last executing test programs:

49.839748294s ago: executing program 0 (id=3252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000009287000000000000000a000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

49.790189395s ago: executing program 0 (id=3253):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff720200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000300000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

49.727225966s ago: executing program 0 (id=3254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x130, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_USERDATA={0xf4, 0xd, 0x1, 0x0, "8a47e3f67440b13c6faff90621ef4b796e8bd66664ca64cd5da5e7c4848d1181228c4a42db2a76772d7e84784b208078d95470a1b5ee9a3e1bf8c3eebe063ebb94c18d9e5b18e3ab64d0336c168df5b5e5a06b51d65c4337a8dc10b4027ea1b2d52c808bd061b2d4a46509a8c63669cc496b02b3ff3c185a8a95aab9504f8a31800a4e981f155b80a36bd101c317c3ebcc9d66b3f1e9a45b4b33f08b2bc87452ce3f2019c244fb1117ab909245dd7d469707b93a63239e1d9b6d15246fdfa8f4745b59712e1b14c79587aef5121e3965494266744a05dafbb9671f73f0ee106b495c206b43bfe62edccbcbb37a166429"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x31}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x178}}, 0x20050800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0)

49.631882791s ago: executing program 0 (id=3256):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'vcan0\x00'}) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001800), 0x0, 0x4000) (async)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000001080)=0x1, 0x4) (async)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0xfffffe60}], 0x1)

49.331267897s ago: executing program 0 (id=3259):
r0 = socket$inet(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20040600)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100fdeffffefcdbdf254f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab000000000008000b000000000006001100ffff0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008011}, 0x44008050)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000b0606000000000000000000050000060900020073797aab48692e004400078008000640000000001800168014000240fe800000000000000000000000000032060004404e2000000c00028008000140ac1e00010a001100000000000000000008c91e40000000050900020073797a31fb0000009ddcd666f810772d8c331beff786c82ba411f8b549525475ba9183c8e34bc12d88216bfaa282f66e2678b1eeaf15e299375b5af968329cacb30bff12359d91d29398002a2127eb199b9ed24e539e333377923d81446c5a9e33e5159f9d42185a7a7c73669a05ccae"], 0x78}, 0x1, 0x0, 0x0, 0x24000011}, 0x800)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd7010040000000500000008510a72047e09000200000008000c00a80a000008000b000000000005fb"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24048810}, 0x40000)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

49.153516577s ago: executing program 0 (id=3260):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000b00)=@newqdisc={0x3dc, 0x24, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {0x2, 0x10}, {0x4, 0xfff8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x264, 0x2, {{0x6, [0x1, 0x5, 0xc, 0x5, 0x4, 0x8, 0x7, 0x1, 0xa, 0x0, 0x1, 0x5, 0xf, 0x7, 0x7, 0x9], 0x0, [0x94a, 0x0, 0x7, 0x2, 0x7, 0x8001, 0x7, 0x80, 0x7, 0x1, 0x400, 0xc0f6, 0x0, 0x7, 0x7, 0x800], [0x10, 0x5, 0x6a8, 0x6, 0x2, 0xec, 0x100, 0x5, 0x6, 0xfff7, 0x9, 0xffff, 0x101, 0x7, 0x7, 0x7]}, [@TCA_MQPRIO_MIN_RATE64={0xac, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xd95}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xfffffffffffffffd}, {0xc, 0x3, 0x8}, {0xc}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xffffffffffff0000}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x80}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xffffffffffffffff}, {0xc, 0x3, 0x100}, {0xc, 0x3, 0x6}]}, @TCA_MQPRIO_MIN_RATE64={0xac, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x309}, {0xc, 0x3, 0x13}, {0xc, 0x3, 0x2d5}, {0xc, 0x3, 0x8001}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x9}, {0xc}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x400000000004}, {0xc, 0x3, 0x10001}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x2}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x8}, {0xc}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x7}, {0xc}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7}]}]}}}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xc, 0x1, 0x9, 0x1, 0x9, 0x8001, 0x6}}, {0x10, 0x2, [0x2, 0x4, 0x0, 0x100, 0x9, 0x2]}}, {{0x1c, 0x1, {0x7f, 0xc1, 0x3, 0x0, 0x2, 0x8, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0xe]}}, {{0x1c, 0x1, {0x7c, 0x6, 0x5, 0x6, 0x2, 0xfffffffc, 0xb97f, 0x5}}, {0xe, 0x2, [0x6, 0x9, 0x10, 0xcd20, 0x5cb]}}, {{0x1c, 0x1, {0x2, 0xff, 0x4, 0x8001, 0x3, 0xc, 0xfffffffa, 0x5}}, {0xe, 0x2, [0x6, 0x1, 0x3900, 0xba, 0xfff4]}}, {{0x1c, 0x1, {0x2, 0x81, 0xc1, 0x0, 0x3, 0x4, 0x8, 0x6}}, {0x10, 0x2, [0xfffb, 0x9, 0x4, 0x3, 0x786, 0xa6cd]}}, {{0x1c, 0x1, {0x5, 0x8, 0x3, 0xd, 0x0, 0x9, 0xff, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xba, 0x84, 0x8, 0x1, 0x1, 0x0, 0x4161, 0x5}}, {0xe, 0x2, [0x9, 0xece, 0x9, 0x88, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xcc}, @qdisc_kind_options=@q_mq={0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff8}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000000), 0x8)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x7}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sa_dir={0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0xffffffff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r7)
sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r12, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x48, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1002, 0x1, 0x0, 0x0, {0x1, 0xfb4, 0x0, 0x1c, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x2, 0x4}}]}, 0x48}}, 0x4000000)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080))

36.232275485s ago: executing program 3 (id=3335):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000001040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000500)=0x28)
close(r0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth0\x00', <r7=>0x0})
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000005c0))
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572ad50372615d30b1c00000000000000000000000000000000000004"], 0x68)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000d00"/38], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

36.188245125s ago: executing program 3 (id=3337):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

35.78053588s ago: executing program 3 (id=3341):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000b40)=0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000b80)=<r5=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000bc0)=<r6=>0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000c40)=0xc)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x22, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x816}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x1, 0xb, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e40)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000e80)=[{0x0, 0x2, 0x4, 0xb}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x5, 0x4, 0x9}], 0x10, 0xb}, 0x94)
r9 = getpid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001380)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000ac0)=0xe8)
r11 = getgid()
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000010c0)={0xffffffffffffffff}, 0x4)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001100)={<r13=>0x0}, &(0x7f0000001140)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001180)={0x0, <r14=>0x0}, &(0x7f00000011c0)=0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000480)="221c2523b9b7ba8744f6280f2ed498d568eb62b5548d1bd19f88bd9af97c3ba1eb90e36551d329c5a306c2370f998f19d0afe2bd9f70abc37c0c36b203089d3a28d08985266574b65cd170eb9ca0e19ba3dcd1c942fed35cc9ab2d7c04402e87fd5cd297baf01d99", 0x68}, {&(0x7f0000000500)="b5806a6c35ae4013101fe7ffac2cc6505e1e7bf17a5f8aad7435c6439d2c8c6cf05c6c7afbbec38ff451c9d1e1d78b70e7ebd5bfffb043d4757dbd61db23e50eddd22a6e9c", 0x45}, {&(0x7f0000000580)="3338ae83142b41d192d0c3b791feaf3935de55efe376b28d91acd096e88010c2433ca03d342dc186705f2fc3a0d72bb76df8c4656de6d7ee12d13fe14db756023b86062a5c5696ebecad227dec7825ca9381d0db371f5c6c22a7acbddeae1b3c32a5c010f667ea3f3d032ac3d81b595495c9", 0x72}, {&(0x7f0000000600)="e686e778f16ccfd663c43fae08163e4889f41e19318b939e2fd08376b16b976dfd1ea34ad2ea38fb1a920056a182520397fb672c5569ac628cb50e5d9df2c6346e0b093c4d032642febeca0c8ba310", 0x4f}, {&(0x7f0000000680)="af311c65684db4c1b3b7726e1aad3a903f14098bcc5526b2a859091a50a7267a9611902da263ec48d6b56e87c90b5011f4d583bd125d94850436d19026343d2f4a0f2293f8db4a39a4b75d68129c5c1d4f529183a6d5ffd6fe544493dbed5678f3944a650c0023054a5bdbd769ec3d1c268a70899fa50efeefd1ba19c16f3020af1b9503980bc75f3295a64ff5ec9db420", 0x91}, {&(0x7f0000000740)="ecaf194824f3f5db79260d740beff3079024313910264923d92741156f2f1d51cd12aa4dbef1bfebd00a5587411edbdc689e488ec002d9eaf176b75a57067c448d9316b167062d62ca34134f8b72588b525a1740b6ba0e5c0a96fabf0b9601ee3f154def6b63ebb8c465bd2ca602b889a512d2e1231bdfb568b4b2dac9becbac7f39fc967f52271d3296ba7042431c", 0x8f}, {&(0x7f0000000800)="25b037cebf7dd1ad78966633b172c8453fbe1119b442e393b77e8df916b1450fb9671dbe26ee2af10683e5cb7a8ec9a71c5d49c49e5c153f63ac7b6ecd82fe0560ad4b341b8730077ac3695001c461cbc3b2fa9c24acb94177ae04125f2f8850e8e3736d8f1bf4e4553efd8145039feab03a936a432963202d6e47f1ed9320eb5e527e0249e5beefd89a05b7bf89f01035f37d4dc6865806e8c886cf5ee1f2a53d61bab6b52558b7e24499125dbc2920f44ac947090346470ca3470528fa3005b9e044e8d7099aea907f71321e166a007654725b7a1e5271813afd0ec1c4c65a6ea284358a8208aaeba5a4976f885f08d612902c", 0xf4}, {&(0x7f0000000900)="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", 0xfd}], 0x8, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000070854000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x40000d4}, 0x40000)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xffff)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000280)=0x637, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f00000001c0)=0x4e)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000380)=0x4)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x400, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x9, 0xfffffffe}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0)

35.434834416s ago: executing program 3 (id=3342):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
writev(r1, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
close(0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[], 0x190)

34.065010688s ago: executing program 1 (id=3349):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

33.788767316s ago: executing program 2 (id=3350):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

33.748046868s ago: executing program 2 (id=3351):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0003000005000000", 0x29}], 0x1)

33.501210496s ago: executing program 2 (id=3353):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50)
r0 = socket$kcm(0x21, 0x7, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x3, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x117, 0x10, "aa"}], 0x30}, 0x0)

33.417322724s ago: executing program 2 (id=3354):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async)
connect$rxrpc(r0, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$kcm(0x23, 0x2, 0x0) (rerun: 32)
sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080))
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004001)

32.986203109s ago: executing program 1 (id=3355):
recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/87, 0x57}], 0x3, &(0x7f0000000280)}, 0x40010000) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x1)
connect$bt_l2cap(r0, 0x0, 0x0)

32.770214937s ago: executing program 1 (id=3356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0)

31.846709278s ago: executing program 3 (id=3358):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r3, 0x2)
accept4(r3, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)

31.745647939s ago: executing program 1 (id=3359):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

31.006652537s ago: executing program 4 (id=3361):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x4, 0x1}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @restrict={0xf}, @ptr={0xb, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/20, 0x51, 0x14, 0x0, 0x40000000, 0x10000}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x3ff, 0x5c, &(0x7f00000003c0)=""/92, 0x0, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000640)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xd, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r0, r1, r0, r1], 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90)

30.72886367s ago: executing program 4 (id=3362):
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x23}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040)
r1 = socket(0xa, 0x3, 0xff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
r3 = gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in=@private}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8)
sendmsg$netlink(r2, &(0x7f0000001680)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc, &(0x7f0000001600)=[{&(0x7f0000000440)={0x119c, 0x16, 0x410, 0x70bd25, 0x25dfdbfe, "", [@typed={0x16, 0x29, 0x0, 0x0, @binary="488ac5b72bbb865bd3c619755be53b027955"}, @generic="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", @typed={0x14, 0xd9, 0x0, 0x0, @ipv6=@loopback}, @generic="4633d1c02581696f40d5d568ff171c850eeee49debac43fe0e0b547ed76608761afd4be7a9b264e4760e56f15c5da3902c5cfc8ef9f3ff567d1def1e", @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x610}, @nested={0x8, 0x67, 0x0, 0x1, [@nested={0x4, 0x8c}]}, @generic="413fa286268a288a58893c4efb3ae8e45255b92803c28ec4968123764bbba11976267d49c8953fb9ab2972f8749e2a0284014b2c97905b9b43377581a2ccdab648f53bf83e941fa79ce358602f1a84a85f51d574065409774b4d652a7fe7e68eaf1918313625abbd6317a18e8e99cdd3a4ee6ac0faf5e462e4eb583f4fbc36092fc1c4f867ee418f34e4d5424bd43604698d7ed351bea9701a0759423d8946224a77792de5fc4d35a4ad16eb697510c8f9b3e1fb42584283bc53f66d4881a8099843f62d865839a4eff43683f65d762f61b1d009baeba355e4c2792c954d227c0c33ddfbb44cc21d8eb8d0326802384e00", @typed={0x8, 0xe1, 0x0, 0x0, @pid=r3}, @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @uid=r4}]}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@broadcast}]}, 0x119c}], 0x1, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r2, r0, r1]}}], 0x28, 0x81}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

30.551904767s ago: executing program 4 (id=3363):
r0 = socket$tipc(0x1e, 0x2, 0x0)
mmap(&(0x7f00003af000/0x2000)=nil, 0x2000, 0xb, 0x10013, r0, 0xcbe35000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>0xffffffffffffffff, 0x1, 0xfffffffffffffff7, 0x5})
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)
r2 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x3, 0x4, 0x1c0000, 0xd55d, 0x369})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

30.318908375s ago: executing program 4 (id=3364):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

30.260426298s ago: executing program 1 (id=3365):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000640)=ANY=[@ANYRES8=r3, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x58)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0xf, 0x80000, 0x80002)
connect$can_j1939(r5, 0x0, 0x0)
socket(0x10, 0x1, 0x1) (async)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) (async)
write$nci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="400202a0"], 0x5) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x40800) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
socket$unix(0x1, 0x2, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

