribute type 21 has an invalid length.
[  632.084340][T16060] IPVS: stop unused estimator thread 0...
[  632.110629][T25666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5460'.
[  632.293122][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  632.750993][T25692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5465'.
[  633.196986][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5469'.
[  633.224662][T25717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5470'.
[  633.440136][T25727] validate_nla: 1 callbacks suppressed
[  633.440162][T25727] netlink: 'syz.2.5472': attribute type 11 has an invalid length.
[  633.573118][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  634.145683][T25746] netlink: 'syz.0.5477': attribute type 19 has an invalid length.
[  634.173067][T25746] netlink: 'syz.0.5477': attribute type 20 has an invalid length.
[  634.187230][T25749] netlink: 'syz.2.5478': attribute type 21 has an invalid length.
[  634.204720][T21616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  634.216452][T21616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  634.227764][T21616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  634.236697][T21616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  634.248267][T21616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  634.494704][T25753] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  634.635280][T25767] IPv6: NLM_F_CREATE should be specified when creating new route
[  634.853264][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  634.899391][T16087] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.922994][T16087] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.023652][T16087] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.056956][T16087] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.197860][T16087] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.244623][T16087] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.292908][T25747] lo speed is unknown, defaulting to 1000
[  635.344257][T16087] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  635.373177][T16087] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.628057][T25805] __nla_validate_parse: 4 callbacks suppressed
[  635.628079][T25805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'.
[  635.658741][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5485'.
[  635.667817][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5485'.
[  635.700631][T25805] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5485'.
[  635.866077][T16091] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  635.976965][T16064] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  636.107154][T16064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  636.227621][T16087] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  636.254047][T16087] tipc: Resetting bearer <eth:syzkaller0>
[  636.294708][T21616] Bluetooth: hci1: command tx timeout
[  636.391690][T25823] RDS: rds_bind could not find a transport for ::ffff:172.30.9.1, load rds_tcp or rds_rdma?
[  636.406024][T25824] openvswitch: netlink: Actions may not be safe on all matching packets
[  636.415464][T25824] x_tables: duplicate entry at hook 3
[  636.430991][T25823] netlink: 15638 bytes leftover after parsing attributes in process `syz.0.5490'.
[  636.506259][T16087] batman_adv: batadv0: Removing interface: ip6gretap0
[  636.572056][T25827] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5491'.
[  636.749096][T16087] tipc: Disabling bearer <eth:syzkaller0>
[  636.807190][T25829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'.
[  636.817868][T25829] netlink: 'syz.4.5492': attribute type 21 has an invalid length.
[  636.882736][T16087] bond0 (unregistering): Released all slaves
[  636.894178][T16087] bond1 (unregistering): Released all slaves
[  636.909781][T16087] bond2 (unregistering): Released all slaves
[  636.932092][T16087] bond3 (unregistering): Released all slaves
[  636.957486][T16087] bond4 (unregistering): Released all slaves
[  636.973505][T16087] bond5 (unregistering): Released all slaves
[  636.991527][T16064] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  637.053955][T25756] lo speed is unknown, defaulting to 1000
[  637.053975][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5491'.
[  637.197657][T16087] tipc: Left network mode
[  637.210409][T25837] netlink: 'syz.0.5494': attribute type 32 has an invalid length.
[  637.227158][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'.
[  637.316616][T16087] IPVS: stopping backup sync thread 23619 ...
[  637.378089][T25837] bond5: Setting coupled_control to off (0)
[  637.940593][T25747] chnl_net:caif_netlink_parms(): no params data found
[  638.177920][T25870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5497'.
[  638.247298][T25870] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.255230][T25843] lo speed is unknown, defaulting to 1000
[  638.310767][T25874] bond0: (slave batadv1): Opening slave failed
[  638.373975][T21616] Bluetooth: hci1: command tx timeout
[  638.393259][T25747] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.400642][T25747] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.409094][T25747] bridge_slave_0: entered allmulticast mode
[  638.420423][T25747] bridge_slave_0: entered promiscuous mode
[  638.432140][T25747] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.440420][T25747] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.448266][T25747] bridge_slave_1: entered allmulticast mode
[  638.465326][T25747] bridge_slave_1: entered promiscuous mode
[  638.539092][T25747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  638.572568][T25747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  638.661797][T25747] team0: Port device team_slave_0 added
[  638.674472][T25857] siw: device registration error -23
[  638.681326][T25747] team0: Port device team_slave_1 added
[  638.734800][T25747] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.749219][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  638.775414][T25747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.844705][T25747] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.877251][T25747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  638.904167][T25747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.605893][T25747] hsr_slave_0: entered promiscuous mode
[  639.646249][T25747] hsr_slave_1: entered promiscuous mode
[  639.963343][T25915] netlink: 'syz.4.5505': attribute type 21 has an invalid length.
[  639.973128][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  640.463701][T21616] Bluetooth: hci1: command tx timeout
[  640.621489][T25747] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  640.720033][T25931] __nla_validate_parse: 8 callbacks suppressed
[  640.720060][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5509'.
[  640.839202][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5509'.
[  640.886533][T25931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5509'.
[  640.922909][T25931] netlink: 'syz.1.5509': attribute type 15 has an invalid length.
[  641.060508][T25942] x_tables: duplicate underflow at hook 1
[  641.088130][T25747] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  641.192575][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5512'.
[  641.502122][T16087] veth0_vlan: left promiscuous mode
[  641.716136][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'.
[  641.949597][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5521'.
[  641.958808][T25979] netlink: 'syz.1.5521': attribute type 21 has an invalid length.
[  641.992249][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'.
[  642.072681][T25985] netlink: 'syz.4.5522': attribute type 22 has an invalid length.
[  642.089021][T25985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5522'.
[  642.364709][T25747] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  642.391974][T25974] tipc: Enabling of bearer <�dp:s> rejected, media not registered
[  642.544644][T21616] Bluetooth: hci1: command tx timeout
[  642.581630][T25993] netlink: 'syz.2.5524': attribute type 1 has an invalid length.
[  642.639201][T25747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  642.706842][T25996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5525'.
[  643.140758][T16087] IPVS: stop unused estimator thread 0...
[  643.269956][T25747] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  643.301195][T25747] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  643.326710][T25747] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  643.360409][T25747] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  643.619646][T25747] 8021q: adding VLAN 0 to HW filter on device bond0
[  643.660793][T25747] 8021q: adding VLAN 0 to HW filter on device team0
[  643.689349][T16090] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.696738][T16090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.766597][T16087] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.773859][T16087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  643.783763][T26047] FAULT_INJECTION: forcing a failure.
