last executing test programs:

5.255030311s ago: executing program 2 (id=12520):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0xc3073, 0xffffffffffffffff, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@loopback, 0x4, r2})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1e}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5090000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e538861cfbc81cf5822c4b6941dee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a44cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8f8453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced787646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b415018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9bd002a911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869345589f80e53e89babf570caea6c5f55725de89adce471d91f8db93a5febe314d7d79aed769df57a42e0ef7f61b01e17c5cbb19eb11322157c350681a72cb451a765c3b2794f3b6caffeee602eccb6aa0b4ac05a721f01f7981161f66c9926f6f4f97c9abbc964c7d0f220add5242c4887136bee937c2599f7cfc0d760fb89ba8af1b4f18d2222273b530d995bcb3a8ca9eadc2756b4011853277d6854c258957d3e87155777f68901"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1e}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000000) (async)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0xfa, 0x2, 0x0, 0x0, "d3dc86f90865ef36"}, 0x5}}]}, 0x63}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) (async)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0xfa, 0x2, 0x0, 0x0, "d3dc86f90865ef36"}, 0x5}}]}, 0x63}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)

4.806923693s ago: executing program 2 (id=12524):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x6a040000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYRES16=r1], 0xa)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
recvmmsg$unix(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f00000018c0)=""/120, 0x78}], 0x8}}], 0x1, 0x40010122, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
ioctl$FIONCLEX(r5, 0x5450)
accept4$llc(r7, 0x0, &(0x7f0000000040), 0x80800)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)

4.726368317s ago: executing program 3 (id=12527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
close(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000191"], 0x340a)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x10, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)

4.07136122s ago: executing program 3 (id=12533):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6c385aa3d49100dc6626c892b6bc436af5305a89f48061792fcc1401a69a4ccc59faa9714ad716c826639a3b07e7dd177f7148ef06d0270f3554e040c8acf626b12286aa3b91adbac2be3815de169d167d4c4c69b5cb4e83f2dc7dcdecd1734f276452e5eaee36269c29cb53d5c34a1068db0bcf3b4d10a413b1884b2516107175f96615cfd93b224229b0136e89c1693770267a5e4ab1f1565979d6ab46e4944ccecaf383f8b59f7f073443fda43a5d7624a402c2b6111e7254", 0xba)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000003200000116000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x100004, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0xfe, 0x55, 0x3, 0x59, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7, 0x9b, 0xd00}})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x4, 0xfffffffa)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
recvmsg(r1, &(0x7f0000000f40)={&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/158, 0x9e}, {&(0x7f00000009c0)=""/83, 0x53}, {&(0x7f0000000a40)=""/168, 0xa8}, {&(0x7f0000000b00)=""/147, 0x93}, {&(0x7f0000000bc0)=""/179, 0xb3}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/67, 0x43}], 0x8, &(0x7f0000000e40)=""/236, 0xec}, 0x2000)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket(0x34, 0x800, 0x1)
r6 = socket(0x10, 0x803, 0x2)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f00000001c0))
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @broadcast}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x56, r4})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8})
sendmsg$nl_route(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRESDEC=r3], 0x3c}}, 0x440b0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xf6)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})
writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000680)="b059461e47ddf894b4db321d998f4cfcb4ba2ca00da564105f3256920536a826a308b9b00c0fb8a8c3da3da70b2e0d431a2850e73d764e5b8397cbc0404d0ff3d4e597c428c438691da923c494842cb4bb7086288d2cae12f7b46d1b18582952e88e6adfa619d625ce1f0315037c9f9660d9caf8b6eac1cfa9c656000a365f41cea9f80df70879a8dbb8", 0x8a}, {&(0x7f0000001900)="7f55a72f6229c5cc0008eefbac9ca04371f978485cf6147d507d3384e8def9f6b33cfb7d6a40b6a2e931993f6b30799fb76905df97a03290341d6a4d25cefbb44bd0303bdcab12dabe947167c135c93e8abaaad9b9180f8bdb0d7f8cecae30a796adcf192168b2255cb4588513a06bac552f4bcd546c9c09659fbac3097c3e435bf9d9e8bd4aff94d308", 0x8a}, {&(0x7f0000001b00)="53722b7052f883bbab81f5f52be09180246514eadf012a4ac966cc8fc16b6c35f637d6cd5c67808da4afc5579275c6ceca6a03e8a2d8f7074db77482302e2a7f9cad699ad93e5540add12f9e39ecea52e92708b1afa2485cddefd4340e726c9236d3d57130da71fa746befd9c323dc9e324172fd1dc165bb142f2a6f94bbaac1d5d64d50ecc80767c2d1e2159cafc4347066c579ab0ebff4e8988899", 0x9c}, {&(0x7f0000000740)="c4e6a083030639f622d1ebca97b786c95117ad2252c3ccac1a085c4303b00d97581cd45353f8a8ca289d206511d632799f73761ebf96a12341aa529513eb003d6dc4d99db8160ead0309316202a82baeb2a44d813556cd86e2c38af7f7896863275b41ebb444797309d5d53392da7b2eefd20d80994729d7f9c6dec09e5a0f2631c98246c9b1ff00040000d3d9feb87b1ba8d00fcb86532338040e289ce97b5dd3314165d6d95cb64ea3ba6b9096", 0xae}, {&(0x7f0000001bc0)="98451d1896fff08a3d891182e34a06bd5b949afb4ed29f32fcd378c3634d7162be76c07bb1f07f9c257ce76a9735316c9f789d32415ead7a0b65fdf6fae7298ab93da3e8e5e8ce38eca5d1100779ccf0b88940d27094307fabdf565bc4cde7a783546a201de2547ac79e5731ac14d967ee19974a4d8a1fb2d1ccf70727ed4df92c207dd7344a0b6b2d4cff3465b7e4a1d32f4b3fd8523193f3faf2b0f7f7c9bc74908db9593963d89c2203a37336cc5382bb00a61f0ea37251460b413d8439a9948179e8", 0xc4}, {&(0x7f0000000440)="03ecb54b817314cce2281b09d452bbcf22d153096c9b65a00e352c8c76fe0789726e919514e5c078c7da652921107302168b6e824f285610b75f3901e8cf2770a5a912faf31ad9229775a5eaad5d9aa85795905d8950034c6af8ec70d295b4c1faeeec75becdf1c88d393be387a845f9f2cb5d1fceebf538398626c5164da08bbe333f3537c8e80933b4ca2c1c177e86502786198784ca962686aff2eb2f9ee33ca31db345511f7658bc522983d49a0da989eee04c05de12480d9f3693acd442cbc4300cc6d1ed2c6f9630ab311881082cd9e0bd80d1e212", 0xd8}, {&(0x7f00000017c0)="b76983ba07f3443f2bbad8c4ba40fa0292ed1d74ff6b002495a5cd1be46f4d39406a3344e1c3e9500557ce7edb4dfa069d14d8c8b29f439b23833fba7c19ff28eace78be5d9aca7dd95fee64f6be16318e91f39ba857c2a177862279bcf11e918a2ce1e19560b29aa7e706332b664ddaf0faddc32ebcbdf0702c7d17aab726ce7df6e33205b36c3b652d500f1188b437ca55c423cc0595eea653bbfc66e250a805040232ebf2d68cc2346acef3088055b0982331333000c504329801ce81769008062e", 0xc3}, {&(0x7f00000005c0)="075f9a8660c46e41b8fc5b7283d8b38379e810300717c41b8ee70daaf8125f2a8c5796674547ab78", 0x28}, {&(0x7f0000000300)="251a7a08bfd204ec4dc6b6848636d07a9aa1b4d69def75e362ab8cd0cf03bdf805973e75eb276336b2aaa993189e345761261bd81431781f4c044bb283ce6a2c47ed74bb878606523bf7caa40a64a1dec6da4b2cec11e9ce2eed9424d2030afc41ad44814761a48de2b3f10d13a20becd15f8c6c49f68057886d45", 0x7b}, {&(0x7f0000000240)="a3a3dfc81c045e132d9fab3a4062244e55f610345078595875a0264d2ab718acd6efbf0629a0f2e8e3a90f700805df79f22a3e0619ded89b73b43bb087e660a38e3a4b1aa5b775e345be372163f41eab37057686aa8d55197b82e51b47619e33cf962a18ab67999c6574a2d8bebb8cfdcad4680abe101a494176035420cc1d2b490faadf3eef591c080955032108b4", 0x8f}], 0xa)
accept4(r0, 0x0, 0x0, 0x0)

3.9485917s ago: executing program 1 (id=12535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000010000000000000007000000850000009e00000095007734dc9e8d89a269000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet(0x2, 0x2, 0x1) (async)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r3, 0x1, 0xe, &(0x7f0000000000)=0x2, 0x4)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) (async)
bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) (async)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c391a8518"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cf515407a9"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8003}, 0x200000a0) (async)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3c391a8518"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cf515407a9"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8003}, 0x200000a0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000006c0)) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000006c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r7 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x008'], 0x30}, 0x1, 0x0, 0x0, 0x1080}, 0x24008840)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2d0000090000000027bd70000000040019302ffb8b00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x81000) (async)
r8 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x81000)
accept$nfc_llcp(r8, &(0x7f0000000600), &(0x7f0000000680)=0x60) (async)
accept$nfc_llcp(r8, &(0x7f0000000600), &(0x7f0000000680)=0x60)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1)
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20040804}, 0x800)

3.53255975s ago: executing program 0 (id=12541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0)
syz_extract_tcp_res(&(0x7f00000000c0), 0x8, 0x4c)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x1403, 0x10, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40008001}, 0x84)

3.350837725s ago: executing program 0 (id=12543):
r0 = socket(0x10, 0x3, 0x800000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1)
sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r2, 0x601, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400048c0}, 0x200000c0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={<r5=>0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0xbb, 0x14d622b3, 0x6, 0x1c, 0x8}, &(0x7f0000000300)=0x98)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={r5, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x1ff}}}, &(0x7f0000000a00)=0x84)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x20048840)
setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000480), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r10 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x26}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94)

2.9455176s ago: executing program 3 (id=12544):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002480)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r11, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000040)=[{r10, 0x4236}, {r11, 0x3328}, {r5, 0x1}], 0x3, 0x0, 0x0, 0x0)
close(r9)
socket$nl_rdma(0x10, 0x3, 0x14)
bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="3f000000010000", 0x7)
sendfile(r2, r1, &(0x7f0000000100)=0xff, 0xfffffffffffffff9)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xe}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x0)

2.520178498s ago: executing program 1 (id=12545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x242ccd8c3cf7fa5, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x24044000)

2.516485377s ago: executing program 3 (id=12546):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r5, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400})
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x1}, 0x10)
write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r6, @ANYBLOB="020423bd424b9f1e80c92557044d0fa3117000ffdbdf251d97508f08000300", @ANYRES32=r8, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x2004808c}, 0x6004)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x59}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1da54872d7de"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "047bd8d5b2e2b25fc9a59a56d6c2ce64"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c3a230162d18e26e26663efe0619803"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e38e774d2a44"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x48840)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50)

2.409349699s ago: executing program 1 (id=12547):
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5bad}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x4000000) (async)
recvmsg$can_raw(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000600)=""/70, 0x46}, {0x0}, {&(0x7f0000001700)}], 0x4}, 0x0) (async)
syz_emit_ethernet(0x1e6, &(0x7f0000000680)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x1b0, 0x3a, 0x0, @empty, @mcast2, {[@hopopts={0x8, 0x15, '\x00', [@ra={0x5, 0x2, 0x12}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0xe, 0x77, "a412b3d009b0bae9ac9af6aecd2ef856759d26cf489392f5f4500d85833479c8ad861e8fab346a038d407cd4569bba2667af0a08df5719a0248816ddded49413604e75ef0c9194ad54999cfe6443eb1df39a726bf86cfd84410c07030b7e631b5ca30c02fac534954cbd2b6977a3e7c9f96c16341b0618"}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0xfffffffa}]}, @dstopts={0x16, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x2e4a}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @routing={0x4, 0xe, 0x2, 0x1, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @local}, @private0, @private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "7a1d79", 0x2000, 0x89, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], "cd1724a1ae97901c"}}}}}}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0)
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040801)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000300))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async)
write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r7=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002e40)=ANY=[@ANYBLOB="801300001300200028bd7000fddbdf251def09064e234e20060000000b00000006000000c0ffffff02000000080000000500000003000000", @ANYRES32=r7, @ANYBLOB="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"], 0x1380}, 0x1, 0x0, 0x0, 0x9800}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r8, 0x0, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000010000063af45e2ee930c13baddb09669", @ANYRES32=0x0, @ANYBLOB="0000000042010200280012800b0001006970366772650000180002800400120006000300800000000600020000400000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044)

2.151267086s ago: executing program 0 (id=12549):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="a7e7f33ad7b91061"], 0x20}}, 0x40000c0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18)
sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x4e22, 0x3ff, @mcast2, 0x5}}}, 0x88)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockopt$WPAN_WANTLQI(r11, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

2.121241782s ago: executing program 1 (id=12551):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000001d80), 0x0}, 0x20)

1.973382043s ago: executing program 4 (id=12552):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000035c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

1.971766558s ago: executing program 3 (id=12553):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='macvlan1\x00'})
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

1.971327622s ago: executing program 1 (id=12554):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={<r1=>r0, &(0x7f0000000240)='ethtool\x00', 0x540, &(0x7f0000000280)={@align=0x8ae, {0x0, 0x1, 0x2052, 0x8}}, 0x2, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000400)=0x5})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000480)={'pim6reg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)={0x24, r2, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0) (async)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
listen(r4, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) (async)
listen(r5, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r6, r6, 0x2f}, 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r6, r8, 0x2f, 0x10, 0x4, @void, @value=r6}, 0x20) (async)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6)

1.91616618s ago: executing program 4 (id=12555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="3840dc16ab60e62aecead86d5ab7", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x9}, 0x50)

1.898702781s ago: executing program 4 (id=12556):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0xa040000)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000040)=0x6, 0x4)
sendto$l2tp(r1, 0x0, 0x0, 0x30000040, &(0x7f0000000900)={0x2, 0x0, @empty, 0x3}, 0x10)
unshare(0x22020400)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000080))
unshare(0x400)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4)

1.837419926s ago: executing program 2 (id=12557):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x9, 0x0, 0x2, 0x5, "850980", 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x5}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xc}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x44, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x26008801)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8001}, 0x2000009c)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000700)={0x0, 'veth0_to_hsr\x00', {0x1}, 0x7})

1.703143216s ago: executing program 1 (id=12558):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x301)
r2 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f00000002c0)=0xc5, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000a0000000080000001"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f00000005c0), 0x0}, 0x20)
recvmmsg(r4, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005a40)=""/25, 0x19}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000001000)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x4004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/279], 0xa4}}, 0x0)
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0xfffd, 0xfffffffe, @mcast1, 0xa}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x10c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd26, 0x70bd2b, 0x8}}]}, 0x10c}}, 0x24000058)

1.693220816s ago: executing program 3 (id=12559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42, 0x0, 0x0, 0x80000000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"/410, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="03000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc00}, 0x48)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008000}, 0x4040844)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0x0, 0x4b8, 0x4b8, 0x140, 0x140, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x0, 0x2, 0x9, 0x9911, 0x6, 0x7, 0x32, 0xe8, 0x0, 0x1ff, 0x7, 0x2, 0xd, 0x2, 0x4, 0x84], 0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_to_bond\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x3ff, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xffffff00], 'veth0_to_team\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0)
unshare(0x62040200)
syz_genetlink_get_family_id$l2tp(0x0, r7)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20040815}, 0x8895)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', r8, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000001280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x9)

1.665149733s ago: executing program 4 (id=12560):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bind$bt_hci(r1, 0x0, 0x0)
write(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000a40), 0x0, 0x12122, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r2, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/59, 0x3b}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f00000001c0)=""/66, 0x42}], 0x6}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x1000a9e5}], 0x8, 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e62e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x7, 0x0, 0xa0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

730.953262ms ago: executing program 2 (id=12561):
socket(0x10, 0x803, 0x0)

567.428128ms ago: executing program 2 (id=12562):
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x7}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8140920b488e573f}, 0x24004000)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x50}}, 0x20040804)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757})

514.037365ms ago: executing program 0 (id=12563):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xfffffffd, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x2e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

