last executing test programs:

3.162106043s ago: executing program 2 (id=3712):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="0500340000000000323c4d225042a88a2e6eb715762ee234c640206027028852017f7141a37990ec31aa909c48e5c8dce564d5b6ebb092517bc99d4b845acddd3eb55cde584ede22aab28dc43c6d4421eaa4e85b2fa5177020dddf8600a0de15f1b602484730c1e39ae1239fac138624475f8d7916cb800a3bc13cc8881c37dea32dd508463b606af9a1938ca1cb211fd28c488baf1a8f28434ea448b7d4"], 0x24}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20028008}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x17e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0x6, 0x1, 0x5, 0x8, 0x3, 0x3ffc0, 0x5, 0x101]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff636}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffff800}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x10000]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
accept(r0, 0x0, 0x0)

2.906504721s ago: executing program 2 (id=3716):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261, 0x100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={<r5=>r4})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendto$packet(r5, &(0x7f0000000280)="9b870e5aa3e63c448ff0f52c84bf237bef39737106cc02aed299b2a1e4bb03d398c22bbf7a59490e24f4f7ae20ee9063e60b53caffbebfd5e89a1d5bb7e653cff608a365fd7ce3b80816e08e89fc1fc1b755534521602e61e1ef5f821e00407e599ecdabaa369b2e7709391b5f4d796a24c53502ad1f5d07bb29d1d2d2d22f136de51dd946cddb776db94957c4cadfec", 0x90, 0x20000000, &(0x7f00000001c0)={0x11, 0x6, r6, 0x1, 0x6}, 0x14)
socket$inet(0x2, 0xa, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261, 0x100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r4}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)}, 0x10) (async)
sendto$packet(r5, &(0x7f0000000280)="9b870e5aa3e63c448ff0f52c84bf237bef39737106cc02aed299b2a1e4bb03d398c22bbf7a59490e24f4f7ae20ee9063e60b53caffbebfd5e89a1d5bb7e653cff608a365fd7ce3b80816e08e89fc1fc1b755534521602e61e1ef5f821e00407e599ecdabaa369b2e7709391b5f4d796a24c53502ad1f5d07bb29d1d2d2d22f136de51dd946cddb776db94957c4cadfec", 0x90, 0x20000000, &(0x7f00000001c0)={0x11, 0x6, r6, 0x1, 0x6}, 0x14) (async)
socket$inet(0x2, 0xa, 0x4) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) (async)

2.852237093s ago: executing program 0 (id=3717):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00'}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x4, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000b06010200000000000400078009d8140073797a3100"/44], 0x2c}, 0x1, 0x0, 0x0, 0x4064}, 0x4800)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'})
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x4008002)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, 0x0, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000000000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800d28274c40516fbc8363aab3d6c340000000000"], 0x50)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0))

2.705879771s ago: executing program 4 (id=3718):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newqdisc={0x58, 0x24, 0x100, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x68a0, 0xfffffffc, 0x19d, 0x7fff, 0xc0000, 0xfffffffe, 0x6, 0x4, 0x3ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
close(r4) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newqdisc={0x58, 0x24, 0x100, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x68a0, 0xfffffffc, 0x19d, 0x7fff, 0xc0000, 0xfffffffe, 0x6, 0x4, 0x3ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)

2.563326957s ago: executing program 2 (id=3719):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe000000000000fdff9500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2}, 0x94)

2.307989842s ago: executing program 0 (id=3720):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2d, 0x24000, 0x801ff, 0x4, 0x5, 0x0, 0xf7, 0x0, 0x10, 0x7f, 0x400, 0x2, 0x2f, 0x6, 0x0, 0x7f, [0x40, 0x7]}})
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r5, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000480)='syzkaller\x00', 0xfffffff5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r8, r9, 0x1], &(0x7f0000000680)=[{0x5, 0x2, 0xd, 0xc}, {0x3, 0x4, 0x2, 0x9}, {0x2, 0x4, 0x4, 0x9}], 0x10, 0x4}, 0x94)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf25690000000500d200060000000500d200090000000500d256a300010000000a00060008021100000000000a00060008021100000100000a00060008021100000000000600d40006000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x20040000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0x4, 0x1, 0xff84}, {0x8001, 0x101, 0x78, 0x4, 0x6}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x50b}, [@TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_INT=0xfffffff7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ca4493cc3d043b358562", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="c0"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="94", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4b0b7b3e89ed58907572"]}, @TCA_EM_META_RVALUE={0x0, 0x3, [@TCF_META_TYPE_VAR="17f8a546"]}, @TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_VAR="dfbb864e509aa203ac7e", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd1c0, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x6, 0x1, 0x0, r8}, @jmp={0x5, 0x1, 0x0, 0x8, 0x5, 0xc, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x64, '\x00', r10, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x2, 0x3de}, 0x10, 0xffffffffffffffff, r1, 0x6, &(0x7f00000008c0)=[r9, r9, r9, r8, r8, r8, r8], &(0x7f0000000900)=[{0x5, 0x5, 0xb, 0x8}, {0x4, 0x3, 0xe, 0x6}, {0x3, 0x3, 0x5, 0xa}, {0x3, 0x1, 0x3, 0x3}, {0x5, 0x2, 0xa, 0x1}, {0x2, 0x2, 0xe, 0x8}], 0x10, 0x2}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100005ff000039cbc920000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES64=r4], 0x3c}}, 0x20000000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c087}, 0x2000400c)

2.271437888s ago: executing program 2 (id=3721):
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x1})
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)

2.223806529s ago: executing program 4 (id=3722):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.09754593s ago: executing program 4 (id=3723):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="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"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4)

1.983484857s ago: executing program 3 (id=3724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x3, 0x10001}]}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8}, 0x28)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000400)=0x80000000, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd)

1.763486214s ago: executing program 4 (id=3726):
r0 = socket(0x10, 0x803, 0x1)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x7, 0xfd}, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r3, 0x1300}, {r4, 0x13a8}, {r2, 0x2201}], 0x3, 0x0, 0x0, 0x0)
ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000640)={0x0, 0xffffffffffffffff, r1, 0x8, 0x200, '\x00', {0x2, 0x4, 0x7, 0x5, 0x1, 0x9, 0x5, 0x9, {0xfff, 0x4}, {0x3, 0x7}, {0x8, 0x2}, 0x9, 0x4, 0x5, 0x4, 0x5, 0xfff4, 0x3, 0x1800, 0x2c, 0x1, '\x00', 0x9, 0x9, 0x86, 0xac}})
syz_emit_ethernet(0x53, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a15004500670000030690787f000001ac1414aa014410da500000000800030000000000000000000000000000000000000400004e2100004e24000000000069edf44650aef4efa8c8fbfb5e4ffcea5e4d3d63b7d3d0e02b2defc9f309748ff57c1bf4abb2fb75d4446b6a5e3e"], 0x0)
close(r2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8ed09da23373d679}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r8, @ANYRES16=r9], 0x1c4}, 0x1, 0x0, 0x0, 0x4044801}, 0x2000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x0, 0x80000, 0x0, &(0x7f0000000380)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x4883, 0xffffffffffffffd5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x6, 0x3, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)

1.574286106s ago: executing program 1 (id=3727):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48003, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0x1}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x2, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r4 = socket(0x2c, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtfilter={0x1cc, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x198, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_U32_ACT={0x18c, 0x7, [@m_connmark={0x188, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x101, 0x10000000, 0x9, 0x95}, 0x78a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0xfffffffffffffff9, 0x3, 0x401}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0xffffffffffffffff, 0x405, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe814, 0xfffffffd, 0x1, 0x4bf5, 0x7}, 0x9}}]}, {0xe5, 0x6, "624f36172c7e26778490eca5a419a9a4e3f7d309478f1250053558e1a7f575cf832697a1cada56c9559d0530cbd7bb09b221960ffdb5c70eed8629e4ea6a60fef4dfc5ad2f80fafb21ce24271efc9ed823d7e546cd31520e5e14e0052fa964d3731ea641373c79f2bf94bfab2926b73e1c13c12bb31e3390709bd9f7d7e8fb8c1c9208bb974e41645535d1e667f622276de55fc89e4546a0385b87ba4f1f1dc46c7a3541095cded07482c7d1cd4b8738f235b24571c6182b73a8b8228bb84d3160d460d0a391d77fa2ecdf5f3ed7432b046c2c4edc31de906bfaf721b08fe79521"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x1cc}}, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x2, 0xffffffff)
epoll_create1(0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0xc0000011})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', <r9=>0x0, 0x4, 0x1, 0x7f, 0x6, 0x39, @mcast1, @local, 0x8, 0x1, 0xdd, 0x3}})
setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000003c0)={@mcast2, r9}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400002d000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0)
socket(0xa, 0x3, 0xff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0)=0x1c1, 0x4)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'veth0_to_bridge\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
r12 = socket(0x6, 0x3, 0x0)
r13 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r12], 0x40}}, 0x0)
close(0x4)

1.48282561s ago: executing program 0 (id=3728):
syz_emit_ethernet(0x3b6, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xf)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000700)=""/50, 0x32}], 0x2}}], 0x1, 0x40, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000"], 0x50)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a048835440efd500ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544a"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="92da0100ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10})

1.466221611s ago: executing program 3 (id=3729):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x84}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)

1.306272087s ago: executing program 3 (id=3730):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40000100)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc)

1.20412018s ago: executing program 3 (id=3731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', <r2=>0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b1600000000000000000200000a3800048018000180080001006f7366000c000280080001400000000d1c0001800a00010071756575650000000c000280080004400003000f0900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x25dfdbf9, {0x0, 0x0, 0x74, r2, {0x1, 0xfff1}, {0xafabc05531515610, 0xc}, {0xa, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x5c004}, 0x24048004)

1.053075185s ago: executing program 4 (id=3732):
unshare(0x20000400)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000f14010027bd7000ffdbdf251100450069625f6d756c746963"], 0x34}}, 0xc080) (async)
unshare(0x2021480) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r1, 0x2, 0x1}, 0x50)

838.800309ms ago: executing program 3 (id=3733):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
listen(r5, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x3, 0x9, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x27}, @loopback}, 0x10) (async, rerun: 32)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 32)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x22c, 0x2e, 0x2, 0x0, 0x25dfdbff, {0xc, 0x7c}, [@nested={0x4, 0xc4}, @nested={0x4, 0x2}, @nested={0x4, 0x3}, @nested={0x20b, 0xed, 0x0, 0x1, [@nested={0x161, 0x4d, 0x0, 0x1, [@generic="5177906cc9ebb9016ca79e0870521362d99bfc41c0e6573d6bd0661d245d55bf91bfaf5f4306d6aca959e0ff789e4b1c2bf7b3af1675c3cdeeb6e3cdb231acbb2e375eb2939e148616484c08a736696caac124dde4f6a1c4538ecfe0ac806363f4b0b34ad688ebf1bbe2f9fe0bfdd4af2dd6c0b1afbae852045a685f695ca65db5b9aaa331515b59db9cce0eb43717f28a", @generic="7d6a5c2875065d58a25fcc42a556", @generic="234398ea87894ba80c145ca841743aff806bb148e1a2138d2f2258528198839b6a3a311120573f51e7f0f0459f73d09e96dfb81fe835911f0423e0c58e097bb0dca472ac1fccad0afb89f78cd22876a3b9fc33bfe37266b6dab9d2802f1da482796ce56560f3236969fefc7c0cff2d15b350f8fd900f2eb18028a012c56834781137c2f14a4f2d241a3dcdfc5ecae54ce87a0327927266200ffd5f2ceec018b78258a19cc1a556f67d7716511254", @nested={0x4, 0x104}, @typed={0xc, 0xa4, 0x0, 0x0, @u64=0xd}]}, @nested={0x4, 0x69}, @typed={0x8, 0x92, 0x0, 0x0, @uid}, @generic="ef4059098736da952eb3476696213811d08efde481a0a8c16252bc0f73dea4fd5045aeabec35c8be6414eac31cb04d367a912d3fe788701bcf2137cbe41b6651366051e219698b4c67ff43f3a8ede5beb138391e3628db4281df47f0f2440291ea96aeb5aec475860153e41f3d43b302e0cdb28a9c6f6ce6ba2b0b45669ad8a6b323f4f8c557341ca01f5cb7d221cc04b025f06e731b3e"]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x2000a014}, 0xc010)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20044890)

838.332861ms ago: executing program 4 (id=3734):
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000001d0000000800e95a", @ANYRES32=0x0, @ANYBLOB="38002f800c0002000000000000000000280003801c0003800600010000000000080002000200000006000300a3aa0000080001"], 0x54}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'tunl0\x00'})
ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000340)={0x0, r3, r3, 0x7, 0x7fffffffffffffff, '\x00', {0xf2, 0x704, 0x2, 0x0, 0x8, 0xffffffff, 0xa, 0x1c0000000000, {0x10, 0x40000000}, {0x1, 0x9}, {0x3, 0x1}, 0x4, 0x3, 0x5, 0x5, 0x100, 0x6, 0x9, 0xa1, 0x865, 0x528, '\x00', 0x3, 0x0, 0x1000, 0x1}})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x7}]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000090000000040000800", @ANYRES32=r2, @ANYRES32=r9], 0x5c}}, 0x800)

790.995236ms ago: executing program 1 (id=3735):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7, 0x0, 0x1d00}, 0x0)

653.792929ms ago: executing program 3 (id=3736):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "713686b7664e40e55aaff1ab0d83d6460459649ae1386d59e8b18d03c9a12d58c765ab6a4e19fdb06bccadd2e6dd7b9f350d770baa41772ab98b79c788844c368e"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
socket(0x2000000015, 0x80005, 0x0)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r8, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
r9 = socket$kcm(0x29, 0x7, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000500)={{<r10=>r7, &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', 0x10002, &(0x7f00000003c0)={@_ha_fsid={[0x7, 0x6]}, {0x4, 0xfffd, 0x6, 0x9}}, 0x8149, &(0x7f0000000400), &(0x7f0000000440)=0x640}, {[0x0, 0xb09a, 0x1f1b, 0x5]}, 0x4, 0x75, &(0x7f0000000480)=""/117})
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000580)={r10})
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080), 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x26}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000015)

