last executing test programs:

5.331172925s ago: executing program 1 (id=5540):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB    \x00'}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="2af2b8050753f787e042da4d055d515692e1348ba28632b732b7c5bd"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0xc5)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000002f00010003000000fcdbdf250400f38008001a000600000049acf35cb35df6ab89aa60097b4d5b0118ad1744114d44adc9bf9dd5715f39e353a678ee5d203d11f205dde9df6013abe4176377f2b93d2e137a29c21f9615f4ded77c9d8b957f628bb2fd535bf4309a008a811fb93330bd0d5153da51995e04f892645577d049bdf7f8c38378613c9b99cd94b171e83dcc51656f66f69584a593f239fe50b5a960274261e5c763d9d70ad2760d1e0c085c5b759528bdf3493d96c61eeba32581c73ec4a74937fdb7bcce4b846ca0abe58b02652b7cb1c7b79cca712741374d682ceeb4dc37ebcd2cb1dccd8b38470b"], 0x1c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@const={0xf, 0x0, 0x0, 0xa, 0x3}, @enum={0xf}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x4, 0xdb}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x2}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0xe, 0x5}, {0x1, 0x79e}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @ptr={0x5}, @fwd={0x7}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000000740)=""/254, 0x9a, 0xfe, 0x1, 0xa}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x80108906, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x80000006, 0x0, 0x0, 0x0, 0x9feb}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x56, 0x7, 0x0, 0x401, 0x40}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x0, 0x8, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @sched_cls, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x43, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.893337447s ago: executing program 1 (id=5545):
r0 = socket$inet6(0xa, 0x80002, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r1, 0x110, 0x9, 0x0, &(0x7f0000000280)) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x405, @loopback, 0x1087}, 0x1c) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x78}}, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x263b9ef1)

4.801177517s ago: executing program 1 (id=5546):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x19}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x44094}, 0x8800)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="05030000000000000088ee72d8c5047c0007000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x55, 0xc, "ce55789ab24c4ba698f404520600f1a7dcf14b84721caa18fb7bf3f1bd7969e6fd4c52d91b6b85be2819c7bcd5eb7ec50fc8af480b89ecda983467795c2a2573d8df2e048d35043ab1a816adeeb94d95fa"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44654841}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4c8d020b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13838e70}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23512aa9}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000040)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x26048815}, 0xc000)

4.523118232s ago: executing program 1 (id=5549):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r6, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ad}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x2000c010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delqdisc={0xb8, 0x25, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {0xfff1, 0xf}, {0x0, 0xfff1}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xf, 0x6, 0x1, 0x8, 0x80000001, 0x6}}, {0x10, 0x2, [0xc, 0x2, 0xc37, 0x6fb, 0x9, 0x1]}}, {{0x1c, 0x1, {0x0, 0x9, 0x2, 0xf, 0x0, 0x43, 0x9, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xa5, 0x1, 0xa, 0x10, 0x2, 0x8, 0xffff569b, 0x5}}, {0xe, 0x2, [0x10, 0x5, 0x6, 0x8, 0xf]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94)

4.127831909s ago: executing program 1 (id=5553):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080), 0x8)
socket$nl_route(0x10, 0x3, 0x0)

3.744076836s ago: executing program 1 (id=5556):
socket$key(0xf, 0x3, 0x2)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r0], 0xc4}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r9)
setsockopt$inet_int(r6, 0x29, 0x6, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040005}, 0x100)

3.73134551s ago: executing program 3 (id=5557):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a01"], 0xcc}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x404c881}, 0x2004c0c4)

3.68445971s ago: executing program 4 (id=5558):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x2c}}, 0xc040)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0xf2, 0x4)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
recvmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000080)=@ethernet, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}, 0x40000121)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000005c0))
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES32, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd50}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

3.519231604s ago: executing program 3 (id=5560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x150, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7268}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4014}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xf7e5f9a9a00e00a0}, 0x4000090)

3.196223203s ago: executing program 2 (id=5561):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_emit_ethernet(0x6a, &(0x7f0000002000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000343a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c94400002b0000000000000000000000fe8000000000000000000000000000bbd4a3fb000000000000004aefff5a2e5479c8a071e9d4a7b380260e1f81ddd16a505eb9e0531396327fe301684ffdc297e4530f908586147613fa58ea4e3cac66f38cba72ed710992da25106b2f0bfdd523e45992e2800240cfa95b4470ff0d325f3addf1602b2daad764ac5a16e5e67b86a8d76b3138e764fbc5f7266305c34b1a71a6a929f7e7f2050e0b4c88c23afa6cde009fd4da068cd3d717bbc3db146dd00ed665b50d3f10b1dedea615d6af4bd5078e5ade092dab7876db240184ca05f4dbc512dfa95d"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x2, {0x2, 0xff, 0x1}, 0x2}, 0x18)
bind$can_j1939(r0, &(0x7f0000000540)={0x1d, r2, 0x2, {0x1, 0xff, 0x4}}, 0x18)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0xffffffffffffffff, {0x0, 0x0, 0x3}, 0xfe}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x40)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010009112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c0004"]}, 0x58}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
recvmmsg(r6, &(0x7f0000001e00)=[{{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/206, 0xce}], 0x5, &(0x7f00000007c0)}, 0x1}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/110, 0x6e}, {&(0x7f0000000880)=""/200, 0xc8}], 0x2, &(0x7f00000009c0)=""/234, 0xea}, 0x40}, {{&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b40)=""/199, 0xc7}, {&(0x7f0000000c40)=""/53, 0x35}, {&(0x7f0000000c80)=""/105, 0x69}, {&(0x7f0000000d00)=""/86, 0x56}, {&(0x7f0000000d80)=""/49, 0x31}, {&(0x7f0000000dc0)=""/175, 0xaf}], 0x6}, 0x35e7}, {{&(0x7f0000000f00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f80)=""/254, 0xfe}, {&(0x7f0000001080)=""/83, 0x53}], 0x2, &(0x7f0000001140)=""/149, 0x95}, 0x200}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/14, 0xe}], 0x1, &(0x7f0000001300)=""/95, 0x5f}, 0x81}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/224, 0xe0}, {&(0x7f0000001500)=""/29, 0x1d}, {&(0x7f0000001540)=""/58, 0x3a}, {&(0x7f0000001580)=""/70, 0x46}, {&(0x7f0000001600)=""/80, 0x50}, {&(0x7f0000001680)=""/52, 0x34}], 0x7, &(0x7f0000001740)=""/105, 0x69}, 0x2}, {{&(0x7f00000017c0)=@nl=@proc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001840)=""/153, 0x99}, {&(0x7f0000001900)=""/72, 0x48}, {&(0x7f0000001980)=""/141, 0x8d}, {&(0x7f0000001a40)=""/13, 0xd}, {&(0x7f0000001a80)=""/189, 0xbd}, {&(0x7f0000001b40)=""/131, 0x83}, {&(0x7f0000001c00)=""/99, 0x63}, {&(0x7f0000001c80)=""/117, 0x75}], 0x8, &(0x7f0000001d80)=""/90, 0x5a}, 0x9}], 0x7, 0x102, &(0x7f0000001fc0)={0x0, 0x989680})
sendmsg$nl_route(r7, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@RTM_NEWNSID={0x24, 0x58, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000280)=0x6, 0x4)
writev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)="bb8f891e0ec2260e1e59501f6ca6bd2b5dc051358e41f33b85ce2a5f596837f69a60ccd8f84603aaaa1cd8b2a01ff4cc0b87f69f963fa7fe7ce13d3b57cfd842efec8a2b89ebdc9ec1357dd2c1a2644d0e97b5a2d5a28bb8ecb5458bb5f61dadf87cdbaf8f3f1b95a11bcc85830ee0dcd891976b1df3061f1ea28fe23b3fce389f7b4e393125252ab988ee1f0fc8d311aa1c44c96aa1b1123ffe6b786202137834ec3ffa74952315b137e7810a7e2d24c57fbc9041a73d368901a7af5434ef24d3c43d1dcf1e93c44709a9eb6609593077c4a1594111ef2ff1d4359d9ed67a65ea1c564eb2b9", 0xe6}], 0x1)

3.110149873s ago: executing program 4 (id=5563):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x2, 0x3, 0x7, 0x8, 0x1, 0xffffffffffffffff, 0x30e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001100)={0x1, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0xa, 0x4, 0x930, 0xc, 0x48814, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0x2018, r0}, 0x18)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0x5b, 0x3, 0x1e60, 0x26010, 0x1, 0x500, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1d, 0x1c, &(0x7f0000000640)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @ringbuf_query, @exit], &(0x7f0000000740)='GPL\x00', 0x800, 0x9f, &(0x7f0000000840)=""/159, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x3, 0x5, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000012c0)=[r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000001300)=[{0x3, 0x1, 0x3, 0x1}, {0x4, 0x1, 0xf, 0x1}], 0x10, 0x4}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r11, 0x4000)
setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000080), 0x4)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
connect$inet(r12, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r12, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x1, 0x4000000)
syz_emit_ethernet(0x127, 0x0, 0x0)
write(r12, &(0x7f0000000040)="1c", 0x1)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r15, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x93}]}, 0x64}}, 0x40040)
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000)

2.866217299s ago: executing program 0 (id=5564):
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.764621434s ago: executing program 4 (id=5565):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x74, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0x2}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x76}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000002000000000000000000018180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.658082518s ago: executing program 0 (id=5566):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026c170000400000004000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) (async, rerun: 64)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (rerun: 64)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

2.519295743s ago: executing program 4 (id=5567):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async)
r1 = socket(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r2}, &(0x7f0000001400), &(0x7f0000001440)=r5}, 0x20) (async, rerun: 32)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (async)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090)

2.387623989s ago: executing program 3 (id=5568):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0c000000010001", 0x7) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x48000)

2.067620738s ago: executing program 2 (id=5569):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5}]}, 0x30}}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r2=>0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x6)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x86fb8628f843c40e, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x400c040)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r6 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4080442}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x200, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x40001)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r1)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r10, &(0x7f0000000600)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r7)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc4, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4dd9}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x3, 0x6, 0x0, {0xa67a, 0xb91, 0x0, 0x3b1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x800, 0x0, 0x7}}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_KEYS={0x7c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8ba39358e6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "edf1e9692c903c8cefd728cd50"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f41bab8f9c"}, @NL80211_KEY_IDX={0x5}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008040}, 0x50)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x15)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r7)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r12, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3bab}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r7)
sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd8, r13, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ce2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000001)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001300)={{<r14=>r5, &(0x7f0000000d80)='wlan0\x00', 0x1, &(0x7f0000000dc0)={@_ha_fsid={[0x67, 0x6f]}, {0x3, 0x3, 0x10000}}, 0xe, &(0x7f0000000e00), &(0x7f0000000e40)=0x200}, 0x4, &(0x7f0000001280)=[{0x3, 0xffffffff, &(0x7f0000000e80)='wpan3\x00', &(0x7f0000000ec0)="772955fe40e51dfb9c7ed5ed99f9d288f5c899e4b262c06efc49a40741967e07373fcfdd4a9f862f6de2b4f8057c5984cbbc002de296b6f742cc8d69a6c8db47b178d15e8419003e53a9b1dac921d28b98ff0bc79b73a4cefcb39d4bcad103a59fa7a95f8f820499fdb7604f7fcd2d9bcbccf15b127112581a6cc8b9b9c3b4d64f684f206dbdcf133b23c56d2a10a01aca02ca6879070066e7c51111e9c0a5dd00a172c59191eca9c25898e70db1012a66895abec2cbb0c3cf7fb1e6a2cd5cff6ab5da6dff177fcdd8c38c77571af210ddca0e267d426a8b81280132016f25b0d952ca4f5f5b77ad296ac7980c284201cde276bfee0d11d6", 0xf8, 0x10}, {0x3, 0x80000001, &(0x7f0000000fc0)='syz1\x00', &(0x7f0000001000)="d10bc60e278447f762618b774b17c2ef318809a6a6c6486e549aa508b7747df5f926be22759613efbdf1e95ea225d561d868211d22d2d9662c6d5d4e5bdd821d96f3a5696ceb10716a01b4fc678efc64f4a768292aec9fdc0135541b09ff6a5fdf63d1695abfc29ab66136a62f7667db988217d96ec511e6f0cb7fedc681bb2a8894387831ce0c68640a46da3c7db51dbffd7d3ed550a5d21afccd83596cff5e79678dad5c1ecb96c20de75ff1efb2cdea021f6cf66535cf3222a947df5e4323a81ea1a2c66292a077a62f5d5ca09f0505", 0xd1}, {0x3, 0x1, &(0x7f0000001100)='-%\x00', &(0x7f0000001140)="d5e46dfc19c77d384fbbae450f61f0baa35b3337142c1388d9f0c7a10e5eef13a430c114e1628cc641f0075e23cba604ef94d500a19ccbf8680d7f98659f0d1a3c4cd7afb31fd7e6ed5d8c775fb542f645997e466559679580eb617b7d4d82305d60bfe06f5b57048f6bcebf6b2cf68e659e33d15427f6377c9c31c20e9e019c70329ebf104101dee79b1039380a6121e5cf185a277ce4351c4dd3da9ba7a79de80e4b7a2f278306d046", 0xaa, 0x30}, {0x1, 0x0, &(0x7f0000001200)='wpan3\x00', &(0x7f0000001240)="77e8f88120a437d0621f063557bbae4d9a5b0a9fc0416f80", 0x18, 0x2}]})
sendmsg$NFQNL_MSG_VERDICT(r14, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xcc, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_PAYLOAD={0xa9, 0xa, "1fd30783bff44feb560fa648184405726184af1a02d014c153973c06e327797f63b6440904d22da17d73dae41eb6fa708744a6a10f0e756fe17cf34e8b387d7ed61ebb1584a00e118f70bdd732a20cf0a9426049e8c5fb85c865b79f47c0481ae8ba4002374dc354cdd2abb68523b15c9d386afa2e9d14b9e0d6c95b85402c63cb9d925306638f571adde94b9343587f402342f70a7df29c4278e9123d063a279c0911a64c"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80c1}, 0x40)
r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ppoll(&(0x7f0000001580)=[{r15, 0x90}, {0xffffffffffffffff, 0x1560}, {r7, 0x1000}, {r10, 0x1400}, {r10}, {r10}, {r10, 0xd}, {r7, 0x201c}, {r10, 0x4100}, {r14, 0x1200}], 0xa, &(0x7f0000001640), &(0x7f0000001680)={[0x4]}, 0x8)

1.922270953s ago: executing program 4 (id=5570):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', <r0=>0x0, 0x8000, 0x20, 0x5, 0x9, {{0x18, 0x4, 0x0, 0x1c, 0x60, 0x67, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@generic={0x44, 0xd, "b52bbc20a2f036edbcd3eb"}, @ssrr={0x89, 0x17, 0xef, [@loopback, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, @local, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x5f, 0x1, 0x8, [{@rand_addr=0x64010101, 0x7}, {@empty}, {@private=0xa010100, 0x9}, {@multicast1, 0x2}]}]}}}}})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001840)={&(0x7f00000015c0)={0x264, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x23, 0x40, 0xe, 0x8, {0x4e24, 0x4e20, [0x8, 0x3, 0x153, 0x3], [0x9, 0xc, 0x100, 0x6], r0, [0x800, 0x4]}, 0xa, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "f56eeb6fd220944e595d68cf6846a9a39952535e7548a68aaf8ebf2dccb6db17aa929c17eaee60ddb6659082faeac27c8b20147ce6de04543a2350434ed2dcfa2c9d17b0b24b9da1addd62f0dd3a1b97c4757aab98fbcc7ff2fe82c1a0018dd60625a06f17d605ea1a4587b16cec9a2e21beae6690d0bdf61d60ba5fa9b19d6f4e6681a24356fb7fbae0602f24d5059ecf4336f906cea601a73f0efe95bfa0cd060b4a12a31d01162241cd8aa0312c8ce9bdb0a2a256a21f9d73b6a67cf034a32296462b692e4d44cbaa233471eac69c4f12300989124ebd8fedfb261741018ed55d662f10d65d4ff9bac46d84be"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "935c277a7bfefbd3791d5a60bcdf1fc79c1add225d62352bc0d498b5f200ba6f0ae76530fa6c08e17afd44125f96dd56135725528afda5cc651adbfc787d3cc5b8cf441dc316c8ca14"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "e54e20aba9072bf6a199fc6254ab5624d55a7b9a32be6cd09e34acc7acdf38f138b60c6f57384a8cfedcfecc2e88f03d2d4afc211c16ae1ea61b26d724b1e1ad3aca40abb84710d2435e64954ea844cb5e3b28c8d4857c0fef3a588f010f0e7d1e2667d49a4e629d681e3fefcbcd14e2c54c6d55603c1b0486d159377730e72747846a0c3a5bad06ca3d11b2c741bf58a7b6ca3680545855bb69de1f909df8478641c2f97f644418b846b932387c923051251ba16586b313fcfb3fd8a291a34c81a5be30a4cf10fcfa17313fe7"}]}, 0x264}}, 0xc040) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000180), 0x2) (async)
recvmmsg(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000005c0)=""/4067, 0xfe3}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100, 0x0)