502.088491ms ago: executing program 4 (id=12564):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000001d80), 0x0}, 0x20)

359.272896ms ago: executing program 4 (id=12565):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2b4, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x804}, @CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x43}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xd, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x76}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xfa}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x14, 0x17, [0x18, 0x3, 0x3ff, 0x4]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x404c004}, 0x20000010)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x78}]}, 0x2c}}, 0x800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000004000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, 0xffffffffffffffff, 0x12, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000484}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4)

330.714491ms ago: executing program 0 (id=12566):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="3840dc16ab60e62aecead86d5ab7", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x9}, 0x50)

157.560673ms ago: executing program 0 (id=12567):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

0s ago: executing program 2 (id=12568):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x1d, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)

kernel console output (not intermixed with test programs):

52]  </TASK>
[ 1225.312907][T15450] lo speed is unknown, defaulting to 1000
[ 1225.354693][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11516'.
[ 1225.475965][T15472] netlink: 'syz.1.11519': attribute type 1 has an invalid length.
[ 1225.557194][T15472] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[ 1225.740337][T15486] syzkaller1: entered promiscuous mode
[ 1225.804402][T15486] syzkaller1: entered allmulticast mode
[ 1226.040153][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11526'.
[ 1226.197725][T15514] netlink: 'syz.1.11529': attribute type 1 has an invalid length.
[ 1226.218454][T15512] netlink: 'syz.1.11529': attribute type 1 has an invalid length.
[ 1226.333400][T15505] syzkaller0: entered promiscuous mode
[ 1226.352638][T15505] syzkaller0: entered allmulticast mode
[ 1226.417617][T15512] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1226.441285][T15511] bond13: option tlb_dynamic_lb: unable to set because the bond device is up
[ 1227.025489][T15535] block nbd0: reconnected socket
[ 1227.036810][T15535] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1227.070670][ T4952] block nbd0: Receive control failed (result -32)
[ 1228.994373][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1229.003652][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1229.592701][T15507] lo speed is unknown, defaulting to 1000
[ 1229.616838][T15507] xfrm0 speed is unknown, defaulting to 1000
[ 1229.740251][T15542] erspan0: entered promiscuous mode
[ 1229.757559][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11533'.
[ 1229.788558][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11533'.
[ 1229.826635][T15542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11533'.
[ 1229.850593][T15541] erspan0: left promiscuous mode
[ 1229.870214][T15553] IPVS: rr: FWM 3 0x00000003 - no destination available
[ 1230.148530][T15562] block nbd6: Unsupported socket: should be TCP or UNIX.
[ 1230.240583][T15567] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11542'.
[ 1230.253489][T15568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11543'.
[ 1230.304351][T15567] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1230.465396][T15507] lo speed is unknown, defaulting to 1000
[ 1230.929876][T15589] lo speed is unknown, defaulting to 1000
[ 1230.956492][T15589] xfrm0 speed is unknown, defaulting to 1000
[ 1231.084621][T15602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.096019][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.199634][T15602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.388007][T15617] netlink: 'syz.1.11556': attribute type 2 has an invalid length.
[ 1231.452480][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11556'.
[ 1231.617013][T15621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1231.648051][T15591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.660090][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.676955][T15591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1231.681892][T15623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11559'.
[ 1232.017452][T15589] lo speed is unknown, defaulting to 1000
[ 1232.136619][T15637] netlink: 211720 bytes leftover after parsing attributes in process `syz.4.11564'.
[ 1232.399590][T15650] netlink: 'syz.0.11568': attribute type 21 has an invalid length.
[ 1232.677134][T15650] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11568'.
[ 1232.695057][T15654] batadv_slave_1: entered promiscuous mode
[ 1232.790237][T15658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11570'.
[ 1232.882956][T15658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 1233.250586][T15671] mac80211_hwsim hwsim118 syzkaller0: entered promiscuous mode
[ 1233.284455][T15671] mac80211_hwsim hwsim118 syzkaller0: entered allmulticast mode
[ 1233.410624][T15678] IPVS: length: 127 != 24
[ 1233.614814][T15687] netlink: 'syz.4.11577': attribute type 13 has an invalid length.
[ 1233.639784][T15687] netlink: 'syz.4.11577': attribute type 17 has an invalid length.
[ 1233.766361][T15687] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1233.776611][T15687] 0ªX¹¦À: left allmulticast mode
[ 1233.786606][T15687] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[ 1233.893547][T15687] batman_adv: 
60ªX¹¦À: Interface activated: batadv_slave_1
[ 1233.934527][T15687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1233.946177][T15687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1233.988692][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1233.995921][ T1172] bridge0: port 1(bridge_slave_0) entered listening state
[ 1234.028140][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1234.035357][ T1172] bridge0: port 2(bridge_slave_1) entered listening state
[ 1250.650791][T15757] __nla_validate_parse: 5 callbacks suppressed
[ 1250.650839][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11593'.
[ 1250.671787][T15756] netlink: 'syz.2.11594': attribute type 29 has an invalid length.
[ 1250.680846][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11594'.
[ 1250.791536][T15762] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11596'.
[ 1250.791764][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11593'.
[ 1251.276956][T15784] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11602'.
[ 1251.402703][T15801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11604'.
[ 1251.423520][T15802] netlink: 'syz.1.11606': attribute type 1 has an invalid length.
[ 1251.484431][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11607'.
[ 1251.517812][T15802] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1251.704719][T15818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11610'.
[ 1251.937881][T15834] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.11618'.
[ 1252.041767][T15844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11619'.
[ 1252.532785][T15873] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1252.622331][T15873] bond9: (slave wireguard0): refused to change device type
[ 1253.071608][T15915] mac80211_hwsim hwsim118 syzkaller0: left promiscuous mode
[ 1253.087984][T15915] mac80211_hwsim hwsim118 syzkaller0: left allmulticast mode
[ 1253.250627][T15921] netlink: 'syz.4.11632': attribute type 1 has an invalid length.
[ 1253.304131][    C0] net_ratelimit: 2 callbacks suppressed
[ 1253.304159][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1253.319867][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1253.376315][T15926] netlink: 'syz.2.11633': attribute type 1 has an invalid length.
[ 1253.459763][T15926] bond15: entered promiscuous mode
[ 1253.470261][T15926] bond15: entered allmulticast mode
[ 1253.476702][T15926] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1253.502636][T15930] macvlan3: entered promiscuous mode
[ 1253.509203][T15930] macvlan3: entered allmulticast mode
[ 1253.517873][T15930] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1254.017639][T15953] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1255.385683][T16013] netlink: 'syz.4.11660': attribute type 9 has an invalid length.
[ 1255.439728][T16021] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1255.642033][T16027] bridge6: entered allmulticast mode
[ 1256.091982][T16017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1256.102827][T16033] bond7: (slave lo): Releasing backup interface
[ 1256.146151][T16033] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1256.171112][T16033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1256.294160][T16039] __nla_validate_parse: 15 callbacks suppressed
[ 1256.294178][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11669'.
[ 1256.321388][T16041] netlink: 'syz.4.11670': attribute type 12 has an invalid length.
[ 1256.360198][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11669'.
[ 1256.611300][T16057] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11674'.
[ 1256.648095][T16060] netlink: 'syz.4.11676': attribute type 21 has an invalid length.
[ 1256.662765][T16060] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11676'.
[ 1256.679889][T16063] xt_bpf: check failed: parse error
[ 1256.695992][T16063] netlink: 'syz.3.11677': attribute type 1 has an invalid length.
[ 1256.711693][T16063] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11677'.
[ 1256.734076][T16063] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11677'.
[ 1256.747707][T16063] netlink: 'syz.3.11677': attribute type 1 has an invalid length.
[ 1256.758031][T16065] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 1256.775324][T16065] gretap2: entered allmulticast mode
[ 1256.793555][T16070] netlink: 'syz.0.11680': attribute type 1 has an invalid length.
[ 1256.820383][T16075] netlink: 'syz.0.11680': attribute type 1 has an invalid length.
[ 1257.126157][T16091] nbd: must specify a size in bytes for the device
[ 1257.133302][T16091] nbd: must specify an index to disconnect
[ 1257.342784][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11691'.
[ 1257.473474][T16118] netlink: 'syz.1.11693': attribute type 1 has an invalid length.
[ 1257.500071][T16118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11693'.
[ 1257.884918][T16147] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1258.241836][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.242976][T16167] lo speed is unknown, defaulting to 1000
[ 1258.249571][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.249618][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.249650][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.249680][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.282285][T16167] xfrm0 speed is unknown, defaulting to 1000
[ 1258.286140][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.363806][T16163] net_ratelimit: 58 callbacks suppressed
[ 1258.363824][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.377224][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.384927][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.392592][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.400296][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.407986][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.415700][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.423381][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.431097][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.438791][T16163] aoe: error packet from 57979.68@lo; ecode=101 'no such error'
[ 1258.544382][T16180] netlink: 'syz.2.11711': attribute type 1 has an invalid length.
[ 1258.749969][T16180] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1258.772851][T16164] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1258.845949][T16182] bond16: (slave geneve5): making interface the new active one
[ 1258.856415][T16182] bond16: (slave geneve5): Enslaving as an active interface with an up link
[ 1258.873326][  T202] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.000643][  T202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.034776][  T202] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.062406][  T202] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1259.245649][T16206] lo speed is unknown, defaulting to 1000
[ 1259.265535][T16206] xfrm0 speed is unknown, defaulting to 1000
[ 1259.326937][T16210] nbd: must specify at least one socket
[ 1259.447266][T16167] lo speed is unknown, defaulting to 1000
[ 1259.486307][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11722'.
[ 1259.657952][T16217] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1259.681631][T16219] bond8: (slave dummy0): Enslaving as an active interface with an up link
[ 1259.921814][T16206] lo speed is unknown, defaulting to 1000
[ 1260.190929][T16232] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1260.869209][T16253] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1260.882142][T16248] xt_CT: No such helper "snmp_trap"
[ 1261.460761][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11737'.
[ 1261.469177][T16277] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11739'.
[ 1261.493610][T16276] batadv_slave_0: entered promiscuous mode
[ 1261.555962][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11738'.
[ 1261.759931][T16275] batadv_slave_0: left promiscuous mode
[ 1261.978580][T16304] FAULT_INJECTION: forcing a failure.
[ 1261.978580][T16304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1262.051152][T16304] CPU: 1 UID: 0 PID: 16304 Comm: syz.0.11745 Not tainted syzkaller #0 PREEMPT(full) 
[ 1262.051180][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1262.051191][T16304] Call Trace:
[ 1262.051199][T16304]  <TASK>
[ 1262.051206][T16304]  dump_stack_lvl+0xe8/0x150
[ 1262.051232][T16304]  should_fail_ex+0x412/0x560
[ 1262.051259][T16304]  _copy_from_iter+0x1d3/0x1670
[ 1262.051282][T16304]  ? rcu_is_watching+0x15/0xb0
[ 1262.051308][T16304]  ? __pfx__copy_from_iter+0x10/0x10
[ 1262.051336][T16304]  ? netlink_sendmsg+0x650/0xb40
[ 1262.051357][T16304]  ? skb_put+0x11b/0x210
[ 1262.051380][T16304]  netlink_sendmsg+0x6c0/0xb40
[ 1262.051410][T16304]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1262.051434][T16304]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1262.051463][T16304]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1262.051491][T16304]  ____sys_sendmsg+0x972/0x9f0
[ 1262.051512][T16304]  ? __might_fault+0xaf/0x130
[ 1262.051541][T16304]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1262.051572][T16304]  ? import_iovec+0x73/0xa0
[ 1262.051596][T16304]  ___sys_sendmsg+0x2a5/0x360
[ 1262.051616][T16304]  ? __lock_acquire+0x6b5/0x2cf0
[ 1262.051640][T16304]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1262.051696][T16304]  ? __fget_files+0x2a/0x420
[ 1262.051718][T16304]  ? __fget_files+0x3a0/0x420
[ 1262.051748][T16304]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1262.051771][T16304]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1262.051808][T16304]  ? __pfx_ksys_write+0x10/0x10
[ 1262.051842][T16304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1262.051861][T16304]  do_syscall_64+0x174/0x580
[ 1262.051881][T16304]  ? trace_irq_disable+0x3b/0x140
[ 1262.051906][T16304]  ? clear_bhb_loop+0x40/0x90
[ 1262.051929][T16304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1262.051947][T16304] RIP: 0033:0x7f6cef99ce59
[ 1262.051965][T16304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1262.051980][T16304] RSP: 002b:00007f6cf07b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1262.051999][T16304] RAX: ffffffffffffffda RBX: 00007f6cefc16090 RCX: 00007f6cef99ce59
[ 1262.052013][T16304] RDX: 00000000200400c4 RSI: 0000200000004bc0 RDI: 000000000000000a
[ 1262.052023][T16304] RBP: 00007f6cf07b3090 R08: 0000000000000000 R09: 0000000000000000
[ 1262.052035][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1262.052047][T16304] R13: 00007f6cefc16128 R14: 00007f6cefc16090 R15: 00007ffdbbaffea8
[ 1262.052077][T16304]  </TASK>
[ 1262.325744][T16304] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1263.141223][T16353] lo: entered allmulticast mode
[ 1263.196397][T16358] FAULT_INJECTION: forcing a failure.
[ 1263.196397][T16358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1263.219314][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11761'.
[ 1263.250482][T16358] CPU: 1 UID: 0 PID: 16358 Comm: syz.1.11763 Not tainted syzkaller #0 PREEMPT(full) 
[ 1263.250507][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1263.250518][T16358] Call Trace:
[ 1263.250526][T16358]  <TASK>
[ 1263.250535][T16358]  dump_stack_lvl+0xe8/0x150
[ 1263.250570][T16358]  should_fail_ex+0x412/0x560
[ 1263.250595][T16358]  _copy_from_user+0x2d/0xb0
[ 1263.250627][T16358]  btf_new_fd+0x352/0xd40
[ 1263.250659][T16358]  ? __pfx_btf_new_fd+0x10/0x10
[ 1263.250681][T16358]  ? bpf_token_put+0x143/0x160
[ 1263.250699][T16358]  ? bpf_btf_load+0x126/0x190
[ 1263.250720][T16358]  __sys_bpf+0x4e5/0x950
[ 1263.250746][T16358]  ? __pfx___sys_bpf+0x10/0x10
[ 1263.250787][T16358]  ? ksys_write+0x242/0x270
[ 1263.250813][T16358]  ? __pfx_ksys_write+0x10/0x10
[ 1263.250841][T16358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.250859][T16358]  __x64_sys_bpf+0x7c/0x90
[ 1263.250882][T16358]  do_syscall_64+0x174/0x580
[ 1263.250902][T16358]  ? trace_irq_disable+0x3b/0x140
[ 1263.250927][T16358]  ? clear_bhb_loop+0x40/0x90
[ 1263.250949][T16358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.250969][T16358] RIP: 0033:0x7fe44679ce59
[ 1263.250986][T16358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1263.251001][T16358] RSP: 002b:00007fe447626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1263.251022][T16358] RAX: ffffffffffffffda RBX: 00007fe446a15fa0 RCX: 00007fe44679ce59
[ 1263.251035][T16358] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012
[ 1263.251048][T16358] RBP: 00007fe447626090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.251060][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.251070][T16358] R13: 00007fe446a16038 R14: 00007fe446a15fa0 R15: 00007ffd9f1c39b8
[ 1263.251100][T16358]  </TASK>
[ 1263.669126][T16373] netlink: 'syz.4.11766': attribute type 2 has an invalid length.
[ 1263.844542][T16385] FAULT_INJECTION: forcing a failure.
[ 1263.844542][T16385] name failslab, interval 1, probability 0, space 0, times 0
