last executing test programs:

1.217132162s ago: executing program 3 (id=7240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x18}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf250ad800800c0002"], 0x114}], 0x1}, 0x0)

1.216437957s ago: executing program 1 (id=7241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006b43b164d8a5234d285d307dcd90ecc74ec51f8db1fd65cb747eb399b68f28e1effdd5711d2b64cf8e8bb823b1b81edf999dde65bbd8b01f23033bc83b504bf99410ea7e4dc599d8387565ceb09aafbb28b99d842baf6aab804812fc5c2cfbde50bb52e571281e5cd7fc2c2e526ce3af02ccfb31927c330527e95f72f4fd8a6b437b918836c7b8c7f751835393c35f16c2f045a67d840df4697e266e83263c1b8b4b96301203cdb401142411145253f925f679f2b1af", @ANYRES16=r2, @ANYBLOB="110026bf7000ffffffff0f00000008003c000700000008000300", @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_delroute={0x60, 0x19, 0x200, 0x70bd27, 0x25dfdbfd, {0x1c, 0x20, 0x20, 0x1, 0xfc, 0x2, 0xfe}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x2a, 0x80, r1}}, @RTA_TTL_PROPAGATE={0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x200, 0x1e, 0x1, r1}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x0, r1}}, @RTA_OIF={0x8, 0x4, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@mpls_newroute={0xa0, 0x18, 0x1, 0x70bd2b, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xf8, 0xfc, 0x0, 0xff, 0x2, 0x300}, [@RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8b9, 0x0, 0x1}, {0x5f449, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x1138}, {0x3ff, 0x0, 0x1}, {0x9}, {0xb}, {0x9}, {0xffffe, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x200}, {0x3}, {0xffffd, 0x0, 0x1}, {0x6}, {0x1}, {0x40, 0x0, 0x1}, {0x4f98}, {0x9}, {0x401}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5}, {0x401}, {0x7f}, {0x0, 0x0, 0x1}, {0x3}, {0x7}]}]}, 0xa0}}, 0x4000)

1.182167881s ago: executing program 3 (id=7243):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x0, 0xe256e000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) (async)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810)
syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="0100269d7000ffdbdf271500000008000300", @ANYBLOB="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", @ANYBLOB="fdff0200", @ANYRES32=r5, @ANYBLOB="b4002b8008000100020000000500020002000000080004"], 0x17c}, 0x1, 0x0, 0x0, 0x2c008005}, 0x20040400)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r7, &(0x7f00000004c0)="89ba41c97928dec7c10000000d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20503474a4a4bce636ea8d2b882b2b49ef18e2a96e457f0a374f29c724a68ac071f206d930eda2769daee6d5f3d541ce9a21c3ce5cb5fbdad9a47de000000490200000000", 0x80)
ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r10=>0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x49, &(0x7f0000000040)=r12, 0x4)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0xd06, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0xd06, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20040004)

1.113068597s ago: executing program 1 (id=7244):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)

1.052665132s ago: executing program 1 (id=7247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xd}, {0x0, 0xfff1}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1)

989.558018ms ago: executing program 3 (id=7248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b600884700"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x800, 0x2, 0xff, 0xd, 0x3, 0xdee2}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x3, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x1001, 0x11a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x60}, 0x1, 0x2}, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="cc638982054d618c1cb3362e6211aca2040f828e9fd7974408eea6c9e89183114b9bab9331d14a9915dfbd07cc844498a6d129f85ff9ba5168262ae9254306d8"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async)
ioctl(r4, 0x8b32, &(0x7f0000000040)) (async, rerun: 64)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/113, 0x71, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x40) (rerun: 64)

840.304619ms ago: executing program 4 (id=7249):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096}, 0x90)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r2, 0x1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e500000b3d800"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000001180), &(0x7f00000011c0)=0x4)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x6e922}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000001406ff00000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000690d22378"], 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x4, 0x4) (async)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x4, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

835.890025ms ago: executing program 4 (id=7250):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x48010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
socket$unix(0x1, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x76}, {&(0x7f00000000c0)="230578614f75c76b1e57c46be8ab88"}], 0x1}, 0x0)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000800000000000000007912c0000000bf3f6a6c6d9fe725000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x80)

834.715942ms ago: executing program 3 (id=7252):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)

834.47817ms ago: executing program 1 (id=7253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x30, r3, 0x1, 0x70bd25, 0x25dfdc03, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040040)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24008000)

833.926444ms ago: executing program 3 (id=7254):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
getsockopt(r0, 0x6, 0xfff, &(0x7f0000000080)=""/4, &(0x7f00000000c0)=0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0)

832.672941ms ago: executing program 4 (id=7255):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

787.252837ms ago: executing program 1 (id=7256):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0)

721.245845ms ago: executing program 4 (id=7257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

719.743703ms ago: executing program 3 (id=7258):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r5, 0x0, 0x80, 0x4)
write(r2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
r6 = openat$cgroup_ro(r4, &(0x7f0000000580)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000005c0)=<r7=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000700)=0xe8)
r9 = getgid()
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r10, 0x800452d2, 0x0)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x14, r4}, 0x18)
r12 = accept$nfc_llcp(r1, 0x0, &(0x7f00000007c0))
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_procs(r13, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
r15 = getpid()
write$cgroup_pid(r14, &(0x7f0000000880)=r15, 0x12)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000800)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xe8)
r17 = getgid()
r18 = socket$netlink(0x10, 0x3, 0x0)
r19 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000040)={0x0, <r20=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r18, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r20}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84)
sendmsg$unix(r0, &(0x7f0000000ac0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="badc1a91a92984244cb174ec9b470aa2bf59374f749707c9d07f49989dc90af1b657ad677c57c29ae6daa5b3c5aac3b1be91c2b901a2c7a87d449c8ef56890e8c106fc968c1050b3bec82b5c6e8ae5d0ba2df637b0f8", 0x56}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x38, 0x1, 0x1, [r3, r0, r3, r3, r0, r10, r11, 0xffffffffffffffff, r2, r5]}}, @rights={{0x20, 0x1, 0x1, [r12, r0, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, 0xee01}}}], 0x118, 0x4000000}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r21=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x68, &(0x7f0000000940)=ANY=[@ANYRES16=r21], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r21, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)

694.943331ms ago: executing program 1 (id=7259):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000040), 0xc, &(0x7f0000001ec0)={&(0x7f00000003c0)=@deltfilter={0x1ac8, 0x2d, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xf, 0xc}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0xa}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x100, 0xc468, 0x9, 0x1, 0x5, 0x4, 0xfffffffd, 0x3, 0xc, 0x3, 0x4, 0x6, 0x7, 0x18000000, 0x400, 0x7, 0x665, 0x0, 0x0, 0x1a, 0x9, 0x81ce, 0x80000000, 0xd4, 0x3, 0x6, 0x4, 0x10000000, 0x192, 0xfffff5e1, 0x2, 0x1, 0x6, 0x1, 0x3, 0x200, 0x5, 0x6, 0x0, 0x0, 0x8, 0x7, 0xfffffff8, 0x1, 0x18000, 0x401, 0x1, 0xf, 0xfffffff2, 0x5, 0x0, 0xff, 0x9, 0x7, 0x4, 0xa, 0x10001, 0x0, 0x5, 0x0, 0x2, 0x6, 0x9, 0x4, 0x6, 0x8000, 0x2, 0x7ff, 0x8, 0x9, 0xc, 0x4b4043ab, 0x7, 0x56, 0x3, 0x2, 0x8, 0xfffffff7, 0x1, 0x3, 0x2, 0x1, 0x3, 0x1f103c62, 0x6, 0x1, 0x0, 0xfffffffd, 0xfffffffc, 0xb, 0x16e, 0x3, 0x6, 0x4ed4, 0xbf24, 0x0, 0x9, 0x80000000, 0x3, 0x1ff, 0x2, 0x75, 0x9, 0xb0, 0xb8b6, 0x51, 0x8, 0x4, 0x5, 0x2, 0x101, 0x5, 0x2, 0x7, 0x7fffffff, 0xfff, 0x4, 0x8, 0x7, 0x7ff, 0x58, 0x0, 0x3, 0x401, 0xd24, 0x4, 0x2, 0xd, 0xee8, 0x643, 0x0, 0x6, 0x80, 0x3, 0xa, 0x9, 0x9, 0x9, 0x0, 0x7, 0x70b8, 0x400, 0x2439, 0x6d3, 0x3ff, 0x80000000, 0x4, 0x0, 0x2, 0x31, 0x40, 0x9, 0x0, 0x84e, 0x9, 0x10000, 0xe3, 0xfd96, 0xb, 0x5, 0x6, 0x6, 0x4, 0x5, 0x81f, 0x8001, 0x9, 0x9, 0x1, 0xfffffff9, 0x200, 0x5, 0x80000001, 0x2, 0x8, 0x9ba4, 0x3, 0x887, 0x1, 0x0, 0x91, 0x0, 0x8696, 0x4, 0x101, 0x5, 0x8ca000, 0x7, 0xffffffff, 0x5, 0x7, 0x5, 0x80, 0x4, 0x3, 0x8, 0x3ff, 0x6, 0x7, 0xaf, 0x2, 0x8, 0x8, 0x6f2, 0x3, 0x4, 0x9, 0x8, 0x7, 0x2, 0xa45, 0xfffffffa, 0x5, 0x6, 0x45e, 0x5, 0x238, 0x2e, 0x1e5, 0x1000, 0x1, 0x3, 0xff, 0x200, 0x1, 0x1, 0xffffff7f, 0x2, 0xffffff7f, 0xa, 0x1, 0x6, 0x3, 0x40, 0x401, 0x0, 0x81, 0x4, 0x2ab, 0xfffffff7, 0x8, 0x5, 0x3, 0x1, 0xb, 0x2, 0x10000, 0x5a, 0x4, 0x7, 0xfffffbef, 0x4, 0x34e7, 0x7]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_DIVISOR={0x8, 0x4, 0x71}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe2}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @filter_kind_options=@f_flow={{0x9}, {0x1638, 0x2, [@TCA_FLOW_POLICE={0xcb4, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x71}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x4, 0xe, 0x0, {0x0, 0x0, 0xdf, 0xfff1, 0x2, 0x5}, {0x3e, 0x2, 0x6, 0x0, 0x7, 0x8}, 0x6, 0x3af, 0x6c89}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x26, 0x7, 0xfffffff7, 0x7ff, 0x423d, 0x1, 0x0, 0x8, 0x41, 0x7, 0x2, 0x1, 0x90fd, 0x5, 0x8000, 0x2ace, 0x4, 0x3547, 0x6, 0x7fffffff, 0x4, 0x10001, 0x7, 0x7, 0x3, 0xdd6, 0x4, 0x4, 0x10000, 0xfffff800, 0x0, 0x52, 0x7, 0xfffff001, 0x9, 0x0, 0x7, 0x80000000, 0x7, 0x9, 0x400, 0x5, 0x5, 0xffffd801, 0x7f, 0x1, 0x8000, 0x99da, 0x1, 0x5, 0x4, 0x5, 0x6, 0x7, 0x1, 0x0, 0xfffffff9, 0x7, 0x8, 0xadf, 0xa01, 0x6, 0x10000, 0x400, 0x7, 0x1, 0x1, 0xfffff000, 0x5, 0x3, 0xc, 0x0, 0x9, 0xdc54, 0xfffffff8, 0x0, 0x1, 0x6, 0xb03, 0x0, 0x3, 0x4800, 0x7ff, 0xff, 0x8, 0x2, 0x4, 0x8, 0x8, 0xff, 0x7, 0x1, 0x8a35, 0x9, 0x8, 0x7f, 0x8, 0x2, 0x2d0, 0x3, 0x1, 0x9, 0x957, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x0, 0x8000, 0xfffffff7, 0x8, 0x40000000, 0x0, 0x8, 0x4, 0x29af, 0x8, 0xb, 0x9, 0x3, 0x95da, 0x6, 0x8c8, 0x9, 0x4, 0x7ff, 0x6, 0xd, 0xfffffffc, 0x10001, 0xfffffffc, 0x9, 0xb30, 0x3fc, 0x4, 0x3, 0x7f, 0xf, 0x6, 0x1, 0x40, 0x4, 0x1, 0xfffffff7, 0x0, 0xe0000000, 0x31, 0x10001, 0x5, 0x5, 0x2, 0x81, 0x8, 0x2, 0x8001, 0x7fff, 0x2, 0x0, 0x118, 0x7f, 0xed, 0x9, 0x0, 0x1, 0x100, 0x80000000, 0x3, 0xb4c, 0x6, 0x1, 0xc, 0x686a7168, 0x7, 0xdcce, 0xfffffff6, 0x200, 0x5, 0x80, 0x8, 0xfffffff5, 0x3, 0x5, 0xffff0001, 0x6, 0xff, 0x6, 0xd73, 0x4, 0x100, 0x1, 0x0, 0x4, 0x3, 0xf, 0x1, 0x9, 0x7, 0xc9, 0xc904, 0xfffffff9, 0x5, 0x6, 0x5, 0x4, 0x2, 0x1000, 0x800, 0x74, 0xfff, 0x6, 0x200, 0x8, 0x7, 0xfc3, 0x8, 0x401, 0xffffff3f, 0x7, 0x6, 0x10000, 0x9, 0x2, 0x400, 0x1, 0xfff, 0x9, 0x9, 0x1, 0x6, 0x4, 0x0, 0xad15, 0x847, 0x5, 0x0, 0x6ab047fd, 0x0, 0x7, 0x800, 0xfffffffd, 0x8001, 0x800, 0x10000, 0x9, 0x4, 0x2, 0xf765, 0x9, 0xb, 0x9000, 0x8c9, 0x8, 0xffffff01, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x0, 0x8, 0xff0d, 0x5, 0x2, 0x1, 0x4ee, 0x0, 0x278, 0x3b, 0x6f3, 0xf, 0x101, 0x9, 0xffffa48f, 0x8, 0x7, 0x3, 0x7, 0x2, 0x7, 0x7, 0xfffffffc, 0x7, 0x6d8, 0x4, 0x8000, 0x9, 0x9, 0x7b13, 0x40, 0x101, 0x6, 0x17, 0xfffffffd, 0x5, 0x5, 0x3, 0x7, 0x3, 0x8, 0x0, 0x2, 0x440, 0x5, 0x3, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0x1, 0x400, 0x10000, 0x6, 0x9, 0x6, 0x8ad, 0xf, 0x87, 0x7e4, 0x8, 0x5, 0x48000000, 0x10001, 0x3, 0x401, 0x8, 0x1, 0x7f2, 0x0, 0x80000000, 0x6, 0xa204, 0x4ab, 0x9, 0x6, 0x4, 0x4, 0xf, 0x81a, 0x10000, 0x6, 0x2, 0x1, 0xe63c, 0x7ff, 0x4, 0x8c52, 0x100, 0xe, 0x1, 0x8958, 0xd, 0x8, 0x10, 0x8, 0x5, 0x10000, 0x9, 0x8, 0xf, 0x1, 0x2, 0xede, 0x5, 0x6, 0x40, 0x5, 0xfffffc01, 0x4, 0x6, 0x9, 0xa1, 0x400, 0x10000, 0x36, 0x2d3, 0x3, 0x80000000, 0x6, 0x10, 0x283, 0x6, 0x3, 0x333, 0x3, 0x0, 0x0, 0x7, 0x1, 0x1, 0x8, 0x7ff, 0x7, 0x1, 0x6, 0x8, 0xffffffff, 0xe91c, 0x787, 0x5, 0x3, 0xd, 0x6, 0x5, 0xe, 0x2, 0x0, 0x7ece, 0x3, 0x9, 0x80000000, 0xf, 0x2, 0x3, 0x7fffffff, 0x7, 0x8, 0x9, 0x1, 0x3b3a, 0x7, 0x80, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x12, 0x1, 0x0, 0x1, 0x1, 0xfffffffa, 0x58444cec, 0x0, 0x6, 0xfff, 0x6, 0x81, 0x5, 0x200, 0x10, 0x9, 0x5, 0x9, 0xf0, 0x9, 0x6, 0x1, 0x3, 0x5, 0x1, 0xe, 0x0, 0x100, 0x10000, 0x5799, 0xfffff31a, 0x4, 0x3ff, 0x5, 0x6, 0x6, 0x5, 0x2, 0x5, 0x6, 0x1, 0x3, 0x0, 0xfffffff8, 0xe, 0x400, 0x9, 0xa7fc, 0x100, 0x5, 0x9, 0x8, 0xa34, 0x4, 0xfffffff8, 0xa, 0x1, 0x2, 0x1ff, 0x2, 0x8, 0x8, 0x1, 0x2, 0x2, 0x7, 0x5, 0xbf3, 0xf0, 0x7, 0x2, 0x4e31, 0x3, 0x9, 0x800, 0x1, 0x8001, 0x8001, 0xfffffffd, 0x101, 0xb, 0x2, 0x8, 0x40, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x4, 0x400, 0xfffffffa, {0x7f, 0x2, 0x3, 0x8, 0x4, 0x2}, {0xd8, 0x2, 0x7ff, 0x1, 0x3, 0x7}, 0x3ff, 0x3, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x51}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x6, 0x2, 0x3, 0x0, 0x9, 0x2, 0x6, 0xf00, 0xac62, 0x9, 0x8d7, 0x7, 0x4, 0x3, 0x4, 0x8cd, 0x78a6, 0x200, 0x0, 0xfa36, 0x6c, 0x800, 0x7, 0xe7, 0x7, 0x54df446, 0x0, 0x6, 0x9, 0x9, 0x97, 0x2, 0x3, 0x3, 0x101, 0x6, 0x9, 0x800, 0x7, 0x8, 0xd25, 0x8001, 0x2, 0xfff, 0x6, 0x0, 0x3, 0xa000000, 0xf, 0x10000, 0x1ad1, 0xa93b, 0x9, 0x6, 0x7ff, 0x975, 0x2, 0xe, 0xfffffffb, 0x100, 0xba, 0x9c6, 0x40, 0x1ff, 0x23, 0x800, 0xf, 0x100, 0x5, 0x0, 0x3, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, 0x622c, 0x3, 0x4000, 0x3, 0x2977, 0x2, 0x8, 0x4, 0x68, 0x0, 0x101, 0x3ff, 0xff, 0x1000, 0x8, 0x5, 0x7, 0x80000000, 0x4, 0x919, 0x1, 0x4, 0x3, 0x5e90, 0xad, 0x7, 0x5, 0x6, 0x8001, 0x7, 0x3, 0x1000, 0x8000, 0x7, 0xd, 0x0, 0x0, 0x7, 0x1, 0x7f, 0x3, 0x7, 0x800, 0x80000001, 0x0, 0x800, 0x3, 0x6b0, 0x200, 0x0, 0x401, 0x7, 0x2, 0xfffffff8, 0xb308, 0x10, 0xfa8d, 0x24, 0xf7c7, 0x29e42f1e, 0xf972, 0x8, 0xf952, 0x8, 0x10000, 0xd48f, 0x7f, 0x101, 0x3, 0x145f022f, 0x7fffffff, 0x8, 0x3, 0x7, 0x1, 0x5, 0x3, 0x8, 0xa, 0x855a, 0x8, 0x8, 0x9855, 0x24f3, 0x6a30b1a, 0x10, 0x1, 0xffffffff, 0x7, 0x1, 0x27a6, 0x8, 0x0, 0x7, 0x401, 0x400, 0x6, 0x8, 0x6, 0x400, 0x9, 0x7, 0x80000000, 0x5, 0x7, 0x0, 0xe0, 0x702, 0x7, 0x7, 0x3, 0x6, 0x2, 0x8, 0x10000, 0x4f, 0x1, 0xffffffff, 0x4b, 0x8, 0x8001, 0x7, 0x3, 0x6, 0x3ff, 0x1, 0x10000, 0x0, 0x40, 0x2, 0xd, 0x7, 0x80, 0x1, 0x5, 0x40, 0xb, 0x2, 0x9dbd, 0x8, 0x8001, 0x3, 0x96d, 0xf54, 0xfffffffb, 0x5, 0x7ff, 0x7, 0x9, 0x7, 0x7, 0x42, 0x0, 0x8, 0x8, 0x80, 0x3, 0x6, 0x9, 0x1, 0xc2a7, 0x1000, 0xec7a, 0x0, 0x249280, 0x1, 0x1ff, 0xfffffffe, 0x9, 0x100, 0xd, 0x4, 0x9b4, 0x81, 0xfffffffb, 0x3, 0x9, 0x6]}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6}, @TCA_FLOW_ACT={0x418, 0x9, 0x0, 0x1, [@m_ife={0x134, 0x17, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x5, 0xa3c}, 0x1}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x94a, 0x4, 0x20000000, 0x18c, 0x8}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0xae, 0x6, "dac6957a5e481289f934d15fd6fead6f6945e38a1f6f88be3035517bbd4a9418c1995bc3f0e3eb2badf3f2746db5132ef9176205c9328b8b8ab0d5331369aae0cb3ffdf3649ae89cdc95749b076491a85c7e838e031e0d6fcf8fab86d84a5bc11d8f76a3d41e75a363e45aad12e45e45ebbbb94d0c7b1c8f4ff2ae6f17c7c64efdc2cf8702020449b9337c542f3d000de33decf34c02140a6e600df8c80cc4a2911c4b8a5f2851d333ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x19c, 0xe, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xb9, 0x1, 0x10000000, 0x6, 0x3}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0xf, 0x4, 0x1, 0xfffffff7}, {0x4, 0x0, 0x9, 0x2}, {0x1, 0x4, 0x2}, {0x6, 0x1, 0x40, 0xe8}, {0x29, 0xfc, 0xff, 0x400}, {0xfffa, 0x5, 0x6, 0x243f27be}, {0x6, 0xf2, 0x7, 0x7000}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xf17b, 0x400, 0x8, 0x4d9c, 0xfffffffa}}]}, {0xff, 0x6, "a8ad675e728832e41b93cf7dc49909f00f5b852db2d876ced7ce277ec0050460a51c36221f791b6b68b38a5b5c698bd8dc4982bb1199716d758a784463e303cd08a54ec01358955bf67afb05a422c35e1b25609835f6816642cc37ccc38e7facca060a106bbfad169a32480ae629269e7fffb8ce3529151d690d585f66d4fdce1a2557f5a53a1c68c1581c2c6639239b7961390f991a7f5a1635e6143e6b51d066d021f18c3958705a9f384b95bee97965808f8c1622c4a8de1294b56ffa4003b24175627d7748a74a466f006052bf11d76a9500161744499687e4eb094eab37de06318417fcd5422dbbbd8890dd4b0a403813d689577cc61c8cb8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x144, 0x15, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="0955cda82c86"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0xfa, 0x6, "73385c49a7b140f76ccd39a7f0ee94bdaa742ff0b4d597e0b0a1b78a3acb4e898be77cfdc233759e6fe9c009c78585c83df4a7266aa93baf9175cd76bd4e3a150557c07f09e95cc31a9106f9493ed4ae0c15271c314265dc9a93ec716fac8d00bf0584a297dde8f9abd35bae2ff7431a7a3e707b81dfa8862138cc1c4bb9668a271eccd1e28e826dd8375d097bae11577b823a5c0b5a50950cd01162348c0c992ae5608fe2174652e9aea0a143a7bec7da46a2019a288a5796e2d1ddcf07324edc4b84f68b56011f14a561e53480c63427da5804630409dc6c20525adcba586756d05d56e09e77496a2df1f4e12b6ed74f868b123186"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_ACT={0x104, 0x9, 0x0, 0x1, [@m_ct={0x100, 0x10, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0xa1, 0x6, "fcdc2f59a49bf24e8e88c1048679ab8b2ae4590c60838796d0e255dc77a0478fc1c286d5ce4c7f3bf9371cb21ee63a716da3952d6c6db0694f9b77ab20fcdcf203ee6ee57df3ca1eac24a000bfb7693d2db7666b67a6ecdb577194688e0ad858335b4750d99822bb8457dd1613f77e3b62fb4cc510caafbf440eb1b040bb7351d772d98f9a95118ee6e6bdea8189a341c77e38a834f3db3ed59f9f0d5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0xfffffff8, 0x5, 0x5, 0xf9e, 0x5, 0x400, 0x0, 0x3, 0x8001, 0x0, 0x401, 0x80000000, 0x9, 0x663, 0xc0000000, 0xdda, 0x7, 0x1000, 0x8, 0x4, 0xa5, 0x3f5581fc, 0x0, 0x4, 0x5, 0xa5b9, 0x2, 0x8, 0x9, 0xc, 0xae, 0x4, 0x1, 0x8, 0x8, 0x7, 0x5, 0x0, 0xb75, 0xfffff100, 0x2, 0x2, 0x4, 0x4, 0x3, 0x7, 0x5, 0x6, 0x8, 0x3ff, 0x1, 0x81, 0x8, 0x0, 0x1, 0xe000, 0x800, 0x4, 0x7fffffff, 0x40, 0x9d7, 0x6, 0x913b, 0x200, 0x4, 0x5, 0x8, 0x1, 0x1, 0x401, 0x6, 0xa, 0x9, 0x40, 0x6, 0x0, 0x7, 0x8, 0x80000001, 0x2, 0x2, 0x0, 0x7f, 0x8, 0x73bb, 0x77, 0x43da, 0x81fe, 0x7, 0xa8, 0xd, 0x7, 0xf, 0x6, 0x9, 0x1, 0x8, 0x80, 0x7fff, 0x0, 0xb, 0x198d, 0x24, 0xabf8, 0x3, 0x3ff, 0xfff, 0x9, 0x7fffffff, 0x5, 0x1, 0x80000000, 0xc, 0x1, 0x1, 0x20000, 0x78, 0x7, 0x3ff, 0x0, 0x0, 0x7f, 0x5, 0x9, 0x5, 0x1, 0x2, 0x2, 0x5, 0x2, 0x3, 0xd49, 0x5, 0x3ff, 0x1, 0x5, 0x9, 0x5, 0x1, 0x7fffffff, 0xe, 0x4, 0x2, 0x6, 0x6, 0x9ec, 0x4, 0x315, 0x5, 0xb5, 0x3, 0x8, 0x3, 0x68, 0x4, 0x8, 0x1, 0x1, 0x1, 0x5101, 0x5, 0x5b, 0x3, 0xe08, 0x7, 0x8, 0x3, 0xfffffe01, 0x8, 0x8, 0x0, 0x7, 0x2, 0xd, 0xb, 0x0, 0x6, 0x10, 0x984, 0x9, 0x2, 0x9, 0x101, 0x0, 0x7fff0, 0x7, 0x3a2, 0x8, 0x10001, 0xffffffff, 0x6, 0xda, 0x7f, 0x1, 0xd23, 0x400, 0x0, 0xffffffff, 0x9a, 0x2, 0x80, 0x7, 0x5, 0xffd0, 0x3, 0xac, 0x8, 0x0, 0x8, 0x9, 0x9c, 0x10, 0x1ad3, 0x7, 0xc, 0x5, 0x9, 0xfde7, 0x1, 0x75, 0x80, 0x98d6, 0x9, 0x9, 0x0, 0x6, 0x7, 0x4, 0x1, 0x0, 0x3, 0xf, 0x8, 0x9, 0x7, 0x1, 0x7, 0xf, 0x8, 0x326, 0x10000, 0x10, 0x5, 0x0, 0x0, 0xe, 0x1, 0x2, 0xa, 0x8000, 0x7, 0x4, 0x6, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x6, 0xfffffffa, 0xa903, {0x9, 0x1, 0x3, 0x9, 0x1, 0x3ff}, {0x5, 0x2, 0x58, 0x9, 0xcdf6, 0x2}, 0x11ad5c50, 0x1, 0xb}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xffffffff}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x75c}]}}]}, 0x1ac8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'syzkaller0\x00', {0x3}, 0x6})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendto$inet(r5, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2b70690700202d6e65745f636c7320bae823dfc0d0c2b55f2b626c6b696f20396e6574202d7065726e5f6576656e74202d6465766963657320"], 0x30)