1.607275717s ago: executing program 0 (id=5571):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
vmsplice(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="fc22416ad26e07df22d87e8eb66fd15c67745a903708289a30a5e9d86093ef3e413e15e95dede3bab275158000684862046c26563c463f20650f085e379541888c3c8665979526bd568a3ca64617a7392c46aefd95d538b6c6d63eaaffb2a983b31df36140d6491554d0b09178ada9c7e6478c0fe7ffa74a34973ebf33d5fa5422847e871fc37e9e24787b54aab99248208ddc00c5fc8a940e02cb5f8990f9510c41b04f42ccc263984db048984a7cf3d64e34d630c8ba151aa54c5aa355391ae5865e3528f18aef62495b89be6e3b722ca2b330bdab9899fbd175", 0xdb}, {&(0x7f0000000280)="6af3c382565921c3ca7fd4ee3a7210dbb2c1bade638390399193ee84c762a08e76c4a7f4155849de2744a687756be06555e5cf7b2880b7c42fa35e6001f81c76a0139ffdaf59c601f2e576e11679e9da6710c5656eb6aa48da6a0a7023519100af08af43eafc53c06380f0e43a68ce923b2e43b9f51314ed01c1385227840318", 0x80}, {&(0x7f0000000300)="926a8ae1c928efcea3c59dcfec0547afcd6d18d014efab03441c738fb960daea7e98610cd1eaef86bf70ad23be26c3ba2fc9d9781b0634aa1c56a84e9ad25ef5c641efa2560f586557593634a94d3f75f750835caadde764b57db817eef4d7f6673775226ea57c7259f961b775132ae5d0b19616336b464688ffee713c6e71920cc03e47e02658a4fe", 0x89}, {&(0x7f00000003c0)="7b831bf5f11b2e03691e2f3ca01ad38696e4666c8d97abb5291692bd0cd4b88bd7ef4cdf0c424bf47ac341d50ec873a8d628ec649bb1d879315916700eab40ef70dd0da457226655b048c7794968a4babf7d2b1822c33f9b3166dca3c0f1775f527d8897db6863d22594069cc29d08c8876e37518424c8811bcc2399b6e1def3d474da90e323a29309645895b87c2630bf2a4786c4b6cb06b3cea12019c41cdbd81b644711d4d4a74bf14ffe8f1da842", 0xb0}], 0x4, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r1, &(0x7f00000002c0)="7400000030000506000000000000000000000000600001005c0001000900010067617465000000004f00020018000200000000000000000000000000000000002f0005002b0001000500020000000000080003006400000000", 0x74, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
getpid()
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x7, 0x4)
close(r4)
r6 = socket(0x200000000000011, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000580)={'security\x00', 0x0, [0x5917ccf6, 0xfff, 0x5, 0x5, 0xfffffffb]}, &(0x7f0000000600)=0x54)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=r7, @ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x4048031}, 0x4048084)

1.488681129s ago: executing program 4 (id=5572):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$netlink(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
socket$netlink(0x10, 0x3, 0x6) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

1.293557038s ago: executing program 2 (id=5573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b36, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x88890)

1.108497541s ago: executing program 3 (id=5574):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r4=>0x0, 0x55, "99ca726ace8215259fc93c021b755577ad0afd294ba5a1573a114dda816328fc357cdde7e6d07ea1d8533bb07dd86c4e37399ea0388cbcad1b26472cef90a67bcad282686095feaab192cbd13494f5c0e561977c5d"}, &(0x7f00000000c0)=0x5d)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x2, 0xc7}, &(0x7f0000000140)=0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

848.17852ms ago: executing program 2 (id=5575):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000075b5b88d1757db90057f8acc0d5166e5ba781a6a14ad3a1e33991d76f10d5d13c373219dfbec4c98125c96a82bf883e32b8c7ba93d7dc93badf32c1e49b33fbac90d4043262b856f16b5d7884cb6b23d160d3f", @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0})
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x268, 0x0, 0x5, 0x601, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{}, 0x40, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', '\x00', '\x00', [{0x0, 0x0, {0x1}}, {}, {}, {}, {0xfffe, 0x0, {0x0, 0x1000000}}, {}, {}, {}, {0x0, 0x0, {0x1}}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x20}, {}, {}, {0x28b1}, {}, {}, {}, {}, {0x0, 0x0, {0x1}}, {0x3, 0x4004}, {}, {}, {0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x28}]}}}]}, 0x268}}, 0x0)

797.304322ms ago: executing program 0 (id=5576):
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x1, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

623.303605ms ago: executing program 3 (id=5577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x74, 0x24, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {}, {0x3, 0x2}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x76}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000003000000000000000000018180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

381.282193ms ago: executing program 2 (id=5578):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000055bce1495a6cb18d00000000005b0000f3ac3b52de2b4f5d91044653884e3a1f2d0e3e3a950000727b2d0e1668715e7c0c8d39e5fb6a61d4539629f1b77b466edc381311b3f5bbd16f4ca9f9d40454ef5ed6b0727626287529d81a8b28a38074e420"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

370.599464ms ago: executing program 0 (id=5579):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000000)) (async)
r2 = gettid() (async)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x10, 0x5, 0xd4a) (async, rerun: 64)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x48) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c042000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r2, @ANYBLOB="cbbdb7949d65b6ed0d3e189bc5b88b704548439c7ba8ad793411fdfddbbdd6e2daebf7"], 0x3c}}, 0x0)

272.670693ms ago: executing program 3 (id=5580):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="4c00000011000e14000300020010010002000000200000", 0x17)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r3, &(0x7f0000000000)="4c00000011000e14000300020010010002000000200000", 0x17) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async)

239.90029ms ago: executing program 2 (id=5581):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fccfdf250e00000000080001000100000000000000000000000a5a5db93f622fd7df666ab32e7470e44b4a55fa9a7cb4ec09b26cf0c329bcf76f105666392ceb81ae05ea317e54"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r3=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0)
bind$alg(r4, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa", 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c204"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b15, &(0x7f0000000000)={'wlan0\x00'})
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000004c0)={&(0x7f0000000200), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x12c, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f7f56c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd13c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fa8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x446a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ed2479c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1267c556}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f2061b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72b1e0da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd32a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9700}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd554}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0f4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa089}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc397}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd3a9f21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80000}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaed1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d88}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x625e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5467748c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a92c5f6}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040001}, 0x44000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000fffeffff000000000000d6000100250000008510f0ff00000000950000000000000018400000020000000000000000000000950000ed000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)

0s ago: executing program 0 (id=5582):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40d0)

kernel console output (not intermixed with test programs):