[  643.783763][T26047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  643.811989][T26047] CPU: 0 UID: 0 PID: 26047 Comm: syz.1.5537 Not tainted syzkaller #0 PREEMPT(full) 
[  643.812021][T26047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  643.812041][T26047] Call Trace:
[  643.812051][T26047]  <TASK>
[  643.812061][T26047]  dump_stack_lvl+0xe8/0x150
[  643.812099][T26047]  should_fail_ex+0x412/0x560
[  643.812140][T26047]  _copy_from_user+0x2d/0xb0
[  643.812174][T26047]  __sys_connect+0x156/0x450
[  643.812207][T26047]  ? __pfx___sys_connect+0x10/0x10
[  643.812250][T26047]  ? __pfx_ksys_write+0x10/0x10
[  643.812281][T26047]  __x64_sys_connect+0x7a/0x90
[  643.812312][T26047]  do_syscall_64+0x14d/0xf80
[  643.812342][T26047]  ? trace_irq_disable+0x3b/0x150
[  643.812380][T26047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.812403][T26047]  ? clear_bhb_loop+0x40/0x90
[  643.812431][T26047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.812454][T26047] RIP: 0033:0x7f1e62b9c799
[  643.812475][T26047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.812494][T26047] RSP: 002b:00007f1e60df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  643.812518][T26047] RAX: ffffffffffffffda RBX: 00007f1e62e15fa0 RCX: 00007f1e62b9c799
[  643.812535][T26047] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000004
[  643.812550][T26047] RBP: 00007f1e60df6090 R08: 0000000000000000 R09: 0000000000000000
[  643.812564][T26047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.812577][T26047] R13: 00007f1e62e16038 R14: 00007f1e62e15fa0 R15: 00007ffc53d95ed8
[  643.812612][T26047]  </TASK>
[  644.042347][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5539'.
[  644.051631][T26054] netlink: 'syz.0.5539': attribute type 21 has an invalid length.
[  644.322478][T26070] netlink: 'syz.1.5541': attribute type 4 has an invalid length.
[  644.334151][T26064] 8021q: adding VLAN 0 to HW filter on device bond3
[  644.353379][T26068] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  644.443392][T26073] 8021q: adding VLAN 0 to HW filter on device bond8
[  644.456969][T26070] .`: renamed from bond0
[  644.500981][T26076] 8021q: adding VLAN 0 to HW filter on device batadv1
[  644.537831][T26076] bond8: (slave batadv1): Enslaving as an active interface with an up link
[  644.634047][T26085] netlink: 'syz.4.5546': attribute type 1 has an invalid length.
[  644.813724][T26099] syzkaller0: entered promiscuous mode
[  644.819288][T26099] syzkaller0: entered allmulticast mode
[  644.872200][T25747] 8021q: adding VLAN 0 to HW filter on device batadv0
[  645.072054][T25747] veth0_vlan: entered promiscuous mode
[  645.107406][T26108] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  645.133229][T25747] veth1_vlan: entered promiscuous mode
[  645.239080][T25747] veth0_macvtap: entered promiscuous mode
[  645.280288][T25747] veth1_macvtap: entered promiscuous mode
[  645.355248][T26115] netlink: 'syz.1.5552': attribute type 2 has an invalid length.
[  645.383999][T25747] batman_adv: batadv0: Interface activated: batadv_slave_0
[  645.420563][T25747] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.457843][T26119] dummy0: entered promiscuous mode
[  645.484893][T26119] vlan0: entered promiscuous mode
[  645.553596][T26121] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  645.560539][T26121] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  645.608343][T16087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.619122][T16087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.654524][T26126] netlink: 'syz.2.5557': attribute type 3 has an invalid length.
[  645.667786][T16087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.687442][T16087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.869032][T26139] __nla_validate_parse: 8 callbacks suppressed
[  645.869055][T26139] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5557'.
[  645.978165][T26134] block nbd2: NBD_DISCONNECT
[  646.039972][T26148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5560'.
[  646.060730][T26126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  646.094836][T16091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.121601][T16091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.144959][T26148] vlan3: entered allmulticast mode
[  646.150304][T26148] bridge5: entered allmulticast mode
[  646.329418][T16064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.350738][T16064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.520185][T26159] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  646.625275][T26166] tipc: Started in network mode
[  646.630365][T26166] tipc: Node identity beeceee260c7, cluster identity 4711
[  646.649607][T26166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  646.708582][T26166] syzkaller0: entered promiscuous mode
[  646.730679][T26166] syzkaller0: entered allmulticast mode
[  646.782257][T26171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5564'.
[  646.839058][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5566'.
[  646.866219][T26180] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  646.875184][T26166] tipc: Resetting bearer <eth:syzkaller0>
[  646.891552][T26165] tipc: Resetting bearer <eth:syzkaller0>
[  647.003663][T26165] tipc: Disabling bearer <eth:syzkaller0>
[  647.097744][T26190] xt_recent: Unsupported userspace flags (000000b1)
[  647.364863][T26161] lo speed is unknown, defaulting to 1000
[  647.381995][T26198] syzkaller0: entered promiscuous mode
[  647.397446][T26198] syzkaller0: entered allmulticast mode
[  647.442688][T26203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5570'.
[  647.656818][T26209] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  647.674550][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5574'.
[  647.694287][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5574'.
[  647.749693][T26209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5574'.
[  647.765988][T26209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5574'.
[  647.893481][ T5830] Bluetooth: hci1: command 0x0405 tx timeout
[  647.962138][T26219] netlink: 'syz.1.5576': attribute type 11 has an invalid length.
[  648.538629][T26239] IPv6: Can't replace route, no match found
[  648.632438][T26244] IPv6: Can't replace route, no match found
[  648.714034][T26249] x_tables: duplicate underflow at hook 1
[  648.966547][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5584'.
[  649.029321][T26255] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  649.867178][T26277] netlink: 'syz.1.5588': attribute type 11 has an invalid length.
[  650.213065][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  650.213065][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  650.229233][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  650.788022][T26322] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  651.477894][T26352] netlink: 'syz.2.5607': attribute type 1 has an invalid length.
[  651.775345][T26369] __nla_validate_parse: 7 callbacks suppressed
[  651.775368][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5609'.
[  651.906655][T26378] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5611'.
[  651.951468][T26357] bond9: (slave bridge6): Enslaving as a backup interface with an up link
[  651.966265][T26318] lo speed is unknown, defaulting to 1000
[  652.324034][T26382] netlink: 'syz.2.5612': attribute type 21 has an invalid length.
[  652.332041][T26382] netlink: 'syz.2.5612': attribute type 22 has an invalid length.
[  652.396866][T26382] netlink: 'syz.2.5612': attribute type 23 has an invalid length.
[  652.437448][T26382] netlink: 'syz.2.5612': attribute type 25 has an invalid length.
[  652.463313][T26382] netlink: 'syz.2.5612': attribute type 26 has an invalid length.
[  652.490698][T26382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5612'.
[  652.695824][T26404] syzkaller0: entered promiscuous mode
[  652.701551][T26404] syzkaller0: entered allmulticast mode
[  652.736490][T26408] xt_ecn: cannot match TCP bits for non-tcp packets
[  653.406864][T26439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5626'.
[  653.942270][T26459] netlink: 'syz.2.5630': attribute type 10 has an invalid length.
[  654.053416][T26462] netlink: 'syz.2.5630': attribute type 10 has an invalid length.
[  654.102593][T26462] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  654.763809][T26484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5636'.
[  654.875254][T26489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.976816][T26440] lo speed is unknown, defaulting to 1000
[  655.151746][T26495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5639'.
[  655.180835][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5639'.
[  655.209328][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5639'.
[  655.249634][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5639'.