522.844862ms ago: executing program 0 (id=3737):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3, 0xa}, {0xffe0, 0xd}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4051}, 0x4000000)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000000080)={0x1d, r8}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000001e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000980)=@delchain={0x14b4, 0x65, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xc}, {0xfff3, 0x4}, {0xc, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1488, 0x2, [@TCA_BPF_POLICE={0xc58, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa18}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x8fa4, 0x5, 0x1, 0x6, 0x9, 0x10000, 0x2, 0x5, 0x9, 0xba, 0x3, 0x6, 0x2, 0x69, 0x7, 0x7fff, 0x0, 0x0, 0xfffffffb, 0x4, 0x4d2c, 0x8000, 0xb721, 0x8, 0xfffffffe, 0x9, 0x6, 0x6, 0x3ff, 0x7, 0x4, 0x5, 0x1, 0x98f, 0x0, 0xe, 0x6, 0xfffffffc, 0x1, 0x1, 0xe4, 0x1, 0x0, 0x2, 0x0, 0x9, 0x2, 0xd, 0x80000000, 0x1, 0x3, 0x9, 0x0, 0x7, 0x8, 0x80, 0x4000, 0x1, 0x5, 0x0, 0x3, 0x2, 0x90, 0x1, 0x2, 0x8, 0x1, 0x9, 0x8, 0xfffffffe, 0x1000, 0x1eee, 0x100, 0x3, 0x5, 0x7, 0x1, 0x40, 0x9, 0x0, 0x100, 0x9, 0x3, 0x6, 0x7fff, 0xfff, 0x6, 0x401, 0x5, 0x0, 0x6, 0x8, 0x83c, 0x1, 0x5, 0x61b, 0x401, 0xfff, 0x400, 0x8fb, 0xf, 0x8, 0xc, 0x0, 0xd11, 0x4, 0xfffffff9, 0x9, 0x1ff, 0x4, 0xfff, 0x1, 0x800, 0x80000001, 0x5, 0x9, 0x2ba2, 0x2, 0x4940, 0x1, 0x9, 0x1, 0xe3, 0x1, 0x4fd, 0xffffffff, 0xffffdfdd, 0xfb, 0x1, 0x3, 0xfffffffa, 0x6876bec5, 0x0, 0x4, 0x7, 0x5, 0x5, 0x4, 0x0, 0x6, 0x1, 0x1, 0x1, 0x7, 0x6, 0x6, 0x708, 0x8, 0x5, 0x84c1, 0xb1, 0xfffffff7, 0x0, 0x5, 0x8, 0x8, 0x1ff, 0x4, 0x0, 0x78, 0x0, 0xd361, 0x7ff, 0x7, 0x80000000, 0x2, 0x5, 0x2, 0x94f, 0xe1f9, 0x8, 0x1000, 0x47e3, 0x8, 0x0, 0x200, 0xfffffc00, 0x8000, 0xfffffe1f, 0x8, 0x401, 0x2, 0x139, 0x1ff, 0x5, 0x2, 0x10, 0x7, 0x5, 0xd, 0x6, 0x8, 0x7b3d, 0x0, 0x3, 0x8, 0x7, 0x8, 0x401, 0xb, 0xe8, 0xa, 0x10001, 0x5, 0x23f1, 0x2, 0x4, 0x7ff, 0x6, 0x75, 0x8000, 0x400, 0x10, 0xfb0, 0x5a5, 0xc7b, 0x8, 0x559, 0x3ff, 0xcef, 0x3, 0x6, 0x6353, 0x6, 0x7, 0x81, 0x4, 0xfcd, 0x6, 0x6, 0x94e1, 0x4, 0x80, 0x3, 0x7d4, 0x7, 0xfffffff9, 0x9, 0xb, 0x1000, 0x0, 0xb, 0x71, 0x536, 0xffff, 0x2, 0x1, 0x8, 0x140, 0x2, 0x4, 0xdb4, 0x9, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7d135f08, 0x6, 0xd7a, 0x8, 0x5, 0x9, 0x8, 0xcd, 0x6, 0x80000001, 0x40, 0x566, 0xf2f, 0x0, 0xffff, 0x7, 0xa, 0x6, 0x6, 0x5, 0x2, 0x5, 0x1, 0x6, 0x0, 0x2, 0xd, 0x3, 0xe, 0x808, 0x54f3, 0x0, 0xffffffff, 0x4, 0xffffffff, 0x8, 0x5, 0x5, 0x0, 0x1, 0x1, 0x2, 0x9, 0xb, 0xa, 0x2, 0x451, 0x24, 0x4, 0x7fffffff, 0x6, 0x47, 0xfffffffe, 0x1, 0x1, 0x9e0, 0x7, 0x3a713aa0, 0x7, 0x0, 0xfffff1f7, 0x8, 0x7f, 0x7, 0x1, 0x292f, 0x80000000, 0x27, 0x7, 0x4, 0x7, 0x10001, 0x4e3, 0x5, 0x9, 0x7, 0x9, 0x8, 0x10, 0x7, 0x0, 0xfffffff9, 0x2, 0x7, 0x5, 0x2, 0xfffffffd, 0x40, 0xfd, 0x7fffffff, 0x7, 0x7, 0x2, 0x2, 0x9, 0x4, 0x23, 0x1, 0x14, 0x0, 0x9, 0x7, 0x2, 0x60ce, 0x77237a26, 0x6, 0x80, 0x8, 0x7e, 0x4, 0x5, 0x4, 0x80000000, 0x4, 0x9, 0x7, 0x1, 0x5, 0x8000, 0x4, 0xffff, 0x7, 0x81, 0x0, 0x8, 0x4376, 0x7, 0xffff, 0x9, 0x7, 0x800, 0x136b, 0xfff, 0x6, 0x1, 0x80000000, 0x5, 0x3ff, 0x8, 0x1, 0x1ff, 0xca14, 0x18, 0x8, 0x4, 0xeb, 0x72fe, 0x5, 0x8, 0x655, 0x4, 0xd, 0x2, 0x3ff, 0x5, 0x8, 0x3, 0xffffffff, 0xe1f, 0x3, 0x6, 0x80000001, 0x1000, 0x1, 0x7, 0xfffffeff, 0x401, 0x1, 0xe5, 0xb75, 0x80000001, 0xdbd, 0xfffffffe, 0x3, 0x7, 0x5, 0x7, 0x8, 0x10001, 0x1, 0x3, 0x7, 0x200, 0x3, 0x3ff, 0x7, 0x7, 0x2, 0x8, 0x9, 0xec, 0x6, 0x8, 0x3, 0xa50, 0x8001, 0x4, 0x3, 0xab0, 0x8, 0x1, 0x1000, 0x0, 0x18d, 0x9, 0x1ff, 0x100, 0x8, 0x6, 0x0, 0xfffeffff, 0x3, 0x808e, 0x9bf9a90, 0x0, 0x10000, 0x2, 0xfffffd35, 0x7ff, 0x1000, 0x6, 0x10001, 0x200, 0x6, 0xffffffff, 0x4f4, 0x1, 0x0, 0x401, 0x44, 0x70e, 0x400, 0x4, 0x8, 0x40, 0x7caf, 0xfffffffa, 0x0, 0x21dc, 0x8, 0x5, 0x7, 0x9, 0x6, 0x1, 0x8, 0x6, 0x4, 0x7, 0x3, 0x2, 0x0, 0xfffffffe, 0x7, 0x7f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x0, 0x80000000, 0x3, 0xa, 0x7fffffff, 0x5, 0x8000, 0x5, 0x8001, 0x8001, 0x8b0c, 0x7fff, 0x778d, 0x6, 0xb, 0x2, 0x6, 0x400, 0x6, 0xa6a, 0x1ff, 0xb, 0x7ff, 0xe, 0x0, 0x8, 0x5, 0x10001, 0xfffff001, 0x3ff, 0xe9b2, 0x7ff, 0x7ff, 0x9, 0xbaf, 0x0, 0x6, 0x0, 0x0, 0x9, 0x46f3, 0x208, 0xfffffffa, 0x9, 0xf3e, 0xfffff32d, 0xb43, 0x4, 0xfffffffb, 0x604f, 0x54c0, 0x3, 0xfff, 0x10000, 0x40, 0x2, 0x1, 0xb, 0x7, 0x7, 0x1, 0x2, 0x6, 0x4, 0x0, 0xdeb, 0x4, 0x697e9cde, 0x0, 0xe107, 0x8, 0x0, 0x8, 0x3ff, 0x990, 0x4a38e11a, 0xf5e, 0x6, 0x6, 0x2, 0x40, 0xcdd, 0x7, 0xf00, 0x3, 0x6, 0x7fff, 0x3, 0x6, 0xc, 0xe, 0xffffffff, 0xd9c4, 0x4, 0xb0, 0x652, 0xf, 0xff, 0x25, 0x8, 0x8, 0x2, 0x8, 0x85, 0x1, 0x5, 0xfffffff9, 0x4, 0x4b4000, 0x7093, 0x8000, 0x6, 0x0, 0xbf8, 0x5, 0x0, 0x2, 0xf, 0x79d, 0x0, 0xfe72, 0x5, 0x0, 0x3, 0xf6, 0x1, 0x401, 0x8, 0xe1, 0x1, 0x8, 0xfc, 0x7, 0x8, 0x7, 0xaae, 0x19f, 0x6, 0x143, 0x5, 0x8001, 0xc, 0x8, 0x1, 0x401, 0xccd4, 0x5, 0xf, 0x3, 0x5, 0x301, 0x4, 0x1, 0x2, 0x9c48, 0x3, 0x5, 0x0, 0x7, 0xfffffff7, 0x4, 0x80000001, 0x2, 0x9, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0x1, 0x1, 0x10000, 0x2d, 0xfffffffc, 0x7, 0x80000000, 0xfff, 0xb, 0x50, 0xfffffff7, 0x78d63355, 0x5, 0x6, 0xfffffffb, 0x22, 0x4, 0xf7d, 0x0, 0x7, 0x4, 0x0, 0x7, 0xfffffff9, 0xb09a, 0x1, 0x2, 0x6311, 0xc769, 0x20, 0x9, 0x4, 0x2, 0x6, 0x7, 0x1c80, 0x7fffffff, 0xeb4a, 0x5, 0x5, 0xc4c00000, 0x5c10, 0x9, 0x8, 0x1, 0x3, 0xff000000, 0xa, 0x77, 0x2, 0x8, 0x0, 0x2, 0x10000, 0x3, 0x3, 0x2, 0x3, 0x8001, 0x80000001, 0x0, 0x654d, 0x8, 0x5, 0xf, 0xb657, 0x8, 0x6, 0x7b70, 0x8, 0x9e8, 0x7, 0x9, 0x0, 0x8, 0x0, 0xffff0000, 0x100, 0x7, 0x2e9, 0x4, 0x6, 0x2, 0x4]}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x4, 0xffff, 0x0, 0x3, 0x1, 0x6, 0x1, 0x3, 0x7ff, 0x7167, 0xce, 0x7fff, 0x9, 0xfffffff8, 0x5, 0x6, 0x600, 0x5, 0x8000, 0x9, 0x55, 0x6, 0x2, 0xe00000, 0x7, 0x3, 0x186, 0x1, 0x0, 0x8, 0x7, 0x7, 0x0, 0x7, 0x4, 0x0, 0x4, 0xf, 0x4, 0x1, 0x400, 0x3, 0x4, 0x6, 0x404c, 0x0, 0x1, 0x5, 0x800, 0xba72, 0x9, 0xff, 0x6, 0x1b4d, 0x3, 0x92, 0xa, 0x4, 0x30, 0x81, 0x7fffffff, 0xf718, 0x0, 0x4, 0x384, 0x1, 0xc, 0x400, 0x5, 0x5, 0x401, 0x7, 0x4, 0x0, 0x7, 0x81b1, 0x0, 0x2, 0xfffffffa, 0x1, 0x800, 0x100, 0x5, 0x9e, 0x90000000, 0x0, 0x7f, 0x4, 0x100, 0x7ff, 0x101, 0x7, 0x1, 0x1, 0x2, 0x19b2, 0x9, 0xd90, 0x5, 0x6, 0x5f01, 0x9, 0x2, 0x3, 0x4, 0x5, 0x1, 0x81, 0x4827, 0x3bd3, 0xac, 0x53c, 0x1000, 0xff, 0x9, 0x8, 0x7, 0x4, 0xf, 0x2, 0x6, 0xffffffff, 0x0, 0x6b, 0x1, 0x1, 0x1ff, 0x8, 0x4, 0x6, 0x3d, 0x16, 0x1530c8cd, 0x6, 0x70, 0xdf, 0x674, 0xfffffffb, 0x6f, 0x7, 0x2, 0x1, 0x97, 0x3, 0x6, 0x9, 0x80000000, 0x401, 0x2, 0x81, 0x2, 0x1ff, 0xf, 0x6, 0x8, 0x7, 0xff, 0x9, 0x8, 0x4, 0x938, 0x5, 0xfffffffb, 0xffffffc0, 0xf2, 0xfffffffa, 0x6, 0x6, 0xfff, 0x4, 0x0, 0x669b, 0x0, 0x3, 0x81, 0x3, 0x10000, 0x101, 0x8, 0x81, 0x1, 0x1e9b, 0x10000, 0x3, 0x8, 0x3, 0x2, 0x4, 0x80000001, 0x9, 0x72659602, 0x4, 0x100, 0x3, 0xc10, 0x5db, 0x4055, 0x7, 0x4d, 0x5, 0x8, 0x1, 0x10000000, 0x2, 0x8, 0x2, 0x164, 0x8, 0x4, 0x515, 0xa74, 0xfffffff9, 0x7, 0xb8, 0x0, 0x9, 0x24, 0x4, 0xe4, 0x18d, 0xada8dcd, 0x9b, 0x8, 0x2, 0xcf62, 0x3, 0x2, 0x1, 0x9, 0xffff, 0x1, 0x800, 0x8000, 0x10001, 0x9, 0x3, 0xfffffff4, 0x9, 0x8, 0x9, 0x2089, 0x3, 0x8000, 0xc6f, 0x5, 0x5, 0x6, 0x3, 0x6, 0x8, 0x6, 0x6, 0xc7, 0x2eb3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x6, 0x6, 0xfff, 0x8, 0x2, 0xfffffffc, 0x9e9, 0x9, 0x0, 0x100, 0x6, 0xa1ed, 0x8, 0xb, 0x67e1d416, 0x1, 0x5e, 0xee5, 0x3e, 0x7, 0x7, 0x1, 0x7, 0xffffffff, 0x101, 0xfffffffb, 0x0, 0x9e, 0x1, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x264, 0x0, 0x4, 0x6, 0xf, 0xfffffffe, 0x2, 0xb5d34ae, 0x3, 0x8000, 0x9, 0x100, 0x2, 0x9, 0x7, 0x0, 0x4, 0x0, 0x52, 0x1bf, 0x80000000, 0x5, 0x1000, 0x0, 0x9, 0x4, 0x4, 0x6870e966, 0xf, 0x5, 0xc, 0xfffffffa, 0x68, 0x10, 0x0, 0x14, 0x7f, 0x10001, 0x8, 0x7, 0x8, 0x4, 0xffffffff, 0x77d, 0x10001, 0xfffffff7, 0xa, 0x2, 0x5, 0x7fffffff, 0x2, 0x7, 0x1000, 0x40fe, 0x0, 0x6, 0x9, 0x7, 0x2341, 0x4b, 0x7, 0x5, 0x3, 0x70000000, 0x2, 0x7, 0x7ff, 0x7fffffff, 0xe2b6, 0x6, 0x85, 0x2, 0x7ef7, 0x5, 0x1, 0xf, 0x5, 0x7fffffff, 0x4, 0x0, 0xfff, 0x3b8d, 0x6, 0x7fff, 0xa9, 0x8, 0x3, 0x2, 0xfffff1d3, 0x5, 0x3, 0x9, 0x70aabd66, 0x2, 0x3, 0x9, 0xe06d3a00, 0xae, 0x2, 0x1a, 0xd62, 0x3ccd, 0x1, 0x3f, 0x2, 0x1b4, 0x62c1, 0x78, 0x0, 0x6, 0x3, 0x7, 0x4, 0xfffffffe, 0x6, 0x10001, 0x0, 0x5, 0x0, 0x7, 0x14, 0x6, 0x6, 0x1, 0x2, 0x6, 0x8, 0x4c, 0x5f, 0x2, 0x1, 0x8, 0xff, 0x5, 0x7ff, 0x79, 0x2, 0x5, 0x9, 0xfffffffa, 0x5, 0x1, 0x7, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffe, 0x8, 0x2, 0x1, 0x4, 0x4, 0xfffffff9, 0x8, 0x1, 0x6, 0x100, 0x6, 0x3, 0x10, 0x401, 0xea35, 0x9, 0x100, 0x53, 0x1ff, 0x1, 0xfffc0000, 0x9, 0x5, 0x4, 0xe3, 0x8, 0x2, 0x798, 0x0, 0x36, 0x8, 0x7, 0x4, 0x0, 0xfffffffb, 0x1, 0x4b, 0x40000000, 0x8, 0xffff, 0x0, 0x7, 0xfffffffd, 0x5, 0x1, 0x7, 0x0, 0x7, 0x2, 0xca, 0x2, 0xc1, 0xfffffffa, 0x3, 0x1, 0x2, 0x0, 0x266361de, 0x0, 0x7fffffff, 0x8, 0x2, 0x1, 0x9, 0x4, 0x1, 0x10000000, 0x4, 0x8, 0xfffffffc, 0x4, 0x7, 0x4]}]}]}}]}, 0x14b4}, 0x1, 0x0, 0x0, 0x900}, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0)

312.109782ms ago: executing program 1 (id=3738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df6146", 0x22, 0x1, &(0x7f00000000c0)={0x11, 0x7, r2, 0x1, 0x8, 0x6, @remote}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d40000000002010400000000000000000a000007480001802c0001800b000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010e0002800500010084"], 0xd4}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x3000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x290, 0xa, 0x148, 0x0, 0x10, 0x4b8, 0x2a8, 0x2a8, 0x4b8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'veth0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x71, 0x4, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5b0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000000)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8814}, 0x24008004)