687.547149ms ago: executing program 4 (id=7260):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x5f2bc000)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x10b, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@llc_tr={0x11, {@snap={0xab, 0x1, "668b", "072e8d", 0xc1af17ea7e52310e, "702d07a41aefc054a4a946953d4d999723d5f78f4766c9d1e7fa8aa3000d9b6043c5cf012694890c5da7c5638f6b409e73f84769e6ba5b91cf445260eb695f38cf48df1ca3d617851c53f8c6863f3435a30ba904573ce77f1b1a1459c33e8da27ab4f524d88be51adb3c278787f4ba48141afba72387b0966a3b2984c7e01d93930ffe4fe7fd2566b5f55d7644f8451af7ddf935038ea6ed4b8e78edec88cda3d6b0753485c51b6a382935b1ca5c12332aac3f045f9d5192c8464fa4bf99f4cf8ad1acbd7cbc1907ea4ec8e197959530a09b68aa11fc2bbfbbe0cbadd522d7823957146e5d94e70d63a9f75c458f4581709e1ae9"}}}}}, &(0x7f0000000780)={0x1, 0x2, [0x6ca, 0x630, 0xa60, 0xf54]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', <r5=>0x0, 0x700, 0x1, 0x2, 0x5, {{0x19, 0x4, 0x1, 0x2, 0x64, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x3ff}, {@private=0xa010101, 0xfffffffd}]}, @timestamp={0x44, 0x1c, 0xd4, 0x0, 0x6, [0x9, 0x3, 0xe, 0x18, 0x6, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x7, 0x4b, [@rand_addr=0x64010102]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r6=>0x0, 0x2f, 0xf3, 0x8, 0xfffffff2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0xfff, 0x9dc}})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001100020026bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="008004008000000008000500", @ANYRES32=r6, @ANYBLOB="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"/291], 0x38}}, 0x0)

590.133808ms ago: executing program 4 (id=7262):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x5}}], 0x1, 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/7, 0x7)

446.134014ms ago: executing program 2 (id=7267):
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x46c, 0x12, 0xe04, 0x70bd25, 0x25dfdbfb, {0x15, 0x4, 0xc, 0x0, {0x4e23, 0x4e20, [0x6, 0x6, 0xc, 0x210d7739], [0x5, 0x9, 0xb6, 0x16c], 0x0, [0x200, 0x7fffffff]}, 0xdbb, 0x48000}, [@INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "f0efaa24035ad37304767f8e2d8fb456f720a0883695de0ee9a961eee3d810eeb6c9529a5a0a8582047062fd121645463d7565662d76af81e553363f35732dc9bf52aa2615276a9a42095250a6628197a3dc16829bcb0c18b31bb4c8fb4f186fdce709f932abb39267a6f517aa2032cde2c0378cf00afcc28fec02576d466771df46294ba90dc8c173fd3b15a55399e2ba5a8dd8c135ad4cf3ee9183a2f685"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "e1f400e5aa349e85e443bc41958ced1d2ff3c94b518d0ccb963ed4e1b8ce1adc66f4a9127f4f5495321c137701"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "618beae82feeeb73a05b8aa111a85415141935944b4e8e3c699ee93a14a2282adfa8b587302bfe5ba3ce0b48f9fbdabec025bcfda2f88a06e18479b36257f52ec38dc86a2a3c7c223fc50376543ace5e5f01b735db300c7a7855dd"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "dd7b148294eb1601f7f82c8ddabb788494704fad75a20e1c78bb73d3d52d6369bc157032eafff29b89909806eb1bb1752403bbbd5d836d607505464adc0209c4567c8573205f78efa34094c3880b4476f375dc9e23df193a5d5880175f54fd9a811296c59aeb57d8db60a84cc4e3e7cb3dedff0f7f0a81e9261be5256c5c3bf8d9d03dbea3de8c4c"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "f5025def7de48ecf2d779af503f2f77358320f1bfa4c4806088a9cb739d26f7cdaab9082467a25c33676bd3d1360c6572111cd047a2fdb0464fbc0c3cfe9166c70936137cdd8360447e0d6d3a23f5b0fc604f5abf8b9c754bb76ede3394992a7c9333a781e2279c940589ca81f4f01a5d9ef994c28abd7307551bae1b670d5be6dd463f50d26fd7ecdb44751acdbe5e5cadf52043e4c2e1593fec6"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "dae84b43ffe740f7123c12c72ee4f9055ad713e794cd4b3936b30f6051cf5e067926538f9bb9679ded550a6d0b720af197"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "9f6ce5836da881fa9707edd1b8f947318f33ef5efb7358dc96037f06e94f28eee669f31f4d90d9fec3e1eef07a5df170c04c8394a8d103d02be104b55dc44b00ae74a0e69e11bbb8e6556d25c14ee52bc1621874786e7fbc70c83d14243cff17f9a1e0846bf454c73dcb466c895e739845fa88aee1fedde0b8c2216d0263170ae600aef1b008330522465449402ad5dbcbbc644b3e3ce8ed08551d22a80c0ded6a9be23ebac7a416b9f2252d987639149a143bf4f55899ff9d168aea25392558229cbf8f4aa7b5a3a6ef9b4fa636d735f61778790016c3d40dbea25275807c0980bd15b26701fd425806120c"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "14a9980534d0e7e4f43ad52387d06894e6819847c6eb8e8507fde01ff2da081827585743d5e564541d5e04a3f839cc19c48864e68f0a51bb063ac346d3954f5c6e3a692992e2c2195e73649bbd6960648d175730dd47471e56e15380a3643b0ccc21fefe65b853676704eb5b3a3d049cc3c1c13c526688adb53d23a44681011fbdc5a9d7508fbf169b832b2d3cffe4"}]}, 0x46c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000000)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000540)=@id, &(0x7f0000000580)=0x10, 0x100000)
setsockopt$sock_int(r0, 0x1, 0x2635c21ea01c5db6, &(0x7f00000005c0)=0x10000, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'erspan0\x00', <r5=>0x0, 0x8001, 0x10, 0x31d1000, 0x3ff, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x66, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp={0x44, 0x20, 0x41, 0x0, 0x9, [0x8000, 0x0, 0x1, 0x6, 0x7ff, 0x6, 0x2]}]}}}}})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=<r6=>0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)=@report={0x154, 0x20, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2b, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e24, 0x3, 0x4e21, 0x3, 0xa, 0xa0, 0x20, 0x0, 0x0, r4}}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@empty, 0x4e21, 0x1, 0x4e20, 0x5, 0xa, 0x80, 0x0, 0x2e, r5, r6}, {@in6=@loopback, 0x4d3, 0x49}, @in=@broadcast, {0x994, 0xdc, 0x4, 0xe, 0x3, 0x10000, 0x10001, 0x9}, {0x5, 0xfff, 0x4, 0xf}, {0x80, 0x81, 0x8}, 0x70bd25, 0x3501, 0x2, 0x0, 0x81, 0xc9}}, @lifetime_val={0x24, 0x9, {0xe, 0x3, 0x2, 0xfffffffffffff000}}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x48000)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000ac0)=""/63, 0x3f, 0x40010060, &(0x7f0000000b00)={0x2, 0x4e21, @private=0xa010101}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, 0x0, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r9, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044188}, 0x4004)
pipe(&(0x7f0000000e00)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$nl_route(r13, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@bridge_dellink={0x60, 0x11, 0x300, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0xc010, 0x44000}, [@IFLA_LINK={0x8, 0x5, r3}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2115ff1e}, @IFLA_EVENT={0x8, 0x2c, 0xffff}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb30}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008900)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r13)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1041}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r14, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4080)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r12)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r13, 0x89f8, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'gre0\x00', <r16=>r5, 0x700, 0x7800, 0x3, 0xd9, {{0xd, 0x4, 0x3, 0x8, 0x34, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x1f, 0xe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @broadcast, @private=0xa010101, @empty, @remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'syztnl2\x00', <r17=>r5, 0x4, 0xb9, 0xf8, 0x5, 0x1e, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7800, 0x8, 0x5, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vcan0\x00', <r18=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r13, &(0x7f0000001500)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001300)={0x1a8, r15, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40050}, 0x80)
sendmsg$IPSET_CMD_SAVE(r12, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x4004)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, r14, 0x810, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)

357.257214ms ago: executing program 0 (id=7268):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x20004014)

355.158876ms ago: executing program 2 (id=7269):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x44, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x1, 0x5, 0x1}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010003000000fddbdf250100000008000200020000002400048005000300020000ec040003000064d553202c4a3d9200000005009f8f02000000050003000700000008000100ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000007c0)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "f4ccbcab99b09666219bd7e5c1fdbd41e4fbd9031816ffe031846fee15d4b36741bcca128d46f15420462b8d7815636fc706b433cf3f1b257a0fb24a54525d464cf030972688b27b57538339eae1226b80445fe913bf0003745e2c774ae4da3fe0924eb28c3ee0740d6ff002cb567123815ef6521e0ff31bcc3591b98737c67d8e58180151b8289975fb5a5293c0718bf4a0e46b911b8345687a973ab09840ba3391fdf33b8f7b0cc13a4c3864f47649af783945437827e9411b1ea2965e27b8abd8ce4ecb665ff62385d357a0460ac6af7eb1a62cde341a3fae2617e55b1a26e4b777930d4f71bfc05b"}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "a9febffd18dc5dc56d2ce454912857f4fb7b08e6795fad1a188af3471ce520e5467f9e986fa3c095c66c9922ce161cd4a0f590b7e68f1385"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xceb}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x44, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x1, 0x5, 0x1}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010003000000fddbdf250100000008000200020000002400048005000300020000ec040003000064d553202c4a3d9200000005009f8f02000000050003000700000008000100ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000007c0)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xee, 0x3, "f4ccbcab99b09666219bd7e5c1fdbd41e4fbd9031816ffe031846fee15d4b36741bcca128d46f15420462b8d7815636fc706b433cf3f1b257a0fb24a54525d464cf030972688b27b57538339eae1226b80445fe913bf0003745e2c774ae4da3fe0924eb28c3ee0740d6ff002cb567123815ef6521e0ff31bcc3591b98737c67d8e58180151b8289975fb5a5293c0718bf4a0e46b911b8345687a973ab09840ba3391fdf33b8f7b0cc13a4c3864f47649af783945437827e9411b1ea2965e27b8abd8ce4ecb665ff62385d357a0460ac6af7eb1a62cde341a3fae2617e55b1a26e4b777930d4f71bfc05b"}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "a9febffd18dc5dc56d2ce454912857f4fb7b08e6795fad1a188af3471ce520e5467f9e986fa3c095c66c9922ce161cd4a0f590b7e68f1385"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xceb}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) (async)

339.893157ms ago: executing program 0 (id=7270):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x52}, 0x20) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x1, 0x10, 0x6, 0x0, {{0x7, 0x4, 0x0, 0x8, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}]}}}}}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2000, 0x4)