[  655.358940][T26499] dvmrp12: entered allmulticast mode
[  655.378904][T26498] dvmrp12: left allmulticast mode
[  655.532198][T26505] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5641'.
[  655.946081][T26487] lo speed is unknown, defaulting to 1000
[  656.267740][T26522] netlink: 'syz.1.5645': attribute type 21 has an invalid length.
[  656.518238][T26529] ip6gre9: entered allmulticast mode
[  656.818820][T26538] netlink: 'syz.2.5648': attribute type 7 has an invalid length.
[  656.849371][T26538] netlink: 'syz.2.5648': attribute type 8 has an invalid length.
[  656.903652][T26504] lo speed is unknown, defaulting to 1000
[  657.311580][T26553] __nla_validate_parse: 1 callbacks suppressed
[  657.311603][T26553] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5651'.
[  657.402050][T26556] bond0: (slave xfrm0): The slave device specified does not support setting the MAC address
[  657.420885][T26556] bond0: (slave xfrm0): Error -95 calling set_mac_address
[  657.498221][T26558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5652'.
[  657.533359][T26558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5652'.
[  657.956748][T26571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5655'.
[  658.440788][T26586] vlan0: entered allmulticast mode
[  659.912666][T26636] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.5667'.
[  659.936398][T26636] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.5667'.
[  659.968470][T26640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5667'.
[  660.307307][T26651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5669'.
[  660.364090][T26651] veth1: entered promiscuous mode
[  660.395306][T26651] veth1: entered allmulticast mode
[  660.434476][T26659] netlink: 'syz.1.5671': attribute type 1 has an invalid length.
[  660.453088][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  660.460984][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  660.596201][T26659] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.641928][T26663] macsec4: entered promiscuous mode
[  660.691870][T26666] macvlan2: entered promiscuous mode
[  660.714123][T26666] macvlan2: entered allmulticast mode
[  660.720173][T26666] bond0: entered allmulticast mode
[  660.725739][T26666] bond0: entered promiscuous mode
[  660.731666][T26666] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  660.740796][T26666] team0: Port device macvlan2 added
[  661.161783][T26691] vlan4: entered promiscuous mode
[  661.182100][T26691] geneve1: entered promiscuous mode
[  661.197564][T26691] vlan4: entered allmulticast mode
[  661.205831][T26691] geneve1: entered allmulticast mode
[  661.418247][T26705] xt_hashlimit: max too large, truncated to 1048576
[  661.539293][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5685'.
[  661.804919][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'.
[  662.010325][T26738] syzkaller1: entered promiscuous mode
[  662.033145][T26738] syzkaller1: entered allmulticast mode
[  662.169593][T26749] bond4 (unregistering): Released all slaves
[  662.210259][T26747] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  662.250513][T26754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.465782][T26764] ip6gre8: entered allmulticast mode
[  662.976921][T26791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  663.010231][T26793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5704'.
[  663.025118][T26794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5705'.
[  663.057831][T26794] netlink: 'syz.3.5705': attribute type 13 has an invalid length.
[  663.209242][T26804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5707'.
[  663.320596][T26805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.357284][T26804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.433464][ T5487] veth0_macvtap: left promiscuous mode
[  663.502936][T26816] ip6gre10: entered allmulticast mode
[  663.572493][T26817] syzkaller0: entered promiscuous mode
[  663.579564][T26817] syzkaller0: entered allmulticast mode
[  663.594336][T26817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5709'.
[  663.874821][T26846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5716'.
[  664.027680][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5717'.
[  664.150719][T26850] ipvlan0: entered promiscuous mode
[  664.179416][T26850] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  664.205734][T26867] xt_bpf: check failed: parse error
[  665.573048][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  665.581969][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  665.993122][T26914] pimreg: entered allmulticast mode
[  666.000396][T26914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5728'.
[  666.009717][T26914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5728'.
[  666.708003][T26911] pimreg: left allmulticast mode
[  666.754759][T26912] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  666.947133][T26850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.216881][T26926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5729'.
[  667.228977][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5733'.
[  667.259471][T26926] netlink: 'syz.0.5729': attribute type 4 has an invalid length.
[  667.347456][T26927] bridge6: port 1(veth9) entered blocking state
[  667.363389][T26927] bridge6: port 1(veth9) entered disabled state
[  667.371415][T26927] veth9: entered allmulticast mode
[  667.397266][T26927] veth9: entered promiscuous mode
[  667.403072][T26935] tls_set_device_offload: netdev not found
[  667.410228][T26930] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  667.430481][T26931] bridge6: port 2(veth0_to_bond) entered blocking state
[  667.460827][T26931] bridge6: port 2(veth0_to_bond) entered disabled state
[  667.479570][T26931] veth0_to_bond: entered allmulticast mode
[  667.503037][T26931] veth0_to_bond: entered promiscuous mode
[  667.579261][T26933] bond1: option fail_over_mac: invalid value (127)
[  667.607950][T26933] bond1 (unregistering): Released all slaves
[  667.938264][T26929] dvmrp0: entered allmulticast mode
[  668.020845][T26929] __nla_validate_parse: 5 callbacks suppressed
[  668.020870][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5732'.
[  668.049483][T26962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5739'.
[  668.070402][T26962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5739'.
[  668.353677][T17901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  668.742229][T26990] tipc: Failed to remove unknown binding: 66,0,0/719957782:3160732342/3160732344
[  668.811802][T26990] tipc: Failed to remove unknown binding: 66,0,0/719957782:3160732342/3160732343
[  668.881989][T26921] lo speed is unknown, defaulting to 1000
[  669.333237][T17901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  670.019342][T27038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5754'.
[  670.398869][T27046] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5756'.
[  670.497110][T27046] IPv6: sit2: Disabled Multicast RS
[  670.524679][T27046] sit2: entered allmulticast mode
[  670.693023][    C1] ip6_tunnel: ip6gre10 xmit: Local address not yet configured!
[  671.106799][T27062] ip6tnl0: Caught tx_queue_len zero misconfig
[  671.872450][T27100] netlink: 'syz.1.5767': attribute type 1 has an invalid length.
[  671.908989][T27100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5767'.
[  671.926277][T27105] netlink: 'syz.2.5769': attribute type 1 has an invalid length.
[  671.963729][T27105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  672.031645][T27107] ip6gre12: entered allmulticast mode
[  672.783038][T21616] Bluetooth: hci4: command 0x040f tx timeout
[  672.890411][T27137] netlink: 'syz.2.5777': attribute type 1 has an invalid length.
[  673.031872][T27137] bond10: entered promiscuous mode
[  673.046844][T27137] 8021q: adding VLAN 0 to HW filter on device bond10
[  673.395814][T27161] ip6gre13: entered allmulticast mode
[  673.495759][T27165] macvtap0: entered promiscuous mode
[  673.609528][T27165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  673.731157][T21616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  673.753495][T21616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  673.764715][T21616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  673.773036][T21616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  673.780836][T21616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  674.417472][T27164] macvtap0: left promiscuous mode
[  674.771796][T16090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  674.805175][T16090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.821753][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5794'.
[  674.847977][T27170] lo speed is unknown, defaulting to 1000
[  674.859948][T27205] netlink: 'syz.0.5794': attribute type 21 has an invalid length.