308.3476ms ago: executing program 2 (id=3739):
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x1c, 0x42, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0xf4, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x260, 0x260, 0x0, 0x98, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x9}}}, {{@ip={@private=0xa010100, @multicast1, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'geneve1\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffffff, 'bridge_slave_0\x00', 'veth0\x00', {}, {0xff}, 0x62, 0x2, 0x733cfa72963a99b0}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xf8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="000000e9", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf2531000000080001000d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000002000000"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x40040)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000000000003500000008000300", @ANYRES32=r4, @ANYBLOB="02005500784ac6e49662317f889e916d60e4e6ab0a0006000802110000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x80a, 0x0) (async)
r10 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x4a}], 0x1}, 0x0)
r13 = socket(0x11, 0x80a, 0x1)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'bond0\x00', <r14=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4e, 0x6}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x709f}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008811}, 0x20000000)

202.810785ms ago: executing program 1 (id=3740):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt(r0, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async)

199.499807ms ago: executing program 0 (id=3741):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/163, 0xa3}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0xc}, {0x3}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x5, 0x1, 0x180, 0x5f09973, 0xa, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x200, 0x400009, 0xf, 0x9, 0x3, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0xfffffffc, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x8, 0xfffff060, 0x3, 0x469, 0x3, 0x4, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x2, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x6, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x2, 0xfffffffb, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7ffffffb, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001600)={'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
splice(r2, &(0x7f0000001700)=0x100, r9, &(0x7f0000001b80)=0x9, 0x0, 0x9)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)
mmap(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x100000c, 0x3032, r0, 0x0)

115.706615ms ago: executing program 2 (id=3742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r3=>0x0})
bind(r0, &(0x7f0000000300)=@sco={0x1f, @none}, 0x80)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0xbc, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8c, 0x2, [@TCA_CGROUP_ACT={0x88, 0x1, [@m_gact={0x84, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26bc}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2027, 0x2}}]}, {0x40, 0x6, "706bde3b9dada83f242358b3b4867191f589f855df4e3e4cab05f89b90843c07b7de802e5a4d926a95e28691b5849c10bc2ee0fa67f2c764eb4a31d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x80000001, 0xffff, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @multicast2}}}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000090a010400000000000010000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff780800080001"], 0x84}}, 0x24060000)
syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0x44, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{}, {}, {}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0)
unshare(0x28000600)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r8, 0x6, 0xb, 0x0, &(0x7f00000014c0))
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1f1113f2008e", {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x68}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x4, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xffffffff, 0x0, 0x0, {@mac=@local}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bad7000000000000c0000000c00038008000200c0ffffff180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x84)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, 0x0)
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r10, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="951e69d692c4e49ba596017559730a0eaed6c26ff04e01d77b08088e0d15c7c949b008da1586b91a6aa0c2526aecbf5b6d46ae727e35c9643f36c9336f319e39704a6af3f7e7fbc39fe26dc6f7c76e9ec92bf0fabc6c03113effff7ff956249790b307227ff6aa0200629946fab637fb0d0ad8ae1a55ca61086ad201"], 0x3c}}, 0x10)

115.193277ms ago: executing program 1 (id=3743):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0})
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}}}, 0x24}}, 0x0)

8.168102ms ago: executing program 1 (id=3744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fe00000000000000fd000000850000002f000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00ec000000000000b705000700000000000009000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000026000370006e6de4633c34f02b"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844)
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000ac485ef41000c000b8008000a00b512080004000880040004800800020001"], 0x48}}, 0x3000c000)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200e2dbd7000fbdbdf25010000000c0009000201aaaaaaaaaaaa06000a00ffff00000c0009000203aaaaaaaaaaaa06000800a1aa0000e42dd82f93cb19d9695b1307666ccaa3c13e0da5561058da4289"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @private}, &(0x7f0000000400)=0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000440)="469afe1438e0c682cb4272a0de3e36dd", 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7b, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fbea5fa0e0d5083a5cd3809bf3b6"}]}], {0x14}}, 0xe4}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x4e25, 0x7fff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000001300)=ANY=[@ANYBLOB="03000000b56200000a00000000000013ff"], 0x110)
r11 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r11)

0s ago: executing program 0 (id=3745):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="a905a6f2", 0x4}, {&(0x7f0000000340)="61ea1ee6f982e7ba232959c03fd4de8f1946fe8d9a58563d673af459a0a4295db735d48a8d91ec9f2a6bc807c4f870dc475bd090a4e97f0842c761c20a49f5dcc05cfc9cb3e62c13ac7a866856919cc3eef4c4c94bd1cdfd421f77ca232ebd07a1baf733ac9ab3fa6c0500345934534673a0aefe0dfbf840395c212e086af7486530200ac310880c466eb4797f8203e9121f8b9f483b02a54293417675eb5dbd158f14d900508c098fed06532b9030499ed4f1fc5c7d06d1cdb6935abd22620bbd42ffa54e069fe57dc208262119f1bb598ebcd6", 0xd4}], 0x2}}], 0x1, 0xc044)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="1400"], 0x34}}, 0x0)
r3 = socket(0x2, 0x2, 0x1)
bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e)
connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r4 = accept(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000304000000000000ff0300007400", @ANYRES32, @ANYBLOB="0000000000000000440012800b000100627269646765000034000280080005"], 0x64}}, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$unix(0x1, 0x5, 0x0)
getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="0a000100aa"], 0x54}}, 0x800)

kernel console output (not intermixed with test programs):