29.922006043s ago: executing program 3 (id=3366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000c3b611000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="240100ae", @ANYRES16=r1, @ANYBLOB="05002cbd70000000000044000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044084}, 0x0)

29.63501466s ago: executing program 2 (id=3367):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x14000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

29.466932685s ago: executing program 4 (id=3368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="88d8bf92d5ad3dd44a5bbdc6c8a46865e4a988e635195b", 0x17}, 0x1, 0x0, 0x0, 0x40040d1}, 0xc004091)

28.868819023s ago: executing program 4 (id=3369):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000002800000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0xfe33)

28.452115062s ago: executing program 1 (id=3370):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x20, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080)

28.283492631s ago: executing program 2 (id=3371):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

0s ago: executing program 32 (id=3366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000c3b611000300686173683a69702c6d61726b"], 0x58}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="240100ae", @ANYRES16=r1, @ANYBLOB="05002cbd70000000000044000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044084}, 0x0)

kernel console output (not intermixed with test programs):

ed]: syz.4.1847 (pid 12929) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.124595][T12929] Use struct sctp_sack_info instead
[  281.480870][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  281.549603][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'.
[  281.601231][T12956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1853'.
[  282.331470][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'.
[  282.333919][T12990] netlink: 'syz.4.1867': attribute type 1 has an invalid length.
[  282.333936][T12990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1867'.
[  283.074180][T13015] syzkaller1: entered promiscuous mode
[  283.074361][T13015] syzkaller1: entered allmulticast mode
[  283.925092][T13059] xt_TPROXY: Can be used only with -p tcp or -p udp
[  284.136717][T13072] __nla_validate_parse: 2 callbacks suppressed
[  284.136738][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'.
[  284.580861][T13095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1891'.
[  284.787261][T13108] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  284.866333][T13108] netlink: 'syz.2.1895': attribute type 32 has an invalid length.
[  284.893897][T13112] syzkaller0: entered promiscuous mode
[  284.894083][T13112] syzkaller0: entered allmulticast mode
[  285.054917][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'.
[  285.095971][T13119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.244744][T13116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.344461][T13133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.467508][T13137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.886978][T13152] netlink: 'syz.3.1905': attribute type 8 has an invalid length.
[  286.059881][T13159] syzkaller0: entered promiscuous mode
[  286.059905][T13159] syzkaller0: entered allmulticast mode
[  286.609328][T13161] Set syz1 is full, maxelem 1038 reached
[  286.704512][T13176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1912'.
[  286.991179][T13198] netlink: 'syz.2.1916': attribute type 32 has an invalid length.
[  287.020114][T13198] netlink: 'syz.2.1916': attribute type 32 has an invalid length.
[  287.032731][T13207] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  287.193334][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1921'.
[  287.367555][T13221] netlink: 'syz.4.1924': attribute type 1 has an invalid length.
[  287.486177][T13221] bond2: entered promiscuous mode
[  287.486683][T13221] 8021q: adding VLAN 0 to HW filter on device bond2
[  287.537888][T13222] bond2: (slave bridge3): making interface the new active one
[  287.537912][T13222] bridge3: entered promiscuous mode
[  287.539928][T13222] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  287.554225][T13231] xt_hashlimit: size too large, truncated to 1048576
[  287.615284][T13234] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 2, id = 0
[  287.945749][T13244] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1928'.
[  289.659510][T13184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  289.676211][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  289.943103][T13262] Bluetooth: hci0: Opcode 0x080f failed: -22
[  290.042064][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  290.497654][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'.
[  290.576656][T13290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1943'.
[  290.975061][T13313] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1946'.
[  291.346140][T13330] syzkaller0: entered promiscuous mode
[  291.346162][T13330] syzkaller0: entered allmulticast mode
[  291.775927][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'.
[  292.042907][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'.
[  292.042932][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'.
[  292.042946][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'.
[  292.043120][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'.
[  292.292725][T13377] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  292.298607][T13378] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  292.633760][T13397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.266694][T13417] bond9: entered promiscuous mode
[  293.266882][T13417] bond9: entered allmulticast mode
[  293.793497][T13442] netlink: 'syz.4.1982': attribute type 16 has an invalid length.
[  293.793530][T13442] veth0_macvtap: entered allmulticast mode
[  293.800046][T13442] openvswitch: netlink: ct_state flags ffffffff unsupported
[  294.068020][T13456] syzkaller1: entered allmulticast mode
[  294.445072][T13467] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  294.467198][T13467] 0ªX¹¦Dö»: entered allmulticast mode
[  294.481636][T13469] 1ªX¹¦Dö»: renamed from 
00ªX¹¦Dö» (while UP)
[  294.850354][T13486] __nla_validate_parse: 141 callbacks suppressed
[  294.850373][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1992'.
[  294.942008][T13494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.956807][T13493] bond0: (slave bridge0): Releasing backup interface
[  295.218983][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1997'.
[  295.274235][T13504] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  295.274257][T13504] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1997'.
[  295.287414][T13504] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  295.290528][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1998'.
[  295.392653][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'.
[  295.702709][T13506] hsr_slave_1 (unregistering): left promiscuous mode
[  295.736080][T13509] dvmrp0: left allmulticast mode
[  296.279472][T13519] h: entered promiscuous mode
[  296.742503][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'.
[  296.779371][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'.
[  297.075469][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'.
[  297.075491][T13559] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  297.299709][T13573] netlink: 'syz.2.2014': attribute type 1 has an invalid length.
[  297.299730][T13573] netlink: 'syz.2.2014': attribute type 7 has an invalid length.
[  297.299741][T13573] netlink: 'syz.2.2014': attribute type 8 has an invalid length.
[  297.299753][T13573] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2014'.
[  297.299900][T13573] NCSI netlink: No device for ifindex 65584
[  297.597799][T13579] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2018'.
[  297.682101][T13583] netlink: 'syz.3.2022': attribute type 17 has an invalid length.
[  297.703601][T13583] 1ªX¹¦Dö»: entered promiscuous mode
[  297.798416][T13583] 1ªX¹¦Dö»: left promiscuous mode
[  297.892673][T13590] netlink: 'syz.2.2023': attribute type 1 has an invalid length.
[  298.027413][T13598] netlink: 'syz.1.2021': attribute type 4 has an invalid length.
[  298.043778][T13598] netlink: 'syz.1.2021': attribute type 1 has an invalid length.
[  298.106386][T13601] netlink: 'syz.4.2025': attribute type 7 has an invalid length.
[  298.442033][T13622] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  298.718767][T13635] macvlan0: entered promiscuous mode
[  298.833696][T13642] validate_nla: 3 callbacks suppressed
[  298.833714][T13642] netlink: 'syz.0.2036': attribute type 12 has an invalid length.
[  298.869493][T13643] netlink: 'syz.0.2036': attribute type 12 has an invalid length.
[  299.459933][T13667] netlink: 'syz.4.2043': attribute type 11 has an invalid length.
[  299.947271][T13678] __nla_validate_parse: 13 callbacks suppressed
[  299.947291][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2047'.
[  299.949775][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.154247][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2048'.
[  300.610473][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'.
[  300.610499][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'.
[  300.669872][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'.
[  300.914017][T13703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2054'.
[  301.172755][T13721] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2054'.
[  301.308262][T13723] netlink: 'syz.4.2060': attribute type 4 has an invalid length.
[  301.311137][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  301.311155][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'.
[  301.407690][T13726] syz0: rxe_newlink: already configured on lo
[  301.442104][T13731] netlink: 'syz.2.2062': attribute type 21 has an invalid length.
[  301.442127][T13731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2062'.
[  301.916021][T13749] netlink: 'syz.3.2067': attribute type 12 has an invalid length.
[  302.370079][T13766] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  302.601380][ T6862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.601401][ T6862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.634638][T13779] sctp: [Deprecated]: syz.2.2074 (pid 13779) Use of int in maxseg socket option.
[  302.634638][T13779] Use struct sctp_assoc_value instead
[  302.836008][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.840892][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.877400][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.937918][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.040424][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.058449][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.077479][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.082117][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.115591][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.135418][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.171074][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.195091][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.222934][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.245751][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.251082][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.303643][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.312071][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.362835][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.383836][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.385188][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.427461][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.463151][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.486245][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.520011][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.541605][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.572424][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.614444][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.668938][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.670410][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.721809][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.765572][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.790515][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.806342][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.834172][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.511309][T13844] bond0: left promiscuous mode
[  304.753514][T13859] xt_l2tp: invalid flags combination: 8
[  304.857281][ T6861] wlan0: Trigger new scan to find an IBSS to join
[  305.152761][T13872] netlink: 'syz.4.2096': attribute type 10 has an invalid length.
[  305.186981][T13868] ip_tables: iptables: counters copy to user failed while replacing table
[  305.280891][T13881] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0)
[  305.280932][T13881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.306583][T13881] __nla_validate_parse: 7 callbacks suppressed
[  305.306603][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'.
[  305.308113][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'.
[  305.348033][T13872] team0: Port device dummy0 added
[  305.441597][T13881] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  305.441622][T13881] netlink: 'syz.1.2099': attribute type 2 has an invalid length.
[  305.735319][T13896] netlink: 'syz.4.2104': attribute type 15 has an invalid length.
[  305.735342][T13896] netlink: 'syz.4.2104': attribute type 7 has an invalid length.
[  305.901734][T13904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.162081][T13910] veth3: entered allmulticast mode
[  306.178089][T13910] netlink: 'syz.3.2110': attribute type 1 has an invalid length.
[  306.178113][T13910] netlink: 'syz.3.2110': attribute type 3 has an invalid length.
[  306.178125][T13910] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2110'.
[  306.549979][T13927] netlink: 'syz.3.2113': attribute type 2 has an invalid length.
[  306.550002][T13927] netlink: 'syz.3.2113': attribute type 8 has an invalid length.
[  306.550014][T13927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2113'.
[  307.790128][T13980] netlink: 'syz.1.2124': attribute type 28 has an invalid length.
[  307.790152][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2124'.
[  307.901248][ T6861] wlan0: Trigger new scan to find an IBSS to join
[  308.014342][T13985] bond0: entered promiscuous mode
[  308.014365][T13985] bond_slave_0: entered promiscuous mode
[  308.014583][T13985] bond_slave_1: entered promiscuous mode
[  308.014780][T13985] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  308.021354][T13985] bridge0: entered promiscuous mode
[  308.088204][T13985] batadv0: entered promiscuous mode
[  308.100168][T13985] debugfs: 'hsr0' already exists in 'hsr'
[  308.100193][T13985] Cannot create hsr debugfs directory
[  308.101189][T13985] 8021q: adding VLAN 0 to HW filter on device hsr0
[  308.107263][T13993] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2125'.
[  308.220587][T14009] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2129'.
[  308.234857][T13998] erspan0: entered promiscuous mode
[  308.505914][T14016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2130'.
[  308.589904][T13993] .`: renamed from bond0 (while UP)
[  308.966901][T14007] bond6 (unregistering): Released all slaves
[  309.552555][T14037] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2135'.
[  309.691176][T14041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'.
[  309.866837][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.049942][T14052] nbd: must specify an index to disconnect
[  310.148868][T14044] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.235115][T14052] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  310.338655][T14064] 8021q: adding VLAN 0 to HW filter on device macsec1
[  310.340817][    T9] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  310.517187][T14071] xt_CT: You must specify a L4 protocol and not use inversions on it
[  310.538114][T14071] xt_CT: You must specify a L4 protocol and not use inversions on it
[  310.695214][T14084] openvswitch: netlink: IPv6 tunnel dst address is zero
[  310.712986][T14085] smc: net device team0 applied user defined pnetid SYZ2
[  310.936047][ T6891] wlan0: Trigger new scan to find an IBSS to join
[  311.396095][T14119] __nla_validate_parse: 7 callbacks suppressed
[  311.396115][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  311.396129][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'.
[  311.396154][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'.
[  311.458346][T14115] bond0: entered promiscuous mode