[  674.873387][T27204] netlink: 'syz.1.5793': attribute type 1 has an invalid length.
[  674.898623][T27204] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5793'.
[  674.979641][T16090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  675.005540][T16090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.148436][T16090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  675.165811][T27214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5795'.
[  675.179927][T16090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.276399][T16090] bridge0: port 3(netdevsim0) entered disabled state
[  675.352583][T16090] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  675.372929][T27219] netlink: 'syz.1.5796': attribute type 21 has an invalid length.
[  675.385092][T16090] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  675.405555][T16090] bridge0: port 3(netdevsim0) entered disabled state
[  675.428630][T16090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  675.443118][T16090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.461481][T27219] netlink: 'syz.1.5796': attribute type 6 has an invalid length.
[  675.472393][T27219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5796'.
[  675.670842][T27231] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5799'.
[  675.748972][T27236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5801'.
[  675.781969][T16091] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  675.796137][T27231] .70�: renamed from hsr0
[  675.812205][T27231] .70�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  675.813588][    C1] ip6_tunnel: ip6gre11 xmit: Local address not yet configured!
[  675.830975][T21616] Bluetooth: hci5: command tx timeout
[  675.873747][T27231] .70�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  675.887241][T27231] .70�: entered allmulticast mode
[  675.892518][T27231] hsr_slave_0: entered allmulticast mode
[  675.901043][T27231] hsr_slave_1: entered allmulticast mode
[  675.937182][T27231] A link change request failed with some changes committed already. Interface .70� may have been left with an inconsistent configuration, please check.
[  675.979543][T27230] macvtap0: entered promiscuous mode
[  676.006731][T27235] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  676.092293][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5803'.
[  676.106231][T27248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  676.146347][T27248] batman_adv: batadv0: Removing interface: batadv_slave_0
[  676.189029][ T8830] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  676.276077][ T8841] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  676.328848][ T8841] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20000 - 0
[  676.522273][T16090] tipc: Resetting bearer <eth:syzkaller0>
[  676.567230][T27270] netlink: 'syz.4.5806': attribute type 10 has an invalid length.
[  676.817888][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5806'.
[  677.444388][T16090] tipc: Disabling bearer <eth:syzkaller0>
[  677.520645][T16090] bond3 (unregistering): (slave bridge2): Releasing active interface
[  677.572103][T16090] bond5 (unregistering): (slave bridge3): Releasing active interface
[  677.580926][T16090] bond5 (unregistering): (slave bridge3): the permanent HWaddr of slave - b6:d2:aa:8a:9a:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  677.649678][T16090] bond5 (unregistering): (slave bridge4): Releasing active interface
[  677.751182][T16090] bond9 (unregistering): (slave bridge6): Releasing backup interface
[  677.817369][T16090] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  677.836803][T16090] bond0 (unregistering): Released all slaves
[  677.874005][T16090] bond1 (unregistering): Released all slaves
[  677.893676][T21616] Bluetooth: hci5: command tx timeout
[  677.922037][T16090] bond2 (unregistering): Released all slaves
[  677.947351][T16090] bond3 (unregistering): Released all slaves
[  677.972491][T16090] bond4 (unregistering): Released all slaves
[  678.000293][T16090] bond5 (unregistering): Released all slaves
[  678.028182][T16090] bond6 (unregistering): Released all slaves
[  678.072276][T16090] bond7 (unregistering): Released all slaves
[  678.094247][T16090] bond8 (unregistering): (slave batadv1): Releasing backup interface
[  678.105980][T16090] bond8 (unregistering): Released all slaves
[  678.128321][T16090] bond9 (unregistering): Released all slaves
[  678.143438][T16090] bond10 (unregistering): Released all slaves
[  678.162682][T27229] macvtap0: left promiscuous mode
[  678.315602][T16090] !: left promiscuous mode
[  678.400806][T27170] chnl_net:caif_netlink_parms(): no params data found
[  678.584922][T16090] tipc: Left network mode
[  678.759779][T27343] bond1: option miimon: invalid value (18446744073709551607)
[  678.796991][T27343] bond1: option miimon: allowed values 0 - 2147483647
[  678.820303][T27343] bond1 (unregistering): Released all slaves
[  678.827589][T16090] IPVS: stopping backup sync thread 25031 ...
[  679.239648][T27372] macvtap0: entered promiscuous mode
[  679.253058][T27170] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.260392][T27170] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.273709][T27380] netlink: 'syz.1.5823': attribute type 1 has an invalid length.
[  679.289909][T27170] bridge_slave_0: entered allmulticast mode
[  679.319227][T27170] bridge_slave_0: entered promiscuous mode
[  679.329923][T27376] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  679.474898][T27380] 8021q: adding VLAN 0 to HW filter on device bond5
[  679.501119][T27383] macvlan3: entered promiscuous mode
[  679.506900][T27383] macvlan3: entered allmulticast mode
[  679.525394][T27383] bond5: entered allmulticast mode
[  679.530782][T27383] bond5: entered promiscuous mode
[  679.538968][T27383] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  679.548966][T27383] team0: Port device macvlan3 added
[  679.555618][T27170] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.563498][T27170] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.570857][T27170] bridge_slave_1: entered allmulticast mode
[  679.579897][T27170] bridge_slave_1: entered promiscuous mode
[  679.760826][T27170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  679.783216][T27170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.944389][T27170] team0: Port device team_slave_0 added
[  679.950427][T27370] macvtap0: left promiscuous mode
[  679.984772][T21616] Bluetooth: hci5: command tx timeout
[  680.030820][T27170] team0: Port device team_slave_1 added
[  680.126215][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'.
[  680.156779][T27414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5829'.
[  680.173078][T27410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5829'.
[  680.186358][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5826'.
[  680.317334][T27170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  680.337710][T27170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.377064][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'.
[  680.397575][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'.
[  680.406860][T27170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  680.510707][T27170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  680.541559][T27427] netlink: 'syz.3.5833': attribute type 1 has an invalid length.
[  680.549455][T27170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  680.549495][T27170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.803307][T27170] hsr_slave_0: entered promiscuous mode
[  680.825468][T27170] hsr_slave_1: entered promiscuous mode
[  680.849053][T27170] debugfs: 'hsr0' already exists in 'hsr'
[  680.858249][T27170] Cannot create hsr debugfs directory
[  681.104537][T27408] lo speed is unknown, defaulting to 1000
[  681.466781][T27170] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.618005][T27464] netlink: 'syz.3.5841': attribute type 1 has an invalid length.
[  681.640024][T27464] netlink: 'syz.3.5841': attribute type 2 has an invalid length.
[  681.644730][T27170] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.967875][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5844'.
[  681.978303][T27477] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  682.053738][T21616] Bluetooth: hci5: command tx timeout
[  682.098672][T27170] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  682.286377][T27170] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  682.331312][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'.
[  682.350979][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5845'.
[  682.441025][T16090] hsr_slave_0: left promiscuous mode
[  682.449481][T16090] hsr_slave_1: left promiscuous mode
[  682.485178][T16090] macvlan1: left promiscuous mode
[  682.490929][T16090] veth1_vlan: left promiscuous mode
[  682.673173][T27499] netlink: 'syz.3.5849': attribute type 2 has an invalid length.