ink: 224 bytes leftover after parsing attributes in process `syz.2.2776'.
[  411.677252][T16188] netlink: 'syz.3.2778': attribute type 142 has an invalid length.
[  411.728650][T16182] bond6 (unregistering): Released all slaves
[  411.906748][T16194] lo speed is unknown, defaulting to 1000
[  412.125515][ T6926] tipc: Subscription rejected, illegal request
[  412.378976][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.535100][T16214] syzkaller1: tun_chr_ioctl cmd 1074025673
[  412.541168][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  412.553057][T16216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  412.560362][T16216] IPv6: NLM_F_CREATE should be set when creating new route
[  412.567708][T16216] IPv6: NLM_F_CREATE should be set when creating new route
[  412.574968][T16216] IPv6: NLM_F_CREATE should be set when creating new route
[  412.686236][T16214] IPVS: persistence engine module ip_vs_pe_ not found
[  412.953344][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2788'.
[  413.234290][T16230] bond7: option fail_over_mac: invalid value (127)
[  413.271591][T16230] bond7 (unregistering): Released all slaves
[  413.362211][T16233] tunl0: Caught tx_queue_len zero misconfig
[  413.553688][T16253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'.
[  413.577009][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  413.913769][T16267] syzkaller1: tun_chr_ioctl cmd 1074025673
[  414.005435][T16267] IPVS: persistence engine module ip_vs_pe_ not found
[  414.146311][T16280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.184025][T16281] ip6_vti0: Caught tx_queue_len zero misconfig
[  414.344207][T16288] 8021q: VLANs not supported on gre0
[  414.617151][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  414.862064][T16310] bond6: invalid ARP target 0.0.0.0 specified for addition
[  414.880790][T16310] bond6: option arp_ip_target: invalid value (0)
[  414.899667][T16310] bond6 (unregistering): Released all slaves
[  414.935481][T16326] syzkaller1: tun_chr_ioctl cmd 1074025673
[  415.004605][T16326] IPVS: persistence engine module ip_vs_pe_ not found
[  415.340301][T16348] __nla_validate_parse: 3 callbacks suppressed
[  415.340320][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2824'.
[  415.516854][T16359] ip6gre1: entered promiscuous mode
[  415.529862][T16359] ip6gre1: entered allmulticast mode
[  415.551127][T12729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  415.564871][T12729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  415.580057][ T6548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  415.595597][T16361] syzkaller0: entered promiscuous mode
[  415.602285][T16361] syzkaller0: entered allmulticast mode
[  415.657215][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  415.667516][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.740875][T16354] smbdirect: ib_dev[syz2] removed
[  415.877175][ T6548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.378306][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2836'.
[  416.401922][T16396] pim6reg1: entered promiscuous mode
[  416.410131][T16396] pim6reg1: entered allmulticast mode
[  416.418152][T16400] netlink: 'syz.0.2837': attribute type 10 has an invalid length.
[  416.457304][ T6541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  416.468991][T16401] syzkaller1: tun_chr_ioctl cmd 1074025673
[  416.517538][T16401] IPVS: persistence engine module ip_vs_pe_ not found
[  416.607061][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'.
[  416.658179][T16407] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.665739][T16407] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.690696][T16407] bridge0: entered allmulticast mode
[  416.697101][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  416.820689][T16418] netlink: 'syz.0.2840': attribute type 1 has an invalid length.
[  416.878016][T16418] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2840'.
[  417.559708][T16452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.692163][T16463] netlink: 'syz.0.2852': attribute type 21 has an invalid length.
[  417.706553][T16463] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2852'.
[  417.726551][T16463] netlink: 'syz.0.2852': attribute type 5 has an invalid length.
[  417.739938][T16463] netlink: 'syz.0.2852': attribute type 6 has an invalid length.
[  417.747856][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  417.764711][T16463] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2852'.
[  418.013450][T16474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2853'.
[  418.228279][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.736592][T16506] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  418.750927][T16501] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  418.773433][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'.
[  418.792192][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  418.829820][T16501] bond7 (unregistering): Released all slaves
[  419.042526][T16519] syzkaller1: tun_chr_ioctl cmd 1074025673
[  419.136317][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'.
[  419.183511][T16519] IPVS: persistence engine module ip_vs_pe_ not found
[  419.418053][T16540] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  419.497117][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  419.678084][T16560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2874'.
[  419.827094][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  419.884019][T16567] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000
[  420.167134][T16578] IPVS: persistence engine module ip_vs_pe_ not found
[  420.776331][T16588] netlink: 'syz.4.2885': attribute type 5 has an invalid length.
[  420.785133][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.848613][T16593] __nla_validate_parse: 1 callbacks suppressed
[  420.848631][T16593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'.
[  420.867155][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  421.085315][T16600] syzkaller0: entered promiscuous mode
[  421.102760][T16600] syzkaller0: entered allmulticast mode
[  421.167125][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'.
[  421.323509][T16613] netlink: 'syz.0.2892': attribute type 10 has an invalid length.
[  421.338310][T16613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2892'.
[  421.513314][T16605] 8021q: adding VLAN 0 to HW filter on device bond7
[  421.531662][T16613] dummy0: entered promiscuous mode
[  421.698459][T16623] syzkaller1: tun_chr_ioctl cmd 1074025673
[  421.778766][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2897'.
[  421.813714][T16623] IPVS: persistence engine module ip_vs_pe_ not found
[  421.897142][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  422.284769][T16654] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2904'.
[  422.776434][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2910'.
[  422.937010][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  422.943013][T16681] syzkaller1: tun_chr_ioctl cmd 1074025673
[  422.952640][T16683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2913'.
[  423.073061][T16695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2912'.
[  423.082746][T16681] IPVS: persistence engine module ip_vs_pe_ not found
[  423.155998][T16698] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2914'.
[  423.166556][T16698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2914'.
[  423.337687][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.927858][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  423.948529][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  423.958080][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  423.977609][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  423.992464][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  424.006475][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  424.048101][T16716] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.155327][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  424.168429][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  424.182930][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  424.205774][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  424.221222][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  424.646527][T16743] syzkaller1: tun_chr_ioctl cmd 1074025673
[  424.742874][T16743] IPVS: persistence engine module ip_vs_pe_ not found
[  424.961097][T16759] netlink: set zone limit has 8 unknown bytes
[  425.016970][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  425.103627][T16756] ip6_vti0: Caught tx_queue_len zero misconfig
[  425.914607][T16719] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.923380][T16719] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.931519][T16719] bridge_slave_0: entered allmulticast mode
[  425.939794][T16719] bridge_slave_0: entered promiscuous mode
[  425.959997][T16719] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.984825][T16719] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.014588][T16719] bridge_slave_1: entered allmulticast mode
[  426.057430][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  426.069444][T16719] bridge_slave_1: entered promiscuous mode
[  426.234371][T16719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.266736][T16719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.297364][ T5622] Bluetooth: hci5: command tx timeout
[  426.363079][T16719] team0: Port device team_slave_0 added
[  426.375713][T16719] team0: Port device team_slave_1 added
[  426.426825][T16719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.434083][T16719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.488739][T16719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.501801][T16719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.509949][T16719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.538535][T16719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  426.538733][T12727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.719857][T16719] hsr_slave_0: entered promiscuous mode
[  426.726845][T16719] hsr_slave_1: entered promiscuous mode
[  427.097149][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  427.245023][T16719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.307972][T16851] __nla_validate_parse: 9 callbacks suppressed
[  427.307987][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'.
[  427.464051][T16719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.487717][T16858] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2956'.
[  427.677963][T16719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.782664][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'.
[  427.793890][T16867] tc_dump_action: action bad kind
[  427.817133][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  427.920479][T16719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.042905][T16878] netlink: 'syz.0.2961': attribute type 1 has an invalid length.
[  428.055278][T16878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2961'.
[  428.082982][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'.
[  428.147058][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  428.300497][T16719] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  428.302412][T16888] netlink: 'syz.1.2965': attribute type 1 has an invalid length.
[  428.328581][T16719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  428.336539][T16719] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  428.344523][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'.
[  428.354208][T16719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  428.367225][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2964'.
[  428.387806][ T5622] Bluetooth: hci5: command tx timeout
[  428.435274][T16888] 8021q: adding VLAN 0 to HW filter on device bond9
[  428.443140][T16719] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  428.455043][T16719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  428.465105][T16719] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  428.478520][T16719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  428.663752][T16910] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2967'.
[  428.860094][T16719] 8021q: adding VLAN 0 to HW filter on device bond0
[  428.924370][T16719] 8021q: adding VLAN 0 to HW filter on device team0
[  428.946438][  T202] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.953726][  T202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  428.970013][T16916] netlink: 'syz.0.2969': attribute type 1 has an invalid length.
[  428.989730][  T202] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.997006][  T202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.100043][  T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.177003][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  429.343064][T16930] netlink: 'syz.4.2973': attribute type 29 has an invalid length.
[  429.558419][T16940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.580138][T16940] syzkaller0: entered promiscuous mode
[  429.585750][T16940] syzkaller0: entered allmulticast mode
[  429.627560][T16944] 8021q: VLANs not supported on gre0
[  429.763127][T12726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.827279][T12729] wlan1: Trigger new scan to find an IBSS to join
[  429.883143][T16719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.943392][T16719] veth0_vlan: entered promiscuous mode
[  429.959942][T16719] veth1_vlan: entered promiscuous mode
[  430.006613][T16719] veth0_macvtap: entered promiscuous mode
[  430.033425][T16719] veth1_macvtap: entered promiscuous mode
[  430.072443][T16719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.089976][T16719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.119392][  T202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.140951][  T202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.217062][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  430.247169][  T202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.262174][  T202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.294581][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'.
[  430.346446][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'.
[  430.353974][T16955] syzkaller0: entered promiscuous mode
[  430.361733][T16955] syzkaller0: entered allmulticast mode
[  430.458406][ T5622] Bluetooth: hci5: command tx timeout
[  431.264026][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  432.298846][  T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.307138][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  432.542267][ T5622] Bluetooth: hci5: command tx timeout
[  432.634911][ T6926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.650456][ T6926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.777448][T12727] wlan1: Trigger new scan to find an IBSS to join
[  432.795113][T12723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.813302][T12723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.854783][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2987'.
[  432.895690][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2987'.
[  432.943774][T16998] xt_hashlimit: size too large, truncated to 1048576
[  432.962542][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'.
[  433.342394][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'.
[  433.351593][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  433.474561][T17016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2994'.
[  433.655667][T17018] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2995'.
[  433.760480][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  433.777417][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  433.788195][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  433.798037][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  433.808191][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  433.823057][T17018] bond0 (unregistering): Released all slaves
[  434.123614][T17026] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2997'.
[  434.155433][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2997'.
[  434.387073][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  434.478937][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'.
[  434.511307][T17039] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3000'.
[  434.782028][ T6926] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  434.804092][ T6926] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.862653][T12723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.999222][ T6541] IPVS: starting estimator thread 0...
[  435.019650][ T6926] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.059298][ T6926] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.128194][T17061] IPVS: using max 26 ests per chain, 62400 per kthread
[  435.152571][ T6926] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.173552][ T6926] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.299261][ T6926] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  435.328937][ T6926] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.417108][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  435.908749][ T5625] Bluetooth: hci2: command tx timeout
[  436.014156][T17085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.457005][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  437.173947][ T6926] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  437.186764][ T6926] bridge2 (unregistering): left promiscuous mode
[  437.193392][ T6926] bridge2 (unregistering): left allmulticast mode
[  437.263474][ T6926] bond3 (unregistering): (slave bridge4): Releasing backup interface
[  437.274286][ T6926] bridge4 (unregistering): left promiscuous mode
[  437.315588][ T6926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.329432][ T6926] bond0 (unregistering): Released all slaves
[  437.346242][ T6926] bond1 (unregistering): Released all slaves
[  437.369326][ T6926] bond2 (unregistering): Released all slaves
[  437.403621][ T6926] bond3 (unregistering): Released all slaves
[  437.440637][ T6926] bond4 (unregistering): (slave veth7): Releasing active interface
[  437.451745][ T6926] batadv1: entered promiscuous mode
[  437.462090][ T6926] bond4 (unregistering): (slave batadv1): Releasing active interface
[  437.474111][ T6926] bond4 (unregistering): (slave veth9): Releasing active interface
[  437.484671][ T6926] bond4 (unregistering): Released all slaves
[  437.497011][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  437.518691][ T6926] bond5 (unregistering): Released all slaves
[  437.567998][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  437.782085][T17125] netlink: 'syz.3.3019': attribute type 13 has an invalid length.
[  437.840044][ T6926] tipc: Left network mode
[  437.880971][T17132] __nla_validate_parse: 1 callbacks suppressed
[  437.880990][T17132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3019'.
[  437.984864][ T5625] Bluetooth: hci2: command tx timeout
[  438.356796][T17125] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.364389][T17125] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.537108][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  438.863237][T17125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.909324][T17125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.411982][T17132] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  439.414541][  T202] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.457738][  T202] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.530941][T17152] netlink: 'syz.3.3022': attribute type 8 has an invalid length.
[  439.577001][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  439.610871][  T202] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.628663][  T202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  439.653215][T17019] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.667148][T17019] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.684839][T17019] bridge_slave_0: entered allmulticast mode
[  439.703808][T17019] bridge_slave_0: entered promiscuous mode
[  439.848658][T17019] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.866137][T17019] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.888764][T17019] bridge_slave_1: entered allmulticast mode
[  439.908020][T17019] bridge_slave_1: entered promiscuous mode
[  439.989411][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  439.996659][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'.
[  440.057907][ T5625] Bluetooth: hci2: command tx timeout
[  440.271871][T17019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.336149][T17019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.390485][T17161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3023'.
[  440.605553][T17019] team0: Port device team_slave_0 added
[  440.617099][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  440.678742][T17019] team0: Port device team_slave_1 added
[  440.870770][T17189] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  440.909694][T17019] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.939323][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.021610][T17019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.136471][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  441.154478][T17019] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.188370][T17019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.244810][T17019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.364118][ T6926] hsr_slave_0: left promiscuous mode
[  441.378135][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'.
[  441.383740][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.395133][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.404799][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.412748][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.423249][ T6926] batman_adv: batadv0: Interface deactivated: dummy0
[  441.430483][ T6926] batman_adv: batadv0: Removing interface: dummy0
[  441.472467][ T6926] veth1_macvtap: left promiscuous mode
[  441.479376][ T6926] veth0_macvtap: left promiscuous mode
[  441.485359][ T6926] veth1_vlan: left promiscuous mode
[  441.497624][ T6926] veth0_vlan: left promiscuous mode
[  441.569482][T17226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'.
[  441.640857][T17229] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3035'.
[  441.657025][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  442.137146][ T5625] Bluetooth: hci2: command tx timeout
[  442.697021][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  443.214322][T17202] syzkaller0: entered promiscuous mode
[  443.220393][T17202] syzkaller0: entered allmulticast mode
[  443.747029][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  444.786978][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  445.106768][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  445.151291][T17019] hsr_slave_0: entered promiscuous mode
[  445.158985][T17019] hsr_slave_1: entered promiscuous mode
[  445.180321][T17019] debugfs: 'hsr0' already exists in 'hsr'
[  445.190658][T17019] Cannot create hsr debugfs directory
[  445.391392][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  445.552286][T17256] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZø”à�I�ƺ¥þ àø§%ùô
[  445.614708][ T6926] IPVS: stop unused estimator thread 0...
[  445.827036][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  446.417431][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3
[  446.857120][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  447.313113][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'.
[  447.359787][T17330] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3054'.
[  447.380275][T17333] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3055'.
[  447.428368][T17337] openvswitch: netlink: Actions may not be safe on all matching packets
[  447.709012][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3058'.
[  447.770451][T17327] bridge0: entered promiscuous mode
[  447.784051][T17327] bridge0: entered allmulticast mode
[  447.907070][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  447.999376][T17019] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  448.017706][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  448.026285][T17365] ipt_REJECT: TCP_RESET invalid for non-tcp