[  311.627055][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  311.627079][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'.
[  311.627102][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'.
[  312.035574][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.066938][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'.
[  312.067346][T14126] syzkaller1: entered promiscuous mode
[  312.067364][T14126] syzkaller1: entered allmulticast mode
[  312.202665][T14140] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  312.289701][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'.
[  312.289725][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'.
[  312.289749][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'.
[  313.753623][T14166] ieee802154 phy0 wpan0: encryption failed: -22
[  314.595307][T14197] ip_tables: iptables: counters copy to user failed while replacing table
[  315.028396][T14209] bond0: invalid NS target ff00:: specified for addition
[  315.028426][T14209] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  315.709580][T14240] bond14: entered promiscuous mode
[  315.709605][T14240] bond14: entered allmulticast mode
[  316.527910][T14272] validate_nla: 2 callbacks suppressed
[  316.527932][T14272] netlink: 'syz.4.2200': attribute type 12 has an invalid length.
[  317.180518][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  343.019348][T14280] __nla_validate_parse: 18 callbacks suppressed
[  343.019369][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2204'.
[  343.112071][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'.
[  343.134896][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  343.141985][T14289] syzkaller1: entered promiscuous mode
[  343.142005][T14289] syzkaller1: entered allmulticast mode
[  343.165816][T14289] ip_tables: iptables: counters copy to user failed while replacing table
[  343.195892][T14285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2202'.
[  343.236279][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'.
[  343.343080][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2209'.
[  344.066326][T14328] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  344.070977][T14328] netlink: 'syz.0.2219': attribute type 4 has an invalid length.
[  344.070999][T14328] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2219'.
[  344.077108][T14328] netlink: 'syz.0.2219': attribute type 1 has an invalid length.
[  344.245790][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'.
[  344.267703][T14328] block nbd296: server does not support multiple connections per device.
[  344.277110][T14328] block nbd296: shutting down sockets
[  345.293119][T14357] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  345.388523][T14361] pim6reg1: entered promiscuous mode
[  345.388546][T14361] pim6reg1: entered allmulticast mode
[  345.560228][T14371] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  345.560263][T14371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.722762][T14377] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2234'.
[  346.008185][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'.
[  346.283825][T14405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  346.411872][T14405] IPVS: length: 8 != 1152
[  348.567250][T14507] tipc: Trying to set illegal importance in message
[  348.916665][T14518] __nla_validate_parse: 5 callbacks suppressed
[  348.916685][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2263'.
[  349.159199][T14527] netlink: 'syz.4.2266': attribute type 1 has an invalid length.
[  349.382539][T14535] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[  349.400366][T14535] bond10 (unregistering): Released all slaves
[  349.593099][T14548] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2273'.
[  349.605754][T14546] ip_tables: iptables: counters copy to user failed while replacing table
[  349.618387][T14548] ip6t_REJECT: ECHOREPLY is not supported
[  349.623979][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'.
[  349.696463][T14556] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  350.169060][T14570] netlink: 'syz.1.2279': attribute type 3 has an invalid length.
[  350.169268][T14570] netlink: 'syz.1.2279': attribute type 3 has an invalid length.
[  350.288462][T14570] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2279'.
[  350.304338][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'.
[  350.475495][T14575] netlink: Invalid conntrack helper
[  350.475526][T14575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.618252][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  384.834168][T14622] ip_tables: iptables: counters copy to user failed while replacing table
[  384.874778][T14621] xt_ipcomp: unknown flags 1D
[  385.118259][T14641] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2296'.
[  385.266010][T14656] batman_adv: batadv0: Adding interface: veth0
[  385.266027][T14656] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.272413][T14656] batman_adv: batadv0: Interface activated: veth0
[  385.309049][T14656] batman_adv: batadv0: Interface deactivated: veth0
[  385.309230][T14656] batman_adv: batadv0: Removing interface: veth0
[  385.395893][T14660] ip_tables: iptables: counters copy to user failed while replacing table
[  385.476720][T14664] vti0: entered promiscuous mode
[  385.610203][T14667] netlink: NAT attribute has 8 unknown bytes
[  385.610237][T14667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.636815][T14667] netlink: 'syz.3.2303': attribute type 10 has an invalid length.
[  385.637141][T14667] veth0_vlan: entered allmulticast mode
[  385.669194][T14667] team0: Device veth0_vlan failed to register rx_handler
[  387.991672][T14641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.438994][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'.
[  388.443231][T14713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2316'.
[  388.519653][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2319'.
[  388.519677][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2319'.
[  388.522475][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'.
[  388.547740][T14719] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2320'.
[  388.563419][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'.
[  388.646754][T14721] ieee802154 phy0 wpan0: left promiscuous mode
[  388.759895][T14722] netlink: 'syz.3.2318': attribute type 7 has an invalid length.
[  388.759915][T14722] netlink: 'syz.3.2318': attribute type 5 has an invalid length.
[  388.759927][T14722] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2318'.
[  389.797828][T14758] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  390.046325][T14763] Bluetooth: MGMT ver 1.23
[  390.789805][T14780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2336'.
[  390.789832][T14780] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2336'.
[  391.010364][T14780] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2336'.
[  391.010390][T14780] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2336'.
[  391.025963][T14788] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2338'.
[  391.274250][T14805] xt_hashlimit: size too large, truncated to 1048576
[  391.274485][T14805] xt_hashlimit: max too large, truncated to 1048576
[  391.274590][T14805] xt_hashlimit: overflow, rate too high: 0
[  391.818662][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'.
[  393.029388][T14837] bond0: (slave gtp1): The slave device specified does not support setting the MAC address
[  393.032209][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'.
[  393.032240][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'.
[  393.033615][T14837] bond0: (slave gtp1): Error -95 calling set_mac_address
[  393.064677][T14845] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  393.579180][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2359'.
[  394.299302][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  394.299345][T14903] netlink: 'syz.2.2368': attribute type 10 has an invalid length.
[  395.757828][T14951] bond5: option xmit_hash_policy: invalid value (64)
[  395.797941][T14962] __nla_validate_parse: 4 callbacks suppressed
[  395.797961][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'.
[  395.815564][T14951] bond5 (unregistering): Released all slaves
[  395.828567][T14963] Cannot find del_set index 0 as target
[  396.240059][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2388'.
[  396.259737][T14971] netlink: 'syz.4.2388': attribute type 10 has an invalid length.
[  396.335289][T14971] 8021q: adding VLAN 0 to HW filter on device team0
[  396.341019][T14971] bond0: (slave team0): Enslaving as an active interface with an up link
[  396.418879][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'.
[  396.453683][T14980] syzkaller1: entered promiscuous mode
[  396.453705][T14980] syzkaller1: entered allmulticast mode
[  397.049743][T15000] x_tables: duplicate entry at hook 4
[  397.104434][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2399'.
[  397.162885][T15002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2397'.
[  397.211447][T15010] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.2400'.
[  397.211473][T15010] netlink: 'syz.0.2400': attribute type 1 has an invalid length.
[  398.246152][T15034] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2407'.
[  398.302309][T15038] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  398.356651][T15036] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  398.356712][    T9] lo speed is unknown, defaulting to 1000
[  398.525319][ T6891] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  398.525578][ T6891] bond2: (slave veth0_to_bond): making interface the new active one
[  398.559868][ T6891] bond2: active interface up!
[  398.601193][T15050] syzkaller1: tun_chr_ioctl cmd 1074025678
[  398.601214][T15050] syzkaller1: group set to 0
[  398.625671][T15052] ip_tables: iptables: counters copy to user failed while replacing table
[  398.698679][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2415'.
[  398.698712][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2415'.
[  398.727312][T15058] 1ªX¹¦Dö»: entered promiscuous mode
[  398.774978][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.939320][T15058] 1ªX¹¦Dö»: left promiscuous mode
[  398.996862][T15052] tipc: New replicast peer: 172.20.20.187
[  398.999714][T15052] tipc: Enabled bearer <udp:syz0>, priority 10
[  399.264217][T15075] netlink: 'syz.2.2420': attribute type 2 has an invalid length.
[  399.688983][T15093] nbd: must specify at least one socket
[  399.752058][T15102] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2427'.
[  400.140353][ T5712] tipc: Node number set to 1674316920
[  400.572250][T15149] netlink: Setting conntrack mark requires 'commit' flag.
[  400.572283][T15149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.843066][T15155] __nla_validate_parse: 2 callbacks suppressed
[  400.843085][T15155] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2440'.
[  401.049128][T15157] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  402.641550][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'.
[  402.872297][T15230] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000
[  402.875582][T15227] xt_hashlimit: size too large, truncated to 1048576
[  403.200515][T15242] netlink: 'syz.0.2461': attribute type 3 has an invalid length.
[  403.241952][T15242] ip_tables: iptables: counters copy to user failed while replacing table
[  403.260404][T15240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2463'.
[  403.260431][T15240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2463'.
[  403.674144][T15253] netlink: 'syz.2.2467': attribute type 1 has an invalid length.
[  403.754310][T15256] netlink: 'syz.4.2468': attribute type 1 has an invalid length.
[  403.799069][T15253] bond16: entered promiscuous mode
[  403.799167][T15253] bond16: entered allmulticast mode
[  403.801173][T15253] 8021q: adding VLAN 0 to HW filter on device bond16
[  403.878926][T15257] erspan2: entered allmulticast mode
[  403.921881][T15257] bond16: (slave erspan2): making interface the new active one
[  403.921907][T15257] erspan2: entered promiscuous mode
[  403.940000][T15257] bond16: (slave erspan2): Enslaving as an active interface with an up link
[  404.024649][T15264] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2470'.
[  404.439764][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'.
[  404.891363][T15291] netlink: 'syz.3.2479': attribute type 1 has an invalid length.
[  404.891387][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2479'.
[  405.063440][T15302] FAULT_INJECTION: forcing a failure.
[  405.063440][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  405.063643][T15302] CPU: 1 UID: 0 PID: 15302 Comm: syz.4.2482 Not tainted syzkaller #0 PREEMPT(full) 
[  405.063685][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  405.063724][T15302] Call Trace:
[  405.063732][T15302]  <TASK>
[  405.063740][T15302]  dump_stack_lvl+0xe8/0x150
[  405.063772][T15302]  should_fail_ex+0x410/0x560
[  405.063800][T15302]  _copy_from_user+0x2d/0xb0
[  405.063826][T15302]  kstrtouint_from_user+0xd6/0x180
[  405.063850][T15302]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  405.063880][T15302]  ? lock_acquire+0x115/0x350
[  405.063905][T15302]  proc_fail_nth_write+0x8e/0x210
[  405.063925][T15302]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  405.063953][T15302]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  405.063979][T15302]  vfs_write+0x296/0xba0
[  405.064016][T15302]  ? __pfx_vfs_write+0x10/0x10
[  405.064045][T15302]  ? __fget_files+0x2a/0x420
[  405.064073][T15302]  ? __fget_files+0x3a2/0x420
[  405.064095][T15302]  ? __fget_files+0x2a/0x420
[  405.064126][T15302]  ksys_write+0x150/0x270
[  405.064153][T15302]  ? __pfx_ksys_write+0x10/0x10
[  405.064189][T15302]  do_syscall_64+0x166/0x520
[  405.064225][T15302]  ? trace_irq_disable+0x3b/0x140
[  405.064243][T15302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.064262][T15302]  ? clear_bhb_loop+0x70/0xc0
[  405.064285][T15302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.064303][T15302] RIP: 0033:0x7f8def95e98e
[  405.064321][T15302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  405.064336][T15302] RSP: 002b:00007f8df0944fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  405.064357][T15302] RAX: ffffffffffffffda RBX: 00007f8df09456c0 RCX: 00007f8def95e98e
[  405.064371][T15302] RDX: 0000000000000001 RSI: 00007f8df09450a0 RDI: 0000000000000005
[  405.064383][T15302] RBP: 00007f8df0945090 R08: 0000000000000000 R09: 0000000000000000
[  405.064394][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.064405][T15302] R13: 00007f8defc26038 R14: 00007f8defc25fa0 R15: 00007ffefc7fa7d8
[  405.064437][T15302]  </TASK>
[  405.658071][T15325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2487'.
[  405.946675][T15336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2491'.
[  406.685974][T15339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2495'.
[  406.921088][T15367] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2505'.
[  407.044679][T15371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2504'.
[  407.315356][T15383] syzkaller1: entered allmulticast mode
[  407.344231][T15383] netlink: 'syz.1.2508': attribute type 3 has an invalid length.
[  407.344252][T15383] netlink: 'syz.1.2508': attribute type 4 has an invalid length.
[  407.344266][T15383] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2508'.
[  407.427971][T15386] nbd: must specify a device to reconfigure
[  407.842791][T15398] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2516'.
[  408.484372][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'.
[  408.484419][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'.
[  408.558190][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'.
[  408.607339][T15424] xt_CT: You must specify a L4 protocol and not use inversions on it
[  409.131859][T15434] netlink: 'syz.3.2529': attribute type 15 has an invalid length.
[  409.131884][T15434] netlink: 'syz.3.2529': attribute type 7 has an invalid length.
[  409.263066][T15455] netlink: 'syz.0.2533': attribute type 4 has an invalid length.
[  409.418114][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'.
[  409.506975][T15468] batadv_slave_0: entered promiscuous mode
[  409.685942][T15472] netlink: 'syz.3.2539': attribute type 13 has an invalid length.
[  409.686776][T15472] netlink: 'syz.3.2539': attribute type 13 has an invalid length.
[  409.719656][T15464] batadv_slave_0: left promiscuous mode
[  409.864442][T15482] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  410.030077][T15494] bridge: RTM_NEWNEIGH with invalid ether address
[  410.080227][T15488] can: request_module (can-proto-0) failed.
[  410.122213][T15497] Cannot find map_set index 135 as target
[  410.970561][T15529] __nla_validate_parse: 8 callbacks suppressed