X: ffffffffffffffda RBX: 00007fb295425fa0 RCX: 00007fb29519e0d9
[  412.123568][T18134] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000005
[  412.123579][T18134] RBP: 00007fb296075090 R08: 0000000000000000 R09: 0000000000000000
[  412.123590][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.123600][T18134] R13: 00007fb295426038 R14: 00007fb295425fa0 R15: 00007ffcd43461b8
[  412.123627][T18134]  </TASK>
[  412.746726][T18154] team0: Device gtp0 is of different type
[  413.280109][T18167] xt_limit: Overflow, try lower: 536871034/127
[  413.317023][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3516'.
[  413.374694][T18170] lo: entered promiscuous mode
[  413.406276][T18170] lo: entered allmulticast mode
[  413.429773][T18175] FAULT_INJECTION: forcing a failure.
[  413.429773][T18175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.478036][T18175] CPU: 0 UID: 0 PID: 18175 Comm: syz.0.3520 Not tainted syzkaller #0 PREEMPT(full) 
[  413.478063][T18175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  413.478074][T18175] Call Trace:
[  413.478082][T18175]  <TASK>
[  413.478091][T18175]  dump_stack_lvl+0xe8/0x150
[  413.478128][T18175]  should_fail_ex+0x410/0x560
[  413.478165][T18175]  _copy_from_iter+0x1d3/0x1660
[  413.478226][T18175]  ? kmem_cache_alloc_node_noprof+0x1c1/0x620
[  413.478254][T18175]  ? rcu_is_watching+0x16/0xb0
[  413.478276][T18175]  ? trace_kmem_cache_alloc+0x29/0xe0
[  413.478302][T18175]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  413.478327][T18175]  ? __pfx__copy_from_iter+0x10/0x10
[  413.478357][T18175]  ? __alloc_skb+0x27a/0x7a0
[  413.478381][T18175]  ? __alloc_skb+0x27a/0x7a0
[  413.478414][T18175]  ? netlink_sendmsg+0x650/0xb40
[  413.478436][T18175]  ? skb_put+0x112/0x210
[  413.478474][T18175]  netlink_sendmsg+0x6c0/0xb40
[  413.478506][T18175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.478534][T18175]  ? aa_sock_msg_perm+0xf6/0x1c0
[  413.478574][T18175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.478596][T18175]  sock_sendmsg_nosec+0x13a/0x180
[  413.478625][T18175]  ____sys_sendmsg+0x54e/0x850
[  413.478664][T18175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.478706][T18175]  ? import_iovec+0x73/0xa0
[  413.478733][T18175]  ___sys_sendmsg+0x2a5/0x360
[  413.478766][T18175]  ? __lock_acquire+0x683/0x2cf0
[  413.478803][T18175]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.478873][T18175]  ? __fget_files+0x2a/0x420
[  413.478900][T18175]  ? __fget_files+0x3a2/0x420
[  413.478941][T18175]  __x64_sys_sendmsg+0x1b1/0x290
[  413.478979][T18175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.479035][T18175]  do_syscall_64+0x166/0x520
[  413.479063][T18175]  ? trace_irq_disable+0x3b/0x140
[  413.479092][T18175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.479115][T18175]  ? clear_bhb_loop+0x70/0xc0
[  413.479142][T18175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.479165][T18175] RIP: 0033:0x7f4aafb9e0d9
[  413.479185][T18175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.479214][T18175] RSP: 002b:00007f4ab09a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.479237][T18175] RAX: ffffffffffffffda RBX: 00007f4aafe25fa0 RCX: 00007f4aafb9e0d9
[  413.479254][T18175] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000005
[  413.479268][T18175] RBP: 00007f4ab09a5090 R08: 0000000000000000 R09: 0000000000000000
[  413.479281][T18175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.479295][T18175] R13: 00007f4aafe26038 R14: 00007f4aafe25fa0 R15: 00007ffd310a1068
[  413.479329][T18175]  </TASK>
[  414.125582][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3523'.
[  414.221159][T18194] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  414.370070][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'.
[  415.328146][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'.
[  415.489457][T18217] bond2: entered promiscuous mode
[  415.559937][T18217] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.649200][T18234] netlink: 'syz.4.3532': attribute type 1 has an invalid length.
[  415.684032][T18235] FAULT_INJECTION: forcing a failure.
[  415.684032][T18235] name failslab, interval 1, probability 0, space 0, times 0
[  415.697936][T18234] netlink: 'syz.4.3532': attribute type 7 has an invalid length.
[  415.714532][T18231] 8021q: adding VLAN 0 to HW filter on device bond2
[  415.729469][T18234] netlink: 'syz.4.3532': attribute type 8 has an invalid length.
[  415.747784][T18235] CPU: 0 UID: 0 PID: 18235 Comm: syz.0.3533 Not tainted syzkaller #0 PREEMPT(full) 
[  415.747817][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  415.747830][T18235] Call Trace:
[  415.747839][T18235]  <TASK>
[  415.747848][T18235]  dump_stack_lvl+0xe8/0x150
[  415.747885][T18235]  should_fail_ex+0x410/0x560
[  415.747921][T18235]  should_failslab+0xa8/0x100
[  415.747965][T18235]  __kmalloc_cache_noprof+0xa8/0x660
[  415.747998][T18235]  ? rtnl_newlink+0x143/0x1c30
[  415.748027][T18235]  ? rtnl_newlink+0x143/0x1c30
[  415.748066][T18235]  rtnl_newlink+0x143/0x1c30
[  415.748105][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.748146][T18235]  ? __pfx_rtnl_newlink+0x10/0x10
[  415.748178][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.748217][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.748257][T18235]  ? is_bpf_text_address+0x26/0x2b0
[  415.748294][T18235]  ? unwind_next_frame+0x8f/0x2550
[  415.748323][T18235]  ? is_bpf_text_address+0x26/0x2b0
[  415.748368][T18235]  ? is_bpf_text_address+0x26/0x2b0
[  415.748407][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.748449][T18235]  ? kernel_text_address+0xa5/0xe0
[  415.748471][T18235]  ? __kernel_text_address+0xd/0x30
[  415.748491][T18235]  ? unwind_get_return_address+0x4d/0x90
[  415.748511][T18235]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  415.748539][T18235]  ? arch_stack_walk+0xfb/0x150
[  415.748571][T18235]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  415.748602][T18235]  ? __pfx_rtnl_newlink+0x10/0x10
[  415.748643][T18235]  ? __pfx_rtnl_newlink+0x10/0x10
[  415.748672][T18235]  rtnetlink_rcv_msg+0x802/0xc00
[  415.748701][T18235]  ? netlink_sendmsg+0x5d4/0xb40
[  415.748736][T18235]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  415.748765][T18235]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  415.748804][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.748849][T18235]  netlink_rcv_skb+0x226/0x4a0
[  415.748872][T18235]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  415.748904][T18235]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  415.748939][T18235]  ? netlink_deliver_tap+0x2e/0x1b0
[  415.748960][T18235]  ? netlink_deliver_tap+0x2e/0x1b0
[  415.748989][T18235]  netlink_unicast+0x7bd/0x940
[  415.749033][T18235]  netlink_sendmsg+0x813/0xb40
[  415.749074][T18235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  415.749108][T18235]  ? aa_sock_msg_perm+0xf6/0x1c0
[  415.749150][T18235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  415.749172][T18235]  sock_sendmsg_nosec+0x13a/0x180
[  415.749210][T18235]  ____sys_sendmsg+0x54e/0x850
[  415.749249][T18235]  ? __pfx_____sys_sendmsg+0x10/0x10
[  415.749293][T18235]  ? import_iovec+0x73/0xa0
[  415.749319][T18235]  ___sys_sendmsg+0x2a5/0x360
[  415.749357][T18235]  ? __lock_acquire+0x683/0x2cf0
[  415.749398][T18235]  ? __pfx____sys_sendmsg+0x10/0x10
[  415.749479][T18235]  ? __fget_files+0x2a/0x420
[  415.749513][T18235]  ? __fget_files+0x3a2/0x420
[  415.749554][T18235]  __x64_sys_sendmsg+0x1b1/0x290
[  415.749591][T18235]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  415.749647][T18235]  do_syscall_64+0x166/0x520
[  415.749675][T18235]  ? trace_irq_disable+0x3b/0x140
[  415.749704][T18235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.749727][T18235]  ? clear_bhb_loop+0x70/0xc0
[  415.749754][T18235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.749777][T18235] RIP: 0033:0x7f4aafb9e0d9
[  415.749798][T18235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.749817][T18235] RSP: 002b:00007f4ab09a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.749841][T18235] RAX: ffffffffffffffda RBX: 00007f4aafe25fa0 RCX: 00007f4aafb9e0d9
[  415.749857][T18235] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000005
[  415.749871][T18235] RBP: 00007f4ab09a5090 R08: 0000000000000000 R09: 0000000000000000
[  415.749885][T18235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.749897][T18235] R13: 00007f4aafe26038 R14: 00007f4aafe25fa0 R15: 00007ffd310a1068
[  415.749932][T18235]  </TASK>
[  415.782786][T18231] bond2: (slave sit1): The slave device specified does not support setting the MAC address
[  415.854951][T18234] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3532'.
[  415.921611][T18231] bond2: (slave sit1): Error -95 calling set_mac_address
[  416.117550][T18234] NCSI netlink: No device for ifindex 65584
[  416.173295][   T77] wlan0: Trigger new scan to find an IBSS to join
[  416.332342][T18230] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  416.799439][T18257] netlink: 'syz.1.3540': attribute type 3 has an invalid length.
[  416.854067][T18256] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  417.693335][T18273] batadv_slave_1: entered promiscuous mode
[  417.961800][T18272] batadv_slave_1: left promiscuous mode
[  418.200901][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3549'.
[  418.233733][T18281] bridge_slave_1: left allmulticast mode
[  418.249391][T18281] bridge_slave_1: left promiscuous mode
[  418.270483][T18281] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.306024][T18281] bridge_slave_0: left allmulticast mode
[  418.327710][T18281] bridge_slave_0: left promiscuous mode
[  418.348130][T18281] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.453988][ T8367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.592632][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'.
[  420.550706][T18341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3567'.
[  420.608561][T18340] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  420.653129][T18344] ip6erspan0: entered allmulticast mode
[  420.867564][T18341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3567'.
[  421.209432][T18358] netlink: 'syz.2.3572': attribute type 10 has an invalid length.
[  421.500433][T18356] syzkaller1: entered promiscuous mode
[  421.534366][T18356] syzkaller1: entered allmulticast mode
[  421.616374][T18362] netlink: 'syz.3.3573': attribute type 1 has an invalid length.
[  422.149191][T18364] bond2: (slave veth5): Enslaving as an active interface with a down link
[  422.673987][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'.
[  422.687821][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'.
[  423.227625][T18407] Cannot find add_set index 0 as target
[  423.410730][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3586'.
[  423.704639][ T5632] block nbd1: Receive control failed (result -32)
[  423.862715][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'.
[  423.905280][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'.
[  424.011910][T18426] bridge0: port 3(veth0) entered blocking state
[  424.052984][T18426] bridge0: port 3(veth0) entered disabled state
[  424.068957][T18426] veth0: entered allmulticast mode
[  424.089634][T18426] veth0: entered promiscuous mode
[  425.028402][T18461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3599'.
[  425.486166][T18475] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  425.542246][T18475] batman_adv: batadv0: Adding interface: wlan0
[  425.639858][T18475] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.792807][T18475] batman_adv: batadv0: Interface activated: wlan0
[  425.837914][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'.
[  426.015328][T18483] netlink: 'syz.1.3606': attribute type 2 has an invalid length.
[  426.139041][T18488] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3607'.
[  426.222464][T18459] openvswitch: netlink: Message has 8 unknown bytes.
[  427.105817][T18513] syzkaller0: entered promiscuous mode
[  427.138118][T18513] syzkaller0: entered allmulticast mode
[  427.557540][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3616'.
[  427.742562][T18527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3618'.
[  427.771002][T18528] netlink: 'syz.3.3619': attribute type 13 has an invalid length.
[  427.900079][T18528] netlink: 'syz.3.3619': attribute type 17 has an invalid length.
[  428.237113][T18505] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.263780][T18505] 8021q: adding VLAN 0 to HW filter on device team0
[  428.300026][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.436238][T18505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.458942][T18505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.492924][T18505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  428.531369][T18505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  428.570814][T18505] veth1_vlan: left promiscuous mode
[  428.595198][T18505] veth0_vlan: left promiscuous mode
[  428.612887][T18505] veth0_vlan: entered promiscuous mode
[  428.634882][T18505] veth1_vlan: entered promiscuous mode
[  428.677815][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.706438][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  428.726754][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  428.755493][T18505] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  428.869101][T18505] 8021q: adding VLAN 0 to HW filter on device bond1
[  428.894598][T18505] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  428.920148][T18505] veth3: left promiscuous mode
[  428.936147][T18505] 8021q: adding VLAN 0 to HW filter on device bond2
[  429.115483][T18528] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.138934][T18528] 8021q: adding VLAN 0 to HW filter on device team0
[  429.189085][T18528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.309552][T18528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.334073][T18528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.379751][T18528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  429.464370][T18528] veth1_vlan: left promiscuous mode
[  429.490289][T18528] veth0_vlan: left promiscuous mode
[  429.512306][T18528] veth0_vlan: entered promiscuous mode
[  429.543984][T18528] veth1_vlan: entered promiscuous mode
[  429.604038][T18528] veth0_macvtap: left promiscuous mode
[  429.626156][T18528] veth0_macvtap: entered promiscuous mode
[  429.670651][T18528] veth1_macvtap: entered promiscuous mode
[  429.720919][T18528] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  429.760902][T18528] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  429.799198][T18528] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  429.835958][T18528] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  429.852504][T18528] mac80211_hwsim hwsim28 wlan0: left promiscuous mode
[  429.885379][T18528] 8021q: adding VLAN 0 to HW filter on device batadv1
[  429.913892][T18528] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.952423][T18528] 8021q: adding VLAN 0 to HW filter on device bond2
[  430.047670][T14514] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  430.093132][T14514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.124701][T14514] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 39344 - 0
[  430.144262][T14514] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  430.169355][T14514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.190524][T14514] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 39344 - 0
[  430.212142][T18537] syzkaller0: entered promiscuous mode
[  430.230089][T18537] syzkaller0: entered allmulticast mode
[  430.253167][ T8333] team_slave_0: entered promiscuous mode
[  430.260437][ T8333] team_slave_1: entered promiscuous mode
[  430.384023][T18549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3624'.
[  430.564710][   T77] bridge0: port 3(veth0) entered blocking state
[  430.571170][   T77] bridge0: port 3(veth0) entered forwarding state
[  430.624805][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.632093][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.703442][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.710703][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.770288][T18562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3626'.
[  431.071371][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.078979][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.158627][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.166041][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.356074][ T8380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.383041][ T8380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.509571][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3629'.
[  431.666078][   T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  431.715979][   T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.765375][   T77] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 39344 - 0
[  431.909980][T18578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.960124][   T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.999000][   T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.297060][ T8367] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  432.346323][ T8367] bond2: (slave veth5): making interface the new active one
[  432.412475][ T8367] bond2: active interface up!
[  432.435332][ T8388] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  432.465162][ T8388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.540254][ T8388] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 39344 - 0
[  433.672083][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'.
[  434.407115][T18653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3653'.
[  434.462074][T18657] netlink: 'syz.4.3654': attribute type 2 has an invalid length.
[  434.703425][T18657] : entered promiscuous mode
[  434.885973][T18660] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3655'.
[  435.147662][T18673] FAULT_INJECTION: forcing a failure.
[  435.147662][T18673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.198744][T18673] CPU: 0 UID: 0 PID: 18673 Comm: syz.2.3657 Not tainted syzkaller #0 PREEMPT(full) 
[  435.198778][T18673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  435.198794][T18673] Call Trace:
[  435.198804][T18673]  <TASK>
[  435.198814][T18673]  dump_stack_lvl+0xe8/0x150
[  435.198854][T18673]  should_fail_ex+0x410/0x560
[  435.198905][T18673]  _copy_from_iter+0x1d3/0x1660
[  435.198951][T18673]  ? _copy_from_iter+0x21b/0x1660
[  435.198990][T18673]  ? __pfx__copy_from_iter+0x10/0x10
[  435.199037][T18673]  ? __pfx__copy_from_iter+0x10/0x10
[  435.199085][T18673]  copy_page_from_iter+0x219/0x2d0
[  435.199128][T18673]  skb_copy_datagram_from_iter+0x2f4/0x720
[  435.199168][T18673]  tun_get_user+0xc7f/0x44d0
[  435.199229][T18673]  ? aa_file_perm+0x4ed/0x15f0
[  435.199255][T18673]  ? __pfx_tun_get_user+0x10/0x10
[  435.199291][T18673]  ? __lock_acquire+0x683/0x2cf0
[  435.199330][T18673]  ? kstrtoull+0x12f/0x1d0
[  435.199372][T18673]  ? ref_tracker_alloc+0x341/0x4b0
[  435.199395][T18673]  ? get_pid_task+0x20/0x1f0
[  435.199431][T18673]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  435.199458][T18673]  ? tun_get+0x1c/0x2f0
[  435.199491][T18673]  ? tun_get+0x1c/0x2f0
[  435.199530][T18673]  ? tun_get+0x1c/0x2f0
[  435.199562][T18673]  ? tun_get+0x1c/0x2f0
[  435.199606][T18673]  tun_chr_write_iter+0x113/0x200
[  435.199643][T18673]  vfs_write+0x612/0xba0
[  435.199687][T18673]  ? __pfx_vfs_write+0x10/0x10
[  435.199731][T18673]  ? __fget_files+0x2a/0x420
[  435.199776][T18673]  ksys_write+0x150/0x270
[  435.199815][T18673]  ? __pfx_ksys_write+0x10/0x10
[  435.199863][T18673]  do_syscall_64+0x166/0x520
[  435.199899][T18673]  ? trace_irq_disable+0x3b/0x140
[  435.199929][T18673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.199952][T18673]  ? clear_bhb_loop+0x70/0xc0
[  435.199980][T18673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.200002][T18673] RIP: 0033:0x7f148775e90e
[  435.200023][T18673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  435.200041][T18673] RSP: 002b:00007f1488621fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  435.200065][T18673] RAX: ffffffffffffffda RBX: 00007f14886226c0 RCX: 00007f148775e90e
[  435.200082][T18673] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8
[  435.200097][T18673] RBP: 00007f1488622090 R08: 0000000000000000 R09: 0000000000000000
[  435.200111][T18673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  435.200124][T18673] R13: 00007f1487a26128 R14: 00007f1487a26090 R15: 00007fff1a23b798
[  435.200161][T18673]  </TASK>
[  435.207426][T18674] netlink: 'syz.1.3659': attribute type 5 has an invalid length.
[  435.514170][T18674] netlink: 'syz.1.3659': attribute type 9 has an invalid length.
[  435.528841][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3659'.
[  436.502692][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'.
[  437.158778][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'.
[  437.439371][T18713] syzkaller1: entered promiscuous mode
[  437.511475][T18713] syzkaller1: entered allmulticast mode
[  437.519975][T18723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3672'.
[  437.625209][T18726] netlink: 'syz.3.3672': attribute type 1 has an invalid length.
[  437.651076][T18726] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3672'.
[  437.698980][T18728] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3674'.
[  438.573822][T18720] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.581730][T18720] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.619879][T18738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3677'.