326.95053ms ago: executing program 2 (id=7271):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x400d0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, 0x2c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@initdev, @empty, <r3=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @broadcast, <r4=>0x0}, &(0x7f0000000340)=0xc)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x41)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x5c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x54}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x222c}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000600), 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x48}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048040)
sendmsg$nl_generic(r1, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x28c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1d}, [@typed={0x8, 0x11e, 0x0, 0x0, @u32=0x2d4}, @nested={0x10, 0xb5, 0x0, 0x1, [@typed={0x9, 0x93, 0x0, 0x0, @str='syz1\x00'}]}, @typed={0x9f, 0xe1, 0x0, 0x0, @binary="e6bdc3f3c71e19daf06ae4fbaacb62e57740e7a446e8eb6e95777c28e253a02d2f4daa7f5d2d9ea336abc2ace393ba24f661180e6c109ee3a65403bed1842d3e8537b25b8c6c3064585c4e3a845378fd384850a682310d6e777d65d0c8394d53e62e5b1f9f15d66fbdaa91eca9adde44876c2dbc30cf1aab8fd75542ff6d1f5d42421a8e5593cdd879ae7c5a5fe7e78170e39aca0ec4a6717cad19"}, @generic="3bf876ad68ce1fe97727ef", @generic="56e06a9a10a400ee80d85350d8609324683a5caa0194797bc3a2294c5be593aeb9ab957775225249f8a45986", @nested={0x186, 0x42, 0x0, 0x1, [@generic="c15990f62c7ec1e93f210b68577b83b3cb28054a6e101d1fe71477a1edc424a30c00378d9cc1b97628c1225e0f124ed3305c65f0353a07ff80298e4f59cb3ec887c150da9148d3c168e547c6549260a9fd83407740b69ad7f7dc17eaee11470a54b8a0e7848b4954ef6d5c96755b4d6fed3722879a81d8bfc4da6f2f122469556361c15d71341f2da96ddd467dfa3f9b7ac24d0c3b9c9233a2134fa52dc8f4eebf86", @generic="2d7fcf8339d276e3e40c28313d494d7e6cf381f11c8faf7699f31d0fb89a8eca8a274e0b68c89eca9fdd1e139c112e5024dd52b1649b243708933f80cfcf5150dd5e9ebc329cb6115c0f1dbfd5592e744f7d5663c6e01fde46657313e8924117c420cedd0735a26e4fab4d07bd5f8f3fbf1c2f06ddd4c36205da7e51e5d075e6a30193d9dc20c1914fb92680c86a98f413a9dd6a05d26c1fe26ebf4162989d369a8829d1d1805b5f1d39f173b80a7d673bfcf0d9a65ead9fe9845c8e299234c220c183d12af2802286217e9610875b4fc1bdf8f0", @nested={0x4, 0x11a}, @typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20004880}, 0x50000)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000ac0))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000b40)={'pim6reg1\x00', &(0x7f0000000b00)=@ethtool_sset_info={0x37, 0x7, 0x0, [0x3]}})
r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000bc0)=0x1c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000c00)={<r8=>0x0, 0xcaff}, &(0x7f0000000c40)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000c80)={r8, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, 0x0, 0x401}, 0x90)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000d40)={@rand_addr=0x64010101, @broadcast, r3}, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r1)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_FAMILY={0x5, 0xd, 0x1748a02d267904b9}, @GTPA_I_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}]}, 0x5c}}, 0x20040800)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r1)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa0, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x12}, {0x6, 0x11, 0x9}}]}, 0xa0}}, 0x40)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r7)
sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x220, r12, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2f}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x470}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffce55}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xfffffff8, 0xfff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1fc0346f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0x4, 0x1, 0x6, 0xfffffff2, 0x81]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x143}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x46, 0x5b, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1a3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x5, 0x7, 0x1ff, 0x6, 0x8, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}]}, @NL80211_ATTR_CQM={0x7c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x2, 0x2920, 0x7, 0x6]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x5, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x177}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0xb70a, 0x4, 0x3]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff47}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x20001)
sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d1}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x0, 0x1, 0x0, {0x3, 0x2, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x5, 0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x10008800)

165.243038ms ago: executing program 0 (id=7272):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x800)

161.153486ms ago: executing program 2 (id=7273):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0, 0x2}, {r1, 0x1102}], 0x2, 0xc511)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

156.128221ms ago: executing program 0 (id=7274):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0xfffffffffffffffd, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x9, 0x5, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0x39, &(0x7f00000003c0)=""/57, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xb, 0xb, 0xfffffffc}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000300), &(0x7f00000005c0)=r4}, 0x20)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1a7d1caa4cff00c1a477323fd96efe0d0070004174ddb279745210eaa0a10e0000000000000099946d26c804085a766b9ee1a90591bf844cb250e79b3a8afdc6e48ddc0760402ccb52369f23b56e29167d2e2ef0eca554e5fa1d9ffa8e8467ffd6f0c70735e78095c8dcc1274c6006ea1f39c27ea58b2b75b6859b20bc4320baa5cff7bb0ae3afbfa1b88ea2f71dd3069c68a106c236870e054501"], 0x10}}, 0x0)
recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)}, 0x10002)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4000, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x5}, {0x4}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000a32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)

129.489146ms ago: executing program 2 (id=7275):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
r2 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
bind$can_raw(r0, 0x0, 0x0)
write$tun(r0, &(0x7f00000001c0)={@void, @void, @ipv4=@generic={{0x25, 0x4, 0x3, 0x0, 0x152, 0x64, 0x0, 0x0, 0x73, 0x0, @remote, @private=0xa010102, {[@generic={0x1, 0xa, "0ab6bd9f89021b8e"}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x9, "9920cb8433770c"}, @timestamp_prespec={0x44, 0x1c, 0x32, 0x3, 0x2, [{@remote, 0x5}, {@remote, 0xc}, {@broadcast, 0x3fb4}]}, @generic={0x88, 0xe, "46c702a37c4aca3f792045fc"}, @noop, @ssrr={0x89, 0xb, 0x8a, [@rand_addr=0x64010102, @rand_addr=0x64010101]}, @generic={0xd4, 0xf, "453348c3e3882f453aa4d3ffef"}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0x4, [{@multicast2, 0xf}, {@broadcast, 0x5}, {@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}, "46c70c86bb5e2e2d09d0dd30e627ae9b6f3230017236392909c9d0121c130ca40810fa259639240032616a0d77b2d1d740c758174b785f73fe9b31cd5e2407f9a7e497ce7f90e237561eda89851ee959e5f17bd5b2694663276123ddacad86ffa4ad2db14fb7159e21a511a521af9b46b204ea2f16d0fbd291cf3c003b11811243747963f430c3c225edfb1320bf0609e9a67ce798042f4880a2781430078c92de2ff08fc183fb1dd8b31a991c5e2ea85fa12b328f3feed37bcf0f12e180"}}, 0x152)
syz_extract_tcp_res(&(0x7f0000000100), 0x2, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "53d328", 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0)

83.508352ms ago: executing program 2 (id=7276):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/40, 0x28}], 0x1}, 0x20003ff1}], 0x1, 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffe}, 0x8)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r7, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
recvfrom$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000080)={0x7, '\x00', {0x80000001}, 0xfff2})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000071102b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.533582ms ago: executing program 0 (id=7277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000013e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x98)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x1, 0x10000004, 0x7}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000140)={{0x1, @private=0xa010100, 0x4e21, 0x3, 'wlc\x00', 0x23, 0x81, 0x5}, {@broadcast, 0x4e22, 0x10000, 0x11cb, 0x12d61, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x200000, 0x12d58, 0x12d4c}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bind$inet6(r3, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000003000000040000000b00000000000000", @ANYRES32=r2, @ANYBLOB="01f8ffff00"/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="00000001000000000000800012ae9c341c104ae8a7d554ef6f0800000000000000000300"/50], 0x50)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x4b, 0x0, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'macvtap0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r11, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000500f9ff000016000300686173683a6e65742c706f72742c6e65740000000c00078008000840000000020500010007"], 0x5c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

0s ago: executing program 0 (id=7278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}]}, 0x2c}}, 0x4)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)={0x14, r1, 0x805, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x4004050)
ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000040)={0x10000, 0x9, 0x9, 0x101})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0xfffffffe})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0xe0}}], 0x1, 0x20008000)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x10, 0x80, 0xffffffff, 0xd82, {{0x2f, 0x4, 0x2, 0x4, 0xbc, 0x68, 0x0, 0x2a, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x1, [{@local, 0x10000}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x81}, {@rand_addr=0x64010102, 0x7f}, {@broadcast, 0x8}, {@multicast2, 0x88}, {@empty}]}, @rr={0x7, 0xb, 0x8, [@loopback, @private=0xa010102]}, @generic={0x94, 0x11, "bd741f93d67994a6277e797e6fe484"}, @timestamp_addr={0x44, 0x2c, 0x74, 0x1, 0x0, [{@broadcast, 0x5}, {@broadcast, 0xffffffff}, {@empty, 0x10000}, {@rand_addr=0x64010100, 0x4ad8}, {@multicast2, 0xfff}]}, @rr={0x7, 0x23, 0x6d, [@local, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @private=0xa010101]}, @end]}}}}})
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

kernel console output (not intermixed with test programs):