[  410.970582][T15529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2556'.
[  411.129810][T15542] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  411.182875][T15544] ovs-system: entered promiscuous mode
[  411.327594][T15547] syz.4.2562 (15547) used obsolete PPPIOCDETACH ioctl
[  411.351240][T15551] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2561'.
[  411.517725][T15555] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2564'.
[  412.196583][T15560] lo speed is unknown, defaulting to 1000
[  412.607339][T15592] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  412.727402][T15596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2579'.
[  412.799058][T15601] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2578'.
[  412.962254][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'.
[  413.228407][T15564] lo speed is unknown, defaulting to 1000
[  414.088921][T15628] bond6 (unregistering): Released all slaves
[  414.413142][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2590'.
[  414.462913][T15658] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2592'.
[  414.872808][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'.
[  415.827659][T15687] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  415.944398][T15688] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  416.389033][T15719] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2604'.
[  416.780463][T15734] netlink: 'syz.3.2609': attribute type 8 has an invalid length.
[  417.495204][T15764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2616'.
[  417.955234][T15784] FAULT_INJECTION: forcing a failure.
[  417.955234][T15784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.955267][T15784] CPU: 0 UID: 0 PID: 15784 Comm: syz.1.2623 Not tainted syzkaller #0 PREEMPT(full) 
[  417.955288][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.955299][T15784] Call Trace:
[  417.955306][T15784]  <TASK>
[  417.955314][T15784]  dump_stack_lvl+0xe8/0x150
[  417.955347][T15784]  should_fail_ex+0x410/0x560
[  417.955374][T15784]  _copy_from_iter+0x1d3/0x1660
[  417.955397][T15784]  ? __alloc_skb+0x27a/0x7a0
[  417.955421][T15784]  ? __alloc_skb+0x27a/0x7a0
[  417.955445][T15784]  ? __alloc_skb+0x27a/0x7a0
[  417.955468][T15784]  ? __pfx__copy_from_iter+0x10/0x10
[  417.955487][T15784]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  417.955516][T15784]  ? __alloc_skb+0x27a/0x7a0
[  417.955536][T15784]  ? __alloc_skb+0x27a/0x7a0
[  417.955563][T15784]  ? netlink_sendmsg+0x650/0xb40
[  417.955581][T15784]  ? skb_put+0x112/0x210
[  417.955608][T15784]  netlink_sendmsg+0x6c0/0xb40
[  417.955635][T15784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.955661][T15784]  ? apparmor_socket_sendmsg+0x98/0x360
[  417.955685][T15784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  417.955702][T15784]  sock_sendmsg_nosec+0x13a/0x180
[  417.955725][T15784]  sock_write_iter+0x2de/0x3e0
[  417.955746][T15784]  ? __pfx_sock_write_iter+0x10/0x10
[  417.955783][T15784]  do_iter_readv_writev+0x612/0x8c0
[  417.955808][T15784]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  417.955832][T15784]  ? bpf_lsm_file_permission+0x9/0x20
[  417.955857][T15784]  ? security_file_permission+0x75/0x260
[  417.955878][T15784]  ? rw_verify_area+0x203/0x4c0
[  417.955908][T15784]  vfs_writev+0x343/0x990
[  417.955945][T15784]  ? __pfx_vfs_writev+0x10/0x10
[  417.955981][T15784]  ? __fget_files+0x2a/0x420
[  417.956010][T15784]  ? __fget_files+0x3a2/0x420
[  417.956033][T15784]  ? __fget_files+0x2a/0x420
[  417.956066][T15784]  do_writev+0x154/0x2e0
[  417.956090][T15784]  ? __pfx_do_writev+0x10/0x10
[  417.956122][T15784]  do_syscall_64+0x166/0x520
[  417.956146][T15784]  ? trace_irq_disable+0x3b/0x140
[  417.956164][T15784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.956184][T15784]  ? clear_bhb_loop+0x70/0xc0
[  417.956207][T15784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.956226][T15784] RIP: 0033:0x7f50bad9e159
[  417.956243][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.956259][T15784] RSP: 002b:00007f50b8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  417.956279][T15784] RAX: ffffffffffffffda RBX: 00007f50bb025fa0 RCX: 00007f50bad9e159
[  417.956293][T15784] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  417.956304][T15784] RBP: 00007f50b8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  417.956316][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.956327][T15784] R13: 00007f50bb026038 R14: 00007f50bb025fa0 R15: 00007ffe3544bd88
[  417.956358][T15784]  </TASK>
[  418.069916][T15786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.389694][T15790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2624'.
[  419.441831][T15827] vlan3: entered promiscuous mode
[  419.441852][T15827] bridge0: entered promiscuous mode
[  419.450100][T15827] vlan3: entered allmulticast mode
[  419.450120][T15827] bridge0: entered allmulticast mode
[  419.512432][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'.
[  419.512515][T15835] bridge_slave_1: left allmulticast mode
[  419.512877][T15835] bridge_slave_1: left promiscuous mode
[  419.519963][T15835] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.541872][T15836] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2636'.
[  419.635633][T15835] bridge_slave_0: left allmulticast mode
[  419.635975][T15835] bridge_slave_0: left promiscuous mode
[  419.652265][T15835] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.658772][T15839] FAULT_INJECTION: forcing a failure.
[  419.658772][T15839] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.658802][T15839] CPU: 1 UID: 0 PID: 15839 Comm: syz.0.2637 Not tainted syzkaller #0 PREEMPT(full) 
[  419.658822][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.658833][T15839] Call Trace:
[  419.658840][T15839]  <TASK>
[  419.658847][T15839]  dump_stack_lvl+0xe8/0x150
[  419.658878][T15839]  should_fail_ex+0x410/0x560
[  419.658905][T15839]  _copy_from_iter+0x1d3/0x1660
[  419.658926][T15839]  ? __alloc_skb+0x27a/0x7a0
[  419.658950][T15839]  ? __alloc_skb+0x27a/0x7a0
[  419.658974][T15839]  ? __alloc_skb+0x27a/0x7a0
[  419.658995][T15839]  ? __pfx__copy_from_iter+0x10/0x10
[  419.659014][T15839]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  419.659040][T15839]  ? __alloc_skb+0x27a/0x7a0
[  419.659059][T15839]  ? __alloc_skb+0x27a/0x7a0
[  419.659086][T15839]  ? netlink_sendmsg+0x650/0xb40
[  419.659105][T15839]  ? skb_put+0x112/0x210
[  419.659130][T15839]  netlink_sendmsg+0x6c0/0xb40
[  419.659156][T15839]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.659182][T15839]  ? apparmor_socket_sendmsg+0x98/0x360
[  419.659205][T15839]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.659221][T15839]  sock_sendmsg_nosec+0x13a/0x180
[  419.659243][T15839]  sock_write_iter+0x2de/0x3e0
[  419.659263][T15839]  ? __pfx_sock_write_iter+0x10/0x10
[  419.659300][T15839]  do_iter_readv_writev+0x612/0x8c0
[  419.659322][T15839]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  419.659352][T15839]  ? bpf_lsm_file_permission+0x9/0x20
[  419.659376][T15839]  ? security_file_permission+0x75/0x260
[  419.659396][T15839]  ? rw_verify_area+0x203/0x4c0
[  419.659426][T15839]  vfs_writev+0x343/0x990
[  419.659455][T15839]  ? __pfx_vfs_writev+0x10/0x10
[  419.659490][T15839]  ? __fget_files+0x2a/0x420
[  419.659519][T15839]  ? __fget_files+0x3a2/0x420
[  419.659542][T15839]  ? __fget_files+0x2a/0x420
[  419.659573][T15839]  do_writev+0x154/0x2e0
[  419.659596][T15839]  ? __pfx_do_writev+0x10/0x10
[  419.659633][T15839]  do_syscall_64+0x166/0x520
[  419.659655][T15839]  ? trace_irq_disable+0x3b/0x140
[  419.659673][T15839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.659691][T15839]  ? clear_bhb_loop+0x70/0xc0
[  419.659713][T15839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.659731][T15839] RIP: 0033:0x7fea0b39e159
[  419.659748][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.659762][T15839] RSP: 002b:00007fea0c1fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  419.659782][T15839] RAX: ffffffffffffffda RBX: 00007fea0b625fa0 RCX: 00007fea0b39e159
[  419.659795][T15839] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  419.659806][T15839] RBP: 00007fea0c1fe090 R08: 0000000000000000 R09: 0000000000000000
[  419.659817][T15839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.659827][T15839] R13: 00007fea0b626038 R14: 00007fea0b625fa0 R15: 00007fff655752a8
[  419.659857][T15839]  </TASK>
[  420.359247][T15858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2641'.
[  421.068229][T15886] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2650'.
[  421.212715][T15891] nbd: couldn't find a device at index 0
[  421.392637][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'.
[  421.541204][T15915] netlink: NAT attribute has 1 unknown bytes
[  421.541241][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.575759][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'.
[  422.137555][T15924] syzkaller0: entered promiscuous mode
[  422.137579][T15924] syzkaller0: entered allmulticast mode
[  422.154559][ T6862] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.154665][ T6861] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.154700][ T6861] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.154729][ T6861] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.245726][T15929] FAULT_INJECTION: forcing a failure.
[  422.245726][T15929] name failslab, interval 1, probability 0, space 0, times 0
[  422.245776][T15929] CPU: 0 UID: 0 PID: 15929 Comm: syz.1.2664 Not tainted syzkaller #0 PREEMPT(full) 
[  422.245797][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  422.245813][T15929] Call Trace:
[  422.245824][T15929]  <TASK>
[  422.245833][T15929]  dump_stack_lvl+0xe8/0x150
[  422.245864][T15929]  should_fail_ex+0x410/0x560
[  422.245891][T15929]  ? __alloc_skb+0x1db/0x7a0
[  422.245913][T15929]  should_failslab+0xa8/0x100
[  422.245938][T15929]  ? __alloc_skb+0x1db/0x7a0
[  422.245958][T15929]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  422.245987][T15929]  ? __alloc_skb+0x18d/0x7a0
[  422.246009][T15929]  ? __alloc_skb+0x1db/0x7a0
[  422.246038][T15929]  __alloc_skb+0x1db/0x7a0
[  422.246065][T15929]  netlink_dump+0x1e7/0xee0
[  422.246093][T15929]  ? __netlink_lookup+0xc6/0x8b0
[  422.246123][T15929]  ? __pfx_netlink_dump+0x10/0x10
[  422.246167][T15929]  ? netlink_lookup+0x30/0x200
[  422.246193][T15929]  ? netlink_lookup+0x30/0x200
[  422.246226][T15929]  __netlink_dump_start+0x589/0x7b0
[  422.246261][T15929]  rtnetlink_rcv_msg+0xa48/0xc00
[  422.246287][T15929]  ? __pfx_neigh_dump_info+0x10/0x10
[  422.246313][T15929]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  422.246336][T15929]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  422.246358][T15929]  ? ref_tracker_free+0x689/0x830
[  422.246380][T15929]  ? __pfx_neigh_dump_info+0x10/0x10
[  422.246421][T15929]  netlink_rcv_skb+0x226/0x4a0
[  422.246449][T15929]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  422.246475][T15929]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  422.246517][T15929]  ? netlink_deliver_tap+0x2e/0x1b0
[  422.246534][T15929]  ? netlink_deliver_tap+0x2e/0x1b0
[  422.246558][T15929]  netlink_unicast+0x7bd/0x940
[  422.246596][T15929]  netlink_sendmsg+0x813/0xb40
[  422.246624][T15929]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.246651][T15929]  ? apparmor_socket_sendmsg+0x98/0x360
[  422.246674][T15929]  ? __pfx_netlink_sendmsg+0x10/0x10
[  422.246692][T15929]  sock_sendmsg_nosec+0x13a/0x180
[  422.246715][T15929]  sock_write_iter+0x2de/0x3e0
[  422.246739][T15929]  ? __pfx_sock_write_iter+0x10/0x10
[  422.246778][T15929]  do_iter_readv_writev+0x612/0x8c0
[  422.246801][T15929]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  422.246825][T15929]  ? bpf_lsm_file_permission+0x9/0x20
[  422.246850][T15929]  ? security_file_permission+0x75/0x260
[  422.246871][T15929]  ? rw_verify_area+0x203/0x4c0
[  422.246902][T15929]  vfs_writev+0x343/0x990
[  422.246933][T15929]  ? __pfx_vfs_writev+0x10/0x10
[  422.246969][T15929]  ? __fget_files+0x2a/0x420
[  422.246999][T15929]  ? __fget_files+0x3a2/0x420
[  422.247022][T15929]  ? __fget_files+0x2a/0x420
[  422.247056][T15929]  do_writev+0x154/0x2e0
[  422.247080][T15929]  ? __pfx_do_writev+0x10/0x10
[  422.247114][T15929]  do_syscall_64+0x166/0x520
[  422.247138][T15929]  ? trace_irq_disable+0x3b/0x140
[  422.247162][T15929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.247182][T15929]  ? clear_bhb_loop+0x70/0xc0
[  422.247205][T15929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.247224][T15929] RIP: 0033:0x7f50bad9e159
[  422.247241][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.247256][T15929] RSP: 002b:00007f50b8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  422.247277][T15929] RAX: ffffffffffffffda RBX: 00007f50bb025fa0 RCX: 00007f50bad9e159
[  422.247290][T15929] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  422.247302][T15929] RBP: 00007f50b8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  422.247314][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.247325][T15929] R13: 00007f50bb026038 R14: 00007f50bb025fa0 R15: 00007ffe3544bd88
[  422.247356][T15929]  </TASK>
[  422.537874][T15936] x_tables: duplicate entry at hook 3
[  423.115109][T15965] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  423.238793][T15971] nbd: socks must be embedded in a SOCK_ITEM attr
[  423.411458][T15981] netlink: 'syz.0.2679': attribute type 8 has an invalid length.
[  423.411571][T15981] FAULT_INJECTION: forcing a failure.
[  423.411571][T15981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.411596][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.0.2679 Not tainted syzkaller #0 PREEMPT(full) 
[  423.411617][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  423.411629][T15981] Call Trace:
[  423.411637][T15981]  <TASK>
[  423.411645][T15981]  dump_stack_lvl+0xe8/0x150
[  423.411677][T15981]  should_fail_ex+0x410/0x560
[  423.411705][T15981]  _copy_to_user+0x31/0xb0
[  423.411742][T15981]  simple_read_from_buffer+0xe1/0x170
[  423.411773][T15981]  proc_fail_nth_read+0x1bb/0x230
[  423.411792][T15981]  ? common_file_perm+0x20e/0x2b0
[  423.411817][T15981]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  423.411840][T15981]  ? rw_verify_area+0x24a/0x4c0
[  423.411869][T15981]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  423.411890][T15981]  vfs_read+0x213/0xa80
[  423.411922][T15981]  ? __pfx___mutex_lock+0x10/0x10
[  423.411949][T15981]  ? __pfx_vfs_read+0x10/0x10
[  423.411977][T15981]  ? __fget_files+0x2a/0x420
[  423.412007][T15981]  ? __fget_files+0x3a2/0x420
[  423.412030][T15981]  ? __fget_files+0x2a/0x420
[  423.412071][T15981]  ksys_read+0x150/0x270
[  423.412098][T15981]  ? __pfx_ksys_read+0x10/0x10
[  423.412136][T15981]  do_syscall_64+0x166/0x520
[  423.412159][T15981]  ? trace_irq_disable+0x3b/0x140
[  423.412177][T15981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.412196][T15981]  ? clear_bhb_loop+0x70/0xc0
[  423.412218][T15981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.412237][T15981] RIP: 0033:0x7fea0b35e98e
[  423.412255][T15981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  423.412270][T15981] RSP: 002b:00007fea0c1fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  423.412291][T15981] RAX: ffffffffffffffda RBX: 00007fea0c1fe6c0 RCX: 00007fea0b35e98e
[  423.412305][T15981] RDX: 000000000000000f RSI: 00007fea0c1fe0a0 RDI: 0000000000000004
[  423.412316][T15981] RBP: 00007fea0c1fe090 R08: 0000000000000000 R09: 0000000000000000
[  423.412328][T15981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.412339][T15981] R13: 00007fea0b626038 R14: 00007fea0b625fa0 R15: 00007fff655752a8
[  423.412371][T15981]  </TASK>
[  423.678867][T15976] batman_adv: batadv0: Adding interface: syzkaller0
[  423.678884][T15976] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.717281][T15976] batman_adv: batadv0: Interface activated: syzkaller0
[  423.871632][T15989] netlink: 'syz.0.2681': attribute type 1 has an invalid length.
[  423.940109][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'.
[  424.085741][T15989] bond6: entered promiscuous mode
[  424.086259][T15989] 8021q: adding VLAN 0 to HW filter on device bond6
[  424.145340][T16001] 
: renamed from bond0 (while UP)
[  424.158449][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'.
[  424.158482][T16001] netlink: 'syz.4.2684': attribute type 7 has an invalid length.
[  424.158493][T16001] netlink: 'syz.4.2684': attribute type 8 has an invalid length.
[  424.158503][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'.
[  424.164646][T16003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'.
[  424.164676][T16003] netlink: 'syz.4.2684': attribute type 7 has an invalid length.
[  424.164688][T16003] netlink: 'syz.4.2684': attribute type 8 has an invalid length.