[ 1263.913409][T16385] CPU: 1 UID: 0 PID: 16385 Comm: syz.1.11767 Not tainted syzkaller #0 PREEMPT(full) 
[ 1263.913435][T16385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1263.913446][T16385] Call Trace:
[ 1263.913453][T16385]  <TASK>
[ 1263.913462][T16385]  dump_stack_lvl+0xe8/0x150
[ 1263.913488][T16385]  should_fail_ex+0x412/0x560
[ 1263.913513][T16385]  should_failslab+0xa8/0x100
[ 1263.913531][T16385]  ? skb_clone+0x212/0x3a0
[ 1263.913552][T16385]  kmem_cache_alloc_noprof+0x87/0x650
[ 1263.913586][T16385]  ? __netlink_lookup+0xc6/0x8b0
[ 1263.913613][T16385]  skb_clone+0x212/0x3a0
[ 1263.913638][T16385]  __netlink_deliver_tap+0x404/0x850
[ 1263.913675][T16385]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1263.913696][T16385]  netlink_deliver_tap+0x19c/0x1b0
[ 1263.913718][T16385]  netlink_unicast+0x730/0x8e0
[ 1263.913749][T16385]  netlink_sendmsg+0x813/0xb40
[ 1263.913779][T16385]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1263.913804][T16385]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1263.913830][T16385]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1263.913855][T16385]  ____sys_sendmsg+0x972/0x9f0
[ 1263.913875][T16385]  ? __might_fault+0xaf/0x130
[ 1263.913905][T16385]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1263.913935][T16385]  ? import_iovec+0x73/0xa0
[ 1263.913962][T16385]  ___sys_sendmsg+0x2a5/0x360
[ 1263.913981][T16385]  ? __lock_acquire+0x6b5/0x2cf0
[ 1263.914006][T16385]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1263.914064][T16385]  ? __fget_files+0x2a/0x420
[ 1263.914086][T16385]  ? __fget_files+0x3a0/0x420
[ 1263.914118][T16385]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1263.914143][T16385]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1263.914175][T16385]  ? __pfx_ksys_write+0x10/0x10
[ 1263.914208][T16385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.914228][T16385]  do_syscall_64+0x174/0x580
[ 1263.914247][T16385]  ? trace_irq_disable+0x3b/0x140
[ 1263.914273][T16385]  ? clear_bhb_loop+0x40/0x90
[ 1263.914296][T16385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.914314][T16385] RIP: 0033:0x7fe44679ce59
[ 1263.914332][T16385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1263.914347][T16385] RSP: 002b:00007fe447605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1263.914366][T16385] RAX: ffffffffffffffda RBX: 00007fe446a16090 RCX: 00007fe44679ce59
[ 1263.914380][T16385] RDX: 00000000200400c4 RSI: 0000200000004bc0 RDI: 000000000000000a
[ 1263.914392][T16385] RBP: 00007fe447605090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.914404][T16385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.914415][T16385] R13: 00007fe446a16128 R14: 00007fe446a16090 R15: 00007ffd9f1c39b8
[ 1263.914447][T16385]  </TASK>
[ 1264.184426][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1264.191658][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[ 1264.339078][T16385] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1264.616774][T16401] xt_hashlimit: size too large, truncated to 1048576
[ 1264.851843][T16447] bridge6: entered promiscuous mode
[ 1264.896540][T16406] xt_hashlimit: size too large, truncated to 1048576
[ 1264.898928][T16447] bridge6: entered allmulticast mode
[ 1264.906526][T16406] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1265.095257][T16459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11777'.
[ 1265.129676][T16451] bridge6: entered promiscuous mode
[ 1265.137856][T16459] netlink: 51 bytes leftover after parsing attributes in process `syz.4.11777'.
[ 1265.144771][T16451] bridge6: entered allmulticast mode
[ 1265.157067][T16459] netlink: 51 bytes leftover after parsing attributes in process `syz.4.11777'.
[ 1265.398686][T16465] FAULT_INJECTION: forcing a failure.
[ 1265.398686][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1265.412368][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.3.11778 Not tainted syzkaller #0 PREEMPT(full) 
[ 1265.412394][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1265.412405][T16465] Call Trace:
[ 1265.412412][T16465]  <TASK>
[ 1265.412420][T16465]  dump_stack_lvl+0xe8/0x150
[ 1265.412446][T16465]  should_fail_ex+0x412/0x560
[ 1265.412471][T16465]  _copy_to_user+0x31/0xb0
[ 1265.412494][T16465]  btf_new_fd+0x5b4/0xd40
[ 1265.412527][T16465]  ? __pfx_btf_new_fd+0x10/0x10
[ 1265.412550][T16465]  ? bpf_token_put+0x143/0x160
[ 1265.412570][T16465]  ? bpf_btf_load+0x126/0x190
[ 1265.412592][T16465]  __sys_bpf+0x4e5/0x950
[ 1265.412619][T16465]  ? __pfx___sys_bpf+0x10/0x10
[ 1265.412658][T16465]  ? ksys_write+0x242/0x270
[ 1265.412686][T16465]  ? __pfx_ksys_write+0x10/0x10
[ 1265.412715][T16465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.412735][T16465]  __x64_sys_bpf+0x7c/0x90
[ 1265.412760][T16465]  do_syscall_64+0x174/0x580
[ 1265.412779][T16465]  ? trace_irq_disable+0x3b/0x140
[ 1265.412805][T16465]  ? clear_bhb_loop+0x40/0x90
[ 1265.412827][T16465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1265.412845][T16465] RIP: 0033:0x7f697dd9ce59
[ 1265.412863][T16465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1265.412880][T16465] RSP: 002b:00007f697ec25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1265.412899][T16465] RAX: ffffffffffffffda RBX: 00007f697e015fa0 RCX: 00007f697dd9ce59
[ 1265.412930][T16465] RDX: 0000000000000028 RSI: 0000200000000840 RDI: 0000000000000012
[ 1265.412942][T16465] RBP: 00007f697ec25090 R08: 0000000000000000 R09: 0000000000000000
[ 1265.412954][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1265.412964][T16465] R13: 00007f697e016038 R14: 00007f697e015fa0 R15: 00007ffd5f946c98
[ 1265.412994][T16465]  </TASK>
[ 1265.529093][T16466] net_ratelimit: 3192 callbacks suppressed
[ 1265.529112][T16466] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1265.778212][T16466] xt_CT: No such helper "netbios-ns"
[ 1266.022322][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11785'.
[ 1266.048152][T16487] FAULT_INJECTION: forcing a failure.
[ 1266.048152][T16487] name failslab, interval 1, probability 0, space 0, times 0
[ 1266.095007][T16487] CPU: 1 UID: 0 PID: 16487 Comm: syz.3.11784 Not tainted syzkaller #0 PREEMPT(full) 
[ 1266.095034][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1266.095046][T16487] Call Trace:
[ 1266.095054][T16487]  <TASK>
[ 1266.095063][T16487]  dump_stack_lvl+0xe8/0x150
[ 1266.095089][T16487]  should_fail_ex+0x412/0x560
[ 1266.095115][T16487]  should_failslab+0xa8/0x100
[ 1266.095133][T16487]  ? skb_clone+0x212/0x3a0
[ 1266.095154][T16487]  kmem_cache_alloc_noprof+0x87/0x650
[ 1266.095179][T16487]  ? __netlink_lookup+0xc6/0x8b0
[ 1266.095207][T16487]  skb_clone+0x212/0x3a0
[ 1266.095232][T16487]  __netlink_deliver_tap+0x404/0x850
[ 1266.095265][T16487]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1266.095288][T16487]  netlink_deliver_tap+0x19c/0x1b0
[ 1266.095311][T16487]  netlink_unicast+0x730/0x8e0
[ 1266.095341][T16487]  netlink_sendmsg+0x813/0xb40
[ 1266.095373][T16487]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1266.095398][T16487]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1266.095426][T16487]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1266.095454][T16487]  ____sys_sendmsg+0x972/0x9f0
[ 1266.095474][T16487]  ? __might_fault+0xaf/0x130
[ 1266.095503][T16487]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1266.095532][T16487]  ? import_iovec+0x73/0xa0
[ 1266.095556][T16487]  ___sys_sendmsg+0x2a5/0x360
[ 1266.095576][T16487]  ? __lock_acquire+0x6b5/0x2cf0
[ 1266.095599][T16487]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1266.095657][T16487]  ? __fget_files+0x2a/0x420
[ 1266.095679][T16487]  ? __fget_files+0x3a0/0x420
[ 1266.095711][T16487]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1266.095735][T16487]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1266.095766][T16487]  ? __pfx_ksys_write+0x10/0x10
[ 1266.095801][T16487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.095822][T16487]  do_syscall_64+0x174/0x580
[ 1266.095849][T16487]  ? trace_irq_disable+0x3b/0x140
[ 1266.095875][T16487]  ? clear_bhb_loop+0x40/0x90
[ 1266.095898][T16487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.095916][T16487] RIP: 0033:0x7f697dd9ce59
[ 1266.095934][T16487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1266.095949][T16487] RSP: 002b:00007f697ec04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1266.095969][T16487] RAX: ffffffffffffffda RBX: 00007f697e016090 RCX: 00007f697dd9ce59
[ 1266.095983][T16487] RDX: 00000000200400c4 RSI: 0000200000004bc0 RDI: 000000000000000a
[ 1266.095995][T16487] RBP: 00007f697ec04090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.096007][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.096018][T16487] R13: 00007f697e016128 R14: 00007f697e016090 R15: 00007ffd5f946c98
[ 1266.096048][T16487]  </TASK>
[ 1266.713016][T16502] netlink: 'syz.3.11788': attribute type 33 has an invalid length.
[ 1266.722090][T16502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11788'.
[ 1266.867472][T16509] FAULT_INJECTION: forcing a failure.
[ 1266.867472][T16509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1266.880822][T16509] CPU: 1 UID: 0 PID: 16509 Comm: syz.3.11790 Not tainted syzkaller #0 PREEMPT(full) 
[ 1266.880847][T16509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1266.880858][T16509] Call Trace:
[ 1266.880866][T16509]  <TASK>
[ 1266.880874][T16509]  dump_stack_lvl+0xe8/0x150
[ 1266.880900][T16509]  should_fail_ex+0x412/0x560
[ 1266.880925][T16509]  _copy_to_user+0x31/0xb0
[ 1266.880949][T16509]  simple_read_from_buffer+0xe1/0x170
[ 1266.880978][T16509]  proc_fail_nth_read+0x1bb/0x230
[ 1266.881005][T16509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1266.881030][T16509]  ? rw_verify_area+0x2a6/0x4d0
[ 1266.881055][T16509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1266.881080][T16509]  vfs_read+0x20c/0xa70
[ 1266.881108][T16509]  ? __pfx___mutex_lock+0x10/0x10
[ 1266.881129][T16509]  ? __pfx_vfs_read+0x10/0x10
[ 1266.881154][T16509]  ? __fget_files+0x2a/0x420
[ 1266.881179][T16509]  ? __fget_files+0x3a0/0x420
[ 1266.881200][T16509]  ? __fget_files+0x2a/0x420
[ 1266.881228][T16509]  ksys_read+0x150/0x270
[ 1266.881255][T16509]  ? __pfx_ksys_read+0x10/0x10
[ 1266.881287][T16509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.881307][T16509]  do_syscall_64+0x174/0x580
[ 1266.881327][T16509]  ? trace_irq_disable+0x3b/0x140
[ 1266.881352][T16509]  ? clear_bhb_loop+0x40/0x90
[ 1266.881375][T16509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.881393][T16509] RIP: 0033:0x7f697dd5d68e
[ 1266.881410][T16509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1266.881426][T16509] RSP: 002b:00007f697ec24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1266.881446][T16509] RAX: ffffffffffffffda RBX: 00007f697ec256c0 RCX: 00007f697dd5d68e
[ 1266.881460][T16509] RDX: 000000000000000f RSI: 00007f697ec250a0 RDI: 0000000000000003
[ 1266.881472][T16509] RBP: 00007f697ec25090 R08: 0000000000000000 R09: 0000000000000000
[ 1266.881483][T16509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1266.881494][T16509] R13: 00007f697e016038 R14: 00007f697e015fa0 R15: 00007ffd5f946c98
[ 1266.881524][T16509]  </TASK>
[ 1267.297694][T16482] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1267.887102][T16540] netlink: 'syz.4.11798': attribute type 1 has an invalid length.
[ 1267.916066][T16540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11798'.
[ 1267.930718][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11792'.
[ 1267.994631][T16540] netlink: 'syz.4.11798': attribute type 1 has an invalid length.
[ 1268.176577][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11802'.
[ 1268.201879][T16555] x_tables: duplicate underflow at hook 1
[ 1268.481861][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11805'.
[ 1268.699200][T16577] netlink: 'syz.1.11807': attribute type 10 has an invalid length.
[ 1268.726543][T16577] syz_tun: entered promiscuous mode
[ 1268.800519][T16577] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1269.522034][T30922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1269.536808][T30922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1269.545292][T30922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1269.556987][T30922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1269.565275][T30922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1269.962335][ T5078] bond0: (slave syz_tun): Releasing backup interface
[ 1269.979837][T16634] netlink: 'syz.0.11820': attribute type 1 has an invalid length.
[ 1270.068265][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11820'.
[ 1270.096107][T16642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11821'.
[ 1270.163167][T16634] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1270.200271][T16641] bond10: entered allmulticast mode
[ 1270.407211][T16610] lo speed is unknown, defaulting to 1000
[ 1270.419702][T16659] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11823'.
[ 1270.443186][T16610] xfrm0 speed is unknown, defaulting to 1000
[ 1270.455672][T16659] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11823'.
[ 1270.476497][T16659] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11823'.
[ 1270.717827][T16666] netlink: 'syz.2.11827': attribute type 2 has an invalid length.
[ 1270.726536][T16666] netlink: 'syz.2.11827': attribute type 2 has an invalid length.
[ 1270.761280][T16666] macsec1: entered promiscuous mode
[ 1271.223259][T16610] lo speed is unknown, defaulting to 1000
[ 1271.625012][ T4952] Bluetooth: hci3: command tx timeout
[ 1271.791452][T16703] __nla_validate_parse: 31 callbacks suppressed
[ 1271.791470][T16703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11837'.
[ 1271.966533][T16708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11838'.
[ 1272.017576][T16721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11842'.
[ 1272.174690][T16610] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1272.195390][T16610] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1272.209064][T16610] bridge_slave_0: entered allmulticast mode
[ 1272.219923][T16610] bridge_slave_0: entered promiscuous mode
[ 1272.228898][T16712] syzkaller1: entered promiscuous mode
[ 1272.235533][T16712] syzkaller1: entered allmulticast mode
[ 1272.268665][T16610] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1272.284038][T16610] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1272.304661][T16610] bridge_slave_1: entered allmulticast mode
[ 1272.326740][T16610] bridge_slave_1: entered promiscuous mode
[ 1272.536039][T16610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1272.589511][T16610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1272.737283][T16742] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1272.792315][T16610] team0: Port device team_slave_0 added
[ 1272.807134][T16610] team0: Port device team_slave_1 added
[ 1272.870929][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1272.893557][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1272.963864][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1272.989491][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1272.996938][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1273.024432][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1273.058605][T16761] netlink: 'syz.4.11852': attribute type 13 has an invalid length.
[ 1273.185561][T16610] hsr_slave_0: entered promiscuous mode
[ 1273.194983][T16610] hsr_slave_1: entered promiscuous mode
[ 1273.202323][T16610] debugfs: 'hsr0' already exists in 'hsr'
[ 1273.203632][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11855'.
[ 1273.213483][T16610] Cannot create hsr debugfs directory
[ 1273.219354][T16768] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1273.287834][T16767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1273.325231][T16775] netlink: 'syz.0.11855': attribute type 1 has an invalid length.
[ 1273.337554][T16775] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11855'.
[ 1273.362102][T16775] netlink: 'syz.0.11855': attribute type 1 has an invalid length.
[ 1273.406420][T16775] netlink: 634 bytes leftover after parsing attributes in process `syz.0.11855'.
[ 1273.465812][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11857'.
[ 1273.487113][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11855'.
[ 1273.705386][ T4952] Bluetooth: hci3: command tx timeout
[ 1273.725944][T16791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11861'.
[ 1273.750410][T16791] netlink: 'syz.4.11861': attribute type 7 has an invalid length.
[ 1273.780756][T16791] netlink: 'syz.4.11861': attribute type 8 has an invalid length.
[ 1273.803633][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11861'.
[ 1274.111224][T16790] erspan0: entered promiscuous mode
[ 1275.336092][T16610] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1275.368644][T16610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1275.378515][T16610] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1275.382006][T16855] IPv6: Can't replace route, no match found
[ 1275.401253][T16610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1275.418626][T16610] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1275.450326][T16610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1275.521823][T16610] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1275.542524][T16610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1275.575353][T16866] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1275.611784][T16866] gretap2: entered allmulticast mode
[ 1275.639654][T16866] bond9: (slave gretap2): Enslaving as an active interface with an up link
[ 1275.681442][T16866] bond9 (unregistering): (slave gretap2): Releasing backup interface
[ 1275.700127][T16866] bond9 (unregistering): Released all slaves
[ 1275.732035][T16878] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1275.785257][ T4952] Bluetooth: hci3: command tx timeout
[ 1275.967315][T16610] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1276.027176][T16610] 8021q: adding VLAN 0 to HW filter on device team0
[ 1276.054600][T16887] pimreg9: entered allmulticast mode
[ 1276.077010][T16437] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1276.084236][T16437] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1276.110185][T16438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1276.117454][T16438] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1276.235921][T16898] syzkaller1: entered promiscuous mode
[ 1276.242047][T16898] syzkaller1: entered allmulticast mode
[ 1276.474788][T16914] syzkaller1: entered promiscuous mode
[ 1276.494832][T16914] syzkaller1: entered allmulticast mode
[ 1276.986304][T16937] __nla_validate_parse: 7 callbacks suppressed