6] macvlan4: entered allmulticast mode
[  453.020694][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.051428][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.084913][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  453.112605][T26700] __nla_validate_parse: 19 callbacks suppressed
[  453.112626][T26700] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5904'.
[  453.211973][T26648] lo speed is unknown, defaulting to 1000
[  453.250341][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5907'.
[  453.351443][ T1151] bridge_slave_1: left allmulticast mode
[  453.367056][ T1151] bridge_slave_1: left promiscuous mode
[  453.383332][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.664938][ T1151] bond6 (unregistering): (slave geneve4): Releasing active interface
[  453.679325][ T1151] bond4 (unregistering): (slave geneve3): Releasing active interface
[  453.691847][ T1151] bond1 (unregistering): (slave geneve2): Releasing active interface
[  453.730088][ T1151] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  453.743845][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.762491][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.772824][ T1151] bond0 (unregistering): Released all slaves
[  453.782849][ T1151] bond1 (unregistering): Released all slaves
[  453.794478][ T1151] bond2 (unregistering): Released all slaves
[  453.807208][ T1151] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[  453.818989][ T1151] bond3 (unregistering): Released all slaves
[  453.831525][ T1151] bond4 (unregistering): Released all slaves
[  453.843447][ T1151] bond5 (unregistering): Released all slaves
[  453.858654][ T1151] bond6 (unregistering): Released all slaves
[  453.870932][ T1151] bond7 (unregistering): Released all slaves
[  453.890821][T26707] syzkaller1: entered promiscuous mode
[  453.896563][T26707] syzkaller1: entered allmulticast mode
[  453.967035][ T1151] tipc: Left network mode
[  454.146988][T23735] Bluetooth: hci2: command tx timeout
[  454.264126][T26747] netlink: 'syz.4.5913': attribute type 1 has an invalid length.
[  454.294398][T26747] netlink: 'syz.4.5913': attribute type 4 has an invalid length.
[  454.302749][T26747] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5913'.
[  454.343590][T26648] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.364006][T26648] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.373411][T26648] bridge_slave_0: entered allmulticast mode
[  454.383271][T26648] bridge_slave_0: entered promiscuous mode
[  454.400268][ T1151] veth0_vlan: left promiscuous mode
[  454.583164][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  454.605641][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  454.698794][T14007] smbdirect: ib_dev[syz2] removed
[  454.715713][T26648] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.731321][T26648] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.738878][T26648] bridge_slave_1: entered allmulticast mode
[  454.746144][T26648] bridge_slave_1: entered promiscuous mode
[  454.821358][T26754] syzkaller0: entered promiscuous mode
[  454.827094][T26754] syzkaller0: entered allmulticast mode
[  454.845760][T26648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.859683][T26648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.879422][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e613800: rx timeout, send abort
[  454.887040][T26648] team0: Port device team_slave_0 added
[  454.888723][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e613800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  454.895560][T26648] team0: Port device team_slave_1 added
[  454.932231][T26648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.939355][T26648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.967048][T26648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.979638][T26648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.987218][T26648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.014169][T26648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.053949][T26648] hsr_slave_0: entered promiscuous mode
[  455.061175][T26648] hsr_slave_1: entered promiscuous mode
[  455.068798][T26648] debugfs: 'hsr0' already exists in 'hsr'
[  455.075017][T26648] Cannot create hsr debugfs directory
[  455.093279][ T1151] IPVS: stop unused estimator thread 0...
[  456.204601][T26714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.218662][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5913'.
[  456.243317][T26742] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  456.256067][T23735] Bluetooth: hci2: command tx timeout
[  456.267805][T26648] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  456.324174][T26648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  456.343448][T26648] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  456.374326][T26648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  456.395864][T26648] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  456.424970][T26648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.456470][T26648] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  456.517033][T26648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  456.517817][T26769] can: request_module (can-proto-5) failed.
[  456.572086][T26770] can: request_module (can-proto-5) failed.
[  456.789595][T26802] net_ratelimit: 50 callbacks suppressed
[  456.789650][T26802] openvswitch: netlink: Flow key attr not present in new flow.
[  456.845993][T26648] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.933833][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'.
[  456.940836][T26648] 8021q: adding VLAN 0 to HW filter on device team0
[  456.961626][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.968826][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.999081][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.006332][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.234159][T26820] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  457.294585][T26820] bond0: (slave lo): Enslaving as an active interface with an up link
[  457.325410][T26820] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  457.750079][T26857] netlink: 'syz.0.5932': attribute type 1 has an invalid length.
[  457.871436][T26857] bond0: entered promiscuous mode
[  457.883006][T26857] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.913521][T26868] syzkaller0: entered promiscuous mode
[  457.927253][T26868] syzkaller0: entered allmulticast mode
[  458.176448][T26884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  458.260821][T26895] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5942'.
[  458.288311][T26896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5941'.
[  458.307019][T23735] Bluetooth: hci2: command tx timeout
[  458.355984][T26899] netlink: 'syz.4.5943': attribute type 49 has an invalid length.
[  458.619154][T26918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5946'.
[  458.791420][T26648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.027873][T26946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5951'.
[  459.060746][T26648] veth0_vlan: entered promiscuous mode
[  459.130055][T26648] veth1_vlan: entered promiscuous mode
[  459.267384][T26648] veth0_macvtap: entered promiscuous mode
[  459.282684][T26648] veth1_macvtap: entered promiscuous mode
[  459.315628][T26648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.349930][T26648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.395724][T14007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.417239][T14007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.431609][T14007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.441807][T26963] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5957'.
[  459.444004][T14007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.686190][ T8010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.726888][ T8010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.837901][T20263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.889763][T20263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.145546][T27001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5964'.
[  460.343778][T27013] netlink: 'syz.0.5965': attribute type 1 has an invalid length.
[  460.391413][T23735] Bluetooth: hci2: command tx timeout
[  460.440167][T27014] ip6gretap1: entered promiscuous mode
[  460.452387][T27014] ip6gretap1: entered allmulticast mode
[  460.470660][T27014] bond8: (slave ip6gretap1): making interface the new active one
[  460.486524][T27014] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  460.494469][T27014] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  460.502587][T27014] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  460.827914][T27039] sctp: [Deprecated]: syz.0.5971 (pid 27039) Use of int in max_burst socket option deprecated.
[  460.827914][T27039] Use struct sctp_assoc_value instead
[  460.900429][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5974'.
[  461.008821][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5977'.
[  461.386369][T27068] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20004
[  461.914979][T27085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  461.942022][T27091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5989'.
[  462.000456][T27102] netlink: 'syz.0.5990': attribute type 21 has an invalid length.
[  462.016885][T27092] netlink: 'syz.2.5986': attribute type 29 has an invalid length.
[  462.037804][T27101] netlink: 'syz.0.5990': attribute type 21 has an invalid length.
[  462.041104][T27102] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5990'.
[  462.061560][T27098] netlink: 'syz.2.5986': attribute type 29 has an invalid length.
[  462.081797][T27101] netlink: 'syz.0.5990': attribute type 4 has an invalid length.
[  462.104296][T27101] netlink: 'syz.0.5990': attribute type 5 has an invalid length.
[  462.150880][T27102] netlink: 'syz.0.5990': attribute type 4 has an invalid length.
[  462.180444][T27102] netlink: 'syz.0.5990': attribute type 5 has an invalid length.
[  462.461915][T27131] netlink: 'syz.1.5998': attribute type 8 has an invalid length.
[  462.706798][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  462.962490][T27157] nbd: must specify an index to disconnect
[  463.010885][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  463.021677][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  463.032401][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  463.041013][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  463.049586][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  463.243435][T14007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.291615][T27166] bond0: option mode: unable to set because the bond device has slaves
[  463.353265][T27169] __nla_validate_parse: 6 callbacks suppressed
[  463.353285][T27169] netlink: 888 bytes leftover after parsing attributes in process `syz.3.6005'.
[  463.392001][T27172] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  463.474561][T14007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.541420][T27180] bridge0: port 1(syz_tun) entered blocking state
[  463.570493][T27180] bridge0: port 1(syz_tun) entered disabled state
[  463.594862][T27180] syz_tun: entered allmulticast mode
[  463.641806][T27180] syz_tun: entered promiscuous mode
[  463.671892][T14007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.831559][T27202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6012'.
[  463.849020][T14007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.956455][T27206] 8021q: adding VLAN 0 to HW filter on device bond10
[  464.046377][T27206] bond10: (slave veth9): Enslaving as an active interface with a down link
[  464.199524][T14007] bridge_slave_1: left allmulticast mode
[  464.224432][T14007] bridge_slave_1: left promiscuous mode
[  464.242829][T14007] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.375603][T27227] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6019'.
[  464.433964][T14007] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  464.521110][T14007] bond8 (unregistering): (slave ip6gre2): Releasing backup interface
[  464.763733][T14007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  464.774160][T14007] bond_slave_1: left allmulticast mode
[  464.781814][T14007] bond0 (unregistering): Released all slaves
[  464.791859][T14007] bond1 (unregistering): Released all slaves
[  464.805566][T14007] bond2 (unregistering): Released all slaves
[  464.818394][T14007] bond3 (unregistering): (slave veth5): Releasing backup interface
[  464.829254][T14007] bond3 (unregistering): Released all slaves
[  464.850179][T14007] bond4 (unregistering): Released all slaves
[  464.863924][T14007] bond5 (unregistering): Released all slaves
[  464.876026][T14007] bond6 (unregistering): Released all slaves
[  464.887606][T14007] bond7 (unregistering): Released all slaves
[  464.898983][T14007] bond8 (unregistering): Released all slaves
[  465.032432][T27248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6023'.
[  465.056896][T14007] tipc: Left network mode
[  465.108816][ T5635] Bluetooth: hci5: command tx timeout
[  465.143709][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6024'.
[  465.192313][T27251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6024'.
[  465.248930][T27255] netlink: 'syz.1.6025': attribute type 11 has an invalid length.
[  465.537735][T27273] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  465.615867][T27277] syzkaller0: entered promiscuous mode
[  465.642714][T27277] syzkaller0: entered allmulticast mode
[  465.725467][T27277] tipc: Started in network mode
[  465.745425][T27277] tipc: Node identity , cluster identity 4711
[  465.761821][T27277] tipc: Failed to obtain node identity
[  465.767684][T27277] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  466.081787][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  466.297089][T27318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6038'.
[  466.388886][T27318] batadv0: entered promiscuous mode
[  466.403234][T27318] macsec2: entered promiscuous mode
[  466.411227][T27318] 8021q: adding VLAN 0 to HW filter on device macsec2
[  466.430234][T27318] batadv0: left promiscuous mode
[  466.804492][T27350] validate_nla: 8 callbacks suppressed
[  466.804512][T27350] netlink: 'syz.0.6042': attribute type 2 has an invalid length.
[  466.841063][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  466.858857][T27345] syzkaller1: entered promiscuous mode
[  466.872972][T27345] syzkaller1: entered allmulticast mode
[  467.187166][T23735] Bluetooth: hci5: command tx timeout
[  467.480945][T27381] xt_TCPMSS: Only works on TCP SYN packets
[  467.493148][T14007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.514786][T14007] batman_adv: batadv0: Interface deactivated: dummy0
[  467.543678][T14007] batman_adv: batadv0: Removing interface: dummy0
[  467.755746][T14007] team_slave_1 (unregistering): left promiscuous mode
[  467.763292][T14007] team0 (unregistering): Port device team_slave_1 removed
[  467.777393][T14007] team_slave_0 (unregistering): left promiscuous mode
[  467.787084][T14007] team0 (unregistering): Port device team_slave_0 removed
[  467.834926][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  467.899730][T27159] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.914695][T27159] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.923185][T27159] bridge_slave_0: entered allmulticast mode
[  467.930820][T27159] bridge_slave_0: entered promiscuous mode
[  467.942704][T27159] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.956193][T27159] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.963637][T27159] bridge_slave_1: entered allmulticast mode
[  467.971227][T27159] bridge_slave_1: entered promiscuous mode
[  468.043515][T27159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.064698][T27159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.181233][T27159] team0: Port device team_slave_0 added
[  468.201625][T14007] IPVS: stop unused estimator thread 0...
[  468.213892][T27159] team0: Port device team_slave_1 added
[  468.330077][T27159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.351313][T27159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.397508][T27159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.495944][T27415] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.503534][T27415] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.726489][T27415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.742378][T27415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.851325][T27159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.859266][T27159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.887982][T27159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.905305][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  468.915726][T14007] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.925508][T14007] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.944338][T14007] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.953601][T14007] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.022891][T27159] hsr_slave_0: entered promiscuous mode
[  469.031227][T27159] hsr_slave_1: entered promiscuous mode
[  469.041126][T27159] debugfs: 'hsr0' already exists in 'hsr'
[  469.047985][T27159] Cannot create hsr debugfs directory
[  469.055661][T27453] tipc: Started in network mode
[  469.075851][T27453] tipc: Node identity c22d11d41616, cluster identity 4711
[  469.083577][T27453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.103075][T27462] netlink: 'syz.1.6067': attribute type 5 has an invalid length.
[  469.112861][T27453] syzkaller0: entered promiscuous mode
[  469.118650][T27453] syzkaller0: entered allmulticast mode
[  469.137685][T27452] tipc: Resetting bearer <eth:syzkaller0>
[  469.151615][T27451] tipc: Resetting bearer <eth:syzkaller0>
[  469.161277][T27451] tipc: Disabling bearer <eth:syzkaller0>
[  469.212980][T27467] lo: left allmulticast mode
[  469.220288][T27472] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.6070'.
[  469.230831][T27467] tunl0: left allmulticast mode
[  469.235882][T27467] gre0: left allmulticast mode
[  469.241019][T27467] gretap0: left allmulticast mode
[  469.246338][T27467] ip_vti0: left allmulticast mode
[  469.251885][T27467] ip6_vti0: left allmulticast mode
[  469.257305][T27467] sit0: left allmulticast mode
[  469.262393][T27467] ip6tnl0: left allmulticast mode
[  469.268094][T23735] Bluetooth: hci5: command tx timeout
[  469.274141][T27467] ip6gre0: left allmulticast mode
[  469.291274][T27467] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.410101][T27467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  469.568110][T27481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6072'.
[  469.854422][T27503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6076'.
[  469.865510][T27504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6076'.
[  469.950460][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6077'.
[  469.973885][T27159] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  469.978996][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6077'.
[  470.000788][T27159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  470.011585][T27159] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  470.036146][T27159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  470.116062][T27513] 8021q: adding VLAN 0 to HW filter on device bond1
[  470.125778][T27159] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  470.146365][T27159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  470.156213][T27159] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  470.172232][T27159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  470.282804][T27159] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.300484][T27536] SET target dimension over the limit!
[  470.339359][T27159] 8021q: adding VLAN 0 to HW filter on device team0
[  470.375378][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.382594][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.455969][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.463169][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.525366][T27554] veth11: entered promiscuous mode
[  470.562682][T27554] veth11: entered allmulticast mode
[  470.703869][T27566] xt_hashlimit: size too large, truncated to 1048576
[  471.026823][    C1] bridge0: port 3(gretap0) entered learning state
[  471.036872][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  471.044262][    C0] bridge0: port 1(
1¾x9ÿ) entered learning state
[  471.158111][T27598] netlink: 'syz.2.6094': attribute type 1 has an invalid length.
[  471.189393][T27600] bridge5: entered promiscuous mode
[  471.195480][T27600] bridge5: entered allmulticast mode
[  471.332007][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6097'.
[  471.348842][T23735] Bluetooth: hci5: command tx timeout
[  471.535450][T27159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.981321][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6107'.
[  472.083000][T27159] veth0_vlan: entered promiscuous mode
[  472.130059][T27668] openvswitch: netlink: Message has 8 unknown bytes.
[  472.135397][T27159] veth1_vlan: entered promiscuous mode
[  472.148272][T27675] netlink: 'syz.3.6110': attribute type 1 has an invalid length.
[  472.191364][T27675] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  472.207388][T27675] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  472.244795][T27675] bond2: (slave ip6gre1): making interface the new active one
[  472.265836][T27675] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  472.372606][T27159] veth0_macvtap: entered promiscuous mode
[  472.409608][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6112'.
[  472.425350][T27159] veth1_macvtap: entered promiscuous mode
[  472.487185][T27159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.511090][T27159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.573230][ T8022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.580590][T27703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6114'.
[  472.594599][ T8022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.611139][ T8022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.645276][ T8022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.762046][T20263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.785793][T20263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.848089][T20263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.857255][T20263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.894650][T27673] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  473.053232][T27731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.072192][T27731] batadv_slave_1: entered promiscuous mode
[  473.316924][T27749] 8021q: adding VLAN 0 to HW filter on device bond3
[  473.413320][T27761] bridge_slave_0: left allmulticast mode
[  473.441719][T27761] bridge_slave_0: left promiscuous mode
[  473.464779][T27773] Cannot find del_set index 3 as target
[  473.482581][T27761] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.535554][T27761] bridge_slave_1: left allmulticast mode
[  473.583757][T27761] bridge_slave_1: left promiscuous mode
[  473.610100][T27761] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.643188][T27761] bond0: (slave bond_slave_0): Releasing backup interface
[  473.671491][T27761] bond0: (slave bond_slave_1): Releasing backup interface
[  473.704880][T27761] team0: Port device team_slave_0 removed
[  473.733807][T27761] team0: Port device team_slave_1 removed
[  473.761358][T27761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.782546][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  473.792062][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  473.799810][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  473.809124][T27761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.821886][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  473.831271][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  473.840560][T27761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  474.024333][T27803] can: request_module (can-proto-0) failed.
[  474.062081][T17305] syz_tun (unregistering): left allmulticast mode
[  474.086214][T17305] syz_tun (unregistering): left promiscuous mode
[  474.114712][T17305] bridge0: port 1(syz_tun) entered disabled state
[  474.198568][T27817] Cannot find del_set index 4 as target
[  474.357580][T27826] __nla_validate_parse: 2 callbacks suppressed
[  474.357603][T27826] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6135'.
[  474.579859][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6138'.
[  474.629203][T27852] netlink: 'syz.1.6139': attribute type 1 has an invalid length.
[  474.643197][T27852] xt_cgroup: xt_cgroup: no path or classid specified
[  474.715860][T27852] bond11: entered promiscuous mode
[  474.722581][T27852] bond11: entered allmulticast mode
[  474.733298][T27852] 8021q: adding VLAN 0 to HW filter on device bond11
[  475.098075][T27881] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6146'.
[  475.110792][T27881] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6146'.
[  475.148327][T27882] bridge0: port 4(vlan2) entered blocking state
[  475.154837][T27882] bridge0: port 4(vlan2) entered disabled state
[  475.163979][T27882] vlan2: entered allmulticast mode
[  475.172459][T27882] vlan2: entered promiscuous mode
[  475.179213][T27881] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6146'.
[  475.303206][T27886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6148'.
[  475.464234][T27795] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.484626][T27795] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.494686][T27795] bridge_slave_0: entered allmulticast mode
[  475.503157][T27795] bridge_slave_0: entered promiscuous mode
[  475.514398][T27795] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.521744][T27795] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.530071][T27795] bridge_slave_1: entered allmulticast mode
[  475.537947][T27795] bridge_slave_1: entered promiscuous mode
[  475.571959][T27795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.584439][T27795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.612600][T27795] team0: Port device team_slave_0 added
[  475.621362][T27795] team0: Port device team_slave_1 added