[  424.164698][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'.
[  424.482583][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'.
[  424.686214][T16026] netlink: 'syz.2.2691': attribute type 1 has an invalid length.
[  424.768666][T16030] netlink: 'syz.3.2693': attribute type 1 has an invalid length.
[  424.768705][T16030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.997818][T16040] ip6gre1: entered promiscuous mode
[  424.997840][T16040] ip6gre1: entered allmulticast mode
[  425.000988][  T189] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.001614][  T189] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.002868][T16042] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.004689][T16040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.024226][ T5712] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.305741][ T5712] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.426016][ T5712] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  425.701980][T16065] netlink: 'syz.2.2702': attribute type 1 has an invalid length.
[  425.702003][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'.
[  426.066931][T16075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2704'.
[  426.138106][T16083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2707'.
[  426.689010][T16114] netlink: 'syz.1.2713': attribute type 64 has an invalid length.
[  426.689033][T16114] __nla_validate_parse: 1 callbacks suppressed
[  426.689043][T16114] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2713'.
[  426.722395][T16115] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2713'.
[  427.107645][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'.
[  427.107677][T16123] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  427.132844][T16124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2717'.
[  427.149718][T16123] openvswitch: netlink: Actions may not be safe on all matching packets
[  427.429459][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2719'.
[  427.929755][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'.
[  428.113153][T16169] xt_l2tp: wrong L2TP version: 255
[  428.501660][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'.
[  429.093428][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.354560][T16214] syzkaller0: entered promiscuous mode
[  429.354591][T16214] syzkaller0: entered allmulticast mode
[  429.431719][T16214] validate_nla: 1 callbacks suppressed
[  429.431738][T16214] netlink: 'syz.1.2741': attribute type 8 has an invalid length.
[  429.431750][T16214] netlink: 12671 bytes leftover after parsing attributes in process `syz.1.2741'.
[  430.078667][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'.
[  430.282778][T16255] netlink: 'syz.2.2755': attribute type 13 has an invalid length.
[  430.318065][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'.
[  430.452779][T16262] syzkaller0: left promiscuous mode
[  431.156397][T16288] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20001
[  431.457611][T16306] batadv_slave_0: entered promiscuous mode
[  431.677504][T16304] batadv_slave_0: left promiscuous mode
[  431.854046][T16314] __nla_validate_parse: 1 callbacks suppressed
[  431.854066][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'.
[  431.896057][T16314] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2776'.
[  431.896242][T16314] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2776'.
[  431.896256][T16314] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2776'.
[  431.962490][T16316] netlink: 'syz.2.2777': attribute type 83 has an invalid length.
[  432.047957][T16320] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2778'.
[  432.388055][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2781'.
[  432.924682][T16362] batadv_slave_1: entered promiscuous mode
[  433.456961][T16385] geneve2: entered promiscuous mode
[  433.457147][T16385] geneve2: entered allmulticast mode
[  433.475569][ T6862] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  433.475614][ T6862] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  433.475645][ T6862] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  433.475675][ T6862] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  433.566955][T16392] ªªªªª»: renamed from dummy0 (while UP)
[  433.804819][T16402] netlink: 'syz.2.2806': attribute type 1 has an invalid length.
[  433.828667][T16400] openvswitch: netlink: Flow key attr not present in new flow.
[  434.042006][T16402] 8021q: adding VLAN 0 to HW filter on device bond17
[  434.094264][T16413] netlink: 'syz.0.2807': attribute type 1 has an invalid length.
[  434.112399][T16419] FAULT_INJECTION: forcing a failure.
[  434.112399][T16419] name failslab, interval 1, probability 0, space 0, times 0
[  434.112430][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.1.2809 Not tainted syzkaller #0 PREEMPT(full) 
[  434.112451][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  434.112462][T16419] Call Trace:
[  434.112469][T16419]  <TASK>
[  434.112477][T16419]  dump_stack_lvl+0xe8/0x150
[  434.112509][T16419]  should_fail_ex+0x410/0x560
[  434.112537][T16419]  should_failslab+0xa8/0x100
[  434.112563][T16419]  __kmalloc_noprof+0xfe/0x720
[  434.112583][T16419]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  434.112608][T16419]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  434.112641][T16419]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  434.112674][T16419]  genl_family_rcv_msg_doit+0xda/0x340
[  434.112703][T16419]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  434.112738][T16419]  ? apparmor_capable+0x126/0x170
[  434.112768][T16419]  ? bpf_lsm_capable+0x9/0x20
[  434.112785][T16419]  ? security_capable+0x7e/0x2c0
[  434.112814][T16419]  genl_rcv_msg+0x614/0x7a0
[  434.112843][T16419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  434.112864][T16419]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  434.112889][T16419]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  434.112910][T16419]  ? __pfx_nl80211_post_doit+0x10/0x10
[  434.112951][T16419]  netlink_rcv_skb+0x226/0x4a0
[  434.112981][T16419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  434.113006][T16419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  434.113050][T16419]  ? down_read+0x2be/0x330
[  434.113081][T16419]  genl_rcv+0x28/0x40
[  434.113101][T16419]  netlink_unicast+0x7bd/0x940
[  434.113139][T16419]  netlink_sendmsg+0x813/0xb40
[  434.113166][T16419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.113196][T16419]  ? apparmor_socket_sendmsg+0x98/0x360
[  434.113219][T16419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.113235][T16419]  sock_sendmsg_nosec+0x13a/0x180
[  434.113260][T16419]  ____sys_sendmsg+0x54e/0x850
[  434.113291][T16419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.113326][T16419]  ? import_iovec+0x73/0xa0
[  434.113354][T16419]  ___sys_sendmsg+0x2a5/0x360
[  434.113378][T16419]  ? __lock_acquire+0x747/0x2de0
[  434.113403][T16419]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.113466][T16419]  ? __fget_files+0x2a/0x420
[  434.113491][T16419]  ? __fget_files+0x3a2/0x420
[  434.113527][T16419]  __x64_sys_sendmsg+0x1b1/0x290
[  434.113555][T16419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.113603][T16419]  do_syscall_64+0x166/0x520
[  434.113627][T16419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.113646][T16419]  ? clear_bhb_loop+0x70/0xc0
[  434.113670][T16419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.113687][T16419] RIP: 0033:0x7f50bad9e159
[  434.113706][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.113722][T16419] RSP: 002b:00007f50b8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.113742][T16419] RAX: ffffffffffffffda RBX: 00007f50bb025fa0 RCX: 00007f50bad9e159
[  434.113756][T16419] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006
[  434.113768][T16419] RBP: 00007f50b8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  434.113779][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.113790][T16419] R13: 00007f50bb026038 R14: 00007f50bb025fa0 R15: 00007ffe3544bd88
[  434.113822][T16419]  </TASK>
[  434.719384][T16414] netlink: 'syz.0.2807': attribute type 3 has an invalid length.
[  434.968041][T16438] netlink: 'syz.0.2814': attribute type 12 has an invalid length.
[  435.048418][T16442] syzkaller1: entered promiscuous mode
[  435.048439][T16442] syzkaller1: entered allmulticast mode
[  435.098137][T16444] netlink: 'syz.1.2815': attribute type 1 has an invalid length.
[  435.350786][T16444] 8021q: adding VLAN 0 to HW filter on device bond5
[  435.454791][T16456] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2819'.
[  435.512783][T16459] FAULT_INJECTION: forcing a failure.
[  435.512783][T16459] name failslab, interval 1, probability 0, space 0, times 0
[  435.512814][T16459] CPU: 1 UID: 0 PID: 16459 Comm: syz.3.2821 Not tainted syzkaller #0 PREEMPT(full) 
[  435.512835][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  435.512846][T16459] Call Trace:
[  435.512852][T16459]  <TASK>
[  435.512860][T16459]  dump_stack_lvl+0xe8/0x150
[  435.512891][T16459]  should_fail_ex+0x410/0x560
[  435.512915][T16459]  ? __alloc_skb+0x1db/0x7a0
[  435.512935][T16459]  should_failslab+0xa8/0x100
[  435.512958][T16459]  ? __alloc_skb+0x1db/0x7a0
[  435.512976][T16459]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  435.513009][T16459]  ? __alloc_skb+0x18d/0x7a0
[  435.513031][T16459]  ? __alloc_skb+0x1db/0x7a0
[  435.513059][T16459]  __alloc_skb+0x1db/0x7a0
[  435.513085][T16459]  netlink_ack+0x136/0xb30
[  435.513147][T16459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  435.513170][T16459]  ? __pfx_nl80211_post_doit+0x10/0x10
[  435.513206][T16459]  netlink_rcv_skb+0x2a4/0x4a0
[  435.513234][T16459]  ? __pfx_genl_rcv_msg+0x10/0x10
[  435.513256][T16459]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  435.513296][T16459]  ? down_read+0x2be/0x330
[  435.513324][T16459]  genl_rcv+0x28/0x40
[  435.513342][T16459]  netlink_unicast+0x7bd/0x940
[  435.513378][T16459]  netlink_sendmsg+0x813/0xb40
[  435.513406][T16459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  435.513433][T16459]  ? apparmor_socket_sendmsg+0x98/0x360
[  435.513457][T16459]  ? __pfx_netlink_sendmsg+0x10/0x10
[  435.513474][T16459]  sock_sendmsg_nosec+0x13a/0x180
[  435.513497][T16459]  ____sys_sendmsg+0x54e/0x850
[  435.513528][T16459]  ? __pfx_____sys_sendmsg+0x10/0x10
[  435.513562][T16459]  ? import_iovec+0x73/0xa0
[  435.513589][T16459]  ___sys_sendmsg+0x2a5/0x360
[  435.513612][T16459]  ? __lock_acquire+0x747/0x2de0
[  435.513637][T16459]  ? __pfx____sys_sendmsg+0x10/0x10
[  435.513699][T16459]  ? __fget_files+0x2a/0x420
[  435.513723][T16459]  ? __fget_files+0x3a2/0x420
[  435.513758][T16459]  __x64_sys_sendmsg+0x1b1/0x290
[  435.513786][T16459]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  435.513833][T16459]  do_syscall_64+0x166/0x520
[  435.513856][T16459]  ? trace_irq_disable+0x3b/0x140
[  435.513874][T16459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.513894][T16459]  ? clear_bhb_loop+0x70/0xc0
[  435.513917][T16459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.513936][T16459] RIP: 0033:0x7fe0d819e159
[  435.513953][T16459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.513969][T16459] RSP: 002b:00007fe0d9107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.513989][T16459] RAX: ffffffffffffffda RBX: 00007fe0d8425fa0 RCX: 00007fe0d819e159
[  435.514003][T16459] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006
[  435.514015][T16459] RBP: 00007fe0d9107090 R08: 0000000000000000 R09: 0000000000000000
[  435.514026][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.514037][T16459] R13: 00007fe0d8426038 R14: 00007fe0d8425fa0 R15: 00007fff88abfb98
[  435.514069][T16459]  </TASK>
[  435.646614][T16461] batman_adv: batadv0: Adding interface: gretap1
[  435.646638][T16461] batman_adv: batadv0: Interface activated: gretap1
[  436.056850][T16469] netlink: 'syz.3.2825': attribute type 4 has an invalid length.
[  436.056873][T16469] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2825'.
[  436.442648][T16495] netlink: 'syz.4.2829': attribute type 8 has an invalid length.
[  437.005171][T16519] bond10: entered promiscuous mode
[  437.005520][T16519] bond10: entered allmulticast mode
[  437.007800][T16519] 8021q: adding VLAN 0 to HW filter on device bond10
[  437.117230][T16528] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  437.567359][T16542] netlink: 'syz.0.2845': attribute type 8 has an invalid length.
[  437.586313][T16544] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2843'.
[  438.133587][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  438.364772][T16584] netlink: 'syz.1.2854': attribute type 9 has an invalid length.
[  439.331501][T16621] netlink: 'syz.0.2862': attribute type 11 has an invalid length.
[  439.517905][T16629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2864'.
[  439.522177][T16631] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2864'.
[  439.989099][T16656] netlink: 'syz.0.2871': attribute type 8 has an invalid length.
[  440.031255][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2869'.
[  440.061617][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  440.062886][ T1308] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  440.443342][T16674] raw_sendmsg: syz.4.2877 forgot to set AF_INET. Fix it!
[  440.547548][T16678] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2878'.
[  440.856283][T16693] netlink: 'syz.3.2883': attribute type 8 has an invalid length.
[  440.959528][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'.
[  441.080216][T16700] netlink: 'syz.4.2885': attribute type 8 has an invalid length.
[  441.737000][T16735] netlink: 'syz.3.2896': attribute type 10 has an invalid length.
[  441.737587][T16736] netlink: 'syz.3.2896': attribute type 10 has an invalid length.
[  441.743089][T16735] bridge0: port 4(syz_tun) entered disabled state
[  441.744039][T16735] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.744281][T16735] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.776604][T16735] bridge0: port 4(syz_tun) entered blocking state
[  441.776727][T16735] bridge0: port 4(syz_tun) entered forwarding state
[  441.777008][T16735] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.777130][T16735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.777381][T16735] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.777491][T16735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.791766][T16735] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  441.804998][T16736] bridge0: port 4(syz_tun) entered disabled state
[  441.805190][T16736] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.805351][T16736] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.181325][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2898'.
[  442.863073][T16781] Cannot find set identified by id 65534 to match
[  442.970465][T16781] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 !
[  443.014951][T16794] netlink: zone id is out of range
[  443.014967][T16794] netlink: zone id is out of range
[  443.014973][T16794] netlink: zone id is out of range
[  443.014981][T16794] netlink: zone id is out of range
[  443.014987][T16794] netlink: zone id is out of range
[  443.014995][T16794] netlink: zone id is out of range
[  443.015002][T16794] netlink: zone id is out of range
[  443.015009][T16794] netlink: zone id is out of range
[  443.015016][T16794] netlink: zone id is out of range
[  443.171608][T16794] syzkaller0: entered promiscuous mode
[  443.171631][T16794] syzkaller0: entered allmulticast mode
[  443.245343][T16794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.466064][T16793] tipc: Resetting bearer <eth:syzkaller0>
[  443.537242][T16793] tipc: Disabling bearer <eth:syzkaller0>
[  443.586251][T16804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2910'.
[  443.629672][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'.
[  443.629704][T16816] netlink: 'syz.3.2913': attribute type 10 has an invalid length.
[  443.629717][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2913'.
[  443.629982][T16804] syzkaller1: entered promiscuous mode
[  443.630134][T16804] syzkaller1: entered allmulticast mode
[  443.687163][T16816] geneve3: entered promiscuous mode
[  443.687187][T16816] geneve3: entered allmulticast mode
[  444.098838][T16836] xt_CT: You must specify a L4 protocol and not use inversions on it