[  683.346880][T27499] !��9: entered promiscuous mode
[  683.527826][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5851'.
[  683.543953][T27525] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  683.680118][T27532] netlink: 'syz.3.5853': attribute type 142 has an invalid length.
[  683.690180][T27528] netlink: 'syz.1.5850': attribute type 142 has an invalid length.
[  683.791446][T27528] netlink: 'syz.1.5850': attribute type 15 has an invalid length.
[  683.945140][T27170] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  683.993718][T27170] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  684.067333][T27170] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  684.090085][T27170] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  684.133346][T16090] IPVS: stop unused estimator thread 0...
[  684.483400][T27170] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.535324][T27559] netlink: 'syz.1.5856': attribute type 1 has an invalid length.
[  684.536300][T27560] netlink: 'syz.1.5856': attribute type 1 has an invalid length.
[  684.626640][T27170] 8021q: adding VLAN 0 to HW filter on device team0
[  684.646865][T16087] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.654103][T16087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.665334][T16087] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.672532][T16087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.790101][T27170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  684.863767][T27562] syzkaller1: entered promiscuous mode
[  684.888422][T27562] syzkaller1: entered allmulticast mode
[  684.959849][T27569] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  685.007746][T27573] erspan1: entered promiscuous mode
[  685.035042][T27573] erspan1: entered allmulticast mode
[  685.158126][T27573] __nla_validate_parse: 1 callbacks suppressed
[  685.158151][T27573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5860'.
[  685.528710][T27590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5863'.
[  685.540095][T27170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  685.704420][T27170] veth0_vlan: entered promiscuous mode
[  685.734793][T27170] veth1_vlan: entered promiscuous mode
[  685.828041][T27599] ip6gre14: entered allmulticast mode
[  685.849662][T27170] veth0_macvtap: entered promiscuous mode
[  685.861359][T27170] veth1_macvtap: entered promiscuous mode
[  685.919000][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5867'.
[  685.957184][T27170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.022159][T27170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.052208][ T8841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.061300][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  686.121980][ T8841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.147043][ T8841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.189227][ T8841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  686.201604][T27610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.284584][T27613] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  686.541045][T16064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.570510][T16064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.678000][T16090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.711402][T16090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.981531][T27635] batman_adv: batadv0: Adding interface: ipvlan2
[  687.002936][T27635] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  687.049441][T27635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  687.070530][T27635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  687.092198][T27635] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  687.400839][T27630] lo speed is unknown, defaulting to 1000
[  687.993055][T27671] netlink: 'syz.0.5881': attribute type 6 has an invalid length.
[  688.112426][T27674] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5882'.
[  689.194564][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  689.205262][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  689.225296][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  689.254529][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  689.268420][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  689.514099][T27707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5888'.
[  690.091271][T27697] lo speed is unknown, defaulting to 1000
[  690.277942][T27719] tc_dump_action: action bad kind
[  690.902247][T27706] lo speed is unknown, defaulting to 1000
[  691.422448][ T5830] Bluetooth: hci3: command tx timeout
[  691.536819][T27746] netlink: 'syz.3.5894': attribute type 9 has an invalid length.
[  691.789291][T27697] chnl_net:caif_netlink_parms(): no params data found
[  691.803069][T27748] netlink: 'syz.1.5895': attribute type 10 has an invalid length.
[  691.873154][T27748] team0: Port device syz_tun added
[  692.126489][T27767] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5898'.
[  692.179320][T27767] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5898'.
[  692.212087][T27697] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.246442][T27697] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.270341][T27697] bridge_slave_0: entered allmulticast mode
[  692.286914][T27697] bridge_slave_0: entered promiscuous mode
[  692.309370][T27697] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.321867][T27697] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.329840][T27697] bridge_slave_1: entered allmulticast mode
[  692.385806][T27697] bridge_slave_1: entered promiscuous mode
[  692.601718][T27697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.635505][T27697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.800117][T27697] team0: Port device team_slave_0 added
[  692.843843][T27697] team0: Port device team_slave_1 added
[  692.944664][T27790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5904'.
[  693.008680][T27697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.039972][T27697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.089281][T27697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.198158][T27697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.215463][T27697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.263620][T27697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.307415][T27810] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5906'.
[  693.465944][T27697] hsr_slave_0: entered promiscuous mode
[  693.475908][T27697] hsr_slave_1: entered promiscuous mode
[  693.482469][T27697] debugfs: 'hsr0' already exists in 'hsr'
[  693.493361][ T5830] Bluetooth: hci3: command tx timeout
[  693.499606][T27697] Cannot create hsr debugfs directory
[  693.549335][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5908'.
[  693.916753][T27836] geneve2: entered promiscuous mode
[  693.929227][T27836] geneve2: entered allmulticast mode
[  694.254005][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5914'.
[  694.356620][T27851] netlink: 'syz.1.5914': attribute type 2 has an invalid length.
[  694.414449][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5916'.
[  694.675834][T27854] veth1_macvtap: left promiscuous mode
[  694.735681][T27835] lo speed is unknown, defaulting to 1000
[  695.214094][T27878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'.
[  695.313492][T27883] netlink: 'syz.3.5922': attribute type 10 has an invalid length.
[  695.358975][T27883] veth0_vlan: left promiscuous mode
[  695.381422][T27883] veth0_vlan: entered promiscuous mode
[  695.400854][T27883] team0: Device veth0_vlan failed to register rx_handler
[  695.519637][T27890] ip6gre1: entered allmulticast mode
[  695.542129][T27697] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  695.576366][ T5830] Bluetooth: hci3: command tx timeout
[  695.589849][T27697] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  695.692317][T27697] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  695.749185][T27697] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  696.109668][T27901] syzkaller0: entered promiscuous mode
[  696.116608][T27901] syzkaller0: entered allmulticast mode
[  696.135784][T27910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5927'.
[  696.884332][T27932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5930'.
[  697.196402][T27946] macvtap0: entered promiscuous mode
[  697.217327][T27697] 8021q: adding VLAN 0 to HW filter on device bond0
[  697.233366][T27946] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  697.277201][T27697] 8021q: adding VLAN 0 to HW filter on device team0
[  697.308937][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.316222][ T8841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.351905][T27951] macvtap0: entered promiscuous mode
[  697.369733][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.377037][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.400367][T27951] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  697.418895][T27954] ip6gre15: entered allmulticast mode
[  697.654014][ T5830] Bluetooth: hci3: command tx timeout
[  697.935400][T27697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.008427][T27945] macvtap0: left promiscuous mode
[  698.132311][T27697] veth0_vlan: entered promiscuous mode
[  698.180374][T27949] macvtap0: left promiscuous mode
[  698.199810][T27697] veth1_vlan: entered promiscuous mode
[  698.292029][T27987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5939'.
[  698.369617][T27697] veth0_macvtap: entered promiscuous mode
[  698.491964][T28001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5941'.
[  698.572706][T27987] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.580526][T27987] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.605022][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5942'.
[  698.788069][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  698.808003][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  698.952414][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5943'.
[  698.974533][T27987] geneve2: left promiscuous mode
[  698.979628][T27987] geneve2: left allmulticast mode
[  698.988435][T27987] ip6gre1: left allmulticast mode
[  699.033114][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5942'.