[  475.652332][T27795] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.659481][T27795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.700788][T27795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.721228][T27795] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.728921][T27795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.801568][T27795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.878595][T27795] hsr_slave_0: entered promiscuous mode
[  475.901632][T27795] hsr_slave_1: entered promiscuous mode
[  475.917613][T27795] debugfs: 'hsr0' already exists in 'hsr'
[  475.917769][ T5635] Bluetooth: hci4: command tx timeout
[  475.928454][T27795] Cannot create hsr debugfs directory
[  475.958876][T27922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6156'.
[  476.001101][T27922] netlink: 'syz.3.6156': attribute type 1 has an invalid length.
[  476.029370][T27922] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6156'.
[  476.060849][T27922] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6156'.
[  476.106399][T27922] netlink: 'syz.3.6156': attribute type 1 has an invalid length.
[  476.124258][T27922] netlink: 618 bytes leftover after parsing attributes in process `syz.3.6156'.
[  476.142040][T27936] : entered promiscuous mode
[  476.293393][T27795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.304241][T27795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.363150][T27795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.375048][T27795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.411912][T27795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.424034][T27795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.462030][T27795] netdevsim netdevsim2 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.476251][T27795] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.542602][T27795] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  476.551590][T27795] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  476.559513][T27795] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  476.569771][T27795] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  476.577850][T27795] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  476.586414][T27795] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  476.594385][T27795] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  476.602729][T27795] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  476.646243][T27795] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.662145][T27795] 8021q: adding VLAN 0 to HW filter on device team0
[  476.672444][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.679559][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.691312][T20268] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.698621][T20268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.903049][T27795] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.934131][T27795] veth0_vlan: entered promiscuous mode
[  476.944292][T27795] veth1_vlan: entered promiscuous mode
[  476.965419][T27795] veth0_macvtap: entered promiscuous mode
[  476.974669][T27795] veth1_macvtap: entered promiscuous mode
[  476.989364][T27795] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.001087][T27795] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.014263][ T8010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.024153][ T8010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.033781][ T8010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.043730][ T8010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.083780][ T8010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.092023][ T8010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.112931][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.120900][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.161970][T27961] syzkaller1: entered promiscuous mode
[  477.168751][T27961] syzkaller1: entered allmulticast mode
[  477.987295][ T5635] Bluetooth: hci4: command tx timeout
[  480.067169][ T5635] Bluetooth: hci4: command tx timeout
[  482.147380][ T5635] Bluetooth: hci4: command tx timeout
[  496.963845][T23735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  496.977248][T23735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  496.985894][T23735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  496.993965][T23735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.001862][T23735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  497.092473][T27975] netlink: 'syz.3.6166': attribute type 83 has an invalid length.
[  497.127327][T27982] __nla_validate_parse: 1 callbacks suppressed
[  497.127346][T27982] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6165'.
[  497.160980][T27986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6167'.
[  497.202722][T27982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6165'.
[  497.220814][T27986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6167'.
[  497.236031][T27991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6168'.
[  497.363464][T28000] netlink: 'syz.4.6170': attribute type 1 has an invalid length.
[  497.381488][T28000] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6170'.
[  497.407828][T28000] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6170'.
[  497.422958][T28000] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6170'.
[  497.424700][T28001] bond1: entered promiscuous mode
[  497.438312][T28001] bond1: entered allmulticast mode
[  497.443842][T28001] 8021q: adding VLAN 0 to HW filter on device bond1
[  497.599690][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6174'.
[  497.778438][T28022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6178'.
[  497.803782][T28022] netlink: 'syz.2.6178': attribute type 1 has an invalid length.
[  497.859866][T28022] bridge0: port 3(ip6erspan0) entered blocking state
[  497.884067][T28022] bridge0: port 3(ip6erspan0) entered disabled state
[  497.908567][T28022] ip6erspan0: entered allmulticast mode
[  497.934609][T28022] ip6erspan0: entered promiscuous mode
[  498.263468][T27966] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.272620][T27966] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.282390][T27966] bridge_slave_0: entered allmulticast mode
[  498.289893][T27966] bridge_slave_0: entered promiscuous mode
[  498.298246][T27966] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.305841][T27966] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.314305][T27966] bridge_slave_1: entered allmulticast mode
[  498.322258][T27966] bridge_slave_1: entered promiscuous mode
[  498.360060][T27966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.385714][T27966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.427524][T28063] bond2: option fail_over_mac: invalid value (16)
[  498.435963][T28063] bond2 (unregistering): Released all slaves
[  498.479155][T27966] team0: Port device team_slave_0 added
[  498.491921][T27966] team0: Port device team_slave_1 added
[  498.539733][T27966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.550128][T27966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.576887][T27966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.591222][T27966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.600386][T27966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.644843][T27966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.668207][T28080] netlink: 'syz.3.6195': attribute type 1 has an invalid length.
[  498.702040][T27966] hsr_slave_0: entered promiscuous mode
[  498.710268][T27966] hsr_slave_1: entered promiscuous mode
[  498.717572][T27966] debugfs: 'hsr0' already exists in 'hsr'
[  498.723656][T27966] Cannot create hsr debugfs directory
[  498.846148][T27966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.858707][T27966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.924787][T27966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.950623][T27966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.032024][T27966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.043576][ T5635] Bluetooth: hci1: command tx timeout
[  499.051723][T27966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.170298][T27966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.180992][T27966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.364379][T28137] block nbd0: reconnected socket
[  499.384011][ T1151] macvlan1: left allmulticast mode
[  499.402494][ T1151] macvlan1: left promiscuous mode
[  499.420136][ T1151] bridge0: port 4(macvlan1) entered disabled state
[  499.438644][ T1151] gretap0: left allmulticast mode
[  499.446538][ T1151] bridge0: port 3(gretap0) entered disabled state
[  499.463173][ T1151] bridge_slave_1: left allmulticast mode
[  499.472334][ T1151] bridge_slave_1: left promiscuous mode
[  499.479948][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.492681][ T1151] ¾x9ÿ: left allmulticast mode
[  499.498458][ T1151] ¾x9ÿ: left promiscuous mode
[  499.503471][ T1151] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  499.512409][ T1151] veth3: left allmulticast mode
[  499.517958][ T1151] veth3: left promiscuous mode
[  499.522929][ T1151] bridge1: port 1(veth3) entered disabled state
[  499.581194][ T1151] bond8 (unregistering): (slave ip6gretap1): Releasing active interface
[  499.615486][ T1151] batman_adv: batadv0: Removing interface: gretap2
[  499.648683][ T1151] geneve1 (unregistering): left allmulticast mode
[  499.655839][ T1151] team0: Port device geneve1 removed
[  499.682323][ T1151] 
 (unregistering): (slave team0): Releasing backup interface
[  499.691045][ T1151] team0: left allmulticast mode
[  499.696245][ T1151] team_slave_0: left allmulticast mode
[  499.702622][ T1151] team_slave_1: left allmulticast mode
[  499.709278][ T1151] 
 (unregistering): Released all slaves
[  499.717986][ T1151] bond1 (unregistering): Released all slaves
[  499.728497][ T1151] bond2 (unregistering): Released all slaves
[  499.739678][ T1151] bond3 (unregistering): Released all slaves
[  499.753821][ T1151] bond4 (unregistering): Released all slaves
[  499.764826][ T1151] bond5 (unregistering): Released all slaves
[  499.774288][ T1151] bond6 (unregistering): Released all slaves
[  499.786152][ T1151] bond7 (unregistering): Released all slaves
[  499.796037][ T1151] bond0 (unregistering): Released all slaves
[  499.805871][ T1151] bond8 (unregistering): Released all slaves
[  499.843613][T28142] bond2: invalid ARP target 0.0.0.0 specified for addition
[  499.851411][T28142] bond2: option arp_ip_target: invalid value (0)
[  499.859909][T28142] bond2 (unregistering): Released all slaves
[  499.905866][T27966] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  499.927537][T27966] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  499.939040][ T1151] : left promiscuous mode
[  499.970272][T27966] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  499.983240][T27966] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  499.994776][ T1151] tipc: Left network mode
[  499.999803][T27966] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  500.013899][T27966] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  500.042074][T27966] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  500.074969][T27966] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  500.149872][T28175] x_tables: duplicate underflow at hook 1
[  500.269606][ T5635] block nbd0: Receive control failed (result -32)
[  500.312285][T27966] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.433518][T28186] openvswitch: netlink: Flow key attr not present in new flow.
[  501.107738][ T5635] Bluetooth: hci1: command tx timeout
[  501.188708][T28202] bond2: (slave gre0): Device is not bonding slave
[  501.195565][T28202] bond2: option active_slave: invalid value (gre0)
[  501.204005][T28202] bond2 (unregistering): Released all slaves
[  501.299235][T27966] 8021q: adding VLAN 0 to HW filter on device team0
[  501.339590][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.346767][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  501.375588][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.382886][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.536442][ T1151] hsr_slave_0: left promiscuous mode
[  501.545349][ T1151] hsr_slave_1: left promiscuous mode
[  501.561257][ T1151] veth1_vlan: left allmulticast mode
[  501.571267][ T1151] veth1_macvtap: left promiscuous mode
[  501.582606][ T1151] veth0_macvtap: left promiscuous mode
[  501.589123][ T1151] veth1_vlan: left promiscuous mode
[  501.594497][ T1151] veth0_vlan: left promiscuous mode
[  501.735347][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  501.761382][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  502.187745][T27966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.262279][T27966] veth0_vlan: entered promiscuous mode
[  502.293638][T27966] veth1_vlan: entered promiscuous mode
[  502.330038][T27966] veth0_macvtap: entered promiscuous mode
[  502.356354][T27966] veth1_macvtap: entered promiscuous mode
[  502.370576][T28277] __nla_validate_parse: 9 callbacks suppressed
[  502.370598][T28277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6243'.
[  502.403882][T28279] syzkaller0: entered promiscuous mode
[  502.409727][T28279] syzkaller0: entered allmulticast mode
[  502.429535][T27966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.430611][T28283] netlink: 'syz.1.6246': attribute type 1 has an invalid length.
[  502.440633][T27966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.460888][T14007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.469997][T14007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.480497][T14007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.490012][T14007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.570258][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.596361][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.621061][T28288] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.6248'.
[  502.624511][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.641740][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.642740][T28290] FAULT_INJECTION: forcing a failure.
[  502.642740][T28290] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  502.663530][T28290] CPU: 0 UID: 0 PID: 28290 Comm: syz.4.6249 Not tainted syzkaller #0 PREEMPT(full) 
[  502.663559][T28290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  502.663570][T28290] Call Trace:
[  502.663577][T28290]  <TASK>
[  502.663585][T28290]  dump_stack_lvl+0xe8/0x150
[  502.663612][T28290]  should_fail_ex+0x40c/0x560
[  502.663634][T28290]  _copy_from_user+0x2d/0xb0
[  502.663659][T28290]  ___sys_sendmsg+0x1c6/0x360
[  502.663687][T28290]  ? rcu_is_watching+0x15/0xb0
[  502.663705][T28290]  ? get_pid_task+0x20/0x1f0
[  502.663723][T28290]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.663752][T28290]  ? rcu_is_watching+0x15/0xb0
[  502.663783][T28290]  ? __fget_files+0x2a/0x420
[  502.663803][T28290]  ? __fget_files+0x3a2/0x420
[  502.663828][T28290]  __x64_sys_sendmsg+0x1b1/0x290
[  502.663853][T28290]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  502.663886][T28290]  ? rcu_is_watching+0x15/0xb0
[  502.663905][T28290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.663925][T28290]  do_syscall_64+0x174/0x580
[  502.663949][T28290]  ? clear_bhb_loop+0x40/0x90
[  502.663970][T28290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.663991][T28290] RIP: 0033:0x7f9be2d9ce59
[  502.664008][T28290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.664024][T28290] RSP: 002b:00007f9be0fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.664045][T28290] RAX: ffffffffffffffda RBX: 00007f9be3015fa0 RCX: 00007f9be2d9ce59
[  502.664059][T28290] RDX: 00000000000000f5 RSI: 0000200000000180 RDI: 0000000000000003
[  502.664072][T28290] RBP: 00007f9be0fee090 R08: 0000000000000000 R09: 0000000000000000
[  502.664083][T28290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.664094][T28290] R13: 00007f9be3016038 R14: 00007f9be3015fa0 R15: 00007ffe4cadfe68
[  502.664116][T28290]  </TASK>
[  503.100523][T28308] xt_ecn: cannot match TCP bits for non-tcp packets
[  503.105032][T28310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6254'.
[  503.188786][ T5635] Bluetooth: hci1: command tx timeout
[  503.616038][T28338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  503.647555][T28341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6266'.
[  504.171387][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6277'.
[  504.241285][T28383] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  504.278406][T28388] netlink: 'syz.1.6274': attribute type 16 has an invalid length.
[  504.319005][T28388] netlink: 'syz.1.6274': attribute type 17 has an invalid length.
[  504.416646][T28394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6280'.
[  504.431090][T28388] bridge0: port 3(syz_tun) entered blocking state
[  504.437683][T28388] bridge0: port 3(syz_tun) entered listening state
[  504.445841][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6280'.
[  504.460184][T28388] 8021q: adding VLAN 0 to HW filter on device .`
[  504.493045][T28388] veth1_macvtap: entered promiscuous mode
[  504.513969][T28388] 8021q: adding VLAN 0 to HW filter on device bond3
[  504.522997][T28388] 8021q: adding VLAN 0 to HW filter on device bond4
[  504.531626][T28388] bond5: left allmulticast mode
[  504.537730][T28388] 8021q: adding VLAN 0 to HW filter on device bond5
[  504.554421][T28388] 8021q: adding VLAN 0 to HW filter on device bond7
[  504.584856][T28388] 8021q: adding VLAN 0 to HW filter on device bond9
[  504.599754][T28388] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.611600][T28388] veth11: left promiscuous mode
[  504.617033][T28388] veth11: left allmulticast mode
[  504.624263][T28388] bridge5: left promiscuous mode
[  504.629768][T28388] bridge5: left allmulticast mode
[  504.637360][T28388] bond11: left promiscuous mode
[  504.642554][T28388] bond11: left allmulticast mode
[  504.653580][T14007] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.660721][T14007] bridge0: port 1(bridge_slave_0) entered listening state
[  504.669946][T14007] bridge0: port 4(vlan2) entered blocking state
[  504.676290][T14007] bridge0: port 4(vlan2) entered listening state
[  504.683821][T14007] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.691142][T14007] bridge0: port 2(bridge_slave_1) entered listening state
[  504.712733][ T8012] netdevsim netdevsim1 
: set [0, 0] type 1 family 0 port 8472 - 0
[  504.720941][ T8012] netdevsim netdevsim1 
: set [1, 1] type 2 family 0 port 20004 - 0
[  504.738302][ T8012] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  504.747485][ T8012] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  504.755747][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880584fc000: rx timeout, send abort
[  504.757920][ T8012] bond10: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  504.764757][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584fc000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  504.787818][ T8012] bond10: (slave veth9): making interface the new active one
[  504.796343][ T8012] bond10: active interface up!
[  504.803600][T20268] syz_tun: tun_net_xmit 90
[  504.817677][ T1151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  504.826897][ T6621] syz_tun: tun_net_xmit 110
[  504.829425][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  504.854232][ T1151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  504.866345][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  504.911445][T28405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'.
[  505.004977][T28409] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  505.178153][T28415] xt_hashlimit: max too large, truncated to 1048576
[  505.184340][T28419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6290'.
[  505.192793][T28420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6289'.
[  505.266693][ T5635] Bluetooth: hci1: command tx timeout
[  505.281234][T14007] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  505.303559][T14007] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  505.323048][T14007] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  505.332566][T28426] geneve0: entered promiscuous mode
[  505.348718][   T46] syz_tun: tun_net_xmit 110
[  505.354467][T14007] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  505.546135][T28444] xt_CONNSECMARK: invalid mode: 0
[  505.610347][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059d70800: rx timeout, send abort
[  505.618883][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059d70800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  505.651098][T28451] netlink: 'syz.2.6293': attribute type 16 has an invalid length.
[  505.666885][ T6621] syz_tun: tun_net_xmit 90
[  505.690654][T28451] netlink: 'syz.2.6293': attribute type 17 has an invalid length.
[  505.705000][T28444] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.722145][T28444] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.765920][T28450] IPVS: Error connecting to the multicast addr
[  505.788345][T28463] netlink: 'syz.4.6302': attribute type 15 has an invalid length.
[  505.840770][T28451] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.848034][T28451] bridge0: port 1(bridge_slave_0) entered listening state
[  505.864114][T28451] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.871422][T28451] bridge0: port 2(bridge_slave_1) entered listening state
[  505.913271][T28451] bond1: left promiscuous mode
[  505.918732][T28451] bond1: left allmulticast mode
[  505.925722][T28451] bridge0: port 3(ip6erspan0) entered blocking state
[  505.932751][T28451] bridge0: port 3(ip6erspan0) entered listening state
[  505.961535][T20263] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  505.961656][T28463] netlink: 'syz.4.6302': attribute type 15 has an invalid length.
[  506.004481][T20263] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  506.010314][T28452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.024476][ T8012] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.034411][ T8012] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.047000][   T46] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.079491][T20263] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  506.095695][T20263] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  506.418387][   T46] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.466782][    C1] syz_tun: tun_net_xmit 52
[  506.648930][T28522] 8021q: VLANs not supported on ip6_vti0
[  506.691097][T28522] netlink: 'syz.4.6316': attribute type 1 has an invalid length.
[  506.726433][T28522] netlink: 'syz.4.6316': attribute type 11 has an invalid length.
[  506.787190][   T46] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  506.809300][T28532] netlink: 'syz.2.6320': attribute type 9 has an invalid length.
[  507.353533][T28571] 8021q: adding VLAN 0 to HW filter on device bond2
[  507.379728][T28571] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  507.434495][T28571] macvlan2: entered promiscuous mode
[  507.462429][T28571] macvlan2: entered allmulticast mode
[  507.476542][T28571] bond2: entered promiscuous mode
[  507.496376][T28571] veth0_to_bond: entered promiscuous mode
[  507.504510][T28571] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  507.513956][T28571] bond2: left promiscuous mode
[  507.519700][T28571] veth0_to_bond: left promiscuous mode
[  507.740566][T28602] validate_nla: 1 callbacks suppressed
[  507.740588][T28602] netlink: 'syz.1.6337': attribute type 83 has an invalid length.
[  507.882104][T28608] __nla_validate_parse: 12 callbacks suppressed
[  507.882123][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6341'.
[  507.897980][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6341'.
[  507.902056][T28611] No such timeout policy "syz0"
[  508.023806][T28621] bond0: (slave lo): Releasing backup interface
[  508.041244][T28621] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  508.098838][T28621] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  508.474212][T28653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.495577][T28655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6357'.
[  508.572494][T28663] netlink: 'syz.4.6359': attribute type 12 has an invalid length.
[  508.597283][T28663] netlink: 'syz.4.6359': attribute type 29 has an invalid length.
[  508.605314][T28663] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6359'.
[  508.642504][T28664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6360'.
[  508.671265][T28670] 8021q: adding VLAN 0 to HW filter on device bond3
[  508.768312][T28679] sctp: [Deprecated]: syz.2.6364 (pid 28679) Use of int in max_burst socket option.
[  508.768312][T28679] Use struct sctp_assoc_value instead
[  508.828715][T28685] netlink: 'syz.3.6367': attribute type 6 has an invalid length.
[  508.837291][T28685] netlink: 'syz.3.6367': attribute type 1 has an invalid length.
[  508.924809][T28689] netlink: 'syz.1.6368': attribute type 11 has an invalid length.
[  508.941626][T28689] netlink: 'syz.1.6368': attribute type 4 has an invalid length.
[  508.958390][T28689] netlink: 'syz.1.6368': attribute type 6 has an invalid length.
[  508.974727][T28689] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.6368'.
[  509.093014][T28712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6372'.
[  509.106840][    C1] syz_tun: tun_net_xmit 52
[  509.116921][T28715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6374'.
[  509.135059][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6374'.
[  509.154686][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6373'.
[  509.678462][T28760] hsr0: entered allmulticast mode
[  509.683840][T28760] hsr_slave_0: entered allmulticast mode
[  509.690540][T28760] hsr_slave_1: entered allmulticast mode
[  509.769732][T28764] 8021q: adding VLAN 0 to HW filter on device bond12
[  509.907010][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  510.331851][T28822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.649913][T28842] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.661822][T28842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.694408][T28842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  510.705039][T28842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  510.720170][T28842] veth1_vlan: left promiscuous mode
[  510.726217][T28842] veth0_vlan: left promiscuous mode
[  510.732530][T28842] veth0_vlan: entered promiscuous mode