[  444.549606][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  444.561543][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  444.562536][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  444.581764][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  444.582788][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  444.621855][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  444.622574][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  444.623062][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  444.656698][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  444.657973][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  444.673786][T16848] netlink: 'syz.4.2921': attribute type 1 has an invalid length.
[  444.721813][T16853] IPv6: sit4: Disabled Multicast RS
[  445.156194][T16863] netlink: 'syz.0.2924': attribute type 1 has an invalid length.
[  445.318103][T16871] net_ratelimit: 46 callbacks suppressed
[  445.318124][T16871] openvswitch: netlink: Missing key (keys=50, expected=80)
[  445.372915][T16874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2927'.
[  445.488458][ T5622] syz_tun (unregistering): left allmulticast mode
[  445.488484][ T5622] syz_tun (unregistering): left promiscuous mode
[  445.488599][ T5622] bridge0: port 4(syz_tun) entered disabled state
[  446.280354][T16842] lo speed is unknown, defaulting to 1000
[  446.349876][T16907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2936'.
[  446.379485][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2936'.
[  446.382448][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'.
[  446.443669][T16909] netlink: 'syz.2.2937': attribute type 11 has an invalid length.
[  446.693404][   T52] Bluetooth: hci5: command tx timeout
[  446.766739][T16917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2938'.
[  446.766765][T16917] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2938'.
[  446.766779][T16917] netlink: 'syz.2.2938': attribute type 5 has an invalid length.
[  446.766791][T16917] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2938'.
[  446.800354][   T38] tipc: Subscription rejected, illegal request
[  447.410451][T16930] netlink: 'syz.4.2942': attribute type 1 has an invalid length.
[  447.517675][T16930] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.657598][T16946] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  447.696050][T16842] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.696467][T16842] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.696627][T16842] bridge_slave_0: entered allmulticast mode
[  447.698975][T16842] bridge_slave_0: entered promiscuous mode
[  447.702362][T16842] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.702528][T16842] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.702658][T16842] bridge_slave_1: entered allmulticast mode
[  447.706040][T16842] bridge_slave_1: entered promiscuous mode
[  447.886372][T16842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.918838][T16842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.210006][T16842] team0: Port device team_slave_0 added
[  448.227734][T16842] team0: Port device team_slave_1 added
[  448.387089][T16842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.387106][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.387127][T16842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.389587][T16969] netlink: 'syz.1.2952': attribute type 2 has an invalid length.
[  448.390363][T16971] netlink: 'syz.1.2952': attribute type 2 has an invalid length.
[  448.399244][T16842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.399259][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.399283][T16842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.669625][T16842] hsr_slave_0: entered promiscuous mode
[  448.679960][T16842] hsr_slave_1: entered promiscuous mode
[  448.681514][T16842] debugfs: 'hsr0' already exists in 'hsr'
[  448.681535][T16842] Cannot create hsr debugfs directory
[  448.773622][   T52] Bluetooth: hci5: command tx timeout
[  449.291048][T16999] netlink: 'syz.0.2960': attribute type 8 has an invalid length.
[  449.400519][T16996] __nla_validate_parse: 5 callbacks suppressed
[  449.400539][T16996] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2958'.
[  449.749246][T17010] x_tables: duplicate underflow at hook 1
[  450.265972][T16842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.266008][T16842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.504299][T17035] ›Â: renamed from veth0_to_batadv (while UP)
[  450.522814][T17039] FAULT_INJECTION: forcing a failure.
[  450.522814][T17039] name failslab, interval 1, probability 0, space 0, times 0
[  450.522848][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.4.2968 Not tainted syzkaller #0 PREEMPT(full) 
[  450.522869][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.522881][T17039] Call Trace:
[  450.522888][T17039]  <TASK>
[  450.522897][T17039]  dump_stack_lvl+0xe8/0x150
[  450.522930][T17039]  should_fail_ex+0x410/0x560
[  450.522958][T17039]  should_failslab+0xa8/0x100
[  450.522985][T17039]  __kmalloc_cache_noprof+0xa3/0x600
[  450.523010][T17039]  ? tipc_crypto_key_init+0x210/0x820
[  450.523036][T17039]  ? tipc_crypto_key_init+0x210/0x820
[  450.523063][T17039]  ? crypto_aead_setkey+0x160/0x220
[  450.523093][T17039]  tipc_crypto_key_init+0x210/0x820
[  450.523137][T17039]  tipc_nl_node_set_key+0x76a/0xa20
[  450.523167][T17039]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  450.523196][T17039]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  450.523220][T17039]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  450.523252][T17039]  genl_family_rcv_msg_doit+0x233/0x340
[  450.523283][T17039]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  450.523320][T17039]  ? bpf_lsm_capable+0x9/0x20
[  450.523337][T17039]  ? security_capable+0x7e/0x2c0
[  450.523374][T17039]  genl_rcv_msg+0x614/0x7a0
[  450.523404][T17039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.523427][T17039]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  450.523467][T17039]  netlink_rcv_skb+0x226/0x4a0
[  450.523496][T17039]  ? __pfx_genl_rcv_msg+0x10/0x10
[  450.523521][T17039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  450.523566][T17039]  ? down_read+0x2be/0x330
[  450.523596][T17039]  genl_rcv+0x28/0x40
[  450.523616][T17039]  netlink_unicast+0x7bd/0x940
[  450.523655][T17039]  netlink_sendmsg+0x813/0xb40
[  450.523684][T17039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.523711][T17039]  ? apparmor_socket_sendmsg+0x98/0x360
[  450.523735][T17039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.523753][T17039]  sock_sendmsg_nosec+0x13a/0x180
[  450.523777][T17039]  ____sys_sendmsg+0x54e/0x850
[  450.523808][T17039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.523844][T17039]  ? import_iovec+0x73/0xa0
[  450.523872][T17039]  ___sys_sendmsg+0x2a5/0x360
[  450.523896][T17039]  ? __lock_acquire+0x747/0x2de0
[  450.523921][T17039]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.523984][T17039]  ? __fget_files+0x2a/0x420
[  450.524009][T17039]  ? __fget_files+0x3a2/0x420
[  450.524046][T17039]  __x64_sys_sendmsg+0x1b1/0x290
[  450.524075][T17039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.524122][T17039]  do_syscall_64+0x166/0x520
[  450.524144][T17039]  ? trace_irq_disable+0x3b/0x140
[  450.524162][T17039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.524182][T17039]  ? clear_bhb_loop+0x70/0xc0
[  450.524205][T17039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.524224][T17039] RIP: 0033:0x7f8def99e159
[  450.524242][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.524257][T17039] RSP: 002b:00007f8df0945028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.524277][T17039] RAX: ffffffffffffffda RBX: 00007f8defc25fa0 RCX: 00007f8def99e159
[  450.524291][T17039] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  450.524303][T17039] RBP: 00007f8df0945090 R08: 0000000000000000 R09: 0000000000000000
[  450.524315][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.524326][T17039] R13: 00007f8defc26038 R14: 00007f8defc25fa0 R15: 00007ffefc7fa7d8
[  450.524364][T17039]  </TASK>
[  450.855224][   T52] Bluetooth: hci5: command tx timeout
[  450.940586][T16842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  450.940621][T16842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.046980][T17027] lo speed is unknown, defaulting to 1000
[  451.434715][T16842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.434751][T16842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.447598][T17064] netlink: 'syz.2.2973': attribute type 8 has an invalid length.
[  451.774405][T17067] bond5 (unregistering): Released all slaves
[  451.870305][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2974'.
[  451.879810][T17071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2974'.
[  451.976647][T17074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.051430][T17074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.162078][T17075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.262179][T17080] xt_ecn: cannot match TCP bits for non-tcp packets
[  452.533748][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2977'.
[  452.533769][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2977'.
[  452.760930][T17090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2980'.
[  452.936247][   T52] Bluetooth: hci5: command tx timeout
[  452.988463][T17098] netlink: 'syz.2.2983': attribute type 8 has an invalid length.
[  453.233991][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2984'.
[  453.610784][T17111] dvmrp0: left allmulticast mode
[  454.065637][T16842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  454.093685][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.096096][T16842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  454.123242][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.126919][T16842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  454.159973][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.171660][T16842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  454.198175][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.605499][T16842] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.730295][T16842] 8021q: adding VLAN 0 to HW filter on device team0
[  454.794558][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.794667][ T6861] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.817833][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.817939][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.033106][T17161] netlink: 'syz.1.2993': attribute type 8 has an invalid length.
[  455.168903][T16842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.413455][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  455.850149][T17194] syzkaller0: entered promiscuous mode
[  455.850171][T17194] syzkaller0: entered allmulticast mode
[  456.669489][T16842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.931640][T16842] veth0_vlan: entered promiscuous mode
[  456.952452][T17233] syzkaller0: left allmulticast mode
[  457.009616][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'.
[  457.009655][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'.
[  457.056709][T16842] veth1_vlan: entered promiscuous mode
[  457.220902][T16842] veth0_macvtap: entered promiscuous mode
[  457.288761][T16842] veth1_macvtap: entered promiscuous mode
[  457.362550][T16842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.433022][T16842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.535503][T17250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.561011][T17247] netlink: 'syz.1.3010': attribute type 1 has an invalid length.
[  457.620616][T17256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.789582][T17247] 8021q: adding VLAN 0 to HW filter on device bond6
[  457.877891][ T6861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.877940][ T6861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.877975][ T6861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.878009][ T6861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.980865][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3012'.
[  458.057379][T17247] macvlan3: entered promiscuous mode
[  458.057403][T17247] macvlan3: entered allmulticast mode
[  458.410075][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.410096][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.608143][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.608165][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.656949][T17281] ip_tables: iptables: counters copy to user failed while replacing table
[  459.170685][T17293] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  459.215648][T17295] netlink: 'syz.3.3019': attribute type 8 has an invalid length.
[  459.445805][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  459.450310][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  459.453131][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  459.487363][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  459.491415][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  459.700791][T17315] syzkaller0: entered promiscuous mode
[  459.700813][T17315] syzkaller0: entered allmulticast mode
[  460.393267][T17329] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3028'.
[  460.584873][T17339] netlink: 'syz.0.3032': attribute type 8 has an invalid length.
[  460.622300][T17341] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3033'.
[  460.721916][   T38] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  460.723052][   T38] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.225406][   T38] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.225441][   T38] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.418686][   T38] .`: (slave netdevsim1): Releasing backup interface
[  461.431920][   T38] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  461.511527][   T38] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.511562][   T38] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.576107][   T52] Bluetooth: hci2: command tx timeout
[  461.670092][T17300] lo speed is unknown, defaulting to 1000
[  461.827745][   T38] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.827781][   T38] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.955109][T17380] veth0: mtu less than device minimum
[  462.257041][T17388] netlink: 'syz.3.3043': attribute type 8 has an invalid length.
[  462.672375][T17382] Cannot find del_set index 0 as target
[  462.864529][T17406] xt_TCPMSS: Only works on TCP SYN packets
[  462.920127][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3044'.
[  462.920163][T17396] netlink: 'syz.3.3044': attribute type 7 has an invalid length.
[  462.920175][T17396] netlink: 'syz.3.3044': attribute type 8 has an invalid length.
[  462.920186][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'.
[  463.092675][   T38] bridge_slave_1: left allmulticast mode
[  463.092772][   T38] bridge_slave_1: left promiscuous mode
[  463.095620][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.168263][   T38] bridge_slave_0: left allmulticast mode
[  463.168288][   T38] bridge_slave_0: left promiscuous mode
[  463.168506][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.451375][   T38] pimreg3: left allmulticast mode
[  463.486146][   T38] batman_adv: batadv0: Interface deactivated: gretap1
[  463.545451][T17421] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3047'.
[  463.653953][   T52] Bluetooth: hci2: command tx timeout
[  463.743909][T17433] x_tables: duplicate underflow at hook 2
[  463.965862][T17441] netlink: 'syz.1.3048': attribute type 58 has an invalid length.
[  463.965884][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'.
[  464.677874][   T38] bond16 (unregistering): (slave erspan2): Releasing active interface
[  464.677946][   T38] erspan2 (unregistering): left promiscuous mode
[  464.786356][   T38] batman_adv: batadv0: Removing interface: gretap1
[  464.885348][   T38] .` (unregistering): (slave bridge0): Releasing backup interface
[  464.885940][   T38] bridge0 (unregistering): left promiscuous mode
[  464.930928][   T38] bond4 (unregistering): (slave bridge2): Releasing active interface
[  465.038080][   T38] .` (unregistering): left promiscuous mode
[  465.038104][   T38] bond_slave_0: left promiscuous mode
[  465.038260][   T38] bond_slave_1: left promiscuous mode
[  465.041077][   T38] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.075418][   T38] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.077190][   T38] .` (unregistering): Released all slaves
[  465.109354][   T38] bond1 (unregistering): Released all slaves
[  465.136167][   T38] bond2 (unregistering): Released all slaves
[  465.158334][   T38] bond3 (unregistering): (slave veth5): Releasing active interface
[  465.186458][   T38] bond3 (unregistering): (slave veth7): Releasing active interface
[  465.194829][   T38] bond3 (unregistering): Released all slaves
[  465.287486][   T38] bond4 (unregistering): Released all slaves
[  465.312567][   T38] bond5 (unregistering): Released all slaves
[  465.337265][   T38] bond6 (unregistering): Released all slaves