[ 1276.986323][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11898'.
[ 1277.351368][T16951] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1277.372606][T16951] mac80211_hwsim hwsim118 syzkaller0: entered promiscuous mode
[ 1277.394318][T16951] mac80211_hwsim hwsim118 syzkaller0: entered allmulticast mode
[ 1277.430554][T16951] tipc: Resetting bearer <eth:syzkaller0>
[ 1277.548800][T16951] tipc: Resetting bearer <eth:syzkaller0>
[ 1277.640875][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1277.788490][T16610] veth0_vlan: entered promiscuous mode
[ 1277.833595][T16610] veth1_vlan: entered promiscuous mode
[ 1277.864370][ T4952] Bluetooth: hci3: command tx timeout
[ 1277.920052][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11906'.
[ 1277.952381][T16973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11909'.
[ 1277.983065][T16610] veth0_macvtap: entered promiscuous mode
[ 1278.030765][T16610] veth1_macvtap: entered promiscuous mode
[ 1278.096092][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1278.129296][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1278.172918][T16426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1278.205770][T16426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1278.239537][T16426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1278.271262][T16426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1278.280428][T16982] netlink: 'syz.0.11913': attribute type 1 has an invalid length.
[ 1278.337179][T16426] tipc: Resetting bearer <eth:syzkaller0>
[ 1278.581959][T16422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1278.626378][T16422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1278.723465][T16443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1278.748742][T16443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1278.932033][T17011] openvswitch: netlink: nsh attr 0 has unexpected len 6 expected 0
[ 1278.947947][T17011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1278.963294][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11923'.
[ 1279.273392][T17035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11931'.
[ 1279.330446][T17038] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11931'.
[ 1279.507524][T17040] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11932'.
[ 1279.892834][T17063] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1280.335347][T17087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1280.861414][T17110] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1280.920962][T17108] m1Ie5nè‹Ò: entered promiscuous mode
[ 1281.233021][T17135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11962'.
[ 1281.312387][T17137] team0 (unregistering): Port device team_slave_0 removed
[ 1281.370335][T17137] team0 (unregistering): Port device team_slave_1 removed
[ 1281.762963][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11966'.
[ 1281.973646][T17162] mac80211_hwsim hwsim118 syzkaller0: left promiscuous mode
[ 1282.028884][T17162] mac80211_hwsim hwsim118 syzkaller0: left allmulticast mode
[ 1282.054185][T17162] tipc: Resetting bearer <eth:syzkaller0>
[ 1282.238041][T17174] IPVS: ip_vs_edit_dest(): server weight less than zero
[ 1282.526648][T30922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1282.549811][T30922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1282.561686][T30922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1282.570139][T30922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1282.578782][T30922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1282.646671][T17189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11978'.
[ 1282.670058][T16443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1282.678568][T16443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1282.947743][ T5442] syz_tun (unregistering): left allmulticast mode
[ 1283.079189][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11981'.
[ 1283.217941][T16418] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.472162][T16418] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.592291][T17184] lo speed is unknown, defaulting to 1000
[ 1283.602271][T17184] xfrm0 speed is unknown, defaulting to 1000
[ 1283.606655][T17234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11991'.
[ 1283.669215][T16418] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.806342][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11989'.
[ 1283.899938][T16418] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.987225][T17249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11994'.
[ 1284.306869][T17254] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11996'.
[ 1284.333277][T17254] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11996'.
[ 1284.567025][T17264] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11998'.
[ 1284.596050][T16418] vlan3: left allmulticast mode
[ 1284.608847][T16418] dummy0: left allmulticast mode
[ 1284.659851][T16418] vlan3: left promiscuous mode
[ 1284.668577][ T4952] Bluetooth: hci0: command tx timeout
[ 1284.690155][T16418] dummy0: left promiscuous mode
[ 1284.696914][T16418] bridge0: port 1(vlan3) entered disabled state
[ 1284.741622][T16418] pimreg9: left allmulticast mode
[ 1285.028149][T16418] bond7 (unregistering): (slave erspan1): Releasing active interface
[ 1285.146175][T16418] bond16 (unregistering): (slave geneve5): Releasing active interface
[ 1285.154312][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12002'.
[ 1285.178362][T16418] bond2 (unregistering): (slave geneve2): Releasing active interface
[ 1285.225227][T16418] bond5 (unregistering): (slave bridge1): Releasing active interface
[ 1285.248888][T16418] bond13 (unregistering): (slave bridge2): Releasing backup interface
[ 1285.275111][T16418] bridge2 (unregistering): left promiscuous mode
[ 1285.398690][T16418] bond0 (unregistering): Released all slaves
[ 1285.418359][T16418] bond1 (unregistering): Released all slaves
[ 1285.442290][T16418] bond2 (unregistering): Released all slaves
[ 1285.480080][T16418] bond3 (unregistering): Released all slaves
[ 1285.495116][T16418] bond4 (unregistering): Released all slaves
[ 1285.510391][T16418] bond5 (unregistering): Released all slaves
[ 1285.532813][T16418] bond6 (unregistering): Released all slaves
[ 1285.553012][T16418] bond7 (unregistering): Released all slaves
[ 1285.572927][T16418] bond8 (unregistering): Released all slaves
[ 1285.593572][T16418] bond9 (unregistering): Released all slaves
[ 1285.638483][T16418] bond10 (unregistering): Released all slaves
[ 1285.670292][T16418] bond11 (unregistering): Released all slaves
[ 1285.697401][T16418] bond12 (unregistering): Released all slaves
[ 1285.719254][T16418] bond13 (unregistering): Released all slaves
[ 1285.747295][T16418] bond14 (unregistering): Released all slaves
[ 1285.769167][T16418] bond15 (unregistering): Released all slaves
[ 1285.795228][T16418] bond16 (unregistering): Released all slaves
[ 1285.821557][T17264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11998'.
[ 1285.850805][T17184] lo speed is unknown, defaulting to 1000
[ 1286.207276][ T1620] IPVS: starting estimator thread 0...
[ 1286.246067][T16418] tipc: Disabling bearer <udp:syz2>
[ 1286.259638][T16418] tipc: Left network mode
[ 1286.305143][T17299] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1286.438096][T17310] netlink: 'syz.4.12010': attribute type 21 has an invalid length.
[ 1286.606635][T17315] xt_hashlimit: size too large, truncated to 1048576
[ 1286.697785][T17321] netlink: 'syz.4.12012': attribute type 15 has an invalid length.
[ 1286.744638][ T4952] Bluetooth: hci0: command tx timeout
[ 1287.370380][T17344] netlink: 'syz.0.12014': attribute type 3 has an invalid length.
[ 1287.388416][T17344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1287.411856][T17184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.440257][T17184] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1287.469321][T17184] bridge_slave_0: entered allmulticast mode
[ 1287.483599][T17184] bridge_slave_0: entered promiscuous mode
[ 1287.518388][T17184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.540650][T17184] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1287.551192][T17184] bridge_slave_1: entered allmulticast mode
[ 1287.561827][T17184] bridge_slave_1: entered promiscuous mode
[ 1287.651466][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1287.701104][T17184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1287.736817][T17184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1287.950997][T17184] team0: Port device team_slave_0 added
[ 1288.031567][T17184] team0: Port device team_slave_1 added
[ 1288.095760][T17375] __nla_validate_parse: 5 callbacks suppressed
[ 1288.095780][T17375] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12022'.
[ 1288.116025][T17184] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1288.131426][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1288.161371][T17375] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12022'.
[ 1288.176998][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12022'.
[ 1288.188354][T17184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1288.212387][T17184] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1288.220780][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1288.253272][T17184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1288.637705][T17184] hsr_slave_0: entered promiscuous mode
[ 1288.657208][T17184] hsr_slave_1: entered promiscuous mode
[ 1288.680292][T17184] debugfs: 'hsr0' already exists in 'hsr'
[ 1288.690870][T17184] Cannot create hsr debugfs directory
[ 1288.771536][T16418] hsr_slave_0: left promiscuous mode
[ 1288.778340][T16418] hsr_slave_1: left promiscuous mode
[ 1288.810961][T16418] pim6reg (unregistering): left allmulticast mode
[ 1288.825192][ T4952] Bluetooth: hci0: command tx timeout
[ 1288.875644][T17391] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12027'.
[ 1289.088715][T17389] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1289.325082][T16418] IPVS: stop unused estimator thread 0...
[ 1289.363127][T17303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1289.511239][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12028'.
[ 1289.783465][T17396] netlink: 'syz.4.12029': attribute type 12 has an invalid length.
[ 1289.950830][T16422] erspan0: left allmulticast mode
[ 1289.968619][T16422] erspan0: left promiscuous mode
[ 1289.984346][T16422] bridge6: port 1(erspan0) entered disabled state
[ 1290.075318][T17422] Bluetooth: MGMT ver 1.23
[ 1290.098163][T17427] x_tables: duplicate underflow at hook 1
[ 1290.576028][T16422] bond0 (unregistering): Released all slaves
[ 1290.591230][T16422] bond1 (unregistering): Released all slaves
[ 1290.607002][T16422] bond2 (unregistering): Released all slaves
[ 1290.624535][T16422] bond3 (unregistering): Released all slaves
[ 1290.641187][T16422] bond4 (unregistering): Released all slaves
[ 1290.655909][T16422] bond5 (unregistering): Released all slaves
[ 1290.669948][T16422] bond6 (unregistering): Released all slaves
[ 1290.692625][T16422] bond7 (unregistering): Released all slaves
[ 1290.709950][T16422] bond8 (unregistering): (slave veth5): Releasing active interface
[ 1290.719510][T16422] bond8 (unregistering): (slave veth7): Releasing active interface
[ 1290.728750][T16422] bond8 (unregistering): Released all slaves
[ 1290.744542][T16422] bond9 (unregistering): Released all slaves
[ 1290.763399][T16422] bond10 (unregistering): Released all slaves
[ 1290.833088][T17422] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1290.840585][T17422] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.914398][T30922] Bluetooth: hci0: command tx timeout
[ 1290.962487][T17422] batman_adv: 
60ªX¹¦À: Interface deactivated: batadv_slave_1
[ 1291.015491][T17422] vlan0: left promiscuous mode
[ 1291.020893][T17422] macvtap0: left promiscuous mode
[ 1291.027422][T17422] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[ 1291.036966][T17422] ipvlan2: left allmulticast mode
[ 1291.042944][T17422] bond1: left allmulticast mode
[ 1291.055766][T17422] bond3: left promiscuous mode
[ 1291.060546][T17422] bond3: left allmulticast mode
[ 1291.068580][T17422] sit1: left allmulticast mode
[ 1291.073527][T17422] ip6gre1: left promiscuous mode
[ 1291.079785][T17422] ip6gre1: left allmulticast mode
[ 1291.085556][T17422] bond4: left promiscuous mode
[ 1291.090343][T17422] erspan1: left promiscuous mode
[ 1291.097784][T17422] bond4: left allmulticast mode
[ 1291.102866][T17422] erspan1: left allmulticast mode
[ 1291.108225][T17422] geneve2: left promiscuous mode
[ 1291.113394][T17422] xfrm1: left allmulticast mode
[ 1291.118926][T17422] bond8: left allmulticast mode
[ 1291.124775][T17422] tipc: Resetting bearer <eth:syzkaller0>
[ 1291.200072][T16422] tipc: Disabling bearer <udp:syz2>
[ 1291.217832][T16422] tipc: Disabling bearer <eth:team0>
[ 1291.245851][T16422] tipc: Disabling bearer <eth:syzkaller0>
[ 1291.251938][T16422] tipc: Left network mode
[ 1291.280350][T17424] lo speed is unknown, defaulting to 1000
[ 1291.300986][T17424] xfrm0 speed is unknown, defaulting to 1000
[ 1291.367799][T16422] IPVS: stopping backup sync thread 32611 ...
[ 1291.407773][T17446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12037'.
[ 1291.679507][T17456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12041'.
[ 1291.716825][T17459] netlink: 'syz.3.12042': attribute type 1 has an invalid length.
[ 1291.863830][T30922] Bluetooth: hci2: command 0x0406 tx timeout
[ 1291.889302][T17465] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12044'.
[ 1291.921928][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12042'.
[ 1291.930139][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12044'.
[ 1292.025997][T17460] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1292.039226][T17460] bond9: (slave bond10): making interface the new active one
[ 1292.049262][T17460] bond9: (slave bond10): Enslaving as an active interface with an up link
[ 1292.118213][T17466] bond9: (slave gretap4): Enslaving as a backup interface with an up link
[ 1292.145504][T17471] : renamed from veth0_to_bond (while UP)
[ 1292.263625][T17477] mac80211_hwsim hwsim118 syzkaller0: entered promiscuous mode
[ 1292.298604][T17477] mac80211_hwsim hwsim118 syzkaller0: entered allmulticast mode
[ 1292.326678][T17477] tipc: Resetting bearer <eth:syzkaller0>
[ 1292.453138][T17484] bridge0: entered promiscuous mode
[ 1292.478267][T17184] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1292.493019][T17490] netlink: 'syz.0.12050': attribute type 13 has an invalid length.
[ 1292.511556][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1292.574214][T17184] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1292.612453][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1292.728554][T17184] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1292.761042][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1292.878645][T17424] lo speed is unknown, defaulting to 1000
[ 1292.927013][T17184] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1292.982230][T17184] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1293.775537][T17561] __nla_validate_parse: 3 callbacks suppressed
[ 1293.775556][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12060'.
[ 1294.115989][T17547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1294.127765][T17547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1294.501275][T16422] pim6reg (unregistering): left allmulticast mode
[ 1295.208568][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12062'.
[ 1295.328482][T17547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.342042][T17547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.486868][T17184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1295.746615][T17547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1295.773635][T17547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1295.839465][T17611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12068'.
[ 1296.094399][T17610] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1296.121927][T17610] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1296.131862][T17610] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1296.149796][T17610] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1296.179140][T17610] veth1_to_batadv: entered promiscuous mode
[ 1296.202901][T17610] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1296.217912][T17610] erspan1: left promiscuous mode
[ 1296.234708][T17610] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1296.249113][T17610] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1296.269244][T17610] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1296.293601][T17610] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1296.316370][T17184] 8021q: adding VLAN 0 to HW filter on device team0
[ 1296.329637][ T1617] bridge0: entered promiscuous mode
[ 1296.352186][T16418] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1296.362170][T16418] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1296.378411][ T1184] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex
[ 1296.387802][ T1184] bond6: (slave veth7): making interface the new active one
[ 1296.399228][ T1184] bond6: active interface up!
[ 1296.438079][T17547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1296.448776][T17547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1296.468544][T17620] syzkaller0: entered promiscuous mode
[ 1296.474457][T17620] syzkaller0: entered allmulticast mode
[ 1296.481122][T16418] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1296.491160][T16418] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1296.508548][T17623] tipc: Started in network mode
[ 1296.515741][T17623] tipc: Node identity 2ad85561af7a, cluster identity 4711
[ 1296.526943][T17623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1296.583664][T22539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1296.590905][T22539] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1296.613104][T17620] tipc: Resetting bearer <eth:syzkaller0>
[ 1296.652646][T22539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1296.659847][T22539] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1296.671926][T17618] tipc: Resetting bearer <eth:syzkaller0>
[ 1296.718009][T17618] tipc: Disabling bearer <eth:syzkaller0>
[ 1296.779522][T17632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12071'.
[ 1296.806537][T17184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1296.830933][T17184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1296.971216][T17639] openvswitch: netlink: Missing valid actions attribute.