[  439.826194][T18720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.909616][T18720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  440.884535][T18737] netlink: 'syz.0.3677': attribute type 4 has an invalid length.
[  440.965846][ T8380] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.016885][ T8380] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.075361][ T8380] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.309974][T18744] bond1: (slave vlan2): Opening slave failed
[  441.466975][ T8380] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.994983][T18775] netlink: 'syz.3.3687': attribute type 1 has an invalid length.
[  442.055224][T18775] netlink: 'syz.3.3687': attribute type 2 has an invalid length.
[  442.118331][T18777] netlink: 'syz.3.3687': attribute type 1 has an invalid length.
[  442.191757][T18777] netlink: 'syz.3.3687': attribute type 2 has an invalid length.
[  442.554514][T18793] netlink: 'syz.1.3691': attribute type 4 has an invalid length.
[  442.623119][T18793] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3691'.
[  442.656942][T18801] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3691'.
[  442.738854][T18802] Cannot find add_set index 65532 as target
[  442.799112][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3694'.
[  442.830466][T18804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3694'.
[  443.013193][T18813] xt_hashlimit: size too large, truncated to 1048576
[  443.027654][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3697'.
[  443.403958][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3700'.
[  443.670737][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805621fc00: rx timeout, send abort
[  444.170998][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805621f000: rx timeout, send abort
[  444.179531][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805621fc00: abort rx timeout. Force session deactivation
[  444.679436][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805621f000: abort rx timeout. Force session deactivation
[  445.184479][T18786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  445.555062][T18832] netlink: 'syz.4.3703': attribute type 83 has an invalid length.
[  445.579199][ T8367] pim6reg: left allmulticast mode
[  445.611476][ T8367] pimreg3: left allmulticast mode
[  445.626310][T18832] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3703'.
[  445.859470][T18843] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3705'.
[  445.899148][T18843] unsupported nlmsg_type 40
[  446.142644][ T8367] erspan0 (unregistering): left promiscuous mode
[  446.203573][ T8367] gretap0 (unregistering): left promiscuous mode
[  446.292045][ T8367] batman_adv: batadv0: Removing interface: gretap1
[  446.451779][ T8367] bond3 (unregistering): (slave geneve3): Releasing active interface
[  447.127837][T18872] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  447.322384][ T8367] 
 (unregistering): Released all slaves
[  447.393798][ T8367] bond1 (unregistering): (slave veth5): Releasing active interface
[  447.410928][ T8367] batadv1: entered promiscuous mode
[  447.436144][ T8367] bond1 (unregistering): (slave batadv1): Releasing active interface
[  447.451908][ T8367] bond1 (unregistering): (slave veth7): Releasing active interface
[  447.462775][ T8367] bond1 (unregistering): Released all slaves
[  447.502245][ T8367] bond0 (unregistering): (slave bond2): Releasing backup interface
[  447.512531][ T8367] bond0 (unregistering): (slave bond4): Releasing backup interface
[  447.521918][ T8367] bond0 (unregistering): Released all slaves
[  447.563620][ T8367] bond2 (unregistering): Released all slaves
[  447.632470][ T8367] bond3 (unregistering): Released all slaves
[  447.700782][ T8367] bond4 (unregistering): Released all slaves
[  447.774286][ T8367] bond5 (unregistering): Released all slaves
[  447.857854][T18839] syzkaller1: entered promiscuous mode
[  447.863836][T18839] syzkaller1: entered allmulticast mode
[  448.120984][T18895] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3712'.
[  448.285437][T18893] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  448.431044][ T8367] : left promiscuous mode
[  448.651989][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3716'.
[  448.772769][ T8367] tipc: Disabling bearer <udp:syz1>
[  448.785735][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'.
[  448.797578][ T8367] tipc: Left network mode
[  448.865088][T18914] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 !
[  449.003104][T18913] lo: left promiscuous mode
[  449.040162][T18913] lo: left allmulticast mode
[  449.520365][T18930] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000
[  449.705559][ T8367] hsr_slave_0: left promiscuous mode
[  449.789435][ T8367] hsr_slave_1: left promiscuous mode
[  449.930489][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'.
[  449.968289][T18948] Bluetooth: MGMT ver 1.23
[  450.001104][T18948] Bluetooth: hci0: unsupported parameter 5161
[  450.064237][T18948] Bluetooth: hci0: invalid len left 10, exp >= 35
[  451.096512][ T8380] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  451.539126][ T8367] team0 (unregistering): Port device dummy0 removed
[  451.597184][T18956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3730'.
[  451.623524][T18956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3730'.
[  452.097176][T18991] syzkaller0: entered promiscuous mode
[  452.124985][T18991] syzkaller0: entered allmulticast mode
[  453.673090][T19025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3747'.
[  454.420452][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'.
[  454.498400][T19048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3753'.
[  454.527374][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3754'.
[  455.040173][T19078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3760'.
[  455.549298][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3765'.
[  456.362044][T19123] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3768'.
[  456.642258][T19128] lo: entered promiscuous mode
[  456.693967][T19140] netlink: 'syz.3.3772': attribute type 2 has an invalid length.
[  456.710890][T19128] lo: left promiscuous mode
[  457.767345][T19179] IPVS: set_ctl: invalid protocol: 1 100.1.1.5:20004
[  458.724951][T19206] netlink: 'syz.3.3789': attribute type 3 has an invalid length.
[  458.763959][T19206] netlink: 'syz.3.3789': attribute type 1 has an invalid length.
[  458.832693][T19206] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3789'.
[  458.973150][T19207] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[  459.042382][T19207] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3791'.
[  459.190783][T19207] netlink: 'syz.2.3791': attribute type 2 has an invalid length.
[  459.234086][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'.
[  459.652868][T19245] x_tables: duplicate underflow at hook 1
[  460.571060][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'.
[  460.641964][T19276] netlink: 'syz.2.3810': attribute type 21 has an invalid length.
[  460.661942][T19279] x_tables: duplicate entry at hook 3
[  460.799347][T19276] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  460.813144][T19276] bond2 (unregistering): Released all slaves
[  460.921938][T19288] netlink: 'syz.4.3812': attribute type 1 has an invalid length.
[  460.951676][T19288] nbd: error processing sock list
[  461.169378][T19304] FAULT_INJECTION: forcing a failure.
[  461.169378][T19304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.249326][T19304] CPU: 1 UID: 0 PID: 19304 Comm: syz.3.3816 Not tainted syzkaller #0 PREEMPT(full) 
[  461.249367][T19304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  461.249380][T19304] Call Trace:
[  461.249389][T19304]  <TASK>
[  461.249398][T19304]  dump_stack_lvl+0xe8/0x150
[  461.249437][T19304]  should_fail_ex+0x410/0x560
[  461.249484][T19304]  _copy_from_user+0x2d/0xb0
[  461.249515][T19304]  sock_do_ioctl+0x195/0x320
[  461.249545][T19304]  ? __pfx_sock_do_ioctl+0x10/0x10
[  461.249568][T19304]  ? hook_file_ioctl+0x1f0/0x5f0
[  461.249619][T19304]  sock_ioctl+0x57a/0x7e0
[  461.249646][T19304]  ? __pfx_sock_ioctl+0x10/0x10
[  461.249676][T19304]  ? __fget_files+0x2a/0x420
[  461.249707][T19304]  ? __fget_files+0x3a2/0x420
[  461.249736][T19304]  ? __fget_files+0x2a/0x420
[  461.249770][T19304]  ? bpf_lsm_file_ioctl+0x9/0x20
[  461.249796][T19304]  ? __pfx_sock_ioctl+0x10/0x10
[  461.249820][T19304]  __se_sys_ioctl+0xfc/0x170
[  461.249850][T19304]  do_syscall_64+0x166/0x520
[  461.249877][T19304]  ? trace_irq_disable+0x3b/0x140
[  461.249906][T19304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.249929][T19304]  ? clear_bhb_loop+0x70/0xc0
[  461.249956][T19304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.249979][T19304] RIP: 0033:0x7f858ab9e0d9
[  461.250001][T19304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.250021][T19304] RSP: 002b:00007f858baf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  461.250045][T19304] RAX: ffffffffffffffda RBX: 00007f858ae25fa0 RCX: 00007f858ab9e0d9
[  461.250061][T19304] RDX: 0000200000001b80 RSI: 0000000000008946 RDI: 0000000000000003
[  461.250076][T19304] RBP: 00007f858baf6090 R08: 0000000000000000 R09: 0000000000000000
[  461.250090][T19304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.250110][T19304] R13: 00007f858ae26038 R14: 00007f858ae25fa0 R15: 00007ffdb1e771f8
[  461.250146][T19304]  </TASK>
[  461.907233][T19319] netlink: 'syz.3.3823': attribute type 21 has an invalid length.
[  461.934033][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3823'.
[  465.159095][T19324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  465.669155][T19367] netlink: 'syz.3.3837': attribute type 2 has an invalid length.
[  466.205512][T19388] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3844'.
[  466.353583][T19388] veth5: entered promiscuous mode
[  466.520758][T19396] netlink: ct family unspecified
[  466.534947][T19396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.824317][T19414] tipc: Started in network mode
[  466.874628][T19414] tipc: Node identity ac141441, cluster identity 4711
[  466.952538][T19414] tipc: Enabled bearer <udp:syz2>, priority 10
[  467.745584][T19437] veth0: left allmulticast mode
[  467.771372][T19437] veth0: left promiscuous mode
[  467.793879][T19437] bridge0: port 3(veth0) entered disabled state
[  467.851355][T19437] bridge_slave_1: left allmulticast mode
[  467.872657][T19437] bridge_slave_1: left promiscuous mode
[  467.892539][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'.
[  467.902724][ T5632] Bluetooth: hci5: command 0x0406 tx timeout
[  467.909309][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  467.933999][T19437] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.006159][T19437] bridge_slave_0: left allmulticast mode
[  468.022992][T19437] bridge_slave_0: left promiscuous mode
[  468.050743][T19437] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.156445][ T5741] tipc: Node number set to 2886997057
[  468.917917][T19467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3869'.
[  469.775506][T19489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.920378][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3882'.
[  470.006618][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3882'.
[  471.245124][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'.
[  471.270964][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'.
[  471.572679][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'.
[  471.716779][T19551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3902'.
[  471.831211][T19558] netlink: 'syz.2.3903': attribute type 4 has an invalid length.
[  471.869773][T19543] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.3901'.
[  471.989028][T19551] gre2: entered allmulticast mode
[  471.993674][T19561] netlink: get zone limit has 8 unknown bytes
[  472.146636][T19566] netlink: 'syz.0.3905': attribute type 1 has an invalid length.
[  472.167084][T19566] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3905'.
[  472.270815][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'.
[  472.319295][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'.
[  472.758869][T19588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3911'.
[  472.860972][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'.
[  473.533643][T19615] team0: Device gtp0 is of different type
[  474.581255][T19649] netlink: 'syz.4.3926': attribute type 17 has an invalid length.
[  474.943508][T19671] veth0_macvtap: entered allmulticast mode
[  474.973819][T19671] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  475.221551][T19673] bond2: Unable to set up delay as MII monitoring is disabled
[  475.270086][T19685] IPv6: Can't replace route, no match found
[  475.296273][T19685] IPv6: Can't replace route, no match found
[  475.318943][T19673] bond2 (unregistering): Released all slaves
[  476.332889][T19723] Cannot find set identified by id 65534 to match
[  476.388623][T19721] __nla_validate_parse: 13 callbacks suppressed
[  476.388645][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3947'.
[  476.521379][T19730] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3948'.
[  476.644490][T19738] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3953'.
[  476.697424][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'.
[  477.007291][T19714] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  477.108877][ T8397] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.153300][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.166573][ T8397] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.465372][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.790539][T19765] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004
[  477.818586][ T5765] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  477.912122][T19771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3964'.
[  478.083774][T19771] ip6t_srh: unknown srh match flags  4000
[  478.143922][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3964'.
[  478.899857][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3970'.
[  478.926677][T19813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3970'.
[  480.854911][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  481.598524][T19865] xt_policy: output policy not valid in PREROUTING and INPUT
[  481.797158][T19872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3980'.
[  481.846403][T19874] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3980'.
[  481.994385][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'.
[  482.259818][T19880] 8021q: adding VLAN 0 to HW filter on device bond4
[  482.401288][T19887] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3985'.
[  482.505975][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'.
[  482.515358][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'.
[  482.557559][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'.
[  482.609958][T19894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3986'.
[  483.074008][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3988'.
[  483.138195][T19905] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3990'.
[  483.201198][T19905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.489325][T19919] netlink: 'syz.3.3996': attribute type 1 has an invalid length.
[  483.533188][T19919] 8021q: adding VLAN 0 to HW filter on device bond5
[  483.534166][T19917] netlink: 'syz.0.3995': attribute type 1 has an invalid length.
[  483.629638][T19917] bond2: entered promiscuous mode
[  483.640538][T19917] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.698249][T19917] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.761342][T19917] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[  483.816211][T19917] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  483.866408][T19917] bond2: (slave ipip0): making interface the new active one
[  483.888655][T19917] ipip0: entered promiscuous mode
[  483.908087][T19917] bond2: (slave ipip0): Enslaving as an active interface with an up link
[  484.350753][T19934] bridge1: entered promiscuous mode
[  484.361106][T19934] bridge1: entered allmulticast mode
[  484.383364][ T8395] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  484.417162][T19941] lo: entered promiscuous mode
[  484.492441][T19941] netlink: 'syz.1.4001': attribute type 2 has an invalid length.
[  484.617472][T19941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.242149][T19962] xt_TPROXY: Can be used only with -p tcp or -p udp
[  485.287107][T19962] netlink: 'syz.3.4008': attribute type 1 has an invalid length.
[  485.497565][T19962] bond6: entered promiscuous mode
[  485.506862][T19962] 8021q: adding VLAN 0 to HW filter on device bond6
[  487.047592][T20033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.108216][T20033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.252579][T20041] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[  487.477040][T20053] __nla_validate_parse: 4 callbacks suppressed
[  487.477061][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'.
[  487.496881][T20049] ip_tables: iptables: counters copy to user failed while replacing table
[  487.867113][T20060] FAULT_INJECTION: forcing a failure.
[  487.867113][T20060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.922397][T20060] CPU: 0 UID: 0 PID: 20060 Comm: syz.4.4035 Not tainted syzkaller #0 PREEMPT(full) 
[  487.922428][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  487.922442][T20060] Call Trace:
[  487.922451][T20060]  <TASK>
[  487.922460][T20060]  dump_stack_lvl+0xe8/0x150
[  487.922497][T20060]  should_fail_ex+0x410/0x560
[  487.922642][T20060]  _copy_from_user+0x2d/0xb0
[  487.922696][T20060]  ___sys_sendmsg+0x1c6/0x360
[  487.922782][T20060]  ? __lock_acquire+0x683/0x2cf0
[  487.922819][T20060]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.922896][T20060]  ? __fget_files+0x2a/0x420
[  487.922925][T20060]  ? __fget_files+0x3a2/0x420
[  487.922967][T20060]  __x64_sys_sendmsg+0x1b1/0x290
[  487.923004][T20060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  487.923060][T20060]  do_syscall_64+0x166/0x520
[  487.923123][T20060]  ? trace_irq_disable+0x3b/0x140
[  487.923152][T20060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.923185][T20060]  ? clear_bhb_loop+0x70/0xc0
[  487.923213][T20060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.923235][T20060] RIP: 0033:0x7fb29519e0d9
[  487.923257][T20060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.923275][T20060] RSP: 002b:00007fb296075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.923298][T20060] RAX: ffffffffffffffda RBX: 00007fb295425fa0 RCX: 00007fb29519e0d9
[  487.923314][T20060] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  487.923328][T20060] RBP: 00007fb296075090 R08: 0000000000000000 R09: 0000000000000000
[  487.923341][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.923354][T20060] R13: 00007fb295426038 R14: 00007fb295425fa0 R15: 00007ffcd43461b8
[  487.923393][T20060]  </TASK>
[  488.215186][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.375253][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[  488.967957][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'.
[  489.556755][T20113] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  491.086120][T20158] netlink: 'syz.2.4068': attribute type 1 has an invalid length.
[  491.136954][T20158] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4068'.
[  491.456587][T20165] netlink: 'syz.1.4071': attribute type 1 has an invalid length.
[  491.556466][T20169] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4071'.
[  492.629264][T20210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4081'.
[  492.697442][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  492.720822][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  492.737802][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  492.746808][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  492.760832][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  492.769051][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  492.789400][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  492.812521][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  493.028949][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  493.060604][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  493.078630][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'.
[  493.108071][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  493.198821][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  493.287141][T20215] netlink: 'syz.0.4082': attribute type 1 has an invalid length.
[  493.400703][T20215] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4082'.
[  493.412784][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4087'.
[  493.461236][T20235] ip6gre0: entered promiscuous mode
[  494.133295][T20254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  494.648623][T20272] Unsupported ieee802154 address type: 0
[  495.216955][T20285] x_tables: duplicate underflow at hook 1
[  496.268203][T20330] netlink: 'syz.2.4113': attribute type 3 has an invalid length.
[  496.595663][T20333] sctp: [Deprecated]: syz.3.4114 (pid 20333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  496.595663][T20333] Use struct sctp_sack_info instead
[  496.771732][T20347] netlink: Unknown conntrack attr (0)
[  497.500400][T20369] 8021q: adding VLAN 0 to HW filter on device team1
[  497.913214][T20391] __nla_validate_parse: 5 callbacks suppressed