[  465.365294][   T38] bond7 (unregistering): (slave veth11): Releasing backup interface
[  465.367281][   T38] bond7 (unregistering): Released all slaves
[  465.406034][   T38] bond8 (unregistering): Released all slaves
[  465.430832][   T38] bond9 (unregistering): (slave wireguard0): Releasing backup interface
[  465.430857][   T38] wireguard0: left promiscuous mode
[  465.432871][   T38] bond9 (unregistering): Released all slaves
[  465.476348][   T38] bond10 (unregistering): Released all slaves
[  465.500678][   T38] bond11 (unregistering): (slave wireguard1): Releasing backup interface
[  465.500706][   T38] wireguard1: left promiscuous mode
[  465.502723][   T38] bond11 (unregistering): Released all slaves
[  465.546965][   T38] bond12 (unregistering): Released all slaves
[  465.568588][   T38] bond13 (unregistering): Released all slaves
[  465.598926][   T38] bond0 (unregistering): Released all slaves
[  465.622174][   T38] bond14 (unregistering): Released all slaves
[  465.649857][   T38] bond15 (unregistering): Released all slaves
[  465.678942][   T38] bond16 (unregistering): Released all slaves
[  465.704239][   T38] bond17 (unregistering): Released all slaves
[  465.734567][   T52] Bluetooth: hci2: command tx timeout
[  465.734724][   T38] bond18 (unregistering): Released all slaves
[  465.847885][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  466.083389][T17464] netlink: 'syz.4.3053': attribute type 8 has an invalid length.
[  466.372348][   T38] ovs-dp0: left promiscuous mode
[  466.582917][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'.
[  466.712148][   T38] tipc: Disabling bearer <udp:syz2>
[  466.712745][   T38] tipc: Left network mode
[  466.906831][   T38] IPVS: stopping master sync thread 6144 ...
[  467.386532][T17300] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.386646][T17300] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.387652][T17300] bridge_slave_0: entered allmulticast mode
[  467.389451][T17300] bridge_slave_0: entered promiscuous mode
[  467.428515][T17300] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.428648][T17300] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.428781][T17300] bridge_slave_1: entered allmulticast mode
[  467.430920][T17300] bridge_slave_1: entered promiscuous mode
[  467.491400][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.515434][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.594460][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'.
[  467.638844][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'.
[  467.638869][T17520] nbd: couldn't find a device at index -551983053
[  467.813706][   T52] Bluetooth: hci2: command tx timeout
[  467.845907][T17300] team0: Port device team_slave_0 added
[  468.044988][T17300] team0: Port device team_slave_1 added
[  468.352848][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.352867][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.352889][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.424550][ T6868] bond0: (slave bridge0): link status definitely down, disabling slave
[  468.440112][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.440129][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.440179][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.859434][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[  468.992111][T17300] hsr_slave_0: entered promiscuous mode
[  469.005559][T17300] hsr_slave_1: entered promiscuous mode
[  469.006287][T17300] debugfs: 'hsr0' already exists in 'hsr'
[  469.006305][T17300] Cannot create hsr debugfs directory
[  469.207893][T17547] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  469.557440][T17570] Bluetooth: hci0: unsupported parameter 5135
[  469.557461][T17570] Bluetooth: hci0: unsupported parameter 8192
[  469.557473][T17570] Bluetooth: hci0: unsupported parameter 5135
[  469.557484][T17570] Bluetooth: hci0: unsupported parameter 8192
[  469.630164][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'.
[  469.691106][T17578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3077'.
[  470.275525][T17597] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3082'.
[  470.275552][T17597] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3082'.
[  470.531080][T17599] netlink: 'syz.3.3085': attribute type 102 has an invalid length.
[  470.531101][T17599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3085'.
[  470.607326][T17617] macvlan0: entered promiscuous mode
[  471.126630][T17635] netlink: 'syz.4.3094': attribute type 3 has an invalid length.
[  471.283134][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3094'.
[  471.283300][T17635] netlink: 'syz.4.3094': attribute type 7 has an invalid length.
[  471.283315][T17635] netlink: 'syz.4.3094': attribute type 8 has an invalid length.
[  471.283326][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'.
[  471.316347][   T38] batadv0: left promiscuous mode
[  471.392587][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.392784][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.459351][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.459545][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.538349][   T38] veth0_vlan: left promiscuous mode
[  471.602307][T17648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3097'.
[  472.237323][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'.
[  472.237355][T17662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3096'.
[  472.551530][T17635] veth0: entered promiscuous mode
[  472.552890][T17635] veth0: left promiscuous mode
[  473.319693][T17682] netlink: 'syz.0.3100': attribute type 1 has an invalid length.
[  473.355280][T17685] netlink: 'syz.0.3100': attribute type 10 has an invalid length.
[  473.602369][T17682] bond7: option mode: invalid value (11)
[  473.632234][T17682] bond7 (unregistering): Released all slaves
[  473.789894][T17699] netlink: 'syz.3.3105': attribute type 2 has an invalid length.
[  473.837093][T17700] Bluetooth: hci0: unsupported parameter 5135
[  473.837115][T17700] Bluetooth: hci0: unsupported parameter 8192
[  473.837127][T17700] Bluetooth: hci0: unsupported parameter 5135
[  473.837138][T17700] Bluetooth: hci0: unsupported parameter 8192
[  474.109199][T17300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  474.188883][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  474.189759][T17300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  474.229795][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.259672][T17300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  474.283432][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  474.308409][T17300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  474.336082][T17716] netlink: 'syz.0.3108': attribute type 12 has an invalid length.
[  474.338901][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  474.743647][   T38] IPVS: stop unused estimator thread 0...
[  474.808200][T17737] netlink: 'syz.3.3114': attribute type 33 has an invalid length.
[  474.842291][T17737] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  474.889361][T17737] bond1 (unregistering): Released all slaves
[  474.897989][T17729] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  475.140310][T17300] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.207222][T17300] 8021q: adding VLAN 0 to HW filter on device team0
[  475.223081][T17746] __nla_validate_parse: 4 callbacks suppressed
[  475.223230][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3115'.
[  475.250744][T17750] netlink: 'syz.3.3117': attribute type 3 has an invalid length.
[  475.250766][T17750] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3117'.
[  475.405488][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.405589][ T6868] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.412677][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3116'.
[  475.528649][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.528756][ T6861] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.552812][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'.
[  475.913013][T17770] netlink: 'syz.4.3123': attribute type 1 has an invalid length.
[  476.132188][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3123'.
[  476.460135][T17770] bond5: (slave bridge6): making interface the new active one
[  476.463631][T17770] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  477.611117][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.652955][T17843] netlink: 'syz.1.3139': attribute type 21 has an invalid length.
[  477.652978][T17843] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3139'.
[  477.967882][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'.
[  477.967904][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'.
[  478.044207][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3140'.
[  478.611469][T17300] veth0_vlan: entered promiscuous mode
[  479.011392][T17300] veth1_vlan: entered promiscuous mode
[  479.104950][T17300] veth0_macvtap: entered promiscuous mode
[  479.236461][T17300] veth1_macvtap: entered promiscuous mode
[  479.348290][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.406634][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.525521][T17900] ip6t_srh: unknown srh match flags  4000
[  479.603922][T17896] veth7: entered promiscuous mode
[  479.603944][T17896] veth7: entered allmulticast mode
[  479.704684][ T6873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.704738][ T6873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.704773][ T6873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.704807][ T6873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.755333][T17911] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3150'.
[  480.045870][T17897] veth9: entered promiscuous mode
[  480.045891][T17897] veth9: entered allmulticast mode
[  480.495652][ T6861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.495675][ T6861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.702504][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.702526][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.832194][T17941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3157'.
[  480.832221][T17941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3157'.
[  480.832235][T17941] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3157'.
[  481.007657][T17947] netlink: 'syz.2.3017': attribute type 8 has an invalid length.
[  481.117699][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'.
[  481.896348][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  481.900629][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  481.905708][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  481.927105][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  481.932448][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  482.319146][T18003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3170'.
[  482.510535][T18001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.635234][T18007] netlink: 'syz.2.3172': attribute type 1 has an invalid length.
[  482.635256][T18007] netlink: 'syz.2.3172': attribute type 3 has an invalid length.
[  482.635268][T18007] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3172'.
[  482.758705][T18011] netlink: 'syz.0.3173': attribute type 8 has an invalid length.
[  482.761617][T18014] netlink: 'syz.0.3173': attribute type 8 has an invalid length.
[  482.928066][ T5619] bond4: (slave syz_tun): Releasing backup interface
[  483.928401][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  483.974548][ T5624] Bluetooth: hci1: command tx timeout
[  483.995359][T18050] x_tables: duplicate entry at hook 1
[  484.041954][T17984] lo speed is unknown, defaulting to 1000
[  484.436137][T18058] netlink: 'syz.3.3187': attribute type 9 has an invalid length.
[  484.880196][T18072] v: renamed from veth0_vlan (while UP)
[  484.997911][T18079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3195'.
[  485.002943][T18079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3195'.
[  485.028895][T18079] netlink: 'syz.4.3195': attribute type 32 has an invalid length.
[  485.028919][T18079] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3195'.
[  485.753044][T18109] xt_socket: unknown flags 0x8
[  485.951336][T17984] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.951532][T17984] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.951704][T17984] bridge_slave_0: entered allmulticast mode
[  485.975727][T17984] bridge_slave_0: entered promiscuous mode
[  485.991520][T17984] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.991624][T17984] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.991785][T17984] bridge_slave_1: entered allmulticast mode
[  486.017667][T17984] bridge_slave_1: entered promiscuous mode
[  486.054138][ T5624] Bluetooth: hci1: command tx timeout
[  486.081522][T18116] ip6gre0: entered allmulticast mode
[  486.157455][T18106] sctp: [Deprecated]: syz.4.3205 (pid 18106) Use of struct sctp_assoc_value in delayed_ack socket option.
[  486.157455][T18106] Use struct sctp_sack_info instead
[  486.199732][T17984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.217054][T17984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.287026][T17984] team0: Port device team_slave_0 added
[  486.290024][T17984] team0: Port device team_slave_1 added
[  486.335471][T17984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.335490][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.335521][T17984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.337821][T17984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.337834][T17984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.337855][T17984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.377344][T18124] netlink: 'syz.0.3208': attribute type 1 has an invalid length.
[  486.550474][T18124] bond7: entered promiscuous mode
[  486.558359][T18124] 8021q: adding VLAN 0 to HW filter on device bond7
[  486.681413][T18136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3208'.
[  486.736018][T17984] hsr_slave_0: entered promiscuous mode
[  486.750085][T17984] hsr_slave_1: entered promiscuous mode
[  486.754252][T17984] debugfs: 'hsr0' already exists in 'hsr'
[  486.754273][T17984] Cannot create hsr debugfs directory
[  486.822212][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'.
[  486.982107][T18142] ip_tables: iptables: counters copy to user failed while replacing table
[  487.212031][T18156] netlink: 'syz.3.3216': attribute type 23 has an invalid length.
[  487.433248][T18161] netlink: 'syz.2.3217': attribute type 49 has an invalid length.
[  487.468441][T17984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.468478][T17984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  487.739246][T17984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.739282][T17984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  487.915192][   T13] IPVS: starting estimator thread 0...
[  488.003558][T18175] IPVS: using max 37 ests per chain, 88800 per kthread
[  488.050956][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'.
[  488.135872][ T5624] Bluetooth: hci1: command tx timeout
[  488.162211][T17984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.162245][T17984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  488.384786][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  488.384810][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3228'.
[  488.385031][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  488.385115][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3228'.
[  488.496970][T17984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.497006][T17984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  488.772474][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'.
[  488.772521][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'.
[  488.913155][T18201] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.971334][T18201] 
: (slave bond0): Enslaving as an active interface with an up link
[  489.084735][T18208] syzkaller0: entered promiscuous mode
[  489.084760][T18208] syzkaller0: entered allmulticast mode
[  489.235869][T17984] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  489.257626][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  489.259743][T17984] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  489.290532][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  489.295766][T17984] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  489.324679][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  489.331476][T17984] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  489.355864][ T5624] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  489.379408][T17984] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  489.390706][T18226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3240'.