[  510.740416][T28842] veth1_vlan: entered promiscuous mode
[  510.749592][T28842] veth1_macvtap: left promiscuous mode
[  510.756176][T28842] veth0_macvtap: left promiscuous mode
[  510.763334][T28842] veth0_macvtap: entered promiscuous mode
[  510.770260][T28842] veth1_macvtap: entered promiscuous mode
[  510.781974][T28842] 8021q: adding VLAN 0 to HW filter on device bond2
[  510.795004][T28842] 8021q: adding VLAN 0 to HW filter on device eth0
[  510.803356][T28842] 8021q: adding VLAN 0 to HW filter on device eth1
[  510.812751][T28842] 8021q: adding VLAN 0 to HW filter on device eth2
[  510.821300][T28842] 8021q: adding VLAN 0 to HW filter on device eth3
[  510.862089][ T8010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.874940][ T8010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.893707][ T8010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.909774][T14007] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.044775][T28866] openvswitch: netlink: Flow key attr not present in new flow.
[  511.106721][    C1] syz_tun: tun_net_xmit 52
[  511.196919][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087ec4c00: rx timeout, send abort
[  511.220830][T28872] FAULT_INJECTION: forcing a failure.
[  511.220830][T28872] name failslab, interval 1, probability 0, space 0, times 1
[  511.253393][T28872] CPU: 1 UID: 0 PID: 28872 Comm: syz.4.6420 Not tainted syzkaller #0 PREEMPT(full) 
[  511.253419][T28872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  511.253430][T28872] Call Trace:
[  511.253436][T28872]  <TASK>
[  511.253443][T28872]  dump_stack_lvl+0xe8/0x150
[  511.253465][T28872]  should_fail_ex+0x40c/0x560
[  511.253483][T28872]  should_failslab+0xa8/0x100
[  511.253506][T28872]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  511.253527][T28872]  ? rcu_is_watching+0x15/0xb0
[  511.253543][T28872]  ? __alloc_skb+0x1d7/0x7a0
[  511.253562][T28872]  ? trace_irq_enable+0x3b/0x140
[  511.253584][T28872]  __alloc_skb+0x1d7/0x7a0
[  511.253605][T28872]  netlink_sendmsg+0x5d4/0xb40
[  511.253631][T28872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  511.253655][T28872]  ? aa_sock_msg_perm+0xf1/0x1b0
[  511.253671][T28872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  511.253690][T28872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  511.253712][T28872]  ____sys_sendmsg+0x9b9/0xa20
[  511.253739][T28872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  511.253763][T28872]  ? lock_release+0x4b/0x3c0
[  511.253789][T28872]  ? import_iovec+0x73/0xa0
[  511.253813][T28872]  ___sys_sendmsg+0x2a5/0x360
[  511.253836][T28872]  ? rcu_is_watching+0x15/0xb0
[  511.253852][T28872]  ? get_pid_task+0x20/0x1f0
[  511.253869][T28872]  ? __pfx____sys_sendmsg+0x10/0x10
[  511.253893][T28872]  ? rcu_is_watching+0x15/0xb0
[  511.253920][T28872]  ? __fget_files+0x2a/0x420
[  511.253941][T28872]  ? __fget_files+0x3a2/0x420
[  511.253964][T28872]  __x64_sys_sendmsg+0x1b1/0x290
[  511.253989][T28872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  511.254021][T28872]  ? rcu_is_watching+0x15/0xb0
[  511.254039][T28872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.254056][T28872]  do_syscall_64+0x174/0x580
[  511.254079][T28872]  ? trace_irq_disable+0x3b/0x140
[  511.254101][T28872]  ? clear_bhb_loop+0x40/0x90
[  511.254119][T28872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.254137][T28872] RIP: 0033:0x7f9be2d9ce59
[  511.254152][T28872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.254167][T28872] RSP: 002b:00007f9be0fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  511.254188][T28872] RAX: ffffffffffffffda RBX: 00007f9be3015fa0 RCX: 00007f9be2d9ce59
[  511.254200][T28872] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000004
[  511.254212][T28872] RBP: 00007f9be0fee090 R08: 0000000000000000 R09: 0000000000000000
[  511.254223][T28872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.254233][T28872] R13: 00007f9be3016038 R14: 00007f9be3015fa0 R15: 00007ffe4cadfe68
[  511.254253][T28872]  </TASK>
[  511.432690][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079cbcc00: rx timeout, send abort
[  511.525745][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079cbcc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  511.636232][T28879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.656401][T28881] netlink: 'syz.4.6423': attribute type 1 has an invalid length.
[  511.705336][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087ec4c00: abort rx timeout. Force session deactivation
[  511.745283][T28886] netlink: 'syz.2.6425': attribute type 21 has an invalid length.
[  511.790382][T28890] syz_tun: refused to change device tx_queue_len
[  511.918034][T28896] syzkaller0: entered promiscuous mode
[  511.939282][T28896] syzkaller0: entered allmulticast mode
[  511.980511][T28894] syzkaller0: entered promiscuous mode
[  511.991521][T28894] syzkaller0: entered allmulticast mode
[  512.313171][ T8022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  512.343021][ T8022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  512.370145][ T8022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  512.408954][ T8022] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  512.591092][T28942] bond9: entered allmulticast mode
[  512.603163][T28943] xt_hashlimit: size too large, truncated to 1048576
[  512.690281][T28943] bond9: left allmulticast mode
[  513.106793][    C1] syz_tun: tun_net_xmit 52
[  513.446148][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880993fc000: rx timeout, send abort
[  513.455081][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880993fc000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  515.106716][    C1] syz_tun: tun_net_xmit 52
[  515.674555][T28951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.835748][T28981] __nla_validate_parse: 15 callbacks suppressed
[  515.835769][T28981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'.
[  515.881682][T28984] IPv6: NLM_F_REPLACE set, but no existing node found!
[  515.961165][   T29] audit: type=1107 audit(1781914415.523:25): pid=28987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r¦š¸†îôOqÓaÔŠ«J§(BÉμéÓ	„ËÍa¤7oxc™9Á56…êšÇF´±Ê…a]j$³Æ›#1cØ�f,̓Qxt|�×<=¿ŽÉ¿­BÕùœÂ$šÞ\QÐUu²÷‰Ì0z±Ðõ¹ÊëMm¸nƒfœ«À^Ü„và�ø®'
[  516.028377][T28995] "syz.0.6456" (28995) uses obsolete ecb(arc4) skcipher
[  516.054044][T28997] Cannot find add_set index 0 as target
[  516.237996][T29009] bridge3: entered allmulticast mode
[  516.257824][T29013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6462'.
[  516.269045][T29016] bridge4: entered allmulticast mode
[  516.332514][T29014] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6461'.
[  516.511612][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6466'.
[  516.525546][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'.
[  516.540284][T29033] netlink: 'syz.0.6466': attribute type 29 has an invalid length.
[  516.549448][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'.
[  516.559498][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'.
[  516.569347][T29033] netlink: 'syz.0.6466': attribute type 29 has an invalid length.
[  516.577911][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6466'.
[  516.826238][T29046] syzkaller0: entered promiscuous mode
[  516.840803][T29046] syzkaller0: entered allmulticast mode
[  516.853391][T29056] netlink: 'syz.1.6471': attribute type 1 has an invalid length.
[  516.913516][T29056] bond13: entered promiscuous mode
[  516.919491][T29056] 8021q: adding VLAN 0 to HW filter on device bond13
[  516.951667][T29068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6474'.
[  516.973889][T29056] 8021q: adding VLAN 0 to HW filter on device bond13
[  516.982085][T29056] bond13: (slave vti0): The slave device specified does not support setting the MAC address
[  516.992862][T29056] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  517.005796][T29056] bond13: (slave vti0): making interface the new active one
[  517.015552][T29056] vti0: entered promiscuous mode
[  517.022202][T29056] bond13: (slave vti0): Enslaving as an active interface with an up link
[  517.108077][    C1] syz_tun: tun_net_xmit 52
[  517.110062][T29077] netlink: 'syz.1.6477': attribute type 2 has an invalid length.
[  517.218140][T29088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6479'.
[  517.344865][T29093] syzkaller0: entered promiscuous mode
[  517.356798][T29093] syzkaller0: entered allmulticast mode
[  517.630539][T29125] netlink: 'syz.3.6488': attribute type 27 has an invalid length.
[  517.638618][T29125] netlink: 'syz.3.6488': attribute type 4 has an invalid length.
[  517.955398][T29129] bridge0: port 3(syz_tun) entered disabled state
[  517.970279][T29129] bridge0: port 4(vlan2) entered disabled state
[  517.976805][T29129] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.984053][T29129] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.387057][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  518.481225][T14007] netdevsim netdevsim1 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.505059][T14007] netdevsim netdevsim1 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.539062][T14007] netdevsim netdevsim1 
: unset [1, 1] type 2 family 0 port 20004 - 0
[  518.572686][T14007] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.592236][T14007] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.613831][T14007] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  518.633929][T29148] bond0: (slave bond_slave_1): Releasing backup interface
[  518.648922][T29153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.677634][T29158] netlink: 'syz.4.6499': attribute type 1 has an invalid length.
[  518.686186][T14007] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.702999][T14007] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.722213][T14007] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  518.751424][T14007] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  518.773042][T14007] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.804947][T14007] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  518.808088][T29170] x_tables: duplicate underflow at hook 1
[  518.832352][T29170] netlink: 'syz.1.6502': attribute type 1 has an invalid length.
[  518.884098][T29177] xt_TCPMSS: Only works on TCP SYN packets
[  518.926106][T29162] bond4: (slave gretap1): making interface the new active one
[  518.934716][T29162] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  518.956806][T29184] netlink: 'syz.1.6504': attribute type 11 has an invalid length.
[  519.062278][T29185] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.069883][T29185] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.172968][T29185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.186395][T29185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.279087][T20263] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  519.305855][T20263] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.322831][T20263] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  519.339382][T20263] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.376133][T20263] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  519.393842][T20263] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.424927][T29198] 8021q: adding VLAN 0 to HW filter on device bond3
[  519.433794][T29198] bridge0: port 4(bond3) entered blocking state
[  519.441904][T29198] bridge0: port 4(bond3) entered disabled state
[  519.453547][T29198] bond3: entered allmulticast mode
[  519.469281][T29198] bond3: entered promiscuous mode
[  519.476478][T29198] bridge0: port 4(bond3) entered blocking state
[  519.482915][T29198] bridge0: port 4(bond3) entered listening state
[  519.494080][T20263] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  519.507693][T20263] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.527492][T14007] bridge0: port 4(bond3) entered disabled state
[  520.052823][T29245] syzkaller0: entered promiscuous mode
[  520.058892][T29245] syzkaller0: entered allmulticast mode
[  520.077738][T29248] tipc: Started in network mode
[  520.082993][T29248] tipc: Node identity 0e56d0a714f2, cluster identity 4711
[  520.090655][T29248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.107596][T29248] syzkaller0: entered promiscuous mode
[  520.117894][T29248] syzkaller0: entered allmulticast mode
[  520.123914][T23735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.132914][T23735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.140357][T23735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.170557][T23735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.191108][T23735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.286269][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e51c800: rx timeout, send abort
[  520.294942][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e51c800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  520.414391][T29262] sctp: [Deprecated]: syz.4.6525 (pid 29262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  520.414391][T29262] Use struct sctp_sack_info instead
[  520.627785][T29266] tipc: Resetting bearer <eth:syzkaller0>
[  520.745866][T17669] syz_tun (unregistering): left allmulticast mode
[  520.752854][T17669] syz_tun (unregistering): left promiscuous mode
[  520.760132][T17669] bridge0: port 3(syz_tun) entered disabled state
[  520.773581][T29247] tipc: Resetting bearer <eth:syzkaller0>
[  520.782331][T29247] tipc: Disabling bearer <eth:syzkaller0>
[  520.946644][    C1] bridge0: port 3(ip6erspan0) entered learning state
[  520.953488][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  520.960689][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  521.045749][T29296] netlink: 'syz.2.6531': attribute type 1 has an invalid length.
[  521.065961][T29296] __nla_validate_parse: 13 callbacks suppressed
[  521.065979][T29296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6531'.
[  521.119427][T29299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6532'.
[  521.174014][T29301] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.181645][T29301] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.229332][T29301] bridge_slave_0: left allmulticast mode
[  521.235254][T29301] bridge_slave_0: left promiscuous mode
[  521.241428][T29301] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.252791][T29301] bridge_slave_1: left allmulticast mode
[  521.259420][T29301] bridge_slave_1: left promiscuous mode
[  521.265661][T29301] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.279408][T29301] bond2: (slave veth0_to_bond): Releasing backup interface
[  521.289309][T29301] bond0: (slave bond_slave_0): Releasing backup interface
[  521.300047][T29301] bond0: (slave bond_slave_1): Releasing backup interface
[  521.311535][T29301] team0: Port device team_slave_0 removed
[  521.322044][T29301] team0: Port device team_slave_1 removed
[  521.329931][T29301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.339359][T29301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.349635][T29301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.362766][T29301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  521.494803][T29316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6536'.
[  521.669848][T29334] netlink: 'syz.0.6540': attribute type 23 has an invalid length.
[  521.690114][T29336] macsec1: entered promiscuous mode
[  521.700957][T29336] netlink: 576 bytes leftover after parsing attributes in process `syz.3.6541'.
[  521.745274][T29336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6541'.
[  521.802695][T29251] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.812290][T29251] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.820720][T29251] bridge_slave_0: entered allmulticast mode
[  521.828779][T29251] bridge_slave_0: entered promiscuous mode
[  521.843911][T29251] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.861556][T29251] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.870534][T29251] bridge_slave_1: entered allmulticast mode
[  521.881255][T29251] bridge_slave_1: entered promiscuous mode
[  521.979389][T29251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.014615][T29251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.101521][T29251] team0: Port device team_slave_0 added
[  522.115503][T29251] team0: Port device team_slave_1 added
[  522.186394][T29251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.210821][T29251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.236956][ T5635] Bluetooth: hci0: command tx timeout
[  522.244142][T29251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.259270][T29251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.266382][T29251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.298796][T29251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.319265][T29382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.340569][T29251] hsr_slave_0: entered promiscuous mode
[  522.347747][T29251] hsr_slave_1: entered promiscuous mode
[  522.466588][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805942e800: rx timeout, send abort
[  522.475336][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805942e800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  522.614387][T29403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6557'.
[  522.692361][T29406] hsr0: entered allmulticast mode
[  522.704043][T29406] hsr_slave_0: entered allmulticast mode
[  522.712571][T29406] hsr_slave_1: entered allmulticast mode
[  522.808433][T29251] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  522.825146][T29251] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  522.833504][T29251] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  522.852247][T29251] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  522.862332][T29251] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  522.874815][T29251] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  522.888532][T29251] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  522.898181][T29251] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  522.961458][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6565'.
[  522.973614][T29430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6565'.
[  523.014388][T29432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6566'.
[  523.022811][T29251] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.057593][T29251] 8021q: adding VLAN 0 to HW filter on device team0
[  523.070504][T29435] bridge_slave_0: left allmulticast mode
[  523.076880][T29435] bridge_slave_0: left promiscuous mode
[  523.082773][T29435] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.093726][T29435] bridge_slave_1: left allmulticast mode
[  523.100832][T29435] bridge_slave_1: left promiscuous mode
[  523.111293][T29435] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.122872][T29435] bond0: (slave bond_slave_0): Releasing backup interface
[  523.132410][T29435] bond0: (slave bond_slave_1): Releasing backup interface
[  523.132805][T29437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6568'.
[  523.152009][T29435] team0: Port device team_slave_0 removed
[  523.159042][T29435] team0: Port device team_slave_1 removed
[  523.165184][T29435] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.173264][T29435] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.181877][T29435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  523.201136][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.208441][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.221440][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.228676][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.528482][T29459] netlink: 'syz.0.6574': attribute type 21 has an invalid length.
[  523.621395][T29467] netlink: 'syz.3.6577': attribute type 1 has an invalid length.
[  523.666155][T29472] netlink: 'syz.2.6576': attribute type 1 has an invalid length.
[  523.698454][T29472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.738719][T29477] gtp0: entered promiscuous mode
[  523.751970][T29477] gtp0: entered allmulticast mode
[  523.780220][T29483] vlan2: entered allmulticast mode
[  523.797690][T29483] veth1_virt_wifi: entered allmulticast mode
[  523.870573][T29472] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  523.895181][T29472] bond4 (unregistering): Released all slaves
[  523.937134][T29251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.055502][T29251] veth0_vlan: entered promiscuous mode
[  524.082832][T29502] vlan2: entered promiscuous mode
[  524.088296][T29502] gretap0: entered promiscuous mode
[  524.108750][T29251] veth1_vlan: entered promiscuous mode
[  524.163071][T29251] veth0_macvtap: entered promiscuous mode
[  524.192382][T29251] veth1_macvtap: entered promiscuous mode
[  524.240902][T29251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.259100][T29251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.274008][ T1151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.288394][ T1151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.303895][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.306868][ T5635] Bluetooth: hci0: command tx timeout
[  524.341955][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.456211][T14007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.506251][T29530] netlink: 'syz.0.6591': attribute type 21 has an invalid length.
[  524.507259][T14007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.568439][T29534] macvlan2: entered allmulticast mode
[  524.573964][T29534] dummy0: entered allmulticast mode
[  524.592205][T29536] netlink: 'syz.3.6593': attribute type 1 has an invalid length.
[  524.594245][ T8022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.609101][ T8022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.635395][T29536] 8021q: adding VLAN 0 to HW filter on device bond4
[  524.694202][T29536] bond4: (slave veth0_to_bond): making interface the new active one
[  524.703686][T29536] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  524.742948][T29539] bond4: entered promiscuous mode
[  524.758373][T29539] veth0_to_bond: entered promiscuous mode
[  524.793202][T29539] bond4: entered allmulticast mode
[  524.810616][T29548] netlink: 'syz.2.6597': attribute type 1 has an invalid length.
[  524.816657][T29539] veth0_to_bond: entered allmulticast mode
[  524.965662][T29559] 8021q: adding VLAN 0 to HW filter on device bond4
[  525.034772][T29567] tipc: Enabling <eth:lo> not permitted
[  525.046307][T29567] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  525.153821][T29581] netlink: 'syz.0.6606': attribute type 1 has an invalid length.
[  525.194316][T29583] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  525.372467][T29594] veth0: entered promiscuous mode
[  525.384598][T29592] veth0: left promiscuous mode
[  525.559270][T29609] syzkaller1: entered promiscuous mode
[  525.570453][T29609] syzkaller1: entered allmulticast mode
[  525.809697][T29631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.102935][T29656] netlink: 'syz.1.6636': attribute type 39 has an invalid length.
[  526.387040][ T5635] Bluetooth: hci0: command tx timeout
[  526.502048][T29673] netlink: 'syz.0.6641': attribute type 21 has an invalid length.
[  526.507074][T29679] __nla_validate_parse: 19 callbacks suppressed
[  526.507092][T29679] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6642'.
[  526.511080][T29673] IPv6: NLM_F_CREATE should be specified when creating new route
[  526.516275][T29679] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6642'.
[  526.543551][T29679] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6642'.
[  526.764402][T29693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6647'.
[  526.900100][T29702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6649'.
[  528.466844][ T5635] Bluetooth: hci0: command tx timeout
[  529.455957][T29673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.509748][T29727] validate_nla: 1 callbacks suppressed
[  529.509769][T29727] netlink: 'syz.4.6655': attribute type 1 has an invalid length.
[  529.631999][T29741] netlink: 'syz.1.6659': attribute type 7 has an invalid length.
[  529.639482][T29727] netlink: 'syz.4.6655': attribute type 11 has an invalid length.
[  529.641248][T29741] netlink: 'syz.1.6659': attribute type 5 has an invalid length.
[  529.657366][T29740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'.
[  529.658575][T29741] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6659'.
[  529.696904][T29727] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.6655'.
[  529.706904][T29739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'.
[  529.725213][T29736] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  529.783666][T29736] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  529.800233][T29736] bond6: (slave ip6gre1): making interface the new active one
[  529.811029][T29736] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  529.822168][T29752] netlink: 'syz.1.6661': attribute type 11 has an invalid length.
[  529.826432][T29747] ip6tnl1: entered allmulticast mode
[  529.833585][T29752] netlink: 'syz.1.6661': attribute type 11 has an invalid length.
[  529.857739][T29752] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6661'.
[  529.912096][T29756] tc_dump_action: action bad kind
[  529.980898][T29761] netlink: 'syz.1.6666': attribute type 1 has an invalid length.
[  530.005828][T29766] x_tables: duplicate underflow at hook 2
[  530.088530][T29776] "syz.2.6671" (29776) uses obsolete ecb(arc4) skcipher
[  530.093228][T29777] block nbd4: not configured, cannot reconfigure
[  530.193520][T29787] netlink: 'syz.2.6673': attribute type 1 has an invalid length.
[  530.675821][T29818] syzkaller0: entered promiscuous mode
[  530.681881][T29818] syzkaller0: entered allmulticast mode
[  531.183889][T29868] syzkaller0: entered promiscuous mode
[  531.190533][T29868] syzkaller0: entered allmulticast mode
[  531.276017][T29883] ipvlan2: entered promiscuous mode
[  531.807252][T29916] sock: sock_set_timeout: `syz.0.6708' (pid 29916) tries to set negative timeout
[  531.851501][T29918] batman_adv: batadv0: Adding interface: dummy0
[  531.859370][T29918] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  531.886317][T29918] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  531.899262][T29918] macvlan2: mtu less than device minimum
[  532.866846][T23735] Bluetooth: hci0: command 0x0405 tx timeout