[  699.042992][T16088] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.075458][T27697] veth1_macvtap: entered promiscuous mode
[  699.143727][T16088] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.153679][T28017] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5944'.
[  699.165713][T16088] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.188847][T28017] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5944'.
[  699.196688][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5945'.
[  699.217539][T16088] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.242486][T16088] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  699.251684][T28019] netlink: 'syz.3.5945': attribute type 21 has an invalid length.
[  699.281457][T16088] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  699.294635][T27697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.309237][T16088] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  699.320021][T16088] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  699.341188][T27697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  699.403254][T16064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.448866][T16064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.495619][T16064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.507706][T16064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.523527][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5947'.
[  699.630317][T16064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.665709][T16064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.741629][T16060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.755581][T16060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.805946][T28038] macvtap0: entered promiscuous mode
[  699.827870][T28038] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  699.898675][T28041] syzkaller0: entered promiscuous mode
[  699.909384][T28041] syzkaller0: entered allmulticast mode
[  699.955713][T28040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  699.986742][T28039] tipc: Resetting bearer <eth:syzkaller0>
[  700.023909][T28039] tipc: Disabling bearer <eth:syzkaller0>
[  700.080346][T28049] syzkaller1: entered promiscuous mode
[  700.086371][T28049] syzkaller1: entered allmulticast mode
[  700.107333][T28049] pimreg: entered allmulticast mode
[  700.324148][T28060] netlink: 'syz.1.5953': attribute type 1 has an invalid length.
[  700.342400][T28060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.589066][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5959'.
[  700.629459][T28036] macvtap0: left promiscuous mode
[  700.712999][T28088] netlink: 'syz.0.5958': attribute type 21 has an invalid length.
[  700.750029][T28088] netlink: 'syz.0.5958': attribute type 21 has an invalid length.
[  700.794156][ T8841] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  700.813978][ T8841] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  700.827361][ T8841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  700.855739][ T8841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  700.883183][T28096] netlink: 'syz.1.5963': attribute type 18 has an invalid length.
[  700.906974][T28097] netlink: 'syz.1.5963': attribute type 18 has an invalid length.
[  700.976232][T28100] netlink: 'syz.2.5962': attribute type 21 has an invalid length.
[  701.260739][T28115] netlink: 'syz.0.5968': attribute type 9 has an invalid length.
[  701.297679][T28115] netlink: 'syz.0.5968': attribute type 6 has an invalid length.
[  704.551909][T28133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.742213][T28220] __nla_validate_parse: 7 callbacks suppressed
[  704.742237][T28220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5980'.
[  704.787987][T28220] netlink: 'syz.4.5980': attribute type 21 has an invalid length.
[  705.003231][T28240] macsec0: entered allmulticast mode
[  705.083857][T28242] veth1_macvtap: entered allmulticast mode
[  705.100508][T28242] macsec0: left allmulticast mode
[  705.123091][T28242] veth1_macvtap: left allmulticast mode
[  705.773228][T28268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5991'.
[  705.955491][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5993'.
[  706.162626][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5995'.
[  706.165921][T28283] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5994'.
[  706.533420][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  706.882663][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'.
[  706.891920][T28319] netlink: 'syz.0.6002': attribute type 21 has an invalid length.
[  707.318596][T28343] netlink: 'syz.2.6007': attribute type 1 has an invalid length.
[  707.329433][T28340] netlink: 'syz.1.6006': attribute type 8 has an invalid length.
[  707.337492][T28343] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6007'.
[  707.407100][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6007'.
[  707.561815][T28356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6009'.
[  707.613322][T28359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  707.641392][T28359] syzkaller0: entered promiscuous mode
[  707.647113][T28359] syzkaller0: entered allmulticast mode
[  707.855609][T28367] tipc: Resetting bearer <eth:syzkaller0>
[  707.948337][T28358] tipc: Resetting bearer <eth:syzkaller0>
[  708.011412][T28358] tipc: Disabling bearer <eth:syzkaller0>
[  708.022728][T28373] netlink: 'syz.0.6014': attribute type 1 has an invalid length.
[  708.023124][T28375] netlink: 'syz.0.6014': attribute type 1 has an invalid length.
[  708.059151][T28375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6014'.
[  708.458180][T28390] batman_adv: batadv0: Adding interface: macvlan2
[  708.473752][T28390] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  708.543930][T28390] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active
[  708.816745][T28413] netlink: 'syz.3.6023': attribute type 2 has an invalid length.
[  708.824726][T28412] netlink: 'syz.1.6024': attribute type 21 has an invalid length.
[  709.354654][T28430] netlink: 'syz.4.6026': attribute type 21 has an invalid length.
[  710.117815][T28469] __nla_validate_parse: 7 callbacks suppressed
[  710.117899][T28469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'.
[  710.168096][T28469] netlink: 'syz.2.6039': attribute type 21 has an invalid length.
[  710.187464][T28471] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  710.219309][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6036'.
[  710.371621][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6040'.
[  710.392185][T28482] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  710.876562][T28502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6045'.
[  711.451284][T28472] lo speed is unknown, defaulting to 1000
[  711.489386][T28510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6049'.
[  711.628323][T28510] syzkaller1: entered promiscuous mode
[  711.648529][T28510] syzkaller1: entered allmulticast mode
[  711.684347][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6049'.
[  711.968598][T28525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6053'.
[  712.040772][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6054'.
[  712.069769][T28528] netlink: 'syz.3.6054': attribute type 21 has an invalid length.
[  712.223658][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6056'.
[  712.232618][T28534] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  712.266316][T28538] ��: renamed from team_slave_1
[  712.724890][T28554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.739985][T28549] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6058'.
[  713.883544][T28603] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  714.004349][T28607] netlink: 'syz.3.6069': attribute type 1 has an invalid length.
[  714.247363][T28607] 8021q: adding VLAN 0 to HW filter on device bond1
[  714.278228][T28619] netlink: 'syz.0.6074': attribute type 21 has an invalid length.
[  714.318883][T28614] bond1: (slave veth5): Enslaving as an active interface with a down link
[  714.388259][T28617] 8021q: adding VLAN 0 to HW filter on device batadv1
[  714.415390][T28617] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  714.476754][T28625] netlink: 'syz.1.6075': attribute type 1 has an invalid length.
[  715.186378][T28666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.294468][T28666] syzkaller0: entered promiscuous mode
[  715.309534][T28674] vcan0: tx drop: invalid da for name 0x0000000000000001
[  715.317353][T28666] syzkaller0: entered allmulticast mode
[  715.332344][T28674] netlink: 'syz.3.6088': attribute type 1 has an invalid length.
[  715.342064][T28666] tipc: Resetting bearer <eth:syzkaller0>
[  715.353708][T28674] __nla_validate_parse: 7 callbacks suppressed
[  715.353732][T28674] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6088'.
[  715.392098][T28665] tipc: Resetting bearer <eth:syzkaller0>
[  715.400520][T28680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6089'.
[  715.500028][T28687] sctp: [Deprecated]: syz.1.6087 (pid 28687) Use of int in max_burst socket option.