[  489.431749][T18226] tipc: Started in network mode
[  489.431779][T18226] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  489.455211][T18226] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  489.455740][T18226] tipc: Enabled bearer <udp:syz0>, priority 10
[  489.601210][T17984] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.632782][T17984] 8021q: adding VLAN 0 to HW filter on device team0
[  489.649737][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.649798][ T6861] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.688116][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.688181][ T6868] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.213814][ T5624] Bluetooth: hci1: command tx timeout
[  490.376240][T18253] sctp: [Deprecated]: syz.2.3245 (pid 18253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.376240][T18253] Use struct sctp_sack_info instead
[  490.574240][   T10] tipc: Node number set to 1
[  490.616409][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  491.070166][T17984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  491.223032][T17984] veth0_vlan: entered promiscuous mode
[  491.300565][T17984] veth1_vlan: entered promiscuous mode
[  491.472135][T17984] veth0_macvtap: entered promiscuous mode
[  491.480973][T18287] netlink: 'syz.3.3255': attribute type 2 has an invalid length.
[  491.480992][T18287] netlink: 'syz.3.3255': attribute type 11 has an invalid length.
[  491.496748][T17984] veth1_macvtap: entered promiscuous mode
[  491.625376][T17984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.709381][T18294] __nla_validate_parse: 3 callbacks suppressed
[  491.709402][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'.
[  491.767161][T17984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.824617][   T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.824663][   T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.824695][   T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.824726][   T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.842091][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'.
[  491.890217][T18303] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3259'.
[  492.186830][  T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.186852][  T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.346283][ T6873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.346305][ T6873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.816669][T18329] netlink: 'syz.3.3267': attribute type 1 has an invalid length.
[  493.654573][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  493.658944][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  493.662368][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  493.688042][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  493.689671][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  493.858020][T18364] Bluetooth: hci0: unsupported parameter 5134
[  493.858043][T18364] Bluetooth: hci0: unsupported parameter 8192
[  493.858055][T18364] Bluetooth: hci0: unsupported parameter 5134
[  493.858066][T18364] Bluetooth: hci0: unsupported parameter 8192
[  494.411993][T18381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  494.412027][   T38] IPVS: starting estimator thread 0...
[  494.469121][T18381] netlink: 'syz.1.3282': attribute type 21 has an invalid length.
[  494.469144][T18381] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3282'.
[  494.469159][T18381] IPv6: NLM_F_CREATE should be specified when creating new route
[  494.469398][T18381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  494.469415][T18381] IPv6: NLM_F_CREATE should be set when creating new route
[  494.469455][T18381] IPv6: NLM_F_CREATE should be set when creating new route
[  494.469478][T18381] IPv6: NLM_F_CREATE should be set when creating new route
[  494.472929][T18384] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20003
[  494.518880][T18383] IPVS: using max 31 ests per chain, 74400 per kthread
[  494.887126][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'.
[  494.910863][   T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.910894][   T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.492934][   T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.492969][   T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.571936][T18420] netlink: 'syz.3.3294': attribute type 1 has an invalid length.
[  495.744529][   T52] Bluetooth: hci4: command tx timeout
[  496.035189][   T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  496.035223][   T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.086311][T18359] lo speed is unknown, defaulting to 1000
[  496.589266][T18446] netlink: 'syz.2.3303': attribute type 17 has an invalid length.
[  496.589289][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3303'.
[  496.589312][T18446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3303'.
[  496.697566][T18446] erspan0: entered promiscuous mode
[  497.520124][T18449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.815442][   T52] Bluetooth: hci4: command tx timeout
[  499.214263][T18446] erspan0: left promiscuous mode
[  499.893983][   T52] Bluetooth: hci4: command tx timeout
[  500.178629][   T38] pimreg3: left allmulticast mode
[  500.382541][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3317'.
[  500.382591][T18509] block nbd1: Unsupported socket: should be TCP or UNIX.
[  501.482173][   T38] batman_adv: batadv0: Removing interface: gretap1
[  501.501621][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  501.502092][ T1308] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  501.514022][T18538] netlink: 'syz.2.3320': attribute type 21 has an invalid length.
[  501.514043][T18538] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3320'.
[  501.572631][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.592593][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.605921][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.614242][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.632945][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.645637][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.646923][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.651632][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3319'.
[  501.865005][   T38] bond4 (unregistering): (slave bridge6): Releasing backup interface
[  501.865041][   T38] bridge6 (unregistering): left promiscuous mode
[  501.918745][   T38] bond0 (unregistering): Released all slaves
[  501.932591][   T38] bond1 (unregistering): Released all slaves
[  501.961860][   T38] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface
[  501.973821][   T52] Bluetooth: hci4: command tx timeout
[  502.034654][   T38] bond2 (unregistering): Released all slaves
[  502.166373][   T38] bond3 (unregistering): Released all slaves
[  502.245777][   T38] bond4 (unregistering): Released all slaves
[  502.278671][   T38] bond5 (unregistering): Released all slaves
[  502.341355][   T38] bond6 (unregistering): Released all slaves
[  502.389566][   T38] bond7 (unregistering): Released all slaves
[  502.574443][   T38] : left promiscuous mode
[  502.654039][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1
[  502.655581][T18523] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  502.731952][   T38] tipc: Left network mode
[  503.259144][T18566] netlink: 'syz.1.3326': attribute type 32 has an invalid length.
[  503.550016][T18566] bond1: Setting coupled_control to off (0)
[  503.552236][T18359] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.552420][T18359] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.552579][T18359] bridge_slave_0: entered allmulticast mode
[  503.623607][T18359] bridge_slave_0: entered promiscuous mode
[  503.687472][T18359] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.687903][T18359] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.688211][T18359] bridge_slave_1: entered allmulticast mode
[  503.690875][T18359] bridge_slave_1: entered promiscuous mode
[  503.857862][T18576] netlink: 'syz.3.3328': attribute type 26 has an invalid length.
[  504.027233][T18359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.061715][T18359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.702713][T18608] ipt_ECN: cannot use operation on non-tcp rule
[  504.810272][T18359] team0: Port device team_slave_0 added
[  505.028420][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2
[  505.067459][T18359] team0: Port device team_slave_1 added
[  505.239090][T18359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.239109][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.239132][T18359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.327496][T18359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.327512][T18359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.327533][T18359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.643069][T18627] __nla_validate_parse: 29 callbacks suppressed
[  505.643090][T18627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3340'.
[  506.049978][T18359] hsr_slave_0: entered promiscuous mode
[  506.066854][T18359] hsr_slave_1: entered promiscuous mode
[  506.070794][T18359] debugfs: 'hsr0' already exists in 'hsr'
[  506.070817][T18359] Cannot create hsr debugfs directory
[  506.106813][T18639] xt_time: unknown flags 0x68
[  506.634850][T18652] netlink: 'syz.4.3347': attribute type 21 has an invalid length.
[  506.634873][T18652] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3347'.
[  506.667957][T18653] netlink: 'syz.4.3347': attribute type 21 has an invalid length.
[  506.667977][T18653] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3347'.
[  506.711913][T18652] netlink: 'syz.4.3347': attribute type 4 has an invalid length.
[  506.711937][T18652] netlink: 'syz.4.3347': attribute type 5 has an invalid length.
[  506.711949][T18652] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3347'.
[  506.712234][T18653] netlink: 'syz.4.3347': attribute type 4 has an invalid length.
[  506.712249][T18653] netlink: 'syz.4.3347': attribute type 5 has an invalid length.
[  506.712259][T18653] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3347'.
[  507.202317][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3
[  507.427480][   T38] hsr_slave_0: left promiscuous mode
[  507.444651][T18669] netlink: 'syz.2.3351': attribute type 8 has an invalid length.
[  507.506379][   T38] veth1_macvtap: left promiscuous mode
[  507.506429][   T38] veth0_macvtap: left promiscuous mode
[  507.506564][   T38] veth1_vlan: left promiscuous mode
[  507.506633][   T38] veth0_vlan: left promiscuous mode
[  507.898845][ T6861] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb
[  509.032741][ T6873] smc: removing ib device syz0
[  509.090937][   T10] infiniband syz0: ib_query_port failed (-19)
[  509.266730][ T6873] smbdirect: ib_dev[syz0] removed
[  509.349045][T18696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  509.349081][T18696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  509.390518][T18696] erspan0: entered promiscuous mode
[  509.411688][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  509.411730][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  509.432855][T18696] gretap0: entered promiscuous mode
[  509.491647][T18696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  511.781535][T18744] netlink: 'syz.2.3367': attribute type 1 has an invalid length.
[  512.399258][T18744] 8021q: adding VLAN 0 to HW filter on device bond1
[  512.601252][T18749] bond1: (slave gretap1): making interface the new active one
[  512.628052][T18749] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  516.298035][    C0] sched: DL replenish lagged too much
[  562.937738][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  563.874409][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  564.070853][ T1308] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  570.285392][ T5624] Bluetooth: hci5: command 0x0406 tx timeout
[  597.810032][T16847] Bluetooth: hci2: command 0x0406 tx timeout
[  606.297644][T16847] Bluetooth: hci1: command 0x0406 tx timeout
[  624.968161][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  625.151017][ T1308] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  638.559670][   T52] Bluetooth: hci4: command tx timeout
[  679.580295][   T32] INFO: task kworker/u8:2:38 blocked for more than 157 seconds.
[  679.580323][   T32]       Not tainted syzkaller #0
[  679.580332][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.580340][   T32] task:kworker/u8:2    state:D stack:22568 pid:38    tgid:38    ppid:2      task_flags:0x4208160 flags:0x00080000
[  679.580721][   T32] Workqueue: netns cleanup_net
[  679.580755][   T32] Call Trace:
[  679.580763][   T32]  <TASK>
[  679.580778][   T32]  __schedule+0x17db/0x58f0
[  679.580836][   T32]  ? __pfx___schedule+0x10/0x10
[  679.580908][   T32]  ? schedule+0x90/0x2b0
[  679.580935][   T32]  schedule+0x164/0x2b0
[  679.580965][   T32]  schedule_preempt_disabled+0x13/0x30
[  679.580987][   T32]  __mutex_lock+0x7c1/0x1550
[  679.581395][   T32]  ? __mutex_lock+0x5d4/0x1550
[  679.581434][   T32]  ? netdev_run_todo+0x6e4/0x1060
[  679.581465][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  679.581497][   T32]  ? rcu_barrier+0x424/0x530
[  679.581526][   T32]  ? msleep+0xdd/0x100
[  679.581557][   T32]  netdev_run_todo+0x6e4/0x1060
[  679.581591][   T32]  ? __pfx_netdev_run_todo+0x10/0x10
[  679.581617][   T32]  ? unregister_netdevice_queue+0x17d/0x340
[  679.581649][   T32]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  679.581681][   T32]  default_device_exit_batch+0x6d9/0x760
[  679.581710][   T32]  ? __pfx_default_device_exit_batch+0x10/0x10
[  679.581748][   T32]  ? __pfx_default_device_exit_batch+0x10/0x10
[  679.581770][   T32]  ops_undo_list+0x4b4/0x8d0
[  679.581801][   T32]  ? __pfx_ops_undo_list+0x10/0x10
[  679.581827][   T32]  ? idr_destroy+0x218/0x290
[  679.581848][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  679.581880][   T32]  cleanup_net+0x572/0x810
[  679.581907][   T32]  ? __pfx_cleanup_net+0x10/0x10
[  679.581936][   T32]  ? rcu_is_watching+0x16/0xb0
[  679.581961][   T32]  ? process_scheduled_works+0x97a/0x1630
[  679.581987][   T32]  process_scheduled_works+0xc3d/0x1630
[  679.582045][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  679.582077][   T32]  ? assign_work+0x3cf/0x5d0
[  679.582106][   T32]  worker_thread+0xa47/0xfb0
[  679.582141][   T32]  ? __kthread_parkme+0x71/0x1f0
[  679.582218][   T32]  kthread+0x38b/0x480
[  679.582236][   T32]  ? __pfx_worker_thread+0x10/0x10
[  679.582258][   T32]  ? __pfx_kthread+0x10/0x10
[  679.582277][   T32]  ret_from_fork+0x514/0xb70
[  679.582300][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  679.582316][   T32]  ? __switch_to+0xc89/0x1420
[  679.582346][   T32]  ? __pfx_kthread+0x10/0x10
[  679.582364][   T32]  ret_from_fork_asm+0x1a/0x30
[  679.582409][   T32]  </TASK>
[  679.582429][   T32] INFO: task kworker/u8:3:49 blocked for more than 157 seconds.
[  679.582446][   T32]       Not tainted syzkaller #0
[  679.582455][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  679.582464][   T32] task:kworker/u8:3    state:D stack:22568 pid:49    tgid:49    ppid:2      task_flags:0x4208060 flags:0x00080000
[  679.582515][   T32] Workqueue: events_unbound linkwatch_event
[  679.582537][   T32] Call Trace:
[  679.582543][   T32]  <TASK>
[  679.582554][   T32]  __schedule+0x17db/0x58f0
[  679.582607][   T32]  ? __pfx___schedule+0x10/0x10
[  679.582633][   T32]  ? schedule+0x90/0x2b0
[  679.582655][   T32]  schedule+0x164/0x2b0
[  679.582677][   T32]  schedule_preempt_disabled+0x13/0x30
[  679.582699][   T32]  __mutex_lock+0x7c1/0x1550
[  679.582729][   T32]  ? __mutex_lock+0x5d4/0x1550
[  679.582758][   T32]  ? linkwatch_event+0xe/0x60
[  679.582780][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  679.582804][   T32]  ? lock_acquire+0x115/0x350
[  679.582832][   T32]  ? rcu_is_watching+0x16/0xb0
[  679.582856][   T32]  ? process_scheduled_works+0x97a/0x1630
[  679.582881][   T32]  linkwatch_event+0xe/0x60
[  679.582900][   T32]  process_scheduled_works+0xc3d/0x1630
[  679.582958][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  679.582990][   T32]  ? assign_work+0x3cf/0x5d0
[  679.583021][   T32]  worker_thread+0xa47/0xfb0
[  679.583064][   T32]  kthread+0x38b/0x480
[  679.583081][   T32]  ? __pfx_worker_thread+0x10/0x10
[  679.583104][   T32]  ? __pfx_kthread+0x10/0x10
[  679.583120][   T32]  ret_from_fork+0x514/0xb70
[  679.583140][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  679.583166][   T32]  ? __switch_to+0xc89/0x1420
[  679.597637][   T32]  ? __pfx_kthread+0x10/0x10
[  679.597918][   T32]  ret_from_fork_asm+0x1a/0x30
[  679.598054][   T32]  </TASK>
[  679.598218][   T32] INFO: task dhcpcd:5276 blocked for more than 157 seconds.