[  497.913235][T20391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4128'.
[  498.023501][T20397] netlink: Unknown conntrack attr (0)
[  498.618697][ T5627] Bluetooth: hci1: command 0x0405 tx timeout
[  498.848611][T20421] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4140'.
[  499.187835][T20425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4141'.
[  499.310116][T20437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.375874][T20439] netlink: Unknown conntrack attr (0)
[  499.444165][T20441] Bluetooth: hci0: unsupported parameter 5135
[  499.476102][T20441] Bluetooth: hci0: unsupported parameter 8192
[  499.508719][T20441] Bluetooth: hci0: unsupported parameter 5135
[  499.549172][T20441] Bluetooth: hci0: unsupported parameter 8192
[  499.578765][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'.
[  499.633067][T20447] openvswitch: netlink: Missing key (keys=40, expected=100)
[  499.635543][T20448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4148'.
[  500.063787][T20463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4153'.
[  500.489194][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'.
[  500.538217][T20465] 8021q: adding VLAN 0 to HW filter on device bond3
[  500.809247][T20472] team0: Port device team_slave_0 removed
[  500.856235][T20483] netlink: Unknown conntrack attr (0)
[  502.273964][T20524] netlink: Unknown conntrack attr (0)
[  502.387879][T20527] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4176'.
[  502.690095][T20540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4180'.
[  503.323711][T20564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'.
[  503.334071][T20564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'.
[  503.563188][T20568] netlink: Unknown conntrack attr (0)
[  503.574885][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  503.850656][T20575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4192'.
[  504.319723][T20594] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4197'.
[  504.558862][T20605] netlink: Unknown conntrack attr (0)
[  504.628409][T20610] tunl0: entered promiscuous mode
[  504.729543][T20610] gre0: entered promiscuous mode
[  504.846115][T20610] gretap0: entered promiscuous mode
[  504.958585][T20610] erspan0: entered promiscuous mode
[  505.099485][T20610] ip_vti0: entered promiscuous mode
[  505.193649][T20610] ip6_vti0: entered promiscuous mode
[  505.204764][T20610] sit0: entered promiscuous mode
[  505.230455][T20610] ip6tnl0: entered promiscuous mode
[  505.384496][T20610] ip6gre0: entered promiscuous mode
[  505.419959][T20610] syz_tun: entered promiscuous mode
[  505.453194][T20610] ip6gretap0: entered promiscuous mode
[  505.481237][T20610] vcan0: entered promiscuous mode
[  505.493236][T20610] bond0: entered promiscuous mode
[  505.512367][T20610] bond_slave_0: entered promiscuous mode
[  505.531414][T20610] bond_slave_1: entered promiscuous mode
[  505.553182][T20610] team_slave_0: left promiscuous mode
[  505.579288][T20610] team_slave_1: left promiscuous mode
[  505.585880][T20610] team0: entered promiscuous mode
[  505.591178][T20610] team_slave_0: entered promiscuous mode
[  505.598774][T20610] team_slave_1: entered promiscuous mode
[  505.625224][T20610] dummy0: entered promiscuous mode
[  505.661696][T20610] nlmon0: entered promiscuous mode
[  505.685514][T20610] batadv0: entered promiscuous mode
[  505.700032][T20610] veth0: entered promiscuous mode
[  505.744276][T20610] veth1: entered promiscuous mode
[  505.804937][T20610] wg0: entered promiscuous mode
[  505.876958][T20610] wg1: entered promiscuous mode
[  505.896365][T20610] wg2: entered promiscuous mode
[  505.909232][T20610] veth0_to_bridge: entered promiscuous mode
[  505.936833][T20610] bridge_slave_0: entered promiscuous mode
[  505.972561][T20610] veth1_to_bridge: entered promiscuous mode
[  506.038854][T20610] bridge_slave_1: entered promiscuous mode
[  506.088107][T20610] veth0_to_bond: entered promiscuous mode
[  506.135660][T20610] veth1_to_bond: entered promiscuous mode
[  506.175658][T20610] veth0_to_team: entered promiscuous mode
[  506.260772][T20610] veth1_to_team: entered promiscuous mode
[  506.316512][T20641] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4210'.
[  506.335297][T20610] veth0_to_batadv: entered promiscuous mode
[  506.362084][T20610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.380415][T20610] batadv_slave_0: entered promiscuous mode
[  506.394320][T20610] veth1_to_batadv: entered promiscuous mode
[  506.422102][T20610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.441392][T20610] batadv_slave_1: entered promiscuous mode
[  506.458488][T20610] xfrm0: entered promiscuous mode
[  506.483129][T20610] veth0_to_hsr: entered promiscuous mode
[  506.560878][T20610] veth1_to_hsr: entered promiscuous mode
[  506.607983][T20610] hsr0: entered promiscuous mode
[  506.640450][T20610] veth1_virt_wifi: entered promiscuous mode
[  506.691488][T20610] veth0_virt_wifi: entered promiscuous mode
[  506.740349][T20610] virt_wifi0: entered promiscuous mode
[  506.819529][T20610] vlan0: entered promiscuous mode
[  506.871640][T20610] vlan1: entered promiscuous mode
[  506.905148][T20610] macvlan0: entered promiscuous mode
[  506.938745][T20610] macvlan1: entered promiscuous mode
[  506.968720][T20610] ipvlan0: entered promiscuous mode
[  507.000852][T20610] ipvlan1: entered promiscuous mode
[  507.039964][T20610] geneve0: entered promiscuous mode
[  507.082165][T20610] geneve1: entered promiscuous mode
[  507.113124][T20610] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  507.148424][T20610] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  507.170136][T20610] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  507.191292][T20610] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  507.218376][T20610] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  507.253302][T20610] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  507.274439][T20610] gre1: entered promiscuous mode
[  507.351682][T20610] bridge1: entered promiscuous mode
[  507.547981][T20610] geneve2: entered promiscuous mode
[  507.580318][T20610] : entered promiscuous mode
[  507.609548][T20610] bond1: entered promiscuous mode
[  507.632016][T20610] gretap1: entered promiscuous mode
[  507.670191][T20610] ip6tnl1: entered promiscuous mode
[  507.687830][T20610] dvmrp0: entered promiscuous mode
[  507.715935][T20610] bridge2: entered promiscuous mode
[  507.751001][T20610] macvlan2: entered promiscuous mode
[  507.780496][T20610] veth2: entered promiscuous mode
[  507.811557][T20610] veth3: entered promiscuous mode
[  507.825478][T20610] veth3: left allmulticast mode
[  507.848171][T20610] bond2: entered promiscuous mode
[  507.898445][T20610] mac80211_hwsim hwsim35 wlan2: entered promiscuous mode
[  507.911006][T20610] ipip0: entered promiscuous mode
[  507.928800][T20610] veth4: entered promiscuous mode
[  507.942212][T20610] syzkaller0: entered promiscuous mode
[  507.960861][T20610] team1: entered promiscuous mode
[  507.974334][T20610] bond3: entered promiscuous mode
[  507.992547][T20610] gretap2: entered promiscuous mode
[  508.156251][ T8367] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.203173][ T8367] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.261683][ T8367] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 39344 - 0
[  508.361617][T20644] bridge2: entered promiscuous mode
[  508.426033][T20644] bridge2: entered allmulticast mode
[  508.455993][T20656] netlink: Unknown conntrack attr (0)
[  508.470838][T20644] team0: Port device bridge2 added
[  508.554976][ T8380] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.580978][T20658] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4212'.
[  508.600974][ T8380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.657909][ T8380] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 39344 - 0
[  508.720304][ T8380] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.800856][ T8380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.904459][ T8380] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 39344 - 0
[  509.001450][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4216'.
[  509.007297][ T8380] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.113083][ T8380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.160474][ T8380] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 39344 - 0
[  509.341073][T20689] can: request_module (can-proto-5) failed.
[  509.366971][T20687] can: request_module (can-proto-5) failed.
[  509.745981][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4222'.
[  509.795468][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4225'.
[  510.171947][T20718] netlink: Unknown conntrack attr (0)
[  510.812466][T20744] ipvlan2: entered allmulticast mode
[  510.827359][T20744] virt_wifi0: entered allmulticast mode
[  510.846316][T20744] batman_adv: batadv0: Adding interface: ipvlan2
[  510.879650][T20744] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.950584][T20744] batman_adv: batadv0: Interface activated: ipvlan2
[  510.959578][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'.
[  511.017377][T20754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  511.442146][T20768] syzkaller0: entered promiscuous mode
[  511.462786][T20768] syzkaller0: entered allmulticast mode
[  511.511607][T20772] netlink: Unknown conntrack attr (0)
[  511.530897][T20768] netlink: 'syz.0.4240': attribute type 1 has an invalid length.
[  511.548435][T20736] dvmrp0: entered allmulticast mode
[  511.676215][T20777] netlink: 'syz.0.4240': attribute type 3 has an invalid length.
[  512.001440][T20785] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4245'.
[  512.549992][T20799] FAULT_INJECTION: forcing a failure.
[  512.549992][T20799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.657386][T20799] CPU: 1 UID: 0 PID: 20799 Comm: syz.4.4249 Not tainted syzkaller #0 PREEMPT(full) 
[  512.657419][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  512.657433][T20799] Call Trace:
[  512.657442][T20799]  <TASK>
[  512.657452][T20799]  dump_stack_lvl+0xe8/0x150
[  512.657490][T20799]  should_fail_ex+0x410/0x560
[  512.657531][T20799]  _copy_to_user+0x31/0xb0
[  512.657558][T20799]  simple_read_from_buffer+0xe1/0x170
[  512.657597][T20799]  proc_fail_nth_read+0x1bb/0x230
[  512.657637][T20799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  512.657683][T20799]  ? rw_verify_area+0x24a/0x4c0
[  512.657726][T20799]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  512.657760][T20799]  vfs_read+0x213/0xa80
[  512.657799][T20799]  ? __pfx___mutex_lock+0x10/0x10
[  512.657944][T20799]  ? __pfx_vfs_read+0x10/0x10
[  512.658001][T20799]  ? __fget_files+0x2a/0x420
[  512.658037][T20799]  ? __fget_files+0x3a2/0x420
[  512.658067][T20799]  ? __fget_files+0x2a/0x420
[  512.658108][T20799]  ksys_read+0x150/0x270
[  512.658153][T20799]  ? __pfx_ksys_read+0x10/0x10
[  512.658204][T20799]  do_syscall_64+0x166/0x520
[  512.658236][T20799]  ? trace_irq_disable+0x3b/0x140
[  512.658266][T20799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.658295][T20799]  ? clear_bhb_loop+0x70/0xc0
[  512.658324][T20799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.658347][T20799] RIP: 0033:0x7fb29515e90e
[  512.658368][T20799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  512.658387][T20799] RSP: 002b:00007fb296074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  512.658411][T20799] RAX: ffffffffffffffda RBX: 00007fb2960756c0 RCX: 00007fb29515e90e
[  512.658428][T20799] RDX: 000000000000000f RSI: 00007fb2960750a0 RDI: 0000000000000003
[  512.658442][T20799] RBP: 00007fb296075090 R08: 0000000000000000 R09: 0000000000000000
[  512.658456][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.658470][T20799] R13: 00007fb295426038 R14: 00007fb295425fa0 R15: 00007ffcd43461b8
[  512.658512][T20799]  </TASK>
[  512.970960][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4251'.
[  512.982184][T20801] openvswitch: netlink: Missing valid actions attribute.
[  512.990590][T20801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.004980][T20805] netlink: 'syz.3.4251': attribute type 8 has an invalid length.
[  513.052662][T20810] netlink: Unknown conntrack attr (0)
[  513.130299][T20812] netlink: 'syz.2.4255': attribute type 16 has an invalid length.
[  513.144437][T20812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4255'.
[  513.328836][T20820] x_tables: duplicate entry at hook 4
[  513.625393][T20838] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  513.676243][T20837] bridge3: the hash_elasticity option has been deprecated and is always 16
[  513.807787][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'.
[  513.871896][T20845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.264719][T20856] netlink: 'syz.0.4262': attribute type 11 has an invalid length.
[  514.357385][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'.
[  514.384694][T20860] netlink: 'syz.0.4262': attribute type 5 has an invalid length.
[  514.404693][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4262'.
[  516.129380][T20812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  516.398863][T20869] netlink: Unknown conntrack attr (0)
[  516.442941][T20870] netlink: 'syz.1.4266': attribute type 17 has an invalid length.
[  516.469833][T20877] netlink: 'syz.2.4269': attribute type 1 has an invalid length.
[  516.500150][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'.
[  516.606829][T20870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4266'.
[  516.682852][T20877] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  516.995971][T20892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4274'.
[  517.062169][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4275'.
[  517.074428][T20898] netlink: 616 bytes leftover after parsing attributes in process `syz.1.4276'.
[  517.180997][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4274'.
[  517.733210][T20916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  517.871364][T20917] netlink: Unknown conntrack attr (0)
[  518.099150][T20927] netlink: 'syz.3.4287': attribute type 1 has an invalid length.
[  518.164056][T20929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4285'.
[  518.707561][T20956] xt_nfacct: accounting object `' does not exist
[  518.832136][T20960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.917740][T20968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.022546][T20974] netlink: Unknown conntrack attr (0)
[  519.189953][T20980] __nla_validate_parse: 2 callbacks suppressed
[  519.189975][T20980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4300'.
[  519.216901][T20981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4300'.
[  519.553560][T20998] syzkaller0: left promiscuous mode
[  519.597545][T20998] xt_hashlimit: size too large, truncated to 1048576
[  519.995930][T21010] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4311'.
[  521.313163][T21020] netlink: Unknown conntrack attr (0)
[  521.525472][T21029] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4317'.
[  521.586279][T21038] netlink: 'syz.1.4315': attribute type 4 has an invalid length.
[  521.923799][T21050] sctp: [Deprecated]: syz.3.4321 (pid 21050) Use of struct sctp_assoc_value in delayed_ack socket option.
[  521.923799][T21050] Use struct sctp_sack_info instead
[  522.013477][T21054] netlink: 'syz.0.4322': attribute type 1 has an invalid length.
[  522.081467][T21054] netlink: 'syz.0.4322': attribute type 1 has an invalid length.
[  522.123682][T21054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4322'.
[  522.200917][T21054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4322'.
[  523.016748][T21086] syzkaller1: entered promiscuous mode
[  523.041260][T21086] syzkaller1: entered allmulticast mode
[  523.255504][T21089] openvswitch: netlink: IP tunnel dst address not specified
[  523.622967][T21109] netlink: Unknown conntrack attr (0)
[  523.645756][T21108] ip_tables: iptables: counters copy to user failed while replacing table
[  523.775992][T21108] TC_ACT_REPEAT abuse ?
[  524.219283][T21133] ipt_REJECT: TCP_RESET invalid for non-tcp
[  524.335662][T21138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4344'.
[  524.853348][T21150] netlink: Unknown conntrack attr (0)
[  525.238482][T21168] tunl0: entered promiscuous mode
[  525.283019][T21168] netlink: 'syz.4.4352': attribute type 3 has an invalid length.
[  525.303217][T21168] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4352'.
[  525.428634][T21174] Bluetooth: hci0: unsupported parameter 5161
[  525.467213][T21174] Bluetooth: hci0: unsupported parameter 8192
[  525.503941][T21174] Bluetooth: hci0: unsupported parameter 5161
[  525.563626][T21174] Bluetooth: hci0: unsupported parameter 8192
[  526.353848][T21197] netlink: Unknown conntrack attr (0)
[  526.550741][T21202] netlink: 'syz.1.4364': attribute type 4 has an invalid length.
[  526.605500][T21204] netlink: 'syz.1.4364': attribute type 4 has an invalid length.
[  526.800162][T21211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4367'.
[  527.473754][T21234] netlink: Unknown conntrack attr (0)
[  527.578691][T21235] netlink: 'syz.1.4376': attribute type 10 has an invalid length.
[  527.619345][T21235] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  527.709867][T21235] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  527.795862][T21235] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  527.857186][T21235] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  527.968769][T21241] syzkaller0: left promiscuous mode
[  527.979626][T21241] syzkaller0: left allmulticast mode
[  529.099788][T21286] netlink: Unknown conntrack attr (0)
[  529.301493][T21293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4391'.
[  529.392352][T21295] netlink: 'syz.3.4394': attribute type 1 has an invalid length.
[  529.422026][T21295] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4394'.
[  529.457318][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'.
[  529.461992][T21298] netlink: 'syz.1.4396': attribute type 2 has an invalid length.
[  529.485371][T21301] netlink: 'syz.1.4396': attribute type 2 has an invalid length.
[  529.498683][T21299] netlink: 'syz.3.4394': attribute type 3 has an invalid length.
[  529.554089][T21301] : entered promiscuous mode
[  529.619874][T21306] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  529.702111][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4398'.
[  529.783542][T21308] netlink: 'syz.3.4398': attribute type 2 has an invalid length.
[  530.200529][T21327] netlink: Unknown conntrack attr (0)
[  530.339299][T21329] netlink: 'syz.1.4406': attribute type 1 has an invalid length.
[  530.581912][T21329] bond4: entered promiscuous mode
[  530.633606][T21329] 8021q: adding VLAN 0 to HW filter on device bond4
[  530.802659][T21343] 8021q: adding VLAN 0 to HW filter on device bond4
[  530.821407][T21343] bond4: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  530.843854][T21343] bond4: (slave ip6tnl2): Setting fail_over_mac to active for active-backup mode
[  530.867589][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4413'.
[  530.884107][T21343] bond4: (slave ip6tnl2): making interface the new active one
[  530.902948][T21343] ip6tnl2: entered promiscuous mode
[  530.906634][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4413'.
[  530.932842][T21343] bond4: (slave ip6tnl2): Enslaving as an active interface with an up link
[  531.375365][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'.
[  531.414671][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4412'.
[  531.427509][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'.
[  531.484668][T21371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4416'.
[  531.530904][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4412'.
[  531.805749][T21381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.561323][T21411] 8021q: adding VLAN 0 to HW filter on device bond1
[  532.640544][T21421] netlink: 'syz.0.4433': attribute type 5 has an invalid length.
[  532.662567][T21414] vlan2: entered promiscuous mode
[  532.706658][T21414] bond1: entered promiscuous mode
[  532.741933][T21414] vlan2: entered allmulticast mode
[  532.747699][T21414] bond1: entered allmulticast mode
[  532.782579][T21411] bond1: (slave gtp0): refused to change device type
[  533.120145][T21428] ip_tables: iptables: counters copy to user failed while replacing table
[  533.854517][T21435] macsec1: entered promiscuous mode
[  533.895337][T21435] macsec0: entered promiscuous mode
[  533.932902][T21435] macsec0: left promiscuous mode
[  534.294865][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  534.736458][T21469] __nla_validate_parse: 9 callbacks suppressed
[  534.736479][T21469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4452'.
[  534.876600][T21475] openvswitch: netlink: VXLAN extension 317 out of range max 1
[  534.909906][T21478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4455'.
[  534.921859][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4454'.
[  534.975675][T21480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4455'.
[  535.040429][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4452'.
[  535.157622][T21469] team0: Port device team_slave_0 removed
[  535.419668][T21493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'.
[  535.521373][T21500] netlink: 'syz.4.4460': attribute type 2 has an invalid length.
[  535.525395][T21493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'.
[  535.568571][T21494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'.
[  535.603141][T21494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4458'.