[  715.500028][T28687] Use struct sctp_assoc_value instead
[  716.773906][    C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured!
[  717.668666][T28665] tipc: Disabling bearer <eth:syzkaller0>
[  717.677989][T28680] bridge_slave_1: left allmulticast mode
[  717.684446][T28680] bridge_slave_1: left promiscuous mode
[  717.690626][T28680] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.701317][T28680] bridge_slave_0: left allmulticast mode
[  717.707433][T28680] bridge_slave_0: left promiscuous mode
[  717.714799][T28680] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.871288][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6089'.
[  718.172275][T28709] block nbd2: Unsupported socket: should be TCP or UNIX.
[  718.228483][T28714] netlink: 'syz.0.6095': attribute type 2 has an invalid length.
[  718.252020][T28718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6098'.
[  718.272855][T28714] !��9: entered promiscuous mode
[  718.475048][T28736] netlink: 'syz.0.6102': attribute type 2 has an invalid length.
[  718.540095][T28739] netlink: 'syz.0.6102': attribute type 2 has an invalid length.
[  718.680809][T28746] geneve1: entered promiscuous mode
[  718.687247][T28746] macsec2: entered promiscuous mode
[  718.692717][T28746] macsec2: entered allmulticast mode
[  718.716886][T28746] geneve1: entered allmulticast mode
[  718.743510][T28746] geneve1: left allmulticast mode
[  718.763417][T28746] geneve1: left promiscuous mode
[  718.796859][T28752] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6107'.
[  718.831269][T28752] syz_tun: entered promiscuous mode
[  718.868332][T28752] syz_tun: refused to change device tx_queue_len
[  718.889311][T28752] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  719.022483][T28761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6110'.
[  719.087920][T28767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6112'.
[  719.140009][T28772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6112'.
[  719.218190][T28776] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6111'.
[  719.284459][T28767] veth0_to_team: entered promiscuous mode
[  719.318675][T28767] veth0_to_team: left promiscuous mode
[  719.422962][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6114'.
[  719.447703][T28785] netlink: 'syz.3.6114': attribute type 14 has an invalid length.
[  719.460136][T28785] netlink: 'syz.3.6114': attribute type 11 has an invalid length.
[  719.502124][T28770] 8021q: adding VLAN 0 to HW filter on device bond5
[  719.531688][T28770] bond0: (slave bond5): Enslaving as an active interface with an up link
[  719.562602][T28772] veth0_to_team: entered promiscuous mode
[  719.595256][T28772] veth0_to_team: left promiscuous mode
[  720.011511][T28811] ipt_ECN: cannot use operation on non-tcp rule
[  720.421820][T28831] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  720.778052][T28803] lo speed is unknown, defaulting to 1000
[  720.805726][T28848] netlink: 'syz.0.6126': attribute type 2 has an invalid length.
[  721.299929][T28861] IPVS: set_ctl: invalid protocol: 59 172.20.20.27:20004
[  721.319141][T28861] __nla_validate_parse: 1 callbacks suppressed
[  721.319170][T28861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6130'.
[  721.347461][T28865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  721.565499][T28871] netlink: 'syz.1.6134': attribute type 3 has an invalid length.
[  721.670411][T28878] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  721.819609][T28880] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  721.870503][T28880] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.917385][T28811] lo speed is unknown, defaulting to 1000
[  721.995988][T28880] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  722.008048][T28880] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.109087][T28880] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  722.133230][T28880] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.371437][T28880] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  722.407166][T28880] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.664530][T28893] syzkaller0: entered promiscuous mode
[  722.686267][T28893] syzkaller0: entered allmulticast mode
[  722.707442][T28905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  722.714924][T28905] IPv6: NLM_F_CREATE should be set when creating new route
[  722.722287][T28905] IPv6: NLM_F_CREATE should be set when creating new route
[  722.860863][T28893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  722.872129][T16087] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  722.893065][T16087] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.917630][T16087] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  722.943987][T16087] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.056674][T28892] tipc: Resetting bearer <eth:syzkaller0>
[  723.098697][T28892] tipc: Disabling bearer <eth:syzkaller0>
[  723.138579][T16090] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  723.151127][T16090] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.205995][ T8841] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  723.223634][ T8841] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.704253][T28925] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  723.948040][T28939] netlink: 'syz.4.6149': attribute type 2 has an invalid length.
[  723.966633][T28939] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6149'.
[  724.008136][T28939] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6149'.
[  724.664853][T28964] bridge_slave_1: left allmulticast mode
[  724.670614][T28964] bridge_slave_1: left promiscuous mode
[  724.721426][T28964] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.840486][T28964] bridge_slave_0: left allmulticast mode
[  724.933673][T28964] bridge_slave_0: left promiscuous mode
[  724.939589][T28964] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.234680][T28993] netlink: 'syz.2.6160': attribute type 13 has an invalid length.
[  725.321702][T28989] bridge0: port 3(dummy0) entered blocking state
[  725.328368][T28989] bridge0: port 3(dummy0) entered forwarding state
[  725.357766][T28989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  725.479665][T28989] pimreg3: entered allmulticast mode
[  725.712307][T28964] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  726.625724][T29034] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.6171'.
[  726.653019][T29034] lo: Caught tx_queue_len zero misconfig
[  726.718843][T29034] xt_ecn: cannot match TCP bits for non-tcp packets
[  726.820546][T29034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  726.849704][T29034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.020678][T29034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.061879][T29034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.175398][T29053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6177'.
[  727.204008][T29053] netlink: 'syz.2.6177': attribute type 21 has an invalid length.
[  727.255041][T29034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.275019][T29034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.328383][T29055] netlink: 'syz.3.6176': attribute type 11 has an invalid length.
[  727.345414][T29055] netlink: 'syz.3.6176': attribute type 4 has an invalid length.
[  727.354885][T29055] netlink: 140644 bytes leftover after parsing attributes in process `syz.3.6176'.
[  727.367249][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'.
[  727.415924][T29034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.426636][T29034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.690956][ T8841] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  727.723161][ T8841] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.731469][ T8841] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  727.762906][ T8841] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.787233][T16064] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  727.796930][T16064] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.838874][T16088] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  727.851667][T16088] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.877210][T29079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6181'.
[  727.923144][T29079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6181'.
[  727.932202][T29079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6181'.
[  727.974448][T29080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6181'.
[  728.067401][T29088] FAULT_INJECTION: forcing a failure.