[  534.137693][T29875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  534.330760][T29935] sctp: [Deprecated]: syz.1.6716 (pid 29935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.330760][T29935] Use struct sctp_sack_info instead
[  534.373760][T29937] __nla_validate_parse: 15 callbacks suppressed
[  534.373781][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6717'.
[  534.389708][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  534.398974][T29937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6717'.
[  534.411291][T29940] 
: renamed from erspan0 (while UP)
[  534.601636][T29949] syzkaller0: entered promiscuous mode
[  534.608456][T29949] syzkaller0: entered allmulticast mode
[  534.765062][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6727'.
[  534.813782][T29970] netlink: 'syz.4.6727': attribute type 1 has an invalid length.
[  534.837853][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6730'.
[  534.862639][T29985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6730'.
[  534.892881][T29970] 8021q: adding VLAN 0 to HW filter on device bond7
[  534.934720][T29970] bond7: (slave ip6gretap1): making interface the new active one
[  534.945150][T29970] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[  535.113224][T30008] xt_TCPMSS: Only works on TCP SYN packets
[  535.182961][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6737'.
[  535.198977][T30004] 8021q: adding VLAN 0 to HW filter on device bond2
[  535.218995][  T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  535.234980][T30028] x_tables: duplicate underflow at hook 4
[  535.243833][T30020] team0: entered promiscuous mode
[  535.262788][T30020] erspan0: entered promiscuous mode
[  535.308018][T30025] syzkaller0: entered promiscuous mode
[  535.311684][T30020] netlink: 'syz.0.6737': attribute type 1 has an invalid length.
[  535.326084][T30025] syzkaller0: entered allmulticast mode
[  535.396490][T30040] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  535.427914][T30045] syzkaller0: entered promiscuous mode
[  535.451644][T30045] syzkaller0: entered allmulticast mode
[  535.524349][T30047] FAULT_INJECTION: forcing a failure.
[  535.524349][T30047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.536953][  T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  535.561753][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6745'.
[  535.582635][T30047] CPU: 0 UID: 0 PID: 30047 Comm: syz.0.6743 Not tainted syzkaller #0 PREEMPT(full) 
[  535.582666][T30047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  535.582677][T30047] Call Trace:
[  535.582685][T30047]  <TASK>
[  535.582692][T30047]  dump_stack_lvl+0xe8/0x150
[  535.582718][T30047]  should_fail_ex+0x40c/0x560
[  535.582739][T30047]  _copy_from_iter+0x1d3/0x1660
[  535.582761][T30047]  ? skb_set_owner_w+0x263/0x3d0
[  535.582793][T30047]  ? __pfx__copy_from_iter+0x10/0x10
[  535.582818][T30047]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  535.582837][T30047]  skb_copy_datagram_from_iter+0xe6/0x720
[  535.582858][T30047]  ? skb_put+0x112/0x210
[  535.582882][T30047]  tun_get_user+0xc71/0x4350
[  535.582905][T30047]  ? is_bpf_text_address+0x292/0x2b0
[  535.582937][T30047]  ? lock_release+0x4b/0x3c0
[  535.582971][T30047]  ? arch_stack_walk+0xfb/0x150
[  535.582995][T30047]  ? aa_file_perm+0x4ed/0x15f0
[  535.583014][T30047]  ? __pfx_tun_get_user+0x10/0x10
[  535.583039][T30047]  ? kstrtoull+0x12f/0x1d0
[  535.583061][T30047]  ? ref_tracker_alloc+0x341/0x4b0
[  535.583081][T30047]  ? get_pid_task+0x20/0x1f0
[  535.583097][T30047]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  535.583115][T30047]  ? rcu_is_watching+0x15/0xb0
[  535.583131][T30047]  ? tun_get+0x1c/0x2f0
[  535.583149][T30047]  ? tun_get+0x1c/0x2f0
[  535.583167][T30047]  ? rcu_is_watching+0x15/0xb0
[  535.583183][T30047]  ? tun_get+0x1c/0x2f0
[  535.583201][T30047]  ? lock_release+0x4b/0x3c0
[  535.583224][T30047]  ? apparmor_file_permission+0x1f4/0x300
[  535.583246][T30047]  ? tun_get+0x1c/0x2f0
[  535.583267][T30047]  tun_chr_write_iter+0x113/0x200
[  535.583288][T30047]  vfs_write+0x612/0xba0
[  535.583316][T30047]  ? __pfx_vfs_write+0x10/0x10
[  535.583340][T30047]  ? __fget_files+0x2a/0x420
[  535.583364][T30047]  ksys_write+0x150/0x270
[  535.583388][T30047]  ? __pfx_ksys_write+0x10/0x10
[  535.583413][T30047]  ? rcu_is_watching+0x15/0xb0
[  535.583431][T30047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.583454][T30047]  do_syscall_64+0x174/0x580
[  535.583476][T30047]  ? trace_irq_disable+0x3b/0x140
[  535.583499][T30047]  ? clear_bhb_loop+0x40/0x90
[  535.583518][T30047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.583537][T30047] RIP: 0033:0x7f3820b9ce59
[  535.583554][T30047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.583570][T30047] RSP: 002b:00007f3821aab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  535.583591][T30047] RAX: ffffffffffffffda RBX: 00007f3820e15fa0 RCX: 00007f3820b9ce59
[  535.583606][T30047] RDX: 000000000000007a RSI: 0000200000000500 RDI: 0000000000000003
[  535.583617][T30047] RBP: 00007f3821aab090 R08: 0000000000000000 R09: 0000000000000000
[  535.583629][T30047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.583640][T30047] R13: 00007f3820e16038 R14: 00007f3820e15fa0 R15: 00007fffc1ce6528
[  535.583661][T30047]  </TASK>
[  535.889687][T30058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6749'.
[  535.958150][T30059] block nbd1: server does not support multiple connections per device.
[  535.992275][T30056] syzkaller0: entered promiscuous mode
[  535.998767][T30056] syzkaller0: entered allmulticast mode
[  535.999773][T30059] block nbd1: shutting down sockets
[  536.042411][T30072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6750'.
[  536.159772][T30078] x_tables: unsorted entry at hook 3
[  536.179288][T30082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6752'.
[  536.307173][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.314448][    C1] bridge0: topology change detected, propagating
[  536.321063][    C1] bridge0: port 3(ip6erspan0) entered forwarding state
[  536.327974][    C1] bridge0: topology change detected, propagating
[  536.334400][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.341697][    C0] bridge0: topology change detected, propagating
[  536.476383][T30104] netlink: Unknown conntrack attr (0)
[  536.577256][T30080] bond4: (slave veth0_to_bond): Releasing active interface
[  536.584833][T30080] veth0_to_bond: left promiscuous mode
[  536.590844][T30080] veth0_to_bond: left allmulticast mode
[  536.623573][T30080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  536.657284][T30082] 8021q: adding VLAN 0 to HW filter on device bond1
[  536.685508][T30096] macvlan2: entered promiscuous mode
[  536.691296][T30096] macvlan2: entered allmulticast mode
[  536.698128][T30096] bond1: entered promiscuous mode
[  536.704087][T30096] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  536.715983][T30096] bond1: left promiscuous mode
[  536.823993][T30113] FAULT_INJECTION: forcing a failure.
[  536.823993][T30113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.877968][T30113] CPU: 0 UID: 0 PID: 30113 Comm: syz.3.6761 Not tainted syzkaller #0 PREEMPT(full) 
[  536.877997][T30113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  536.878009][T30113] Call Trace:
[  536.878018][T30113]  <TASK>
[  536.878026][T30113]  dump_stack_lvl+0xe8/0x150
[  536.878051][T30113]  should_fail_ex+0x40c/0x560
[  536.878073][T30113]  _copy_to_user+0x31/0xb0
[  536.878099][T30113]  simple_read_from_buffer+0xe1/0x170
[  536.878131][T30113]  proc_fail_nth_read+0x1bb/0x230
[  536.878157][T30113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.878183][T30113]  ? rw_verify_area+0x24a/0x4c0
[  536.878205][T30113]  ? tun_chr_write_iter+0x18a/0x200
[  536.878227][T30113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.878250][T30113]  vfs_read+0x213/0xa80
[  536.878275][T30113]  ? __pfx___mutex_lock+0x10/0x10
[  536.878300][T30113]  ? __pfx_vfs_read+0x10/0x10
[  536.878326][T30113]  ? __fget_files+0x3a2/0x420
[  536.878346][T30113]  ? __fget_files+0x2a/0x420
[  536.878369][T30113]  ksys_read+0x150/0x270
[  536.878392][T30113]  ? __pfx_ksys_read+0x10/0x10
[  536.878417][T30113]  ? rcu_is_watching+0x15/0xb0
[  536.878437][T30113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.878456][T30113]  do_syscall_64+0x174/0x580
[  536.878479][T30113]  ? trace_irq_disable+0x3b/0x140
[  536.878503][T30113]  ? clear_bhb_loop+0x40/0x90
[  536.878523][T30113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.878541][T30113] RIP: 0033:0x7fd39db5d68e
[  536.878557][T30113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  536.878574][T30113] RSP: 002b:00007fd39e96efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  536.878595][T30113] RAX: ffffffffffffffda RBX: 00007fd39e96f6c0 RCX: 00007fd39db5d68e
[  536.878608][T30113] RDX: 000000000000000f RSI: 00007fd39e96f0a0 RDI: 0000000000000005
[  536.878620][T30113] RBP: 00007fd39e96f090 R08: 0000000000000000 R09: 0000000000000000
[  536.878632][T30113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.878643][T30113] R13: 00007fd39de16038 R14: 00007fd39de15fa0 R15: 00007fff362c74a8
[  536.878664][T30113]  </TASK>
[  536.885880][T30123] openvswitch: netlink: Missing key (keys=40, expected=80)
[  537.109149][T30135] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  537.259655][T30143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  537.364821][T30151] netlink: 'syz.0.6772': attribute type 1 has an invalid length.
[  537.414279][T30152] bond8: entered promiscuous mode
[  537.538733][T30176] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  537.553746][T30176] syzkaller0: entered promiscuous mode
[  537.559841][T30176] syzkaller0: entered allmulticast mode
[  537.719851][T30191] syzkaller1: entered promiscuous mode
[  537.736445][T30191] syzkaller1: entered allmulticast mode
[  538.391119][T30256] netlink: 'syz.2.6802': attribute type 2 has an invalid length.
[  538.396231][T30258] netlink: 'syz.3.6803': attribute type 1 has an invalid length.
[  538.488054][T30264] x_tables: ip_tables: icmp match: only valid for protocol 1
[  538.561137][T30271] netlink: 'syz.0.6808': attribute type 1 has an invalid length.
[  538.594696][T30276] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  538.602356][T30276] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  538.645515][T30270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.781611][T30299] netlink: 'syz.4.6817': attribute type 5 has an invalid length.
[  538.797619][T30292] mac80211_hwsim hwsim97 wlan0: entered promiscuous mode
[  538.815693][T30299] geneve2: entered promiscuous mode
[  538.823889][T30299] geneve2: entered allmulticast mode
[  539.121640][T30324] team0 (unregistering): left promiscuous mode
[  539.365353][T30345] sctp: [Deprecated]: syz.1.6826 (pid 30345) Use of int in max_burst socket option.
[  539.365353][T30345] Use struct sctp_assoc_value instead
[  539.420672][T30347] netlink: 'syz.4.6828': attribute type 1 has an invalid length.
[  539.504462][T30354] netlink: 'syz.0.6829': attribute type 9 has an invalid length.
[  539.565954][T30363] __nla_validate_parse: 17 callbacks suppressed
[  539.565977][T30363] netlink: 804 bytes leftover after parsing attributes in process `syz.1.6832'.
[  539.723018][T30373] bridge0: port 3(syz_tun) entered blocking state
[  539.736280][T30377] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6833'.
[  539.740736][T30373] bridge0: port 3(syz_tun) entered disabled state
[  539.756206][T30373] syz_tun: entered allmulticast mode
[  539.764937][T30373] syz_tun: entered promiscuous mode
[  539.785086][T30373] bridge0: port 3(syz_tun) entered blocking state
[  539.791737][T30373] bridge0: port 3(syz_tun) entered forwarding state
[  540.231134][T30414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6847'.
[  540.281781][T30424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6850'.
[  540.314711][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6850'.
[  540.332687][T30424] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6850'.
[  540.396771][T30439] netlink: 'syz.4.6852': attribute type 11 has an invalid length.
[  540.435592][T30439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6852'.
[  540.465429][T30447] netlink: 'syz.1.6856': attribute type 1 has an invalid length.
[  540.468670][T30444] openvswitch: netlink: Key type 30 is not supported
[  540.473434][T30447] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6856'.
[  540.495079][T30447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6856'.
[  540.577748][T30450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6857'.
[  540.870482][T30476] bridge0: port 3(syz_tun) entered disabled state
[  540.877584][T30476] syz_tun: left allmulticast mode
[  540.883902][T30476] syz_tun: left promiscuous mode
[  540.892750][T30476] bridge0: port 3(syz_tun) entered disabled state
[  540.905758][T30479] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  540.918364][T30476] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.926164][T30476] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.973033][T30476] bridge_slave_0: left allmulticast mode
[  540.980664][T30476] bridge_slave_0: left promiscuous mode
[  540.986434][T30476] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.001853][T30476] bridge_slave_1: left allmulticast mode
[  541.009463][T30476] bridge_slave_1: left promiscuous mode
[  541.015281][T30476] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.028470][T30476] bond0: (slave bond_slave_0): Releasing backup interface
[  541.040003][T30476] bond0: (slave bond_slave_1): Releasing backup interface
[  541.052355][T30476] team0: Port device team_slave_0 removed
[  541.062317][T30476] team0: Port device team_slave_1 removed
[  541.070190][T30476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  541.079732][T30476] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.089842][T30476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.099264][T30476] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.113904][T30476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  541.263661][T30502] netlink: 'syz.2.6871': attribute type 29 has an invalid length.
[  541.337324][T30509] netlink: 'syz.2.6871': attribute type 29 has an invalid length.
[  541.409711][T30513] ip6tnl2: entered allmulticast mode
[  541.434575][T30517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  541.808072][T20263] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  541.829598][T20263] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  541.852671][T20263] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  541.885838][T14007] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  541.917668][T30559] netlink: 'syz.1.6892': attribute type 1 has an invalid length.
[  541.978350][T30559] bond2: entered promiscuous mode
[  541.986513][T30559] 8021q: adding VLAN 0 to HW filter on device bond2
[  541.997373][T30568] bond2: entered allmulticast mode
[  542.071608][T30559] bond2: (slave bridge1): making interface the new active one
[  542.079854][T30559] bridge1: entered promiscuous mode
[  542.085273][T30559] bridge1: entered allmulticast mode
[  542.092302][T30559] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  542.370372][T30600] v: renamed from vlan0 (while UP)
[  542.639955][T30622] sctp: [Deprecated]: syz.4.6913 (pid 30622) Use of int in maxseg socket option.
[  542.639955][T30622] Use struct sctp_assoc_value instead
[  542.866727][ T5635] Bluetooth: hci0: command 0x0405 tx timeout
[  542.878344][T30641] xt_hashlimit: size too large, truncated to 1048576
[  542.935162][T30647] 0ªX¹¦Dö»: renamed from gretap0
[  542.943886][T30645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.970747][T30647] 0ªX¹¦Dö»: entered allmulticast mode
[  542.982625][T30651] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  543.270419][T30673] x_tables: duplicate underflow at hook 1
[  543.375722][T30679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  543.546120][T30697] netlink: 'syz.0.6938': attribute type 49 has an invalid length.
[  543.611218][T30697] ip6gretap0: entered promiscuous mode
[  543.620215][T30697] ip6gretap0: entered allmulticast mode
[  543.866428][T30721] syzkaller1: entered promiscuous mode
[  543.877968][T30721] syzkaller1: entered allmulticast mode
[  543.944829][T30730] netlink: 'syz.1.6946': attribute type 23 has an invalid length.
[  543.963430][T30730] netlink: 'syz.1.6946': attribute type 23 has an invalid length.
[  544.204926][T30751] "syz.3.6949" (30751) uses obsolete ecb(arc4) skcipher
[  544.636341][T30776] syzkaller0: entered promiscuous mode
[  544.642499][T30776] syzkaller0: entered allmulticast mode
[  544.962612][T30804] netlink: 'syz.2.6962': attribute type 2 has an invalid length.
[  544.963857][T30802] netlink: 'syz.2.6962': attribute type 2 has an invalid length.
[  544.979146][T30802] netlink: 'syz.2.6962': attribute type 11 has an invalid length.
[  544.993443][T30799] syzkaller0: entered promiscuous mode
[  545.010088][T30799] syzkaller0: entered allmulticast mode
[  545.025806][T30804] __nla_validate_parse: 29 callbacks suppressed
[  545.025824][T30804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6962'.
[  545.045712][T30799] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.6961'.
[  545.055317][T30802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6962'.
[  545.414908][T30837] openvswitch: netlink: Flow actions attr not present in new flow.
[  545.425036][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6969'.
[  545.435997][T30837] hsr_slave_0: left promiscuous mode
[  545.446215][T30837] hsr_slave_1: left promiscuous mode
[  545.916079][T30809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  546.016264][T30844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6971'.
[  546.027985][T30845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6972'.
[  546.037952][T30845] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6972'.
[  546.048820][T30845] validate_nla: 3 callbacks suppressed
[  546.048837][T30845] netlink: 'syz.2.6972': attribute type 5 has an invalid length.
[  546.064336][T30845] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6972'.
[  546.085761][T30848] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6973'.
[  546.231902][T30863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6977'.
[  546.250780][T20268] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  546.301654][T30857] openvswitch: netlink: IPv4 tunnel dst address is zero
[  546.433384][T30874] sctp: [Deprecated]: syz.1.6981 (pid 30874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  546.433384][T30874] Use struct sctp_sack_info instead
[  546.499156][T30886] sctp: [Deprecated]: syz.1.6981 (pid 30886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  546.499156][T30886] Use struct sctp_sack_info instead
[  546.677834][T30898] batadv_slave_1: left promiscuous mode
[  546.693223][T30898] hsr0: left allmulticast mode
[  546.701255][T30898] hsr_slave_0: left allmulticast mode
[  546.725553][T30898] hsr_slave_1: left allmulticast mode
[  546.920917][T30898] bond8: left promiscuous mode
[  546.926916][T30898] geneve2: left promiscuous mode
[  546.931974][T30898] geneve2: left allmulticast mode
[  546.950714][T20268] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  546.969013][T20268] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.989957][T20268] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  546.997971][T30925] SET target dimension over the limit!
[  547.016353][T20268] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.048590][ T8022] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  547.061261][ T8022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.083592][ T8022] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  547.115596][ T8022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.201286][T30941] openvswitch: netlink: IP tunnel dst address not specified
[  547.433395][T30958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.209243][T31023] syzkaller0: entered promiscuous mode
[  548.225093][T31023] syzkaller0: entered allmulticast mode
[  549.149426][T31069] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.165134][T31069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.229751][T31069] macsec1: left promiscuous mode
[  549.235734][T31069] gtp0: left promiscuous mode
[  549.244171][T31069] bond4: left promiscuous mode
[  549.252712][T31069] 8021q: adding VLAN 0 to HW filter on device bond4
[  549.267777][T31069] 8021q: adding VLAN 0 to HW filter on device bond5
[  549.327867][T31076] syzkaller1: entered promiscuous mode
[  549.341643][T31076] syzkaller1: entered allmulticast mode
[  549.508113][T31101] veth1_macvtap: left promiscuous mode
[  549.588319][T31107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  549.612172][T31104] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  549.618676][T31104] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  549.730097][T31119] netlink: 'syz.1.7052': attribute type 1 has an invalid length.
[  549.740026][T31117] macvlan0: entered promiscuous mode
[  549.938529][T31134] sctp: [Deprecated]: syz.3.7055 (pid 31134) Use of int in max_burst socket option.
[  549.938529][T31134] Use struct sctp_assoc_value instead
[  549.958012][T31137] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  549.958397][T31138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.092406][T31157] __nla_validate_parse: 19 callbacks suppressed
[  550.092426][T31157] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7056'.
[  550.115194][T31160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7060'.
[  550.305079][T31171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  550.310046][T31168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7063'.
[  550.350953][T31172] xt_TCPMSS: Only works on TCP SYN packets
[  550.516934][T31187] netlink: 632 bytes leftover after parsing attributes in process `syz.2.7070'.
[  550.583384][T31193] netlink: 'syz.3.7067': attribute type 25 has an invalid length.
[  550.693403][T31206] netlink: 766 bytes leftover after parsing attributes in process `syz.4.7074'.
[  550.704312][ T5283] veth1_macvtap: entered promiscuous mode
[  550.705092][T31206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7074'.
[  550.759490][T31207] pim6reg: entered allmulticast mode
[  550.791905][T31216] syzkaller0: entered promiscuous mode
[  550.796163][T31217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7072'.
[  550.798167][T31216] syzkaller0: entered allmulticast mode
[  550.845278][T31217] bond2: entered promiscuous mode
[  550.850997][T31217] 8021q: adding VLAN 0 to HW filter on device bond2
[  550.872147][T31217] 8021q: adding VLAN 0 to HW filter on device bond2
[  550.879474][T31217] bond2: (slave sit1): The slave device specified does not support setting the MAC address
[  550.887810][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7074'.
[  550.891324][T31217] bond2: (slave sit1): Error -95 calling set_mac_address
[  550.949566][T31226] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7076'.
[  551.381431][T31248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.557712][T31193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  553.705899][T31264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7086'.
[  553.730249][T31257] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  553.781188][T31260] : entered promiscuous mode
[  554.090847][T31303] netlink: 'syz.4.7094': attribute type 1 has an invalid length.
[  554.234489][T31312] bond9: (slave geneve3): making interface the new active one
[  554.248441][T31312] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  554.258255][   T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  554.348613][   T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  554.385152][T31320] xt_cgroup: xt_cgroup: no path or classid specified
[  554.399473][   T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  554.428090][T31312] 8021q: adding VLAN 0 to HW filter on device bond9
[  554.453717][T20268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  554.655055][T31352] netlink: 'syz.2.7106': attribute type 1 has an invalid length.
[  554.718665][T31363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  554.744143][T31347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  554.753770][T31345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  555.051983][T31374] syzkaller0: entered promiscuous mode
[  555.076361][T31374] syzkaller0: entered allmulticast mode
[  555.102080][T31389] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  555.102292][T31393] __nla_validate_parse: 8 callbacks suppressed
[  555.102306][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7115'.
[  555.139715][T31388] netlink: 'syz.3.7114': attribute type 4 has an invalid length.
[  555.373004][   T48] nci: nci_ntf_packet: unknown ntf opcode 0x25
[  556.096161][T31401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.269472][T31454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7131'.
[  556.424590][T31474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7139'.
[  556.535162][T31479] bond6: option arp_all_targets: invalid value (18446744073709551613)
[  556.582572][T31479] bond6 (unregistering): Released all slaves
[  556.678486][T31479] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  556.821044][T31499] netlink: 'syz.4.7147': attribute type 7 has an invalid length.
[  556.953155][T31515] netlink: 'syz.3.7150': attribute type 11 has an invalid length.
[  556.962718][T31515] netlink: 'syz.3.7150': attribute type 11 has an invalid length.
[  556.976039][T31515] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7150'.
[  557.151952][T31532] netlink: 'syz.0.7156': attribute type 2 has an invalid length.
[  557.339767][T31545] xfrm0 speed is unknown, defaulting to 1000
[  557.354812][T31545] xfrm0 speed is unknown, defaulting to 1000
[  557.371579][T31545] xfrm0 speed is unknown, defaulting to 1000
[  557.677114][T31545] infiniband syz1: set down
[  557.681776][ T6596] xfrm0 speed is unknown, defaulting to 1000
[  557.688521][T31545] infiniband syz1: added xfrm0
[  557.719631][T31545] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  557.746882][T31545] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  557.793980][T31545] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  557.817263][T31577] netlink: 'syz.0.7170': attribute type 12 has an invalid length.