[ 1297.011332][T17639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1297.460550][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12077'.
[ 1297.672192][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12077'.
[ 1297.730334][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12076'.
[ 1297.822726][T16422] bond8 (unregistering): (slave geneve2): Releasing active interface
[ 1297.904017][T16422] bond0 (unregistering): Released all slaves
[ 1297.915008][T16422] bond1 (unregistering): Released all slaves
[ 1297.929702][T16422] bond2 (unregistering): (slave bond3): Releasing backup interface
[ 1297.946488][T16422] bond2 (unregistering): Released all slaves
[ 1297.961308][T16422] bond3 (unregistering): Released all slaves
[ 1297.977025][T16422] bond4 (unregistering): Released all slaves
[ 1297.992317][T16422] bond5 (unregistering): (slave veth9): Releasing backup interface
[ 1298.011124][T16422] bond5 (unregistering): Released all slaves
[ 1298.026321][T16422] bond6 (unregistering): Released all slaves
[ 1298.041124][T16422] bond7 (unregistering): Released all slaves
[ 1298.060466][T16422] bond8 (unregistering): Released all slaves
[ 1298.083576][T16422] bond9 (unregistering): Released all slaves
[ 1298.102876][T16422] bond10 (unregistering): Released all slaves
[ 1298.136374][T16418] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.145352][T16418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.286047][T17664] syzkaller1: entered promiscuous mode
[ 1298.302867][T17664] syzkaller1: entered allmulticast mode
[ 1298.329342][T17674] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[ 1298.404273][T17681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12079'.
[ 1298.450814][T17681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12079'.
[ 1298.487708][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12080'.
[ 1298.489047][T17681] netlink: 'syz.4.12079': attribute type 1 has an invalid length.
[ 1298.510224][T16422] tipc: Disabling bearer <udp:syz2>
[ 1298.532855][T16422] tipc: Left network mode
[ 1298.594331][T16426] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.602612][T16426] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.750961][T22539] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.787836][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12081'.
[ 1298.789056][T22539] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.836691][T16426] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1298.866309][T16426] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.156061][T17703] A link change request failed with some changes committed already. Interface 
2
6±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check.
[ 1299.257328][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12086'.
[ 1299.486403][T17713] ip6erspan0: entered allmulticast mode
[ 1299.517526][T17184] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1299.528223][T17715] netlink: 'syz.3.12090': attribute type 9 has an invalid length.
[ 1299.570453][T17715] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.12090'.
[ 1299.641282][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12093'.
[ 1299.643257][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12091'.
[ 1299.672796][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12093'.
[ 1299.698416][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12094'.
[ 1299.710244][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12091'.
[ 1299.711659][T17722] veth0_macvtap: left promiscuous mode
[ 1299.744382][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12091'.
[ 1299.841945][T17184] veth0_vlan: entered promiscuous mode
[ 1299.887570][T17184] veth1_vlan: entered promiscuous mode
[ 1300.098842][T17756] xt_hashlimit: max too large, truncated to 1048576
[ 1300.099515][T17184] veth0_macvtap: entered promiscuous mode
[ 1300.129905][T17756] No such timeout policy "syz1"
[ 1300.182599][T17184] veth1_macvtap: entered promiscuous mode
[ 1300.340512][T17184] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1300.459163][T17765] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1300.490823][T17765] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1300.528935][T17184] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1300.601305][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12102'.
[ 1300.651120][T17766] syz_tun: entered allmulticast mode
[ 1300.731388][T16422] batman_adv: batadv0: Removing interface: macvtap1
[ 1300.827978][T17760] syz_tun: left allmulticast mode
[ 1300.833467][ T1184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1300.876956][ T1184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.056725][ T1184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.083362][ T1184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1301.122245][T17796] netlink: 'syz.1.12105': attribute type 7 has an invalid length.
[ 1301.509128][T17790] lo speed is unknown, defaulting to 1000
[ 1301.626017][T17797] syzkaller0: entered promiscuous mode
[ 1301.637428][T17797] syzkaller0: entered allmulticast mode
[ 1301.662653][T17790] xfrm0 speed is unknown, defaulting to 1000
[ 1301.689835][T22539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1301.720098][T22539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1301.843375][T17815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1304.615797][T16422] hsr_slave_0: left promiscuous mode
[ 1304.624884][T16422] hsr_slave_1: left promiscuous mode
[ 1304.761103][T17829] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12116'.
[ 1304.778395][T17829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input52
[ 1304.940223][T17838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12117'.
[ 1305.049691][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12115'.
[ 1305.236470][T16433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1305.251674][T16433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1305.570945][T17857] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11973'.
[ 1305.661669][T17857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1305.739410][T17857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1305.779041][T17857] bond0 (unregistering): Released all slaves
[ 1305.870285][T16422] IPVS: stop unused estimator thread 0...
[ 1305.916183][T17790] lo speed is unknown, defaulting to 1000
[ 1306.065986][T30922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1306.081111][T30922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1306.090146][T30922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1306.100843][T30922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1306.117596][T30922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1306.147011][T17872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12127'.
[ 1306.297857][T17877] netlink: 'syz.3.12129': attribute type 2 has an invalid length.
[ 1306.324074][T17877] netlink: 'syz.3.12129': attribute type 1 has an invalid length.
[ 1306.327499][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12128'.
[ 1306.357694][T17877] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12129'.
[ 1306.467729][T17884] team0: No ports can be present during mode change
[ 1306.500983][T17884] tipc: Started in network mode
[ 1306.517974][T17884] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 1306.526074][T17884] tipc: Enabled bearer <eth:team0>, priority 0
[ 1306.538001][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12132'.
[ 1306.550015][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12131'.
[ 1306.632056][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12132'.
[ 1306.779453][T17892] ipvlan2: entered allmulticast mode
[ 1306.790401][T17898] netlink: 'syz.2.12133': attribute type 9 has an invalid length.
[ 1306.795066][T17892] gretap0: entered allmulticast mode
[ 1306.809940][T17898] netlink: 'syz.2.12133': attribute type 6 has an invalid length.
[ 1306.823182][T17896] ipt_ECN: cannot use operation on non-tcp rule
[ 1307.231400][T17869] lo speed is unknown, defaulting to 1000
[ 1307.251718][T17869] xfrm0 speed is unknown, defaulting to 1000
[ 1307.655314][ T7184] tipc: Node number set to 11578026
[ 1307.856602][T17929] Bluetooth: MGMT ver 1.23
[ 1308.184304][T30922] Bluetooth: hci1: command tx timeout
[ 1308.373572][T17926] team_slave_1: Caught tx_queue_len zero misconfig
[ 1308.486820][T17869] lo speed is unknown, defaulting to 1000
[ 1308.554261][ T1617] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1308.734795][ T1617] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1308.849886][T16418] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1309.221422][T17972] netlink: 'syz.3.12148': attribute type 10 has an invalid length.
[ 1309.296488][T17972] bond8: (slave dummy0): Releasing backup interface
[ 1309.347731][T17972] netlink: 'syz.3.12148': attribute type 10 has an invalid length.
[ 1309.404194][T17963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1309.447900][T17972] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1309.489473][T17869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.497462][T17869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1309.506161][T17869] bridge_slave_0: entered allmulticast mode
[ 1309.514343][T17869] bridge_slave_0: entered promiscuous mode
[ 1309.527716][T17869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1309.535354][T17869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1309.542625][T17869] bridge_slave_1: entered allmulticast mode
[ 1309.552305][T17869] bridge_slave_1: entered promiscuous mode
[ 1309.593146][T17869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1309.623147][T17869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1309.763268][T17869] team0: Port device team_slave_0 added
[ 1309.782125][T17995] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1309.799440][T17869] team0: Port device team_slave_1 added
[ 1309.820333][T17991] netlink: 'syz.3.12152': attribute type 1 has an invalid length.
[ 1309.901368][T17869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1309.909004][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1309.939846][T17869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1309.967502][T16418] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1309.987427][T16418] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1310.058726][T17869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1310.069097][T17869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1310.101626][T17869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1310.164217][T17993] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1310.264570][ T4952] Bluetooth: hci1: command tx timeout
[ 1310.361744][T17869] hsr_slave_0: entered promiscuous mode
[ 1310.379361][T17869] hsr_slave_1: entered promiscuous mode
[ 1310.402252][T17869] debugfs: 'hsr0' already exists in 'hsr'
[ 1310.418829][T17869] Cannot create hsr debugfs directory
[ 1310.467589][T18011] batman_adv: batadv0: Adding interface: macvtap0
[ 1310.489451][T18013] __nla_validate_parse: 3 callbacks suppressed
[ 1310.489470][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12157'.
[ 1310.524157][T18011] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1310.537217][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12158'.
[ 1310.582536][T18011] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 1310.843229][T18015] bond12: entered promiscuous mode
[ 1310.853893][T18015] bond12: entered allmulticast mode
[ 1310.951303][T18027] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12160'.
[ 1310.986157][ T5736] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1311.238339][T18025] batadv0: left promiscuous mode
[ 1311.293411][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1311.438752][T18025] vlan0: left promiscuous mode
[ 1311.584931][T18025] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1311.610954][T18025] syzkaller0: left promiscuous mode
[ 1311.635494][T18025] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1311.676379][T18025] bond6: left promiscuous mode
[ 1311.683206][T18025] veth5: left promiscuous mode
[ 1311.703464][T18025] tun0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1311.753180][T18025] mac80211_hwsim hwsim123 wlan0: entered promiscuous mode
[ 1311.790078][T18025] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1311.818232][T18043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12164'.
[ 1311.822037][T18025] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1311.832450][T18043] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1311.852161][T18043] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12164'.
[ 1311.856619][T18025] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1311.899229][T18025] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1311.918634][T18025] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1311.937942][T18025] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1311.991203][T18033] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12162'.
[ 1312.069952][T22539] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1312.310880][T18058] openvswitch: netlink: Geneve opt len 149 is not a multiple of 4.
[ 1312.344217][T30922] Bluetooth: hci1: command tx timeout
[ 1312.390388][T18061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12169'.
[ 1312.450419][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12169'.
[ 1312.622356][T18073] bridge_slave_0: left allmulticast mode
[ 1312.629092][T18073] bridge_slave_0: left promiscuous mode
[ 1312.639620][T18073] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1312.667548][T18073] bridge_slave_1: left allmulticast mode
[ 1312.676813][T18073] bridge_slave_1: left promiscuous mode
[ 1312.682609][T18073] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.693635][T18073] bond0: (slave bond_slave_0): Releasing backup interface
[ 1312.710049][T18073] bond0: (slave bond_slave_1): Releasing backup interface
[ 1312.723256][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1312.730997][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1312.740506][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1312.749224][T18073] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1312.758644][T18073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1312.862641][T18073] netlink: 'syz.1.12173': attribute type 3 has an invalid length.
[ 1312.873520][T18073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12173'.
[ 1312.931771][T18083] syzkaller0: entered promiscuous mode
[ 1312.937726][T18083] syzkaller0: entered allmulticast mode
[ 1313.449868][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12176'.
[ 1314.184244][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1314.424091][T30922] Bluetooth: hci1: command tx timeout
[ 1315.382645][T18064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1315.418924][T17869] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1315.461014][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1315.484740][T17869] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1315.507278][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1315.595599][T17869] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1315.611611][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1315.631277][T17869] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1315.667304][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1315.691298][T18121] __nla_validate_parse: 1 callbacks suppressed
[ 1315.691315][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12184'.
[ 1315.724809][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12184'.
[ 1315.748435][ T1184] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1315.759297][ T1184] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1315.785790][ T1184] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1315.801700][ T1184] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1315.919172][T17869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1315.960876][T17869] 8021q: adding VLAN 0 to HW filter on device team0
[ 1315.979269][T16426] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1315.986522][T16426] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1315.991093][T18133] netlink: 'syz.2.12186': attribute type 58 has an invalid length.
[ 1316.021683][T18137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12188'.
[ 1316.052935][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1316.060108][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1316.085867][T18133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12186'.
[ 1316.108751][T18133] netlink: 'syz.2.12186': attribute type 10 has an invalid length.
[ 1316.144570][T18133] bridge0: port 3(netdevsim1) entered blocking state
[ 1316.161683][T18133] bridge0: port 3(netdevsim1) entered disabled state
[ 1316.182303][T18133] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[ 1316.212726][T18133] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[ 1316.252610][T18143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12190'.
[ 1316.389348][T18140] netlink: 'syz.1.12189': attribute type 1 has an invalid length.
[ 1316.491445][T18144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12189'.
[ 1316.504643][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1316.603412][T18140] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1316.645463][T18144] bond1: entered promiscuous mode
[ 1316.661109][T18144] bond1: entered allmulticast mode
[ 1316.682655][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12196'.
[ 1316.748750][T18140] bond1: (slave dummy0): making interface the new active one
[ 1316.772493][T18140] dummy0: entered promiscuous mode
[ 1316.791593][T18140] dummy0: entered allmulticast mode
[ 1316.811488][T18140] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1316.884688][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12196'.
[ 1317.007354][T18172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12196'.
[ 1317.050591][T18196] FAULT_INJECTION: forcing a failure.
[ 1317.050591][T18196] name failslab, interval 1, probability 0, space 0, times 0
[ 1317.097201][T18196] CPU: 1 UID: 0 PID: 18196 Comm: syz.1.12201 Not tainted syzkaller #0 PREEMPT(full) 
[ 1317.097228][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1317.097240][T18196] Call Trace:
[ 1317.097248][T18196]  <TASK>
[ 1317.097256][T18196]  dump_stack_lvl+0xe8/0x150
[ 1317.097284][T18196]  should_fail_ex+0x412/0x560
[ 1317.097309][T18196]  should_failslab+0xa8/0x100
[ 1317.097329][T18196]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1317.097354][T18196]  ? __alloc_skb+0x186/0x7d0
[ 1317.097373][T18196]  ? __alloc_skb+0x1d0/0x7d0
[ 1317.097389][T18196]  ? __local_bh_enable_ip+0xd0/0x130
[ 1317.097413][T18196]  __alloc_skb+0x1d0/0x7d0
[ 1317.097437][T18196]  netlink_sendmsg+0x5d4/0xb40