[  448.033587][T17019] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  448.053492][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  448.072785][T17019] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  448.119691][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  448.149221][T17019] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  448.171076][T17372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3063'.
[  448.182882][T17019] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.228494][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3062'.
[  448.270255][T17373] raw_sendmsg: syz.0.3062 forgot to set AF_INET. Fix it!
[  448.343296][T17385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'.
[  448.491756][T17019] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.510455][T17389] syzkaller1: tun_chr_ioctl cmd 1074025673
[  448.557995][T17019] 8021q: adding VLAN 0 to HW filter on device team0
[  448.593690][T12723] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.600936][T12723] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.610219][T17389] IPVS: persistence engine module ip_vs_pe_ not found
[  448.620706][T17395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3065'.
[  448.663772][T12723] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.671084][T12723] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.889683][T17407] IPv6: Can't replace route, no match found
[  448.902626][T17407] IPv6: Can't replace route, no match found
[  448.916062][T17408] tipc: Enabled bearer <eth:vlan0>, priority 30
[  448.937265][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  448.974691][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3068'.
[  449.233694][T17425] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  449.309448][T17429] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  449.685596][T17455] openvswitch: netlink: Missing key (keys=40, expected=100)
[  449.713854][T17457] openvswitch: netlink: Missing key (keys=40, expected=100)
[  449.977043][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  450.159460][T17019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.545561][T17488] vlan4: entered allmulticast mode
[  450.805482][T17019] veth0_vlan: entered promiscuous mode
[  450.862817][T17019] veth1_vlan: entered promiscuous mode
[  450.986294][T17019] veth0_macvtap: entered promiscuous mode
[  451.015384][T17019] veth1_macvtap: entered promiscuous mode
[  451.106047][T17019] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.171884][T17019] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.206104][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.229927][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.262705][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.280542][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.717652][T17550] netlink: 'syz.0.3101': attribute type 16 has an invalid length.
[  451.889031][T17553] __nla_validate_parse: 1 callbacks suppressed
[  451.889048][T17553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'.
[  452.193749][T17562] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3106'.
[  452.205902][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.226593][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.252306][T17557] openvswitch: netlink: Unknown key attributes 2
[  452.378958][T12723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.402691][T12723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.411919][T17567] netlink: 'syz.1.3108': attribute type 1 has an invalid length.
[  452.442929][T17567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3108'.
[  452.524758][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'.
[  452.703501][T17580] syzkaller1: tun_chr_ioctl cmd 1074025673
[  452.872845][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3111'.
[  452.891565][T17580] IPVS: persistence engine module ip_vs_pe_ not found
[  452.913228][T17589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  452.944883][T17596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3114'.
[  452.984951][T17591] vlan2: entered promiscuous mode
[  453.023463][T17591] team0: entered promiscuous mode
[  453.066025][T17591] team_slave_0: entered promiscuous mode
[  453.096472][T17591] team_slave_1: entered promiscuous mode
[  453.295648][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  453.321032][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  453.333616][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  453.348142][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  453.358246][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  453.625950][T17613] bridge0: port 1(syz_tun) entered blocking state
[  453.687201][T17613] bridge0: port 1(syz_tun) entered disabled state
[  453.731035][T17613] syz_tun: entered allmulticast mode
[  453.932770][T17634] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3118'.
[  454.626858][T17673] syzkaller1: tun_chr_ioctl cmd 1074025673
[  454.739799][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3127'.
[  454.799268][T17673] IPVS: persistence engine module ip_vs_pe_ not found
[  454.837375][T13972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  454.964776][T17684] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048)
[  455.042765][T17695] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3133'.
[  455.417575][ T5625] Bluetooth: hci4: command tx timeout
[  455.437374][ T5733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  455.968621][T17598] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.987353][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'.
[  455.991171][T17598] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.014428][T17598] bridge_slave_0: entered allmulticast mode
[  456.031318][T17598] bridge_slave_0: entered promiscuous mode
[  456.049727][T17598] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.067505][T17598] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.079542][T17598] bridge_slave_1: entered allmulticast mode
[  456.098153][T17598] bridge_slave_1: entered promiscuous mode
[  456.221064][T17598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.255616][T17598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  456.307391][T17735] block nbd1: server does not support multiple connections per device.
[  456.317692][T17735] block nbd1: shutting down sockets
[  456.324508][T17598] team0: Port device team_slave_0 added
[  456.350195][T17598] team0: Port device team_slave_1 added
[  456.544970][T17743] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.552651][T17743] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.611851][T17743] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.619125][T17743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.626689][T17743] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.633922][T17743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.686340][T17743] team0: Port device bridge0 added
[  456.705629][T17598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  456.737069][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.796225][T17598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  456.837448][T17598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  456.855121][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  456.942254][T17598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.963355][T17752] __nla_validate_parse: 2 callbacks suppressed
[  456.963372][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3145'.
[  457.009632][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3145'.
[  457.085338][T17737] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  457.107648][T17737] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  457.139997][T17598] hsr_slave_0: entered promiscuous mode
[  457.146661][T17598] hsr_slave_1: entered promiscuous mode
[  457.162918][T17598] debugfs: 'hsr0' already exists in 'hsr'
[  457.172734][T17759] FAULT_INJECTION: forcing a failure.
[  457.172734][T17759] name failslab, interval 1, probability 0, space 0, times 0
[  457.191032][T17598] Cannot create hsr debugfs directory
[  457.205411][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.0.3146 Not tainted syzkaller #0 PREEMPT(full) 
[  457.205434][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  457.205446][T17759] Call Trace:
[  457.205453][T17759]  <TASK>
[  457.205460][T17759]  dump_stack_lvl+0xe8/0x150
[  457.205493][T17759]  should_fail_ex+0x40c/0x560
[  457.205521][T17759]  should_failslab+0xa8/0x100
[  457.205551][T17759]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  457.205575][T17759]  ? local_lock_release+0x9c/0x160
[  457.205595][T17759]  ? __alloc_skb+0x1d7/0x7a0
[  457.205612][T17759]  ? __alloc_skb+0x1d7/0x7a0
[  457.205635][T17759]  __alloc_skb+0x1d7/0x7a0
[  457.205658][T17759]  netlink_sendmsg+0x5d4/0xb40
[  457.205697][T17759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.205724][T17759]  ? aa_sock_msg_perm+0xf1/0x1b0
[  457.205750][T17759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.205771][T17759]  sock_sendmsg_nosec+0x13a/0x180
[  457.205800][T17759]  ____sys_sendmsg+0x54e/0x850
[  457.205827][T17759]  ? __pfx_____sys_sendmsg+0x10/0x10
[  457.205857][T17759]  ? import_iovec+0x73/0xa0
[  457.205888][T17759]  ___sys_sendmsg+0x2a5/0x360
[  457.205927][T17759]  ? __lock_acquire+0x683/0x2cf0
[  457.205959][T17759]  ? __pfx____sys_sendmsg+0x10/0x10
[  457.206015][T17759]  ? __fget_files+0x2a/0x420
[  457.206042][T17759]  ? __fget_files+0x3a2/0x420
[  457.206080][T17759]  __x64_sys_sendmsg+0x1b1/0x290
[  457.206105][T17759]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  457.206145][T17759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.206167][T17759]  do_syscall_64+0x174/0x580
[  457.206190][T17759]  ? trace_irq_disable+0x3b/0x140
[  457.206217][T17759]  ? clear_bhb_loop+0x40/0x90
[  457.206241][T17759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.206260][T17759] RIP: 0033:0x7f067c59de99
[  457.206278][T17759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  457.206295][T17759] RSP: 002b:00007f067d4ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.206316][T17759] RAX: ffffffffffffffda RBX: 00007f067c825fa0 RCX: 00007f067c59de99
[  457.206330][T17759] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007
[  457.206343][T17759] RBP: 00007f067d4ab090 R08: 0000000000000000 R09: 0000000000000000
[  457.206354][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.206366][T17759] R13: 00007f067c826038 R14: 00007f067c825fa0 R15: 00007fffcc481f48
[  457.206396][T17759]  </TASK>
[  457.534475][ T5625] Bluetooth: hci4: command tx timeout
[  457.925511][T17737] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  457.931859][T17737] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  458.067887][T17598] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.099096][T17598] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  458.126018][T17598] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  458.436159][T17737] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  458.449890][T17737] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  458.463346][T17598] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.475515][T17598] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  458.486354][T17598] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  458.661506][T17598] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.682586][T17598] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  458.693133][T17598] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  458.794097][T17790] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3155'.
[  458.837115][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'.
[  458.859143][T17598] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.897984][T17598] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  458.945198][T17598] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  459.145773][T17801] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  459.325055][T17811] openvswitch: netlink: IP tunnel dst address not specified
[  459.414825][T17813] netlink: 'syz.3.3162': attribute type 4 has an invalid length.
[  459.437775][T17813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3162'.
[  459.667139][T17598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  459.680825][ T5733] IPVS: starting estimator thread 0...
[  459.690111][T17823] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048)
[  459.692903][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.718907][T17598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  459.747115][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  459.763067][T17598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  459.783312][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.787982][T17825] IPVS: using max 26 ests per chain, 62400 per kthread
[  459.804958][T17598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  459.821961][T17598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  459.851523][T17827] tipc: Enabling of bearer <eth:syzk> rejected, max 3 bearers permitted
[  459.961388][T17835] FAULT_INJECTION: forcing a failure.
[  459.961388][T17835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.975608][T17835] CPU: 1 UID: 0 PID: 17835 Comm: syz.4.3168 Not tainted syzkaller #0 PREEMPT(full) 
[  459.975635][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  459.975647][T17835] Call Trace:
[  459.975656][T17835]  <TASK>
[  459.975664][T17835]  dump_stack_lvl+0xe8/0x150
[  459.975700][T17835]  should_fail_ex+0x40c/0x560
[  459.975732][T17835]  _copy_from_iter+0x1d3/0x1660
[  459.975760][T17835]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  459.975790][T17835]  ? rcu_is_watching+0x15/0xb0
[  459.975811][T17835]  ? trace_kmem_cache_alloc+0x29/0xe0
[  459.975839][T17835]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  459.975866][T17835]  ? __pfx__copy_from_iter+0x10/0x10
[  459.975894][T17835]  ? __alloc_skb+0x276/0x7a0
[  459.975914][T17835]  ? __alloc_skb+0x276/0x7a0
[  459.975940][T17835]  ? netlink_sendmsg+0x650/0xb40
[  459.975965][T17835]  ? skb_put+0x112/0x210
[  459.975990][T17835]  netlink_sendmsg+0x6c0/0xb40
[  459.976035][T17835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.976064][T17835]  ? aa_sock_msg_perm+0xf1/0x1b0
[  459.976093][T17835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.976117][T17835]  sock_sendmsg_nosec+0x13a/0x180
[  459.976150][T17835]  ____sys_sendmsg+0x54e/0x850
[  459.976181][T17835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  459.976216][T17835]  ? import_iovec+0x73/0xa0
[  459.976252][T17835]  ___sys_sendmsg+0x2a5/0x360
[  459.976274][T17835]  ? __lock_acquire+0x683/0x2cf0
[  459.976309][T17835]  ? __pfx____sys_sendmsg+0x10/0x10
[  459.976368][T17835]  ? __fget_files+0x2a/0x420
[  459.976397][T17835]  ? __fget_files+0x3a2/0x420
[  459.976436][T17835]  __x64_sys_sendmsg+0x1b1/0x290
[  459.976465][T17835]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  459.976508][T17835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.976532][T17835]  do_syscall_64+0x174/0x580
[  459.976557][T17835]  ? trace_irq_disable+0x3b/0x140
[  459.976584][T17835]  ? clear_bhb_loop+0x40/0x90
[  459.976620][T17835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.976640][T17835] RIP: 0033:0x7f0150f9de99
[  459.976658][T17835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.976675][T17835] RSP: 002b:00007f0151dde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.976695][T17835] RAX: ffffffffffffffda RBX: 00007f0151225fa0 RCX: 00007f0150f9de99
[  459.976709][T17835] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000007
[  459.976722][T17835] RBP: 00007f0151dde090 R08: 0000000000000000 R09: 0000000000000000
[  459.976734][T17835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.976745][T17835] R13: 00007f0151226038 R14: 00007f0151225fa0 R15: 00007ffc4ab02a58
[  459.976776][T17835]  </TASK>
[  460.024156][T17598] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.344484][T17598] 8021q: adding VLAN 0 to HW filter on device team0
[  460.403248][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.410537][ T6926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.452659][T12726] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.459966][T12726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.500711][T17844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3171'.
[  460.566677][T17844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3171'.
[  460.709679][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'.
[  460.855559][T17849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.938079][T17860] block nbd1: server does not support multiple connections per device.
[  460.964273][T17860] block nbd1: shutting down sockets
[  461.137472][T17871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.148666][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.160207][T17870] tipc: Enabling of bearer <eth:syzk> rejected, max 3 bearers permitted
[  461.328383][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'.
[  461.354549][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3180'.
[  461.567431][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.691922][T17598] veth0_vlan: entered promiscuous mode
[  461.725350][T17598] veth1_vlan: entered promiscuous mode
[  461.765340][T17889] netlink: 'syz.1.3183': attribute type 1 has an invalid length.
[  461.800914][T17598] veth0_macvtap: entered promiscuous mode
[  461.868871][T17598] veth1_macvtap: entered promiscuous mode
[  461.942799][T17598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.008354][T17598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.063800][T17899] syzkaller1: tun_chr_ioctl cmd 1074025673
[  462.075363][T12726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.089391][T12726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.105506][T12726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.115421][T12726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.124812][T17901] __nla_validate_parse: 2 callbacks suppressed
[  462.124827][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'.
[  462.177577][T17903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.792578][T12726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.808372][T12726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.875810][T12723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.893690][T12723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.019670][T17927] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  463.046846][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3196'.
[  463.075622][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3112'.
[  463.107820][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3196'.
[  463.117271][ T6926] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.129097][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'.
[  463.137088][ T6926] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  463.161726][ T6926] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  463.171644][T17931] syzkaller0: entered promiscuous mode
[  463.187542][T17931] syzkaller0: entered allmulticast mode
[  463.206196][ T6926] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  463.587269][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'.
[  463.712950][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  463.732166][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  463.739935][T17949] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3201'.
[  463.752811][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  463.762795][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  463.771490][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  463.799027][T17949] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3201'.
[  463.905533][T17949] bridge1: entered promiscuous mode
[  463.931905][T17949] bridge1: entered allmulticast mode
[  463.953216][T17949] team0: Port device bridge1 added
[  464.321850][T17972] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3204'.
[  465.157394][T17983] netlink: 'syz.3.3205': attribute type 1 has an invalid length.
[  465.578085][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  465.671140][T18011] tc action pedit 'at' offset -2147483648 out of bounds
[  465.818376][ T5625] Bluetooth: hci3: command tx timeout
[  465.943578][T18017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3209'.
[  466.429489][T17952] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.465171][T17952] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.498263][T17952] bridge_slave_0: entered allmulticast mode
[  466.515224][T17952] bridge_slave_0: entered promiscuous mode
[  466.551867][T17952] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.572142][T17952] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.583015][T17952] bridge_slave_1: entered allmulticast mode
[  466.604579][T17952] bridge_slave_1: entered promiscuous mode
[  466.665532][T18043] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  466.861833][T18060] IPVS: persistence engine module ip_vs_pe_ not found
[  467.085547][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.231132][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.282135][T18065] __nla_validate_parse: 1 callbacks suppressed
[  467.282170][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3221'.
[  467.381171][T18065] bond0: entered promiscuous mode
[  467.400314][T18065] bond_slave_0: entered promiscuous mode
[  467.420826][T18065] bond_slave_1: entered promiscuous mode
[  467.454734][T18065] gretap0: entered promiscuous mode
[  467.485078][T18065] debugfs: 'hsr1' already exists in 'hsr'
[  467.514705][T18065] Cannot create hsr debugfs directory
[  467.551581][T18065] hsr1: entered promiscuous mode
[  467.596546][T18084] netlink: 'syz.1.3223': attribute type 3 has an invalid length.
[  467.641849][T18084] netlink: 'syz.1.3223': attribute type 1 has an invalid length.
[  467.658929][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'.
[  467.667651][T17952] team0: Port device team_slave_0 added
[  467.673453][T18084] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3223'.
[  467.690092][T17952] team0: Port device team_slave_1 added
[  467.697350][T18075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3223'.
[  467.708621][T18086] lo: entered allmulticast mode
[  467.748761][T18086] lo: left allmulticast mode
[  467.788547][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.807190][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.855455][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.884617][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.891874][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.905918][T18095] Cannot find add_set index 0 as target
[  467.926097][ T5625] Bluetooth: hci3: command tx timeout
[  467.933490][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.961900][T18096] dvmrp0: entered allmulticast mode
[  468.104760][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.112751][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.120267][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.124118][T17952] hsr_slave_0: entered promiscuous mode
[  468.129502][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.142430][T17952] hsr_slave_1: entered promiscuous mode
[  468.151203][T17952] debugfs: 'hsr0' already exists in 'hsr'
[  468.157441][T17952] Cannot create hsr debugfs directory