[  535.624896][T21505] netlink: 'syz.3.4462': attribute type 2 has an invalid length.
[  535.710685][T21505] : entered promiscuous mode
[  535.754159][T21500] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4460'.
[  536.615560][T21532] netlink: 'syz.0.4470': attribute type 4 has an invalid length.
[  536.858356][T21532] .`: renamed from bond0
[  537.220329][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.255626][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.274700][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.317268][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.344177][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.377665][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.413676][T21558] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  537.936117][T21579] IPv6: NLM_F_CREATE should be specified when creating new route
[  538.397988][T21589] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  538.454233][T21589] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  539.593545][T21631] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  539.642457][T21631] bond0 (unregistering): Released all slaves
[  540.139017][T21645] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  540.150328][ T8380] IPVS: starting estimator thread 0...
[  540.219735][T21645] Bluetooth: hci0: unsupported parameter 5135
[  540.221475][T21643] syzkaller1: entered promiscuous mode
[  540.242602][T21643] syzkaller1: entered allmulticast mode
[  540.253690][T21652] IPv6: NLM_F_CREATE should be specified when creating new route
[  540.257101][T21645] Bluetooth: hci0: unsupported parameter 8192
[  540.268665][T21647] IPVS: using max 30 ests per chain, 72000 per kthread
[  540.283148][T21653] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  540.293272][T21652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  540.300625][T21652] IPv6: NLM_F_CREATE should be set when creating new route
[  540.308002][T21652] IPv6: NLM_F_CREATE should be set when creating new route
[  540.315505][T21652] IPv6: NLM_F_CREATE should be set when creating new route
[  540.353348][T21645] Bluetooth: hci0: unsupported parameter 5135
[  540.376045][T21645] Bluetooth: hci0: unsupported parameter 8192
[  540.836355][T21675] __nla_validate_parse: 44 callbacks suppressed
[  540.836378][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'.
[  541.101528][T21683] tc action pedit offset must be on 32 bit boundaries
[  541.212710][T21687] validate_nla: 29 callbacks suppressed
[  541.212730][T21687] netlink: 'syz.2.4515': attribute type 2 has an invalid length.
[  541.444995][T21700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4515'.
[  541.783363][ T8380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.827054][ T8380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.958141][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  542.046018][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4519'.
[  542.140793][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4521'.
[  542.174757][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4521'.
[  542.490583][T21726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4524'.
[  542.841355][T21733] ip6t_srh: unknown srh invflags 4000
[  543.434578][T21751] openvswitch: netlink: Missing key (keys=200040, expected=80)
[  543.448783][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4533'.
[  543.601767][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'.
[  543.679903][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4536'.
[  543.886030][T21769] netlink: 'syz.4.4538': attribute type 2 has an invalid length.
[  544.180419][T21777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.159948][T21797] gtp0: entered promiscuous mode
[  545.191281][T21797] gtp0: entered allmulticast mode
[  545.381341][T21798] ovs-system: entered promiscuous mode
[  545.420780][T21799] openvswitch: ovs-system: Dropping previously announced user features
[  545.859216][T21819] __nla_validate_parse: 8 callbacks suppressed
[  545.859238][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'.
[  545.942584][T21824] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  546.558167][T21841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4563'.
[  546.628560][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4564'.
[  546.638123][T21844] netlink: 'syz.4.4564': attribute type 14 has an invalid length.
[  546.650101][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'.
[  546.671111][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4564'.
[  546.687287][T21844] netlink: 'syz.4.4564': attribute type 14 has an invalid length.
[  546.698529][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'.
[  547.012859][T21847] netlink: Invalid conntrack timeout
[  547.032722][T21847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.904145][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4573'.
[  547.949403][T21883] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4573'.
[  548.187345][T21888] bridge0: port 3(veth0) entered blocking state
[  548.194194][T21888] bridge0: port 3(veth0) entered disabled state
[  548.202249][T21888] veth0: entered allmulticast mode
[  548.211306][T21888] veth0: entered promiscuous mode
[  548.802466][T21899] netlink: zone id is out of range
[  548.814105][T21899] netlink: zone id is out of range
[  548.826417][T21899] netlink: zone id is out of range
[  548.838971][T21899] netlink: zone id is out of range
[  548.850464][T21899] netlink: zone id is out of range
[  548.862265][T21899] netlink: zone id is out of range
[  548.879149][T21899] netlink: zone id is out of range
[  548.893418][T21899] netlink: zone id is out of range
[  548.915359][T21899] netlink: zone id is out of range
[  548.954227][T21899] netlink: zone id is out of range
[  549.396700][T21913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  549.570569][T21920] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4587'.
[  551.071451][T21929] netlink: 'syz.1.4589': attribute type 1 has an invalid length.
[  551.196503][T21929] veth0_to_bond: left promiscuous mode
[  551.225429][T21935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4593'.
[  551.240531][T21929] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  551.256993][T21935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4593'.
[  551.347038][T21922] block nbd2: server does not support multiple connections per device.
[  551.420692][T21929] macvlan3: entered promiscuous mode
[  551.448883][T21929] macvlan3: entered allmulticast mode
[  551.464029][T21922] block nbd2: shutting down sockets
[  551.479259][T21929] bond5: entered promiscuous mode
[  551.492380][T21940] netlink: 'syz.2.4594': attribute type 1 has an invalid length.
[  551.503390][T21936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4592'.
[  551.521486][T21929] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  551.534576][T21929] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  551.535391][T21940] netlink: 'syz.2.4594': attribute type 1 has an invalid length.
[  551.562174][T21929] bond5: left promiscuous mode
[  552.012983][T21954] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  552.737953][T21991] netlink: 'syz.3.4607': attribute type 1 has an invalid length.
[  552.756333][T21989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4606'.
[  552.799713][T21989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4606'.
[  553.290568][T22007] pim6reg: entered allmulticast mode
[  553.324337][T22013] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4615'.
[  553.349444][T22016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4616'.
[  553.373351][T22016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4616'.
[  553.573699][T22020] netlink: 'syz.2.4618': attribute type 1 has an invalid length.
[  553.825589][T22020] 8021q: adding VLAN 0 to HW filter on device bond2
[  553.918124][T22027] vlan2: entered promiscuous mode
[  553.933710][T22027] bond2: entered promiscuous mode
[  553.956067][T22027] vlan2: entered allmulticast mode
[  553.974654][T22027] bond2: entered allmulticast mode
[  554.072002][T22028] bond2: (slave bridge5): making interface the new active one
[  554.081308][T22028] bridge5: entered promiscuous mode
[  554.087771][T22028] bridge5: entered allmulticast mode
[  554.098546][T22028] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  554.116906][T22036] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[  554.158943][T22036] mac80211_hwsim hwsim30 wlan0: left allmulticast mode
[  554.343435][T22041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4624'.
[  554.407290][T22050] net_ratelimit: 3 callbacks suppressed
[  554.407309][T22050] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  554.490612][T22050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.782996][T22067] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  554.842857][T22067] netlink: 'syz.3.4631': attribute type 1 has an invalid length.
[  555.060986][T22062] bond3: Unable to set up delay as MII monitoring is disabled
[  555.138726][T22062] bond3 (unregistering): Released all slaves
[  555.229079][T22083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4632'.
[  555.459065][T22067] bond8: entered promiscuous mode
[  555.511242][T22067] bond8: entered allmulticast mode
[  555.548154][T22067] 8021q: adding VLAN 0 to HW filter on device bond8
[  555.646174][T22069] erspan1: entered allmulticast mode
[  555.690355][T22069] bond8: (slave erspan1): making interface the new active one
[  555.706371][T22069] erspan1: entered promiscuous mode
[  555.729221][T22069] bond8: (slave erspan1): Enslaving as an active interface with an up link
[  556.003428][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.025388][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.045637][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.062841][T22101] xt_nat: multiple ranges no longer supported
[  556.071196][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.089023][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.169157][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  556.268099][T22099] netlink: 'syz.3.4636': attribute type 3 has an invalid length.
[  557.304204][T22117] __nla_validate_parse: 1 callbacks suppressed
[  557.304226][T22117] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4641'.
[  557.397560][T22125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4641'.
[  557.711122][T22144] xt_HMARK: proto mask must be zero with L3 mode
[  557.783564][T22146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4648'.
[  557.817515][T22146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4648'.
[  558.441778][T22162] ipt_REJECT: TCP_RESET invalid for non-tcp
[  558.589511][T22162] openvswitch: netlink: Missing key (keys=200040, expected=80)
[  559.048603][T22194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.171225][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4663'.
[  559.187794][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4663'.
[  559.549924][T22206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.704515][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4667'.
[  560.340194][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'.
[  560.556616][T22247] veth1_to_bond: entered allmulticast mode
[  560.570344][T22245] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4677'.
[  560.627990][T22247] veth1_to_bond: left allmulticast mode
[  560.705169][T22245] syzkaller0: entered promiscuous mode
[  560.732480][T22245] syzkaller0: entered allmulticast mode
[  560.828871][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4681'.
[  561.583022][T22290] validate_nla: 58 callbacks suppressed
[  561.583044][T22290] netlink: 'syz.3.4688': attribute type 2 has an invalid length.
[  561.900918][T22298] netlink: 'syz.1.4691': attribute type 8 has an invalid length.
[  562.217083][T22307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  562.531732][T22317] __nla_validate_parse: 6 callbacks suppressed
[  562.531756][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4699'.
[  562.602450][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4699'.
[  562.772588][T22321] syzkaller0: entered promiscuous mode
[  562.793117][T22321] syzkaller0: entered allmulticast mode
[  563.176131][T22341] syzkaller0: entered promiscuous mode
[  563.195650][T22341] syzkaller0: entered allmulticast mode
[  563.303523][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4707'.
[  563.342963][T22345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4707'.
[  563.377844][T22334] syzkaller0: entered promiscuous mode
[  563.383399][T22334] syzkaller0: entered allmulticast mode
[  563.569439][T22360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  563.576791][T22360] IPv6: NLM_F_CREATE should be set when creating new route
[  563.584133][T22360] IPv6: NLM_F_CREATE should be set when creating new route
[  563.604179][T22356] netlink: 'syz.0.4709': attribute type 1 has an invalid length.
[  563.956187][T22370] netlink: 'syz.3.4714': attribute type 21 has an invalid length.
[  564.013908][T22375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4712'.
[  564.720131][T22367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.006759][T22390] xt_TCPMSS: Only works on TCP SYN packets
[  565.781726][T22385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  568.098583][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4721'.
[  568.129112][T22369] netlink: 'syz.1.4712': attribute type 12 has an invalid length.
[  568.140336][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4721'.
[  568.183275][T22405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.193247][T22404] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.204245][T22405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.221832][T22404] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.232274][T22405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.248191][T22404] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4722'.
[  568.269189][T22395] syzkaller1: tun_chr_ioctl cmd 1074025678
[  568.283126][T22395] syzkaller1: group set to 0
[  568.526268][T22413] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.4724'.
[  568.580099][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'.
[  568.706861][T22425] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  568.868204][T22432] netlink: 'syz.1.4728': attribute type 1 has an invalid length.
[  568.943586][T22432] netlink: 'syz.1.4728': attribute type 1 has an invalid length.
[  568.980666][T22432] netlink: 'syz.1.4728': attribute type 1 has an invalid length.
[  569.376948][T22452] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  569.498976][T22457] netlink: 'syz.1.4735': attribute type 5 has an invalid length.
[  569.962512][T22471] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  570.477676][T22482] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20004
[  570.945598][T22502] xt_CT: You must specify a L4 protocol and not use inversions on it
[  571.220899][T22510] erspan0: entered promiscuous mode
[  571.349005][T22510] gretap0: entered promiscuous mode
[  571.410388][T22510] debugfs: 'hsr1' already exists in 'hsr'
[  571.465597][T22510] Cannot create hsr debugfs directory
[  571.526671][T22510] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  571.620213][T22510] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  571.764834][T22515] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  571.871740][T22515] bond6 (unregistering): Released all slaves
[  572.437144][T22556] netlink: 'syz.1.4760': attribute type 7 has an invalid length.
[  573.159683][T22584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.418208][T22592] __nla_validate_parse: 21 callbacks suppressed
[  573.418229][T22592] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4774'.
[  573.555688][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4774'.
[  573.592531][T22601] syzkaller1: tun_chr_ioctl cmd 1074025677
[  573.613743][T22601] syzkaller1: linktype set to 823
[  573.679979][T22601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4776'.
[  573.776346][T22608] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4776'.
[  573.850691][T22592] bond0 (unregistering): Released all slaves
[  573.905215][T22612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.367152][T22626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4783'.
[  574.413075][T22626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4783'.
[  574.566675][T22626] debugfs: 'hsr1' already exists in 'hsr'
[  574.574324][T22626] Cannot create hsr debugfs directory
[  574.580664][T22626] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  574.593595][T22626] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  574.608532][T22634] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4786'.
[  574.659044][T22632] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4785'.
[  574.749745][T22632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4785'.
[  575.161722][T22653] syzkaller1: entered promiscuous mode
[  575.170534][T22653] syzkaller1: entered allmulticast mode
[  575.971394][T22682] sctp: [Deprecated]: syz.3.4802 (pid 22682) Use of int in max_burst socket option deprecated.
[  575.971394][T22682] Use struct sctp_assoc_value instead
[  576.419614][T22694] netlink: 'syz.1.4806': attribute type 2 has an invalid length.
[  576.711922][T22707] netlink: 'syz.4.4808': attribute type 2 has an invalid length.
[  576.763095][T22711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4811'.
[  576.772422][T22707] netlink: 'syz.4.4808': attribute type 2 has an invalid length.
[  576.772461][T22707] netlink: 'syz.4.4808': attribute type 1 has an invalid length.
[  576.947841][T22711] erspan0: entered promiscuous mode
[  576.989636][T22711] gretap0: entered promiscuous mode
[  577.011746][T22711] debugfs: 'hsr1' already exists in 'hsr'
[  577.060796][T22711] Cannot create hsr debugfs directory
[  577.079285][T22711] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  577.104652][T22711] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  577.472790][T22737] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[  577.558795][T22737] netlink: 'syz.1.4819': attribute type 64 has an invalid length.
[  577.607778][T22745] netlink: 'syz.2.4820': attribute type 2 has an invalid length.
[  577.808143][T22748] netlink: 'syz.0.4821': attribute type 142 has an invalid length.
[  578.855727][T22777] __nla_validate_parse: 3 callbacks suppressed
[  578.855747][T22777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4830'.
[  579.022244][T22787] xt_socket: unknown flags 0x50
[  579.174429][T22787] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  579.272429][T22787] gretap1: entered promiscuous mode
[  579.326941][T22787] gretap1: entered allmulticast mode
[  579.373411][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'.
[  579.412603][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'.
[  579.446516][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4838'.
[  580.603274][T22840] x_tables: duplicate underflow at hook 2
[  580.746162][T22846] netlink: 'syz.1.4850': attribute type 1 has an invalid length.
[  581.061226][T22846] bond6: entered promiscuous mode
[  581.115247][T22870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4854'.
[  581.128079][T22846] 8021q: adding VLAN 0 to HW filter on device bond6
[  581.144384][T22870] netlink: 'syz.0.4854': attribute type 10 has an invalid length.
[  581.348160][T22877] xt_cgroup: invalid path, errno=-2
[  581.417019][T22870] .`: (slave macsec0): Enslaving as an active interface with an up link
[  582.022300][T22889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4862'.
[  582.520922][T22905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4868'.
[  583.460309][T22940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4876'.
[  584.125957][T22947] netlink: 'syz.1.4879': attribute type 2 has an invalid length.
[  586.507062][T22988] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  586.520377][T22988] bond9 (unregistering): Released all slaves
[  587.302824][T23009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4899'.
[  588.112481][T23045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4910'.
[  588.187710][T23043] tipc: Started in network mode
[  588.212797][T23043] tipc: Node identity ac14140f, cluster identity 4711
[  588.259722][T23043] tipc: New replicast peer: 255.255.255.255
[  588.283651][T23043] tipc: Enabled bearer <udp:syz2>, priority 10
[  588.292551][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[  588.294200][T23049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4908'.
[  588.496512][T23058] bridge4: entered promiscuous mode
[  588.502103][T23058] bridge4: entered allmulticast mode
[  588.513441][T23058] team0: Port device bridge4 added
[  588.530999][T23058] bridge0: port 3(team0) entered blocking state
[  588.539094][T23058] bridge0: port 3(team0) entered disabled state
[  588.547603][T23058] team0: entered allmulticast mode
[  588.553008][T23058] team_slave_1: entered allmulticast mode
[  588.563600][T23058] team0: entered promiscuous mode
[  588.570288][T23058] team_slave_1: entered promiscuous mode
[  588.730609][T23060] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4914'.
[  589.397081][ T8339] tipc: Node number set to 2886997007
[  590.011248][T23099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4927'.
[  590.490563][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'.
[  590.538007][T23126] syzkaller1: entered promiscuous mode
[  590.551250][T23126] syzkaller1: entered allmulticast mode