[ 1317.097468][T18196]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1317.097493][T18196]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1317.097520][T18196]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1317.097547][T18196]  ____sys_sendmsg+0x972/0x9f0
[ 1317.097568][T18196]  ? __might_fault+0xaf/0x130
[ 1317.097596][T18196]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1317.097624][T18196]  ? import_iovec+0x73/0xa0
[ 1317.097649][T18196]  ___sys_sendmsg+0x2a5/0x360
[ 1317.097668][T18196]  ? __lock_acquire+0x6b5/0x2cf0
[ 1317.097692][T18196]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1317.097744][T18196]  ? __fget_files+0x2a/0x420
[ 1317.097766][T18196]  ? __fget_files+0x3a0/0x420
[ 1317.097800][T18196]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1317.097825][T18196]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1317.097855][T18196]  ? __pfx_ksys_write+0x10/0x10
[ 1317.097889][T18196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.097911][T18196]  do_syscall_64+0x174/0x580
[ 1317.097930][T18196]  ? trace_irq_disable+0x3b/0x140
[ 1317.097957][T18196]  ? clear_bhb_loop+0x40/0x90
[ 1317.097979][T18196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1317.097998][T18196] RIP: 0033:0x7f3ba0b9ce59
[ 1317.098016][T18196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1317.098032][T18196] RSP: 002b:00007f3ba1a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1317.098052][T18196] RAX: ffffffffffffffda RBX: 00007f3ba0e15fa0 RCX: 00007f3ba0b9ce59
[ 1317.098065][T18196] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003
[ 1317.098076][T18196] RBP: 00007f3ba1a07090 R08: 0000000000000000 R09: 0000000000000000
[ 1317.098087][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1317.098105][T18196] R13: 00007f3ba0e16038 R14: 00007f3ba0e15fa0 R15: 00007fff8f92fad8
[ 1317.098136][T18196]  </TASK>
[ 1317.358300][T18201] Cannot find add_set index 4 as target
[ 1317.466882][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12205'.
[ 1317.476010][T18206] netlink: 'syz.1.12205': attribute type 19 has an invalid length.
[ 1317.484641][T18206] netlink: 'syz.1.12205': attribute type 20 has an invalid length.
[ 1317.556434][T18211] tipc: Enabled bearer <ib:gre0>, priority 10
[ 1317.583558][T18211] netlink: 'syz.3.12204': attribute type 4 has an invalid length.
[ 1317.619761][T17869] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1317.825033][T18231] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1318.201824][T17869] veth0_vlan: entered promiscuous mode
[ 1318.227812][T17869] veth1_vlan: entered promiscuous mode
[ 1318.306796][T17869] veth0_macvtap: entered promiscuous mode
[ 1318.326320][T17869] veth1_macvtap: entered promiscuous mode
[ 1318.350393][T17869] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1318.370879][T17869] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1318.397622][T22539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.413064][T22539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.457775][T22539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.481583][T22539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.621149][T18260] syzkaller0: entered promiscuous mode
[ 1318.634335][T18260] syzkaller0: entered allmulticast mode
[ 1318.672436][T16443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1318.690009][T16443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1318.763246][T16443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1318.782109][T18263] 0: reclassify loop, rule prio 0, protocol 700
[ 1318.794707][T16443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1318.835809][T18263] x_tables: duplicate underflow at hook 1
[ 1319.325432][ T4952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1319.341819][ T4952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1319.350310][ T4952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1319.364840][ T4952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1319.372816][ T4952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1319.496824][T18280] xt_CT: No such helper "netbios-ns"
[ 1319.800379][T18293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1319.807827][T18293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1319.882673][T18293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1319.898481][T18293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1320.041525][T16421] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.071889][T16421] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.107834][T16421] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.125682][T16421] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.199390][T18281] lo speed is unknown, defaulting to 1000
[ 1320.314486][T16421] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1320.325232][T16421] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.358205][T18281] xfrm0 speed is unknown, defaulting to 1000
[ 1320.369560][T18305] lo speed is unknown, defaulting to 1000
[ 1320.618470][T16421] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1320.633296][T16421] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.856356][T16421] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1320.869984][T16421] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1320.915757][T18305] xfrm0 speed is unknown, defaulting to 1000
[ 1320.952950][T18320] __nla_validate_parse: 2 callbacks suppressed
[ 1320.952970][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12229'.
[ 1321.060478][T18329] bond0: option primary_reselect: invalid value (6)
[ 1321.107726][T18329] bond0 (unregistering): Released all slaves
[ 1321.241563][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12238'.
[ 1321.367431][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12239'.
[ 1321.399998][T16421] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1321.412409][T16421] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.451545][T18338] bridge1: entered promiscuous mode
[ 1321.473920][ T4952] Bluetooth: hci5: command tx timeout
[ 1321.482665][T18338] bridge1: entered allmulticast mode
[ 1321.500272][T18338] team0: Port device bridge1 added
[ 1321.564857][T18281] lo speed is unknown, defaulting to 1000
[ 1321.798348][T18360] Cannot find add_set index 0 as target
[ 1321.842468][T18359] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1321.885392][T18359] bond1 (unregistering): Released all slaves
[ 1322.067873][T18305] lo speed is unknown, defaulting to 1000
[ 1322.271836][T18373] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12248'.
[ 1322.302526][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12248'.
[ 1322.313216][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12248'.
[ 1322.428111][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1323.543863][ T4952] Bluetooth: hci5: command tx timeout
[ 1324.969252][T16421] bond7: left allmulticast mode
[ 1324.998154][T16421] bond7: left promiscuous mode
[ 1325.016902][T16421] bridge0: port 1(bond7) entered disabled state
[ 1325.117231][T16421] tipc: Resetting bearer <ib:gre0>
[ 1325.130293][T16421] tipc: Resetting bearer <eth:syzkaller0>
[ 1325.583476][T16421] bond9 (unregistering): (slave gretap4): Releasing backup interface
[ 1325.599949][T16421] tipc: Disabling bearer <ib:gre0>
[ 1325.627023][ T4952] Bluetooth: hci5: command tx timeout
[ 1325.689431][T16421] tipc: Disabling bearer <eth:syzkaller0>
[ 1325.761515][T16421] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1325.780953][T16421] bond0 (unregistering): Released all slaves
[ 1325.792012][T16421] bond1 (unregistering): Released all slaves
[ 1325.807954][T16421] bond2 (unregistering): Released all slaves
[ 1325.822462][T16421] bond3 (unregistering): Released all slaves
[ 1325.837381][T16421] bond4 (unregistering): Released all slaves
[ 1325.853345][T16421] bond5 (unregistering): Released all slaves
[ 1325.871521][T16421] bond6 (unregistering): (slave veth5): Releasing backup interface
[ 1325.900622][T16421] bond6 (unregistering): Released all slaves
[ 1325.915271][T16421] bond7 (unregistering): Released all slaves
[ 1325.929548][T16421] bond8 (unregistering): Released all slaves
[ 1325.945841][T16421] bond9 (unregistering): (slave bond10): Releasing backup interface
[ 1325.955328][T16421] bond9 (unregistering): Released all slaves
[ 1325.972764][T16421] bond10 (unregistering): Released all slaves
[ 1325.989047][T16421] bond11 (unregistering): Released all slaves
[ 1326.003359][T16421] bond12 (unregistering): Released all slaves
[ 1326.042633][T18390] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1326.063612][T18390] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1326.104550][T18400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1326.439248][T16421] tipc: Left network mode
[ 1326.500249][T18417] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12257'.
[ 1326.512109][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12257'.
[ 1326.568438][T18419] netlink: 'syz.2.12257': attribute type 1 has an invalid length.
[ 1326.573892][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12257'.
[ 1326.598172][T18419] netlink: 'syz.2.12257': attribute type 2 has an invalid length.
[ 1326.622940][T18419] netlink: 'syz.2.12257': attribute type 1 has an invalid length.
[ 1326.635962][T18419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12257'.
[ 1326.653578][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12258'.
[ 1327.287529][T18440] GUP no longer grows the stack in syz.2.12261 (18440): 200000003000-20000000a000 (200000001000)
[ 1327.341109][T18440] CPU: 0 UID: 0 PID: 18440 Comm: syz.2.12261 Not tainted syzkaller #0 PREEMPT(full) 
[ 1327.341133][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1327.341144][T18440] Call Trace:
[ 1327.341152][T18440]  <TASK>
[ 1327.341160][T18440]  dump_stack_lvl+0xe8/0x150
[ 1327.341185][T18440]  __get_user_pages+0x2378/0x2730
[ 1327.341229][T18440]  ? __gup_longterm_locked+0xc4e/0x1630
[ 1327.341252][T18440]  ? down_read_killable+0x1bb/0x340
[ 1327.341277][T18440]  __gup_longterm_locked+0xdcf/0x1630
[ 1327.341303][T18440]  ? lock_acquire+0x106/0x350
[ 1327.341338][T18440]  gup_fast_fallback+0x1d84/0x20d0
[ 1327.341391][T18440]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 1327.341415][T18440]  ? is_valid_gup_args+0x11f/0x200
[ 1327.341455][T18440]  ? get_user_pages_fast+0x4d/0xb0
[ 1327.341479][T18440]  __iov_iter_get_pages_alloc+0x370/0xa10
[ 1327.341507][T18440]  ? __pfx_pipe_clear_nowait+0x10/0x10
[ 1327.341536][T18440]  iov_iter_get_pages2+0x5e/0xa0
[ 1327.341559][T18440]  __se_sys_vmsplice+0x7c7/0x1620
[ 1327.341601][T18440]  ? __pfx___se_sys_vmsplice+0x10/0x10
[ 1327.341625][T18440]  ? __pfx_futex_wait+0x10/0x10
[ 1327.341715][T18440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.341736][T18440]  do_syscall_64+0x174/0x580
[ 1327.341755][T18440]  ? trace_irq_disable+0x3b/0x140
[ 1327.341781][T18440]  ? clear_bhb_loop+0x40/0x90
[ 1327.341803][T18440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.341821][T18440] RIP: 0033:0x7f19be99ce59
[ 1327.341839][T18440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1327.341855][T18440] RSP: 002b:00007f19bf873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1327.341875][T18440] RAX: ffffffffffffffda RBX: 00007f19bec16090 RCX: 00007f19be99ce59
[ 1327.341889][T18440] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000004a
[ 1327.341901][T18440] RBP: 00007f19bea32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1327.341912][T18440] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1327.341924][T18440] R13: 00007f19bec16128 R14: 00007f19bec16090 R15: 00007ffe7d24b498
[ 1327.341954][T18440]  </TASK>
[ 1327.704905][ T4952] Bluetooth: hci5: command tx timeout
[ 1327.787335][T18457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12264'.
[ 1327.866911][T18457] hsr0: entered promiscuous mode
[ 1327.975554][T18461] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[ 1328.015832][T18461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12265'.
[ 1328.093364][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1328.118894][T18281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1328.142800][T18281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1328.151562][T18281] bridge_slave_0: entered allmulticast mode
[ 1328.159865][T18281] bridge_slave_0: entered promiscuous mode
[ 1328.170221][T18281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1328.187953][T18281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1328.195689][T18281] bridge_slave_1: entered allmulticast mode
[ 1328.203593][T18281] bridge_slave_1: entered promiscuous mode
[ 1328.246590][T18466] lo speed is unknown, defaulting to 1000
[ 1328.285979][T18466] xfrm0 speed is unknown, defaulting to 1000
[ 1328.353028][T18281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1328.404678][T18281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1328.430730][T18479] netlink: 'syz.0.12268': attribute type 2 has an invalid length.
[ 1328.459086][T18479] netlink: 'syz.0.12268': attribute type 2 has an invalid length.
[ 1328.518133][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12270'.
[ 1328.544181][T18281] team0: Port device team_slave_0 added
[ 1328.585757][T18281] team0: Port device team_slave_1 added
[ 1328.799574][T18281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1328.836640][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1328.891965][ T4952] block nbd6: Receive control failed (result -104)
[ 1328.933869][T18281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1328.983214][T18281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1329.027421][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1329.122426][T18281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1329.242192][T18503] netlink: 'syz.2.12273': attribute type 27 has an invalid length.
[ 1329.475136][T18281] hsr_slave_0: entered promiscuous mode
[ 1329.488551][T18281] hsr_slave_1: entered promiscuous mode
[ 1329.568141][T18281] debugfs: 'hsr0' already exists in 'hsr'
[ 1329.592772][T18281] Cannot create hsr debugfs directory
[ 1329.625950][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1330.018236][T18466] lo speed is unknown, defaulting to 1000
[ 1330.363173][T18532] hsr0: left promiscuous mode
[ 1330.483064][T18536] syzkaller0: entered promiscuous mode
[ 1330.499478][T18536] syzkaller0: entered allmulticast mode
[ 1330.508428][T18541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12281'.
[ 1330.676289][T16421] hsr_slave_0: left promiscuous mode
[ 1330.689771][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12280'.
[ 1330.700769][T16421] veth1_macvtap: left promiscuous mode
[ 1330.712373][T16421] veth0_macvtap: left allmulticast mode
[ 1330.725679][T16421] veth0_macvtap: left promiscuous mode
[ 1330.731415][T16421] veth1_vlan: left promiscuous mode
[ 1330.737560][T16421] veth0_vlan: left promiscuous mode
[ 1331.297049][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1331.630569][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12285'.
[ 1332.328250][T18580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12288'.
[ 1332.508741][T16421] IPVS: stop unused estimator thread 0...
[ 1332.546319][T18589] lo speed is unknown, defaulting to 1000
[ 1332.571588][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12288'.
[ 1332.598908][T18589] xfrm0 speed is unknown, defaulting to 1000
[ 1332.619897][T18580] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12288'.
[ 1332.743079][T18580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12288'.
[ 1332.763844][T16422] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1332.791711][T18580] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12288'.
[ 1332.798252][T16422] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1332.972516][T16422] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.015870][T16422] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1333.058229][T18607] xfrm1: entered allmulticast mode
[ 1333.558538][T18281] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1333.572743][T18281] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1333.588819][T18281] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1333.631131][T18281] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1333.649403][T18640] netlink: 39 bytes leftover after parsing attributes in process `syz.4.12299'.
[ 1333.655074][T18281] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1333.684754][T18281] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1333.756437][T18281] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1333.778652][T18281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1333.903063][T18589] lo speed is unknown, defaulting to 1000
[ 1334.157329][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12301'.
[ 1334.193662][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12301'.
[ 1334.386830][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12302'.
[ 1334.421487][T18281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1334.481556][T18281] 8021q: adding VLAN 0 to HW filter on device team0
[ 1334.532335][T16422] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1334.539959][T16422] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1334.591849][T16418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1334.599007][T16418] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1335.013311][T18689] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1335.019839][T18689] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1335.213192][T18696] syzkaller1: entered promiscuous mode
[ 1335.237503][T18696] syzkaller1: entered allmulticast mode
[ 1335.555567][T18715] netlink: 'syz.1.12309': attribute type 2 has an invalid length.
[ 1335.765707][T18696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1335.779429][T18696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.088206][T18696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.122090][T18696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.332871][T18696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.370389][T18696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.591997][T18696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1336.611010][T18696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.773487][T18762] tipc: Resetting bearer <eth:team0>
[ 1336.808545][T18762] tipc: Disabling bearer <eth:team0>
[ 1336.835172][T18762] team0 (unregistering): Port device team_slave_0 removed
[ 1336.875074][T18762] team0 (unregistering): Port device team_slave_1 removed
[ 1336.918242][T18281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1337.080176][T16433] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1337.102783][T16433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.119542][T18768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12318'.