[  468.164333][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.175623][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.188703][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.199241][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.214495][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.243493][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.262431][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.277272][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.294989][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.307051][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.321662][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.332148][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.349002][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.368544][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.385100][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.401712][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.413211][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.431873][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.448804][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.460341][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.477691][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.492958][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.514753][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.539073][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.560802][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.582935][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.602300][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.627886][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.649450][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.671975][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.689030][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.695783][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.702866][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.718147][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.732378][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.758749][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.773790][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.794932][T18112] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  468.796132][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.829427][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  468.842091][T18101] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003
[  469.099120][T18115] IPVS: persistence engine module ip_vs_pe_ not found
[  469.113671][T18118] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048)
[  469.130677][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3232'.
[  469.421908][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3235'.
[  469.495788][T18129] netlink: 'syz.2.3236': attribute type 1 has an invalid length.
[  469.524628][T18131] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3237'.
[  469.542023][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3236'.
[  469.676687][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'.
[  469.686624][T18135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3236'.
[  469.706197][T18129] wg1: entered promiscuous mode
[  469.717958][T18129] wg1: entered allmulticast mode
[  469.771699][T18141] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.791039][T18141] 8021q: adding VLAN 0 to HW filter on device team0
[  469.822905][T18143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.824864][T18141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.861384][T18143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.914141][T18143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.932599][  T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.946679][ T6540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.959551][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.968490][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.977582][ T5625] Bluetooth: hci3: command tx timeout
[  469.987024][T13972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.127900][T18141] veth1_vlan: left promiscuous mode
[  470.136618][T18141] veth0_vlan: left promiscuous mode
[  470.162754][T18141] veth0_vlan: entered promiscuous mode
[  470.170382][T18141] veth1_vlan: entered promiscuous mode
[  470.183063][T18141] veth1_macvtap: left promiscuous mode
[  470.195451][T18141] veth0_macvtap: left promiscuous mode
[  470.204171][T18141] veth0_macvtap: entered promiscuous mode
[  470.221541][T18141] veth1_macvtap: entered promiscuous mode
[  470.245912][T18141] 8021q: adding VLAN 0 to HW filter on device bond1
[  470.257213][T18141] 8021q: adding VLAN 0 to HW filter on device eth0
[  470.266693][T18141] 8021q: adding VLAN 0 to HW filter on device eth1
[  470.276184][T18141] 8021q: adding VLAN 0 to HW filter on device eth2
[  470.284977][T18141] 8021q: adding VLAN 0 to HW filter on device eth3
[  470.296059][T18141] 8021q: adding VLAN 0 to HW filter on device bond2
[  470.309061][T18141] 8021q: adding VLAN 0 to HW filter on device bond3
[  470.317284][T18141] 8021q: adding VLAN 0 to HW filter on device bond4
[  470.334980][T18141] 8021q: adding VLAN 0 to HW filter on device bond5
[  470.347506][T18141] 8021q: adding VLAN 0 to HW filter on device bond6
[  470.364474][T18141] 8021q: adding VLAN 0 to HW filter on device bond7
[  470.372425][T18141] vlan0: left promiscuous mode
[  470.378123][T18141] bond_slave_1: left promiscuous mode
[  470.386522][T18141] 8021q: adding VLAN 0 to HW filter on device bond8
[  470.407912][ T6555] bridge0: entered promiscuous mode
[  470.424426][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.437340][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.500942][T18133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.535295][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.549303][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.629500][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 4352 - 0
[  470.639188][   T12] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0
[  470.647839][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.656163][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  470.672040][T12727] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 4352 - 0
[  470.686164][T12727] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0
[  470.710244][T12727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.728598][T12727] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  470.771612][T12727] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 4352 - 0
[  470.783619][T12727] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0
[  470.796124][T12727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.805619][T12727] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  470.884488][T12727] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 4352 - 0
[  470.911032][T12727] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0
[  470.943567][T12727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.953082][T12727] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  471.228507][ T6926] bridge2 (unregistering): left promiscuous mode
[  471.234878][ T6926] bridge2 (unregistering): left allmulticast mode
[  471.251227][ T6926] team0: Port device bridge2 removed
[  471.291170][ T6926] bond1 (unregistering): Released all slaves
[  471.310408][ T6926] bond2 (unregistering): Released all slaves
[  471.326268][ T6926] bond3 (unregistering): Released all slaves
[  471.345066][ T6926] bond4 (unregistering): Released all slaves
[  471.373683][ T6926] bond5 (unregistering): Released all slaves
[  471.397427][ T6926] bond6 (unregistering): (slave team0): Releasing backup interface
[  471.405912][ T6926] team0: left promiscuous mode
[  471.411284][ T6926] team0: left allmulticast mode
[  471.417950][ T6926] bond6 (unregistering): Released all slaves
[  471.434182][ T6926] bond7 (unregistering): Released all slaves
[  471.580384][T18165] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  471.712569][ T6926] 
: left promiscuous mode
[  471.842075][T18181] 8021q: VLANs not supported on team0
[  471.857354][ T6926] tipc: Disabling bearer <udp:s>
[  471.873701][ T6926] tipc: Disabling bearer <udp:syz2>
[  471.889255][ T6926] tipc: Disabling bearer <eth:vlan0>
[  471.902252][ T6926] tipc: Left network mode
[  472.057460][ T5625] Bluetooth: hci3: command tx timeout
[  472.086275][T17952] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  472.108061][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  472.134570][T17952] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  472.154035][T18185] tls_set_device_offload_rx: netdev not found
[  472.170635][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  472.201353][T18185] netlink: 'syz.3.3251': attribute type 7 has an invalid length.
[  472.219123][T17952] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  472.252476][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  472.268814][T18185] netlink: 'syz.3.3251': attribute type 3 has an invalid length.
[  472.280173][T17952] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  472.295163][T18185] __nla_validate_parse: 9 callbacks suppressed
[  472.295177][T18185] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3251'.
[  472.320159][T17952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  472.416149][T18196] bond1: entered allmulticast mode
[  472.451246][T18204] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3256'.
[  472.819193][T18222] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3261'.
[  472.845150][T18216] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  473.079084][ T6926] hsr_slave_0: left promiscuous mode
[  473.360429][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'.
[  473.407365][T18246] netlink: 'syz.3.3267': attribute type 11 has an invalid length.
[  473.631709][T18253] netlink: 'syz.1.3270': attribute type 1 has an invalid length.
[  473.642865][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3270'.
[  474.295256][T18261] IPv6: Can't replace route, no match found
[  475.543096][T17952] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.606439][T17952] 8021q: adding VLAN 0 to HW filter on device team0
[  475.648350][T12729] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.655567][T12729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.762721][T12729] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.769970][T12729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.829832][T12729] net_ratelimit: 2 callbacks suppressed
[  475.829927][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.847343][T18276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  476.101031][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'.
[  476.165731][T18287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3278'.
[  476.176518][ T6926] IPVS: stop unused estimator thread 0...
[  476.318197][T18296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.390458][T18296] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.676285][T18304] openvswitch: netlink: Message has 8 unknown bytes.
[  477.221454][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.339892][T18299] Bluetooth: MGMT ver 1.23
[  477.912687][T17952] veth0_vlan: entered promiscuous mode
[  477.946576][T17952] veth1_vlan: entered promiscuous mode
[  478.077647][T17952] veth0_macvtap: entered promiscuous mode
[  478.114517][T17952] veth1_macvtap: entered promiscuous mode
[  478.131150][T18344] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  478.155192][T18346] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3293'.
[  478.203108][T18346] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3293'.
[  478.231620][T18346] openvswitch: netlink: Message has 512 unknown bytes.
[  478.245935][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.295477][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.375847][  T202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.410495][  T202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.464385][  T202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.501630][  T202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.640572][T18355] bond1: entered promiscuous mode
[  478.655301][T18355] bond1: entered allmulticast mode
[  478.673377][T18355] 8021q: adding VLAN 0 to HW filter on device bond1
[  478.876605][ T6926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.885640][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'.
[  478.899107][ T6926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.024373][ T6555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.487930][T18374] 8021q: adding VLAN 0 to HW filter on device bond11
[  479.519152][T18374] bond11 (unregistering): Released all slaves
[  479.630386][T12729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.648165][T12729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.755134][T12729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.766302][T12729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.775959][T12729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.786277][T12729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.887333][T18398] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  480.154778][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  480.164242][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  480.176045][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  480.184452][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  480.193264][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  480.377783][ T5619] bridge0: port 1(syz_tun) entered disabled state
[  480.423912][ T5619] syz_tun (unregistering): left allmulticast mode
[  480.430751][ T5619] bridge0: port 1(syz_tun) entered disabled state
[  480.533332][T12729] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  480.545556][T12729] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  480.555954][T12729] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.566274][T12729] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  480.653718][T12729] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  480.664343][T12729] netdevsim netdevsim1 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  480.677214][T12729] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.687626][T12729] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  480.788062][T12729] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  480.798783][T12729] netdevsim netdevsim1 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  480.809615][T12729] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.820872][T12729] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  480.894644][T12729] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  480.905440][T12729] netdevsim netdevsim1 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  480.917642][T12729] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.929613][T12729] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  480.947281][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.176160][T18407] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.184870][T18407] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.193023][T18407] bridge_slave_0: entered allmulticast mode
[  481.201284][T18407] bridge_slave_0: entered promiscuous mode
[  481.209993][T18407] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.218256][T18407] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.225384][T18407] bridge_slave_1: entered allmulticast mode
[  481.232982][T18407] bridge_slave_1: entered promiscuous mode
[  481.259392][T12729] pim6reg: left allmulticast mode
[  481.264572][T12729] dvmrp0: left allmulticast mode
[  481.428282][T12729] team0: Port device xfrm0 removed
[  481.606593][T12729] bond0 (unregistering): Released all slaves
[  481.617867][T12729] bond1 (unregistering): Released all slaves
[  481.633753][T12729] bond2 (unregistering): Released all slaves
[  481.649106][T12729] bond3 (unregistering): Released all slaves
[  481.664182][T12729] bond4 (unregistering): Released all slaves
[  481.685809][T12729] bond5 (unregistering): Released all slaves
[  481.704300][T12729] bond6 (unregistering): Released all slaves
[  481.720075][T12729] bond7 (unregistering): Released all slaves
[  481.737984][T12729] bond8 (unregistering): Released all slaves
[  481.756836][T12729] bond9 (unregistering): Released all slaves
[  481.778204][T12729] bond10 (unregistering): Released all slaves
[  481.822054][T18407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.836677][T18407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.891910][T18407] team0: Port device team_slave_0 added
[  481.910049][T18407] team0: Port device team_slave_1 added
[  481.955024][T18407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.962386][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.989268][T18407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  482.002765][T18407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  482.009846][T18407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  482.025938][T18376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.044589][T18407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  482.056518][T12729] tipc: Left network mode
[  482.077940][T18405] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3309'.
[  482.299551][ T5625] Bluetooth: hci0: command tx timeout
[  482.527996][T18407] hsr_slave_0: entered promiscuous mode
[  482.534708][T18407] hsr_slave_1: entered promiscuous mode
[  482.560110][T18407] debugfs: 'hsr0' already exists in 'hsr'
[  482.566116][T18407] Cannot create hsr debugfs directory
[  482.763522][T18452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3315'.
[  482.954842][T18460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3316'.
[  482.981043][T18460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3316'.
[  483.014299][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'.
[  483.044821][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3316'.
[  484.084597][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'.
[  484.111851][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  484.195697][T18494] netlink: 600 bytes leftover after parsing attributes in process `syz.3.3323'.
[  484.249953][T18490] vlan0: entered promiscuous mode
[  484.329883][T18494] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  484.376981][ T5625] Bluetooth: hci0: command tx timeout
[  484.865098][T12729] veth1_macvtap: left promiscuous mode
[  484.883615][T12729] veth0_macvtap: left promiscuous mode
[  484.898672][T12729] veth1_vlan: left promiscuous mode
[  484.916293][T12729] veth0_vlan: left promiscuous mode
[  485.001364][T18524] Bluetooth: MGMT ver 1.23
[  486.457100][ T5625] Bluetooth: hci0: command tx timeout
[  486.617716][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  486.634903][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3333'.
[  486.753392][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3335'.
[  486.797218][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'.
[  487.194387][T18573] openvswitch: netlink: IP tunnel dst address not specified
[  487.205999][T18573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.522810][T18580] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048)
[  487.552662][T12729] IPVS: stop unused estimator thread 0...
[  487.812053][T18598] netlink: 'syz.0.3343': attribute type 6 has an invalid length.
[  487.838416][T18601] IPVS: sed: FWM 3 0x00000003 - no destination available
[  487.854408][ T6542] IPVS: starting estimator thread 0...
[  487.948556][T18602] IPVS: using max 26 ests per chain, 62400 per kthread
[  488.100750][T18407] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  488.128436][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  488.137208][T18407] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  488.170505][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  488.180947][T18407] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  488.194536][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.235535][T18407] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  488.253101][T18407] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.537333][ T5625] Bluetooth: hci0: command tx timeout
[  488.621335][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'.
[  488.797304][T18652] nbd: couldn't find device at index 65536
[  488.875622][T18407] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.989561][T18661] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3356'.
[  489.011326][T18407] 8021q: adding VLAN 0 to HW filter on device team0
[  489.122692][T12729] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.130021][T12729] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.226583][T12729] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.233830][T12729] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.429348][ T6540] IPVS: starting estimator thread 0...
[  489.435405][T18682] IPVS: sed: FWM 3 0x00000003 - no destination available
[  489.538883][T18683] IPVS: using max 27 ests per chain, 64800 per kthread
[  489.850242][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3363'.
[  490.536168][T18407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.717366][T18407] veth0_vlan: entered promiscuous mode
[  490.750940][T18407] veth1_vlan: entered promiscuous mode
[  490.795974][T18407] veth0_macvtap: entered promiscuous mode
[  490.812320][T18407] veth1_macvtap: entered promiscuous mode
[  490.847961][T18407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.863283][T18407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.889102][ T6420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.904189][ T6420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.921803][ T6420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.946605][ T6420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.546726][T18739] FAULT_INJECTION: forcing a failure.
[  493.546726][T18739] name failslab, interval 1, probability 0, space 0, times 0
[  493.562005][T18739] CPU: 1 UID: 0 PID: 18739 Comm: syz.3.3367 Not tainted syzkaller #0 PREEMPT(full) 
[  493.562047][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  493.562068][T18739] Call Trace:
[  493.562150][T18739]  <TASK>
[  493.562211][T18739]  dump_stack_lvl+0xe8/0x150
[  493.562373][T18739]  should_fail_ex+0x40c/0x560
[  493.562466][T18739]  should_failslab+0xa8/0x100
[  493.562544][T18739]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  493.562577][T18739]  ? local_lock_release+0x9c/0x160
[  493.562690][T18739]  ? __alloc_skb+0x1d7/0x7a0
[  493.562709][T18739]  ? __alloc_skb+0x1d7/0x7a0
[  493.562736][T18739]  __alloc_skb+0x1d7/0x7a0
[  493.562761][T18739]  pfkey_sendmsg+0x20c/0x11d0
[  493.562841][T18739]  ? __lock_acquire+0x683/0x2cf0
[  493.562901][T18739]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  493.562931][T18739]  ? aa_sk_perm+0x6d5/0x900
[  493.563020][T18739]  ? __pfx_aa_sk_perm+0x10/0x10
[  493.563045][T18739]  ? aa_sock_msg_perm+0xf1/0x1b0
[  493.563073][T18739]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  493.563094][T18739]  sock_sendmsg_nosec+0x13a/0x180
[  493.563153][T18739]  ____sys_sendmsg+0x54e/0x850
[  493.563184][T18739]  ? __pfx_____sys_sendmsg+0x10/0x10
[  493.563218][T18739]  ? import_iovec+0x73/0xa0
[  493.563283][T18739]  ___sys_sendmsg+0x2a5/0x360
[  493.563306][T18739]  ? __lock_acquire+0x683/0x2cf0
[  493.563339][T18739]  ? __pfx____sys_sendmsg+0x10/0x10
[  493.563368][T18739]  ? kstrtouint+0x6e/0xe0
[  493.563465][T18739]  ? __fget_files+0x2a/0x420
[  493.563509][T18739]  ? __fget_files+0x3a2/0x420
[  493.563548][T18739]  __sys_sendmmsg+0x273/0x4d0
[  493.563579][T18739]  ? __pfx___sys_sendmmsg+0x10/0x10
[  493.563613][T18739]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  493.563712][T18739]  ? ksys_write+0x242/0x270
[  493.563736][T18739]  ? __pfx_ksys_write+0x10/0x10
[  493.563763][T18739]  __x64_sys_sendmmsg+0xa0/0xc0
[  493.563788][T18739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.563859][T18739]  do_syscall_64+0x174/0x580
[  493.563911][T18739]  ? trace_irq_disable+0x3b/0x140
[  493.563954][T18739]  ? clear_bhb_loop+0x40/0x90
[  493.563979][T18739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.563999][T18739] RIP: 0033:0x7febee19de99
[  493.564046][T18739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.564064][T18739] RSP: 002b:00007febef024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  493.564111][T18739] RAX: ffffffffffffffda RBX: 00007febee425fa0 RCX: 00007febee19de99
[  493.564126][T18739] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003
[  493.564139][T18739] RBP: 00007febef024090 R08: 0000000000000000 R09: 0000000000000000
[  493.564153][T18739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.564164][T18739] R13: 00007febee426038 R14: 00007febee425fa0 R15: 00007ffc32895a48
[  493.564197][T18739]  </TASK>