[  590.697006][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4936'.
[  590.741266][T23130] netlink: 87 bytes leftover after parsing attributes in process `syz.4.4936'.
[  591.222488][T23148] netlink: 'syz.3.4939': attribute type 11 has an invalid length.
[  591.444104][T23153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.703058][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'.
[  591.771968][T23156] wg2: entered promiscuous mode
[  591.901769][T23153] hsr_slave_0: left promiscuous mode
[  591.993567][T23153] hsr_slave_1: left promiscuous mode
[  592.428478][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4946'.
[  592.460348][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4946'.
[  592.491138][T23183] netlink: 'syz.1.4946': attribute type 4 has an invalid length.
[  592.513196][T23179] bond0: left promiscuous mode
[  592.559901][T23183] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4946'.
[  592.593940][T23179] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  592.651605][T23183] .`: renamed from bond0
[  593.066684][ T8323] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  593.146412][ T8339] syz0: Port: 1 Link DOWN
[  593.681940][T23220] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4955'.
[  593.762305][T23225] syzkaller1: entered promiscuous mode
[  593.824141][T23225] syzkaller1: entered allmulticast mode
[  594.056634][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  594.343620][T23241] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002
[  594.499416][T23244] syzkaller0: entered promiscuous mode
[  594.547314][T23244] syzkaller0: entered allmulticast mode
[  594.700824][T23256] netlink: Unknown conntrack attr (0)
[  594.759441][T23258] netlink: 'syz.2.4969': attribute type 33 has an invalid length.
[  594.780016][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4968'.
[  594.808717][T23262] netlink: 'syz.1.4970': attribute type 2 has an invalid length.
[  594.883904][T23264] SET target dimension over the limit!
[  595.353784][T23278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'.
[  595.409853][T23278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'.
[  595.718225][T23294] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4979'.
[  595.751593][T23301] sctp: [Deprecated]: syz.3.4981 (pid 23301) Use of int in max_burst socket option.
[  595.751593][T23301] Use struct sctp_assoc_value instead
[  595.781415][T23294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4979'.
[  596.037125][T23305] netlink: Unknown conntrack attr (0)
[  596.061655][T23306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4983'.
[  596.461827][T23322] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  596.776561][T23327] netlink: 'syz.1.4992': attribute type 2 has an invalid length.
[  597.568827][T23347] netlink: Unknown conntrack attr (0)
[  598.305105][T23365] __nla_validate_parse: 1 callbacks suppressed
[  598.305129][T23365] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5002'.
[  598.366882][T23365] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  598.417678][T23365] netlink: 'syz.3.5002': attribute type 4 has an invalid length.
[  598.503016][T23374] netlink: 'syz.4.5004': attribute type 1 has an invalid length.
[  598.749599][T23374] lo: entered allmulticast mode
[  598.766461][T23379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5004'.
[  598.870048][T23374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5004'.
[  598.912895][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'.
[  598.935091][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  599.203555][T23400] netlink: Unknown conntrack attr (0)
[  599.368413][T23397] gtp1: entered promiscuous mode
[  599.424312][T23397] gtp1: entered allmulticast mode
[  599.508355][T23405] netlink: 'syz.1.5013': attribute type 1 has an invalid length.
[  599.531070][T23405] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5013'.
[  599.557478][T23405] netlink: 'syz.1.5013': attribute type 1 has an invalid length.
[  599.569462][T23402] tc_dump_action: action bad kind
[  599.576400][T23373] lo: left allmulticast mode
[  599.602079][T23405] netlink: 29 bytes leftover after parsing attributes in process `syz.1.5013'.
[  599.930845][T23413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5015'.
[  600.203985][T23427] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5015'.
[  600.238297][T23422] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  600.257802][T23422] netlink: 'syz.3.5018': attribute type 17 has an invalid length.
[  600.275815][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5018'.
[  600.308711][T23422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5018'.
[  601.128522][T23441] netlink: Unknown conntrack attr (0)
[  601.158860][T23438] syzkaller0: entered promiscuous mode
[  601.192092][T23438] syzkaller0: entered allmulticast mode
[  601.210531][T23437] syzkaller1: entered promiscuous mode
[  601.229940][T23437] syzkaller1: entered allmulticast mode
[  602.085770][T23471] netlink: 'syz.2.5032': attribute type 11 has an invalid length.
[  602.106182][T23471] netlink: 'syz.2.5032': attribute type 11 has an invalid length.
[  602.193989][T23476] netlink: Unknown conntrack attr (0)
[  603.340085][T23515] openvswitch: netlink: IP tunnel dst address not specified
[  603.379042][T23517] netlink: Unknown conntrack attr (0)
[  603.474266][T23515] netlink: 'syz.3.5047': attribute type 1 has an invalid length.
[  603.511546][T23515] __nla_validate_parse: 3 callbacks suppressed
[  603.511569][T23515] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5047'.
[  604.020123][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5050'.
[  604.413251][T23545] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5055'.
[  604.505380][T23550] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  604.893502][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5060'.
[  605.032738][T23564] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5061'.
[  605.152079][T23558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5061'.
[  605.338288][T23571] Bluetooth: MGMT ver 1.23
[  605.346145][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5067'.
[  605.373440][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'.
[  605.440646][T23575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5066'.
[  605.903697][T23601] netlink: 'syz.1.5072': attribute type 11 has an invalid length.
[  605.933773][T23601] netlink: 'syz.1.5072': attribute type 11 has an invalid length.
[  605.943708][T23601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5072'.
[  606.218493][T23608] netlink: 'syz.0.5076': attribute type 1 has an invalid length.
[  606.453614][T23616] netlink: 'syz.1.5079': attribute type 1 has an invalid length.
[  606.639778][T23629] x_tables: duplicate underflow at hook 1
[  606.658683][T23608] 8021q: adding VLAN 0 to HW filter on device bond5
[  606.760984][T23613] 8021q: adding VLAN 0 to HW filter on device batadv2
[  606.773010][T23613] bond5: (slave batadv2): making interface the new active one
[  606.787652][T23613] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  607.078544][T23641] x_tables: duplicate underflow at hook 2
[  607.416047][ T4929] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  607.423330][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[  607.657560][T23654] FAULT_INJECTION: forcing a failure.
[  607.657560][T23654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  607.727525][T23654] CPU: 1 UID: 0 PID: 23654 Comm: syz.3.5089 Not tainted syzkaller #0 PREEMPT(full) 
[  607.727559][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  607.727573][T23654] Call Trace:
[  607.727581][T23654]  <TASK>
[  607.727591][T23654]  dump_stack_lvl+0xe8/0x150
[  607.727630][T23654]  should_fail_ex+0x410/0x560
[  607.727671][T23654]  _copy_from_user+0x2d/0xb0
[  607.727697][T23654]  ___sys_sendmsg+0x1c6/0x360
[  607.727731][T23654]  ? __lock_acquire+0x683/0x2cf0
[  607.727768][T23654]  ? __pfx____sys_sendmsg+0x10/0x10
[  607.727836][T23654]  ? __fget_files+0x2a/0x420
[  607.727866][T23654]  ? __fget_files+0x3a2/0x420
[  607.727904][T23654]  __x64_sys_sendmsg+0x1b1/0x290
[  607.727939][T23654]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  607.727995][T23654]  do_syscall_64+0x166/0x520
[  607.728022][T23654]  ? trace_irq_disable+0x3b/0x140
[  607.728054][T23654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.728076][T23654]  ? clear_bhb_loop+0x70/0xc0
[  607.728101][T23654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.728123][T23654] RIP: 0033:0x7f858ab9e0d9
[  607.728144][T23654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.728163][T23654] RSP: 002b:00007f858baf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  607.728187][T23654] RAX: ffffffffffffffda RBX: 00007f858ae25fa0 RCX: 00007f858ab9e0d9
[  607.728203][T23654] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  607.728217][T23654] RBP: 00007f858baf6090 R08: 0000000000000000 R09: 0000000000000000
[  607.728229][T23654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  607.728242][T23654] R13: 00007f858ae26038 R14: 00007f858ae25fa0 R15: 00007ffdb1e771f8
[  607.728277][T23654]  </TASK>
[  607.932153][T23662] 8021q: VLANs not supported on sit0
[  610.001687][T23694] __nla_validate_parse: 1 callbacks suppressed
[  610.001713][T23694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5103'.
[  610.275394][T23706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5107'.
[  610.743349][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5109'.
[  610.876556][T23718] bridge_slave_1: default FDB implementation only supports local addresses
[  611.200528][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'.
[  611.415509][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5117'.
[  611.653476][T23735] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  611.701135][T23735] bond6 (unregistering): Released all slaves
[  612.348973][T23759] netlink: 12700 bytes leftover after parsing attributes in process `syz.2.5124'.
[  612.807784][T23772] netlink: 'syz.0.5128': attribute type 64 has an invalid length.
[  612.833492][T23772] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5128'.
[  613.033441][T23780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5132'.
[  613.528514][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5135'.
[  613.702720][T23797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'.
[  613.891979][ T8339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.615773][ T8339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.906710][T23827] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  615.051757][T23835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5149'.
[  615.314797][T23835] ip6_vti0: left promiscuous mode
[  615.908235][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5159'.
[  616.289847][T23867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5162'.
[  616.443014][T23881] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  616.512289][T23881] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  616.660826][T23881] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  616.729875][T23893] block nbd3: Unsupported socket: should be TCP or UNIX.
[  616.828519][T23881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  617.075603][T23906] netlink: Unknown conntrack attr (0)
[  617.309514][T23909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5174'.
[  617.360156][T23909] atomic_op ffff8880760619e0 conn xmit_atomic 0000000000000000
[  617.438181][ T8388] smbdirect: ib_dev[syz2] removed
[  617.767942][T23920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.298375][ T4929] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  619.056345][T23961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5188'.
[  619.450631][T23966] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5187'.
[  619.503582][T23965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'.
[  619.533479][T23966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5187'.
[  620.629024][T23994] netlink: Unknown conntrack attr (0)
[  621.410799][T24023] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5199'.
[  621.710542][T24030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.839489][T24030] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5204'.
[  621.927992][T24036] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5205'.
[  622.053588][T24038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5206'.
[  622.205566][T24045] netlink: Unknown conntrack attr (0)
[  624.056809][T24095] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5222'.
[  624.488272][T24108] netlink: 'syz.0.5227': attribute type 142 has an invalid length.
[  624.963690][T24122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5230'.
[  625.218172][T24125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5231'.
[  625.304202][T24127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5231'.
[  625.482272][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5232'.
[  625.549637][T24134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5232'.
[  626.291026][T24158] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  626.508703][T24169] netlink: 'syz.3.5241': attribute type 1 has an invalid length.
[  626.666963][T24174] openvswitch: netlink: Duplicate key (type 6).
[  626.712414][T24169] bond9: entered promiscuous mode
[  626.719033][T24169] 8021q: adding VLAN 0 to HW filter on device bond9
[  626.933826][T24169] 8021q: adding VLAN 0 to HW filter on device bond9
[  626.953624][T24188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  627.001433][T24191] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  627.018378][T24169] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address
[  627.053915][T24169] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  627.069934][T24169] bond9: (slave xfrm1): making interface the new active one
[  627.078439][T24169] xfrm1: entered promiscuous mode
[  627.087264][T24169] bond9: (slave xfrm1): Enslaving as an active interface with an up link
[  627.632083][T24212] xt_hashlimit: size too large, truncated to 1048576
[  627.653844][T24213] __nla_validate_parse: 35 callbacks suppressed
[  627.653864][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'.
[  627.875984][T24213] batman_adv: batadv0: Adding interface: wlan0
[  627.936784][T24213] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.062183][T24213] batman_adv: batadv0: Interface activated: wlan0
[  629.916925][T24289] IPv6: sit1: Disabled Multicast RS
[  630.347167][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5280'.
[  630.482713][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'.
[  630.496979][T24302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5280'.
[  630.539914][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'.
[  630.691306][T24306] : left promiscuous mode
[  630.697508][T24305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5278'.
[  630.757753][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'.
[  630.779321][T14512] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  630.819027][T14512] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  631.516041][T14512] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.577870][T14499] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  632.518813][T24358] ip_tables: iptables: counters copy to user failed while replacing table
[  633.129890][T24377] Bluetooth: hci0: unsupported parameter 5135
[  633.177067][T24377] Bluetooth: hci0: unsupported parameter 8192
[  633.212727][T24377] Bluetooth: hci0: unsupported parameter 5135
[  633.280964][T24377] Bluetooth: hci0: unsupported parameter 8192
[  633.989613][T24403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.032889][T24403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.127730][T24403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.669620][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5314'.
[  635.669363][T24456] batman_adv: batadv0: Adding interface: gretap1
[  635.697628][T24456] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  635.752143][T24460] netlink: Unknown conntrack attr (0)
[  635.759280][T24456] batman_adv: batadv0: Interface activated: gretap1
[  635.787143][T24459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  637.023813][T24480] sctp: [Deprecated]: syz.4.5331 (pid 24480) Use of struct sctp_assoc_value in delayed_ack socket option.
[  637.023813][T24480] Use struct sctp_sack_info instead
[  637.479170][T24492] netlink: 'syz.1.5332': attribute type 49 has an invalid length.
[  637.612473][T24492] ip6gretap0: entered allmulticast mode
[  637.653565][T24510] ¾x9ÿ: renamed from bridge_slave_0
[  637.919593][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5344'.
[  637.980592][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5344'.
[  638.267554][T24534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5348'.
[  638.797936][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5352'.
[  638.977742][T24558] netlink: 'syz.1.5355': attribute type 2 has an invalid length.
[  639.109802][T24563] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5354'.
[  639.480735][T24577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5359'.
[  639.524520][T24577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5359'.
[  639.612428][T24577] erspan0: entered promiscuous mode
[  639.646389][T24577] gretap0: entered promiscuous mode
[  639.661730][T24577] debugfs: 'hsr1' already exists in 'hsr'
[  639.710835][T24577] Cannot create hsr debugfs directory
[  639.873895][T24587] netlink: 'syz.4.5361': attribute type 11 has an invalid length.
[  640.381506][T24597] syzkaller0: entered promiscuous mode
[  640.432056][T24597] syzkaller0: entered allmulticast mode
[  640.718534][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'.
[  640.778383][T24606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'.
[  640.916703][T24618] netlink: 'syz.1.5369': attribute type 1 has an invalid length.
[  641.003242][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5369'.
[  641.305296][T24618] 8021q: adding VLAN 0 to HW filter on device bond7
[  641.502316][T24624] bond7: (slave geneve3): making interface the new active one
[  641.554190][T24634] xt_cluster: node mask cannot exceed total number of nodes
[  641.589546][T24624] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  641.626951][T14512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.663664][T14512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.700680][T24640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5374'.
[  641.719217][T14512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.778862][T14512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.788966][T24642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5374'.
[  641.942891][T24649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5375'.
[  642.039831][T24652] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  642.049030][T24652] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5377'.
[  642.111505][T24652] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  642.169333][T24652] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.5377'.
[  642.502477][T24662] ip6t_rpfilter: unknown options
[  643.256069][T24683] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  643.377643][T24680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5386'.
[  643.408315][T24683] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  643.707297][T24699] openvswitch: netlink: Missing key (keys=40, expected=100)
[  643.944522][T24705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5394'.
[  643.990944][T24705] netlink: 'syz.2.5394': attribute type 7 has an invalid length.
[  644.047438][T24705] netlink: 'syz.2.5394': attribute type 4 has an invalid length.
[  644.635588][T24732] netlink: Invalid conntrack helper
[  644.649367][T24732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  644.666019][T24733] ip_tables: iptables: counters copy to user failed while replacing table
[  644.681502][T24736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.294473][T24753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.002025][T24776] __nla_validate_parse: 5 callbacks suppressed
[  646.002045][T24776] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5414'.
[  646.103194][T24779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5416'.
[  646.159172][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5416'.
[  646.179898][T24751] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  646.531268][T24780] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  646.554125][T24780] bond6 (unregistering): Released all slaves
[  646.603831][T24779] gretap2: entered promiscuous mode
[  646.611032][T24779] gretap2: entered allmulticast mode
[  647.947477][T24824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5425'.
[  648.188199][T24832] netlink: 'syz.2.5427': attribute type 1 has an invalid length.
[  648.233604][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5426'.
[  648.258002][T24835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5427'.
[  648.275936][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5427'.
[  648.410951][T24846] netlink: 'syz.0.5431': attribute type 3 has an invalid length.
[  648.443942][T24832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5427'.
[  648.474358][T24846] netlink: 'syz.0.5431': attribute type 1 has an invalid length.
[  648.493178][T24846] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5431'.
[  648.507110][T24846] NCSI netlink: No device for ifindex 813332851
[  648.844711][T24849] bond8: option arp_all_targets: invalid value (18446744073709551613)