[ 1337.207435][T16433] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1337.227519][T16433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.230708][T18753] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1337.382383][T22539] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1337.392088][T22539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.420515][T22539] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1337.435424][T22539] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1337.602091][T18281] veth0_vlan: entered promiscuous mode
[ 1337.662155][T18281] veth1_vlan: entered promiscuous mode
[ 1337.706383][T18788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1337.732926][T18788] syzkaller0: entered promiscuous mode
[ 1337.753516][T18788] syzkaller0: entered allmulticast mode
[ 1337.788353][T18788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1337.894863][T18788] tipc: Resetting bearer <eth:syzkaller0>
[ 1337.913574][T18788] xt_HMARK: spi-set and port-set can't be combined
[ 1337.932447][T18786] tipc: Resetting bearer <eth:syzkaller0>
[ 1338.001856][T18786] tipc: Disabling bearer <eth:syzkaller0>
[ 1338.043207][T18281] veth0_macvtap: entered promiscuous mode
[ 1338.077486][T18281] veth1_macvtap: entered promiscuous mode
[ 1338.155851][T18281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1338.202432][T18281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1338.241352][T22539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.271996][T22539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.308226][T22539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.332402][T22539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1338.368682][T18827] netlink: 'syz.0.12331': attribute type 11 has an invalid length.
[ 1338.379280][T18825] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12330'.
[ 1338.400576][T18825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12330'.
[ 1338.600143][T16433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1338.632709][T16433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.064015][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1339.098217][T16421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1339.136378][T16421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1339.289096][T18856] tc_dump_action: action bad kind
[ 1339.535562][T18868] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1339.612757][T18871] netlink: 'syz.2.12340': attribute type 14 has an invalid length.
[ 1339.640852][T18873] netlink: 840 bytes leftover after parsing attributes in process `syz.1.12338'.
[ 1339.747959][T18869] lo speed is unknown, defaulting to 1000
[ 1339.788182][T18869] xfrm0 speed is unknown, defaulting to 1000
[ 1340.118336][T18883] bridge0: port 1(vlan0) entered blocking state
[ 1340.126868][T30922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1340.143284][T30922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1340.156016][T30922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1340.167726][T30922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1340.170293][T18883] bridge0: port 1(vlan0) entered disabled state
[ 1340.191978][T30922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1340.261161][T18883] vlan0: entered allmulticast mode
[ 1340.283010][T18883] geneve0: entered allmulticast mode
[ 1340.323601][T18883] vlan0: entered promiscuous mode
[ 1340.352350][T18883] geneve0: entered promiscuous mode
[ 1340.882135][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12344'.
[ 1340.926199][T18905] lo speed is unknown, defaulting to 1000
[ 1340.953942][T18908] netlink: 'syz.4.12344': attribute type 30 has an invalid length.
[ 1340.966038][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12344'.
[ 1341.015150][T18898] netlink: 'syz.4.12344': attribute type 30 has an invalid length.
[ 1341.050734][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12347'.
[ 1341.061877][T16426] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1341.083393][T16426] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1341.095638][T18919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12347'.
[ 1341.123131][T16426] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1341.162437][T16426] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1341.246866][T18928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12348'.
[ 1341.319167][T18905] xfrm0 speed is unknown, defaulting to 1000
[ 1341.409297][T18885] lo speed is unknown, defaulting to 1000
[ 1341.850783][T18885] xfrm0 speed is unknown, defaulting to 1000
[ 1341.892482][T18869] lo speed is unknown, defaulting to 1000
[ 1342.190251][T18955] ipt_rpfilter: unknown options
[ 1342.266517][ T4952] Bluetooth: hci2: command tx timeout
[ 1342.512626][T18905] lo speed is unknown, defaulting to 1000
[ 1342.712832][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12354'.
[ 1343.235141][T18985] pim6reg: entered allmulticast mode
[ 1343.252994][T18885] lo speed is unknown, defaulting to 1000
[ 1343.278826][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12358'.
[ 1344.139044][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12363'.
[ 1344.344872][ T4952] Bluetooth: hci2: command tx timeout
[ 1344.529226][T19027] netlink: 'syz.2.12363': attribute type 1 has an invalid length.
[ 1344.559571][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12364'.
[ 1344.576428][T19027] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12363'.
[ 1344.705971][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12366'.
[ 1344.868270][T19053] x_tables: duplicate underflow at hook 1
[ 1344.911284][T18885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1344.935682][T18885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1344.958602][T18885] bridge_slave_0: entered allmulticast mode
[ 1344.975772][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12369'.
[ 1344.985699][T18885] bridge_slave_0: entered promiscuous mode
[ 1345.010801][T18885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1345.030322][T18885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.044325][T18885] bridge_slave_1: entered allmulticast mode
[ 1345.052627][T18885] bridge_slave_1: entered promiscuous mode
[ 1345.063208][T19059] syzkaller1: entered promiscuous mode
[ 1345.070288][T19059] syzkaller1: entered allmulticast mode
[ 1345.095520][T19069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12372'.
[ 1345.131970][T18885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1345.146974][T18885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1345.216482][T18885] team0: Port device team_slave_0 added
[ 1345.271345][T18885] team0: Port device team_slave_1 added
[ 1345.310693][T18885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1345.318031][T18885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1345.344866][T18885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1345.360329][T18885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1345.369713][T18885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1345.399164][T18885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1345.462930][T18885] hsr_slave_0: entered promiscuous mode
[ 1345.479625][T18885] hsr_slave_1: entered promiscuous mode
[ 1345.486469][T18885] debugfs: 'hsr0' already exists in 'hsr'
[ 1345.492214][T18885] Cannot create hsr debugfs directory
[ 1345.530291][T19081] batadv0: entered promiscuous mode
[ 1345.613430][T18885] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1345.625014][T18885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.735845][T18885] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1345.746497][T18885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.814777][T18885] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1345.826043][T18885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.911729][T18885] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1345.921673][T18885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.424024][ T4952] Bluetooth: hci2: command tx timeout
[ 1347.933425][T19061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1347.946293][T19071] netlink: 'syz.3.12370': attribute type 4 has an invalid length.
[ 1348.097571][T19086] netlink: 'syz.2.12376': attribute type 21 has an invalid length.
[ 1348.163347][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12376'.
[ 1348.237656][T19092] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1348.506519][ T4952] Bluetooth: hci2: command tx timeout
[ 1348.661186][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12383'.
[ 1348.936566][T19086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12376'.
[ 1348.977438][T19107] geneve2: entered promiscuous mode
[ 1349.288246][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12388'.
[ 1349.438587][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12388'.
[ 1349.469674][T19128] pim6reg1: entered promiscuous mode
[ 1349.480487][T19128] pim6reg1: entered allmulticast mode
[ 1349.553266][T19133] lo: entered allmulticast mode
[ 1349.612778][T19133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1349.637678][T18885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1349.778873][T18885] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1349.881414][T19141] bridge2: entered promiscuous mode
[ 1349.903911][T19141] bridge2: entered allmulticast mode
[ 1349.938344][T18885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1349.979147][T18885] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1349.996788][T18885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1350.031811][T18885] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1350.073240][T18885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1350.090653][T19152] netlink: 'syz.2.12396': attribute type 1 has an invalid length.
[ 1350.093275][T18885] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1350.107530][T19152] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12396'.
[ 1350.130732][T19149] lo speed is unknown, defaulting to 1000
[ 1350.141032][T19149] xfrm0 speed is unknown, defaulting to 1000
[ 1350.349658][T18885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.403136][T18885] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.431980][T16418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.439166][T16418] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.473536][T16426] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.480776][T16426] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.704865][T19170] netlink: 'syz.1.12400': attribute type 1 has an invalid length.
[ 1350.823340][T19170] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1350.939833][T19179] bond2: (slave geneve2): making interface the new active one
[ 1350.957799][T19179] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1351.008737][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12402'.
[ 1351.062047][T19149] lo speed is unknown, defaulting to 1000
[ 1351.640456][T19216] netlink: 'syz.2.12410': attribute type 1 has an invalid length.
[ 1351.822613][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12412'.
[ 1351.916499][T19216] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1351.960784][T18885] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1352.030935][T19226] bond0: (slave dummy0): making interface the new active one
[ 1352.047399][T19226] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1352.203265][T18885] veth0_vlan: entered promiscuous mode
[ 1352.248568][T18885] veth1_vlan: entered promiscuous mode
[ 1352.338998][T18885] veth0_macvtap: entered promiscuous mode
[ 1352.371085][T18885] veth1_macvtap: entered promiscuous mode
[ 1352.378106][T19240] netlink: set zone limit has 4 unknown bytes
[ 1352.446340][T18885] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1352.482639][T19247] netlink: 'syz.4.12417': attribute type 2 has an invalid length.
[ 1352.498519][T18885] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1352.510083][T19247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12417'.
[ 1352.567155][T22539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.597092][T22539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.620455][T22539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.662439][T22539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1352.817207][T19265] netlink: 'syz.3.12423': attribute type 1 has an invalid length.
[ 1352.881885][T19265] netlink: 'syz.3.12423': attribute type 2 has an invalid length.
[ 1352.913142][T19269] lo: left allmulticast mode
[ 1352.923412][T19265] netlink: 'syz.3.12423': attribute type 1 has an invalid length.
[ 1352.956707][T19265] netlink: 'syz.3.12423': attribute type 2 has an invalid length.
[ 1352.976363][T22539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1352.998641][T22539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.106213][T19273] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1353.386263][T30922] Bluetooth: hci2: command 0x0405 tx timeout
[ 1353.469224][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.501531][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.919339][T19321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12432'.
[ 1354.225335][T19333] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20009
[ 1354.263489][T19335] team0 (unregistering): Port device team_slave_0 removed
[ 1354.286131][T19335] team0 (unregistering): Port device team_slave_1 removed
[ 1354.318408][T19335] team0 (unregistering): Port device bridge1 removed
[ 1354.379568][T19345] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1354.432485][T19342] netlink: 'syz.2.12440': attribute type 1 has an invalid length.
[ 1354.499230][T19342] netlink: 'syz.2.12440': attribute type 1 has an invalid length.
[ 1354.912900][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12450'.
[ 1354.926442][T19376] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1355.029710][T19376] netlink: 'syz.4.12449': attribute type 1 has an invalid length.
[ 1355.092445][T19383] netlink: 136 bytes leftover after parsing attributes in process `syz.2.12454'.
[ 1355.106696][T19382] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[ 1355.131295][T19383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12454'.
[ 1355.178296][T19383] netlink: 'syz.2.12454': attribute type 3 has an invalid length.
[ 1355.209187][T19383] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12454'.
[ 1355.560730][T19391] xt_CT: No such helper "snmp_trap"
[ 1355.882529][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12462'.
[ 1355.902206][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12462'.
[ 1355.952889][T19415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12464'.
[ 1356.044343][T19417] netlink: 240 bytes leftover after parsing attributes in process `syz.2.12465'.
[ 1356.071263][T19417] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12465'.
[ 1356.101113][T19421] block nbd7: Unsupported socket: should be TCP or UNIX.
[ 1356.196842][T19421] bond2: entered allmulticast mode
[ 1356.257104][T19426] ipip0: entered promiscuous mode
[ 1356.266476][T19426] ipip0: entered allmulticast mode
[ 1356.275988][T19426] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[ 1356.287727][T19426] bond2: (slave ipip0): Error -95 calling set_mac_address
[ 1356.861870][T19463] netlink: 'syz.4.12479': attribute type 1 has an invalid length.
[ 1356.871204][T19465] netlink: 'syz.1.12478': attribute type 1 has an invalid length.
[ 1357.002574][T19471] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1357.022972][T19475] sctp: [Deprecated]: syz.2.12481 (pid 19475) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1357.022972][T19475] Use struct sctp_sack_info instead
[ 1357.132211][T19476] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1357.165696][T19476] syzkaller1: Refused to change device type
[ 1357.209081][T19471] 8021q: VLANs not supported on ip6gre0
[ 1357.682195][T19517] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003
[ 1357.699509][   T30] audit: type=1107 audit(1780647641.974:51): pid=19516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='X2Üó‘WµŒ]ˆƒÅÏEYƤW:*”¼<°»±bí�3z{\ÆÑÏ…OW˜
d_k›8ÛZmwÇ!	âLQçCí ®æòç·
ô±.%£b^¦è°
[ 1357.699509][   T30] ämAH@¤	Ñú‰È¤A3FvçA©fÖ­@í¡øJ*çä)û=L÷E“A,¹‡T±ÜÎGrÆ¥ù�£¿Ù+_ªÀËË•UnˆD	ÖŒñçßx¨äÖš×<:uKþ8³ºçZžÖ9þ¤C¾?‚s$®aFŸ­Š‡6ÙºY}z'
[ 1357.953067][T16421] lo: left allmulticast mode
[ 1357.972997][T16421] dvmrp8: left allmulticast mode
[ 1358.875777][T16421] bond4 (unregistering): (slave gretap1): Releasing active interface
[ 1358.998487][T16421] bond5 (unregistering): (slave gretap2): Releasing active interface
[ 1359.450822][T16421] bond0 (unregistering): Released all slaves
[ 1359.476711][T16421] bond1 (unregistering): Released all slaves
[ 1359.502665][T16421] bond2 (unregistering): Released all slaves
[ 1359.531800][T16421] bond3 (unregistering): Released all slaves
[ 1359.560241][T16421] bond4 (unregistering): Released all slaves
[ 1359.590520][T16421] bond5 (unregistering): Released all slaves
[ 1359.623426][T16421] bond6 (unregistering): (slave veth7): Releasing active interface
[ 1359.641776][T16421] bond6 (unregistering): Released all slaves
[ 1359.671955][T16421] bond7 (unregistering): (slave vlan5): Releasing active interface
[ 1359.691082][T16421] bond7 (unregistering): Released all slaves
[ 1359.720455][T16421] bond8 (unregistering): Released all slaves
[ 1359.750835][T16421] bond9 (unregistering): Released all slaves
[ 1359.772037][T16421] bond10 (unregistering): Released all slaves
[ 1359.841815][T16421] bond11 (unregistering): Released all slaves
[ 1359.885095][T16421] bond12 (unregistering): Released all slaves
[ 1360.248283][T19544] __nla_validate_parse: 9 callbacks suppressed
[ 1360.248302][T19544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12497'.
[ 1360.319980][T16421] tipc: Left network mode
[ 1360.410093][T19496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1360.442040][T19529] netlink: 840 bytes leftover after parsing attributes in process `syz.0.12495'.
[ 1360.958485][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12502'.
[ 1361.848137][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12503'.
[ 1361.886220][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12503'.
[ 1362.020885][T19578] bond1: (slave dummy0): Releasing active interface
[ 1362.059678][T19578] dummy0: left promiscuous mode
[ 1362.118429][T19578] dummy0: left allmulticast mode
[ 1362.145531][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12506'.
[ 1362.426573][T19578] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1362.528897][T19584] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1363.665906][T19607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12513'.