[  557.832719][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7170'.
[  557.842741][T31545] RDS/IB: syz1: added
[  557.851808][T31545] smc: adding ib device syz1 with port count 1
[  557.855331][T31577] netlink: 'syz.0.7170': attribute type 12 has an invalid length.
[  557.866312][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7170'.
[  557.869477][T31545] smc:    ib device syz1 port 1 has no pnetid
[  557.884992][T31577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7170'.
[  557.889260][ T6596] xfrm0 speed is unknown, defaulting to 1000
[  557.906486][T31545] xfrm0 speed is unknown, defaulting to 1000
[  557.978283][T31582] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7171'.
[  558.001280][T31582] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7171'.
[  558.067044][T31586] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  558.080276][ T6596] IPVS: starting estimator thread 0...
[  558.087086][T31589] netlink: 'syz.0.7173': attribute type 30 has an invalid length.
[  558.187031][T31590] IPVS: using max 47 ests per chain, 112800 per kthread
[  558.215594][T31545] xfrm0 speed is unknown, defaulting to 1000
[  558.661876][T31545] xfrm0 speed is unknown, defaulting to 1000
[  558.768232][T31625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.831910][T31625] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7180'.
[  559.084754][T31545] xfrm0 speed is unknown, defaulting to 1000
[  559.152956][T31644] netlink: 'syz.0.7183': attribute type 11 has an invalid length.
[  559.371475][T31657] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  559.514620][T31665] Cannot find set identified by id 65534 to match
[  559.532954][T31545] xfrm0 speed is unknown, defaulting to 1000
[  559.589569][T31665] xt_hashlimit: size too large, truncated to 1048576
[  559.753030][T31684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.819496][T31687] syzkaller0: entered promiscuous mode
[  559.835632][T31687] syzkaller0: entered allmulticast mode
[  559.940526][T31694] bridge6: entered promiscuous mode
[  559.945985][T31694] bridge6: entered allmulticast mode
[  559.973953][T31545] xfrm0 speed is unknown, defaulting to 1000
[  560.089916][T31703] tun0: tun_chr_ioctl cmd 1074025675
[  560.102027][T31703] tun0: persist enabled
[  560.113259][T31703] netlink: 'syz.2.7197': attribute type 3 has an invalid length.
[  560.136710][T31703] netlink: 'syz.2.7197': attribute type 1 has an invalid length.
[  560.148086][T31703] __nla_validate_parse: 7 callbacks suppressed
[  560.148105][T31703] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7197'.
[  560.170411][T31712] netlink: 'syz.2.7197': attribute type 11 has an invalid length.
[  560.181575][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7197'.
[  560.192392][T31712] netlink: 'syz.2.7197': attribute type 11 has an invalid length.
[  560.216754][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7197'.
[  560.395486][T31545] xfrm0 speed is unknown, defaulting to 1000
[  560.406287][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7206'.
[  560.522207][T31732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7209'.
[  560.681820][T31545] xfrm0 speed is unknown, defaulting to 1000
[  560.720452][T31747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7213'.
[  560.721492][T31748] sctp: [Deprecated]: syz.0.7214 (pid 31748) Use of int in max_burst socket option.
[  560.721492][T31748] Use struct sctp_assoc_value instead
[  560.977594][T31769] netlink: 'syz.0.7221': attribute type 1 has an invalid length.
[  560.987446][T31545] xfrm0 speed is unknown, defaulting to 1000
[  560.990032][T31765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7219'.
[  561.029151][T31769] bond4: (slave geneve2): making interface the new active one
[  561.037839][T31769] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  561.047161][T20268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  561.058851][T20268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  561.224700][T31781] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  561.489937][T31801] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7227'.
[  561.684090][T31768] macvlan0: left promiscuous mode
[  561.774703][T31768] bridge3: left allmulticast mode
[  561.782640][T31768] bridge4: left allmulticast mode
[  561.792731][T31768] gtp0: left allmulticast mode
[  561.825554][T31768] bond4: left allmulticast mode
[  561.868680][T31768] bridge6: left promiscuous mode
[  561.873739][T31768] bridge6: left allmulticast mode
[  561.897050][T20268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  561.916172][T20268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  561.936126][T20268] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.945180][T20268] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  561.960651][T20268] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.971417][T20268] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  561.980848][T20268] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.989696][T20268] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.015359][T31809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  562.047730][T31811] veth1_to_bond: entered allmulticast mode
[  562.061996][T31815] veth1_to_bond: left allmulticast mode
[  562.082684][T20268] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.100826][T20268] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.236224][T31832] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7232'.
[  562.345059][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7235'.
[  562.388034][T31842] netlink: 'syz.3.7235': attribute type 4 has an invalid length.
[  562.502772][T31855] netlink: 'syz.3.7240': attribute type 2 has an invalid length.
[  562.682369][T31874] netlink: 'syz.4.7246': attribute type 2 has an invalid length.
[  562.728053][T31879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.880339][T31891] tipc: Started in network mode
[  562.885655][T31891] tipc: Node identity f238f390eac4, cluster identity 4711
[  562.897085][T31891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.910552][T31897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.916391][T31891] syzkaller0: entered promiscuous mode
[  562.928322][T31891] syzkaller0: entered allmulticast mode
[  562.938866][T31891] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  562.955123][T31891] tipc: Resetting bearer <eth:syzkaller0>
[  563.170366][T31890] tipc: Resetting bearer <eth:syzkaller0>
[  563.181377][T31890] tipc: Disabling bearer <eth:syzkaller0>
[  563.578396][T31960] syzkaller0: entered promiscuous mode
[  563.584465][T31960] syzkaller0: entered allmulticast mode
[  563.688160][T31966] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20001
[  563.706464][T31964] netlink: 'syz.2.7276': attribute type 24 has an invalid length.
[  563.779103][    C1] ==================================================================
[  563.787310][    C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30
[  563.795305][    C1] Read of size 2 at addr ffff88815ec190b4 by task syz.2.7276/31967
[  563.803290][    C1] 
[  563.805624][    C1] CPU: 1 UID: 0 PID: 31967 Comm: syz.2.7276 Not tainted syzkaller #0 PREEMPT(full) 
[  563.805642][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  563.805652][    C1] Call Trace:
[  563.805659][    C1]  <IRQ>
[  563.805666][    C1]  dump_stack_lvl+0xe8/0x150
[  563.805685][    C1]  print_address_description+0x55/0x1e0
[  563.805701][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  563.805715][    C1]  print_report+0x58/0x70
[  563.805728][    C1]  kasan_report+0x117/0x150
[  563.805747][    C1]  ? unwind_next_frame+0x8f/0x2550
[  563.805771][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  563.805789][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  563.805808][    C1]  __dev_queue_xmit+0x27f/0x37f0
[  563.805824][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.805840][    C1]  ? trace_irq_enable+0x3b/0x140
[  563.805858][    C1]  ? ebt_do_table+0x2605/0x27d0
[  563.805878][    C1]  ? ebt_do_table+0x2605/0x27d0
[  563.805897][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  563.805916][    C1]  ? ebt_do_table+0x2605/0x27d0
[  563.805936][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  563.805958][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  563.805974][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.805990][    C1]  ? trace_irq_enable+0x3b/0x140
[  563.806009][    C1]  ? __pfx_ebt_do_table+0x10/0x10
[  563.806027][    C1]  ? ebt_do_table+0x2605/0x27d0
[  563.806048][    C1]  ? NF_HOOK+0xa2/0x3f0
[  563.806064][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.806077][    C1]  ? br_nf_post_routing+0x160/0xee0
[  563.806096][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.806113][    C1]  br_dev_queue_push_xmit+0x370/0x4b0
[  563.806130][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  563.806147][    C1]  NF_HOOK+0x360/0x3f0
[  563.806164][    C1]  ? NF_HOOK+0xa2/0x3f0
[  563.806179][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  563.806195][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  563.806214][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.806229][    C1]  br_forward_finish+0xd3/0x130
[  563.806245][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  563.806262][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  563.806279][    C1]  NF_HOOK+0x360/0x3f0
[  563.806296][    C1]  ? NF_HOOK+0xa2/0x3f0
[  563.806311][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  563.806327][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  563.806345][    C1]  ? __skb_clone+0x449/0x6c0
[  563.806364][    C1]  ? br_handle_vlan+0x5e/0x530
[  563.806379][    C1]  __br_forward+0x397/0x540
[  563.806395][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  563.806413][    C1]  br_flood+0x3e6/0x8d0
[  563.806434][    C1]  br_handle_frame_finish+0x1175/0x1990
[  563.806457][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  563.806474][    C1]  ? lock_release+0x4b/0x3c0
[  563.806495][    C1]  ? net_generic+0x1e/0x240
[  563.806512][    C1]  ? net_generic+0x1e/0x240
[  563.806529][    C1]  ? br_nf_pre_routing+0x1310/0x14b0
[  563.806551][    C1]  ? br_nf_pre_routing+0xc41/0x14b0
[  563.806575][    C1]  br_handle_frame+0x81b/0x1510
[  563.806596][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  563.806622][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  563.806643][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  563.806661][    C1]  __netif_receive_skb_core+0x989/0x30b0
[  563.806678][    C1]  ? get_stack_info_noinstr+0x19/0x130
[  563.806695][    C1]  ? unwind_next_frame+0x1baf/0x2550
[  563.806714][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  563.806731][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  563.806750][    C1]  ? arch_stack_walk+0x11b/0x150
[  563.806775][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  563.806797][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  563.806814][    C1]  ? sched_balance_rq+0x6511/0x7020
[  563.806835][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  563.806853][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  563.806869][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.806883][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  563.806899][    C1]  ? lock_release+0x4b/0x3c0
[  563.806923][    C1]  napi_complete_done+0x299/0x730
[  563.806941][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  563.806956][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.806971][    C1]  ? gro_receive_skb+0x70e/0xc30
[  563.806991][    C1]  gro_cell_poll+0x5ab/0x5d0
[  563.807012][    C1]  ? gro_cell_poll+0x175/0x5d0
[  563.807030][    C1]  __napi_poll+0xaa/0x330
[  563.807047][    C1]  net_rx_action+0x61d/0xf50
[  563.807068][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  563.807084][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  563.807105][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  563.807125][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  563.807141][    C1]  ? sched_clock+0x3f/0x60
[  563.807164][    C1]  handle_softirqs+0x225/0x840
[  563.807183][    C1]  ? do_softirq+0x76/0xd0
[  563.807201][    C1]  ? tun_rx_batched+0x185/0x790
[  563.807220][    C1]  do_softirq+0x76/0xd0
[  563.807236][    C1]  </IRQ>
[  563.807242][    C1]  <TASK>
[  563.807248][    C1]  __local_bh_enable_ip+0xf8/0x130
[  563.807265][    C1]  ? tun_rx_batched+0x185/0x790
[  563.807282][    C1]  tun_rx_batched+0x616/0x790
[  563.807302][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  563.807319][    C1]  ? tun_get_user+0x26ca/0x4350
[  563.807335][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.807350][    C1]  ? lock_acquire+0x5f/0x350
[  563.807369][    C1]  ? tun_get_user+0x2373/0x4350
[  563.807386][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.807401][    C1]  ? trace_irq_enable+0x3b/0x140
[  563.807421][    C1]  tun_get_user+0x2b04/0x4350
[  563.807437][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.807455][    C1]  ? lock_release+0x4b/0x3c0
[  563.807474][    C1]  ? lock_release+0x4b/0x3c0
[  563.807493][    C1]  ? tun_get_user+0x26ca/0x4350
[  563.807511][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  563.807527][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  563.807544][    C1]  ? __futex_wait+0x358/0x400
[  563.807564][    C1]  ? __pfx___futex_wait+0x10/0x10
[  563.807583][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  563.807606][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  563.807623][    C1]  ? tun_get+0x1c/0x2f0
[  563.807639][    C1]  ? tun_get+0x1c/0x2f0
[  563.807655][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.807668][    C1]  ? tun_get+0x1c/0x2f0
[  563.807684][    C1]  ? lock_release+0x4b/0x3c0
[  563.807704][    C1]  ? apparmor_file_permission+0x1f4/0x300
[  563.807722][    C1]  ? tun_get+0x1c/0x2f0
[  563.807740][    C1]  tun_chr_write_iter+0x113/0x200
[  563.807758][    C1]  vfs_write+0x612/0xba0
[  563.807779][    C1]  ? __pfx_vfs_write+0x10/0x10
[  563.807800][    C1]  ? __fget_files+0x2a/0x420
[  563.807819][    C1]  ksys_write+0x150/0x270
[  563.807838][    C1]  ? __pfx_ksys_write+0x10/0x10
[  563.807857][    C1]  ? rcu_is_watching+0x15/0xb0
[  563.807872][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.807888][    C1]  do_syscall_64+0x174/0x580
[  563.807906][    C1]  ? trace_irq_disable+0x3b/0x140
[  563.807924][    C1]  ? clear_bhb_loop+0x40/0x90
[  563.807940][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.807954][    C1] RIP: 0033:0x7efc2319ce59
[  563.807969][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.807982][    C1] RSP: 002b:00007efc24007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  563.808000][    C1] RAX: ffffffffffffffda RBX: 00007efc23416090 RCX: 00007efc2319ce59
[  563.808012][    C1] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000005
[  563.808022][    C1] RBP: 00007efc23232e6f R08: 0000000000000000 R09: 0000000000000000
[  563.808031][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.808041][    C1] R13: 00007efc23416128 R14: 00007efc23416090 R15: 00007ffc17a055b8
[  563.808058][    C1]  </TASK>
[  563.808063][    C1] 
[  564.553343][    C1] The buggy address belongs to the physical page:
[  564.559791][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15ec19
[  564.568682][    C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  564.575885][    C1] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000
[  564.584482][    C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  564.593061][    C1] page dumped because: kasan: bad access detected
[  564.599470][    C1] page_owner tracks the page as freed
[  564.604919][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 28857, tgid 28856 (syz.3.6416), ts 511073789844, free_ts 512170907805
[  564.624923][    C1]  post_alloc_hook+0x22d/0x280
[  564.629708][    C1]  get_page_from_freelist+0x24ae/0x2530
[  564.635277][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  564.641207][    C1]  alloc_pages_mpol+0x212/0x380
[  564.646175][    C1]  alloc_pages_noprof+0xac/0x2a0
[  564.651123][    C1]  __vmalloc_node_range_noprof+0x795/0x1730
[  564.657025][    C1]  vmalloc_user_noprof+0xad/0xe0
[  564.661969][    C1]  xskq_create+0xbf/0x170
[  564.666305][    C1]  xsk_init_queue+0x8a/0xe0
[  564.670813][    C1]  xsk_setsockopt+0x5e0/0x960
[  564.677936][    C1]  do_sock_setsockopt+0x17c/0x1b0
[  564.683055][    C1]  __x64_sys_setsockopt+0x13d/0x1b0
[  564.688739][    C1]  do_syscall_64+0x174/0x580
[  564.693359][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.699253][    C1] page last free pid 28856 tgid 28856 stack trace:
[  564.705756][    C1]  __free_frozen_pages+0xc0d/0xd20
[  564.710980][    C1]  vfree+0x1fd/0x330
[  564.714877][    C1]  xskq_destroy+0x40/0x60
[  564.719209][    C1]  xsk_release+0x6ff/0x980
[  564.723627][    C1]  sock_close+0xad/0x220
[  564.727961][    C1]  __fput+0x418/0xa50
[  564.731961][    C1]  task_work_run+0x1d9/0x270
[  564.736574][    C1]  exit_to_user_mode_loop+0x1fa/0x730
[  564.742157][    C1]  do_syscall_64+0x353/0x580
[  564.746783][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.752802][    C1] 
[  564.755129][    C1] Memory state around the buggy address:
[  564.761019][    C1]  ffff88815ec18f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  564.769256][    C1]  ffff88815ec19000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  564.777404][    C1] >ffff88815ec19080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  564.785459][    C1]                                      ^
[  564.791090][    C1]  ffff88815ec19100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  564.799328][    C1]  ffff88815ec19180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  564.807385][    C1] ==================================================================
[  564.815582][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  564.822875][    C1] CPU: 1 UID: 0 PID: 31967 Comm: syz.2.7276 Not tainted syzkaller #0 PREEMPT(full) 
[  564.832249][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  564.842307][    C1] Call Trace:
[  564.845620][    C1]  <IRQ>
[  564.848470][    C1]  vpanic+0x56c/0xa60
[  564.852454][    C1]  ? rcu_is_watching+0x15/0xb0
[  564.857322][    C1]  ? __pfx_vpanic+0x10/0x10
[  564.861928][    C1]  ? rcu_is_watching+0x15/0xb0
[  564.866703][    C1]  panic+0xc5/0xd0
[  564.870428][    C1]  ? __pfx_panic+0x10/0x10
[  564.875306][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.881042][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.886670][    C1]  check_panic_on_warn+0x89/0xb0
[  564.891698][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.897466][    C1]  end_report+0x73/0x170
[  564.901720][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.907351][    C1]  kasan_report+0x128/0x150
[  564.911861][    C1]  ? unwind_next_frame+0x8f/0x2550
[  564.916979][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.922620][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  564.928085][    C1]  __dev_queue_xmit+0x27f/0x37f0
[  564.933029][    C1]  ? rcu_is_watching+0x15/0xb0
[  564.937889][    C1]  ? trace_irq_enable+0x3b/0x140
[  564.942830][    C1]  ? ebt_do_table+0x2605/0x27d0
[  564.947687][    C1]  ? ebt_do_table+0x2605/0x27d0
[  564.952540][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  564.957933][    C1]  ? ebt_do_table+0x2605/0x27d0
[  564.962888][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  564.968195][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  564.973602][    C1]  ? rcu_is_watching+0x15/0xb0
[  564.978379][    C1]  ? trace_irq_enable+0x3b/0x140
[  564.983344][    C1]  ? __pfx_ebt_do_table+0x10/0x10
[  564.988490][    C1]  ? ebt_do_table+0x2605/0x27d0
[  564.993361][    C1]  ? NF_HOOK+0xa2/0x3f0
[  564.997637][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.002406][    C1]  ? br_nf_post_routing+0x160/0xee0
[  565.007612][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.012387][    C1]  br_dev_queue_push_xmit+0x370/0x4b0
[  565.017768][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  565.023755][    C1]  NF_HOOK+0x360/0x3f0
[  565.027870][    C1]  ? NF_HOOK+0xa2/0x3f0
[  565.032220][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  565.036904][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  565.042808][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.047587][    C1]  br_forward_finish+0xd3/0x130
[  565.052444][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  565.058354][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  565.063818][    C1]  NF_HOOK+0x360/0x3f0
[  565.067981][    C1]  ? NF_HOOK+0xa2/0x3f0
[  565.072147][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  565.076750][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  565.082214][    C1]  ? __skb_clone+0x449/0x6c0
[  565.086810][    C1]  ? br_handle_vlan+0x5e/0x530
[  565.091597][    C1]  __br_forward+0x397/0x540
[  565.096207][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  565.101673][    C1]  br_flood+0x3e6/0x8d0
[  565.106010][    C1]  br_handle_frame_finish+0x1175/0x1990
[  565.111653][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  565.117548][    C1]  ? lock_release+0x4b/0x3c0
[  565.122153][    C1]  ? net_generic+0x1e/0x240
[  565.126657][    C1]  ? net_generic+0x1e/0x240
[  565.131174][    C1]  ? br_nf_pre_routing+0x1310/0x14b0
[  565.136487][    C1]  ? br_nf_pre_routing+0xc41/0x14b0
[  565.141693][    C1]  br_handle_frame+0x81b/0x1510
[  565.146557][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  565.151846][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  565.157747][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  565.163037][    C1]  __netif_receive_skb_core+0x989/0x30b0
[  565.168735][    C1]  ? get_stack_info_noinstr+0x19/0x130
[  565.174376][    C1]  ? unwind_next_frame+0x1baf/0x2550
[  565.179682][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  565.185776][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  565.192014][    C1]  ? arch_stack_walk+0x11b/0x150
[  565.197060][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  565.203061][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  565.209837][    C1]  ? sched_balance_rq+0x6511/0x7020
[  565.215042][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  565.221299][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  565.227660][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.232425][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  565.239101][    C1]  ? lock_release+0x4b/0x3c0
[  565.243710][    C1]  napi_complete_done+0x299/0x730
[  565.248738][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  565.254293][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.259145][    C1]  ? gro_receive_skb+0x70e/0xc30
[  565.264090][    C1]  gro_cell_poll+0x5ab/0x5d0
[  565.268783][    C1]  ? gro_cell_poll+0x175/0x5d0
[  565.273560][    C1]  __napi_poll+0xaa/0x330
[  565.277985][    C1]  net_rx_action+0x61d/0xf50
[  565.282591][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  565.287711][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  565.293003][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  565.298385][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  565.303595][    C1]  ? sched_clock+0x3f/0x60
[  565.308025][    C1]  handle_softirqs+0x225/0x840
[  565.312884][    C1]  ? do_softirq+0x76/0xd0
[  565.317353][    C1]  ? tun_rx_batched+0x185/0x790
[  565.322226][    C1]  do_softirq+0x76/0xd0
[  565.326383][    C1]  </IRQ>
[  565.329320][    C1]  <TASK>
[  565.332264][    C1]  __local_bh_enable_ip+0xf8/0x130
[  565.337376][    C1]  ? tun_rx_batched+0x185/0x790
[  565.342258][    C1]  tun_rx_batched+0x616/0x790
[  565.347032][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  565.352231][    C1]  ? tun_get_user+0x26ca/0x4350
[  565.357081][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.361851][    C1]  ? lock_acquire+0x5f/0x350
[  565.366544][    C1]  ? tun_get_user+0x2373/0x4350
[  565.371406][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.376433][    C1]  ? trace_irq_enable+0x3b/0x140
[  565.381377][    C1]  tun_get_user+0x2b04/0x4350
[  565.386064][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.390839][    C1]  ? lock_release+0x4b/0x3c0
[  565.395433][    C1]  ? lock_release+0x4b/0x3c0
[  565.400032][    C1]  ? tun_get_user+0x26ca/0x4350
[  565.404888][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  565.409657][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  565.414685][    C1]  ? __futex_wait+0x358/0x400
[  565.419372][    C1]  ? __pfx___futex_wait+0x10/0x10
[  565.424407][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  565.429521][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  565.434983][    C1]  ? tun_get+0x1c/0x2f0
[  565.439143][    C1]  ? tun_get+0x1c/0x2f0
[  565.443301][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.448072][    C1]  ? tun_get+0x1c/0x2f0
[  565.452271][    C1]  ? lock_release+0x4b/0x3c0
[  565.456869][    C1]  ? apparmor_file_permission+0x1f4/0x300
[  565.462598][    C1]  ? tun_get+0x1c/0x2f0
[  565.466762][    C1]  tun_chr_write_iter+0x113/0x200
[  565.471795][    C1]  vfs_write+0x612/0xba0
[  565.476067][    C1]  ? __pfx_vfs_write+0x10/0x10
[  565.480854][    C1]  ? __fget_files+0x2a/0x420
[  565.485631][    C1]  ksys_write+0x150/0x270
[  565.490227][    C1]  ? __pfx_ksys_write+0x10/0x10
[  565.495119][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.499990][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.506058][    C1]  do_syscall_64+0x174/0x580
[  565.511104][    C1]  ? trace_irq_disable+0x3b/0x140
[  565.516328][    C1]  ? clear_bhb_loop+0x40/0x90
[  565.521007][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.526902][    C1] RIP: 0033:0x7efc2319ce59
[  565.531322][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.551110][    C1] RSP: 002b:00007efc24007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  565.559680][    C1] RAX: ffffffffffffffda RBX: 00007efc23416090 RCX: 00007efc2319ce59
[  565.567769][    C1] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000005
[  565.575935][    C1] RBP: 00007efc23232e6f R08: 0000000000000000 R09: 0000000000000000
[  565.585177][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.593179][    C1] R13: 00007efc23416128 R14: 00007efc23416090 R15: 00007ffc17a055b8
[  565.601181][    C1]  </TASK>
[  565.604405][    C1] Kernel Offset: disabled
[  565.608732][    C1] Rebooting in 86400 seconds..