[  649.026328][T24849] bond8 (unregistering): Released all slaves
[  649.223476][T24868] sctp: [Deprecated]: syz.0.5440 (pid 24868) Use of struct sctp_assoc_value in delayed_ack socket option.
[  649.223476][T24868] Use struct sctp_sack_info instead
[  649.426553][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'.
[  649.442448][T24874] dvmrp8: entered allmulticast mode
[  649.823232][T24884] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  649.842037][T24886] gretap1: entered promiscuous mode
[  649.850691][T24886] batman_adv: batadv0: Adding interface: gretap1
[  649.862210][T24886] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  649.889021][T24884] netlink: 'syz.1.5443': attribute type 83 has an invalid length.
[  649.903689][T24886] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  651.705724][T24954] __nla_validate_parse: 4 callbacks suppressed
[  651.705745][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5463'.
[  651.944296][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5463'.
[  652.231740][T24968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5468'.
[  652.390797][T24968] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5468'.
[  652.471721][T24978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5471'.
[  652.943873][T24986] IPv6: sit1: Disabled Multicast RS
[  653.000267][T24986] sit1: entered allmulticast mode
[  653.691529][T25007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5479'.
[  653.857334][T25007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5479'.
[  654.067365][T25007] netlink: 'syz.2.5479': attribute type 4 has an invalid length.
[  654.166760][T25016] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5479'.
[  654.224026][T25016] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5479'.
[  654.249995][T25016] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  654.343857][T25036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5484'.
[  654.748681][T25055] netlink: 'syz.2.5489': attribute type 3 has an invalid length.
[  655.092694][T25064] netlink: Unknown conntrack attr (0)
[  655.598527][T25089] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  655.928614][T25100] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  656.026304][T25106] netlink: 'syz.2.5503': attribute type 9 has an invalid length.
[  656.125451][T25111] vlan3: entered allmulticast mode
[  656.295947][T25117] netlink: Unknown conntrack attr (0)
[  658.142862][T25174] __nla_validate_parse: 1 callbacks suppressed
[  658.142885][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5526'.
[  659.487635][T25208] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  659.721788][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5540'.
[  660.070040][T25229] xt_policy: output policy not valid in PREROUTING and INPUT
[  660.173353][T25234] syzkaller1: tun_chr_ioctl cmd 1074025677
[  660.279841][T25234] syzkaller1: linktype set to 823
[  660.562376][T25244] xt_ecn: cannot match TCP bits for non-tcp packets
[  660.911416][T25252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5552'.
[  661.114631][T25229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5544'.
[  661.527317][T25276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5556'.
[  661.708162][T25282] lo speed is unknown, defaulting to 1000
[  661.774047][T25282] lo speed is unknown, defaulting to 1000
[  661.789038][T25282] lo speed is unknown, defaulting to 1000
[  661.900574][T25285] netlink: Unknown conntrack attr (0)
[  662.654437][T25282] infiniband syz1: set down
[  662.667501][ T8339] lo speed is unknown, defaulting to 1000
[  662.682291][T25282] infiniband syz1: added lo
[  662.873224][T25282] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  663.082194][T25282] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  663.136900][T25282] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  663.436414][T25282] RDS/IB: syz1: added
[  663.519194][T25282] smc: adding ib device syz1 with port count 1
[  663.539070][T25282] smc:    ib device syz1 port 1 has no pnetid
[  663.560064][ T8339] lo speed is unknown, defaulting to 1000
[  663.598537][T25282] lo speed is unknown, defaulting to 1000
[  663.631509][T25325] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5571'.
[  663.706702][T25325] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5571'.
[  664.786293][T25343] veth5: entered allmulticast mode
[  664.845825][T25347] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  664.917036][T14513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.927066][T25347] Bluetooth: hci0: unsupported parameter 5134
[  664.927091][T25347] Bluetooth: hci0: unsupported parameter 8192
[  664.927106][T25347] Bluetooth: hci0: unsupported parameter 5134
[  664.927121][T25347] Bluetooth: hci0: unsupported parameter 8192
[  664.994289][T14513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.007260][T25352] netlink: 'syz.0.5582': attribute type 8 has an invalid length.
[  665.017759][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'.
[  665.029189][T25353] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  665.039095][T25353] tipc: Enabled bearer <udp:syz0>, priority 10
[  665.046983][    C1] ------------[ cut here ]------------
[  665.047001][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  665.047038][    C1] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: syz.3.5580/25353
[  665.047167][    C1] Modules linked in:
[  665.047216][    C1] CPU: 1 UID: 0 PID: 25353 Comm: syz.3.5580 Not tainted syzkaller #0 PREEMPT(full) 
[  665.047247][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  665.047264][    C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  665.047296][    C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  665.047319][    C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246
[  665.047344][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  665.047361][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  665.047380][    C1] RBP: ffff888073ec0f40 R08: 0000000000000000 R09: 0000000000000000
[  665.047398][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807a303028
[  665.047417][    C1] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888073ec3258
[  665.047438][    C1] FS:  00007f858bad56c0(0000) GS:ffff888125021000(0000) knlGS:0000000000000000
[  665.047462][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  665.047481][    C1] CR2: 000000110c2ac090 CR3: 0000000033d36000 CR4: 00000000003526f0
[  665.047504][    C1] Call Trace:
[  665.047515][    C1]  <IRQ>
[  665.047544][    C1]  rate_control_send_low+0x1a7/0x7b0
[  665.047582][    C1]  rate_control_get_rate+0x20b/0x5d0
[  665.047622][    C1]  ieee80211_beacon_get_finish+0x385/0x6c0
[  665.047707][    C1]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  665.047738][    C1]  ? local_lock_release+0x9c/0x160
[  665.047810][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  665.047863][    C1]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  665.047896][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  665.047933][    C1]  __ieee80211_beacon_get+0xe2b/0x1920
[  665.047972][    C1]  ? __lock_acquire+0x683/0x2cf0
[  665.048019][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  665.048059][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  665.048105][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  665.048228][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  665.048293][    C1]  __iterate_interfaces+0x2af/0x5a0
[  665.048325][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  665.048384][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  665.048419][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  665.048450][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  665.048484][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  665.048548][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  665.048589][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  665.048630][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  665.048682][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  665.048719][    C1]  handle_softirqs+0x226/0x860
[  665.048756][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  665.048795][    C1]  __irq_exit_rcu+0xcb/0x220
[  665.048828][    C1]  irq_exit_rcu+0x9/0x30
[  665.048856][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  665.048888][    C1]  </IRQ>
[  665.048898][    C1]  <TASK>
[  665.048910][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  665.048958][    C1] RIP: 0010:console_flush_all+0x7d2/0xaf0
[  665.048990][    C1] Code: ff ff e8 21 4d 21 00 90 0f 0b 90 e9 9c fc ff ff e8 13 4d 21 00 e8 7e 24 33 0a 48 85 db 74 c0 e8 04 4d 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 e6 8e
[  665.049013][    C1] RSP: 0018:ffffc9000dbb6e40 EFLAGS: 00000293
[  665.049037][    C1] RAX: ffffffff81a5c04c RBX: ffffc9000dbb6fa0 RCX: ffff888071510000
[  665.049059][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  665.049076][    C1] RBP: ffffc9000dbb6f50 R08: ffffffff90589437 R09: 1ffffffff20b1286
[  665.049097][    C1] R10: dffffc0000000000 R11: fffffbfff20b1287 R12: dffffc0000000000
[  665.049118][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f479a00
[  665.049145][    C1]  ? console_flush_all+0x7cc/0xaf0
[  665.049183][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  665.049227][    C1]  ? console_flush_all+0x123/0xaf0
[  665.049264][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  665.049301][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  665.049340][    C1]  console_unlock+0xd1/0x1c0
[  665.049372][    C1]  ? __pfx_console_unlock+0x10/0x10
[  665.049401][    C1]  ? _printk+0xdd/0x130
[  665.049436][    C1]  vprintk_emit+0x485/0x560
[  665.049466][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  665.049507][    C1]  _printk+0xdd/0x130
[  665.049541][    C1]  ? __pfx__printk+0x10/0x10
[  665.049583][    C1]  __tipc_nl_bearer_enable+0x1101/0x1480
[  665.049659][    C1]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  665.049705][    C1]  ? __mutex_lock+0x5d4/0x1550
[  665.049749][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  665.049790][    C1]  ? __nla_parse+0x40/0x60
[  665.049854][    C1]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  665.049935][    C1]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  665.049979][    C1]  tipc_nl_bearer_enable+0x22/0x40
[  665.050013][    C1]  genl_family_rcv_msg_doit+0x233/0x340
[  665.050058][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  665.050108][    C1]  ? bpf_lsm_capable+0x9/0x20
[  665.050140][    C1]  ? security_capable+0x7e/0x2c0
[  665.050342][    C1]  genl_rcv_msg+0x614/0x7a0
[  665.050390][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.050425][    C1]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  665.050463][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  665.050502][    C1]  netlink_rcv_skb+0x226/0x4a0
[  665.050531][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.050569][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  665.050614][    C1]  ? down_read+0x2be/0x330
[  665.050665][    C1]  genl_rcv+0x28/0x40
[  665.050697][    C1]  netlink_unicast+0x7bd/0x940
[  665.050810][    C1]  netlink_sendmsg+0x813/0xb40
[  665.050851][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.050885][    C1]  ? aa_sock_msg_perm+0xf6/0x1c0
[  665.050984][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.051012][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  665.051048][    C1]  ____sys_sendmsg+0x54e/0x850
[  665.051094][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.051145][    C1]  ? import_iovec+0x73/0xa0
[  665.051205][    C1]  ___sys_sendmsg+0x2a5/0x360
[  665.051243][    C1]  ? __lock_acquire+0x683/0x2cf0
[  665.051287][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.051332][    C1]  ? futex_wait+0x2a2/0x390
[  665.051400][    C1]  ? __fget_files+0x2a/0x420
[  665.051435][    C1]  ? __fget_files+0x3a2/0x420
[  665.051484][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  665.051529][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.051595][    C1]  do_syscall_64+0x166/0x520
[  665.051628][    C1]  ? trace_irq_disable+0x3b/0x140
[  665.051677][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.051705][    C1]  ? clear_bhb_loop+0x70/0xc0
[  665.051739][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.051767][    C1] RIP: 0033:0x7f858ab9e0d9
[  665.051793][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.051817][    C1] RSP: 002b:00007f858bad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.051847][    C1] RAX: ffffffffffffffda RBX: 00007f858ae26090 RCX: 00007f858ab9e0d9
[  665.051869][    C1] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009
[  665.051887][    C1] RBP: 00007f858ac35024 R08: 0000000000000000 R09: 0000000000000000
[  665.051905][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.051922][    C1] R13: 00007f858ae26128 R14: 00007f858ae26090 R15: 00007ffdb1e771f8
[  665.051964][    C1]  </TASK>
[  665.051987][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  665.052006][    C1] CPU: 1 UID: 0 PID: 25353 Comm: syz.3.5580 Not tainted syzkaller #0 PREEMPT(full) 
[  665.052036][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  665.052051][    C1] Call Trace:
[  665.052070][    C1]  <IRQ>
[  665.052082][    C1]  vpanic+0x56d/0xa60
[  665.052122][    C1]  ? __pfx__printk+0x10/0x10
[  665.052148][    C1]  ? __pfx_vpanic+0x10/0x10
[  665.052183][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  665.052223][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  665.052273][    C1]  panic+0xc5/0xd0
[  665.052308][    C1]  ? __pfx_panic+0x10/0x10
[  665.052365][    C1]  __warn+0x315/0x4c0
[  665.052400][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  665.052434][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  665.052468][    C1]  __report_bug+0x276/0x570
[  665.052560][    C1]  ? __kernel_text_address+0xd/0x30
[  665.052588][    C1]  ? __rate_control_send_low+0x60c/0x8a0
[  665.052620][    C1]  ? __pfx___report_bug+0x10/0x10
[  665.052673][    C1]  ? stack_trace_save+0xa9/0x100
[  665.052707][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  665.052749][    C1]  report_bug_entry+0x19b/0x290
[  665.052783][    C1]  ? __rate_control_send_low+0x638/0x8a0
[  665.052810][    C1]  ? __rate_control_send_low+0x63d/0x8a0
[  665.052837][    C1]  handle_bug+0xce/0x200
[  665.052875][    C1]  exc_invalid_op+0x1a/0x50
[  665.052910][    C1]  asm_exc_invalid_op+0x1a/0x20
[  665.052936][    C1] RIP: 0010:__rate_control_send_low+0x638/0x8a0
[  665.052965][    C1] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f
[  665.052987][    C1] RSP: 0018:ffffc90000a088f8 EFLAGS: 00010246
[  665.053009][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  665.053026][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff906a7e60
[  665.053043][    C1] RBP: ffff888073ec0f40 R08: 0000000000000000 R09: 0000000000000000
[  665.053060][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807a303028
[  665.053077][    C1] R13: dffffc0000000000 R14: ffffffff906a7e60 R15: ffff888073ec3258
[  665.053117][    C1]  ? __rate_control_send_low+0x600/0x8a0
[  665.053171][    C1]  rate_control_send_low+0x1a7/0x7b0
[  665.053207][    C1]  rate_control_get_rate+0x20b/0x5d0
[  665.053246][    C1]  ieee80211_beacon_get_finish+0x385/0x6c0
[  665.053284][    C1]  ? kmem_cache_alloc_node_noprof+0x3bc/0x620
[  665.053315][    C1]  ? local_lock_release+0x9c/0x160
[  665.053354][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  665.053406][    C1]  ? __ieee80211_beacon_get+0xdcc/0x1920
[  665.053440][    C1]  ? __ieee80211_beacon_get+0x36/0x1920
[  665.053476][    C1]  __ieee80211_beacon_get+0xe2b/0x1920
[  665.053517][    C1]  ? __lock_acquire+0x683/0x2cf0
[  665.053565][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  665.053610][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  665.053664][    C1]  mac80211_hwsim_beacon_tx+0x378/0x820
[  665.053697][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  665.053735][    C1]  __iterate_interfaces+0x2af/0x5a0
[  665.053765][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  665.053795][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  665.053828][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  665.053859][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  665.053891][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  665.053932][    C1]  mac80211_hwsim_beacon+0xaf/0x240
[  665.053972][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  665.054013][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  665.054063][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  665.054105][    C1]  handle_softirqs+0x226/0x860
[  665.054140][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  665.054179][    C1]  __irq_exit_rcu+0xcb/0x220
[  665.054210][    C1]  irq_exit_rcu+0x9/0x30
[  665.054239][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  665.054270][    C1]  </IRQ>
[  665.054279][    C1]  <TASK>
[  665.054290][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  665.054318][    C1] RIP: 0010:console_flush_all+0x7d2/0xaf0
[  665.054353][    C1] Code: ff ff e8 21 4d 21 00 90 0f 0b 90 e9 9c fc ff ff e8 13 4d 21 00 e8 7e 24 33 0a 48 85 db 74 c0 e8 04 4d 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 e6 8e
[  665.054376][    C1] RSP: 0018:ffffc9000dbb6e40 EFLAGS: 00000293
[  665.054398][    C1] RAX: ffffffff81a5c04c RBX: ffffc9000dbb6fa0 RCX: ffff888071510000
[  665.054418][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  665.054434][    C1] RBP: ffffc9000dbb6f50 R08: ffffffff90589437 R09: 1ffffffff20b1286
[  665.054453][    C1] R10: dffffc0000000000 R11: fffffbfff20b1287 R12: dffffc0000000000
[  665.054473][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f479a00
[  665.054499][    C1]  ? console_flush_all+0x7cc/0xaf0
[  665.054546][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  665.054578][    C1]  ? console_flush_all+0x123/0xaf0
[  665.054613][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  665.054644][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  665.054687][    C1]  console_unlock+0xd1/0x1c0
[  665.054714][    C1]  ? __pfx_console_unlock+0x10/0x10
[  665.054741][    C1]  ? _printk+0xdd/0x130
[  665.054773][    C1]  vprintk_emit+0x485/0x560
[  665.054803][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  665.054841][    C1]  _printk+0xdd/0x130
[  665.054873][    C1]  ? __pfx__printk+0x10/0x10
[  665.054914][    C1]  __tipc_nl_bearer_enable+0x1101/0x1480
[  665.054960][    C1]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  665.055003][    C1]  ? __mutex_lock+0x5d4/0x1550
[  665.055044][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  665.055083][    C1]  ? __nla_parse+0x40/0x60
[  665.055115][    C1]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  665.055150][    C1]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  665.055191][    C1]  tipc_nl_bearer_enable+0x22/0x40
[  665.055225][    C1]  genl_family_rcv_msg_doit+0x233/0x340
[  665.055273][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  665.055323][    C1]  ? bpf_lsm_capable+0x9/0x20
[  665.055352][    C1]  ? security_capable+0x7e/0x2c0
[  665.055398][    C1]  genl_rcv_msg+0x614/0x7a0
[  665.055439][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.055472][    C1]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  665.055507][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  665.055544][    C1]  netlink_rcv_skb+0x226/0x4a0
[  665.055571][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  665.055613][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  665.055667][    C1]  ? down_read+0x2be/0x330
[  665.055706][    C1]  genl_rcv+0x28/0x40
[  665.055734][    C1]  netlink_unicast+0x7bd/0x940
[  665.055786][    C1]  netlink_sendmsg+0x813/0xb40
[  665.055826][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.055858][    C1]  ? aa_sock_msg_perm+0xf6/0x1c0
[  665.055905][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.055940][    C1]  sock_sendmsg_nosec+0x13a/0x180
[  665.055973][    C1]  ____sys_sendmsg+0x54e/0x850
[  665.056018][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.056065][    C1]  ? import_iovec+0x73/0xa0
[  665.056096][    C1]  ___sys_sendmsg+0x2a5/0x360
[  665.056130][    C1]  ? __lock_acquire+0x683/0x2cf0
[  665.056169][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.056211][    C1]  ? futex_wait+0x2a2/0x390
[  665.056275][    C1]  ? __fget_files+0x2a/0x420
[  665.056309][    C1]  ? __fget_files+0x3a2/0x420
[  665.056356][    C1]  __x64_sys_sendmsg+0x1b1/0x290
[  665.056397][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.056461][    C1]  do_syscall_64+0x166/0x520
[  665.056492][    C1]  ? trace_irq_disable+0x3b/0x140
[  665.056525][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.056552][    C1]  ? clear_bhb_loop+0x70/0xc0
[  665.056584][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.056610][    C1] RIP: 0033:0x7f858ab9e0d9
[  665.056632][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.056662][    C1] RSP: 002b:00007f858bad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.056689][    C1] RAX: ffffffffffffffda RBX: 00007f858ae26090 RCX: 00007f858ab9e0d9
[  665.056708][    C1] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009
[  665.056724][    C1] RBP: 00007f858ac35024 R08: 0000000000000000 R09: 0000000000000000
[  665.056745][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.056761][    C1] R13: 00007f858ae26128 R14: 00007f858ae26090 R15: 00007ffdb1e771f8
[  665.056801][    C1]  </TASK>
[  665.057430][    C1] Kernel Offset: disabled