[ 1364.496925][T19622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12517'.
[ 1364.537934][T16421] hsr_slave_0: left promiscuous mode
[ 1364.577658][T16421] hsr_slave_1: left promiscuous mode
[ 1364.611060][T16421] veth1_to_batadv: left promiscuous mode
[ 1364.652092][T16421] veth1_vlan: left promiscuous mode
[ 1364.679339][T16421] veth0_vlan: left promiscuous mode
[ 1364.949721][T16421] pim6reg (unregistering): left allmulticast mode
[ 1365.706634][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12522'.
[ 1365.999300][T19661] dvmrp0: entered allmulticast mode
[ 1366.080066][T19657] lo speed is unknown, defaulting to 1000
[ 1366.120402][T19664] syzkaller1: entered promiscuous mode
[ 1366.146207][T19664] syzkaller1: entered allmulticast mode
[ 1366.180081][T19657] xfrm0 speed is unknown, defaulting to 1000
[ 1366.246003][T16421] IPVS: stop unused estimator thread 0...
[ 1366.284684][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12528'.
[ 1366.433093][T19672] netlink: 'syz.0.12530': attribute type 39 has an invalid length.
[ 1366.550888][T19682] tipc: Enabled bearer <udp:syz2>, priority 5
[ 1366.583927][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1366.726039][T19696] netlink: 'syz.3.12533': attribute type 1 has an invalid length.
[ 1366.745598][T30922] Bluetooth: hci2: command 0x0405 tx timeout
[ 1366.763269][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12536'.
[ 1366.959719][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12538'.
[ 1367.134357][T19710] IPv6: sit1: Disabled Multicast RS
[ 1367.195635][T19657] lo speed is unknown, defaulting to 1000
[ 1367.653844][ T5736] tipc: Node number set to 2242008417
[ 1367.784676][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12544'.
[ 1367.915480][T19725] team0: Port device team_slave_0 removed
[ 1368.139127][T19731] netlink: 'syz.3.12546': attribute type 12 has an invalid length.
[ 1368.186069][T19731] netlink: 'syz.3.12546': attribute type 1 has an invalid length.
[ 1368.366815][T19731] bond3 (unregistering): Released all slaves
[ 1368.426148][T19745] netlink: 'syz.0.12549': attribute type 1 has an invalid length.
[ 1368.469760][T19745] bond1: entered promiscuous mode
[ 1368.479836][T19745] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1368.482011][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12549'.
[ 1368.771476][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12553'.
[ 1368.952488][T19774] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12559'.
[ 1369.175147][T19787] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1369.209626][T19786] netlink: 'syz.4.12560': attribute type 4 has an invalid length.
[ 1369.238352][T19787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1369.280831][T19789] netlink: 'syz.4.12560': attribute type 4 has an invalid length.
[ 1369.317114][T19772] gtp0: entered promiscuous mode
[ 1369.331598][T19772] gtp0: entered allmulticast mode
[ 1370.059488][T19782] lo speed is unknown, defaulting to 1000
[ 1370.077881][T19782] xfrm0 speed is unknown, defaulting to 1000
[ 1370.563831][T19803] 
[ 1370.566219][T19803] ======================================================
[ 1370.573241][T19803] WARNING: possible circular locking dependency detected
[ 1370.580287][T19803] syzkaller #0 Not tainted
[ 1370.584715][T19803] ------------------------------------------------------
[ 1370.591733][T19803] syz.4.12565/19803 is trying to acquire lock:
[ 1370.597889][T19803] ffff888027738ed8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[ 1370.607315][T19803] 
[ 1370.607315][T19803] but task is already holding lock:
[ 1370.614686][T19803] ffff8880277389b0 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1370.624884][T19803] 
[ 1370.624884][T19803] which lock already depends on the new lock.
[ 1370.624884][T19803] 
[ 1370.635279][T19803] 
[ 1370.635279][T19803] the existing dependency chain (in reverse order) is:
[ 1370.644322][T19803] 
[ 1370.644322][T19803] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}:
[ 1370.652924][T19803]        blk_alloc_queue+0x546/0x680
[ 1370.658211][T19803]        __blk_mq_alloc_disk+0x197/0x390
[ 1370.663850][T19803]        nbd_dev_add+0x499/0xb50
[ 1370.668794][T19803]        nbd_init+0x168/0x1f0
[ 1370.673467][T19803]        do_one_initcall+0x250/0x870
[ 1370.678742][T19803]        do_initcall_level+0x104/0x190
[ 1370.684192][T19803]        do_initcalls+0x59/0xa0
[ 1370.689027][T19803]        kernel_init_freeable+0x2a6/0x3e0
[ 1370.694730][T19803]        kernel_init+0x1d/0x1d0
[ 1370.699579][T19803]        ret_from_fork+0x514/0xb70
[ 1370.704685][T19803]        ret_from_fork_asm+0x1a/0x30
[ 1370.709957][T19803] 
[ 1370.709957][T19803] -> #5 (fs_reclaim){+.+.}-{0:0}:
[ 1370.717157][T19803]        fs_reclaim_acquire+0x71/0x100
[ 1370.722610][T19803]        kmem_cache_alloc_node_noprof+0x4a/0x690
[ 1370.728924][T19803]        __alloc_skb+0x1d0/0x7d0
[ 1370.733847][T19803]        __ip6_append_data+0x2d3c/0x3f60
[ 1370.739472][T19803]        ip6_append_data+0x10f/0x280
[ 1370.744747][T19803]        rawv6_sendmsg+0x12d3/0x18e0
[ 1370.750024][T19803]        ____sys_sendmsg+0x80a/0x9f0
[ 1370.755292][T19803]        ___sys_sendmsg+0x2a5/0x360
[ 1370.760479][T19803]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1370.765935][T19803]        do_syscall_64+0x174/0x580
[ 1370.771037][T19803]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.777439][T19803] 
[ 1370.777439][T19803] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1370.785159][T19803]        lock_sock_nested+0x41/0x100
[ 1370.790438][T19803]        inet_shutdown+0x6a/0x390
[ 1370.795445][T19803]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1370.801070][T19803]        recv_work+0x1c2e/0x1d40
[ 1370.805987][T19803]        process_scheduled_works+0xb5d/0x1860
[ 1370.812037][T19803]        worker_thread+0xa53/0xfc0
[ 1370.817131][T19803]        kthread+0x389/0x470
[ 1370.821707][T19803]        ret_from_fork+0x514/0xb70
[ 1370.826802][T19803]        ret_from_fork_asm+0x1a/0x30
[ 1370.832074][T19803] 
[ 1370.832074][T19803] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1370.839703][T19803]        __mutex_lock+0x1a3/0x1550
[ 1370.844800][T19803]        nbd_queue_rq+0x37b/0x1100
[ 1370.849899][T19803]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1370.855953][T19803]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1370.862803][T19803]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1370.869306][T19803]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1370.874929][T19803]        blk_mq_dispatch_list+0xd16/0xe10
[ 1370.880637][T19803]        blk_mq_flush_plug_list+0x48d/0x570
[ 1370.886520][T19803]        __blk_flush_plug+0x3ed/0x4d0
[ 1370.891883][T19803]        __submit_bio+0x28d/0x580
[ 1370.896898][T19803]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1370.903037][T19803]        block_read_full_folio+0x7b7/0x830
[ 1370.908832][T19803]        filemap_read_folio+0x137/0x3b0
[ 1370.914545][T19803]        do_read_cache_folio+0x358/0x590
[ 1370.920172][T19803]        read_part_sector+0xb6/0x2b0
[ 1370.925441][T19803]        adfspart_check_ICS+0xb1/0x960
[ 1370.930891][T19803]        bdev_disk_changed+0x817/0x1770
[ 1370.936430][T19803]        blkdev_get_whole+0x380/0x510
[ 1370.941786][T19803]        bdev_open+0x31e/0xd30
[ 1370.946535][T19803]        blkdev_open+0x470/0x610
[ 1370.951467][T19803]        do_dentry_open+0x822/0x13a0
[ 1370.956752][T19803]        vfs_open+0x3b/0x340
[ 1370.961372][T19803]        path_openat+0x2e08/0x3860
[ 1370.966543][T19803]        do_file_open+0x23e/0x4a0
[ 1370.971588][T19803]        do_sys_openat2+0x113/0x200
[ 1370.977134][T19803]        __x64_sys_openat+0x138/0x170
[ 1370.982513][T19803]        do_syscall_64+0x174/0x580
[ 1370.987643][T19803]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.994072][T19803] 
[ 1370.994072][T19803] -> #2 (&cmd->lock){+.+.}-{4:4}:
[ 1371.001290][T19803]        __mutex_lock+0x1a3/0x1550
[ 1371.006409][T19803]        nbd_queue_rq+0xc6/0x1100
[ 1371.011431][T19803]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1371.017492][T19803]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1371.024343][T19803]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1371.030857][T19803]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1371.036494][T19803]        blk_mq_dispatch_list+0xd16/0xe10
[ 1371.042219][T19803]        blk_mq_flush_plug_list+0x48d/0x570
[ 1371.048130][T19803]        __blk_flush_plug+0x3ed/0x4d0
[ 1371.053499][T19803]        __submit_bio+0x28d/0x580
[ 1371.058516][T19803]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1371.064309][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[ 1371.064660][T19803]        block_read_full_folio+0x7b7/0x830
[ 1371.078160][T19803]        filemap_read_folio+0x137/0x3b0
[ 1371.083722][T19803]        do_read_cache_folio+0x358/0x590
[ 1371.089372][T19803]        read_part_sector+0xb6/0x2b0
[ 1371.094656][T19803]        adfspart_check_ICS+0xb1/0x960
[ 1371.100126][T19803]        bdev_disk_changed+0x817/0x1770
[ 1371.105681][T19803]        blkdev_get_whole+0x380/0x510
[ 1371.111057][T19803]        bdev_open+0x31e/0xd30
[ 1371.115816][T19803]        blkdev_open+0x470/0x610
[ 1371.120753][T19803]        do_dentry_open+0x822/0x13a0
[ 1371.126045][T19803]        vfs_open+0x3b/0x340
[ 1371.130626][T19803]        path_openat+0x2e08/0x3860
[ 1371.135732][T19803]        do_file_open+0x23e/0x4a0
[ 1371.140748][T19803]        do_sys_openat2+0x113/0x200
[ 1371.145939][T19803]        __x64_sys_openat+0x138/0x170
[ 1371.151308][T19803]        do_syscall_64+0x174/0x580
[ 1371.156411][T19803]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.162814][T19803] 
[ 1371.162814][T19803] -> #1 (set->srcu){.+.+}-{0:0}:
[ 1371.169934][T19803]        __synchronize_srcu+0xca/0x300
[ 1371.175399][T19803]        elevator_switch+0x1e8/0x7a0
[ 1371.180681][T19803]        elevator_change+0x2cc/0x450
[ 1371.185953][T19803]        elevator_set_default+0x36c/0x430
[ 1371.191705][T19803]        blk_register_queue+0x3e9/0x4e0
[ 1371.197241][T19803]        __add_disk+0x677/0xd50
[ 1371.202084][T19803]        add_disk_fwnode+0xfb/0x480
[ 1371.207279][T19803]        nbd_dev_add+0x72c/0xb50
[ 1371.212211][T19803]        nbd_init+0x168/0x1f0
[ 1371.216881][T19803]        do_one_initcall+0x250/0x870
[ 1371.222155][T19803]        do_initcall_level+0x104/0x190
[ 1371.227602][T19803]        do_initcalls+0x59/0xa0
[ 1371.232443][T19803]        kernel_init_freeable+0x2a6/0x3e0
[ 1371.238150][T19803]        kernel_init+0x1d/0x1d0
[ 1371.242996][T19803]        ret_from_fork+0x514/0xb70
[ 1371.248095][T19803]        ret_from_fork_asm+0x1a/0x30
[ 1371.253372][T19803] 
[ 1371.253372][T19803] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 1371.261180][T19803]        __lock_acquire+0x15a5/0x2cf0
[ 1371.266545][T19803]        lock_acquire+0x106/0x350
[ 1371.271559][T19803]        __mutex_lock+0x1a3/0x1550
[ 1371.276661][T19803]        elevator_change+0x1b3/0x450
[ 1371.281940][T19803]        elevator_set_none+0xb5/0x140
[ 1371.287299][T19803]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1371.293621][T19803]        nbd_start_device+0x17f/0xb10
[ 1371.298987][T19803]        nbd_genl_connect+0x165b/0x1cf0
[ 1371.304529][T19803]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1371.310595][T19803]        genl_rcv_msg+0x61c/0x7a0
[ 1371.315610][T19803]        netlink_rcv_skb+0x232/0x4b0
[ 1371.320885][T19803]        genl_rcv+0x28/0x40
[ 1371.325380][T19803]        netlink_unicast+0x75c/0x8e0
[ 1371.330650][T19803]        netlink_sendmsg+0x813/0xb40
[ 1371.335926][T19803]        ____sys_sendmsg+0x972/0x9f0
[ 1371.341202][T19803]        ___sys_sendmsg+0x2a5/0x360
[ 1371.346391][T19803]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1371.351845][T19803]        do_syscall_64+0x174/0x580
[ 1371.356958][T19803]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.363360][T19803] 
[ 1371.363360][T19803] other info that might help us debug this:
[ 1371.363360][T19803] 
[ 1371.373571][T19803] Chain exists of:
[ 1371.373571][T19803]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56
[ 1371.373571][T19803] 
[ 1371.387303][T19803]  Possible unsafe locking scenario:
[ 1371.387303][T19803] 
[ 1371.394740][T19803]        CPU0                    CPU1
[ 1371.400090][T19803]        ----                    ----
[ 1371.405439][T19803]   lock(&q->q_usage_counter(io)#56);
[ 1371.410811][T19803]                                lock(fs_reclaim);
[ 1371.417306][T19803]                                lock(&q->q_usage_counter(io)#56);
[ 1371.425195][T19803]   lock(&q->elevator_lock);
[ 1371.429776][T19803] 
[ 1371.429776][T19803]  *** DEADLOCK ***
[ 1371.429776][T19803] 
[ 1371.437907][T19803] 6 locks held by syz.4.12565/19803:
[ 1371.443178][T19803]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1371.451360][T19803]  #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1371.460318][T19803]  #2: ffff8880278889c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[ 1371.471712][T19803]  #3: ffff8880278888d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[ 1371.482673][T19803]  #4: ffff8880277389b0 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1371.493292][T19803]  #5: ffff8880277389e8 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[ 1371.504255][T19803] 
[ 1371.504255][T19803] stack backtrace:
[ 1371.510133][T19803] CPU: 0 UID: 0 PID: 19803 Comm: syz.4.12565 Not tainted syzkaller #0 PREEMPT(full) 
[ 1371.510152][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1371.510162][T19803] Call Trace:
[ 1371.510171][T19803]  <TASK>
[ 1371.510178][T19803]  dump_stack_lvl+0xe8/0x150
[ 1371.510197][T19803]  print_circular_bug+0x2e1/0x300
[ 1371.510220][T19803]  check_noncircular+0x12e/0x150
[ 1371.510241][T19803]  __lock_acquire+0x15a5/0x2cf0
[ 1371.510267][T19803]  ? elevator_change+0x1b3/0x450
[ 1371.510283][T19803]  lock_acquire+0x106/0x350
[ 1371.510299][T19803]  ? elevator_change+0x1b3/0x450
[ 1371.510321][T19803]  __mutex_lock+0x1a3/0x1550
[ 1371.510339][T19803]  ? elevator_change+0x1b3/0x450
[ 1371.510357][T19803]  ? rcu_is_watching+0x15/0xb0
[ 1371.510377][T19803]  ? work_grab_pending+0x3d1/0x990
[ 1371.510394][T19803]  ? elevator_change+0x1b3/0x450
[ 1371.510412][T19803]  ? __pfx___mutex_lock+0x10/0x10
[ 1371.510428][T19803]  ? enable_work+0x17f/0x230
[ 1371.510445][T19803]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1371.510464][T19803]  ? __cancel_work_sync+0xf7/0x110
[ 1371.510482][T19803]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1371.510503][T19803]  elevator_change+0x1b3/0x450
[ 1371.510529][T19803]  elevator_set_none+0xb5/0x140
[ 1371.510547][T19803]  ? __pfx_elevator_set_none+0x10/0x10
[ 1371.510567][T19803]  ? xa_load+0x1db/0x210
[ 1371.510586][T19803]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1371.510613][T19803]  ? kernfs_add_one+0x477/0x5c0
[ 1371.510634][T19803]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1371.510659][T19803]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 1371.510679][T19803]  nbd_start_device+0x17f/0xb10
[ 1371.510703][T19803]  ? device_create_file+0xf4/0x1b0
[ 1371.510727][T19803]  nbd_genl_connect+0x165b/0x1cf0
[ 1371.510748][T19803]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1371.510770][T19803]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1371.510793][T19803]  ? rcu_is_watching+0x15/0xb0
[ 1371.510811][T19803]  ? trace_kmalloc+0x2a/0xf0
[ 1371.510833][T19803]  ? __nla_parse+0x40/0x60
[ 1371.510852][T19803]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1371.510876][T19803]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1371.510901][T19803]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1371.510925][T19803]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1371.510951][T19803]  ? __lock_acquire+0x6b5/0x2cf0
[ 1371.510971][T19803]  genl_rcv_msg+0x61c/0x7a0
[ 1371.510994][T19803]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1371.511015][T19803]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1371.511042][T19803]  netlink_rcv_skb+0x232/0x4b0
[ 1371.511060][T19803]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1371.511080][T19803]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1371.511103][T19803]  ? down_read+0x270/0x2e0
[ 1371.511120][T19803]  ? genl_rcv+0xd/0x40
[ 1371.511140][T19803]  genl_rcv+0x28/0x40
[ 1371.511159][T19803]  netlink_unicast+0x75c/0x8e0
[ 1371.511179][T19803]  netlink_sendmsg+0x813/0xb40
[ 1371.511199][T19803]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1371.511218][T19803]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1371.511242][T19803]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1371.511263][T19803]  ____sys_sendmsg+0x972/0x9f0
[ 1371.511281][T19803]  ? __might_fault+0xaf/0x130
[ 1371.511302][T19803]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1371.511323][T19803]  ? import_iovec+0x73/0xa0
[ 1371.511342][T19803]  ___sys_sendmsg+0x2a5/0x360
[ 1371.511359][T19803]  ? __lock_acquire+0x6b5/0x2cf0
[ 1371.511376][T19803]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1371.511395][T19803]  ? futex_wait+0x2a2/0x390
[ 1371.511425][T19803]  ? __fget_files+0x2a/0x420
[ 1371.511443][T19803]  ? __fget_files+0x3a0/0x420
[ 1371.511465][T19803]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1371.511483][T19803]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1371.511504][T19803]  ? rcu_is_watching+0x15/0xb0
[ 1371.511530][T19803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.511546][T19803]  do_syscall_64+0x174/0x580
[ 1371.511562][T19803]  ? trace_irq_disable+0x3b/0x140
[ 1371.511585][T19803]  ? clear_bhb_loop+0x40/0x90
[ 1371.511601][T19803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.511617][T19803] RIP: 0033:0x7f994579ce59
[ 1371.511632][T19803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1371.511646][T19803] RSP: 002b:00007f994669b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1371.511662][T19803] RAX: ffffffffffffffda RBX: 00007f9945a15fa0 RCX: 00007f994579ce59
[ 1371.511674][T19803] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006
[ 1371.511684][T19803] RBP: 00007f9945832d6f R08: 0000000000000000 R09: 0000000000000000
[ 1371.511694][T19803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1371.511704][T19803] R13: 00007f9945a16038 R14: 00007f9945a15fa0 R15: 00007ffe9c2775c8
[ 1371.511722][T19803]  </TASK>
[ 1372.033281][T19810] netlink: 'syz.2.12568': attribute type 29 has an invalid length.
[ 1372.061513][T19782] lo speed is unknown, defaulting to 1000
[ 1372.127321][ T4952] block nbd7: Receive control failed (result -32)
[ 1372.133934][T30922] block nbd7: Receive control failed (result -32)