[  494.175075][T18742] netlink: 'syz.4.3368': attribute type 1 has an invalid length.
[  494.194372][T18742] netlink: 'syz.4.3368': attribute type 11 has an invalid length.
[  494.202973][T18742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3368'.
[  494.238475][ T6926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.252078][ T6926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.445540][T18754] veth3: entered allmulticast mode
[  494.552730][ T6926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.574452][ T6926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.640557][T18763] syzkaller0: entered promiscuous mode
[  494.650466][T18763] syzkaller0: entered allmulticast mode
[  495.464147][T18789] can: request_module (can-proto-0) failed.
[  495.717605][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'.
[  495.729008][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3383'.
[  495.748325][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'.
[  495.750703][T18797] netlink: 'syz.3.3384': attribute type 29 has an invalid length.
[  495.782853][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3383'.
[  495.792030][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'.
[  495.806570][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'.
[  495.983575][T18807] FAULT_INJECTION: forcing a failure.
[  495.983575][T18807] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.040277][T18807] CPU: 1 UID: 0 PID: 18807 Comm: syz.3.3388 Not tainted syzkaller #0 PREEMPT(full) 
[  496.040306][T18807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  496.040319][T18807] Call Trace:
[  496.040327][T18807]  <TASK>
[  496.040337][T18807]  dump_stack_lvl+0xe8/0x150
[  496.040374][T18807]  should_fail_ex+0x40c/0x560
[  496.040408][T18807]  _copy_from_iter+0x1d3/0x1660
[  496.040438][T18807]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  496.040467][T18807]  ? rcu_is_watching+0x15/0xb0
[  496.040527][T18807]  ? trace_kmem_cache_alloc+0x29/0xe0
[  496.040564][T18807]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  496.040593][T18807]  ? __pfx__copy_from_iter+0x10/0x10
[  496.040622][T18807]  ? __alloc_skb+0x276/0x7a0
[  496.040643][T18807]  ? __alloc_skb+0x276/0x7a0
[  496.040671][T18807]  ? __alloc_skb+0x4cc/0x7a0
[  496.040691][T18807]  ? skb_put+0x112/0x210
[  496.040727][T18807]  pfkey_sendmsg+0x25f/0x11d0
[  496.040765][T18807]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  496.040805][T18807]  ? aa_sk_perm+0x6d5/0x900
[  496.040834][T18807]  ? __pfx_aa_sk_perm+0x10/0x10
[  496.040857][T18807]  ? aa_sock_msg_perm+0xf1/0x1b0
[  496.040883][T18807]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  496.040904][T18807]  sock_sendmsg_nosec+0x13a/0x180
[  496.040935][T18807]  ____sys_sendmsg+0x54e/0x850
[  496.040963][T18807]  ? __pfx_____sys_sendmsg+0x10/0x10
[  496.040995][T18807]  ? import_iovec+0x73/0xa0
[  496.041029][T18807]  ___sys_sendmsg+0x2a5/0x360
[  496.041050][T18807]  ? __lock_acquire+0x683/0x2cf0
[  496.041083][T18807]  ? __pfx____sys_sendmsg+0x10/0x10
[  496.041111][T18807]  ? kstrtouint+0x6e/0xe0
[  496.041161][T18807]  ? __fget_files+0x2a/0x420
[  496.041188][T18807]  ? __fget_files+0x3a2/0x420
[  496.041225][T18807]  __sys_sendmmsg+0x273/0x4d0
[  496.041254][T18807]  ? __pfx___sys_sendmmsg+0x10/0x10
[  496.041286][T18807]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  496.041326][T18807]  ? ksys_write+0x242/0x270
[  496.041349][T18807]  ? __pfx_ksys_write+0x10/0x10
[  496.041374][T18807]  __x64_sys_sendmmsg+0xa0/0xc0
[  496.041398][T18807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.041419][T18807]  do_syscall_64+0x174/0x580
[  496.041442][T18807]  ? trace_irq_disable+0x3b/0x140
[  496.041468][T18807]  ? clear_bhb_loop+0x40/0x90
[  496.041492][T18807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.041512][T18807] RIP: 0033:0x7febee19de99
[  496.041535][T18807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.041552][T18807] RSP: 002b:00007febef024028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  496.041574][T18807] RAX: ffffffffffffffda RBX: 00007febee425fa0 RCX: 00007febee19de99
[  496.041588][T18807] RDX: 0000000000000001 RSI: 00002000000055c0 RDI: 0000000000000003
[  496.041601][T18807] RBP: 00007febef024090 R08: 0000000000000000 R09: 0000000000000000
[  496.041613][T18807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.041624][T18807] R13: 00007febee426038 R14: 00007febee425fa0 R15: 00007ffc32895a48
[  496.041655][T18807]  </TASK>
[  496.343452][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  496.573874][T18815] netlink: 'syz.1.3391': attribute type 9 has an invalid length.
[  496.618028][T18825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3392'.
[  496.702242][T18815] netlink: 'syz.1.3391': attribute type 5 has an invalid length.
[  496.710224][T18825] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3392'.
[  497.848689][T18848] syzkaller1: entered promiscuous mode
[  497.859474][T18848] syzkaller1: entered allmulticast mode
[  498.331293][T18877] netlink: 'syz.3.3405': attribute type 1 has an invalid length.
[  498.470110][T18877] bond1: entered promiscuous mode
[  498.486986][T18877] bond1: entered allmulticast mode
[  498.507577][T18877] 8021q: adding VLAN 0 to HW filter on device bond1
[  498.559967][T18882] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3406'.
[  498.641100][T18879] erspan1: entered allmulticast mode
[  498.666480][T18877] syz.3.3405 (18877) used obsolete PPPIOCDETACH ioctl
[  498.692666][T18879] bond1: (slave erspan1): making interface the new active one
[  498.734695][T18879] erspan1: entered promiscuous mode
[  498.750707][T18879] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  498.780940][T18882] vlan2: entered allmulticast mode
[  498.798251][T18882] bond0: entered allmulticast mode
[  498.809903][T18882] bond_slave_0: entered allmulticast mode
[  498.825929][T18882] bond_slave_1: entered allmulticast mode
[  499.236646][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'.
[  499.258995][T18907] veth0_macvtap: left promiscuous mode
[  499.411622][T18908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.422931][T18908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.585272][T18908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.603746][T18908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.725250][T18908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.763281][T18908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.896544][   T29] audit: type=1804 audit(1785071552.908:4): pid=18917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3418" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=62 res=1 errno=0
[  499.932533][T18908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  499.977460][   T29] audit: type=1800 audit(1785071552.938:5): pid=18917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3418" name="cgroup.controllers" dev="tmpfs" ino=62 res=0 errno=0
[  499.987792][T18908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.034892][T18918] syzkaller0: entered promiscuous mode
[  500.041754][T18918] syzkaller0: entered allmulticast mode
[  500.041910][   T29] audit: type=1800 audit(1785071552.948:6): pid=18917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3418" name="cgroup.controllers" dev="tmpfs" ino=62 res=0 errno=0
[  500.358476][ T6420] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  500.373701][ T6420] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.448678][ T6420] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  500.477877][ T6420] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.531015][T12729] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  500.547663][T12729] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.577502][T18937] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004
[  500.608976][T18935] ip6t_REJECT: ECHOREPLY is not supported
[  500.618538][T18935] ip6t_REJECT: ECHOREPLY is not supported
[  500.629054][ T6420] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  500.652967][ T6420] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.801670][T18942] __nla_validate_parse: 5 callbacks suppressed
[  500.801688][T18942] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3427'.
[  501.419767][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  501.580319][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.739089][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.916495][T18995] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3441'.
[  502.198193][T19009] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  502.221488][T19009] IPVS: sed: FWM 3 0x00000003 - no destination available
[  502.403220][ T6420] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.423206][ T6420] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.445502][ T6420] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.476602][ T6420] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.503546][ T6420] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.522330][ T6420] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.579119][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'.
[  502.610115][ T6420] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.631803][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'.
[  502.653567][ T6420] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.696013][T19028] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3454'.
[  502.710694][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.788143][ T6555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.306758][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3462'.
[  503.459903][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'.
[  503.611443][T19066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3464'.
[  503.656015][T19063] bond0: entered promiscuous mode
[  503.676891][T19063] bond_slave_0: entered promiscuous mode
[  503.689744][T19063] bond_slave_1: entered promiscuous mode
[  503.713173][T19063] gretap0: entered promiscuous mode
[  503.731833][T19063] debugfs: 'hsr1' already exists in 'hsr'
[  503.752312][T19063] Cannot create hsr debugfs directory
[  503.758960][T19063] hsr1: entered promiscuous mode
[  503.817205][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.882249][T19070] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3466'.
[  503.983467][ T6540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.002343][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'.
[  504.084386][T19082] netlink: del zone limit has 8 unknown bytes
[  504.299030][ T6555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.845248][T19103] bridge1: port 1(dummy0) entered blocking state
[  504.857310][ T6555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.867746][T19103] bridge1: port 1(dummy0) entered disabled state
[  504.874734][T19103] dummy0: entered allmulticast mode
[  504.898547][T19103] dummy0: entered promiscuous mode
[  505.175394][   T29] audit: type=1804 audit(1785071558.188:7): pid=19120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3480" name="/newroot/24/cgroup.controllers" dev="tmpfs" ino=146 res=1 errno=0
[  505.252910][   T29] audit: type=1800 audit(1785071558.188:8): pid=19120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3480" name="cgroup.controllers" dev="tmpfs" ino=146 res=0 errno=0
[  505.401986][T19126] FAULT_INJECTION: forcing a failure.
[  505.401986][T19126] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.457218][T19126] CPU: 0 UID: 0 PID: 19126 Comm: syz.1.3482 Not tainted syzkaller #0 PREEMPT(full) 
[  505.457247][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  505.457261][T19126] Call Trace:
[  505.457269][T19126]  <TASK>
[  505.457278][T19126]  dump_stack_lvl+0xe8/0x150
[  505.457315][T19126]  should_fail_ex+0x40c/0x560
[  505.457348][T19126]  _copy_from_user+0x2d/0xb0
[  505.457369][T19126]  do_ipt_set_ctl+0x743/0xe20
[  505.457528][T19126]  ? rcu_is_watching+0x15/0xb0
[  505.457550][T19126]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  505.457592][T19126]  ? __mutex_unlock_slowpath+0x731/0x900
[  505.457620][T19126]  ? aa_sk_perm+0x6d5/0x900
[  505.457644][T19126]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  505.457682][T19126]  ? __pfx_aa_sk_perm+0x10/0x10
[  505.457710][T19126]  nf_setsockopt+0x26f/0x290
[  505.457769][T19126]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  505.457802][T19126]  do_sock_setsockopt+0x17c/0x1b0
[  505.457830][T19126]  __x64_sys_setsockopt+0x13d/0x1b0
[  505.457856][T19126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.457879][T19126]  do_syscall_64+0x174/0x580
[  505.457904][T19126]  ? trace_irq_disable+0x3b/0x140
[  505.457931][T19126]  ? clear_bhb_loop+0x40/0x90
[  505.457957][T19126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.457979][T19126] RIP: 0033:0x7f2f6e79de99
[  505.457999][T19126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.458017][T19126] RSP: 002b:00007f2f6f74a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  505.458039][T19126] RAX: ffffffffffffffda RBX: 00007f2f6ea25fa0 RCX: 00007f2f6e79de99
[  505.458054][T19126] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009
[  505.458066][T19126] RBP: 00007f2f6f74a090 R08: 00000000000005b0 R09: 0000000000000000
[  505.458079][T19126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.458093][T19126] R13: 00007f2f6ea26038 R14: 00007f2f6ea25fa0 R15: 00007ffff08a2908
[  505.458126][T19126]  </TASK>
[  506.191368][T19131] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.199124][T19131] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.901027][T19131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.952024][ T6545] net_ratelimit: 13 callbacks suppressed
[  506.952043][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.989560][T19131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.533665][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.785791][T19131] bridge1: left promiscuous mode
[  507.796673][T19131] bridge1: left allmulticast mode
[  507.812575][T19131] bond1: left allmulticast mode
[  507.827876][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.955998][ T6926] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.977733][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.987643][ T6926] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.008478][ T6926] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.019002][T19149] __nla_validate_parse: 5 callbacks suppressed
[  508.019018][T19149] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3490'.
[  508.019655][ T6926] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  508.320993][T19160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.330708][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.443601][T19166] tipc: Started in network mode
[  508.456788][T19166] tipc: Node identity , cluster identity 4711
[  508.466003][T19049] Set syz1 is full, maxelem 65536 reached
[  508.473176][T19166] tipc: Failed to obtain node identity
[  508.473207][T19166] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  508.538310][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.777879][ T6541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.955823][ T6541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.248194][T19183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3499'.
[  509.323414][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3499'.
[  509.443761][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'.
[  509.463001][T19196] netlink: 'syz.0.3502': attribute type 13 has an invalid length.
[  509.483350][T19196] netlink: 'syz.0.3502': attribute type 17 has an invalid length.
[  509.682548][T19204] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3504'.
[  509.737874][T19193] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.745593][T19193] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.664285][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.694935][T19193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.231549][T19196] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.240831][T19196] 8021q: adding VLAN 0 to HW filter on device team0
[  511.256063][T19196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.283628][T19196] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.290826][T19196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.302053][T19196] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.309336][T19196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.333447][T19196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.343471][T19196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.370742][T19196] veth1_vlan: left promiscuous mode
[  511.377605][T19196] veth0_vlan: left promiscuous mode
[  511.384799][T19196] veth0_vlan: entered promiscuous mode
[  511.394900][T19196] veth1_vlan: entered promiscuous mode
[  511.406712][T19196] veth1_macvtap: left promiscuous mode
[  511.415022][T19196] veth1_macvtap: entered promiscuous mode
[  511.428277][T19196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  511.440853][T19196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  511.452282][T19196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  511.463923][T19196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  511.478754][T19196] vlan2: left allmulticast mode
[  511.483662][T19196] bond0: left allmulticast mode
[  511.488627][T19196] bond_slave_0: left allmulticast mode
[  511.494122][T19196] bond_slave_1: left allmulticast mode
[  511.507596][T19200] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.721440][T19227] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3512'.
[  511.738935][T19224] bond0: (slave ip6tnl0): refused to change device type
[  511.749829][T19227] FAULT_INJECTION: forcing a failure.
[  511.749829][T19227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.786291][T19228] syzkaller1: entered promiscuous mode
[  511.806047][T19228] syzkaller1: entered allmulticast mode
[  511.808569][T19227] CPU: 1 UID: 0 PID: 19227 Comm: syz.2.3512 Not tainted syzkaller #0 PREEMPT(full) 
[  511.808640][T19227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  511.808683][T19227] Call Trace:
[  511.808704][T19227]  <TASK>
[  511.808732][T19227]  dump_stack_lvl+0xe8/0x150
[  511.808837][T19227]  should_fail_ex+0x40c/0x560
[  511.808933][T19227]  _copy_from_user+0x2d/0xb0
[  511.809012][T19227]  copy_from_sockptr_offset+0x66/0xa0
[  511.809111][T19227]  do_ipt_set_ctl+0x991/0xe20
[  511.809193][T19227]  ? rcu_is_watching+0x15/0xb0
[  511.809256][T19227]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  511.809368][T19227]  ? __mutex_unlock_slowpath+0x731/0x900
[  511.809446][T19227]  ? aa_sk_perm+0x6d5/0x900
[  511.809515][T19227]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  511.809613][T19227]  ? __pfx_aa_sk_perm+0x10/0x10
[  511.809701][T19227]  nf_setsockopt+0x26f/0x290
[  511.809765][T19227]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  511.809866][T19227]  do_sock_setsockopt+0x17c/0x1b0
[  511.809940][T19227]  __x64_sys_setsockopt+0x13d/0x1b0
[  511.810012][T19227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.810077][T19227]  do_syscall_64+0x174/0x580
[  511.810147][T19227]  ? trace_irq_disable+0x3b/0x140
[  511.810224][T19227]  ? clear_bhb_loop+0x40/0x90
[  511.810294][T19227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.810368][T19227] RIP: 0033:0x7febd8d9de99
[  511.810438][T19227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.810482][T19227] RSP: 002b:00007febd9bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  511.810541][T19227] RAX: ffffffffffffffda RBX: 00007febd9025fa0 RCX: 00007febd8d9de99
[  511.810582][T19227] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009
[  511.810613][T19227] RBP: 00007febd9bfe090 R08: 00000000000005b0 R09: 0000000000000000
[  511.810644][T19227] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.810693][T19227] R13: 00007febd9026038 R14: 00007febd9025fa0 R15: 00007ffff8e642d8
[  511.810801][T19227]  </TASK>
[  512.022811][  T809] net_ratelimit: 17 callbacks suppressed
[  512.022828][  T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.233227][T19232] syzkaller0: entered promiscuous mode
[  512.249154][T19232] syzkaller0: entered allmulticast mode
[  512.298914][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.450114][T19256] netlink: 'syz.4.3517': attribute type 15 has an invalid length.
[  512.483406][T19256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3517'.
[  512.529864][T19259] ieee802154 phy1 wpan1: encryption failed: -90
[  512.699077][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.729447][T19263] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3520'.
[  512.743787][T19265] bond2: option mode: invalid value (20)
[  512.760701][T19265] bond2 (unregistering): Released all slaves
[  512.890891][T19266] bond2: option mode: invalid value (20)
[  513.097957][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.108343][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.144407][T19266] bond2 (unregistering): Released all slaves
[  513.288316][T19277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3521'.
[  513.350487][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.684194][T19263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  513.737869][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.774424][T19263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  513.800466][T19263] bond0 (unregistering): Released all slaves
[  513.840673][T19284] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  513.863670][ T6552] IPVS: starting estimator thread 0...
[  513.870044][T19284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  513.891917][T19299] IPVS: sed: FWM 3 0x00000003 - no destination available
[  513.909473][T19284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  513.916731][T19299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.959281][T19302] IPVS: using max 40 ests per chain, 96000 per kthread
[  514.045811][T19306] veth1_to_bond: entered allmulticast mode
[  514.057281][ T5625] Bluetooth: hci0: command tx timeout
[  514.128652][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'.
[  514.152819][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.190275][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3531'.
[  514.480032][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3536'.
[  514.534868][T19339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3539'.
[  514.616772][T19341] bridge2: port 1(dummy0) entered blocking state
[  514.653413][T19331] netlink: 'syz.1.3536': attribute type 10 has an invalid length.
[  514.680495][T19341] bridge2: port 1(dummy0) entered disabled state
[  514.699724][T19331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3536'.
[  514.733740][T19341] dummy0: entered allmulticast mode
[  514.769540][T19341] dummy0: entered promiscuous mode
[  514.865325][T19331] bridge2: port 1(dummy0) entered blocking state
[  514.872735][T19331] bridge2: port 1(dummy0) entered forwarding state
[  514.908318][T19331] dummy0: left allmulticast mode
[  514.918561][T19331] bridge2: port 1(dummy0) entered disabled state
[  515.103013][T19350] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  515.144881][T19350] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  515.171998][T19350] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  515.255186][T19350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  515.671213][ T6926] smbdirect: ib_dev[syz2] removed
[  516.353247][T19408] syzkaller0: entered promiscuous mode
[  516.366315][T19408] syzkaller0: entered allmulticast mode
[  516.732390][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3562'.
[  516.772282][T19426] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3562'.
[  517.135981][T19443] tipc: Started in network mode
[  517.150219][T19443] tipc: Node identity , cluster identity 4711
[  517.177649][T19443] tipc: Failed to obtain node identity
[  517.187101][T19443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  517.309743][ T6545] net_ratelimit: 27 callbacks suppressed
[  517.309763][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.324192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.435048][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.503907][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.782304][T19469] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[  517.814280][T19469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3573'.