[  728.067401][T29088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.132182][T29088] CPU: 0 UID: 0 PID: 29088 Comm: syz.0.6182 Not tainted syzkaller #0 PREEMPT(full) 
[  728.132215][T29088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  728.132231][T29088] Call Trace:
[  728.132241][T29088]  <TASK>
[  728.132251][T29088]  dump_stack_lvl+0xe8/0x150
[  728.132292][T29088]  should_fail_ex+0x412/0x560
[  728.132327][T29088]  _copy_from_user+0x2d/0xb0
[  728.132360][T29088]  ___sys_sendmsg+0x1c6/0x360
[  728.132402][T29088]  ? __pfx____sys_sendmsg+0x10/0x10
[  728.132470][T29088]  ? __fget_files+0x2a/0x420
[  728.132502][T29088]  ? __fget_files+0x3a0/0x420
[  728.132543][T29088]  __x64_sys_sendmsg+0x1bd/0x2a0
[  728.132587][T29088]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  728.132630][T29088]  ? __pfx_ksys_write+0x10/0x10
[  728.132666][T29088]  do_syscall_64+0x14d/0xf80
[  728.132698][T29088]  ? trace_irq_disable+0x3b/0x150
[  728.132731][T29088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.132758][T29088]  ? clear_bhb_loop+0x40/0x90
[  728.132784][T29088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.132806][T29088] RIP: 0033:0x7f46e619c799
[  728.132826][T29088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.132844][T29088] RSP: 002b:00007f46e6f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  728.132868][T29088] RAX: ffffffffffffffda RBX: 00007f46e6415fa0 RCX: 00007f46e619c799
[  728.132884][T29088] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000004
[  728.132898][T29088] RBP: 00007f46e6f97090 R08: 0000000000000000 R09: 0000000000000000
[  728.132911][T29088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.132923][T29088] R13: 00007f46e6416038 R14: 00007f46e6415fa0 R15: 00007ffd16ff3fa8
[  728.132956][T29088]  </TASK>
[  728.461841][T29105] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6185'.
[  729.030318][T29128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6192'.
[  730.610868][T29213] geneve2: entered promiscuous mode
[  730.714549][T29218] netlink: 'syz.1.6214': attribute type 13 has an invalid length.
[  731.382646][T29254] openvswitch: netlink: Message has 189 unknown bytes.
[  731.397389][T29244] syzkaller0: entered promiscuous mode
[  731.403038][T29244] syzkaller0: entered allmulticast mode
[  732.088064][T29295] netlink: 'syz.1.6233': attribute type 11 has an invalid length.
[  732.133327][    C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  732.408132][T29309] __nla_validate_parse: 7 callbacks suppressed
[  732.408156][T29309] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6237'.
[  732.816506][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6240'.
[  732.825733][T29327] netlink: 'syz.4.6240': attribute type 21 has an invalid length.
[  733.102585][T29337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6241'.
[  733.868445][T29380] netlink: 'syz.3.6252': attribute type 2 has an invalid length.
[  733.897773][T29380] netlink: 'syz.3.6252': attribute type 11 has an invalid length.
[  733.916036][T29380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6252'.
[  733.928597][T29338] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  733.941526][T29338] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  733.950342][T29338] CPU: 0 UID: 0 PID: 29338 Comm: syz.0.6241 Not tainted syzkaller #0 PREEMPT(full) 
[  733.959753][T29338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  733.969836][T29338] RIP: 0010:rose_transmit_link+0x32/0xac0
[  733.975747][T29338] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 6a 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6
[  733.995394][T29338] RSP: 0018:ffffc90003fff8e8 EFLAGS: 00010207
[  734.001487][T29338] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000
[  734.009483][T29338] RDX: ffffc90010fa3000 RSI: 00000000000001e6 RDI: 00000000000001e7
[  734.017480][T29338] RBP: ffff8880790ef3c0 R08: ffff888031e13c80 R09: 0000000000000008
[  734.025480][T29338] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000
[  734.033475][T29338] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff920007fff3c
[  734.041473][T29338] FS:  00007f46e6f766c0(0000) GS:ffff88812546d000(0000) knlGS:0000000000000000
[  734.050447][T29338] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  734.057142][T29338] CR2: 0000001b2fb0eff8 CR3: 00000000578a2000 CR4: 00000000003526f0
[  734.065148][T29338] Call Trace:
[  734.068456][T29338]  <TASK>
[  734.071432][T29338]  ? __alloc_skb+0x4e5/0x7d0
[  734.076074][T29338]  ? skb_put+0x11b/0x210
[  734.080354][T29338]  rose_write_internal+0x1256/0x1b60
[  734.085677][T29338]  ? lockdep_hardirqs_on+0x7a/0x110
[  734.090952][T29338]  ? __pfx_rose_write_internal+0x10/0x10
[  734.096614][T29338]  ? timer_delete+0x245/0x340
[  734.101363][T29338]  rose_release+0x25b/0x510
[  734.106010][T29338]  sock_close+0xc3/0x240
[  734.110306][T29338]  ? __pfx_sock_close+0x10/0x10
[  734.115180][T29338]  __fput+0x44f/0xa70
[  734.119214][T29338]  task_work_run+0x1d9/0x270
[  734.123873][T29338]  ? __pfx_task_work_run+0x10/0x10
[  734.129008][T29338]  ? task_work_add+0x395/0x440
[  734.133825][T29338]  ? __pfx_task_work_add+0x10/0x10
[  734.138958][T29338]  get_signal+0x11eb/0x1330
[  734.143497][T29338]  arch_do_signal_or_restart+0xbc/0x830
[  734.149109][T29338]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  734.155293][T29338]  exit_to_user_mode_loop+0x86/0x480
[  734.160611][T29338]  ? rcu_is_watching+0x15/0xb0
[  734.165406][T29338]  do_syscall_64+0x32d/0xf80
[  734.170025][T29338]  ? trace_irq_disable+0x3b/0x150
[  734.175093][T29338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.181180][T29338]  ? clear_bhb_loop+0x40/0x90
[  734.185888][T29338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.191803][T29338] RIP: 0033:0x7f46e619c799
[  734.196242][T29338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.215872][T29338] RSP: 002b:00007f46e6f76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  734.224319][T29338] RAX: 0000000000000000 RBX: 00007f46e6416090 RCX: 00007f46e619c799
[  734.232317][T29338] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000004
[  734.240310][T29338] RBP: 00007f46e6232bd9 R08: 0000000000000000 R09: 0000000000000000
[  734.248307][T29338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  734.256320][T29338] R13: 00007f46e6416128 R14: 00007f46e6416090 R15: 00007ffd16ff3fa8
[  734.264323][T29338]  </TASK>
[  734.267391][T29338] Modules linked in:
[  734.272345][T29338] ---[ end trace 0000000000000000 ]---
[  734.325343][T29338] RIP: 0010:rose_transmit_link+0x32/0xac0
[  734.331177][T29338] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 6a 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6
[  734.394071][T29338] RSP: 0018:ffffc90003fff8e8 EFLAGS: 00010207
[  734.405624][T29338] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000
[  734.418211][T29338] RDX: ffffc90010fa3000 RSI: 00000000000001e6 RDI: 00000000000001e7
[  734.436014][T29338] RBP: ffff8880790ef3c0 R08: ffff888031e13c80 R09: 0000000000000008
[  734.453116][T29338] R10: 000000000000000f R11: 0000000000000002 R12: dffffc0000000000
[  734.471431][T29338] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff920007fff3c
[  734.488673][T29338] FS:  00007f46e6f766c0(0000) GS:ffff88812546d000(0000) knlGS:0000000000000000
[  734.500015][T29338] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  734.507270][T29338] CR2: 00007fe847474e9c CR3: 00000000578a2000 CR4: 00000000003526f0
[  734.516396][T29338] Kernel panic - not syncing: Fatal exception
[  734.523161][T29338] Kernel Offset: disabled
[  734.527510][T29338] Rebooting in 86400 seconds..