[  517.842049][T19456] vlan2: entered promiscuous mode
[  517.848523][T19456] team0: entered promiscuous mode
[  517.853633][T19456] team_slave_0: entered promiscuous mode
[  517.859845][T19456] team_slave_1: entered promiscuous mode
[  517.897622][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.905495][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.064780][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.075173][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.136567][T19483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3579'.
[  518.147394][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.377861][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.599200][T19492] __nla_validate_parse: 1 callbacks suppressed
[  518.599219][T19492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3582'.
[  518.663670][T19500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3585'.
[  518.990610][T19515] netlink: 'syz.1.3589': attribute type 1 has an invalid length.
[  519.011930][T19500] netlink: 'syz.3.3585': attribute type 2 has an invalid length.
[  519.044815][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'.
[  519.152078][T19512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'.
[  519.211192][T19519] bond2: (slave veth3): Enslaving as an active interface with a down link
[  519.251383][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3589'.
[  519.433487][T19523] bond2: (slave veth5): Enslaving as an active interface with a down link
[  519.445210][T19515] 8021q: adding VLAN 0 to HW filter on device bond2
[  519.758006][T19542] netlink: 'syz.1.3595': attribute type 1 has an invalid length.
[  520.008687][T19542] bond3: option mode: invalid value (8)
[  520.016051][T19554] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3596'.
[  520.034663][T19542] bond3 (unregistering): Released all slaves
[  520.225389][T19556] tipc: Started in network mode
[  520.240403][T19556] tipc: Node identity , cluster identity 4711
[  520.246720][T19556] tipc: Failed to obtain node identity
[  520.253005][T19556] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  520.651543][T19577] tipc: Started in network mode
[  520.665442][T19577] tipc: Node identity , cluster identity 4711
[  520.683748][T19577] tipc: Failed to obtain node identity
[  520.703566][T19577] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  520.974782][T19596] x_tables: duplicate underflow at hook 1
[  520.990539][T19596] x_tables: duplicate underflow at hook 2
[  521.454760][T19619] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3619'.
[  521.945202][T19632] tipc: Started in network mode
[  521.960140][T19632] tipc: Node identity , cluster identity 4711
[  521.986681][T19632] tipc: Failed to obtain node identity
[  521.997002][T19632] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  522.128802][T19640] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004
[  522.293747][T19645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3628'.
[  522.477089][T19655] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3630'.
[  522.549102][ T5754] net_ratelimit: 1415 callbacks suppressed
[  522.549121][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.563347][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.668067][T19661] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3633'.
[  522.697564][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.847238][T19664] block nbd2: server does not support multiple connections per device.
[  522.869980][T19664] block nbd2: shutting down sockets
[  523.099561][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.111521][T19680] tipc: Started in network mode
[  523.131424][T19680] tipc: Node identity , cluster identity 4711
[  523.157838][T19680] tipc: Failed to obtain node identity
[  523.167976][T19680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  523.498191][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.545800][T19698] unsupported nla_type 29219
[  523.563800][T19698] netlink: 'syz.0.3643': attribute type 40 has an invalid length.
[  523.582148][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.590865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.739586][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.956045][T19709] sctp: [Deprecated]: syz.2.3645 (pid 19709) Use of struct sctp_assoc_value in delayed_ack socket option.
[  523.956045][T19709] Use struct sctp_sack_info instead
[  523.987668][T19208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.137974][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.365484][T19723] ip6tnl0: entered promiscuous mode
[  524.381856][T19723] __nla_validate_parse: 2 callbacks suppressed
[  524.381874][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'.
[  524.610717][T19731] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  524.635274][T19731] bond3 (unregistering): Released all slaves
[  525.017299][ T5622] Bluetooth: hci0: command 0x0405 tx timeout
[  525.106653][T19748] bond0: option min_links: invalid value (18446744073709551612)
[  525.114529][T19748] bond0: option min_links: allowed values 0 - 2147483647
[  525.130414][T19748] bond0 (unregistering): Released all slaves
[  525.403330][T19760] GUP no longer grows the stack in syz.1.3656 (19760): 200000003000-20000000a000 (200000001000)
[  525.433574][T19760] CPU: 1 UID: 0 PID: 19760 Comm: syz.1.3656 Not tainted syzkaller #0 PREEMPT(full) 
[  525.433613][T19760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  525.433625][T19760] Call Trace:
[  525.433633][T19760]  <TASK>
[  525.433641][T19760]  dump_stack_lvl+0xe8/0x150
[  525.433676][T19760]  __get_user_pages+0x238c/0x2720
[  525.433739][T19760]  ? __gup_longterm_locked+0xc3b/0x15c0
[  525.433788][T19760]  __gup_longterm_locked+0xd52/0x15c0
[  525.433813][T19760]  ? lock_acquire+0x106/0x350
[  525.433858][T19760]  gup_fast_fallback+0x1d8c/0x20e0
[  525.433877][T19760]  ? lockdep_hardirqs_on+0x7a/0x110
[  525.433994][T19760]  ? __pfx_gup_fast_fallback+0x10/0x10
[  525.434019][T19760]  ? is_valid_gup_args+0x11f/0x200
[  525.434043][T19760]  ? get_user_pages_fast+0x4d/0xb0
[  525.434067][T19760]  __iov_iter_get_pages_alloc+0x378/0xa40
[  525.434105][T19760]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  525.434135][T19760]  iov_iter_get_pages2+0x5e/0xa0
[  525.434168][T19760]  __se_sys_vmsplice+0x7b5/0x1660
[  525.434217][T19760]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  525.434250][T19760]  ? __pfx_futex_wake+0x10/0x10
[  525.434277][T19760]  ? __sys_bpf+0xa9f/0xd90
[  525.434338][T19760]  ? 0xffffffffff600000
[  525.434388][T19760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.434410][T19760]  do_syscall_64+0x174/0x580
[  525.434433][T19760]  ? trace_irq_disable+0x3b/0x140
[  525.434459][T19760]  ? clear_bhb_loop+0x40/0x90
[  525.434482][T19760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.434501][T19760] RIP: 0033:0x7f2f6e79de99
[  525.434519][T19760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.434535][T19760] RSP: 002b:00007f2f6f74a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  525.434556][T19760] RAX: ffffffffffffffda RBX: 00007f2f6ea25fa0 RCX: 00007f2f6e79de99
[  525.434569][T19760] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  525.434582][T19760] RBP: 00007f2f6e833eaf R08: 0000000000000000 R09: 0000000000000000
[  525.434594][T19760] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  525.434605][T19760] R13: 00007f2f6ea26038 R14: 00007f2f6ea25fa0 R15: 00007ffff08a2908
[  525.434635][T19760]  </TASK>
[  525.983981][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  526.007710][T19773] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3661'.
[  526.146513][T19777] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3663'.
[  526.158499][T19777] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  526.178731][T19777] 0ªî{X¹¦: entered allmulticast mode
[  526.307690][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3664'.
[  526.561900][T19796] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  526.582070][T19796] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  526.615631][T19796] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  526.650595][T19799] netlink: 'syz.1.3669': attribute type 1 has an invalid length.
[  526.678161][T19799] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3669'.
[  526.707255][T19796] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  526.734905][T19799] syzkaller0: entered promiscuous mode
[  526.753824][T19799] syzkaller0: entered allmulticast mode
[  526.797409][T19799] tipc: Started in network mode
[  526.802855][T19804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3671'.
[  526.830672][T19799] tipc: Node identity d6187b70595c, cluster identity 4711
[  526.848315][T19799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.883023][T19798] tipc: Resetting bearer <eth:syzkaller0>
[  526.923397][T19798] tipc: Disabling bearer <eth:syzkaller0>
[  527.088859][T19804] siw: device registration error -23
[  527.351775][   T12] smbdirect: ib_dev[syz2] removed
[  527.577561][    C0] net_ratelimit: 18 callbacks suppressed
[  527.577580][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.658942][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.852617][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.881592][T19842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.901432][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.909865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.918013][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.944638][T19846] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  527.978024][T19208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.034452][T19842] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  528.265997][T19830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3674'.
[  528.297728][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.324053][T19856] geneve1: entered promiscuous mode
[  528.358630][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3684'.
[  528.567476][T19859] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  528.893475][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'.
[  529.269335][T19893] netlink: 'syz.0.3692': attribute type 21 has an invalid length.
[  529.293670][T19893] IPv6: NLM_F_CREATE should be specified when creating new route
[  529.348912][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.468487][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3693'.
[  529.545409][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'.
[  529.902983][T19918] netlink: 'syz.4.3702': attribute type 1 has an invalid length.
[  529.927666][T19918] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3702'.
[  530.190929][T19940] bond0: (slave bond_slave_1): Releasing backup interface
[  530.485655][T19954] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3715'.
[  530.546492][T19957] wg1: left promiscuous mode
[  530.561711][T19957] vlan0: left promiscuous mode
[  530.583270][T19954] netlink: 'syz.3.3715': attribute type 1 has an invalid length.
[  530.597085][T19957] bond1: left promiscuous mode
[  530.615662][T19961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3717'.
[  530.648248][T19961] netlink: 'syz.0.3717': attribute type 1 has an invalid length.
[  530.744420][T19938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3709'.
[  530.761041][T19964] tipc: Started in network mode
[  530.780843][T19964] tipc: Node identity 22b15063d10e, cluster identity 4711
[  530.796461][T19964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.811555][T19971] syzkaller0: entered promiscuous mode
[  530.820652][T19971] syzkaller0: entered allmulticast mode
[  530.828695][T19972] netlink: 'syz.3.3715': attribute type 3 has an invalid length.
[  530.837533][T19964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3718'.
[  530.842235][T19972] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3715'.
[  530.877388][T19964] tipc: Resetting bearer <eth:syzkaller0>
[  530.963742][T19971] tipc: Resetting bearer <eth:syzkaller0>
[  531.034883][T19971] tipc: Disabling bearer <eth:syzkaller0>
[  531.152526][T19972] 8021q: adding VLAN 0 to HW filter on device bond4
[  531.164167][T19972] bond3: (slave bond4): making interface the new active one
[  531.175566][T19972] bond3: (slave bond4): Enslaving as an active interface with an up link
[  531.192350][T19987] netlink: 'syz.0.3720': attribute type 1 has an invalid length.
[  531.301316][T19996] netlink: 'syz.4.3723': attribute type 1 has an invalid length.
[  531.309455][T19996] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3723'.
[  531.318915][T19996] netlink: 'syz.4.3723': attribute type 1 has an invalid length.
[  531.326940][T19996] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.3723'.
[  531.361159][T19987] 8021q: adding VLAN 0 to HW filter on device bond1
[  531.523988][T19992] bond1: (slave veth3): Enslaving as an active interface with a down link
[  531.698898][T19987] bond1: (slave veth5): Enslaving as an active interface with a down link
[  531.999647][T20030] x_tables: duplicate underflow at hook 3
[  533.309229][T20100] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  533.349583][T20101] netlink: 'syz.2.3742': attribute type 3 has an invalid length.
[  533.400597][T20105] netlink: 'syz.0.3745': attribute type 2 has an invalid length.
[  533.417936][   T30] INFO: task kworker/1:1H:1624 blocked for more than 143 seconds.
[  533.428960][   T30]       Not tainted syzkaller #0
[  533.434076][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.444743][   T30] task:kworker/1:1H    state:D stack:23616 pid:1624  tgid:1624  ppid:2      task_flags:0x4208060 flags:0x00080000
[  533.457898][   T30] Workqueue: kblockd blk_mq_requeue_work
[  533.464788][   T30] Call Trace:
[  533.468629][   T30]  <TASK>
[  533.471817][   T30]  __schedule+0x17d9/0x56c0
[  533.476603][   T30]  ? __lock_acquire+0x683/0x2cf0
[  533.482196][   T30]  ? __pfx___schedule+0x10/0x10
[  533.487766][   T30]  ? schedule+0x90/0x2b0
[  533.492368][   T30]  schedule+0x164/0x2b0
[  533.496734][   T30]  schedule_timeout+0x152/0x2c0
[  533.502008][ T6552] net_ratelimit: 6 callbacks suppressed
[  533.502024][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.503995][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  533.521697][   T30]  ? __pfx_process_timeout+0x10/0x10
[  533.527753][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  533.533752][   T30]  ? prepare_to_wait_event+0x436/0x480
[  533.539753][   T30]  nbd_queue_rq+0x889/0x1150
[  533.544589][   T30]  ? __pfx_nbd_queue_rq+0x10/0x10
[  533.550592][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  533.556830][   T30]  blk_mq_dispatch_rq_list+0x499/0x1990
[  533.562778][   T30]  ? sbitmap_get+0x229/0x390
[  533.568999][   T30]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  533.575117][   T30]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  533.581261][   T30]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  533.587926][   T30]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  533.594856][   T30]  ? blk_mq_hw_queue_need_run+0x134/0x630
[  533.601095][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  533.606559][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  533.612266][   T30]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  533.618492][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  533.623856][   T30]  blk_mq_run_hw_queue+0x348/0x4f0
[  533.629477][   T30]  blk_mq_run_hw_queues+0x268/0x3f0
[  533.634775][   T30]  blk_mq_requeue_work+0x703/0x760
[  533.640121][   T30]  ? __pfx_blk_mq_requeue_work+0x10/0x10
[  533.645864][   T30]  ? rcu_is_watching+0x15/0xb0
[  533.650883][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  533.656740][   T30]  process_scheduled_works+0xa8e/0x14e0
[  533.662999][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  533.669237][   T30]  ? assign_work+0x3cf/0x5d0
[  533.673982][   T30]  worker_thread+0xa47/0xfb0
[  533.680020][   T30]  ? __kthread_parkme+0x71/0x1f0
[  533.685209][   T30]  kthread+0x388/0x470
[  533.689860][   T30]  ? __pfx_worker_thread+0x10/0x10
[  533.695043][   T30]  ? __pfx_kthread+0x10/0x10
[  533.699805][   T30]  ret_from_fork+0x514/0xb70
[  533.704542][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  533.709804][   T30]  ? __switch_to+0xc89/0x1420
[  533.714642][   T30]  ? __pfx_kthread+0x10/0x10
[  533.719811][   T30]  ret_from_fork_asm+0x1a/0x30
[  533.724709][   T30]  </TASK>
[  533.728095][   T30] 
[  533.728095][   T30] Showing all locks held in the system:
[  533.735977][   T30] 1 lock held by khungtaskd/30:
[  533.741704][   T30]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  533.752129][   T30] 4 locks held by kworker/1:1H/1624:
[  533.757589][   T30]  #0: ffff88801eaa7940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  533.768991][   T30]  #1: ffffc90006cd7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  533.782478][   T30]  #2: ffff888026d0d818 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  533.793335][   T30]  #3: ffff888026dc7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  533.802592][   T30] 4 locks held by klogd/4975:
[  533.807672][   T30]  #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  533.818086][   T30]  #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  533.828028][   T30]  #2: ffff8880b86281d8 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3e0
[  533.838944][   T30]  #3: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  533.849201][   T30] 2 locks held by getty/5373:
[  533.854014][   T30]  #0: ffff888031d150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  533.864054][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  533.874755][   T30] 1 lock held by udevd/5634:
[  533.879482][   T30]  #0: ffff888025a30350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  533.889105][   T30] 1 lock held by syz.4.3734/20060:
[  533.894270][   T30]  #0: ffff8880321fa140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280
[  533.904641][   T30] 4 locks held by syz.4.3734/20068:
[  533.910179][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  533.918944][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  533.928438][   T30]  #2: ffff8880321fa140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3c/0x350
[  533.937673][   T30]  #3: ffff88807b0fe348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdc0
[  533.947198][   T30] 2 locks held by syz.4.3734/20076:
[  533.952664][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  533.961321][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  533.970778][   T30] 2 locks held by syz.3.3736/20075:
[  533.976054][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  533.984573][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  533.994086][   T30] 2 locks held by syz.2.3742/20098:
[  533.999516][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.007976][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  534.017696][   T30] 2 locks held by syz.2.3742/20101:
[  534.022983][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.031498][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  534.040672][   T30] 2 locks held by syz.1.3744/20103:
[  534.046058][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.054729][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  534.064145][   T30] 2 locks held by syz.1.3744/20107:
[  534.070605][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.079381][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  534.088940][   T30] 2 locks held by syz.0.3745/20105:
[  534.094396][   T30]  #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  534.103063][   T30]  #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  534.112599][   T30] 
[  534.114977][   T30] =============================================
[  534.114977][   T30] 
[  534.123510][   T30] NMI backtrace for cpu 1
[  534.123525][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  534.123547][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  534.123559][   T30] Call Trace:
[  534.123568][   T30]  <TASK>
[  534.123576][   T30]  dump_stack_lvl+0xe8/0x150
[  534.123613][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  534.123714][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  534.123763][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  534.123788][   T30]  sys_info+0x135/0x170
[  534.123818][   T30]  watchdog+0xfd7/0x1030
[  534.123862][   T30]  ? watchdog+0x1c7/0x1030
[  534.123897][   T30]  kthread+0x388/0x470
[  534.123930][   T30]  ? __pfx_watchdog+0x10/0x10
[  534.123955][   T30]  ? __pfx_kthread+0x10/0x10
[  534.123995][   T30]  ret_from_fork+0x514/0xb70
[  534.124031][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  534.124063][   T30]  ? __switch_to+0xc89/0x1420
[  534.124094][   T30]  ? __pfx_kthread+0x10/0x10
[  534.124127][   T30]  ret_from_fork_asm+0x1a/0x30
[  534.124164][   T30]  </TASK>
[  534.124173][   T30] Sending NMI from CPU 1 to CPUs 0:
[  534.235799][    C0] NMI backtrace for cpu 0
[  534.235817][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  534.235836][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  534.235848][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  534.235875][    C0] Code: 0c 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ae 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  534.235891][    C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246
[  534.235907][    C0] RAX: 000000000015bdc9 RBX: ffffffff819b4450 RCX: 0000000080000001
[  534.235921][    C0] RDX: 0000000000000001 RSI: ffffffff8e22ddae RDI: ffffffff8c4bdb80
[  534.235933][    C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b
[  534.235946][    C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000
[  534.235959][    C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000
[  534.235973][    C0] FS:  0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000
[  534.235988][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  534.236000][    C0] CR2: 0000001b3030eff8 CR3: 0000000074da2000 CR4: 00000000003526f0
[  534.236016][    C0] Call Trace:
[  534.236023][    C0]  <TASK>
[  534.236030][    C0]  default_idle+0x9/0x20
[  534.236054][    C0]  default_idle_call+0x72/0xb0
[  534.236078][    C0]  do_idle+0x2e0/0x540
[  534.236104][    C0]  ? __pfx_do_idle+0x10/0x10
[  534.236134][    C0]  cpu_startup_entry+0x43/0x60
[  534.236158][    C0]  rest_init+0x2de/0x300
[  534.236185][    C0]  start_kernel+0x392/0x3e0
[  534.236287][    C0]  x86_64_start_reservations+0x24/0x30
[  534.236359][    C0]  x86_64_start_kernel+0x137/0x1b0
[  534.236378][    C0]  common_startup_64+0x13e/0x157
[  534.236407][    C0]  </TASK>
[  534.413459][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  534.420340][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  534.429458][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  534.439526][   T30] Call Trace:
[  534.442825][   T30]  <TASK>
[  534.445761][   T30]  vpanic+0x56c/0xa60
[  534.449775][   T30]  ? __pfx___schedule+0x10/0x10
[  534.454655][   T30]  ? __pfx_vpanic+0x10/0x10
[  534.459183][   T30]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  534.465383][   T30]  panic+0xc5/0xd0
[  534.469131][   T30]  ? __pfx_panic+0x10/0x10
[  534.473575][   T30]  ? preempt_schedule_common+0x82/0xd0
[  534.479050][   T30]  ? preempt_schedule_thunk+0x16/0x40
[  534.484440][   T30]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  534.490614][   T30]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  534.496787][   T30]  watchdog+0x1030/0x1030
[  534.501149][   T30]  ? watchdog+0x1c7/0x1030
[  534.505591][   T30]  kthread+0x388/0x470
[  534.509681][   T30]  ? __pfx_watchdog+0x10/0x10
[  534.514380][   T30]  ? __pfx_kthread+0x10/0x10
[  534.519023][   T30]  ret_from_fork+0x514/0xb70
[  534.523646][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  534.528789][   T30]  ? __switch_to+0xc89/0x1420
[  534.533505][   T30]  ? __pfx_kthread+0x10/0x10
[  534.538133][   T30]  ret_from_fork_asm+0x1a/0x30
[  534.542932][   T30]  </TASK>
[  534.546584][   T30] Kernel Offset: disabled
[  534.550916][   T30] Rebooting in 86400 seconds..